last executing test programs: 9.867445113s ago: executing program 2 (id=1043): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x3e, '\x00', @p_u8=&(0x7f00000002c0)=0xe8}}) 9.378065838s ago: executing program 2 (id=1052): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000a40)={[{@pquota}, {@sysvgroups}, {@nolargeio}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 6.040554228s ago: executing program 2 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000010900010073797a3100000000340004803000018008000100636d700024000280080001400010000408000240000000011000038009000100407327c3600000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 5.237797843s ago: executing program 2 (id=1067): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.453381616s ago: executing program 2 (id=1070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 3.717262009s ago: executing program 2 (id=1075): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 3.238889973s ago: executing program 32 (id=1075): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) 3.087699518s ago: executing program 3 (id=1079): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.029348619s ago: executing program 0 (id=1080): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 2.745330668s ago: executing program 0 (id=1081): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f2a, 0x80002002, 0x10003, 0x8, 0x1000, 0xcc7, 0x0, 0x569b, 0x8, 0x406, 0x5, 0xfffffffd, 0x45, 0x800004f, 0x206, 0xfe, 0x0, 0x1a449, 0x9, 0x40000003, 0x8b, 0xcae4, 0x0, 0x20001e58, 0x8, 0xc69, 0x40, 0x6, 0x4088, 0x0, 0x9]}) 2.713167929s ago: executing program 3 (id=1082): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) close(0x3) 2.566825843s ago: executing program 0 (id=1083): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f0000000100), 0x2, 0x6a9, &(0x7f0000000440)="$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") syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e07050220"], 0xa) syz_open_dev$evdev(0x0, 0x2, 0x862b01) 2.435358217s ago: executing program 3 (id=1084): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xabbd}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x69}, 0x94) 2.145053306s ago: executing program 0 (id=1085): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.117257886s ago: executing program 3 (id=1086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) 1.802268316s ago: executing program 3 (id=1087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.563681723s ago: executing program 0 (id=1088): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) sendfile(r1, r0, 0x0, 0x20fffe82) 1.485305596s ago: executing program 3 (id=1089): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.065182689s ago: executing program 1 (id=1090): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040)=0x3, 0x4) 832.325945ms ago: executing program 1 (id=1091): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) 624.847731ms ago: executing program 1 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 353.767879ms ago: executing program 1 (id=1093): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001180)="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", 0x3f8}], 0x1}}], 0x1, 0x20000) 162.149356ms ago: executing program 1 (id=1094): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 153.881616ms ago: executing program 0 (id=1095): openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x202580, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 1 (id=1096): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): r/w without journal. Quota mode: none. [ 100.274980][ T6082] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.326546][ T6082] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.343923][ T6082] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 100.424267][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.834846][ T6106] loop3: detected capacity change from 0 to 2048 [ 100.893480][ T6111] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 100.907767][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.005512][ T6111] team0: Port device wlan1 added [ 101.065990][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.139349][ T5157] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.308105][ T6124] capability: warning: `syz.0.122' uses deprecated v2 capabilities in a way that may be insecure [ 101.359277][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 101.400702][ T5157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.427499][ T6126] loop3: detected capacity change from 0 to 64 [ 101.429466][ T5157] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.494149][ T5157] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 101.525653][ T5157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.566223][ T5157] usb 2-1: config 0 descriptor?? [ 101.810888][ T6134] loop3: detected capacity change from 0 to 128 [ 101.854483][ T6134] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 101.907566][ T6134] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.922842][ T6134] ext2 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.024288][ T5157] hid (null): unknown global tag 0xe [ 102.045730][ T5157] hid-u2fzero 0003:10C4:8ACF.0002: unknown global tag 0xe [ 102.046398][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.059357][ T5157] hid-u2fzero 0003:10C4:8ACF.0002: item 0 2 1 14 parsing failed [ 102.090410][ T5157] hid-u2fzero: probe of 0003:10C4:8ACF.0002 failed with error -22 [ 102.121198][ T6136] loop2: detected capacity change from 0 to 4096 [ 102.225817][ T6136] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 102.267595][ T6136] ntfs3: loop2: Failed to load $Extend (-22). [ 102.290426][ T1195] usb 2-1: USB disconnect, device number 2 [ 102.305391][ T6136] ntfs3: loop2: Failed to initialize $Extend. [ 102.435517][ T6136] ntfs3: loop2: ino=1b, "file0" directory corrupted [ 102.684577][ T6153] tipc: Started in network mode [ 102.690069][ T6153] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 102.707922][ T6153] tipc: Enabled bearer , priority 10 [ 102.878187][ T6158] QAT: Invalid ioctl 21531 [ 102.950122][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'. [ 103.253659][ T6173] loop3: detected capacity change from 0 to 256 [ 103.261090][ T6174] loop1: detected capacity change from 0 to 256 [ 103.285492][ T6174] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 103.323628][ T6173] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 103.342776][ T6174] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 103.808005][ T6184] loop1: detected capacity change from 0 to 64 [ 103.831054][ T5783] tipc: Node number set to 4269801488 [ 104.362964][ T6203] Bluetooth: MGMT ver 1.22 [ 105.097308][ T6224] loop2: detected capacity change from 0 to 2048 [ 105.114814][ T6225] loop1: detected capacity change from 0 to 1024 [ 105.152240][ T6224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.314365][ T5783] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.547225][ T5783] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.579040][ T5783] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 105.590794][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.629346][ T5783] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 105.666968][ T6236] loop1: detected capacity change from 0 to 128 [ 105.736870][ T6236] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 105.789131][ T6237] loop2: detected capacity change from 0 to 4096 [ 105.798550][ T6239] loop0: detected capacity change from 0 to 2048 [ 105.810479][ T6236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.839128][ T6237] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 105.918558][ T6240] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.723514][ T5783] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 106.753697][ T5783] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 106.775579][ T5783] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 106.968507][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 106.998859][ T5157] usb 4-1: USB disconnect, device number 2 [ 107.307377][ T5783] hid-generic 0002:0001:0D97.0003: item fetching failed at offset 0/2 [ 107.327856][ T5783] hid-generic: probe of 0002:0001:0D97.0003 failed with error -22 [ 107.420231][ T6278] loop0: detected capacity change from 0 to 4096 [ 107.462484][ T6280] capability: warning: `syz.2.197' uses 32-bit capabilities (legacy support in use) [ 107.469959][ T6278] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 107.528683][ T6278] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.549779][ T6278] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 107.626140][ T6278] ntfs3: Volume is dirty and "force" flag is not set! [ 107.671231][ T6266] loop1: detected capacity change from 0 to 32768 [ 107.833044][ T6266] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.061717][ T6266] XFS (loop1): Ending clean mount [ 108.119638][ T6266] XFS (loop1): Quotacheck needed: Please wait. [ 108.202900][ T6266] XFS (loop1): Quotacheck: Done. [ 108.263646][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 108.419433][ T5776] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.739946][ T6291] loop0: detected capacity change from 0 to 32768 [ 108.784787][ T6291] JBD2: Ignoring recovery information on journal [ 108.906830][ T6291] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.202451][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 109.804693][ T6331] loop3: detected capacity change from 0 to 8192 [ 109.840942][ T6331] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 109.916185][ T6331] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 109.955043][ T6331] REISERFS (device loop3): using ordered data mode [ 109.963124][ T6331] reiserfs: using flush barriers [ 110.024737][ T6331] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 110.048719][ T6336] loop2: detected capacity change from 0 to 512 [ 110.056766][ T6336] EXT4-fs: Ignoring removed orlov option [ 110.073829][ T6331] REISERFS (device loop3): checking transaction log (loop3) [ 110.095105][ T6336] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 110.133327][ T6331] REISERFS (device loop3): Using r5 hash to sort names [ 110.153595][ T6331] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 110.186067][ T6331] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 110.657405][ T6348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.687501][ T6350] loop2: detected capacity change from 0 to 512 [ 110.731643][ T6350] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.765298][ T6350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.800209][ T6350] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.898639][ T6350] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.225: Invalid block bitmap block 0 in block_group 0 [ 110.983616][ T6350] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 111.061258][ T6350] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.225: attempt to clear invalid blocks 983261 len 1 [ 111.091361][ T6350] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.225: Invalid inode table block 0 in block_group 0 [ 111.151677][ T6350] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 111.162778][ T6350] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 111.179935][ T6350] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.225: Invalid inode table block 0 in block_group 0 [ 111.202791][ T6350] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 111.217859][ T6350] EXT4-fs error (device loop2): ext4_truncate:4301: inode #11: comm syz.2.225: mark_inode_dirty error [ 111.256009][ T6350] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 111.276963][ T6350] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.225: Invalid inode table block 0 in block_group 0 [ 111.301057][ T6350] EXT4-fs (loop2): 1 truncate cleaned up [ 111.328175][ T6350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.500645][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.547024][ T6366] loop1: detected capacity change from 0 to 4096 [ 111.582061][ T6366] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 111.712489][ T6366] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 111.737723][ T6366] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 112.026413][ T6378] loop2: detected capacity change from 0 to 1024 [ 112.043673][ T6380] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 112.063878][ T6379] IPVS: stopping backup sync thread 6380 ... [ 112.104895][ T6378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.251548][ T6378] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 112.293020][ T6378] EXT4-fs warning (device loop2): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 112.318759][ T6368] loop0: detected capacity change from 0 to 40427 [ 112.361064][ T6368] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 112.368024][ T6368] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.395738][ T6384] loop1: detected capacity change from 0 to 4096 [ 112.413061][ T6368] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.440435][ T6384] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 112.451834][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.593696][ T6368] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.614699][ T6368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.649264][ T27] audit: type=1800 audit(1779038577.409:2): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.238" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 112.743540][ T6389] netlink: 'syz.2.239': attribute type 2 has an invalid length. [ 112.952374][ T5779] syz-executor: attempt to access beyond end of device [ 112.952374][ T5779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.016254][ T5779] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.420276][ T6403] loop1: detected capacity change from 0 to 512 [ 113.501446][ T6405] loop2: detected capacity change from 0 to 256 [ 113.645045][ T6405] FAT-fs (loop2): Directory bread(block 64) failed [ 113.676776][ T6405] FAT-fs (loop2): Directory bread(block 65) failed [ 113.710247][ T6405] FAT-fs (loop2): Directory bread(block 66) failed [ 113.716867][ T6405] FAT-fs (loop2): Directory bread(block 67) failed [ 113.754020][ T6405] FAT-fs (loop2): Directory bread(block 68) failed [ 113.782126][ T6405] FAT-fs (loop2): Directory bread(block 69) failed [ 113.788865][ T6405] FAT-fs (loop2): Directory bread(block 70) failed [ 113.819386][ T6405] FAT-fs (loop2): Directory bread(block 71) failed [ 113.852318][ T6405] FAT-fs (loop2): Directory bread(block 72) failed [ 113.879628][ T6405] FAT-fs (loop2): Directory bread(block 73) failed [ 114.182202][ T6420] loop1: detected capacity change from 0 to 128 [ 114.232283][ T6420] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.259679][ T6420] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.353558][ T6424] loop0: detected capacity change from 0 to 8192 [ 114.485919][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.175549][ T6440] loop0: detected capacity change from 0 to 512 [ 115.212924][ T6440] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.263: invalid indirect mapped block 10 (level 1) [ 115.238365][ T6440] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.263: invalid indirect mapped block 8 (level 1) [ 115.262728][ T6440] EXT4-fs (loop0): 1 truncate cleaned up [ 115.319886][ T6440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.466041][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.515434][ T6443] program syz.1.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.598951][ T6421] F2FS-fs (loop3): invalid crc value [ 115.622774][ T6421] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.807182][ T6421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.969952][ T5778] syz-executor: attempt to access beyond end of device [ 115.969952][ T5778] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.004032][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 116.054807][ T6461] tmpfs: Cannot retroactively limit inodes [ 116.187958][ T6462] set_capacity_and_notify: 1 callbacks suppressed [ 116.187974][ T6462] loop2: detected capacity change from 0 to 4096 [ 116.289604][ T6467] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.605271][ T6471] loop1: detected capacity change from 0 to 1024 [ 116.685894][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.728236][ T6471] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.813971][ T6471] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.276: lblock 0 mapped to illegal pblock 0 (length 1) [ 116.885629][ T6471] EXT4-fs (loop1): Remounting filesystem read-only [ 116.987273][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.038322][ T6486] loop3: detected capacity change from 0 to 128 [ 117.044967][ T5838] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.083437][ T6486] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.140746][ T6486] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.239975][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 117.255853][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.297865][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.315352][ T5838] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 117.334503][ T49] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.346402][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.386446][ T5838] usb 3-1: config 0 descriptor?? [ 117.772171][ T6504] 9pnet_rdma: rdma_create_trans (6504): problem binding to privport: 13 [ 117.873468][ T5838] hid-multitouch 0003:1FD2:6007.0004: item fetching failed at offset 1/5 [ 117.934399][ T5838] hid-multitouch: probe of 0003:1FD2:6007.0004 failed with error -22 [ 117.971130][ T6510] loop3: detected capacity change from 0 to 256 [ 118.015845][ T6510] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.053237][ T6510] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 118.093951][ T6510] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 118.144732][ T5838] usb 3-1: USB disconnect, device number 3 [ 118.323777][ T6517] loop0: detected capacity change from 0 to 512 [ 118.344261][ T6517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.356977][ T6518] warning: `syz.1.297' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.383211][ T6517] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.296: bad orphan inode 11 [ 118.438092][ T6517] ext4_test_bit(bit=10, block=4) = 1 [ 118.460841][ T6517] is_bad_inode(inode)=0 [ 118.465091][ T6517] NEXT_ORPHAN(inode)=2080374784 [ 118.484171][ T6517] max_ino=32 [ 118.488095][ T6517] i_nlink=0 [ 118.503411][ T6517] EXT4-fs (loop0): 1 truncate cleaned up [ 118.520544][ T6517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.620249][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.845858][ T6530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.302'. [ 118.883825][ T6528] loop0: detected capacity change from 0 to 4096 [ 118.938637][ T6528] ntfs: volume version 3.1. [ 119.119708][ T6535] loop2: detected capacity change from 0 to 64 [ 119.159611][ T6537] vlan2: entered allmulticast mode [ 119.186341][ T6537] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 119.794163][ T6551] netlink: 68 bytes leftover after parsing attributes in process `syz.1.312'. [ 120.223735][ T27] audit: type=1326 audit(1779038584.989:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.1.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0c919ce59 code=0x0 [ 120.454710][ T6545] loop0: detected capacity change from 0 to 32768 [ 120.511648][ T6545] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.671048][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 120.743186][ T6588] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 120.743186][ T6588] program syz.2.325 not setting count and/or reply_len properly [ 120.794440][ T6545] XFS (loop0): Ending clean mount [ 120.956476][ T5779] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.173118][ T6594] tipc: Started in network mode [ 121.192713][ T6594] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 121.254713][ T6599] loop1: detected capacity change from 0 to 16 [ 121.265364][ T6594] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 121.267419][ T6594] tipc: Enabled bearer , priority 10 [ 121.304718][ T6599] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.344393][ T6599] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 121.344514][ T6599] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 121.344548][ T6599] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 121.344569][ T6599] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 121.776888][ T6612] loop1: detected capacity change from 0 to 128 [ 121.813749][ T6612] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 121.871367][ T6612] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 121.986543][ T6610] loop0: detected capacity change from 0 to 8192 [ 122.002108][ T6610] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.019579][ T6610] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 122.052776][ T6610] REISERFS (device loop0): using journaled data mode [ 122.090384][ T6610] reiserfs: using flush barriers [ 122.172054][ T6610] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.194835][ T5776] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.240570][ T6610] REISERFS (device loop0): checking transaction log (loop0) [ 122.265781][ T6610] REISERFS (device loop0): Using r5 hash to sort names [ 122.348306][ T6610] reiserfs: enabling write barrier flush mode [ 122.374385][ T6625] syz.2.340 (6625): drop_caches: 4 [ 122.380349][ T5838] tipc: Node number set to 1 [ 122.386646][ T6610] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.408787][ T6610] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 123.113575][ T6647] loop3: detected capacity change from 0 to 512 [ 123.119940][ T6648] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 123.119965][ T6648] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 123.161739][ T6647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.202496][ T6647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.259363][ T6647] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.358123][ T6658] loop0: detected capacity change from 0 to 64 [ 123.370097][ T6657] loop2: detected capacity change from 0 to 8 [ 123.377399][ T6657] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 123.393638][ T6647] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.350: Allocating blocks 41-42 which overlap fs metadata [ 123.412884][ T6647] EXT4-fs (loop3): Remounting filesystem read-only [ 123.420892][ T6647] Quota error (device loop3): write_blk: dquota write failed [ 123.428724][ T6647] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 123.441172][ T6647] Quota error (device loop3): write_blk: dquota write failed [ 123.448833][ T5777] udevd[5777]: incorrect cramfs checksum on /dev/loop2 [ 123.449060][ T6647] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 123.466371][ T6647] EXT4-fs (loop3): 1 truncate cleaned up [ 123.473464][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.577656][ T27] audit: type=1800 audit(1779038588.339:4): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.354" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 123.600631][ T6660] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 123.720366][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.610839][ T6666] loop2: detected capacity change from 0 to 32768 [ 124.669085][ T6666] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.769372][ T1195] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.841245][ T6666] XFS (loop2): Ending clean mount [ 124.983111][ T1195] usb 1-1: Using ep0 maxpacket: 32 [ 124.989023][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.009108][ T1195] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.017464][ T1195] usb 1-1: config 0 has no interface number 0 [ 125.047066][ T1195] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.069369][ T1195] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.088138][ T6678] loop1: detected capacity change from 0 to 40427 [ 125.095031][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.103280][ T1195] usb 1-1: Product: syz [ 125.107502][ T1195] usb 1-1: Manufacturer: syz [ 125.112491][ T1195] usb 1-1: SerialNumber: syz [ 125.140272][ T1195] usb 1-1: config 0 descriptor?? [ 125.166764][ T1195] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.184205][ T1195] em28xx 1-1:0.132: Video interface 132 found: [ 125.209245][ T6678] F2FS-fs (loop1): invalid crc value [ 125.287090][ T6678] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.442438][ T6678] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.573942][ T1195] em28xx 1-1:0.132: unknown em28xx chip ID (39) [ 125.602152][ T5776] syz-executor: attempt to access beyond end of device [ 125.602152][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.645578][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 125.857396][ T1195] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 125.868839][ T1195] em28xx 1-1:0.132: board has no eeprom [ 125.965646][ T1195] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.984267][ T1195] em28xx 1-1:0.132: analog set to bulk mode. [ 126.016105][ T6696] loop3: detected capacity change from 0 to 40427 [ 126.021171][ T1195] usb 1-1: USB disconnect, device number 2 [ 126.031365][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 126.057984][ T6696] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 126.117455][ T6696] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 126.123109][ T1195] em28xx 1-1:0.132: Disconnecting em28xx [ 126.153183][ T6696] F2FS-fs (loop3): invalid crc value [ 126.179414][ T6696] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.305919][ T6696] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 126.422664][ T6696] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.560102][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 126.567648][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 126.600023][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 126.625227][ T9] usb 1-1: Decoder not found [ 126.636954][ T9] em28xx 1-1:0.132: failed to create media graph [ 126.644280][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 126.664644][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 126.684247][ T1195] em28xx 1-1:0.132: Closing input extension [ 126.756636][ T1195] em28xx 1-1:0.132: Freeing device [ 126.970573][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 127.065730][ T6721] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 127.369461][ T6707] loop2: detected capacity change from 0 to 32768 [ 127.480219][ T6707] ialloc: diAlloc returned -5! [ 128.164472][ T6730] loop0: detected capacity change from 0 to 32768 [ 128.348395][ T6737] loop1: detected capacity change from 0 to 32768 [ 128.377197][ T6730] ERROR: (device loop0): diWrite: ixpxd invalid [ 128.377197][ T6730] [ 128.445359][ T6730] ERROR: (device loop0): remounting filesystem as read-only [ 128.484287][ T6730] ERROR: (device loop0): txCommit: [ 128.484287][ T6730] [ 128.681987][ T6740] loop2: detected capacity change from 0 to 512 [ 128.767736][ T6740] EXT4-fs (loop2): 1 truncate cleaned up [ 128.768511][ T6738] loop3: detected capacity change from 0 to 40427 [ 128.777407][ T6740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.857072][ T6738] F2FS-fs (loop3): invalid crc value [ 128.863130][ T6740] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.384: bg 0: block 465: padding at end of block bitmap is not set [ 128.889837][ T6740] EXT4-fs (loop2): Remounting filesystem read-only [ 128.907708][ T6738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.034253][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.085022][ T6738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.683114][ T6758] loop3: detected capacity change from 0 to 128 [ 129.735931][ T6758] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.810887][ T6758] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.898464][ T6758] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 129.978649][ T6767] loop1: detected capacity change from 0 to 512 [ 130.053097][ T6767] EXT4-fs (loop1): Test dummy encryption mode enabled [ 130.078148][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.114283][ T6767] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.396: corrupted in-inode xattr: invalid ea_ino [ 130.155657][ T6772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.400'. [ 130.211917][ T6767] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.396: couldn't read orphan inode 15 (err -117) [ 130.292442][ T6767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.393614][ T6780] loop3: detected capacity change from 0 to 64 [ 130.571592][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.753744][ T27] audit: type=1326 audit(1779038595.519:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 130.849621][ T27] audit: type=1326 audit(1779038595.519:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 130.940070][ T27] audit: type=1326 audit(1779038595.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 130.995367][ T27] audit: type=1326 audit(1779038595.539:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.061226][ T27] audit: type=1326 audit(1779038595.539:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.133685][ T6779] loop0: detected capacity change from 0 to 32768 [ 131.148604][ T27] audit: type=1326 audit(1779038595.539:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.199306][ T27] audit: type=1326 audit(1779038595.539:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.271779][ T6779] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 131.299382][ T27] audit: type=1326 audit(1779038595.539:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.324660][ T27] audit: type=1326 audit(1779038595.549:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.350507][ T27] audit: type=1326 audit(1779038595.549:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz.1.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc0c919ce59 code=0x7ffc0000 [ 131.368594][ T6779] JBD2: Ignoring recovery information on journal [ 131.540517][ T6779] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.696966][ T6803] loop2: detected capacity change from 0 to 2048 [ 131.773474][ T6803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.193370][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 132.288351][ T6795] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 132.439493][ T6795] XFS (loop1): Ending clean mount [ 132.646925][ T6826] netlink: 56 bytes leftover after parsing attributes in process `syz.2.421'. [ 132.671248][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 132.694394][ T5776] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 133.174492][ T6811] set_capacity_and_notify: 1 callbacks suppressed [ 133.174508][ T6811] loop3: detected capacity change from 0 to 32768 [ 133.193806][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201299][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.240330][ T6811] XFS: ikeep mount option is deprecated. [ 133.304279][ T6811] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.328271][ T6843] loop0: detected capacity change from 0 to 64 [ 133.481117][ T6811] XFS (loop3): Ending clean mount [ 133.682681][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.369595][ T6875] sctp: [Deprecated]: syz.1.440 (pid 6875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.369595][ T6875] Use struct sctp_sack_info instead [ 134.420944][ T6875] sctp: [Deprecated]: syz.1.440 (pid 6875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.420944][ T6875] Use struct sctp_sack_info instead [ 134.492468][ T6877] loop3: detected capacity change from 0 to 2048 [ 134.536724][ T6877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.668914][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 134.883636][ T5838] kernel write not supported for file /dsp (pid: 5838 comm: kworker/0:4) [ 135.030149][ T6894] loop0: detected capacity change from 0 to 256 [ 135.103882][ T6894] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1ce317b5, utbl_chksum : 0xe619d30d) [ 135.668926][ T6909] loop1: detected capacity change from 0 to 4096 [ 135.740118][ T6909] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 135.795392][ T6909] ntfs3: loop1: Failed to load $Extend (-22). [ 135.814959][ T6909] ntfs3: loop1: Failed to initialize $Extend. [ 135.842079][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 135.880147][ T1195] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.995781][ T6919] loop0: detected capacity change from 0 to 1024 [ 136.020781][ T6919] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 136.088502][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.111849][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.138243][ T1195] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.171406][ T1195] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.182194][ T1195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.195052][ T6921] IPVS: Error connecting to the multicast addr [ 136.212841][ T1195] usb 4-1: config 0 descriptor?? [ 136.666197][ T1195] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 136.732681][ T1195] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 136.942106][ T1195] usb 4-1: USB disconnect, device number 3 [ 137.316785][ T6950] loop2: detected capacity change from 0 to 512 [ 137.370215][ T6950] EXT4-fs: Ignoring removed i_version option [ 137.396742][ T6950] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.474: inode #196608: comm syz.2.474: iget: illegal inode # [ 137.452582][ T6950] EXT4-fs (loop2): no journal found [ 137.457873][ T6950] EXT4-fs (loop2): can't get journal size [ 137.474941][ T6950] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 137.507495][ T6950] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 137.556727][ T6950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.578543][ T6948] loop1: detected capacity change from 0 to 32768 [ 137.696235][ T6950] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.474: Logical block already allocated [ 137.727163][ T6948] read_mapping_page failed! [ 137.766756][ T6948] ERROR: (device loop1): txCommit: [ 137.766756][ T6948] [ 137.871759][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.129790][ T6960] Bluetooth: MGMT ver 1.22 [ 138.454507][ T6952] loop0: detected capacity change from 0 to 32768 [ 138.500648][ T6952] [ 138.500648][ T6952] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.500648][ T6952] [ 138.609806][ T31] ERROR: (device loop0): diWrite: ixpxd invalid [ 138.609806][ T31] [ 138.639685][ T31] ERROR: (device loop0): txCommit: [ 138.639685][ T31] [ 138.654158][ T31] jfs_write_inode: jfs_commit_inode failed! [ 138.666205][ T5779] [ 138.666205][ T5779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.666205][ T5779] [ 138.693016][ T5779] [ 138.693016][ T5779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.693016][ T5779] [ 138.769676][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.882320][ T6979] loop0: detected capacity change from 0 to 512 [ 138.914172][ T6979] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.969338][ T6979] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c098, mo2=0002] [ 138.977525][ T6979] System zones: 0-2, 18-18, 34-35 [ 139.019604][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 139.047183][ T6979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.060306][ T6979] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.089609][ T5838] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.139430][ T5838] usb 4-1: config 4 interface 0 has no altsetting 0 [ 139.150729][ T5838] usb 4-1: string descriptor 0 read error: -22 [ 139.157239][ T5838] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 139.189566][ T5838] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 139.253437][ T5838] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 139.320164][ T5838] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.366608][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.373606][ T5838] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 139.397437][ T5838] usb 4-1: media controller created [ 139.408479][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.491'. [ 139.490132][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.505713][ T6972] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 139.574009][ T5838] zl10353_read_register: readreg error (reg=127, ret==0) [ 139.730533][ T5838] usb 4-1: USB disconnect, device number 4 [ 139.945073][ T7002] loop2: detected capacity change from 0 to 512 [ 140.012003][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.025074][ T7002] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.059123][ T7002] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.497: Directory hole found for htree leaf block 0 [ 140.165877][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.662675][ T7027] Zero length message leads to an empty skb [ 140.751895][ T7031] program syz.1.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.785534][ T7033] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 141.125804][ T7043] loop1: detected capacity change from 0 to 2048 [ 141.145629][ T7043] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 141.166902][ T7043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.407115][ T5857] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.518585][ T7056] loop1: detected capacity change from 0 to 2048 [ 141.619819][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 141.647667][ T5857] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 141.676977][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 141.678066][ T7060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.707158][ T5857] usb 3-1: Product: syz [ 141.716819][ T7061] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 141.734063][ T5857] usb 3-1: Manufacturer: syz [ 141.738750][ T5857] usb 3-1: SerialNumber: syz [ 141.764600][ T5857] usb 3-1: config 0 descriptor?? [ 142.143591][ T5838] usb 3-1: USB disconnect, device number 4 [ 142.235672][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 143.104853][ T7073] loop3: detected capacity change from 0 to 32768 [ 143.217275][ T7073] syz.3.531: attempt to access beyond end of device [ 143.217275][ T7073] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 143.290643][ T7073] lbmIODone: I/O error in JFS log [ 143.296476][ T7073] *** Log Format Error ! *** [ 143.351265][ T7073] lmLogInit: exit(-22) [ 143.355676][ T7073] lmLogOpen: exit(-22) [ 144.116076][ T7097] loop1: detected capacity change from 0 to 32768 [ 144.158548][ T7097] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 144.205999][ T7097] JBD2: Ignoring recovery information on journal [ 144.343271][ T7097] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.358373][ T7122] netlink: 'syz.3.545': attribute type 2 has an invalid length. [ 144.525605][ T7097] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 144.569543][ T7097] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 144.599366][ T7097] OCFS2: File system is now read-only. [ 144.609575][ T7097] (syz.1.538,7097,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 144.636995][ T7097] (syz.1.538,7097,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 144.651143][ T7097] (syz.1.538,7097,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 144.663823][ T7097] (syz.1.538,7097,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 144.676641][ T7097] (syz.1.538,7097,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 144.687761][ T7097] (syz.1.538,7097,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 144.699495][ T7097] (syz.1.538,7097,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 144.708556][ T7097] (syz.1.538,7097,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 144.738287][ T7097] (syz.1.538,7097,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 144.747872][ T7097] (syz.1.538,7097,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 144.770974][ T7097] (syz.1.538,7097,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 144.794129][ T7097] (syz.1.538,7097,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 144.806835][ T7097] (syz.1.538,7097,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 144.821524][ T7097] (syz.1.538,7097,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 144.834298][ T7097] (syz.1.538,7097,1):ocfs2_mknod:357 ERROR: status = -30 [ 144.853215][ T7097] (syz.1.538,7097,1):ocfs2_mknod:502 ERROR: status = -30 [ 144.862940][ T7097] (syz.1.538,7097,1):ocfs2_mkdir:659 ERROR: status = -30 [ 144.877168][ T7131] loop3: detected capacity change from 0 to 16 [ 144.934146][ T7097] (syz.1.538,7097,1):ocfs2_remount:666 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 144.947018][ T7131] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.999878][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 144.999894][ T27] audit: type=1800 audit(1779038609.759:19): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.547" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 145.133336][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 145.469490][ T5857] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.681619][ T5857] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 145.704746][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.739263][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.774956][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.787315][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.808712][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.839215][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.864223][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.899295][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.929337][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.937865][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.970254][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.994517][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.003225][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.023419][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.056588][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.077567][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.094341][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.120585][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.132715][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.143323][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.158018][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.167036][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.181211][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.194890][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.208424][ T5857] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.219375][ T5783] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.238965][ T5857] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.248790][ T5857] usb 4-1: Product: syz [ 146.253388][ T5857] usb 4-1: Manufacturer: syz [ 146.258036][ T5857] usb 4-1: SerialNumber: syz [ 146.278264][ T7164] loop0: detected capacity change from 0 to 512 [ 146.285522][ T5857] usb 4-1: config 0 descriptor?? [ 146.301862][ T7164] EXT4-fs: Ignoring removed orlov option [ 146.307630][ T7164] EXT4-fs: Ignoring removed bh option [ 146.321788][ T5857] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.332643][ T7164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.358917][ T7164] EXT4-fs (loop0): orphan cleanup on readonly fs [ 146.379418][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.398642][ T7164] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.559: bg 0: block 248: padding at end of block bitmap is not set [ 146.415306][ T7164] Quota error (device loop0): write_blk: dquota write failed [ 146.421601][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 146.426537][ T7164] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 146.438139][ T7164] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.559: Failed to acquire dquot type 1 [ 146.450083][ T5783] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 146.462370][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 146.476094][ T5783] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 146.493879][ T5783] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 146.510010][ T7164] EXT4-fs (loop0): 1 truncate cleaned up [ 146.529325][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.543463][ T7164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.555710][ T5783] usb 3-1: config 0 descriptor?? [ 146.581900][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 146.593831][ T7158] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.611998][ T28] usb 2-1: config 0 has no interfaces? [ 146.617619][ T28] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 146.653197][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.667827][ T5784] usb 4-1: USB disconnect, device number 5 [ 146.677135][ T28] usb 2-1: config 0 descriptor?? [ 146.687226][ T7164] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 146.723182][ T5784] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 146.737451][ T7164] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.559: Abort forced by user [ 146.757422][ T7164] EXT4-fs (loop0): Remounting filesystem read-only [ 146.764906][ T7164] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 146.773758][ T7164] ext4 filesystem being remounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.797720][ T7164] EXT4-fs: Ignoring removed orlov option [ 146.803788][ T7164] EXT4-fs: Ignoring removed bh option [ 146.809627][ T7164] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.821131][ T7164] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 146.867323][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.944612][ T5838] usb 2-1: USB disconnect, device number 3 [ 147.047808][ T5783] samsung 0003:0419:0600.0006: ignoring exceeding usage max [ 147.070497][ T5783] samsung 0003:0419:0600.0006: hidraw0: USB HID v0.01 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 147.082121][ T7171] loop0: detected capacity change from 0 to 512 [ 147.086232][ T7171] EXT4-fs: Ignoring removed nobh option [ 147.137402][ T7171] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 147.158239][ T7171] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 147.168217][ T7171] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #13: comm syz.0.561: inode has both inline data and extents flags [ 147.234202][ T7171] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.561: couldn't read orphan inode 13 (err -117) [ 147.305557][ T7171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.318614][ T7175] loop3: detected capacity change from 0 to 512 [ 147.331087][ T7175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.355111][ T7175] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.562: Unimplemented hash flags: 0x0001 [ 147.368369][ T7175] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.562: Corrupt directory, running e2fsck is recommended [ 147.390961][ T7175] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.562: path /131/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 147.416277][ T28] usb 3-1: USB disconnect, device number 5 [ 147.464270][ T7171] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 147.563615][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.672170][ T7179] loop0: detected capacity change from 0 to 164 [ 147.672169][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.750385][ T7179] ISOFS: unable to read i-node block [ 147.756320][ T7179] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 147.826033][ T7181] loop3: detected capacity change from 0 to 512 [ 147.847056][ T7181] EXT4-fs: Ignoring removed orlov option [ 147.856568][ T7181] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.868673][ T7181] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.881666][ T7181] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.564: corrupted in-inode xattr: e_value size too large [ 147.897125][ T7181] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.564: couldn't read orphan inode 15 (err -117) [ 147.920440][ T7181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.209930][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 148.232318][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.667654][ T7183] loop1: detected capacity change from 0 to 32768 [ 148.728504][ T7183] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 148.805778][ T7183] JBD2: Ignoring recovery information on journal [ 148.930372][ T7183] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 149.251936][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 149.395406][ T7212] sp0: Synchronizing with TNC [ 149.764792][ T7217] loop1: detected capacity change from 0 to 256 [ 149.794822][ T7198] loop3: detected capacity change from 0 to 32768 [ 149.797682][ T7217] exfat: Deprecated parameter 'namecase' [ 149.893106][ T7217] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 150.420553][ T7228] hsr0: entered promiscuous mode [ 150.789325][ T5783] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 150.832437][ T7237] loop3: detected capacity change from 0 to 512 [ 150.861904][ T7237] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.917686][ T7223] loop2: detected capacity change from 0 to 32768 [ 150.977060][ T7237] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.590: invalid indirect mapped block 9 (level 0) [ 151.003380][ T7223] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.012323][ T5783] usb 1-1: Using ep0 maxpacket: 32 [ 151.034910][ T5783] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 151.039019][ T7237] EXT4-fs (loop3): 1 truncate cleaned up [ 151.053649][ T7237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.061239][ T5783] usb 1-1: config 2 has no interface number 0 [ 151.099473][ T5783] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 151.158030][ T5783] usb 1-1: config 2 interface 88 has no altsetting 0 [ 151.175257][ T7223] XFS (loop2): Ending clean mount [ 151.193171][ T7237] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.207498][ T5783] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 151.229483][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.237576][ T5783] usb 1-1: Product: syz [ 151.242002][ T7237] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 151.260709][ T5784] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 151.277029][ T5783] usb 1-1: Manufacturer: syz [ 151.285758][ T5783] usb 1-1: SerialNumber: syz [ 151.293603][ T5784] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 151.310240][ T7231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.343422][ T5784] XFS (loop2): Unmount and run xfs_repair [ 151.359549][ T5784] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 151.377847][ T5784] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 151.401931][ T5784] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 151.424573][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.429500][ T5784] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 151.457510][ T5784] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 151.489552][ T5784] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 151.509417][ T5784] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.520756][ T5784] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.571377][ T5784] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.587298][ T7231] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.603411][ T7223] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 151.633667][ T7223] XFS (loop2): Failed to initialize disk quotas. [ 151.727111][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 152.034703][ T5783] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 152.057733][ T5783] asix: probe of 1-1:2.88 failed with error -71 [ 152.091897][ T5783] usb 1-1: USB disconnect, device number 3 [ 152.450179][ T7270] tipc: Enabling of bearer rejected, failed to enable media [ 152.511791][ T7272] loop2: detected capacity change from 0 to 512 [ 152.546132][ T7272] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.644995][ T7272] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 152.664740][ T7272] Quota error (device loop2): write_blk: dquota write failed [ 152.672451][ T7272] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 152.682467][ T7272] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.602: Failed to acquire dquot type 0 [ 152.695479][ T7272] EXT4-fs (loop2): 1 truncate cleaned up [ 152.702863][ T7272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.795229][ T7272] Quota error (device loop2): write_blk: dquota write failed [ 152.804397][ T7272] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 152.837440][ T7272] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.602: Failed to acquire dquot type 0 [ 152.968113][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.424353][ T7296] loop2: detected capacity change from 0 to 4096 [ 153.465995][ T7296] ntfs: volume version 3.1. [ 153.490776][ T7296] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 153.549365][ T7296] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 153.600527][ T7296] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 153.642522][ T7308] netlink: 'syz.0.618': attribute type 1 has an invalid length. [ 153.670675][ T7296] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 153.681603][ T5794] Bluetooth: hci1: command tx timeout [ 153.712868][ T7296] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 153.725767][ T7296] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 154.091377][ T7321] loop2: detected capacity change from 0 to 256 [ 154.098815][ T7321] exfat: Deprecated parameter 'utf8' [ 154.107559][ T7321] exfat: Deprecated parameter 'utf8' [ 154.127663][ T7321] exfat: Deprecated parameter 'namecase' [ 154.173709][ T7321] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11c00969, utbl_chksum : 0xe619d30d) [ 154.459608][ T7327] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 154.596338][ T7310] loop1: detected capacity change from 0 to 32768 [ 154.635895][ T7310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.617 (7310) [ 154.724853][ T7310] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.757518][ T7310] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 154.778486][ T7310] BTRFS info (device loop1): setting nodatasum [ 154.792877][ T7310] BTRFS info (device loop1): force zlib compression, level 3 [ 154.810626][ T7310] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 154.859835][ T7310] BTRFS info (device loop1): use lzo compression, level 0 [ 154.889454][ T7310] BTRFS info (device loop1): turning on flush-on-commit [ 154.896503][ T7310] BTRFS info (device loop1): enabling auto defrag [ 154.953932][ T7310] BTRFS info (device loop1): max_inline at 4096 [ 154.980438][ T7310] BTRFS info (device loop1): using free space tree [ 155.233595][ T7310] BTRFS info (device loop1): enabling ssd optimizations [ 155.319399][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.401280][ T7356] loop2: detected capacity change from 0 to 8192 [ 155.433643][ T7356] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.495295][ T7356] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 155.504916][ T7356] REISERFS (device loop2): using ordered data mode [ 155.512218][ T7356] reiserfs: using flush barriers [ 155.527578][ T5838] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 155.546469][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.556214][ T7356] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.606012][ T5838] usb 4-1: config 0 descriptor?? [ 155.630373][ T7356] REISERFS (device loop2): checking transaction log (loop2) [ 155.691766][ T7356] REISERFS (device loop2): Using r5 hash to sort names [ 155.709787][ T7356] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 155.850769][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.872476][ T5838] usb 4-1: string descriptor 0 read error: -71 [ 155.878881][ T5794] Bluetooth: hci3: Malformed LE Event: 0x0d [ 155.902186][ T5838] usb-storage 4-1:0.0: USB Mass Storage device detected [ 155.909266][ T7369] loop0: detected capacity change from 0 to 64 [ 155.976122][ T7356] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "dax=never" [ 155.978864][ T5838] usb-storage 4-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 156.145946][ T5838] usb 4-1: USB disconnect, device number 6 [ 156.616401][ T7381] loop0: detected capacity change from 0 to 256 [ 156.914680][ T7381] FAT-fs (loop0): Directory bread(block 64) failed [ 156.930230][ T7381] FAT-fs (loop0): Directory bread(block 65) failed [ 156.934928][ T7389] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.937173][ T7381] FAT-fs (loop0): Directory bread(block 66) failed [ 156.973885][ T7381] FAT-fs (loop0): Directory bread(block 67) failed [ 156.995502][ T7381] FAT-fs (loop0): Directory bread(block 68) failed [ 157.012361][ T7381] FAT-fs (loop0): Directory bread(block 69) failed [ 157.019069][ T7381] FAT-fs (loop0): Directory bread(block 70) failed [ 157.049614][ T7381] FAT-fs (loop0): Directory bread(block 71) failed [ 157.056710][ T7381] FAT-fs (loop0): Directory bread(block 72) failed [ 157.079122][ T7381] FAT-fs (loop0): Directory bread(block 73) failed [ 157.386938][ T7398] netlink: 240 bytes leftover after parsing attributes in process `syz.3.650'. [ 157.437106][ T7398] netlink: 56 bytes leftover after parsing attributes in process `syz.3.650'. [ 157.709442][ T5783] IPVS: starting estimator thread 0... [ 157.766465][ T7387] loop1: detected capacity change from 0 to 32768 [ 157.829928][ T7409] IPVS: using max 17 ests per chain, 40800 per kthread [ 157.859821][ T7387] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.878619][ T7417] process 'syz.3.657' launched '/dev/fd/3' with NULL argv: empty string added [ 158.063024][ T7387] XFS (loop1): Ending clean mount [ 158.198435][ T27] audit: type=1800 audit(1779038622.959:20): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.645" name="file2" dev="loop1" ino=4423 res=0 errno=0 [ 158.331998][ T7433] loop0: detected capacity change from 0 to 64 [ 158.431599][ T27] audit: type=1800 audit(1779038623.199:21): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.662" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 158.474514][ T5776] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 158.827554][ T7441] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 159.065803][ T7447] loop3: detected capacity change from 0 to 256 [ 159.147694][ T7447] FAT-fs (loop3): Directory bread(block 64) failed [ 159.173342][ T7447] FAT-fs (loop3): Directory bread(block 65) failed [ 159.199075][ T7447] FAT-fs (loop3): Directory bread(block 66) failed [ 159.226238][ T7447] FAT-fs (loop3): Directory bread(block 67) failed [ 159.259540][ T7447] FAT-fs (loop3): Directory bread(block 68) failed [ 159.289313][ T7447] FAT-fs (loop3): Directory bread(block 69) failed [ 159.309621][ T7447] FAT-fs (loop3): Directory bread(block 70) failed [ 159.316244][ T7447] FAT-fs (loop3): Directory bread(block 71) failed [ 159.332993][ T7447] FAT-fs (loop3): Directory bread(block 72) failed [ 159.348682][ T7447] FAT-fs (loop3): Directory bread(block 73) failed [ 159.808997][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.674'. [ 160.138448][ T7468] loop0: detected capacity change from 0 to 4096 [ 160.194007][ T7475] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.306224][ T7468] NILFS (loop0): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=7, cno=549755813889, offset=7, blocknr=0, vblocknr=1845 [ 160.306353][ T7468] NILFS (loop0): error -2 preparing GC: cannot read source blocks [ 160.599326][ T5784] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 160.789897][ T5838] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 160.797646][ T7489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.688'. [ 160.808583][ T7489] tipc: Invalid UDP bearer configuration [ 160.808645][ T7489] tipc: Enabling of bearer rejected, failed to enable media [ 160.821118][ T5784] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 160.835262][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.843809][ T5784] usb 2-1: Product: syz [ 160.848113][ T5784] usb 2-1: Manufacturer: syz [ 160.854050][ T5784] usb 2-1: SerialNumber: syz [ 160.864799][ T5784] usb 2-1: config 0 descriptor?? [ 160.879034][ T5784] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 160.895402][ T5784] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 160.917760][ T5784] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 160.930647][ T5784] usb 2-1: media controller created [ 160.975949][ T5784] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.985976][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 160.998739][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.029306][ T5838] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 161.047735][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.076517][ T5838] usb 1-1: config 0 descriptor?? [ 161.095037][ T7479] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.114701][ T7477] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 161.186843][ T5784] DVB: Unable to find symbol mt352_attach() [ 161.265941][ T5784] DVB: Unable to find symbol nxt6000_attach() [ 161.281234][ T5784] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 161.301557][ T5784] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 161.337998][ T5784] dvb-usb: schedule remote query interval to 1000 msecs. [ 161.358448][ T5784] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 161.373501][ T5784] dvb-usb: bulk message failed: -22 (7/0) [ 161.381935][ T5784] dvb-usb: bulk message failed: -22 (7/0) [ 161.409751][ T5784] usb 2-1: USB disconnect, device number 4 [ 161.474551][ T5784] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 161.565630][ T5838] wacom 0003:056A:4001.0007: unknown main item tag 0x0 [ 161.583110][ T5838] wacom 0003:056A:4001.0007: ignoring exceeding usage max [ 161.594657][ T5838] wacom 0003:056A:4001.0007: unbalanced collection at end of report description [ 161.606875][ T5838] wacom 0003:056A:4001.0007: parse failed [ 161.636364][ T5838] wacom: probe of 0003:056A:4001.0007 failed with error -22 [ 161.809380][ T5784] usb 1-1: USB disconnect, device number 4 [ 162.444671][ T7520] loop0: detected capacity change from 0 to 1024 [ 162.461550][ T7520] EXT4-fs: Ignoring removed bh option [ 162.474035][ T7520] EXT4-fs: Ignoring removed bh option [ 162.522536][ T7520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.539389][ T5784] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.576602][ T7511] loop3: detected capacity change from 0 to 32768 [ 162.617926][ T7520] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.727925][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.750310][ T5784] usb 2-1: Using ep0 maxpacket: 32 [ 162.765381][ T5784] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 162.779295][ T5784] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.797045][ T5784] usb 2-1: config 0 has no interface number 0 [ 162.809619][ T5784] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.828927][ T5784] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 162.848591][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.868522][ T5784] usb 2-1: Product: syz [ 162.876462][ T5784] usb 2-1: Manufacturer: syz [ 162.892666][ T5784] usb 2-1: SerialNumber: syz [ 162.915810][ T5784] usb 2-1: config 0 descriptor?? [ 162.942842][ T5784] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 162.983368][ T5784] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 163.179843][ T5784] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 163.413232][ T5784] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 163.471800][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 163.557997][ T7538] loop2: detected capacity change from 0 to 8 [ 163.671409][ T1195] usb 2-1: USB disconnect, device number 5 [ 163.677846][ T1195] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 163.716951][ T7538] SQUASHFS error: Unable to read directory block [629:46] [ 164.056674][ T7526] loop3: detected capacity change from 0 to 40427 [ 164.073503][ T7526] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 164.094994][ T7526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 164.124059][ T7526] F2FS-fs (loop3): invalid crc value [ 164.339261][ T7526] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.346392][ T7526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.417874][ T7552] loop1: detected capacity change from 0 to 512 [ 164.457328][ T7552] EXT4-fs: Ignoring removed nobh option [ 164.509564][ T7552] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.540864][ T7526] F2FS-fs (loop3): Corrupted max_depth of 3: 513 [ 164.592542][ T7552] EXT4-fs (loop1): 1 truncate cleaned up [ 164.630372][ T7552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.668765][ T7540] loop0: detected capacity change from 0 to 32768 [ 164.744944][ T7540] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 164.778033][ T27] audit: type=1800 audit(1779038629.529:22): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.712" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 164.822209][ T7540] JBD2: Ignoring recovery information on journal [ 164.900882][ T7540] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 164.951518][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.258341][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 165.504103][ T7570] loop2: detected capacity change from 0 to 764 [ 165.765962][ T7576] loop3: detected capacity change from 0 to 128 [ 165.797364][ T7576] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.856266][ T7576] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.011294][ T7584] raw_sendmsg: syz.0.726 forgot to set AF_INET. Fix it! [ 166.139290][ T5857] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.178534][ T7590] loop0: detected capacity change from 0 to 1024 [ 166.278337][ T7590] hfsplus: bad catalog entry type [ 166.346349][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.388288][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.426581][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.430634][ T59] hfsplus: b-tree write err: -5, ino 25 [ 166.455451][ T5857] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.466407][ T59] hfsplus: b-tree write err: -5, ino 4 [ 166.485565][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.492866][ T59] hfsplus: b-tree write err: -5, ino 2 [ 166.517250][ T5857] usb 2-1: config 0 descriptor?? [ 166.713771][ T7602] loop0: detected capacity change from 0 to 128 [ 166.780321][ T7602] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 166.816965][ T7602] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 166.840086][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.849040][ T7605] netlink: 5 bytes leftover after parsing attributes in process `syz.2.736'. [ 166.850653][ T7602] hpfs: You really don't want any checks? You are crazy... [ 166.893763][ T7602] hpfs: hpfs_map_sector(): read error [ 166.905313][ T7602] hpfs: code page support is disabled [ 166.915119][ T7602] hpfs: hpfs_map_4sectors(): unaligned read [ 166.929121][ T7602] hpfs: hpfs_map_4sectors(): unaligned read [ 166.935259][ T7602] hpfs: filesystem error: unable to find root dir [ 166.955488][ T5857] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 166.986005][ T5857] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 167.161046][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.254308][ T5783] usb 2-1: USB disconnect, device number 6 [ 167.359793][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 167.371283][ T5838] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 167.388643][ T5838] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 125, changing to 10 [ 167.408116][ T5838] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 58692, setting to 1024 [ 167.420201][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.426915][ T5838] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 167.436980][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.453492][ T5838] usb 4-1: config 0 descriptor?? [ 167.470600][ T7607] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 167.589390][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.617220][ T7620] loop0: detected capacity change from 0 to 1024 [ 167.626329][ T7620] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.656996][ T7620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.695275][ T7607] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 167.708836][ T5838] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 167.781079][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 167.793827][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.819602][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.834183][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.851404][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 167.880829][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.908507][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.961708][ T9] usb 3-1: config 0 descriptor?? [ 168.095680][ T5783] usb 4-1: USB disconnect, device number 7 [ 168.205130][ T7628] loop1: detected capacity change from 0 to 8 [ 168.390784][ T7632] loop1: detected capacity change from 0 to 8 [ 168.424566][ T9] elecom 0003:056E:010C.0009: report_id 0 is invalid [ 168.450910][ T9] elecom 0003:056E:010C.0009: item 0 0 1 8 parsing failed [ 168.461006][ T9] elecom: probe of 0003:056E:010C.0009 failed with error -22 [ 168.666615][ T9] usb 3-1: USB disconnect, device number 6 [ 169.204009][ T7634] loop0: detected capacity change from 0 to 40427 [ 169.229725][ T7634] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 169.237366][ T7634] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.273704][ T7634] F2FS-fs (loop0): invalid crc value [ 169.287954][ T7634] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.431545][ T7634] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 169.438846][ T7634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.066289][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 170.087624][ T7657] tipc: New replicast peer: 172.30.1.0 [ 170.109539][ T7657] tipc: Enabled bearer , priority 10 [ 170.374616][ T7666] loop2: detected capacity change from 0 to 764 [ 170.405656][ T7666] rock: directory entry would overflow storage [ 170.415006][ T7667] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 170.429853][ T7666] rock: sig=0x5245, size=8, remaining=5 [ 170.445881][ T7667] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 170.468075][ T7667] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 170.487503][ T7667] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 170.501348][ T7667] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 170.529498][ T7666] block device autoloading is deprecated and will be removed. [ 170.551661][ T7667] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 170.562622][ T7666] syz.2.761: attempt to access beyond end of device [ 170.562622][ T7666] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 170.577745][ T7667] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 170.585115][ T7667] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 170.609675][ T7667] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 170.626755][ T7667] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 170.970012][ T7676] tmpfs: Cannot disable swap on remount [ 171.119631][ T5783] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 171.210149][ T7684] loop2: detected capacity change from 0 to 1024 [ 171.320485][ T7684] hfsplus: bad catalog entry type [ 171.328539][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.351710][ T5783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.368115][ T5783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.389373][ T5783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.398733][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.423771][ T7691] IPVS: Error connecting to the multicast addr [ 171.432079][ T2978] hfsplus: b-tree write err: -5, ino 25 [ 171.437953][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 171.448013][ T5783] usb 1-1: config 0 descriptor?? [ 171.461307][ T2978] hfsplus: b-tree write err: -5, ino 2 [ 171.893632][ T5783] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 171.931985][ T5783] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 171.971067][ T1195] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 172.171167][ T5784] usb 1-1: USB disconnect, device number 5 [ 172.184953][ T1195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.207107][ T1195] usb 2-1: not running at top speed; connect to a high speed hub [ 172.235614][ T1195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.259786][ T1195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.273779][ T1195] usb 2-1: string descriptor 0 read error: -22 [ 172.289883][ T1195] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.310786][ T1195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.338960][ T1195] usb 2-1: 0:2 : does not exist [ 172.654513][ T7726] loop3: detected capacity change from 0 to 256 [ 172.751995][ T7726] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 172.975135][ T1195] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 172.998644][ T1195] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.061323][ T1195] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 173.159682][ T5783] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.213210][ T1195] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.261490][ T1195] usb 2-1: USB disconnect, device number 7 [ 173.391938][ T5783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.432161][ T5783] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 173.464117][ T5783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.491083][ T5783] usb 1-1: config 0 descriptor?? [ 173.965925][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.793'. [ 173.975213][ T7761] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 174.143073][ T5783] ath6kl: Failed to read usb control message: -71 [ 174.161882][ T5783] ath6kl: Unable to read the bmi data from the device: -71 [ 174.179316][ T5783] ath6kl: unable to read target info byte count: -71 [ 174.219218][ T5783] ath6kl: Failed to init ath6kl core: -71 [ 174.225672][ T5783] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 174.261423][ T5783] usb 1-1: USB disconnect, device number 6 [ 174.612709][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 174.715901][ T7783] bridge0: entered promiscuous mode [ 174.725892][ T7783] bridge0: port 3(vlan2) entered blocking state [ 174.737035][ T7783] bridge0: port 3(vlan2) entered disabled state [ 174.745437][ T7783] vlan2: entered allmulticast mode [ 174.755658][ T7783] bridge0: entered allmulticast mode [ 174.764411][ T7783] vlan2: left allmulticast mode [ 174.779324][ T7783] bridge0: left allmulticast mode [ 174.817364][ T7783] bridge0: left promiscuous mode [ 175.353361][ T7781] loop3: detected capacity change from 0 to 32768 [ 175.387100][ T7781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.803 (7781) [ 175.448287][ T7781] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.479046][ T7781] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 175.499651][ T7781] BTRFS info (device loop3): force clearing of disk cache [ 175.530089][ T7781] BTRFS info (device loop3): enabling auto defrag [ 175.536651][ T7781] BTRFS info (device loop3): max_inline at 0 [ 175.586619][ T7781] BTRFS info (device loop3): enabling ssd optimizations [ 175.602551][ T7781] BTRFS info (device loop3): using spread ssd allocation scheme [ 175.611657][ T7781] BTRFS info (device loop3): using free space tree [ 175.815645][ T7781] BTRFS info (device loop3): rebuilding free space tree [ 176.007022][ T7832] loop2: detected capacity change from 0 to 16 [ 176.033820][ T7832] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66700) [ 176.220522][ T5778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.509639][ T5791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (5791) [ 176.635833][ T7841] netlink: 104 bytes leftover after parsing attributes in process `syz.2.822'. [ 177.201703][ T7854] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 177.796799][ T7844] loop3: detected capacity change from 0 to 32768 [ 178.536867][ T7877] loop1: detected capacity change from 0 to 4096 [ 178.678938][ T7882] loop0: detected capacity change from 0 to 4096 [ 178.992769][ T7882] ntfs3: loop0: failed to convert "0080" to cp1255 [ 179.065040][ T7882] ntfs3: loop0: failed to convert name for inode 1e. [ 179.078395][ T7870] loop2: detected capacity change from 0 to 32768 [ 179.131451][ T7870] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.837 (7870) [ 179.219885][ T7870] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 179.239301][ T7870] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 179.274074][ T7870] BTRFS info (device loop2): using free space tree [ 179.465544][ T7888] can0: slcan on ttyprintk. [ 179.620344][ T7870] BTRFS info (device loop2): enabling ssd optimizations [ 179.655741][ T7870] BTRFS info (device loop2): auto enabling async discard [ 179.722818][ T7904] loop3: detected capacity change from 0 to 256 [ 179.741672][ T7887] can0 (unregistered): slcan off ttyprintk. [ 179.897128][ T7904] FAT-fs (loop3): Directory bread(block 64) failed [ 179.930776][ T7904] FAT-fs (loop3): Directory bread(block 65) failed [ 179.954154][ T7904] FAT-fs (loop3): Directory bread(block 66) failed [ 179.985744][ T7904] FAT-fs (loop3): Directory bread(block 67) failed [ 180.021912][ T7910] loop0: detected capacity change from 0 to 64 [ 180.031107][ T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.042635][ T7904] FAT-fs (loop3): Directory bread(block 68) failed [ 180.078896][ T7904] FAT-fs (loop3): Directory bread(block 69) failed [ 180.127373][ T7904] FAT-fs (loop3): Directory bread(block 70) failed [ 180.146087][ T7910] hfs: filesystem is marked locked, mounting read-only. [ 180.180937][ T7904] FAT-fs (loop3): Directory bread(block 71) failed [ 180.187669][ T7904] FAT-fs (loop3): Directory bread(block 72) failed [ 180.236312][ T7904] FAT-fs (loop3): Directory bread(block 73) failed [ 180.244191][ T7910] hfs: filesystem is marked locked, leaving read-only. [ 180.283066][ T5780] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 180.317702][ T788] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.339248][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.388407][ T788] usb 2-1: config 0 descriptor?? [ 180.444798][ T788] cp210x 2-1:0.0: cp210x converter detected [ 180.803988][ T5777] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (5777) [ 181.051957][ T7925] Bluetooth: MGMT ver 1.22 [ 181.108519][ T788] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 181.129740][ T788] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 181.160271][ T788] usb 2-1: cp210x converter now attached to ttyUSB0 [ 181.237038][ T788] usb 2-1: USB disconnect, device number 8 [ 181.302254][ T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.348175][ T788] cp210x 2-1:0.0: device disconnected [ 181.459908][ T7930] loop0: detected capacity change from 0 to 128 [ 181.519613][ T7930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 181.594555][ T7930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.177967][ T7937] loop0: detected capacity change from 0 to 4096 [ 182.268647][ T7937] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 182.294003][ T7919] loop2: detected capacity change from 0 to 40427 [ 182.315881][ T7937] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 182.328081][ T7944] loop1: detected capacity change from 0 to 512 [ 182.344433][ T7919] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 182.354616][ T7937] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 182.395231][ T7919] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.408835][ T7944] EXT4-fs: Ignoring removed oldalloc option [ 182.420943][ T7937] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 182.440351][ T7919] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 182.448567][ T7919] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 182.474042][ T7944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.532164][ T7919] F2FS-fs (loop2): Image doesn't support compression [ 182.562747][ T7919] F2FS-fs (loop2): invalid crc value [ 182.578823][ T7937] ntfs: volume version 3.1. [ 182.586086][ T7944] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 182.601548][ T7919] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.638298][ T7944] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 182.647499][ T7944] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.654362][ T7944] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 182.664366][ T7944] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 182.679515][ T7944] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 182.775838][ T7944] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.853: bg 0: block 40: padding at end of block bitmap is not set [ 182.897382][ T7944] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 182.947776][ T7937] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 182.958724][ T7919] F2FS-fs (loop2): Start checkpoint disabled! [ 182.983387][ T7937] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 182.990485][ T7944] EXT4-fs (loop1): 1 truncate cleaned up [ 183.004058][ T7919] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 183.021246][ T7919] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 183.075314][ T7944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 183.325883][ T7944] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.853: bad symlink. [ 183.420048][ T7944] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.853: bad symlink. [ 183.677292][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.878909][ T7953] loop3: detected capacity change from 0 to 32768 [ 183.925377][ T7953] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.856 (7953) [ 183.996774][ T7953] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 184.039014][ T7953] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 184.089550][ T7953] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 184.110594][ T7953] BTRFS info (device loop3): use zstd compression, level 3 [ 184.147682][ T7953] BTRFS info (device loop3): using free space tree [ 184.340683][ T7988] loop2: detected capacity change from 0 to 4096 [ 184.355751][ T7978] loop1: detected capacity change from 0 to 1024 [ 184.407981][ T7988] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 184.420476][ T7988] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 184.448728][ T7953] BTRFS info (device loop3): enabling ssd optimizations [ 184.452828][ T7988] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 184.479242][ T7953] BTRFS info (device loop3): auto enabling async discard [ 184.525621][ T7988] ntfs: volume version 3.1. [ 184.655431][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.787424][ T8005] loop0: detected capacity change from 0 to 128 [ 185.182844][ T5778] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.468420][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.660552][ T5791] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 11 /dev/loop3 scanned by udevd (5791) [ 185.676909][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 185.726217][ T8017] vlan2: entered promiscuous mode [ 185.779549][ T8017] dummy0: entered promiscuous mode [ 185.904662][ T5794] Bluetooth: hci1: link tx timeout [ 185.913476][ T5794] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.541801][ T8036] usb usb8: usbfs: process 8036 (syz.0.878) did not claim interface 0 before use [ 187.057893][ T8045] loop0: detected capacity change from 0 to 4096 [ 187.085472][ T8045] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 187.104953][ T8026] loop2: detected capacity change from 0 to 40427 [ 187.155479][ T8045] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 187.161608][ T8026] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 187.184796][ T8026] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.226426][ T8026] F2FS-fs (loop2): invalid crc value [ 187.271698][ T8026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.449809][ T8026] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.456941][ T8026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.972561][ T8030] loop1: detected capacity change from 0 to 32768 [ 188.010840][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 188.385942][ T8065] loop1: detected capacity change from 0 to 512 [ 188.478410][ T8065] EXT4-fs: Ignoring removed bh option [ 188.507450][ T8065] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.521478][ T8065] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.890: corrupted in-inode xattr: e_value size too large [ 188.635202][ T8065] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.890: couldn't read orphan inode 15 (err -117) [ 188.723690][ T8065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.947910][ T8065] EXT4-fs: old and new quota format mixing [ 189.021496][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.672090][ T8097] ip6gretap0: entered promiscuous mode [ 190.098294][ T8087] loop3: detected capacity change from 0 to 32768 [ 190.142579][ T8087] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.340826][ T8087] XFS (loop3): Ending clean mount [ 190.394104][ T8087] XFS (loop3): Quotacheck needed: Please wait. [ 190.399420][ T8123] (null): rxe_set_mtu: Set mtu to 1024 [ 190.579210][ T8087] XFS (loop3): Quotacheck: Done. [ 190.943597][ T8123] infiniband syz0: set active [ 190.948967][ T8123] infiniband syz0: added bond0 [ 191.072112][ T8123] RDS/IB: syz0: added [ 191.080304][ T8123] smc: adding ib device syz0 with port count 1 [ 191.087023][ T8123] smc: ib device syz0 port 1 has pnetid [ 191.239235][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 191.436104][ T8126] loop2: detected capacity change from 0 to 40427 [ 191.496644][ T8126] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 191.542080][ T8126] F2FS-fs (loop2): invalid crc value [ 191.581262][ T8126] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.719361][ T8126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.930405][ T8126] F2FS-fs (loop2): Unrecognized mount option "nogrpid" or missing value [ 192.136656][ T8148] loop3: detected capacity change from 0 to 64 [ 192.545428][ T8154] loop3: detected capacity change from 0 to 1024 [ 192.647923][ T8157] loop2: detected capacity change from 0 to 1764 [ 192.657106][ T8154] hfsplus: found bad thread record in catalog [ 192.695841][ T5777] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.709686][ T8154] hfsplus: catalog searching failed [ 192.824110][ T31] hfsplus: b-tree write err: -5, ino 4 [ 192.847471][ T31] hfsplus: b-tree write err: -5, ino 2 [ 194.069664][ T8171] loop2: detected capacity change from 0 to 32768 [ 194.214322][ T8179] loop3: detected capacity change from 0 to 32768 [ 194.222070][ T8171] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.297813][ T8196] loop1: detected capacity change from 0 to 512 [ 194.366604][ T8196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.425283][ T8171] XFS (loop2): Ending clean mount [ 194.461267][ T8196] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.602622][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 194.645655][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.659630][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.870268][ T8207] loop0: detected capacity change from 0 to 1024 [ 194.888059][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.103225][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.160413][ T8206] hfsplus: invalid extended attribute record [ 195.240350][ T2915] hfsplus: b-tree write err: -5, ino 8 [ 195.965642][ T8225] pimreg: entered allmulticast mode [ 195.990552][ T8225] pimreg: left allmulticast mode [ 196.232990][ T8216] loop0: detected capacity change from 0 to 40427 [ 196.243022][ T8216] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 196.276054][ T8216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.301221][ T8216] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 196.310901][ T8216] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 196.326516][ T8216] F2FS-fs (loop0): Image doesn't support compression [ 196.340720][ T8218] loop2: detected capacity change from 0 to 32768 [ 196.357971][ T8216] F2FS-fs (loop0): invalid crc value [ 196.399309][ T8220] loop1: detected capacity change from 0 to 32768 [ 196.411219][ T8220] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 196.438702][ T8218] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.462968][ T8216] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.589028][ T8218] XFS (loop2): Ending clean mount [ 196.626448][ T8218] XFS (loop2): Quotacheck needed: Please wait. [ 196.694494][ T8216] F2FS-fs (loop0): Start checkpoint disabled! [ 196.746389][ T5785] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 196.800592][ T8239] loop3: detected capacity change from 0 to 1024 [ 196.825394][ T8216] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 196.833824][ T8218] XFS (loop2): Quotacheck: Done. [ 196.840659][ T8216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 196.873650][ T8239] hfsplus: small file entry [ 197.386103][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.482526][ T49] kworker/u4:3: attempt to access beyond end of device [ 197.482526][ T49] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 197.515250][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.535798][ T49] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 198.279450][ T5783] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 198.392142][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 198.408134][ T8270] loop3: detected capacity change from 0 to 1024 [ 198.472906][ T8269] hfsplus: invalid extended attribute record [ 198.497939][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.540466][ T5783] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 198.566872][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.584416][ T49] hfsplus: b-tree write err: -5, ino 8 [ 198.587864][ T5783] usb 2-1: Product: syz [ 198.594694][ T5783] usb 2-1: Manufacturer: syz [ 198.608865][ T5783] usb 2-1: SerialNumber: syz [ 198.631791][ T5783] usb 2-1: config 0 descriptor?? [ 198.661794][ T5783] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 198.693440][ T8262] loop2: detected capacity change from 0 to 32768 [ 198.730230][ T8262] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 198.779885][ T8277] overlayfs: workdir and upperdir must be separate subtrees [ 198.871180][ T5791] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 199.029089][ T8282] loop3: detected capacity change from 0 to 512 [ 199.105705][ T8282] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.973: inode has both inline data and extents flags [ 199.175095][ T8282] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.973: couldn't read orphan inode 15 (err -117) [ 199.214505][ T8282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.276146][ T5783] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 199.293399][ T5783] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 199.313134][ T8282] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.973: Directory hole found for htree leaf block 0 [ 199.321189][ T5783] usb 2-1: USB disconnect, device number 9 [ 199.453448][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.593444][ T8274] loop0: detected capacity change from 0 to 32768 [ 199.632615][ T8274] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.730136][ T8274] XFS (loop0): Ending clean mount [ 199.757201][ T8274] XFS (loop0): Quotacheck needed: Please wait. [ 199.842857][ T8274] XFS (loop0): Quotacheck: Done. [ 200.021431][ T8299] loop1: detected capacity change from 0 to 256 [ 200.107458][ T8299] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 200.187640][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 200.187657][ T27] audit: type=1800 audit(1779038664.949:23): pid=8299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.977" name="file1" dev="loop1" ino=1048652 res=0 errno=0 [ 200.188180][ T8285] loop2: detected capacity change from 0 to 32768 [ 200.304440][ T8285] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 200.365428][ T5779] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.483834][ T8285] XFS (loop2): Ending clean mount [ 200.641124][ T8316] cgroup: fork rejected by pids controller in /syz1 [ 200.680814][ T8285] XFS (loop2): syz.2.974 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 200.854417][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.218900][ T8326] netlink: 'syz.0.980': attribute type 30 has an invalid length. [ 201.646663][ T1107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.801816][ T1107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.940821][ T1107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.111964][ T1107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.223581][ T8328] loop3: detected capacity change from 0 to 32768 [ 203.017241][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.030618][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.046253][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.059592][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.069522][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 203.077722][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.556465][ T8372] netlink: 'syz.2.1003': attribute type 3 has an invalid length. [ 204.576384][ T8395] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1012'. [ 204.590087][ T8395] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1012'. [ 204.730313][ T8378] loop3: detected capacity change from 0 to 40427 [ 204.747649][ T8378] F2FS-fs (loop3): invalid crc value [ 204.757191][ T8378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.911320][ T8378] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 204.977489][ T8378] F2FS-fs (loop3): Start checkpoint disabled! [ 205.050036][ T8378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 205.166259][ T8406] loop2: detected capacity change from 0 to 64 [ 205.191566][ T5790] Bluetooth: hci0: command tx timeout [ 205.775528][ T2994] kworker/u4:12: attempt to access beyond end of device [ 205.775528][ T2994] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.838567][ T2994] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 206.040476][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 206.132810][ T27] audit: type=1326 audit(1779038670.899:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.2.1023" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59fdb9ce59 code=0x0 [ 206.208626][ T8434] netlink: 'syz.0.1022': attribute type 29 has an invalid length. [ 206.255475][ T8434] netlink: 'syz.0.1022': attribute type 29 has an invalid length. [ 206.293507][ T8435] netlink: 'syz.0.1022': attribute type 29 has an invalid length. [ 206.588635][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.621937][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.649739][ T8354] bridge_slave_0: entered allmulticast mode [ 206.675067][ T8354] bridge_slave_0: entered promiscuous mode [ 206.730966][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.738181][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.763286][ T8354] bridge_slave_1: entered allmulticast mode [ 206.780945][ T8354] bridge_slave_1: entered promiscuous mode [ 206.815705][ T1107] hsr_slave_0: left promiscuous mode [ 206.830993][ T1107] hsr_slave_1: left promiscuous mode [ 206.854029][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.871574][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.893110][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.909333][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.927755][ T1107] bridge_slave_1: left allmulticast mode [ 206.940068][ T1107] bridge_slave_1: left promiscuous mode [ 206.949522][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 206.951603][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 206.964081][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.053877][ T1107] bridge_slave_0: left allmulticast mode [ 207.081629][ T1107] bridge_slave_0: left promiscuous mode [ 207.087508][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.251448][ T1107] veth1_macvtap: left promiscuous mode [ 207.269368][ T5781] Bluetooth: hci0: command tx timeout [ 207.275068][ T1107] veth0_macvtap: left promiscuous mode [ 207.281446][ T1107] veth1_vlan: left promiscuous mode [ 207.287345][ T1107] veth0_vlan: left promiscuous mode [ 207.603190][ T8467] loop0: detected capacity change from 0 to 2048 [ 207.658977][ T8467] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 207.740747][ T8467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.162624][ T8465] loop2: detected capacity change from 0 to 32768 [ 208.282437][ T8475] loop0: detected capacity change from 0 to 4096 [ 208.372504][ T8475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.500287][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.101134][ T8485] loop2: detected capacity change from 0 to 512 [ 209.120064][ T8485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.140627][ T8485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.179691][ T8485] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.220836][ T8485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.1037: Allocating blocks 41-42 which overlap fs metadata [ 209.260771][ T8485] EXT4-fs (loop2): Remounting filesystem read-only [ 209.282515][ T8485] Quota error (device loop2): write_blk: dquota write failed [ 209.290103][ T8485] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 209.300051][ T8485] Quota error (device loop2): write_blk: dquota write failed [ 209.307744][ T8485] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 209.318303][ T8485] EXT4-fs (loop2): 1 truncate cleaned up [ 209.325633][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.352375][ T5781] Bluetooth: hci0: command tx timeout [ 209.426708][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.443585][ T8479] loop0: detected capacity change from 0 to 32768 [ 209.490935][ T8479] (syz.0.1035,8479,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.527419][ T8479] (syz.0.1035,8479,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 209.585703][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 209.628414][ T8479] JBD2: Ignoring recovery information on journal [ 209.685380][ T8479] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 209.753257][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 209.880947][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.956831][ T8493] loop2: detected capacity change from 0 to 2048 [ 210.046200][ T8494] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.106092][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 210.221228][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.555140][ T8496] loop2: detected capacity change from 0 to 4096 [ 210.651368][ T8499] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.732923][ T27] audit: type=1800 audit(1779038675.499:25): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1041" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 211.353532][ T1107] bond0 (unregistering): Released all slaves [ 211.431259][ T5781] Bluetooth: hci0: command tx timeout [ 211.538461][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.602390][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.731982][ T8354] team0: Port device team_slave_0 added [ 211.763597][ T8354] team0: Port device team_slave_1 added [ 211.897230][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.921834][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.999011][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.040273][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.075010][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.128181][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.334843][ T8354] hsr_slave_0: entered promiscuous mode [ 212.345810][ T8354] hsr_slave_1: entered promiscuous mode [ 212.376386][ T8354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.416570][ T8354] Cannot create hsr debugfs directory [ 212.797602][ T8532] loop3: detected capacity change from 0 to 256 [ 212.853767][ T8507] loop2: detected capacity change from 0 to 32768 [ 212.870559][ T8507] XFS: attr2 mount option is deprecated. [ 212.885981][ T8532] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 212.948906][ T8542] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 212.989551][ T8507] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.218578][ T8507] XFS (loop2): Ending clean mount [ 213.230385][ T8542] @0Ù: renamed from bond_slave_1 (while UP) [ 213.291554][ T8507] XFS (loop2): Quotacheck needed: Please wait. [ 213.500975][ T8507] XFS (loop2): Quotacheck: Done. [ 214.417690][ T8568] loop3: detected capacity change from 0 to 2048 [ 214.469713][ T8568] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 214.511781][ T8558] loop0: detected capacity change from 0 to 32768 [ 214.518131][ T8354] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.532323][ T8568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.551728][ T8354] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.573252][ T8354] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.620114][ T8354] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.918187][ T5780] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.015493][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.094714][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.155131][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.162445][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.173259][ T5838] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 215.293117][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.300421][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.405552][ T5838] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.437263][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.504730][ T5838] usb 1-1: config 0 descriptor?? [ 215.547322][ T5838] cp210x 1-1:0.0: cp210x converter detected [ 215.658354][ T8587] loop3: detected capacity change from 0 to 2048 [ 215.712760][ T8587] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 215.774898][ T8587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.921042][ T8592] loop2: detected capacity change from 0 to 2048 [ 215.982833][ T8592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.024158][ T5838] usb 1-1: cp210x converter now attached to ttyUSB0 [ 216.161544][ T8592] overlayfs: upper fs needs to support d_type. [ 216.197897][ T8592] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 216.206502][ T8592] overlayfs: failed to set xattr on upper [ 216.245134][ T8592] overlayfs: ...falling back to redirect_dir=nofollow. [ 216.263717][ T8592] overlayfs: ...falling back to index=off. [ 216.273861][ T5838] usb 1-1: USB disconnect, device number 7 [ 216.293913][ T8592] overlayfs: ...falling back to uuid=null. [ 216.301786][ T5838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.302861][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.364574][ T5838] cp210x 1-1:0.0: device disconnected [ 216.508578][ T8354] veth0_vlan: entered promiscuous mode [ 216.544479][ T8600] loop3: detected capacity change from 0 to 4096 [ 216.564515][ T8354] veth1_vlan: entered promiscuous mode [ 216.667198][ T8600] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 216.675389][ T8354] veth0_macvtap: entered promiscuous mode [ 216.696448][ T8354] veth1_macvtap: entered promiscuous mode [ 216.767732][ T8600] ntfs3: loop3: ino=5, "/" attr_set_size [ 217.364767][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.451288][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.480200][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.499337][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.519185][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.539320][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.568209][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.602178][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.691267][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.759923][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.799170][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.824469][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.861519][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.884961][ T8354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.909531][ T8354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.957492][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.976061][ T8354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.995353][ T8354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.022252][ T8354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.060018][ T8354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.186254][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.264508][ T8633] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 218.292978][ T8633] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 218.306455][ T8633] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 218.383866][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.528965][ T8638] loop0: detected capacity change from 0 to 1024 [ 218.574637][ T8638] hfsplus: failed to load catalog file [ 218.607554][ T5781] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 218.637901][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.663445][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.855495][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.866024][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.884612][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.904125][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.922005][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.934061][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.958853][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.970054][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.196768][ T31] tipc: Disabling bearer [ 219.216427][ T31] tipc: Left network mode [ 219.625907][ T1107] Bluetooth: hci4: Frame reassembly failed (-84) [ 220.963474][ T31] [ 220.965871][ T31] ====================================================== [ 220.973023][ T31] WARNING: possible circular locking dependency detected [ 220.980103][ T31] syzkaller #0 Not tainted [ 220.984557][ T31] ------------------------------------------------------ [ 220.991698][ T31] kworker/u4:2/31 is trying to acquire lock: [ 220.997714][ T31] ffff88805e82cd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 221.007391][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 221.007391][ T31] but task is already holding lock: [ 221.014812][ T31] ffff88801bfa8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 221.025261][ T31] [ 221.025261][ T31] which lock already depends on the new lock. [ 221.025261][ T31] [ 221.035720][ T31] [ 221.035720][ T31] the existing dependency chain (in reverse order) is: [ 221.044783][ T31] [ 221.044783][ T31] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 221.052583][ T31] __mutex_lock+0x136/0xcc0 [ 221.057655][ T31] ieee80211_open+0x144/0x200 [ 221.062887][ T31] __dev_open+0x2cb/0x430 [ 221.067780][ T31] dev_open+0xab/0x190 [ 221.072407][ T31] team_add_slave+0x75f/0x29a0 [ 221.077727][ T31] do_setlink+0xdfe/0x4130 [ 221.082717][ T31] rtnl_newlink+0x17da/0x20a0 [ 221.087945][ T31] rtnetlink_rcv_msg+0x869/0xfa0 [ 221.093432][ T31] netlink_rcv_skb+0x241/0x4d0 [ 221.098752][ T31] netlink_unicast+0x751/0x8d0 [ 221.104067][ T31] netlink_sendmsg+0x8d0/0xbf0 [ 221.109390][ T31] ____sys_sendmsg+0x5ba/0x960 [ 221.114831][ T31] ___sys_sendmsg+0x2a6/0x360 [ 221.120080][ T31] __se_sys_sendmsg+0x1c2/0x2b0 [ 221.125562][ T31] do_syscall_64+0x55/0xb0 [ 221.130572][ T31] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.137047][ T31] [ 221.137047][ T31] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 221.145277][ T31] __lock_acquire+0x2df1/0x7d40 [ 221.150736][ T31] lock_acquire+0x19e/0x420 [ 221.155882][ T31] __mutex_lock+0x136/0xcc0 [ 221.160958][ T31] team_del_slave+0x32/0x1c0 [ 221.166119][ T31] team_device_event+0x28d/0xa20 [ 221.171623][ T31] notifier_call_chain+0x197/0x380 [ 221.177376][ T31] unregister_netdevice_many_notify+0x100d/0x1900 [ 221.184435][ T31] unregister_netdevice_queue+0x32c/0x370 [ 221.190705][ T31] _cfg80211_unregister_wdev+0x16b/0x580 [ 221.196899][ T31] ieee80211_remove_interfaces+0x49e/0x690 [ 221.203263][ T31] ieee80211_unregister_hw+0x5d/0x2a0 [ 221.209183][ T31] mac80211_hwsim_del_radio+0x289/0x480 [ 221.215287][ T31] hwsim_exit_net+0x58d/0x650 [ 221.220513][ T31] cleanup_net+0x70a/0xbb0 [ 221.225475][ T31] process_scheduled_works+0xa5d/0x15d0 [ 221.231571][ T31] worker_thread+0xa55/0xfc0 [ 221.236714][ T31] kthread+0x2fa/0x390 [ 221.241341][ T31] ret_from_fork+0x48/0x80 [ 221.246303][ T31] ret_from_fork_asm+0x11/0x20 [ 221.251626][ T31] [ 221.251626][ T31] other info that might help us debug this: [ 221.251626][ T31] [ 221.261873][ T31] Possible unsafe locking scenario: [ 221.261873][ T31] [ 221.269346][ T31] CPU0 CPU1 [ 221.274751][ T31] ---- ---- [ 221.280155][ T31] lock(&rdev->wiphy.mtx); [ 221.284696][ T31] lock(team->team_lock_key#2); [ 221.292188][ T31] lock(&rdev->wiphy.mtx); [ 221.299245][ T31] lock(team->team_lock_key#2); [ 221.304228][ T31] [ 221.304228][ T31] *** DEADLOCK *** [ 221.304228][ T31] [ 221.312392][ T31] 5 locks held by kworker/u4:2/31: [ 221.317534][ T31] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 221.328450][ T31] #1: ffffc90000a7fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 221.339108][ T31] #2: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 221.348556][ T31] #3: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 221.358440][ T31] #4: ffff88801bfa8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 221.369271][ T31] [ 221.369271][ T31] stack backtrace: [ 221.375197][ T31] CPU: 1 PID: 31 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 221.382592][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.392764][ T31] Workqueue: netns cleanup_net [ 221.397568][ T31] Call Trace: [ 221.400874][ T31] [ 221.403833][ T31] dump_stack_lvl+0x18c/0x250 [ 221.408540][ T31] ? load_image+0x420/0x420 [ 221.413078][ T31] ? show_regs_print_info+0x20/0x20 [ 221.418307][ T31] ? print_circular_bug+0x12b/0x1a0 [ 221.423538][ T31] check_noncircular+0x2fc/0x400 [ 221.428509][ T31] ? print_deadlock_bug+0x5d0/0x5d0 [ 221.433743][ T31] ? lockdep_lock+0xf5/0x230 [ 221.438370][ T31] ? _find_first_zero_bit+0xd3/0x100 [ 221.443693][ T31] __lock_acquire+0x2df1/0x7d40 [ 221.448591][ T31] ? verify_lock_unused+0x140/0x140 [ 221.453826][ T31] ? verify_lock_unused+0x140/0x140 [ 221.459060][ T31] lock_acquire+0x19e/0x420 [ 221.463597][ T31] ? team_del_slave+0x32/0x1c0 [ 221.468385][ T31] ? __might_sleep+0xe0/0xe0 [ 221.473003][ T31] ? read_lock_is_recursive+0x20/0x20 [ 221.478406][ T31] __mutex_lock+0x136/0xcc0 [ 221.482940][ T31] ? team_del_slave+0x32/0x1c0 [ 221.487734][ T31] ? __lock_acquire+0x7d40/0x7d40 [ 221.492786][ T31] ? rcu_is_watching+0x15/0xb0 [ 221.497581][ T31] ? trace_contention_end+0x39/0xe0 [ 221.502801][ T31] ? __mutex_lock+0x315/0xcc0 [ 221.507504][ T31] ? team_del_slave+0x32/0x1c0 [ 221.512292][ T31] ? mutex_lock_nested+0x20/0x20 [ 221.517255][ T31] ? bond_netdev_event+0xeb/0xf20 [ 221.522318][ T31] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 221.527986][ T31] team_del_slave+0x32/0x1c0 [ 221.532608][ T31] team_device_event+0x28d/0xa20 [ 221.537575][ T31] notifier_call_chain+0x197/0x380 [ 221.542730][ T31] unregister_netdevice_many_notify+0x100d/0x1900 [ 221.549185][ T31] ? lock_chain_count+0x20/0x20 [ 221.554077][ T31] ? unregister_netdevice_many+0x20/0x20 [ 221.559779][ T31] ? kernfs_remove_by_name_ns+0x117/0x150 [ 221.565534][ T31] ? __lock_acquire+0x7d40/0x7d40 [ 221.570593][ T31] unregister_netdevice_queue+0x32c/0x370 [ 221.576347][ T31] ? list_netdevice+0x730/0x730 [ 221.581229][ T31] ? kernfs_remove_by_name_ns+0x117/0x150 [ 221.586981][ T31] _cfg80211_unregister_wdev+0x16b/0x580 [ 221.592653][ T31] ieee80211_remove_interfaces+0x49e/0x690 [ 221.598491][ T31] ? ieee80211_do_stop+0x1e20/0x1e20 [ 221.603801][ T31] ? rcu_is_watching+0x15/0xb0 [ 221.608603][ T31] ieee80211_unregister_hw+0x5d/0x2a0 [ 221.614004][ T31] mac80211_hwsim_del_radio+0x289/0x480 [ 221.619579][ T31] ? rhashtable_remove_fast+0xc00/0xc00 [ 221.625162][ T31] hwsim_exit_net+0x58d/0x650 [ 221.629871][ T31] ? hwsim_init_net+0x90/0x90 [ 221.634574][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 221.640415][ T31] cleanup_net+0x70a/0xbb0 [ 221.644861][ T31] ? ops_free_list+0x3b0/0x3b0 [ 221.649651][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.654889][ T31] ? process_scheduled_works+0x96f/0x15d0 [ 221.660636][ T31] ? process_scheduled_works+0x96f/0x15d0 [ 221.666389][ T31] process_scheduled_works+0xa5d/0x15d0 [ 221.671974][ T31] ? worker_attach_to_pool+0x380/0x380 [ 221.677480][ T31] ? assign_work+0x3d2/0x5d0 [ 221.682121][ T31] worker_thread+0xa55/0xfc0 [ 221.686754][ T31] kthread+0x2fa/0x390 [ 221.690847][ T31] ? pr_cont_work+0x560/0x560 [ 221.695553][ T31] ? kthread_blkcg+0xd0/0xd0 [ 221.700170][ T31] ret_from_fork+0x48/0x80 [ 221.704615][ T31] ? kthread_blkcg+0xd0/0xd0 [ 221.709228][ T31] ret_from_fork_asm+0x11/0x20 [ 221.714022][ T31] [ 221.739598][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 221.746558][ T5781] Bluetooth: hci2: command tx timeout [ 221.861772][ T31] team0: Port device wlan1 removed [ 222.883624][ T31] hsr_slave_0: left promiscuous mode [ 222.891403][ T31] hsr_slave_1: left promiscuous mode [ 222.897998][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.910835][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.918781][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.927573][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.937260][ T31] bridge_slave_1: left allmulticast mode [ 222.943511][ T31] bridge_slave_1: left promiscuous mode [ 222.951656][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.961219][ T31] bridge_slave_0: left allmulticast mode [ 222.966919][ T31] bridge_slave_0: left promiscuous mode [ 222.977818][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.994396][ T31] veth1_macvtap: left promiscuous mode [ 223.041108][ T31] veth0_macvtap: left promiscuous mode [ 223.046818][ T31] veth1_vlan: left promiscuous mode [ 223.079517][ T31] veth0_vlan: left promiscuous mode [ 223.473011][ T31] team0 (unregistering): Port device team_slave_1 removed [ 223.508359][ T31] team0 (unregistering): Port device team_slave_0 removed [ 223.544156][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.579052][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.716143][ T31] bond0 (unregistering): Released all slaves [ 224.065998][ T31] IPVS: stop unused estimator thread 0... [ 224.152334][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.190302][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.266993][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.325754][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.445108][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.496311][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.566794][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.636881][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.788680][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.836180][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.878776][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.946264][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.084900][ T31] tipc: Disabling bearer [ 225.092018][ T31] tipc: Disabling bearer [ 225.098749][ T31] tipc: Left network mode [ 226.874078][ T31] hsr_slave_0: left promiscuous mode [ 226.881386][ T31] hsr_slave_1: left promiscuous mode [ 226.887581][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.895572][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.934826][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.951219][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.959048][ T31] bridge_slave_1: left allmulticast mode [ 226.965254][ T31] bridge_slave_1: left promiscuous mode [ 226.971264][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.980794][ T31] bridge_slave_0: left allmulticast mode [ 226.986624][ T31] bridge_slave_0: left promiscuous mode [ 226.992628][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.005993][ T31] hsr_slave_0: left promiscuous mode [ 227.013922][ T31] hsr_slave_1: left promiscuous mode [ 227.021028][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.028477][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.036618][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.045978][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.054567][ T31] bridge_slave_1: left allmulticast mode [ 227.061324][ T31] bridge_slave_1: left promiscuous mode [ 227.067088][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.076651][ T31] bridge_slave_0: left allmulticast mode [ 227.082668][ T31] bridge_slave_0: left promiscuous mode [ 227.088464][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.102890][ T31] hsr_slave_0: left promiscuous mode [ 227.108897][ T31] hsr_slave_1: left promiscuous mode [ 227.117028][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.125594][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.133778][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.141481][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.150349][ T31] bridge_slave_1: left allmulticast mode [ 227.156044][ T31] bridge_slave_1: left promiscuous mode [ 227.162165][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.171772][ T31] bridge_slave_0: left allmulticast mode [ 227.177470][ T31] bridge_slave_0: left promiscuous mode [ 227.183786][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.203002][ T31] veth1_macvtap: left promiscuous mode [ 227.208586][ T31] veth0_macvtap: left promiscuous mode [ 227.216432][ T31] veth1_vlan: left promiscuous mode [ 227.223411][ T31] veth0_vlan: left promiscuous mode [ 227.240331][ T31] veth1_macvtap: left promiscuous mode [ 227.246027][ T31] veth0_macvtap: left promiscuous mode [ 227.252070][ T31] veth1_vlan: left promiscuous mode [ 227.257420][ T31] veth0_vlan: left promiscuous mode [ 227.264851][ T31] veth1_macvtap: left promiscuous mode [ 227.276896][ T31] veth0_macvtap: left promiscuous mode [ 227.283618][ T31] veth1_vlan: left promiscuous mode [ 227.288976][ T31] veth0_vlan: left promiscuous mode [ 227.507934][ T31] infiniband syz0: set down [ 227.527256][ T31] bond0 (unregistering): Released all slaves [ 227.747391][ T31] team0 (unregistering): Port device team_slave_1 removed [ 227.790498][ T31] team0 (unregistering): Port device team_slave_0 removed [ 227.825988][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.864347][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.954885][ T31] bond0 (unregistering): Released all slaves [ 228.165124][ T31] team0 (unregistering): Port device team_slave_1 removed [ 228.201992][ T31] team0 (unregistering): Port device team_slave_0 removed [ 228.231740][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.246482][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.339009][ T31] bond0 (unregistering): Released all slaves [ 228.554868][ T31] team0 (unregistering): Port device team_slave_1 removed [ 228.586231][ T31] team0 (unregistering): Port device team_slave_0 removed [ 228.620924][ T31] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 228.661766][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.743547][ T2966] smc: removing ib device syz0 [ 228.743558][ T31] bond0 (unregistering): Released all slaves [ 228.804520][ T5857] infiniband syz0: ib_query_port failed (-19)