last executing test programs: 5.678883187s ago: executing program 0 (id=1520): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f000000ac80)={{r0}, "54444884a2047c248eaa7cc7f4fb7a6bc5489293bcb7824199367077a64a360aa8dcfc9f9d6179790f8c3d610fc4f3b125c389f43581c0be3e250795b4eef98a38a1ed0ce0937678eacb5f1bb620049a00272930f756e37d7bfb8ab35d3a14c9ef58942d8cc6a905157f2a6079b9deeb6072acefc04ff67aee9d34cd900f364b9849441066e65d86be74761a4e1211ddc0a00c6877196fcf9a1a2e8d155892e2fe23b2ebf3214d506647b320db977169ea77bf1ae8e2c4b2e8b3046e32f33cf979ed948e381e630404000b5f5a1ef48a8aad8efa4da45619053be3dfdcf71a9161efc4ae50c41f51f4a97990724e71bc3516a0c2793d1a2ac5a6fb512662f8ec7b30d41847623ba929897f7f4edaac47bf5b817758f58357045b9ee3a91abac74eb3aa1ce8cad7853d637f07db77855c85bd78cdd084418793dc65c833f52fc91bfb834d81bb8a7eb8261e5f504af70e59cca57fce051b2b7f90f856b1571e6c79631fda2b580c697d46bb8c21520fe568545d6687727b7aa377335a260d8ed0b5137d94f4af4dc7c5e7334b82218bf3ba8a1d56548cb5a53a176d78d2968496e78c4ab94f7fa10388325f3dd6ce6c37e4e1dc2431e2bc67112e0e33ce56a4e1b5825adea6f1b0867c7abda72bc91fe4b5af736984e7e76bf3179382dea9b38e06eeba743170a088ea6d15c7ff3e8f262561fb9feb0469c951200419aea8cf572c608e86a7cd6efe9722ee7fb64ce7fe1dd52cbdef76b916d1fa7fd50a56d27ebd355f6de110837a2b5b0da9b520cce00fcd6bdbbb1950cb4b4d2c150563199757dc1cc905205bfdaa6d781f76f095c0ec516e48ca267fcad19b12949f20cc4b53a25047834a29a9d6fc58ed522cc3e4b40bf7dc91ae9aa5a0edbe62d6575db8c264f3fbc800eb8a07e0d9431f19bfb3933e08b216b46e8ceccc7ce8397cacc495a897fee9cb04a0719a332399d63084be10bc421032fd1cff12e5bc78eb985b90780e68ebdbe8d1e73b8e88ecac42055461721a2e9d6c9e23b1474db76115b72df9c0d94fe26ea6e06a31e295ef87732f1356328da13f3aa218fa2b1f92208e49d84ceec13855d0110540dfb01f11bacfeb7b77686b7f56b29b902073f24561ebb16365dc527bbe17dd59daf4ffe15d2c4b30ac11372988b60e3be9a0d0b22ed0d37cbba0db6b4474c5de9e64771f4eadf89f96071f4b20a3a6be9f826edd10f1c16ab6aa06d0a853501b616e4b678ca7d41aa93d06a12e0574e001080cf311985f28dfa66934d7091ff599da5cb4e2763b31c48009887f676da80c394ee2dbae168c8a6ea13227b30b2ccd33308a05903a27650305f784316af0e57bb842aae8ddebe89a1c9c7a63bb9f060e87d101afeedf96db66558b491b96b4967a7cf718d1f666ca7b65318557fcca6f4355cf424b4f15660588a8bd4de3037819866e0079cca5b22ea4c86c0156d1fa8cca056f25fc7ed17da066fe20380f365501c73d29ca216919f2fcd16f43bcea93d6fb115f1be84cc4bd6ed5ab5f3884a78ee84be6c0611cb1c013f5cbd53a2830f6d78fcb7368c009a4bd6579de8c4734ce4baf3c7e4663751ee242922675ec696dfae61d7f592d631ca2a3d32625b741ca24c20642fbb9c081cd89121d9621d4ed02df033be3f9f7357f243535fafdf3f30bbf920537e5db0633ece08c1ffdcf0fcf2c1c5e56b0ee6b04c3c69fcbed007cdea7e182aab02caecd81895843113e9df7b5dfb97c9635c13c68211e765e6c3f9366a3eaa896c7f15d6c225fb5ce562d0f3520840c1b380851fd024035461c07ea78d94939e06ba6f942f1707cdaa99e447fbdbbddd8af4ba4db52becebd92e75a7e7e8ee859b94f88a28ca824bc785a5529af44f8bfd5b715ad19bdfa1eff4a04f4d1396acbba6a9dd9078df4280b1bbdfba1184d025cec632cf0f7f5cd49be3fafdcba34a015dab6c2a6588fac58ee9e372ab4e6b2e2ccd07ed3b29a6732cb59ac49825baba821337ffdad1b25999ef670f2b25333e34937dbc5fcbe66d303bdd65bbedbbe653ca94503d399721c42a1035e280c5730fcaadaab800e8edadf009196d3085c8196be55de270e17548c24b3c18abfb1525bb342618a605004503557debf60e6cb0cca5c5dbbf8d2124eb5cf98676ab21e4659ca142f9904b131dc26c1aaf2ad4d60bb5c29cf7366d12198249f3f4c3ed7efd76333d6ec351d5386226ba556f97429ae607b58cd558e9497495d14694eaf4598a338413e9f386f732620160e7424063d6da9e32d3e73cf8d4f44e69f70536328ebbc0b060eae7a1c37c847ca7ca724586582c2f181974f2e64ac5a8cb2417cd8d6fab68fe5ad202cc8014c1d00a4de9e40c1909d2d3e2ddcb8c732cf1f6917f7dfdf3532c2b381eadc3053cf05f3f73e03b1ff25ef5cab928949c47fe56323a123238f1acd4068f1de81a48b8276123f3c00206c78fbd4c51e10ef006c79233a917b04df50e1794f2af5bd4380321fe5c55ff8ac353d072f3892c1b9571b4b31009158b8ebc51d0d48d4cf4c46b851323957342c6814815df984185be019522382fcf5bd73e3b0c979a74aef79eda57160bb77e72ad2150965dbe73c8bbbb191cf7ef1b6399522fa3b3306ab30400db1bb03ee1094cc48a594aa2d31477c76043fadde2a49455e4767987ec70a164ca6195b39e5afacf3fad9f3a51f79c74b00ab2350808369f2cdadf294b44501c91e657f1f72083f0249db0cf90bf2b7ba8cb7fdbcae9d774222aef232fe8a8a07f1ff6cd45d3ede717d8cf57e552bf156232ffaa7cd6eae9b5b6f437e6494bf1ae5487bb33c73bbdf9f1c9268576e4e469013ef9a889e4454800fa16b9ba88eaca3373f962978efd7ea41dd49f027c969fbaac21e5e8038fadd8bf76d801f93c59034d42acad52e67216c70e0277d43632bdeb965c207471412f4cc8d74dc77d7a701a90a0c120007638b0366fb41d5a0e7d3eb1cc7ec7a076ce7253cce0798860dee8b76c3c9874bf192a39eb8c97699d7c6ea9cf3c1c6a96f663f9ddb7fa838d32e0f2045fc6bdd83e7a6e5bd9ffaeeb0d9f0486e03023315657f499f93a376ac7b03f0a60e18013b2ac25be3638a9a6d56a6bebeab77b3296af21b6e30f9f527359a2bfa226d0591669591a251edb2f2ad0a72e20cb9fba945d3c0fafc504abba6f2eb2864bddc0008c9cf31a61097f0e0fe0b98e994e7a7a169b068fb4cec8752a38dc7c6cc200d4841708b04c0868c826c7259ddfad9b41b95ac4ee41e086dacaae70dbb2ccb83274f7753e44235e8b4c4eff70b3d2045a211fc629d8f83a02cfe26ddbedb0d3222e4ccf9ed00b1692205885aed8c4f31594947e72e60ba6647cb985104f3aa40fea9de93e952ca869f47436289e69593c662f0e5711ba9d22efa1704074224a2f37f9a7df4d1cbbacf23cc9428ac34562a31965faa446b4f6b50d77340180c99f14dbcd55a4535462a6cba293c31123c6f316d8c23703c557045b6538bf31d47d3972363eaa6fe35d514c5744080b46d29e55c9cb99e94cb4ee6f0218f00b3d59cebf23ac24850f6def6726f92568b8af39c7e15336f2ffc70ff7013d8ecdec3b49b74a220b6d9a3850e512a3f08eecfff7a40fa150bb185f856cab0384f7765aa99ebd8403a413867537756bb57873ac7a5b40c12fe277d64670062b3eadd3cd80a686ab1e420968fc786c521135c1cd38e8075879aa3e8a9b92f0049c576910fa2396eb1985b6428652a1989fed135386c2afe27aee3fe5aca111890f0070104a68a6d28d446878c94bd1e4c1b54186e80f377f5cb78cd63da30de952f10c05a912cd8344b2c3f3a8717c4ed4784f3be2e1bc46de05224d1a13083b18823a5df0de93602bc4802400d387819346284867072a30b23792d45f559c2df1e039b130fa2fb96a74e6dbb9655f324c2161955e68b86dd39f5cbf9cf9d80879491b64c4e80e1a0cddd86a32ebe1b8b8b1548b5d009a59c15dd0e3eb009739745995564911d91e8c7fd5f906b39d76933f8bd396a94e8288bf6e72a527cdb1498578f0497d75a1daaef087b6fffeaf79b927ea5887364b69e6b723a1d8e4c914220a55e441984360d2626551b130cfb237a9227bcf11d8cb905080f1072e6455581f884afbf0e405d9697c349c21c55b136aa12000927fcac747386b3727bfa594e77fd3b7ae177a6359bd2ec351e6be5616909a1785a38eeb1730ad3d91cb89888839c9dc205173767f26b1504b96a461ce907d0f25a51ab8f77fd58113fba3dd6560320ee6775d7de4951118a826e14752ecdaa6e4c4002f6babe9309950c305b086711bbe5cb13801f38b4f8dab299d001e7b9dba352dc224ecb5a814a0fa8d2e9dfd934f44b9b4bb223042449f44cb2c33ac02dd6307c934b46808dc8d81d0895a92ba457317982d5de9cc20f329f224a2c82ac0aca4ca76007ec82d7d7d55f471a1a2b931a8f42f0808c47ce558011201f9e3f2f90e7931f7c20cb4b5c7288242c12943258cef26c5c86662d3dcd8f499e38bbd20d68dafafec4ac750633ed0eb57b6abb0b1d42043a0c78948f577622057db1027c1b8fde5502ed7fe3e177700b431029f29453dad835ec631a89cdc0f0c69be9b3fa36c1bc7c2d94aa7248208f913d1b2e98331c0bbb765e5b0f5545d7f798e332eea4422481f020b17fd5cfbffa82a2986c413142d658f7dd9124193683d629c61e3751c16837a962d53fb00ed0f0dd609bdf635b03d29b7e722c585a527d4017c5c890a87cc60468f8e8c6d2ddbcc47e7eea4fe29b74b18bee375e7b34b2829026457ba47c1d49a3c4556f99ac644dd7a7d24a8ec6080e63ed1d141723c0c8a9f89e81a18affdf13eed576b13d3027f78e47238ab6f7357f5430c28ec0fbbdbd4eb61cbfd9627ac6955c94e07593d87cfd70566afeafa31199b1939728df215a778f7c21c8590ad7b0fcd5661f02e70fa341e5fa680fe8a25e739e2cfc609ce3f89d62ea4a1b31b89c81526fafd5db464a91fa0b7e988346e11c5b2099b93ac7a30bb9cf7e3771b8a987538051d8108a688a772e599f5b0512e8de713854bb9149df4c041bf2108f6515c1b7f888ed612e11a267c522a2f07ebe4681012a4289f012ddbb6d438dd855c92f7948b9f217f50f1aa233fe3518dd26b570412afcc77539a9e2eb3181e2e6f79e6f37197e9510467d309d56cfe374c53c287550b72afaf59da5101018b635d7fdee4c180c63f4aac185c5d4f42bc6b21036de1460a48ada8da4177ed05288ead9ee33182c363f2495b981e9941ae8e089168c7f5d24235d7843edd6867870e0cbaec2bcf9b19c6810086997ae8be8d01c74a54f93cfa3c2be05c5b36b5a2b829fb1c12eb96bd664fae9517859fe47e51f8b2b81e344214590bfb7f49fb733f0d1d68b55c5570aa845c64812c6c82fcb8dd03254552b1a46df791bd8833d7c83f4228162474fe424b882f17e0c995d26058752e23ce898efcd1e945acd14389e4ed8be1d59dabd0c1e9832cb9e9d2e9aa026112cece0bb37339b9353b0b4eeace5aff2e4c26808a67b7f3be30e1207002d224661e09dcc6207e66846b8a52225d30d1952b1520a5d50a178ab8f8ae38d314f6b8c2fd12c85533e4cca3cec148c85eef2a392df8edabc2819c90abf8ae6650da0b5a8527bbbc911d6ca8c586f587a367bd95605f76eec3e4bfb39749685f8ef6e8a65f1501e099a0848ab9d615e8259a4cd462117c64d74fdfb32c08aed1160ac7eec0721f323d34bcc3fef5bdcc5941e03fee0b478af"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002640)={{0x0, 0x10000, 0xf, 0x3ff, 0x4, 0x9, 0x7fffffff, 0x4, 0x163, 0x1, 0x3, 0x586248de, 0x8, 0x5, 0x8}}) 4.857048857s ago: executing program 0 (id=1523): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2401}) 3.566186787s ago: executing program 0 (id=1537): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.616641323s ago: executing program 1 (id=1560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000400000000010000000000000009410000000900180000000062"], 0x68}}, 0x0) 1.451226027s ago: executing program 1 (id=1564): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b800000002001000002efe9421000006040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000d0000000000000000000000000000000000000000000000000000000000000000000000000000000003000004000000000000000000000000000000000000010000000000000000000000000001"], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 1.364383245s ago: executing program 2 (id=1565): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000002480)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 1.316778608s ago: executing program 1 (id=1566): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') sendfile(r0, r1, 0x0, 0x7ffff000) 1.313436948s ago: executing program 2 (id=1567): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000280)={[{}, {@discard}, {@discard}, {@order_strict}, {@nobarrier}, {@order_relaxed}, {@order_strict}, {}, {@order_strict}, {}], [], 0x2c}, 0x1, 0xebd, &(0x7f0000004540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0186e86, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) 1.240303365s ago: executing program 1 (id=1568): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde1, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 1.239873545s ago: executing program 4 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.116297336s ago: executing program 3 (id=1571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002002000000004000100080005"], 0x4c}}, 0x0) 1.115620626s ago: executing program 4 (id=1572): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000740)=ANY=[@ANYBLOB="004194945be222fbc28c5e9c7fda61d2e2f93f70f58d1b514d971f47a25c12f5d9d5b4491c91d1e4bee7e44fb21726d572b06c4e31355405d86573a5766019fcafec6894ba751183829f4cf4477e2ede07c6daa44459312c6746e7c3ba84012140a5133ed28047141a3110281571bf78d953f51392704a7ffa66f788dca2a3871a728dbc52a03e36af963d1bb4b9af18b13416bc58dcb29cb06bbff809e2270adec566b982cfed52a295ec507621b63d7f698e1835280c0ee1ff95852c3ab8a3"], 0x2, 0x580, &(0x7f0000000180)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwmJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhSLnJNzv5Joojc3yZ38ftDec8957nvec6CF5/0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDiq6/eHL2SDroWAAAAQD99/fbro2PyfwAAAPhIu6P/HwAAAAAAAAAGXYosvh8p1k6tp5PF9w3VWwuLb63NTE5t/7ORVPzyWBGf/6leGbt67aXx619ofv733++1C/Ha7Ts3668sPXy0PL+yMj9Xn1lcuLc0N7/rEnr9/WYvFi+g/vDNt+bu31+pj12+2nV5rfaX48+cq0188dWzt5qxM5NTU7c7YoYq//fdtzDCAwAA4GgbjiyuRYo7F3+aTkVEFr3nwju0HfTbSNTy/Lt4iJnJqeJBGguzi6v5xelmIlzrzomHmznyPuTiPalFnM7rOiyjBwAAYPcqkcWnIsWFp+vp2Yg41syDP1csDLhzAbV9qOQ2hiLiTERcigHI2QEAAOCAHY8sXo8Uv2rU4rkyry7y/69ETBx05QAAAIA9MRRZXI8UH0ysp1oxHiAiXpyZnKrfulv/2uL9pY7Y6VT2qA/6/ID9ZGwCAAAAh0A1sjhV9Pivp+cPujIAAABAX4xEFv+IFJ99+dvFunJRrEv/3MSXTt6Y6lxh7vwO5eSxlyPi4i7n5FfKtQan03RK2ZbSnuzJwwEAAACFasriz5Hiwz9Wi++Xytw8DR10zQAAAIA9k7L4XqT48vR6Spv2pT/Wsb9/y6DP/e9v/Ueqryw9ery88OCN1W2vn6je/NbK6vLsve0vb+xd2DUcYqd9DAEAAGAXKimLv0eK3zbea+Wd5R4A5QiAdqL57o12blpNm64W7QbPFu0GrTkEz4yNdR5vm7L+D+vj1cr7Huv9sQEAAOBISSmL4Ujxmd98vNz7/0Rs6YMu434XKW4svVDGZcN5XHOaQK34u3p/oTE/msdORoqfN5qxUcQeL2PPtGOv5LG/zsud7Y6tlrFn27FjeezTSPHG8vaxH2vHXs1jlyPFT35Ub8aeyGNPlrHn2rGX7y015vr2ggEAAOAQqKQsfhEpfvjPemvKf3f/f7u3/d132v39Wxbo+w99/r32/9c6zj0p2yGOl+0VQzu0V7wWKS48/0LzeYq2guawgo29DtrtFX+LFMvf6I4dLmNPt2Ov7PrFAgAAwCHSHP//+7u/bA25L3Pg8uv2+f8nNq8P2Kf8v3NPwvyeK4/ffnO20ZhfHqSD70ZE15l0SCrm4OgelP+onhyW+vR60Nv/gwAAcBTk+f/dSLH2wfut/u4y/y+Hyrfz/w+/087/JzYX1Kf8/3THuYlyvYHKUER19eGjyvmI6srjtz+/8HD2wfyD+cWr4y+Nj46PX782Vhludu63j3p+VwAAADCo8vx/NFL89Qc/bs3P303//4nNBfUp/z/TcS6/Z7vTLz/zp14fHwAAAI6EPP//WaT4w8X3Wuvodef/Hev/v9OeZ3/p0xujBVqtA33K/892nKsV940Y2aNnBwAAAAAAAAAAAAAAAAAAgMOikrL4V6R4vzqUygX/d7X+39zmgvo0//9cx7m52J/9/3p+qQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgsshiIVJ88vx6ejk/8c2Ik52fAAAAwMD7dwAAAP//GBMbFQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) unlink(&(0x7f0000000100)='./file1\x00') 1.028723043s ago: executing program 0 (id=1573): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xa, 0x4d032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) 911.638573ms ago: executing program 0 (id=1574): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000002140)=""/4036, 0xfc4}, {&(0x7f0000000b00)=""/241, 0xf1}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f0000000cc0)=""/59, 0x3b}], 0x8}, 0x10020) 849.187748ms ago: executing program 2 (id=1575): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) 681.405833ms ago: executing program 2 (id=1576): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0x3, 0x3, 0x5) 629.870416ms ago: executing program 3 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4ff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 559.524883ms ago: executing program 0 (id=1578): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010400, &(0x7f00000002c0)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x10}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x0) unlink(&(0x7f00000001c0)='./file2\x00') 558.343593ms ago: executing program 1 (id=1579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 492.221139ms ago: executing program 4 (id=1580): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) 481.18762ms ago: executing program 2 (id=1581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 427.582064ms ago: executing program 3 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x44}}, 0x0) 320.706943ms ago: executing program 1 (id=1583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000740)={0xc1, 0x0, 0x3}) 320.448153ms ago: executing program 4 (id=1584): unshare(0x20000400) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fsmount(r0, 0x0, 0x80) 259.288878ms ago: executing program 3 (id=1585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000000700210061610000050092000000000034002280040000801c"], 0x58}}, 0x0) 229.735031ms ago: executing program 4 (id=1586): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$sock_proto_private(r0, 0x89eb, 0x0) 210.044862ms ago: executing program 2 (id=1587): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 140.690009ms ago: executing program 4 (id=1588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x8}, 0x80) shutdown(r0, 0x1) 75.431844ms ago: executing program 3 (id=1589): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x3c}}, 0x0) 0s ago: executing program 3 (id=1590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x6, r0}, 0x38) kernel console output (not intermixed with test programs): , device number 13 [ 149.880662][ T6263] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.950678][ T3637] Bluetooth: hci1: command tx timeout [ 149.977660][ T6263] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 150.005816][ T6263] REISERFS (device loop3): using ordered data mode [ 150.015842][ T6263] reiserfs: using flush barriers [ 150.040473][ T6263] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 8388382, max trans age 30 [ 150.096480][ T6263] REISERFS (device loop3): checking transaction log (loop3) [ 150.123304][ T6263] REISERFS (device loop3): Using r5 hash to sort names [ 150.273064][ T6267] loop2: detected capacity change from 0 to 40427 [ 150.318077][ T6267] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 150.329667][ T6267] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.355323][ T6267] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.455881][ T6275] loop3: detected capacity change from 0 to 64 [ 150.481302][ T6267] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.488464][ T6267] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.132396][ T4983] bond0 (unregistering): Released all slaves [ 151.265136][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.276767][ T6300] loop2: detected capacity change from 0 to 4096 [ 151.281883][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.307158][ T6301] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.332938][ T27] audit: type=1800 audit(1728575751.769:7): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.917" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 151.368054][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.430075][ T6288] netlink: 64 bytes leftover after parsing attributes in process `syz.4.912'. [ 151.451376][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'. [ 151.471246][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.528055][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.577431][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.654938][ T6164] device hsr_slave_0 entered promiscuous mode [ 151.682455][ T6164] device hsr_slave_1 entered promiscuous mode [ 151.700820][ T6164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.710752][ T6164] Cannot create hsr debugfs directory [ 151.912515][ T6296] loop3: detected capacity change from 0 to 32768 [ 152.030650][ T3637] Bluetooth: hci1: command tx timeout [ 152.424740][ T6316] loop2: detected capacity change from 0 to 4096 [ 152.470377][ T6305] loop1: detected capacity change from 0 to 32768 [ 152.524137][ T6305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.919 (6305) [ 152.605807][ T6305] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.616441][ T6316] ntfs: volume version 3.1. [ 152.632447][ T6305] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 152.691394][ T6305] BTRFS info (device loop1): setting nodatacow, compression disabled [ 152.704211][ T6305] BTRFS info (device loop1): enabling auto defrag [ 152.720974][ T6305] BTRFS info (device loop1): max_inline at 0 [ 152.726990][ T6305] BTRFS info (device loop1): using free space tree [ 153.145661][ T6313] loop4: detected capacity change from 0 to 40427 [ 153.188916][ T6313] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 153.217130][ T6313] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.242140][ T6313] F2FS-fs (loop4): invalid crc value [ 153.246428][ T6344] loop2: detected capacity change from 0 to 4096 [ 153.271537][ T6344] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 153.305719][ T6313] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.327251][ T6164] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.329687][ T3636] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.351652][ T6164] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.373732][ T6164] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.396240][ T6164] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.446161][ T6313] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.482580][ T6344] ntfs: volume version 3.1. [ 153.487166][ T6313] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.606258][ T27] audit: type=1800 audit(1728575754.059:8): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.922" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 153.706437][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.779421][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.798492][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.823106][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.848959][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.887032][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.911234][ T4983] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.918362][ T4983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.979099][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.004627][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.043126][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.072752][ T4983] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.079877][ T4983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.110633][ T3637] Bluetooth: hci1: command tx timeout [ 154.128259][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.153358][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.193180][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.218517][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.281949][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.315738][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.362407][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.381102][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.422108][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.470845][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.486792][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.519744][ T6352] loop3: detected capacity change from 0 to 32768 [ 154.529875][ T6164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.607801][ T6352] XFS (loop3): Mounting V5 Filesystem [ 154.655005][ T27] audit: type=1400 audit(1728575755.099:9): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE6161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 154.774010][ T6352] XFS (loop3): Ending clean mount [ 154.839264][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 154.896478][ T6405] loop1: detected capacity change from 0 to 256 [ 154.945291][ T6405] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 155.040200][ T6352] XFS (loop3): Quotacheck needed: Please wait. [ 155.070933][ T4017] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.120910][ T6352] XFS (loop3): Quotacheck: Done. [ 155.191154][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.198635][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.228843][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.299776][ T3650] XFS (loop3): Unmounting Filesystem [ 155.306989][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.319993][ T4017] usb 5-1: Using ep0 maxpacket: 32 [ 155.336865][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.438088][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.443225][ T6421] loop2: detected capacity change from 0 to 512 [ 155.447787][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.460056][ T4017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.474152][ T6421] EXT4-fs: Ignoring removed nobh option [ 155.474248][ T6164] device veth0_vlan entered promiscuous mode [ 155.491028][ T4017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.511098][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.519061][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.530015][ T4017] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 155.554632][ T6164] device veth1_vlan entered promiscuous mode [ 155.568049][ T6421] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.572290][ T4017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.606174][ T4017] usb 5-1: config 0 descriptor?? [ 155.657917][ T6421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.674166][ T6421] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038 (0x7fffffff) [ 155.746903][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.785806][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.807274][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.822886][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.864898][ T6421] EXT4-fs: Ignoring removed orlov option [ 155.865195][ T6164] device veth0_macvtap entered promiscuous mode [ 155.896526][ T6421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.916818][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.938773][ T6164] device veth1_macvtap entered promiscuous mode [ 155.973035][ T6421] EXT4-fs (loop2): can't enable nombcache during remount [ 156.005094][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.043722][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.063799][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.102488][ T4017] kye 0003:0458:4018.001E: item fetching failed at offset 0/2 [ 156.114760][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.125832][ T4017] kye 0003:0458:4018.001E: parse failed [ 156.140609][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.156586][ T4017] kye: probe of 0003:0458:4018.001E failed with error -22 [ 156.160561][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.180590][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.200726][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.268087][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.292808][ T6445] loop1: detected capacity change from 0 to 4096 [ 156.300021][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 156.302267][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.322450][ T4017] usb 5-1: USB disconnect, device number 14 [ 156.350289][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.375860][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.406895][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.429403][ T6445] ntfs3: loop1: failed to convert "0080" to cp863 [ 156.445796][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.465812][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.478604][ T6445] ntfs3: loop1: failed to convert name for inode 1e. [ 156.496092][ T6164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.527060][ T6164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.557912][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.570422][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.610195][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.639496][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.666719][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.694099][ T6164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.718650][ T6164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.747741][ T6164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.787419][ T6164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.945725][ T4974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.986122][ T4974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.034800][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.056841][ T4974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.104166][ T4974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.156559][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.809366][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 157.812792][ T6468] loop3: detected capacity change from 0 to 32768 [ 157.875239][ T6498] loop0: detected capacity change from 0 to 512 [ 157.895828][ T6462] loop2: detected capacity change from 0 to 32768 [ 157.917284][ T6498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.975518][ T6462] XFS: ikeep mount option is deprecated. [ 157.996220][ T6468] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 158.011785][ T6498] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 158.091305][ T6498] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.115511][ T6498] EXT4-fs (loop0): 1 truncate cleaned up [ 158.122811][ T6462] XFS (loop2): Mounting V5 Filesystem [ 158.125259][ T6498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.209448][ T3650] ocfs2: Unmounting device (7,3) on (node local) [ 158.249768][ T6462] XFS (loop2): Ending clean mount [ 158.291346][ T6462] XFS (loop2): Quotacheck needed: Please wait. [ 158.379267][ T6164] EXT4-fs (loop0): unmounting filesystem. [ 158.385248][ T6462] XFS (loop2): Quotacheck: Done. [ 158.500816][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 158.587832][ T3647] XFS (loop2): Unmounting Filesystem [ 158.725826][ T6529] loop0: detected capacity change from 0 to 4096 [ 158.750868][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 158.858142][ T6529] ntfs: volume version 3.1. [ 158.870866][ T22] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 158.879357][ T22] usb 2-1: config 0 has no interface number 0 [ 158.886049][ T22] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.897750][ T22] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.090900][ T22] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 159.122451][ T22] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 159.140561][ T22] usb 2-1: Product: syz [ 159.153612][ T22] usb 2-1: SerialNumber: syz [ 159.187305][ T22] usb 2-1: config 0 descriptor?? [ 159.228533][ T6525] loop4: detected capacity change from 0 to 32768 [ 159.242574][ T22] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 159.253483][ T6525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.972 (6525) [ 159.267181][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input15 [ 159.343394][ T6525] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.363838][ T6525] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 159.392712][ T6525] BTRFS info (device loop4): using free space tree [ 159.479585][ T22] usb 2-1: USB disconnect, device number 11 [ 159.490915][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.498174][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 159.527849][ T22] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 159.594544][ T6535] loop3: detected capacity change from 0 to 32768 [ 159.622513][ T6525] BTRFS info (device loop4): enabling ssd optimizations [ 159.659913][ T6535] XFS (loop3): Mounting V5 Filesystem [ 159.751311][ T3644] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.862770][ T6535] XFS (loop3): Ending clean mount [ 159.918345][ T6535] XFS (loop3): Quotacheck needed: Please wait. [ 159.955352][ T6535] XFS (loop3): Quotacheck: Done. [ 160.000687][ T3688] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.048817][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 160.174973][ T3650] XFS (loop3): Unmounting Filesystem [ 160.240632][ T3688] usb 1-1: Using ep0 maxpacket: 32 [ 160.351300][ T6589] loop1: detected capacity change from 0 to 512 [ 160.388503][ T6589] EXT4-fs: Ignoring removed nobh option [ 160.390705][ T3688] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 160.410959][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.431929][ T6589] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.440342][ T3688] usb 1-1: config 0 descriptor?? [ 160.495852][ T3688] gspca_main: sq930x-2.14.0 probing 041e:403c [ 160.534772][ T6589] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.560078][ T6589] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038 (0x7fffffff) [ 160.746095][ T6589] EXT4-fs: Ignoring removed orlov option [ 160.746371][ T6606] netlink: 44 bytes leftover after parsing attributes in process `syz.3.992'. [ 160.754837][ T6589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.802533][ T6589] EXT4-fs (loop1): can't enable nombcache during remount [ 160.815208][ T6608] loop2: detected capacity change from 0 to 8 [ 160.858027][ T6608] SQUASHFS error: zlib decompression failed, data probably corrupt [ 160.873027][ T6608] SQUASHFS error: Failed to read block 0x13e: -5 [ 160.886175][ T6608] SQUASHFS error: Unable to read metadata cache entry [13c] [ 160.912498][ T6608] SQUASHFS error: Unable to read directory block [13c:26] [ 160.921718][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 161.060161][ T6614] loop2: detected capacity change from 0 to 2048 [ 161.071546][ T6614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.190793][ T3688] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 161.196690][ T3688] sq930x: probe of 1-1:0.0 failed with error -71 [ 161.210727][ T5072] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 161.212219][ T3688] usb 1-1: USB disconnect, device number 10 [ 161.308982][ T6624] loop2: detected capacity change from 0 to 512 [ 161.316872][ T6624] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.340755][ T3915] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.349391][ T6624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 161.362133][ T6624] System zones: 1-12 [ 161.368068][ T6624] EXT4-fs (loop2): 1 truncate cleaned up [ 161.379483][ T6624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.381756][ T6628] sp0: Synchronizing with TNC [ 161.424569][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 161.425380][ T6627] [U] [ 161.500994][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 161.580952][ T5072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.612566][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 161.617856][ T5072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.645252][ T5072] usb 4-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 161.656856][ T5072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.699750][ T5072] usb 4-1: config 0 descriptor?? [ 161.730910][ T3915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.750966][ T6639] netlink: 'syz.0.1009': attribute type 4 has an invalid length. [ 161.752070][ T3915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.758784][ T6639] netlink: 'syz.0.1009': attribute type 2 has an invalid length. [ 161.819691][ T3915] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 161.850567][ T3915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.869603][ T3915] usb 2-1: config 0 descriptor?? [ 162.097442][ T6636] loop4: detected capacity change from 0 to 32768 [ 162.212161][ T5072] hid (null): usage index exceeded [ 162.226140][ T5072] wacom 0003:056A:00BC.001F: ignoring exceeding usage max [ 162.247531][ T5072] wacom 0003:056A:00BC.001F: ignoring exceeding usage max [ 162.254975][ T5072] wacom 0003:056A:00BC.001F: usage index exceeded [ 162.261936][ T5072] wacom 0003:056A:00BC.001F: item 0 1 2 2 parsing failed [ 162.269288][ T5072] wacom 0003:056A:00BC.001F: parse failed [ 162.276910][ T5072] wacom: probe of 0003:056A:00BC.001F failed with error -22 [ 162.382595][ T3915] uclogic 0003:28BD:0074.0020: interface is invalid, ignoring [ 162.416749][ T4028] usb 4-1: USB disconnect, device number 13 [ 162.595907][ T5072] usb 2-1: USB disconnect, device number 12 [ 162.855942][ T6647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.856180][ T6647] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.856882][ T6647] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 162.856983][ T6647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.857042][ T6647] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.857150][ T6647] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 162.857231][ T6647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.857285][ T6647] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.857335][ T6647] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 162.859346][ T6647] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.859407][ T6647] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.859470][ T6647] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 162.859552][ T6647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.859606][ T6647] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.859666][ T6647] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 162.937440][ T6656] loop2: detected capacity change from 0 to 1024 [ 162.989920][ T6656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.251385][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 163.499588][ T6679] loop4: detected capacity change from 0 to 128 [ 163.568280][ T6679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.641813][ T6679] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038 (0x7fffffff) [ 163.754356][ T6673] loop1: detected capacity change from 0 to 8192 [ 163.806568][ T6673] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 163.868866][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 163.940340][ T6673] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 163.950621][ T3915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.998880][ T6673] REISERFS (device loop1): using ordered data mode [ 164.008335][ T6673] reiserfs: using flush barriers [ 164.023199][ T6673] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.070285][ T6673] REISERFS (device loop1): checking transaction log (loop1) [ 164.102874][ T6673] REISERFS (device loop1): Using r5 hash to sort names [ 164.109784][ T6673] REISERFS (device loop1): using 3.5.x disk format [ 164.133381][ T6673] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 164.185294][ T27] audit: type=1800 audit(1728575764.629:10): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1024" name="bus" dev="loop1" ino=2 res=0 errno=0 [ 164.205568][ T3637] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.320783][ T3915] usb 3-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 164.333634][ T3915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.362744][ T3915] usb 3-1: config 0 descriptor?? [ 164.387323][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 164.389379][ T6682] loop3: detected capacity change from 0 to 32768 [ 164.425238][ T6682] JBD2: Ignoring recovery information on journal [ 164.516891][ T6682] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.572810][ T6711] loop1: detected capacity change from 0 to 512 [ 164.650221][ T6711] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 164.696889][ T3650] ocfs2: Unmounting device (7,3) on (node local) [ 164.699214][ T6713] loop4: detected capacity change from 0 to 4096 [ 164.711026][ T6711] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 164.824770][ T6711] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1040: Failed to acquire dquot type 1 [ 164.841180][ T3915] mxuport 3-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 164.850014][ T6713] ntfs3: loop4: Inode r=4c is not in use! [ 164.860678][ T3915] mxuport: probe of 3-1:0.0 failed with error -5 [ 164.890834][ T6711] EXT4-fs (loop1): 1 truncate cleaned up [ 164.896510][ T6711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 164.910838][ T3637] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.916877][ T3637] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.922940][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.930146][ T3649] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.940905][ T6711] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038 (0x7fffffff) [ 165.051440][ T3915] usb 3-1: USB disconnect, device number 13 [ 165.086584][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 165.166154][ T6705] loop0: detected capacity change from 0 to 40427 [ 165.184570][ T6705] F2FS-fs (loop0): invalid crc value [ 165.239625][ T6705] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.273136][ T5072] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 165.353183][ T6705] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.440508][ T6164] syz-executor: attempt to access beyond end of device [ 165.440508][ T6164] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.794854][ T6741] loop2: detected capacity change from 0 to 8 [ 165.843907][ T5072] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 165.859950][ T5072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.898867][ T5072] usb 4-1: Product: syz [ 165.909973][ T5072] usb 4-1: Manufacturer: syz [ 165.928692][ T5072] usb 4-1: SerialNumber: syz [ 165.957881][ T5072] usb 4-1: config 0 descriptor?? [ 165.979787][ T6729] loop1: detected capacity change from 0 to 32768 [ 166.047299][ T6729] XFS (loop1): Mounting V5 Filesystem [ 166.180032][ T6729] XFS (loop1): Ending clean mount [ 166.207314][ T6729] XFS (loop1): Quotacheck needed: Please wait. [ 166.267388][ T6729] XFS (loop1): Quotacheck: Done. [ 166.270697][ T3637] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.330348][ T3636] XFS (loop1): Unmounting Filesystem [ 166.433620][ T6745] loop0: detected capacity change from 0 to 32768 [ 166.450801][ T5072] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 166.481010][ T5072] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 166.496323][ T6745] XFS: noikeep mount option is deprecated. [ 166.540227][ T5072] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 166.640844][ T6745] XFS (loop0): Mounting V5 Filesystem [ 166.691092][ T4028] usb 4-1: USB disconnect, device number 14 [ 166.771328][ T6745] XFS (loop0): Ending clean mount [ 166.778858][ T6745] XFS (loop0): Quotacheck needed: Please wait. [ 166.828548][ T6752] loop2: detected capacity change from 0 to 32768 [ 166.874071][ T6745] XFS (loop0): Quotacheck: Done. [ 166.909087][ T6752] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 166.987129][ T6164] XFS (loop0): Unmounting Filesystem [ 166.990676][ T3637] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.999016][ T3637] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.005110][ T3649] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.011249][ T3649] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.026535][ T3647] ocfs2: Unmounting device (7,2) on (node local) [ 167.327020][ T6782] loop3: detected capacity change from 0 to 256 [ 167.384551][ T6782] exfat: Deprecated parameter 'utf8' [ 167.434534][ T6782] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 167.749487][ T6792] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1070'. [ 167.812145][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 167.832286][ T6794] (unnamed net_device) (uninitialized): down delay (1986356271) is not a multiple of miimon (512), value rounded to 1986356224 ms [ 167.944385][ T6794] device bond1 entered promiscuous mode [ 168.012373][ T4970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.044529][ T6778] loop1: detected capacity change from 0 to 32768 [ 168.192659][ T6778] XFS (loop1): Mounting V5 Filesystem [ 168.228582][ T4970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.363739][ T6778] XFS (loop1): Ending clean mount [ 168.364112][ T6785] loop2: detected capacity change from 0 to 32768 [ 168.394278][ T6812] loop0: detected capacity change from 0 to 1024 [ 168.426938][ T6785] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.472809][ T6785] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.518438][ T6785] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 168.528680][ T4970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.533618][ T6812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.574383][ T4028] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 168.574451][ T3636] XFS (loop1): Unmounting Filesystem [ 168.595993][ T4028] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 168.661920][ T4970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.726220][ T6164] EXT4-fs (loop0): unmounting filesystem. [ 168.748488][ T6816] loop4: detected capacity change from 0 to 4096 [ 168.778478][ T4028] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 182ms [ 168.796727][ T4028] gfs2: fsid=syz:syz.0: jid=0: Done [ 168.802002][ T6816] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 168.845491][ T6785] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 168.857323][ T3649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.878210][ T3649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.886096][ T3649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.911485][ T3649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.920186][ T3649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.928984][ T3649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.992563][ T6785] syz.2.1062 (6785): drop_caches: 2 [ 169.158422][ T3644] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 169.165004][ T3644] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 169.207024][ T3644] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 169.655185][ T6842] loop4: detected capacity change from 0 to 1024 [ 169.839681][ T4974] hfsplus: b-tree write err: -5, ino 4 [ 169.922106][ T6851] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 169.938604][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 169.998600][ T6851] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 170.090736][ T4028] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 170.113244][ T6856] netlink: 'syz.0.1090': attribute type 29 has an invalid length. [ 170.394356][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.405378][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.424731][ T6864] loop2: detected capacity change from 0 to 4096 [ 170.432299][ T6817] device bridge_slave_0 entered promiscuous mode [ 170.454382][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.470655][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.470810][ T4028] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.505751][ T6817] device bridge_slave_1 entered promiscuous mode [ 170.512849][ T4028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.559538][ T4028] usb 2-1: config 0 descriptor?? [ 170.621780][ T4028] cp210x 2-1:0.0: cp210x converter detected [ 170.705149][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.748309][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.784403][ T6853] loop4: detected capacity change from 0 to 32768 [ 170.803368][ T6876] loop2: detected capacity change from 0 to 256 [ 170.819044][ T6853] ERROR: (device loop4): diWrite: ixpxd invalid [ 170.819044][ T6853] [ 170.846873][ T6876] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 170.870414][ T6853] ERROR: (device loop4): remounting filesystem as read-only [ 170.874993][ T6817] team0: Port device team_slave_0 added [ 170.914728][ T6853] ERROR: (device loop4): txCommit: [ 170.914728][ T6853] [ 170.920764][ T3915] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.992519][ T3637] Bluetooth: hci4: command tx timeout [ 171.069859][ T6817] team0: Port device team_slave_1 added [ 171.181885][ T3915] usb 1-1: Using ep0 maxpacket: 16 [ 171.272498][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.280995][ T4028] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 171.289471][ T4028] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 171.291351][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.325587][ T4028] usb 2-1: cp210x converter now attached to ttyUSB0 [ 171.331077][ T3915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.361721][ T4028] usb 2-1: USB disconnect, device number 13 [ 171.362898][ T3915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.395286][ T3915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.401008][ T4028] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.418447][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.429226][ T3915] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.460315][ T4028] cp210x 2-1:0.0: device disconnected [ 171.480461][ T3915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.503485][ T3915] usb 1-1: config 0 descriptor?? [ 171.509742][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.520555][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.576607][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.583863][ T4970] device hsr_slave_0 left promiscuous mode [ 171.584458][ T4970] device hsr_slave_1 left promiscuous mode [ 171.586366][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.586401][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.587101][ T4970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.587124][ T4970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.588855][ T4970] device bridge_slave_1 left promiscuous mode [ 171.588984][ T4970] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.595899][ T4970] device bridge_slave_0 left promiscuous mode [ 171.596032][ T4970] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.661908][ T4970] device veth1_macvtap left promiscuous mode [ 171.661989][ T4970] device veth0_macvtap left promiscuous mode [ 171.662109][ T4970] device veth1_vlan left promiscuous mode [ 171.662409][ T4970] device veth0_vlan left promiscuous mode [ 172.038982][ T3915] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 172.096979][ T3915] microsoft 0003:045E:07DA.0021: No inputs registered, leaving [ 172.131235][ T3915] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 172.169853][ T3915] microsoft 0003:045E:07DA.0021: no inputs found [ 172.190113][ T3915] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 172.253118][ T3915] usb 1-1: USB disconnect, device number 11 [ 172.539937][ T6888] loop4: detected capacity change from 0 to 32768 [ 172.540583][ T6918] loop1: detected capacity change from 0 to 2048 [ 172.548682][ T6888] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.582307][ T6888] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 172.674126][ T6888] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 172.683932][ T3915] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 172.690941][ T3915] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 172.705741][ T6920] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.806265][ T3915] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 115ms [ 172.814119][ T3915] gfs2: fsid=syz:syz.0: jid=0: Done [ 172.821279][ T6888] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 173.070910][ T3637] Bluetooth: hci4: command tx timeout [ 173.117752][ T6932] loop4: detected capacity change from 0 to 2048 [ 173.143398][ T6932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.192364][ T3915] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 173.337895][ T6933] loop2: detected capacity change from 0 to 4096 [ 173.420319][ T6933] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 173.461414][ T6933] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 173.479197][ T6933] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 173.498141][ T4970] team0 (unregistering): Port device team_slave_1 removed [ 173.507321][ T3915] usb 2-1: Using ep0 maxpacket: 32 [ 173.507526][ T6933] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 173.507586][ T6933] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 173.508969][ T6933] ntfs: volume version 3.1. [ 173.524835][ T6933] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 173.608022][ T4970] team0 (unregistering): Port device team_slave_0 removed [ 173.619518][ T6933] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 173.640909][ T3915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.640943][ T3915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.640978][ T3915] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 173.641001][ T3915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.643017][ T3915] usb 2-1: config 0 descriptor?? [ 173.655631][ T4028] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.662685][ T6933] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 173.731924][ T4970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.768707][ T6933] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 173.784167][ T6933] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 173.824260][ T4970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.987407][ T6945] loop2: detected capacity change from 0 to 2048 [ 174.044514][ T4028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.044548][ T4028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.044568][ T4028] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.044602][ T4028] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.80 [ 174.044625][ T4028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.050493][ T4028] usb 5-1: config 0 descriptor?? [ 174.128857][ T3915] kye 0003:0458:4018.0022: item fetching failed at offset 0/2 [ 174.129344][ T3915] kye 0003:0458:4018.0022: parse failed [ 174.129370][ T3915] kye: probe of 0003:0458:4018.0022 failed with error -22 [ 174.346247][ T22] usb 2-1: USB disconnect, device number 14 [ 174.542589][ T4028] acrux 0003:1A34:0802.0023: item fetching failed at offset 3/5 [ 174.551075][ T4028] acrux 0003:1A34:0802.0023: parse failed [ 174.556831][ T4028] acrux: probe of 0003:1A34:0802.0023 failed with error -22 [ 174.565215][ T6949] loop0: detected capacity change from 0 to 128 [ 174.598003][ T6949] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 174.621924][ T6949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.739854][ T6164] UDF-fs: warning (device loop0): udf_evict_inode: Inode 95 (mode 40755) has inode size 264 different from extent length 512. Filesystem need not be standards compliant. [ 174.766962][ T22] usb 5-1: USB disconnect, device number 15 [ 174.821064][ T4970] bond0 (unregistering): Released all slaves [ 174.866487][ T6947] loop2: detected capacity change from 0 to 32768 [ 175.015302][ T6947] XFS (loop2): Mounting V5 Filesystem [ 175.106000][ T6817] device hsr_slave_0 entered promiscuous mode [ 175.113285][ T6817] device hsr_slave_1 entered promiscuous mode [ 175.119839][ T6817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.132706][ T6817] Cannot create hsr debugfs directory [ 175.152179][ T3646] Bluetooth: hci4: command tx timeout [ 175.200056][ T6947] XFS (loop2): Ending clean mount [ 175.331172][ T3647] XFS (loop2): Unmounting Filesystem [ 175.334427][ T6972] loop1: detected capacity change from 0 to 1024 [ 175.528055][ T4975] hfsplus: b-tree write err: -5, ino 4 [ 175.630989][ T3649] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.631141][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.637032][ T3649] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.936577][ T3684] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 176.093893][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 176.312014][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.344858][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.398281][ T3684] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 176.417851][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.445162][ T3684] usb 5-1: config 0 descriptor?? [ 176.458904][ T6817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.471739][ T6817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.511559][ T6817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.534507][ T6817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.736748][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.793985][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.827565][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.836587][ T7015] loop2: detected capacity change from 0 to 128 [ 176.856468][ T7015] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 176.857265][ T7013] loop1: detected capacity change from 0 to 1024 [ 176.869832][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.897141][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.920938][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.927581][ T6996] loop0: detected capacity change from 0 to 32768 [ 176.931228][ T4970] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.942506][ T4970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.956735][ T6996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1137 (6996) [ 176.964913][ T3684] cypress 0003:04B4:07B1.0024: unknown main item tag 0x6 [ 176.988063][ T3684] cypress 0003:04B4:07B1.0024: item fetching failed at offset 4/5 [ 176.997369][ T3684] cypress 0003:04B4:07B1.0024: parse failed [ 177.015572][ T3684] cypress: probe of 0003:04B4:07B1.0024 failed with error -22 [ 177.015678][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.043427][ T7013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 177.043442][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.043947][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.069745][ T4970] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.076895][ T4970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.081360][ T7013] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038 (0x7fffffff) [ 177.085912][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.108995][ T6996] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.112954][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.142120][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.155988][ T3684] usb 5-1: USB disconnect, device number 16 [ 177.165831][ T6996] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 177.184319][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.215249][ T6996] BTRFS info (device loop0): using free space tree [ 177.221440][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.231158][ T3646] Bluetooth: hci4: command tx timeout [ 177.245177][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.264095][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.278068][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 177.296751][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.347849][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.370303][ T6817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.382840][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.407611][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.433497][ T6996] BTRFS info (device loop0): enabling ssd optimizations [ 177.434544][ T4970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.663627][ T6164] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.022669][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.030134][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.072624][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.121470][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.140431][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.185904][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.205543][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.239479][ T6817] device veth0_vlan entered promiscuous mode [ 178.250779][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.272067][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.303915][ T6817] device veth1_vlan entered promiscuous mode [ 178.329202][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1147'. [ 178.379023][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.393130][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.433566][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.467345][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.494526][ T6817] device veth0_macvtap entered promiscuous mode [ 178.529266][ T6817] device veth1_macvtap entered promiscuous mode [ 178.598470][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.641821][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.666167][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.706095][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.746155][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.787279][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.831849][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.861204][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.907568][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.929032][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.947326][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.956196][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.003888][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.033192][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.061349][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.095835][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.095854][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.095863][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.095874][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.095892][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.095903][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.097297][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.098502][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.099218][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.104595][ T6817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.104628][ T6817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.104655][ T6817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.104680][ T6817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.116439][ T7058] loop1: detected capacity change from 0 to 32768 [ 179.157493][ T7058] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 179.172274][ T7058] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 179.213815][ T7058] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 179.234776][ T7095] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1157'. [ 179.292649][ T4978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.292710][ T4978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.296732][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.384060][ T4970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.595328][ T7102] sp0: Synchronizing with TNC [ 179.597605][ T7099] [U] [ 179.640975][ T7058] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 179.814646][ T7107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1162'. [ 179.995462][ T7110] loop0: detected capacity change from 0 to 64 [ 180.028141][ T4970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.088306][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.335621][ T7122] IPVS: Error connecting to the multicast addr [ 180.517990][ T7133] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 180.566802][ T7133] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 180.606061][ T7133] overlayfs: missing 'lowerdir' [ 181.134147][ T7168] loop2: detected capacity change from 0 to 512 [ 181.154205][ T7170] loop0: detected capacity change from 0 to 512 [ 181.187082][ T7170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.205138][ T7170] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.236742][ T7168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.262629][ T7170] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1183: bg 0: block 248: padding at end of block bitmap is not set [ 181.266805][ T7178] loop4: detected capacity change from 0 to 64 [ 181.287416][ T7168] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038 (0x7fffffff) [ 181.331280][ T7170] __quota_error: 6 callbacks suppressed [ 181.331296][ T7170] Quota error (device loop0): write_blk: dquota write failed [ 181.377741][ T27] audit: type=1800 audit(1728575781.819:11): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1184" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 181.402630][ T7170] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.435478][ T7170] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1183: Failed to acquire dquot type 1 [ 181.484908][ T7170] EXT4-fs (loop0): 1 truncate cleaned up [ 181.521474][ T7170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.531417][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 181.618044][ T7184] loop4: detected capacity change from 0 to 64 [ 181.733562][ T6164] EXT4-fs (loop0): unmounting filesystem. [ 181.949348][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 181.990728][ T7195] (unnamed net_device) (uninitialized): down delay (1986356271) is not a multiple of miimon (512), value rounded to 1986356224 ms [ 182.079722][ T7195] device bond1 entered promiscuous mode [ 182.092662][ T7196] loop4: detected capacity change from 0 to 4096 [ 182.133743][ T7196] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 182.180470][ T7166] loop1: detected capacity change from 0 to 40427 [ 182.188057][ T7166] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 182.195908][ T7166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 182.210025][ T7166] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.298502][ T7196] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 182.308368][ T7166] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.323599][ T7166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.345964][ T7196] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 182.419129][ T7196] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 182.445555][ T7196] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 182.470779][ T7196] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 182.479637][ T7196] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 182.510424][ T7196] ntfs: volume version 3.1. [ 182.517275][ T7188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.530953][ T7188] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 182.546040][ T7188] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 182.567804][ T7188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.589027][ T7188] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.599322][ T7188] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 182.638394][ T7188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.655644][ T7188] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.678419][ T7188] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 182.696932][ T7188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.715330][ T7188] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 182.726785][ T7188] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 182.737332][ T7188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 182.766467][ T7188] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 182.784079][ T7188] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 183.400589][ T22] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 183.563852][ T7248] loop0: detected capacity change from 0 to 1024 [ 183.601882][ T7248] hfsplus: invalid uid specified [ 183.601929][ T7248] hfsplus: unable to parse mount options [ 183.780797][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.780830][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.780863][ T22] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 183.780885][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.782688][ T22] usb 4-1: config 0 descriptor?? [ 183.839547][ T7250] loop1: detected capacity change from 0 to 2048 [ 183.868248][ T7253] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.872053][ T3646] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.186248][ T7261] device dummy0 entered promiscuous mode [ 184.215516][ T7261] device dummy0 left promiscuous mode [ 184.263970][ T22] wacom 0003:056A:0317.0025: unknown main item tag 0x0 [ 184.272112][ T22] wacom 0003:056A:0317.0025: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 184.295155][ T22] wacom 0003:056A:0317.0025: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 184.317547][ T7237] loop4: detected capacity change from 0 to 32768 [ 184.321791][ T22] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.0025/input/input17 [ 184.362216][ T7237] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.370401][ T7237] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.450158][ T7237] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 184.459489][ T4805] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 184.469299][ T5077] usb 4-1: USB disconnect, device number 15 [ 184.471291][ T4805] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 184.558024][ T4805] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 184.565701][ T4805] gfs2: fsid=syz:syz.0: jid=0: Done [ 184.571906][ T7237] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 184.590645][ T3646] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.610147][ T4295] udevd[4295]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 184.670866][ T4021] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.670913][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.750844][ T3646] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.756978][ T3646] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.856350][ T7278] loop1: detected capacity change from 0 to 64 [ 184.976726][ T7280] loop4: detected capacity change from 0 to 512 [ 184.985841][ T7282] loop1: detected capacity change from 0 to 1024 [ 185.024064][ T7280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.034442][ T4021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.055966][ T4021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.060297][ T7282] hfsplus: bad catalog entry type [ 185.078991][ T4021] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 185.105140][ T4021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.115051][ T7286] loop3: detected capacity change from 0 to 8 [ 185.140458][ T7280] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.1223: corrupted in-inode xattr [ 185.161653][ T4021] usb 1-1: config 0 descriptor?? [ 185.177494][ T7280] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1223: couldn't read orphan inode 15 (err -117) [ 185.193134][ T4970] hfsplus: b-tree write err: -5, ino 4 [ 185.224000][ T7280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 185.343271][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 185.498723][ T7298] netlink: 'syz.4.1231': attribute type 29 has an invalid length. [ 185.544237][ T7298] netlink: 'syz.4.1231': attribute type 29 has an invalid length. [ 185.576962][ T7305] netlink: 'syz.4.1231': attribute type 29 has an invalid length. [ 185.860740][ T4021] hid-led: probe of 0003:1D34:000A.0026 failed with error -71 [ 185.883205][ T4021] usb 1-1: USB disconnect, device number 12 [ 185.950887][ T3641] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.296890][ T7304] loop1: detected capacity change from 0 to 32768 [ 186.303978][ T7304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1234 (7304) [ 186.308121][ T7304] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.308195][ T7304] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 186.308224][ T7304] BTRFS info (device loop1): using free space tree [ 186.465864][ T7300] loop2: detected capacity change from 0 to 40427 [ 186.489786][ T7300] F2FS-fs (loop2): invalid crc value [ 186.538587][ T7300] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.572400][ T7304] BTRFS info (device loop1): enabling ssd optimizations [ 186.641547][ T7339] loop0: detected capacity change from 0 to 4096 [ 186.656500][ T7300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 186.670724][ T3641] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.710431][ T3636] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.750606][ T3646] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.754713][ T7344] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.839821][ T3641] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.839858][ T3641] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.840318][ T7315] loop4: detected capacity change from 0 to 32768 [ 186.962565][ T7315] JBD2: Ignoring recovery information on journal [ 187.020582][ T3647] syz-executor: attempt to access beyond end of device [ 187.020582][ T3647] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 187.020742][ T3647] syz-executor: attempt to access beyond end of device [ 187.020742][ T3647] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 187.048435][ T3647] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 187.048477][ T3647] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 187.158407][ T7315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 187.184550][ T7315] (syz.4.1239,7315,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10 [ 187.271837][ T3644] ocfs2: Unmounting device (7,4) on (node local) [ 187.424536][ T7357] loop1: detected capacity change from 0 to 512 [ 187.459916][ T7359] loop2: detected capacity change from 0 to 1024 [ 187.509280][ T7357] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz.1.1248: iget: bogus i_mode (0) [ 187.509589][ T7357] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1248: couldn't read orphan inode 17 (err -117) [ 187.509741][ T7357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 187.590970][ T7359] hfsplus: bad catalog entry type [ 187.699524][ T4992] hfsplus: b-tree write err: -5, ino 4 [ 187.711597][ T7367] loop0: detected capacity change from 0 to 2048 [ 187.712062][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 187.781796][ T7370] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.046154][ T7381] 9pnet_fd: p9_fd_create_tcp (7381): problem binding to privport [ 188.353162][ T7394] loop1: detected capacity change from 0 to 1024 [ 188.549490][ T2537] hfsplus: b-tree write err: -5, ino 4 [ 188.783608][ T7412] loop3: detected capacity change from 0 to 256 [ 188.811830][ T7412] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 188.977658][ T7376] loop4: detected capacity change from 0 to 32768 [ 189.030641][ T3729] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.142648][ T7376] XFS (loop4): Mounting V5 Filesystem [ 189.282490][ T7376] XFS (loop4): Ending clean mount [ 189.290886][ T3729] usb 1-1: Using ep0 maxpacket: 16 [ 189.302887][ T7376] XFS (loop4): Quotacheck needed: Please wait. [ 189.367625][ T7376] XFS (loop4): Quotacheck: Done. [ 189.426458][ T3729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.445188][ T7406] loop1: detected capacity change from 0 to 40427 [ 189.447738][ T3729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.472702][ T3729] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.488993][ T3729] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.492464][ T7406] F2FS-fs (loop1): invalid crc value [ 189.498264][ T3729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.530344][ T3729] usb 1-1: config 0 descriptor?? [ 189.544110][ T26] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 189.563614][ T3644] XFS (loop4): Unmounting Filesystem [ 189.571187][ T7406] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.680954][ T7440] loop2: detected capacity change from 0 to 2048 [ 189.692773][ T7406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.745195][ T7440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 189.765029][ T7440] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038 (0x7fffffff) [ 189.767278][ T7406] syz.1.1270: attempt to access beyond end of device [ 189.767278][ T7406] loop1: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 189.796839][ T7406] syz.1.1270: attempt to access beyond end of device [ 189.796839][ T7406] loop1: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 189.810999][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 189.811011][ T27] audit: type=1800 audit(1728575790.259:12): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1270" name="/" dev="loop1" ino=8 res=0 errno=0 [ 189.839903][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 189.904732][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 189.973385][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.995836][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.025626][ T26] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 190.036166][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.059518][ T26] usb 4-1: config 0 descriptor?? [ 190.072473][ T3729] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 190.083765][ T3729] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 190.137912][ T3729] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0027/input/input20 [ 190.241581][ T3729] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 190.279008][ T3729] usb 1-1: USB disconnect, device number 13 [ 190.542516][ T26] dragonrise 0003:0079:0011.0028: unknown main item tag 0x0 [ 190.569899][ T26] dragonrise 0003:0079:0011.0028: unbalanced collection at end of report description [ 190.597387][ T7445] loop2: detected capacity change from 0 to 32768 [ 190.610857][ T26] dragonrise 0003:0079:0011.0028: parse failed [ 190.617048][ T26] dragonrise: probe of 0003:0079:0011.0028 failed with error -22 [ 190.641174][ T7445] XFS: noikeep mount option is deprecated. [ 190.692328][ T7445] XFS (loop2): Mounting V5 Filesystem [ 190.715837][ T7447] loop4: detected capacity change from 0 to 32768 [ 190.734911][ T7447] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 190.758158][ T3729] usb 4-1: USB disconnect, device number 16 [ 190.871371][ T7445] XFS (loop2): Ending clean mount [ 190.879228][ T7445] XFS (loop2): Quotacheck needed: Please wait. [ 190.888452][ T3644] ocfs2: Unmounting device (7,4) on (node local) [ 190.974656][ T7445] XFS (loop2): Quotacheck: Done. [ 191.099968][ T3647] XFS (loop2): Unmounting Filesystem [ 191.369627][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.378458][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.433603][ T7474] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 191.719694][ T7486] loop2: detected capacity change from 0 to 64 [ 191.888720][ T7485] loop1: detected capacity change from 0 to 4096 [ 191.923667][ T7485] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 192.004791][ T7485] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 192.054134][ T7485] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 192.100229][ T7485] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 192.130145][ T7490] loop4: detected capacity change from 0 to 4096 [ 192.162664][ T7485] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 192.198552][ T7485] ntfs: volume version 3.1. [ 192.217703][ T7485] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 192.270803][ T7490] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 192.282013][ T7485] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 192.312257][ T7490] ntfs3: loop4: failed to convert name for inode 1e. [ 192.319354][ T7485] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 192.340650][ T7485] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 192.368802][ T7470] loop0: detected capacity change from 0 to 32768 [ 192.464173][ T7470] XFS (loop0): Mounting V5 Filesystem [ 192.539286][ T7470] XFS (loop0): Ending clean mount [ 192.554697][ T7470] XFS (loop0): Quotacheck needed: Please wait. [ 192.597687][ T7510] loop3: detected capacity change from 0 to 512 [ 192.630956][ T7470] XFS (loop0): Quotacheck: Done. [ 192.640936][ T7510] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.688041][ T7510] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 192.709369][ T7510] EXT4-fs (loop3): 1 truncate cleaned up [ 192.715242][ T7510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.972918][ T6164] XFS (loop0): Unmounting Filesystem [ 192.982830][ T6817] EXT4-fs (loop3): unmounting filesystem. [ 193.142436][ T7518] loop3: detected capacity change from 0 to 256 [ 193.180001][ T7518] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 193.225398][ T7515] loop1: detected capacity change from 0 to 512 [ 193.261835][ T7515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.299699][ T7515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 193.362531][ T7524] loop3: detected capacity change from 0 to 8192 [ 193.400647][ T5077] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 193.416597][ T7515] System zones: 1-12 [ 193.422451][ T7524] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.488767][ T7524] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 193.500077][ T7515] EXT4-fs (loop1): 1 truncate cleaned up [ 193.511174][ T7515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 193.517109][ T7524] REISERFS (device loop3): using ordered data mode [ 193.528838][ T7524] reiserfs: using flush barriers [ 193.569316][ T7524] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.598765][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 193.604982][ T7524] REISERFS (device loop3): checking transaction log (loop3) [ 193.613975][ T7524] REISERFS (device loop3): Using r5 hash to sort names [ 193.631539][ T7532] loop0: detected capacity change from 0 to 64 [ 193.639061][ T7524] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 193.660049][ T7524] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 193.688069][ T7532] hfs: unable to locate alternate MDB [ 193.701254][ T7532] hfs: continuing without an alternate MDB [ 193.770799][ T5077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.800674][ T4021] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.808465][ T5077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.848775][ T5077] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 193.868232][ T5077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.906464][ T5077] usb 5-1: config 0 descriptor?? [ 193.963882][ T7537] loop0: detected capacity change from 0 to 256 [ 193.992133][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.004110][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.023586][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 194.050809][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057127][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.063870][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 194.177531][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.247945][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.258356][ T7541] loop0: detected capacity change from 0 to 16 [ 194.277625][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.287445][ T7541] erofs: (device loop0): mounted with root inode @ nid 36. [ 194.300049][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.314831][ T7541] syz.0.1318: attempt to access beyond end of device [ 194.314831][ T7541] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 194.340602][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.350809][ T4021] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 194.359861][ T4021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.369474][ T5077] hid (null): usage index exceeded [ 194.380904][ T5077] wacom 0003:056A:00BC.0029: ignoring exceeding usage max [ 194.388490][ T7539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.409167][ T5077] wacom 0003:056A:00BC.0029: ignoring exceeding usage max [ 194.416415][ T4021] usb 3-1: Product: syz [ 194.423921][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.431104][ T7539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.449248][ T4021] usb 3-1: Manufacturer: syz [ 194.454055][ T5077] wacom 0003:056A:00BC.0029: usage index exceeded [ 194.460652][ T4021] usb 3-1: SerialNumber: syz [ 194.466005][ T5077] wacom 0003:056A:00BC.0029: item 0 1 2 2 parsing failed [ 194.474034][ T4021] usb 3-1: config 0 descriptor?? [ 194.483742][ T5077] wacom 0003:056A:00BC.0029: parse failed [ 194.484020][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.489476][ T5077] wacom: probe of 0003:056A:00BC.0029 failed with error -22 [ 194.504043][ T7539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.512294][ T4021] ch341 3-1:0.0: ch341-uart converter detected [ 194.618779][ T26] usb 5-1: USB disconnect, device number 17 [ 194.697939][ T7534] loop1: detected capacity change from 0 to 32768 [ 194.840752][ T7534] XFS (loop1): Mounting V5 Filesystem [ 194.976847][ T7534] XFS (loop1): Ending clean mount [ 194.986925][ T7534] XFS (loop1): Quotacheck needed: Please wait. [ 195.053874][ T7534] XFS (loop1): Quotacheck: Done. [ 195.133961][ T3636] XFS (loop1): Unmounting Filesystem [ 195.170911][ T4021] usb 3-1: failed to send control message: -71 [ 195.177266][ T4021] ch341-uart: probe of ttyUSB0 failed with error -71 [ 195.220781][ T4021] usb 3-1: USB disconnect, device number 14 [ 195.253926][ T4021] ch341 3-1:0.0: device disconnected [ 195.329140][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1322'. [ 195.373110][ T7543] loop0: detected capacity change from 0 to 32768 [ 195.416968][ T7543] XFS: ikeep mount option is deprecated. [ 195.436013][ T7548] loop3: detected capacity change from 0 to 32768 [ 195.457003][ T7558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1323'. [ 195.520010][ T7543] XFS (loop0): Mounting V5 Filesystem [ 195.560249][ T7548] XFS (loop3): Mounting V5 Filesystem [ 195.626041][ T7543] XFS (loop0): Ending clean mount [ 195.632220][ T7548] XFS (loop3): Ending clean mount [ 195.641284][ T7548] XFS (loop3): Quotacheck needed: Please wait. [ 195.659119][ T7543] XFS (loop0): Quotacheck needed: Please wait. [ 195.722568][ T7548] XFS (loop3): Quotacheck: Done. [ 195.795487][ T7543] XFS (loop0): Quotacheck: Done. [ 195.830373][ T6817] XFS (loop3): Unmounting Filesystem [ 195.928758][ T7584] loop4: detected capacity change from 0 to 736 [ 195.949983][ T6164] XFS (loop0): Unmounting Filesystem [ 196.085657][ T7584] Symlink component flag not implemented [ 196.098167][ T7588] loop1: detected capacity change from 0 to 128 [ 196.129245][ T7584] Symlink component flag not implemented (121) [ 196.136339][ T7588] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 196.284947][ T7591] loop4: detected capacity change from 0 to 512 [ 196.309319][ T7591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.355626][ T7591] EXT4-fs (loop4): orphan cleanup on readonly fs [ 196.394099][ T7591] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1332: bg 0: block 248: padding at end of block bitmap is not set [ 196.415389][ T7591] __quota_error: 7 callbacks suppressed [ 196.415405][ T7591] Quota error (device loop4): write_blk: dquota write failed [ 196.430129][ T7591] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 196.459205][ T7591] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1332: Failed to acquire dquot type 1 [ 196.471851][ T7591] EXT4-fs (loop4): 1 truncate cleaned up [ 196.501846][ T7591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.543965][ T7594] loop3: detected capacity change from 0 to 4096 [ 196.562687][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 196.564869][ T7596] loop0: detected capacity change from 0 to 1024 [ 196.581220][ T7594] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 196.646907][ T7594] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 196.677690][ T7594] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 196.716239][ T7594] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 196.742869][ T7594] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 196.787181][ T7594] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 196.831260][ T7594] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 196.869034][ T4992] hfsplus: b-tree write err: -5, ino 4 [ 196.942438][ T7594] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 196.967549][ T7594] ntfs: volume version 3.1. [ 197.200700][ T4028] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 197.450794][ T4028] usb 1-1: Using ep0 maxpacket: 8 [ 197.575074][ T4028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.606386][ T4028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.637326][ T4028] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 197.667677][ T4028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.701654][ T4028] usb 1-1: config 0 descriptor?? [ 197.753181][ T7611] loop2: detected capacity change from 0 to 32768 [ 197.853753][ T7611] XFS (loop2): Mounting V5 Filesystem [ 197.858028][ T7615] loop1: detected capacity change from 0 to 32768 [ 197.874198][ T7615] XFS: ikeep mount option is deprecated. [ 197.941133][ T7611] XFS (loop2): Ending clean mount [ 197.953160][ T7611] XFS (loop2): Quotacheck needed: Please wait. [ 197.955320][ T7615] XFS (loop1): Mounting V5 Filesystem [ 198.028184][ T7611] XFS (loop2): Quotacheck: Done. [ 198.029988][ T7617] loop4: detected capacity change from 0 to 32768 [ 198.045459][ T7617] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 198.068378][ T7617] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 198.158309][ T7617] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 198.168647][ T7615] XFS (loop1): Ending clean mount [ 198.175357][ T7615] XFS (loop1): Quotacheck needed: Please wait. [ 198.185831][ T4028] pantherlord 0003:0810:0001.002A: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0 [ 198.228021][ T4028] pantherlord 0003:0810:0001.002A: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 198.235496][ T7615] XFS (loop1): Quotacheck: Done. [ 198.262697][ T3647] XFS (loop2): Unmounting Filesystem [ 198.286486][ T7648] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 198.359760][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 198.377616][ T7617] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 198.389687][ T4028] usb 1-1: USB disconnect, device number 14 [ 198.494007][ T3636] XFS (loop1): Unmounting Filesystem [ 198.959395][ T7656] loop2: detected capacity change from 0 to 4096 [ 199.020046][ T7656] ntfs: volume version 3.1. [ 199.117010][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 199.283004][ T4021] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 199.283389][ T7673] loop4: detected capacity change from 0 to 128 [ 199.299675][ T7671] loop0: detected capacity change from 0 to 2048 [ 199.314474][ T7673] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 199.369527][ T7671] Alternate GPT is invalid, using primary GPT. [ 199.382774][ T7671] loop0: p2 p3 p7 [ 199.580714][ T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 199.660810][ T4021] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 199.669884][ T4021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.721457][ T4021] usb 2-1: config 0 descriptor?? [ 199.762673][ T4021] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 199.774403][ T7686] loop4: detected capacity change from 0 to 512 [ 199.788842][ T7688] loop0: detected capacity change from 0 to 256 [ 199.836380][ T7669] loop3: detected capacity change from 0 to 32768 [ 199.840740][ T7686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.857941][ T7686] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038 (0x7fffffff) [ 199.858938][ T7688] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.899568][ T7686] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1367: Failed to acquire dquot type 0 [ 199.932675][ T7669] XFS (loop3): Mounting V5 Filesystem [ 199.952848][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 200.010754][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.039108][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.045239][ T7669] XFS (loop3): Ending clean mount [ 200.060389][ T26] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 200.077181][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.095143][ T7701] loop4: detected capacity change from 0 to 2048 [ 200.104064][ T26] usb 3-1: config 0 descriptor?? [ 200.150134][ T7701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.232988][ T6817] XFS (loop3): Unmounting Filesystem [ 200.241302][ T3644] EXT4-fs (loop4): unmounting filesystem. [ 200.395643][ T7709] loop0: detected capacity change from 0 to 4096 [ 200.410789][ T4021] gspca_sunplus: reg_w_riv err -71 [ 200.416435][ T4021] sunplus: probe of 2-1:0.0 failed with error -71 [ 200.448429][ T7709] ntfs: volume version 3.1. [ 200.486521][ T4021] usb 2-1: USB disconnect, device number 15 [ 200.583313][ T26] uclogic 0003:28BD:0074.002B: interface is invalid, ignoring [ 200.812072][ T26] usb 3-1: USB disconnect, device number 15 [ 200.903718][ T7726] loop0: detected capacity change from 0 to 64 [ 201.219364][ T7734] PM: Enabling pm_trace changes system date and time during resume. [ 201.219364][ T7734] PM: Correct system time has to be restored manually after resume. [ 201.300409][ T7736] loop0: detected capacity change from 0 to 128 [ 201.333633][ T7736] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 201.388446][ T7715] loop4: detected capacity change from 0 to 40427 [ 201.418159][ T7715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 201.435726][ T7715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 201.485715][ T7715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.610832][ T7715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 201.638495][ T7715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.828631][ T7749] loop3: detected capacity change from 0 to 1024 [ 201.901764][ T7749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.910403][ T7732] loop1: detected capacity change from 0 to 32768 [ 201.920284][ T7732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1382 (7732) [ 201.936719][ T7732] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.946995][ T7732] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 201.955830][ T7732] BTRFS info (device loop1): setting nodatacow, compression disabled [ 201.964059][ T7732] BTRFS info (device loop1): turning on flush-on-commit [ 201.971144][ T7732] BTRFS info (device loop1): enabling auto defrag [ 201.977661][ T7732] BTRFS info (device loop1): max_inline at 0 [ 201.983752][ T7732] BTRFS info (device loop1): using free space tree [ 202.021275][ T7749] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038 (0x7fffffff) [ 202.265465][ T6817] EXT4-fs (loop3): unmounting filesystem. [ 202.268022][ T7732] BTRFS info (device loop1): enabling ssd optimizations [ 202.496416][ T3636] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.835785][ T7784] loop0: detected capacity change from 0 to 8192 [ 202.890021][ T7784] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.905464][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.913020][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.921758][ T7784] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 202.932156][ T7790] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 202.941224][ T7784] REISERFS (device loop0): using ordered data mode [ 203.024352][ T7784] reiserfs: using flush barriers [ 203.035169][ T7784] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.054758][ T7784] REISERFS (device loop0): checking transaction log (loop0) [ 203.063593][ T7784] REISERFS (device loop0): Using r5 hash to sort names [ 203.071896][ T7784] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 203.087810][ T7784] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 203.397386][ T7758] loop2: detected capacity change from 0 to 40427 [ 203.408182][ T7758] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 203.418485][ T7758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 203.429759][ T7758] F2FS-fs (loop2): invalid crc value [ 203.457031][ T7758] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.493298][ T7758] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 203.526458][ T7758] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 203.534025][ T7758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.595012][ T7793] loop3: detected capacity change from 0 to 32768 [ 203.620731][ T7793] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 203.632930][ T7793] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 203.642159][ T3647] syz-executor: attempt to access beyond end of device [ 203.642159][ T3647] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 203.647011][ T7793] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 203.669924][ T4021] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 203.677137][ T4021] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 203.727459][ T4021] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 203.735758][ T4021] gfs2: fsid=syz:syz.0: jid=0: Done [ 203.747401][ T7793] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 204.136224][ T7793] syz.3.1399 (7793): drop_caches: 2 [ 204.207368][ T7803] loop1: detected capacity change from 0 to 1024 [ 204.547491][ T7818] loop1: detected capacity change from 0 to 256 [ 204.603533][ T7820] loop3: detected capacity change from 0 to 128 [ 204.619392][ T7820] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 204.619792][ T7818] exfat: Deprecated parameter 'utf8' [ 204.710183][ T7818] exfat: Deprecated parameter 'utf8' [ 204.766035][ T7818] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 204.767307][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1414'. [ 204.794577][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 204.804510][ T7830] netlink: 'syz.0.1414': attribute type 5 has an invalid length. [ 205.026044][ T7836] loop3: detected capacity change from 0 to 1024 [ 205.049569][ T7836] EXT4-fs: Ignoring removed orlov option [ 205.065759][ T7836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.123296][ T7836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.146939][ T7836] process 'syz.3.1417' launched './file0/file0' with NULL argv: empty string added [ 205.286683][ T6817] EXT4-fs (loop3): unmounting filesystem. [ 205.406189][ T7856] loop3: detected capacity change from 0 to 512 [ 205.444038][ T7856] EXT4-fs (loop3): 1 truncate cleaned up [ 205.460002][ T7856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.487852][ T7862] loop4: detected capacity change from 0 to 64 [ 205.497640][ T7862] hfs: unable to locate alternate MDB [ 205.610773][ T7862] hfs: continuing without an alternate MDB [ 205.688697][ T6817] EXT4-fs (loop3): unmounting filesystem. [ 206.120752][ T7886] xt_bpf: check failed: parse error [ 206.316338][ T7891] random: crng reseeded on system resumption [ 206.365480][ T7853] loop0: detected capacity change from 0 to 32768 [ 206.405700][ T7853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1424 (7853) [ 206.471796][ T7853] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 206.505705][ T7853] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 206.526118][ T7853] BTRFS info (device loop0): setting nodatacow, compression disabled [ 206.544866][ T7853] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 206.575421][ T7853] BTRFS info (device loop0): use zstd compression, level 3 [ 206.595445][ T7853] BTRFS info (device loop0): enabling auto defrag [ 206.614282][ T7853] BTRFS info (device loop0): using free space tree [ 206.797269][ T7853] BTRFS info (device loop0): enabling ssd optimizations [ 206.821189][ T7882] loop4: detected capacity change from 0 to 32768 [ 206.835025][ T7882] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1438 (7882) [ 206.860470][ T7882] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 206.870907][ T7882] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 206.880393][ T7882] BTRFS info (device loop4): using free space tree [ 206.948418][ T6164] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.059148][ T7882] BTRFS info (device loop4): enabling ssd optimizations [ 207.137108][ T3910] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.251003][ T7898] loop1: detected capacity change from 0 to 32768 [ 207.378682][ T7898] XFS (loop1): Mounting V5 Filesystem [ 207.400695][ T3910] usb 4-1: Using ep0 maxpacket: 16 [ 207.521220][ T3910] usb 4-1: config 0 has no interfaces? [ 207.526736][ T3910] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.586529][ T3910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.588837][ T7955] loop0: detected capacity change from 0 to 4096 [ 207.646557][ T3910] usb 4-1: config 0 descriptor?? [ 207.703399][ T3644] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 207.708003][ T7898] XFS (loop1): Ending clean mount [ 207.720860][ T7955] ntfs: volume version 3.1. [ 207.808976][ T7898] XFS (loop1): Quotacheck needed: Please wait. [ 207.940621][ T4028] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 207.940631][ T6360] usb 4-1: USB disconnect, device number 17 [ 207.941890][ T4992] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x336/0xf80, inode 0x2446 dinode [ 207.980297][ T7961] loop0: detected capacity change from 0 to 1024 [ 208.007339][ T4992] XFS (loop1): Unmount and run xfs_repair [ 208.014101][ T4992] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 208.024160][ T4992] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 208.041777][ T4992] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 208.051274][ T4992] 00000020: 34 f7 01 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4..h...=4.Xh...= [ 208.062563][ T4992] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 208.072045][ T4992] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 208.085542][ T4992] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 56 b3 a5 bd ..e.........V... [ 208.095915][ T4992] 00000060: ff ff ff ff 35 98 98 34 00 00 00 00 00 00 00 08 ....5..4........ [ 208.109566][ T4992] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 208.165199][ T7898] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 208.180697][ T4028] usb 3-1: Using ep0 maxpacket: 16 [ 208.262196][ T7961] EXT4-fs: Ignoring removed orlov option [ 208.269273][ T3636] XFS (loop1): Unmounting Filesystem [ 208.275159][ T7961] EXT4-fs (loop0): Test dummy encryption mode enabled [ 208.312832][ T7961] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 208.460842][ T4028] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 208.471872][ T4028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.479987][ T4028] usb 3-1: Product: syz [ 208.484963][ T4028] usb 3-1: Manufacturer: syz [ 208.487754][ T6164] EXT4-fs (loop0): unmounting filesystem. [ 208.489574][ T4028] usb 3-1: SerialNumber: syz [ 208.509915][ T4028] usb 3-1: config 0 descriptor?? [ 208.562082][ T4028] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 208.627383][ T7980] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 208.670764][ T4019] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 208.695575][ T7982] loop3: detected capacity change from 0 to 8 [ 208.773190][ T7982] SQUASHFS error: lzo decompression failed, data probably corrupt [ 208.785337][ T7982] SQUASHFS error: Failed to read block 0x144: -5 [ 208.794366][ T7982] SQUASHFS error: Unable to read metadata cache entry [142] [ 208.805137][ T7982] SQUASHFS error: Unable to read directory block [142:26] [ 208.892739][ T7987] binder: BINDER_SET_CONTEXT_MGR already set [ 208.900482][ T7987] binder: 7986:7987 ioctl 40046207 0 returned -16 [ 208.920822][ T4019] usb 5-1: Using ep0 maxpacket: 8 [ 208.994004][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 209.000756][ T4028] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 209.009857][ T4028] visor: probe of 3-1:0.0 failed with error -5 [ 209.050738][ T4019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.090592][ T4019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.100583][ T4019] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 209.109632][ T4019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.169585][ T4019] usb 5-1: config 0 descriptor?? [ 209.227977][ T4805] usb 3-1: USB disconnect, device number 16 [ 209.240619][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 209.341326][ T8001] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 209.341326][ T8001] SȘȞZ6' [ 209.360951][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.385839][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.406736][ T26] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 209.426987][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.449068][ T26] usb 1-1: config 0 descriptor?? [ 209.516565][ T7991] loop1: detected capacity change from 0 to 32768 [ 209.576254][ T7991] JBD2: Ignoring recovery information on journal [ 209.624296][ T7991] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 209.660468][ T4019] hid-led 0003:04D8:F372.002C: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 209.677330][ T7991] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 209.702493][ T7991] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 209.718188][ T4019] hid-led 0003:04D8:F372.002C: Greynut Luxafor initialized [ 209.732797][ T7991] OCFS2: File system is now read-only. [ 209.740775][ T7991] (syz.1.1462,7991,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 209.752753][ T7991] (syz.1.1462,7991,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 209.761496][ T7991] (syz.1.1462,7991,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 209.769932][ T7991] (syz.1.1462,7991,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 209.778309][ T7991] (syz.1.1462,7991,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 209.786700][ T7991] (syz.1.1462,7991,0):ocfs2_mknod_locked:637 ERROR: status = -30 [ 209.798638][ T7991] (syz.1.1462,7991,0):ocfs2_mknod:383 ERROR: status = -30 [ 209.807291][ T7991] (syz.1.1462,7991,0):ocfs2_mknod:500 ERROR: status = -30 [ 209.815485][ T7991] (syz.1.1462,7991,0):ocfs2_mkdir:657 ERROR: status = -30 [ 209.910140][ T6360] usb 5-1: USB disconnect, device number 18 [ 209.941217][ T3689] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 209.953171][ T26] dragonrise 0003:0079:0011.002D: unknown main item tag 0x0 [ 209.963341][ T26] dragonrise 0003:0079:0011.002D: unbalanced collection at end of report description [ 209.977723][ T26] dragonrise 0003:0079:0011.002D: parse failed [ 209.985687][ T26] dragonrise: probe of 0003:0079:0011.002D failed with error -22 [ 209.996248][ T26] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 209.998173][ T3636] ocfs2: Unmounting device (7,1) on (node local) [ 209.998680][ T26] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 210.002367][ T26] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 210.004165][ T26] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 210.006135][ T26] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 210.007297][ T26] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 210.009132][ T26] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 210.010274][ T26] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 210.016738][ T26] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 210.017875][ T26] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 210.019167][ T26] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 210.019688][ T26] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 210.020203][ T26] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 210.021101][ T26] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 210.021623][ T26] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 210.025757][ T26] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 210.026366][ T26] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 210.184088][ T4019] usb 1-1: USB disconnect, device number 15 [ 210.624469][ T8038] loop4: detected capacity change from 0 to 64 [ 210.683859][ T8042] netlink: 'syz.1.1484': attribute type 3 has an invalid length. [ 211.121185][ T8066] loop2: detected capacity change from 0 to 512 [ 211.223321][ T8066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.309135][ T8066] ext4 filesystem being mounted at /319/bus supports timestamps until 2038 (0x7fffffff) [ 211.363678][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 211.363693][ T27] audit: type=1804 audit(1728575811.809:13): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1494" name="/newroot/319/bus/syzkallers" dev="loop2" ino=18 res=1 errno=0 [ 211.423203][ T8081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1499'. [ 211.467902][ T8081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.486570][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 211.731329][ T27] audit: type=1400 audit(1728575812.169:14): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8092 comm="syz.0.1503" [ 211.935150][ T8098] loop2: detected capacity change from 0 to 512 [ 211.980682][ T8098] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.989743][ T8098] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 212.074567][ T8098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 212.090637][ T8098] System zones: 0-2, 18-18, 34-34 [ 212.121096][ T8098] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 212.159884][ T8098] EXT4-fs (loop2): 1 truncate cleaned up [ 212.170578][ T8098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.312035][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 212.330751][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 212.620123][ T8088] loop1: detected capacity change from 0 to 32768 [ 212.685157][ T8088] JBD2: Ignoring recovery information on journal [ 212.720963][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.733357][ T8077] loop4: detected capacity change from 0 to 40427 [ 212.780814][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.798018][ T8088] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 212.811984][ T8077] F2FS-fs (loop4): invalid crc value [ 212.852787][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 212.906200][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.924786][ T8077] F2FS-fs (loop4): Found nat_bits in checkpoint [ 212.934515][ T26] usb 1-1: config 0 descriptor?? [ 212.953567][ T3636] ocfs2: Unmounting device (7,1) on (node local) [ 213.101891][ T8077] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 213.305135][ T3644] syz-executor: attempt to access beyond end of device [ 213.305135][ T3644] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 213.346051][ T3644] syz-executor: attempt to access beyond end of device [ 213.346051][ T3644] loop4: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 213.375074][ T3644] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 213.375115][ T3644] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 213.389609][ T8110] loop3: detected capacity change from 0 to 40427 [ 213.415049][ T26] wacom 0003:056A:002A.002E: unknown main item tag 0x0 [ 213.428310][ T26] wacom 0003:056A:002A.002E: unknown main item tag 0x0 [ 213.452886][ T26] wacom 0003:056A:002A.002E: unknown main item tag 0x0 [ 213.467717][ T26] wacom 0003:056A:002A.002E: unknown main item tag 0x0 [ 213.484656][ T26] wacom 0003:056A:002A.002E: unknown main item tag 0x0 [ 213.494017][ T8110] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.521442][ T26] wacom 0003:056A:002A.002E: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 213.541314][ T26] wacom 0003:056A:002A.002E: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.0-1/input0 [ 213.561623][ T26] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:002A.002E/input/input21 [ 213.600780][ T4028] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 213.639641][ T8110] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.664852][ T26] usb 1-1: USB disconnect, device number 16 [ 213.778229][ T8153] loop2: detected capacity change from 0 to 128 [ 213.786419][ T6817] syz-executor: attempt to access beyond end of device [ 213.786419][ T6817] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.836181][ T8153] syz.2.1515: attempt to access beyond end of device [ 213.836181][ T8153] loop2: rw=2051, sector=96, nr_sectors = 287 limit=128 [ 213.860686][ T4028] usb 2-1: Using ep0 maxpacket: 32 [ 213.959209][ T4021] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 213.981039][ T4028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.998659][ T4028] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 214.021072][ T4028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.041770][ T4028] usb 2-1: config 0 descriptor?? [ 214.200742][ T4021] usb 5-1: Using ep0 maxpacket: 8 [ 214.320742][ T4021] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 214.350054][ T4021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.360677][ T4019] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 214.372153][ T4021] usb 5-1: config 0 descriptor?? [ 214.413164][ T4021] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 214.431562][ T4021] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 214.526499][ T4028] magicmouse 0003:05AC:0265.002F: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 214.577871][ T8165] loop0: detected capacity change from 0 to 32768 [ 214.600758][ T8165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1520 (8165) [ 214.605381][ T4019] usb 3-1: Using ep0 maxpacket: 32 [ 214.654549][ T8165] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.663837][ T8163] loop3: detected capacity change from 0 to 32768 [ 214.670963][ T6360] usb 5-1: USB disconnect, device number 19 [ 214.683887][ T8163] XFS: ikeep mount option is deprecated. [ 214.688186][ T8165] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 214.707035][ T8165] BTRFS info (device loop0): using free space tree [ 214.723911][ T4028] usb 2-1: USB disconnect, device number 16 [ 214.738868][ T8163] XFS (loop3): Mounting V5 Filesystem [ 214.752970][ T4019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.775253][ T4019] usb 3-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 214.800678][ T4019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.816940][ T4019] usb 3-1: config 0 descriptor?? [ 214.842795][ T8163] XFS (loop3): Ending clean mount [ 214.855564][ T8163] XFS (loop3): Quotacheck needed: Please wait. [ 214.861910][ T8165] BTRFS info (device loop0): enabling ssd optimizations [ 214.915264][ T8163] XFS (loop3): Quotacheck: Done. [ 214.978014][ T6817] XFS (loop3): Unmounting Filesystem [ 214.986121][ T6164] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.319223][ T4019] aquacomputer_d5next 0003:0C70:F012.0030: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.2-1/input0 [ 215.569227][ T3913] usb 3-1: USB disconnect, device number 17 [ 215.624566][ T8203] loop1: detected capacity change from 0 to 16 [ 215.645786][ T8203] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 215.740632][ T4019] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 215.748402][ T8205] tipc: Started in network mode [ 215.767021][ T8205] tipc: Node identity , cluster identity 4711 [ 215.783937][ T8205] tipc: Failed to set node id, please configure manually [ 215.801228][ T8205] tipc: Enabling of bearer rejected, failed to enable media [ 216.038587][ T8195] loop0: detected capacity change from 0 to 40427 [ 216.073964][ T8195] F2FS-fs (loop0): invalid crc value [ 216.089512][ T8195] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.100802][ T4019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.144344][ T4019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.171070][ T4019] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 216.180122][ T4019] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.209733][ T8195] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 216.217551][ T4019] usb 5-1: config 0 descriptor?? [ 216.300280][ T6164] syz-executor: attempt to access beyond end of device [ 216.300280][ T6164] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 216.328186][ T6164] syz-executor: attempt to access beyond end of device [ 216.328186][ T6164] loop0: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 216.350822][ T5077] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 216.371671][ T6164] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 216.371713][ T6164] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 216.425285][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.439685][ T8229] loop1: detected capacity change from 0 to 512 [ 216.483309][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.547328][ T8229] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 216.551726][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.567853][ T8229] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 216.572865][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.589008][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.596869][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.604538][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.612819][ T8230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.623529][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.626003][ T8229] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1539: Corrupt directory, running e2fsck is recommended [ 216.630644][ T8230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.632184][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.657912][ T8230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.718421][ T8229] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 216.718561][ T4019] cmedia_hs100b 0003:0D8C:0014.0031: item fetching failed at offset 2/5 [ 216.735880][ T5077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.747187][ T8229] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.1539: corrupted in-inode xattr [ 216.748500][ T5077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.781371][ T8229] EXT4-fs (loop1): Remounting filesystem read-only [ 216.781413][ T4019] cmedia_hs100b: probe of 0003:0D8C:0014.0031 failed with error -22 [ 216.787941][ T8229] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1539: couldn't read orphan inode 15 (err -117) [ 216.806763][ T5077] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 216.823569][ T5077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.856417][ T5077] usb 4-1: config 0 descriptor?? [ 216.872744][ T8229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.934485][ T3726] usb 5-1: USB disconnect, device number 20 [ 216.970215][ T8229] EXT4-fs: group quota file already specified [ 216.983134][ T8241] futex_wake_op: syz.2.1541 tries to shift op by 36; fix this program [ 216.992719][ T3913] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.017638][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 217.230827][ T3913] usb 1-1: Using ep0 maxpacket: 16 [ 217.285939][ T8255] loop1: detected capacity change from 0 to 512 [ 217.296621][ T8255] EXT4-fs: Ignoring removed bh option [ 217.337571][ T8255] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.1548: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 217.360752][ T3913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.362229][ T5077] a4tech 0003:09DA:022B.0032: item fetching failed at offset 5/7 [ 217.390824][ T3913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.395026][ T8255] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1548: couldn't read orphan inode 16 (err -117) [ 217.401261][ T3913] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 217.427188][ T8255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 217.436173][ T3913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.436997][ T5077] a4tech 0003:09DA:022B.0032: parse failed [ 217.444376][ T8255] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038 (0x7fffffff) [ 217.472190][ T3913] usb 1-1: config 0 descriptor?? [ 217.521280][ T5077] a4tech: probe of 0003:09DA:022B.0032 failed with error -22 [ 217.596764][ T3636] EXT4-fs (loop1): unmounting filesystem. [ 217.602665][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 217.642387][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 217.666770][ T4019] usb 4-1: USB disconnect, device number 18 [ 217.709208][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.716264][ T8266] loop1: detected capacity change from 0 to 1024 [ 217.717702][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.734215][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.753057][ T8266] hfsplus: bad catalog entry type [ 217.779795][ T2537] hfsplus: b-tree write err: -5, ino 4 [ 217.786181][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.805754][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.840841][ T8264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.908787][ T8268] loop2: detected capacity change from 0 to 4096 [ 217.932281][ T8268] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 217.970437][ T3913] megaworld 0003:07B5:0312.0033: item fetching failed at offset 2/5 [ 218.001217][ T3913] megaworld 0003:07B5:0312.0033: parse failed [ 218.007331][ T3913] megaworld: probe of 0003:07B5:0312.0033 failed with error -22 [ 218.031284][ T8268] ntfs: volume version 3.1. [ 218.169595][ T3726] usb 1-1: USB disconnect, device number 17 [ 218.756929][ T8301] loop2: detected capacity change from 0 to 4096 [ 218.863488][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 218.872269][ T8308] loop4: detected capacity change from 0 to 512 [ 218.884187][ T8308] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 218.901292][ T8311] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.903507][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 218.939413][ T8308] UDF-fs: Scanning with blocksize 512 failed [ 218.951124][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.959164][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.959188][ T8308] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 218.988740][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.009291][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.021586][ T8308] UDF-fs: Scanning with blocksize 1024 failed [ 219.033856][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.036598][ T8313] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 219.053701][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.065128][ T8308] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 219.075222][ T8308] UDF-fs: Scanning with blocksize 2048 failed [ 219.082886][ T8308] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 219.103284][ T8308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.125031][ T8313] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 219.146684][ T8315] netlink: 'syz.0.1574': attribute type 29 has an invalid length. [ 219.409514][ T8325] loop0: detected capacity change from 0 to 512 [ 219.458446][ T8325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.567886][ T8325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 219.657223][ T8325] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038 (0x7fffffff) [ 219.814630][ T8325] EXT4-fs error (device loop0): __ext4_new_inode:1281: comm syz.0.1578: failed to insert inode 16: doubly allocated? [ 219.847844][ T8354] [ 219.850202][ T8354] ====================================================== [ 219.857217][ T8354] WARNING: possible circular locking dependency detected [ 219.864249][ T8354] 6.1.112-syzkaller #0 Not tainted [ 219.869358][ T8354] ------------------------------------------------------ [ 219.876377][ T8354] syz.4.1588/8354 is trying to acquire lock: [ 219.882354][ T8354] ffff8880740fc130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x57/0x300 [ 219.893853][ T8354] [ 219.893853][ T8354] but task is already holding lock: [ 219.901199][ T8354] ffff888079ee7d28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 219.910075][ T8354] [ 219.910075][ T8354] which lock already depends on the new lock. [ 219.910075][ T8354] [ 219.920457][ T8354] [ 219.920457][ T8354] the existing dependency chain (in reverse order) is: [ 219.929448][ T8354] [ 219.929448][ T8354] -> #3 (&d->lock){+.+.}-{3:3}: [ 219.936471][ T8354] lock_acquire+0x1f8/0x5a0 [ 219.941489][ T8354] __mutex_lock+0x132/0xd80 [ 219.946500][ T8354] __rfcomm_dlc_close+0x259/0x6d0 [ 219.952032][ T8354] rfcomm_dlc_close+0xed/0x180 [ 219.957304][ T8354] __rfcomm_sock_close+0x104/0x220 [ 219.962923][ T8354] rfcomm_sock_shutdown+0xb4/0x230 [ 219.968543][ T8354] __se_sys_shutdown+0x147/0x1a0 [ 219.973991][ T8354] do_syscall_64+0x3b/0xb0 [ 219.978913][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.985313][ T8354] [ 219.985313][ T8354] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 219.992682][ T8354] lock_acquire+0x1f8/0x5a0 [ 219.997695][ T8354] __mutex_lock+0x132/0xd80 [ 220.002705][ T8354] rfcomm_dlc_exists+0xa2/0x370 [ 220.008063][ T8354] rfcomm_dev_ioctl+0xb2d/0x2180 [ 220.013509][ T8354] rfcomm_sock_ioctl+0x82/0xc0 [ 220.018780][ T8354] sock_do_ioctl+0x152/0x450 [ 220.023874][ T8354] sock_ioctl+0x47f/0x770 [ 220.028708][ T8354] __se_sys_ioctl+0xf1/0x160 [ 220.033801][ T8354] do_syscall_64+0x3b/0xb0 [ 220.038721][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.045123][ T8354] [ 220.045123][ T8354] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 220.053011][ T8354] lock_acquire+0x1f8/0x5a0 [ 220.058021][ T8354] __mutex_lock+0x132/0xd80 [ 220.063028][ T8354] rfcomm_dev_ioctl+0x233/0x2180 [ 220.068472][ T8354] rfcomm_sock_ioctl+0x82/0xc0 [ 220.073742][ T8354] sock_do_ioctl+0x152/0x450 [ 220.078835][ T8354] sock_ioctl+0x47f/0x770 [ 220.083666][ T8354] __se_sys_ioctl+0xf1/0x160 [ 220.088757][ T8354] do_syscall_64+0x3b/0xb0 [ 220.093677][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.100076][ T8354] [ 220.100076][ T8354] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 220.109438][ T8354] validate_chain+0x1661/0x5950 [ 220.114790][ T8354] __lock_acquire+0x125b/0x1f80 [ 220.120151][ T8354] lock_acquire+0x1f8/0x5a0 [ 220.125160][ T8354] lock_sock_nested+0x44/0x100 [ 220.130429][ T8354] rfcomm_sk_state_change+0x57/0x300 [ 220.136225][ T8354] __rfcomm_dlc_close+0x2b2/0x6d0 [ 220.141757][ T8354] rfcomm_dlc_close+0xed/0x180 [ 220.147045][ T8354] __rfcomm_sock_close+0x104/0x220 [ 220.152674][ T8354] rfcomm_sock_shutdown+0xb4/0x230 [ 220.158298][ T8354] __se_sys_shutdown+0x147/0x1a0 [ 220.163749][ T8354] do_syscall_64+0x3b/0xb0 [ 220.168670][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.175077][ T8354] [ 220.175077][ T8354] other info that might help us debug this: [ 220.175077][ T8354] [ 220.185290][ T8354] Chain exists of: [ 220.185290][ T8354] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock [ 220.185290][ T8354] [ 220.199182][ T8354] Possible unsafe locking scenario: [ 220.199182][ T8354] [ 220.206611][ T8354] CPU0 CPU1 [ 220.211954][ T8354] ---- ---- [ 220.217298][ T8354] lock(&d->lock); [ 220.221091][ T8354] lock(rfcomm_mutex); [ 220.227752][ T8354] lock(&d->lock); [ 220.234063][ T8354] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 220.240198][ T8354] [ 220.240198][ T8354] *** DEADLOCK *** [ 220.240198][ T8354] [ 220.248326][ T8354] 2 locks held by syz.4.1588/8354: [ 220.253415][ T8354] #0: ffffffff8e6762e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x37/0x180 [ 220.262803][ T8354] #1: ffff888079ee7d28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 220.272097][ T8354] [ 220.272097][ T8354] stack backtrace: [ 220.277987][ T8354] CPU: 1 PID: 8354 Comm: syz.4.1588 Not tainted 6.1.112-syzkaller #0 [ 220.286041][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.296097][ T8354] Call Trace: [ 220.299366][ T8354] [ 220.302286][ T8354] dump_stack_lvl+0x1e3/0x2cb [ 220.306957][ T8354] ? nf_tcp_handle_invalid+0x642/0x642 [ 220.312407][ T8354] ? print_circular_bug+0x12b/0x1a0 [ 220.317588][ T8354] check_noncircular+0x2fa/0x3b0 [ 220.322511][ T8354] ? add_chain_block+0x850/0x850 [ 220.327429][ T8354] ? lockdep_lock+0x11f/0x2a0 [ 220.332105][ T8354] ? _find_first_zero_bit+0xd0/0x100 [ 220.337384][ T8354] validate_chain+0x1661/0x5950 [ 220.342222][ T8354] ? reacquire_held_locks+0x660/0x660 [ 220.347583][ T8354] ? register_lock_class+0x100/0x990 [ 220.352857][ T8354] ? reacquire_held_locks+0x660/0x660 [ 220.358215][ T8354] ? is_dynamic_key+0x260/0x260 [ 220.363055][ T8354] ? mark_lock+0x9a/0x340 [ 220.367375][ T8354] ? __lock_acquire+0x125b/0x1f80 [ 220.372393][ T8354] ? mark_lock+0x9a/0x340 [ 220.376714][ T8354] __lock_acquire+0x125b/0x1f80 [ 220.381558][ T8354] lock_acquire+0x1f8/0x5a0 [ 220.386050][ T8354] ? rfcomm_sk_state_change+0x57/0x300 [ 220.391499][ T8354] ? rcu_is_watching+0x11/0xb0 [ 220.396249][ T8354] ? read_lock_is_recursive+0x10/0x10 [ 220.401608][ T8354] ? __mutex_lock+0x2f7/0xd80 [ 220.406283][ T8354] ? rcu_is_watching+0x11/0xb0 [ 220.411039][ T8354] ? detach_timer+0x17d/0x380 [ 220.415702][ T8354] ? __rfcomm_dlc_close+0x259/0x6d0 [ 220.420890][ T8354] ? mutex_lock_nested+0x10/0x10 [ 220.425811][ T8354] lock_sock_nested+0x44/0x100 [ 220.430566][ T8354] ? rfcomm_sk_state_change+0x57/0x300 [ 220.436014][ T8354] rfcomm_sk_state_change+0x57/0x300 [ 220.441396][ T8354] __rfcomm_dlc_close+0x2b2/0x6d0 [ 220.446450][ T8354] rfcomm_dlc_close+0xed/0x180 [ 220.451213][ T8354] __rfcomm_sock_close+0x104/0x220 [ 220.456318][ T8354] rfcomm_sock_shutdown+0xb4/0x230 [ 220.461419][ T8354] __se_sys_shutdown+0x147/0x1a0 [ 220.466352][ T8354] do_syscall_64+0x3b/0xb0 [ 220.470752][ T8354] ? clear_bhb_loop+0x45/0xa0 [ 220.475424][ T8354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.481334][ T8354] RIP: 0033:0x7f185237dff9 [ 220.485753][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.505347][ T8354] RSP: 002b:00007f18530dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 220.513750][ T8354] RAX: ffffffffffffffda RBX: 00007f1852536058 RCX: 00007f185237dff9 [ 220.521708][ T8354] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 220.529669][ T8354] RBP: 00007f18523f0296 R08: 0000000000000000 R09: 0000000000000000 [ 220.537628][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.545585][ T8354] R13: 0000000000000001 R14: 00007f1852536058 R15: 00007ffc2a5bd258 [ 220.553568][ T8354] [ 220.593707][ T6164] EXT4-fs (loop0): unmounting filesystem. [ 221.870563][ T3646] Bluetooth: hci4: command 0x0c1a tx timeout