last executing test programs: 2m58.075721071s ago: executing program 2 (id=134): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 2m56.587593715s ago: executing program 2 (id=143): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000006c40)="37c8", 0x2}], 0x2) 2m56.431031888s ago: executing program 2 (id=144): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a4, &(0x7f0000000180)={{@any, 0xffffffff}, @hyper, 0x1, 0x0, 0xfffffffffffffffe, 0x10001, 0x0, 0x80, 0xfffffffe}) 2m56.25984439s ago: executing program 2 (id=145): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0], 0x1, 0x14c, &(0x7f00000001c0)="$eJzszzFLOgEYx/Hf/e+Uf6VRYGANIjR0FOZ1Yk0NGklCelC4NAl2UaAZCdGotDYEjTVYruJbsCwC64SwN9FyW9AUF+cdlGP777PofZ+Hh7v11Z6MMCDCsVYuHR3rlYq+G97SDlPb7+12wu5eAP+H5s7+XQLYt38lwKwBdn7wA3sHRX2xUC7az2YCkAEkx5yuwNkdtVvAaUsQBLMGEbNAZ8ppqrsn/2oxt81IQPjr5551A8zZ9yaddgXgA8Dp9ULLg6xhWZYFPHXczxz05nPW6KYj8yH9XE1NN3xBETn98RZJwZ6/RbuR12ir2e8ZmU0to/ViqrocUyRFife1FyMdr15A2vCdADvC8D0vgiEpB5wJwOVgZt4LfgCd+qdWGl+pu+9QHXH/FPJBTyMfmPgHUYYAIiIiIiIiIiIiIiIiIiKiv/oOAAD//0rtZa4=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x100) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m55.876382926s ago: executing program 2 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x30}}, 0x0) 2m55.263880777s ago: executing program 2 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000000b01"]) 2m54.640099286s ago: executing program 32 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000000b01"]) 7.883789712s ago: executing program 0 (id=1608): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000540)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 7.691695955s ago: executing program 0 (id=1610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x800) 7.460901959s ago: executing program 0 (id=1612): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.356079331s ago: executing program 0 (id=1614): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='+$$+\x00', 0x5, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7.059152715s ago: executing program 0 (id=1625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r1, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0x1, 0xe, "91eb096f5d4949060e7de4c9c1658feb81d7cfca01e3344d70c4f21aab9a0347b176587f714eea23c610cb967d382e96d75c1f116bf2ddd2d26f25fc415c74", 0x37}, 0x60) 6.346136577s ago: executing program 0 (id=1620): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.023638222s ago: executing program 33 (id=1620): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.010184082s ago: executing program 4 (id=1623): r0 = syz_usb_connect_ath9k(0x3, 0x60, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000013000)=ANY=[], 0x0) 3.521274873s ago: executing program 4 (id=1637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.332449156s ago: executing program 4 (id=1639): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x6) listen(r0, 0x1ad72f7) accept4$netrom(r0, 0x0, 0x0, 0x80000) 3.194546828s ago: executing program 4 (id=1642): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000001c0)={[{@ikeep}, {@ikeep}, {@filestreams}, {@uqnoenforce}, {@nolargeio}]}, 0x8, 0x9695, &(0x7f0000012cc0)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.226752843s ago: executing program 1 (id=1647): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000002400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,nls=iso8859-15,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d30783030303030303030372c706172743d3078303030303030303030303030303030322c00ff166d65d16cfb932fb90a29e03c152d6c0cfbf1abebad4cfe2772666948ba92ded3acb6b70084f4de9608826455015212635cbdff8cf6e1485ab9413b3b2086c5c49f7500a0d801dcec1bce"], 0x20, 0x6fe, &(0x7f0000000c00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x39000f3, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4098, 0x1002) 2.045403606s ago: executing program 3 (id=1648): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf25110045"], 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4000) 1.957873117s ago: executing program 1 (id=1649): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) 1.904469879s ago: executing program 4 (id=1650): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f2c666c7573682c008eb4d920a22020bfdff5756435b12a0741fd1d465211f5e7b380a7ee206d42a73a617299a081afae08d58be01e67c53899fbbe703082609ea782556e161a2850300c071e10398738f9ee2d29a732e66c2cd256bd7cdd55b6ff8ce37a4300"/155], 0x1, 0x11ab, &(0x7f0000001280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') syz_fuse_handle_req(r0, &(0x7f0000000980)="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", 0x2000, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0xffffffffffffffff, 0x1) 1.730561332s ago: executing program 3 (id=1651): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe4001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1.151720101s ago: executing program 1 (id=1652): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x1e) 1.109024752s ago: executing program 1 (id=1653): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fadvise64(r0, 0x8000, 0x4101, 0x3) 1.062317692s ago: executing program 5 (id=1621): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffda1, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ee4b3d41b1b"]) syz_usb_control_io(r0, 0x0, 0x0) 875.534875ms ago: executing program 1 (id=1654): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000040)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_continue}, {@errors_continue}, {}, {@uid}, {@quota}, {@uid}, {@usrquota}]}, 0x1, 0x614f, &(0x7f000000ccc0)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 758.986637ms ago: executing program 3 (id=1655): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) 572.048531ms ago: executing program 3 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 291.833315ms ago: executing program 3 (id=1657): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) read$FUSE(r0, 0x0, 0x0) 117.772547ms ago: executing program 3 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 47.702949ms ago: executing program 1 (id=1659): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 4 (id=1660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x40810, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) kernel console output (not intermixed with test programs): .271490][ T8288] FAT-fs (loop4): Directory bread(block 68) failed [ 200.278976][ T8288] FAT-fs (loop4): Directory bread(block 69) failed [ 200.286564][ T8288] FAT-fs (loop4): Directory bread(block 70) failed [ 200.293161][ T8288] FAT-fs (loop4): Directory bread(block 71) failed [ 200.301011][ T8288] FAT-fs (loop4): Directory bread(block 72) failed [ 200.308506][ T8288] FAT-fs (loop4): Directory bread(block 73) failed [ 200.345891][ T8273] loop1: detected capacity change from 0 to 32768 [ 200.368410][ T8273] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.780 (8273) [ 200.388569][ T8273] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.403535][ T8273] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 200.414076][ T8273] BTRFS info (device loop1): setting nodatacow, compression disabled [ 200.423555][ T8273] BTRFS info (device loop1): max_inline at 0 [ 200.430446][ T8273] BTRFS info (device loop1): enabling disk space caching [ 200.439599][ T8273] BTRFS info (device loop1): turning off barriers [ 200.448454][ T8273] BTRFS info (device loop1): turning on flush-on-commit [ 200.457132][ T8273] BTRFS info (device loop1): disabling tree log [ 200.464132][ T8273] BTRFS info (device loop1): force clearing of disk cache [ 200.473599][ T8273] BTRFS info (device loop1): max_inline at 86 [ 200.480840][ T8273] BTRFS info (device loop1): disk space caching is enabled [ 200.545801][ T8273] BTRFS info (device loop1): enabling ssd optimizations [ 200.552928][ T8273] BTRFS info (device loop1): auto enabling async discard [ 200.572812][ T8273] BTRFS info (device loop1): rebuilding free space tree [ 200.599863][ T8273] BTRFS info (device loop1): disabling free space tree [ 200.607419][ T8273] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.617489][ T8273] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.886760][ T5802] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.289324][ T8309] loop3: detected capacity change from 0 to 32768 [ 201.364320][ T8309] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 201.364320][ T8309] [ 201.377586][ T8309] ERROR: (device loop3): remounting filesystem as read-only [ 201.391083][ T8309] ialloc: diAlloc returned -5! [ 201.946917][ T8346] loop1: detected capacity change from 0 to 256 [ 202.007630][ T8346] FAT-fs (loop1): Directory bread(block 64) failed [ 202.014335][ T8346] FAT-fs (loop1): Directory bread(block 65) failed [ 202.033739][ T8346] FAT-fs (loop1): Directory bread(block 66) failed [ 202.041562][ T8346] FAT-fs (loop1): Directory bread(block 67) failed [ 202.051256][ T8346] FAT-fs (loop1): Directory bread(block 68) failed [ 202.075520][ T8346] FAT-fs (loop1): Directory bread(block 69) failed [ 202.086143][ T8346] FAT-fs (loop1): Directory bread(block 70) failed [ 202.103055][ T8346] FAT-fs (loop1): Directory bread(block 71) failed [ 202.113280][ T8346] FAT-fs (loop1): Directory bread(block 72) failed [ 202.125513][ T8346] FAT-fs (loop1): Directory bread(block 73) failed [ 202.324434][ T8340] loop4: detected capacity change from 0 to 32768 [ 202.349298][ T8340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.802 (8340) [ 202.393561][ T8340] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.414466][ T8340] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 202.429395][ T8340] BTRFS info (device loop4): setting nodatacow, compression disabled [ 202.439781][ T8340] BTRFS info (device loop4): max_inline at 0 [ 202.450828][ T8340] BTRFS info (device loop4): enabling disk space caching [ 202.458456][ T8340] BTRFS info (device loop4): turning off barriers [ 202.470816][ T8340] BTRFS info (device loop4): turning on flush-on-commit [ 202.478014][ T8340] BTRFS info (device loop4): disabling tree log [ 202.484504][ T8340] BTRFS info (device loop4): force clearing of disk cache [ 202.503997][ T8340] BTRFS info (device loop4): max_inline at 86 [ 202.511629][ T8340] BTRFS info (device loop4): disk space caching is enabled [ 202.625465][ T8340] BTRFS info (device loop4): enabling ssd optimizations [ 202.632590][ T8340] BTRFS info (device loop4): auto enabling async discard [ 202.654251][ T8340] BTRFS info (device loop4): rebuilding free space tree [ 202.691490][ T8340] BTRFS info (device loop4): disabling free space tree [ 202.701831][ T8340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.716152][ T8340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.730521][ T8348] loop0: detected capacity change from 0 to 32768 [ 202.748407][ T8348] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 202.788879][ T8348] XFS (loop0): Ending clean mount [ 202.801930][ T8348] XFS (loop0): Quotacheck needed: Please wait. [ 202.839972][ T8348] XFS (loop0): Quotacheck: Done. [ 202.902990][ T6297] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.071838][ T8383] loop3: detected capacity change from 0 to 4096 [ 203.082361][ T5798] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 203.195460][ T1990] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.302750][ T8385] /dev/loop0: Can't open blockdev [ 203.405468][ T1990] usb 2-1: Using ep0 maxpacket: 8 [ 203.417485][ T1990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.430957][ T1990] usb 2-1: config 7 has an invalid interface number: 3 but max is 1 [ 203.442635][ T1990] usb 2-1: config 7 has an invalid interface number: 86 but max is 1 [ 203.455419][ T1990] usb 2-1: config 7 has no interface number 0 [ 203.461910][ T1990] usb 2-1: config 7 has no interface number 1 [ 203.471614][ T1990] usb 2-1: config 7 interface 86 altsetting 239 endpoint 0xA has invalid maxpacket 479, setting to 64 [ 203.485003][ T1990] usb 2-1: config 7 interface 86 altsetting 239 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 203.496883][ T1990] usb 2-1: config 7 interface 86 has no altsetting 0 [ 203.506299][ T1990] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=55.45 [ 203.515596][ T1990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.523627][ T1990] usb 2-1: Product: syz [ 203.528248][ T1990] usb 2-1: Manufacturer: syz [ 203.533042][ T1990] usb 2-1: SerialNumber: syz [ 203.769433][ T1990] usb 2-1: USB disconnect, device number 10 [ 204.515015][ T8398] loop1: detected capacity change from 0 to 256 [ 204.520634][ T8397] loop4: detected capacity change from 0 to 512 [ 204.536089][ T8397] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.542691][ T8397] EXT4-fs: Ignoring removed bh option [ 204.551429][ T8397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.569256][ T8397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.600810][ T8397] EXT4-fs (loop4): 1 truncate cleaned up [ 204.631257][ T8397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.725086][ T28] audit: type=1800 audit(1753775307.668:69): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.818" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 204.808502][ T8406] loop0: detected capacity change from 0 to 512 [ 204.846727][ T8406] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 204.941434][ T8401] loop3: detected capacity change from 0 to 32768 [ 204.950480][ T8401] (syz.3.822,8401,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coher.5-°N-°l" or missing value [ 204.963116][ T8401] (syz.3.822,8401,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 204.983044][ T6297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.243971][ T8413] loop0: detected capacity change from 0 to 8192 [ 205.259466][ T8413] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.287726][ T8413] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 205.299794][ T8413] REISERFS (device loop0): using ordered data mode [ 205.306512][ T8413] reiserfs: using flush barriers [ 205.328181][ T8413] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.366682][ T8413] REISERFS (device loop0): checking transaction log (loop0) [ 205.387431][ T8413] REISERFS (device loop0): Using r5 hash to sort names [ 205.394840][ T8413] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 205.506165][ T8408] loop1: detected capacity change from 0 to 32768 [ 205.590910][ T8418] loop3: detected capacity change from 0 to 64 [ 205.643909][ T111] blkno = 8ed2c, nblocks = 1 [ 205.651697][ T28] audit: type=1800 audit(1753775308.598:70): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.828" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 205.655360][ T111] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 205.655360][ T111] [ 205.689290][ T111] ERROR: (device loop1): remounting filesystem as read-only [ 205.697054][ T111] JFS: metapage_get_blocks failed [ 205.702415][ T111] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 205.702415][ T111] [ 205.716735][ T111] blkno = 8ed2c, nblocks = 1 [ 205.735452][ T111] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 205.735452][ T111] [ 205.916631][ T8426] loop0: detected capacity change from 0 to 2048 [ 205.943396][ T8426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.031360][ T8432] loop4: detected capacity change from 0 to 512 [ 206.045526][ T8432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.077557][ T8432] EXT4-fs (loop4): 1 truncate cleaned up [ 206.096744][ T8432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.209128][ T6297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.410868][ T8444] team_slave_0: entered promiscuous mode [ 206.417041][ T8444] team_slave_1: entered promiscuous mode [ 206.426855][ T8444] macsec3: entered promiscuous mode [ 206.432620][ T8444] team0: entered promiscuous mode [ 206.441093][ T8444] team0: Device macsec3 is already an upper device of the team interface [ 206.451241][ T8444] team0: left promiscuous mode [ 206.458328][ T8444] team_slave_0: left promiscuous mode [ 206.463869][ T8444] team_slave_1: left promiscuous mode [ 206.648534][ T8446] program syz.3.841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.800786][ T8454] loop3: detected capacity change from 0 to 256 [ 207.027872][ T8464] loop4: detected capacity change from 0 to 764 [ 207.326529][ T8462] loop1: detected capacity change from 0 to 32768 [ 207.340887][ T8462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.848 (8462) [ 207.362403][ T8462] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.383248][ T8462] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 207.392413][ T8462] BTRFS info (device loop1): setting nodatacow, compression disabled [ 207.409576][ T8462] BTRFS info (device loop1): max_inline at 0 [ 207.416062][ T8462] BTRFS info (device loop1): enabling disk space caching [ 207.423275][ T8462] BTRFS info (device loop1): turning off barriers [ 207.434579][ T8462] BTRFS info (device loop1): turning on flush-on-commit [ 207.442839][ T8462] BTRFS info (device loop1): disabling tree log [ 207.452047][ T8462] BTRFS info (device loop1): force clearing of disk cache [ 207.461934][ T8462] BTRFS info (device loop1): max_inline at 86 [ 207.469517][ T8462] BTRFS info (device loop1): disk space caching is enabled [ 207.575496][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.591514][ T8462] BTRFS info (device loop1): enabling ssd optimizations [ 207.609412][ T8462] BTRFS info (device loop1): auto enabling async discard [ 207.632797][ T8462] BTRFS info (device loop1): rebuilding free space tree [ 207.671508][ T8462] BTRFS info (device loop1): disabling free space tree [ 207.678682][ T8462] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 207.691589][ T8462] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 207.725402][ T8496] team_slave_0: entered promiscuous mode [ 207.731228][ T8496] team_slave_1: entered promiscuous mode [ 207.741955][ T8496] macsec1: entered promiscuous mode [ 207.747406][ T8496] team0: entered promiscuous mode [ 207.754610][ T8496] team0: Device macsec1 is already an upper device of the team interface [ 207.770627][ T8496] team0: left promiscuous mode [ 207.777958][ T8496] team_slave_0: left promiscuous mode [ 207.783534][ T8496] team_slave_1: left promiscuous mode [ 207.815577][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 207.824660][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.833806][ T9] usb 4-1: config 0 has no interface number 0 [ 207.844803][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 207.854252][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.862592][ T9] usb 4-1: Product: syz [ 207.866970][ T9] usb 4-1: Manufacturer: syz [ 207.871697][ T9] usb 4-1: SerialNumber: syz [ 207.878961][ T9] usb 4-1: config 0 descriptor?? [ 207.887648][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.926952][ T5802] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.053739][ T8499] loop4: detected capacity change from 0 to 1024 [ 208.329878][ T8504] loop0: detected capacity change from 0 to 64 [ 208.415106][ T28] audit: type=1800 audit(1753775311.348:71): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.862" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 208.484222][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 208.528523][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 208.634614][ T8508] loop4: detected capacity change from 0 to 8192 [ 208.643996][ T8508] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 208.663812][ T8508] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 208.698276][ T8508] REISERFS (device loop4): using ordered data mode [ 208.717086][ T8508] reiserfs: using flush barriers [ 208.734188][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 208.745466][ T9] usb 4-1: USB disconnect, device number 6 [ 208.762273][ T8508] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 208.780716][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 208.803859][ T8508] REISERFS (device loop4): checking transaction log (loop4) [ 208.815503][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 208.827974][ T9] quatech2 4-1:0.51: device disconnected [ 208.837916][ T8508] REISERFS (device loop4): Using r5 hash to sort names [ 208.853122][ T8508] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 209.295020][ T8528] team_slave_0: entered promiscuous mode [ 209.300992][ T8528] team_slave_1: entered promiscuous mode [ 209.310253][ T8528] macsec1: entered promiscuous mode [ 209.319165][ T8528] team0: entered promiscuous mode [ 209.329663][ T8530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 209.330214][ T8528] team0: Device macsec1 is already an upper device of the team interface [ 209.353060][ T8528] team0: left promiscuous mode [ 209.358963][ T8528] team_slave_0: left promiscuous mode [ 209.364594][ T8528] team_slave_1: left promiscuous mode [ 209.418323][ T8532] loop3: detected capacity change from 0 to 512 [ 209.451847][ T8532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.467284][ T8532] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.590071][ T8537] loop1: detected capacity change from 0 to 1024 [ 209.598666][ T8537] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.626168][ T8538] loop0: detected capacity change from 0 to 256 [ 209.629505][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.650324][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.821817][ T8537] EXT4-fs error (device loop1): ext4_xattr_block_list:768: inode #15: comm syz.1.874: corrupted xattr block 161: invalid header [ 209.844741][ T8537] EXT4-fs (loop1): Remounting filesystem read-only [ 209.899617][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.207238][ T8553] ALSA: mixer_oss: invalid OSS volume '' [ 210.435605][ T8560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 210.455944][ T8558] loop1: detected capacity change from 0 to 512 [ 210.468020][ T8561] loop4: detected capacity change from 0 to 1024 [ 210.499777][ T8561] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 210.515826][ T8561] System zones: 0-1, 3-36 [ 210.521933][ T8558] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 210.554287][ T8545] loop3: detected capacity change from 0 to 32768 [ 210.600228][ T8561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.736226][ T8561] EXT4-fs (loop4): shut down requested (2) [ 210.801942][ T111] blkno = 8ed2c, nblocks = 1 [ 210.818515][ T6297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.835820][ T111] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 210.835820][ T111] [ 210.847734][ T3478] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 210.860074][ T111] ERROR: (device loop3): remounting filesystem as read-only [ 210.875406][ T3478] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 210.875611][ T111] JFS: metapage_get_blocks failed [ 210.905422][ T111] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 210.905422][ T111] [ 210.929236][ T111] blkno = 8ed2c, nblocks = 1 [ 210.933907][ T111] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 210.933907][ T111] [ 212.121856][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 212.123270][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 212.133932][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 212.165442][ T5849] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.345650][ T5849] usb 4-1: Using ep0 maxpacket: 8 [ 212.353647][ T5849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.367009][ T5849] usb 4-1: config 7 has an invalid interface number: 3 but max is 1 [ 212.381972][ T5849] usb 4-1: config 7 has an invalid interface number: 86 but max is 1 [ 212.400646][ T5849] usb 4-1: config 7 has no interface number 0 [ 212.403600][ T8587] loop4: detected capacity change from 0 to 32768 [ 212.413667][ T5849] usb 4-1: config 7 has no interface number 1 [ 212.425573][ T5849] usb 4-1: config 7 interface 86 altsetting 239 endpoint 0xA has invalid maxpacket 479, setting to 64 [ 212.437621][ T8587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.896 (8587) [ 212.450107][ T5849] usb 4-1: config 7 interface 86 altsetting 239 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 212.450143][ T5849] usb 4-1: config 7 interface 86 has no altsetting 0 [ 212.459660][ T5849] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=55.45 [ 212.496050][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.505186][ T8587] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.516195][ T5849] usb 4-1: Product: syz [ 212.520415][ T5849] usb 4-1: Manufacturer: syz [ 212.525050][ T5849] usb 4-1: SerialNumber: syz [ 212.530705][ T8587] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 212.557716][ T8587] BTRFS info (device loop4): using free space tree [ 212.559623][ T8591] loop0: detected capacity change from 0 to 32768 [ 212.630052][ T8587] BTRFS info (device loop4): enabling ssd optimizations [ 212.639332][ T8587] BTRFS info (device loop4): auto enabling async discard [ 212.718856][ T112] blkno = 8ed2c, nblocks = 1 [ 212.723576][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 212.723576][ T112] [ 212.736114][ T6297] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.747008][ T112] ERROR: (device loop0): remounting filesystem as read-only [ 212.754890][ T112] JFS: metapage_get_blocks failed [ 212.771452][ T112] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 212.771452][ T112] [ 212.793739][ T112] blkno = 8ed2c, nblocks = 1 [ 212.827220][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 212.827220][ T112] [ 212.854616][ T5849] usb 4-1: USB disconnect, device number 7 [ 214.407618][ T8638] loop4: detected capacity change from 0 to 32768 [ 214.461906][ T8662] sp0: Synchronizing with TNC [ 214.554616][ T112] blkno = 8ed2c, nblocks = 1 [ 214.560566][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 214.560566][ T112] [ 214.574278][ T112] ERROR: (device loop4): remounting filesystem as read-only [ 214.582870][ T112] JFS: metapage_get_blocks failed [ 214.596125][ T112] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 214.596125][ T112] [ 214.611224][ T112] blkno = 8ed2c, nblocks = 1 [ 214.617724][ T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 214.617724][ T112] [ 214.672891][ T8670] loop3: detected capacity change from 0 to 1024 [ 214.702756][ T8670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 214.711438][ T8670] System zones: 0-1, 3-36 [ 214.724173][ T8670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.784493][ T8670] EXT4-fs (loop3): shut down requested (2) [ 214.870507][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.889333][ T48] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 214.903451][ T48] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 214.960050][ T8681] loop1: detected capacity change from 0 to 4096 [ 214.981918][ T8681] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 215.101597][ T8681] ntfs3: loop1: ino=0, attr_set_size [ 215.120379][ T8681] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 215.226780][ T8681] ntfs3: loop1: ino=0, attr_set_size [ 215.429195][ T8699] capability: warning: `syz.4.927' uses deprecated v2 capabilities in a way that may be insecure [ 215.429574][ T8697] sp0: Synchronizing with TNC [ 216.995504][ T787] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 217.136692][ T8757] loop1: detected capacity change from 0 to 32768 [ 217.182284][ T8757] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 217.193258][ T787] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 217.201889][ T787] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 217.210569][ T787] usb 1-1: config 0 has no interface number 0 [ 217.216888][ T787] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 217.229026][ T787] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.240335][ T787] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 217.249805][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.262426][ T787] usb 1-1: config 0 descriptor?? [ 217.300079][ T8757] XFS (loop1): Ending clean mount [ 217.396632][ T5802] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 217.880940][ T787] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input17 [ 217.907218][ T787] input: failed to attach handler kbd to device input17, error: -5 [ 218.119403][ T5849] usb 1-1: USB disconnect, device number 8 [ 218.169815][ T8806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.253188][ T8808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.284569][ T8812] loop1: detected capacity change from 0 to 64 [ 218.723050][ T8811] loop3: detected capacity change from 0 to 32768 [ 218.779192][ T8823] loop4: detected capacity change from 0 to 256 [ 218.785953][ T8811] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 218.832986][ T8823] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 219.005096][ T8811] XFS (loop3): Ending clean mount [ 219.099539][ T5789] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 219.289545][ T8815] loop1: detected capacity change from 0 to 40427 [ 219.320817][ T8815] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 219.328773][ T8815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 219.414219][ T8815] F2FS-fs (loop1): Found nat_bits in checkpoint [ 219.472264][ T8843] __sock_release: fasync list not empty! [ 219.528818][ T8815] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 219.541028][ T8815] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 219.757395][ T5802] syz-executor: attempt to access beyond end of device [ 219.757395][ T5802] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.805993][ T5802] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 220.085583][ T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 220.305531][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 220.335554][ T9] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 220.343993][ T9] usb 4-1: config 0 has no interface number 0 [ 220.365760][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 220.395365][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.415500][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 220.424619][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.458916][ T9] usb 4-1: config 0 descriptor?? [ 220.479470][ T8857] loop0: detected capacity change from 0 to 32768 [ 220.489581][ T8857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1001 (8857) [ 220.526956][ T8857] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.556245][ T8857] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 220.565042][ T8857] BTRFS info (device loop0): using free space tree [ 220.723736][ T8857] BTRFS info (device loop0): enabling ssd optimizations [ 220.744224][ T8857] BTRFS info (device loop0): auto enabling async discard [ 220.946975][ T8865] loop1: detected capacity change from 0 to 40427 [ 220.970188][ T8865] F2FS-fs (loop1): invalid crc value [ 221.008973][ T8865] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.049998][ T3478] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 221.093388][ T8863] loop4: detected capacity change from 0 to 32768 [ 221.103537][ T9] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input18 [ 221.115928][ T8863] XFS: ikeep mount option is deprecated. [ 221.121679][ T8863] XFS: ikeep mount option is deprecated. [ 221.131839][ T9] input: failed to attach handler kbd to device input18, error: -5 [ 221.144363][ T8865] F2FS-fs (loop1): Start checkpoint disabled! [ 221.158310][ T8865] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 221.173409][ T8863] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.246911][ T5798] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.282095][ T8863] XFS (loop4): Ending clean mount [ 221.324640][ T8863] XFS (loop4): Quotacheck needed: Please wait. [ 221.374401][ T1990] usb 4-1: USB disconnect, device number 8 [ 221.464382][ T8863] XFS (loop4): Quotacheck: Done. [ 221.514497][ T3450] kworker/u4:7: attempt to access beyond end of device [ 221.514497][ T3450] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 221.530136][ T3450] kworker/u4:7: attempt to access beyond end of device [ 221.530136][ T3450] loop1: rw=1, sector=45112, nr_sectors = 8 limit=40427 [ 221.569890][ T48] kworker/u4:3: attempt to access beyond end of device [ 221.569890][ T48] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 221.594721][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 221.638810][ T48] kworker/u4:3: attempt to access beyond end of device [ 221.638810][ T48] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 221.661686][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 221.836662][ T6297] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.812698][ T8920] loop3: detected capacity change from 0 to 32768 [ 222.820701][ T8920] XFS: ikeep mount option is deprecated. [ 222.826666][ T8920] XFS: ikeep mount option is deprecated. [ 222.841788][ T8920] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.898137][ T8920] XFS (loop3): Ending clean mount [ 222.905970][ T8920] XFS (loop3): Quotacheck needed: Please wait. [ 222.943097][ T8920] XFS (loop3): Quotacheck: Done. [ 223.015648][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.315779][ T5841] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 223.522883][ T5841] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 223.550405][ T5841] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 223.570713][ T5841] usb 5-1: config 0 has no interface number 0 [ 223.586421][ T5841] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 223.605442][ T5841] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.625900][ T5841] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 223.635121][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.671139][ T5841] usb 5-1: config 0 descriptor?? [ 223.713729][ T8934] loop3: detected capacity change from 0 to 32768 [ 223.740474][ T8934] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 223.771242][ T8934] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 223.788228][ T8934] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 223.799681][ T8934] OCFS2: File system is now read-only. [ 223.805200][ T8934] (syz.3.1019,8934,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 223.815438][ T8934] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 223.832097][ T8934] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 223.842259][ T8934] (syz.3.1019,8934,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 223.843871][ T8947] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 223.850473][ T8934] (syz.3.1019,8934,1):ocfs2_mknod:502 ERROR: status = -30 [ 223.850508][ T8934] (syz.3.1019,8934,1):ocfs2_create:676 ERROR: status = -30 [ 223.892417][ T8947] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 223.902826][ T8947] (syz.3.1019,8947,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 223.911045][ T8947] (syz.3.1019,8947,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 223.919726][ T8947] (syz.3.1019,8947,1):ocfs2_fiemap:776 ERROR: status = -30 [ 223.961396][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 224.303621][ T5841] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input19 [ 224.315143][ T5841] input: failed to attach handler kbd to device input19, error: -5 [ 224.526300][ T5841] usb 5-1: USB disconnect, device number 5 [ 225.110826][ T8949] loop1: detected capacity change from 0 to 512 [ 225.175770][ T8949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.336673][ T8961] loop4: detected capacity change from 0 to 256 [ 225.354717][ T8949] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 225.365083][ T8961] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.519690][ T8954] loop3: detected capacity change from 0 to 32768 [ 225.528198][ T8954] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1036 (8954) [ 225.551670][ T8954] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.572251][ T8954] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 225.582707][ T8954] BTRFS info (device loop3): setting nodatacow, compression disabled [ 225.591017][ T8954] BTRFS info (device loop3): max_inline at 0 [ 225.597552][ T8954] BTRFS info (device loop3): enabling disk space caching [ 225.604947][ T8954] BTRFS info (device loop3): turning off barriers [ 225.627379][ T8954] BTRFS info (device loop3): turning on flush-on-commit [ 225.630775][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.634393][ T8954] BTRFS info (device loop3): doing ref verification [ 225.651507][ T8954] BTRFS info (device loop3): force clearing of disk cache [ 225.659830][ T8954] BTRFS info (device loop3): enabling ssd optimizations [ 225.667565][ T8954] BTRFS info (device loop3): max_inline at 4096 [ 225.673871][ T8954] BTRFS info (device loop3): disk space caching is enabled [ 225.790089][ T8954] BTRFS info (device loop3): auto enabling async discard [ 225.811333][ T8954] BTRFS info (device loop3): rebuilding free space tree [ 225.832724][ T8954] BTRFS info (device loop3): disabling free space tree [ 225.846913][ T8954] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.861581][ T8954] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.014858][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.205449][ T1990] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 226.393806][ T8998] loop3: detected capacity change from 0 to 512 [ 226.404772][ T8998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.428065][ T1990] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 226.436917][ T1990] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 226.445260][ T1990] usb 2-1: config 0 has no interface number 0 [ 226.452982][ T1990] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 226.463915][ T1990] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.468194][ T8998] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 226.475153][ T1990] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 226.500190][ T1990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.513030][ T1990] usb 2-1: config 0 descriptor?? [ 226.589482][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.661091][ T9001] loop3: detected capacity change from 0 to 256 [ 226.669458][ T9001] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.103443][ T9011] loop3: detected capacity change from 0 to 2048 [ 227.114134][ T9011] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.162775][ T1990] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input20 [ 227.174721][ T9017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.194731][ T1990] input: failed to attach handler kbd to device input20, error: -5 [ 227.422376][ T787] usb 2-1: USB disconnect, device number 11 [ 227.477278][ T9027] loop4: detected capacity change from 0 to 512 [ 227.522369][ T9027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.620660][ T9027] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 227.754786][ T6297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.810614][ T9023] loop3: detected capacity change from 0 to 32768 [ 227.819682][ T9023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1053 (9023) [ 227.834621][ T9023] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 227.845161][ T9023] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 227.854097][ T9023] BTRFS info (device loop3): setting nodatacow, compression disabled [ 227.863862][ T9023] BTRFS info (device loop3): enabling ssd optimizations [ 227.871086][ T9023] BTRFS info (device loop3): setting datacow [ 227.877876][ T9023] BTRFS info (device loop3): doing ref verification [ 227.884535][ T9023] BTRFS info (device loop3): force clearing of disk cache [ 227.891983][ T9023] BTRFS info (device loop3): turning off barriers [ 227.898962][ T9023] BTRFS info (device loop3): using spread ssd allocation scheme [ 227.907491][ T9023] BTRFS info (device loop3): using free space tree [ 227.934345][ T9023] BTRFS info (device loop3): auto enabling async discard [ 227.943118][ T9023] BTRFS info (device loop3): rebuilding free space tree [ 228.056967][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 228.072414][ T9048] netlink: 'syz.4.1057': attribute type 18 has an invalid length. [ 228.083350][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 228.101708][ T9052] loop1: detected capacity change from 0 to 256 [ 228.107336][ T9050] loop0: detected capacity change from 0 to 2048 [ 228.122375][ T9052] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.143163][ T9050] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.177497][ T9050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.330850][ T9050] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 9: comm syz.0.1067: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 228.362627][ T9050] EXT4-fs (loop0): Remounting filesystem read-only [ 228.386190][ T5789] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.460453][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.271005][ T9078] loop1: detected capacity change from 0 to 1024 [ 229.291186][ T9078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.310649][ T9078] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.339924][ T9078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 229.380327][ T9078] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.1070: lblock 2 mapped to illegal pblock 2 (length 1) [ 229.399472][ T9078] EXT4-fs (loop1): Remounting filesystem read-only [ 229.412700][ T9078] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 229.445506][ T9078] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 229.454516][ T9078] EXT4-fs (loop1): 1 orphan inode deleted [ 229.462273][ T9078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.562525][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.685879][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 229.709148][ T9088] netlink: 'syz.1.1072': attribute type 18 has an invalid length. [ 229.735734][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'. [ 229.908886][ T9076] loop0: detected capacity change from 0 to 40427 [ 229.925251][ T9076] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 229.933616][ T9076] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 229.958144][ T9076] F2FS-fs (loop0): invalid crc value [ 230.091206][ T9076] F2FS-fs (loop0): Start checkpoint disabled! [ 230.116970][ T9076] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 230.124105][ T9076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 230.186092][ T28] audit: type=1800 audit(1753775333.128:72): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1069" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 230.237138][ T3463] kworker/u4:8: attempt to access beyond end of device [ 230.237138][ T3463] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 230.251617][ T3463] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 230.674820][ T9111] loop0: detected capacity change from 0 to 64 [ 230.788197][ T9118] loop1: detected capacity change from 0 to 1024 [ 230.881707][ T9118] hfsplus: catalog searching failed [ 230.949524][ T1321] hfsplus: b-tree write err: -5, ino 3 [ 231.462646][ T9122] loop0: detected capacity change from 0 to 32768 [ 231.485688][ T9122] find_entry called with index >= next_index [ 231.491781][ T9122] find_entry called with index >= next_index [ 231.497890][ T9122] find_entry called with index >= next_index [ 231.503909][ T9122] find_entry called with index >= next_index [ 231.510039][ T9122] find_entry called with index >= next_index [ 231.516485][ T9122] add_index: next_index = 0. Resetting! [ 231.522274][ T9122] find_entry called with index >= next_index [ 231.528557][ T9122] find_entry called with index >= next_index [ 231.534766][ T9122] find_entry called with index >= next_index [ 231.542176][ T9122] find_entry called with index >= next_index [ 231.986754][ T9146] loop4: detected capacity change from 0 to 1024 [ 232.102353][ T9146] hfsplus: catalog searching failed [ 232.182334][ T1321] hfsplus: b-tree write err: -5, ino 3 [ 232.723865][ T9160] loop3: detected capacity change from 0 to 4096 [ 232.735409][ T9160] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 233.055233][ T9158] loop4: detected capacity change from 0 to 32768 [ 233.093828][ T9158] find_entry called with index >= next_index [ 233.102582][ T9158] find_entry called with index >= next_index [ 233.112199][ T9158] find_entry called with index >= next_index [ 233.122405][ T9158] find_entry called with index >= next_index [ 233.132870][ T9158] find_entry called with index >= next_index [ 233.139795][ T9158] add_index: next_index = 0. Resetting! [ 233.146518][ T9158] find_entry called with index >= next_index [ 233.152562][ T9158] find_entry called with index >= next_index [ 233.160128][ T9158] find_entry called with index >= next_index [ 233.167450][ T9158] find_entry called with index >= next_index [ 234.279256][ T9172] loop4: detected capacity change from 0 to 40427 [ 234.295573][ T9172] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 234.304100][ T9172] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 234.324730][ T9172] F2FS-fs (loop4): invalid crc value [ 234.421841][ T9170] loop0: detected capacity change from 0 to 40427 [ 234.439408][ T9170] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 234.457061][ T9170] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 234.495203][ T9170] F2FS-fs (loop0): invalid crc value [ 234.505682][ T9172] F2FS-fs (loop4): Start checkpoint disabled! [ 234.523980][ T9172] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 234.540642][ T9170] F2FS-fs (loop0): Found nat_bits in checkpoint [ 234.547382][ T9172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 234.616864][ T9170] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 234.624088][ T9170] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.649625][ T28] audit: type=1800 audit(1753775337.588:73): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1109" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 234.730380][ T1321] kworker/u4:6: attempt to access beyond end of device [ 234.730380][ T1321] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.765447][ T1321] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 235.265488][ T9194] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.559810][ T9208] loop1: detected capacity change from 0 to 1024 [ 235.576676][ T9208] EXT4-fs: Ignoring removed nobh option [ 235.582621][ T9208] EXT4-fs: Ignoring removed bh option [ 235.590647][ T9208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.673598][ T9208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.815412][ T787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 235.838144][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.057981][ T787] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 236.075562][ T787] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 236.094503][ T787] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 236.106337][ T787] usb 1-1: config 220 has no interface number 2 [ 236.113242][ T787] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 236.127298][ T787] usb 1-1: config 220 interface 0 has no altsetting 0 [ 236.134136][ T787] usb 1-1: config 220 interface 76 has no altsetting 0 [ 236.155380][ T787] usb 1-1: config 220 interface 1 has no altsetting 0 [ 236.168161][ T787] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 236.186570][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.204691][ T787] usb 1-1: Product: syz [ 236.215393][ T787] usb 1-1: Manufacturer: syz [ 236.223785][ T787] usb 1-1: SerialNumber: syz [ 236.255562][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 236.422826][ T9237] loop4: detected capacity change from 0 to 512 [ 236.445708][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 236.453221][ T9237] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 236.468118][ T787] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 236.475464][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 236.486736][ T787] usb 1-1: No valid video chain found. [ 236.496425][ T787] usb 1-1: selecting invalid altsetting 0 [ 236.504725][ T8] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 236.537657][ T9237] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1137: iget: bad i_size value: -67835469387268086 [ 236.551984][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.564517][ T8] usb 4-1: Product: syz [ 236.570838][ T787] usb 1-1: selecting invalid altsetting 0 [ 236.579525][ T8] usb 4-1: Manufacturer: syz [ 236.584211][ T8] usb 4-1: SerialNumber: syz [ 236.589340][ T787] usbtest: probe of 1-1:220.1 failed with error -22 [ 236.598485][ T9237] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1137: couldn't read orphan inode 15 (err -117) [ 236.616085][ T787] usb 1-1: USB disconnect, device number 9 [ 236.623434][ T8] usb 4-1: config 0 descriptor?? [ 236.634870][ T9237] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.639852][ T9221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.647658][ T9237] ext2 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.714133][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 236.735137][ T9237] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1137: Directory hole found for htree leaf block 0 [ 236.850185][ T6297] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 236.886199][ T9233] loop1: detected capacity change from 0 to 40427 [ 236.898570][ T9233] F2FS-fs (loop1): invalid crc value [ 236.926682][ T9233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.064436][ T787] usb 4-1: USB disconnect, device number 9 [ 237.070542][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 237.086322][ T9233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.239768][ T5802] syz-executor: attempt to access beyond end of device [ 237.239768][ T5802] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.271208][ T5802] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 237.533031][ T9261] input: syz1 as /devices/virtual/input/input22 [ 237.624427][ T9265] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1149'. [ 237.715473][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 238.087737][ T9282] loop3: detected capacity change from 0 to 4096 [ 238.127559][ T9285] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.283645][ T9291] loop1: detected capacity change from 0 to 512 [ 238.322549][ T9291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 238.349294][ T9291] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.415688][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 238.504620][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 238.620534][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 238.625199][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 238.663129][ T8] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 238.691978][ T8] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 238.709340][ T8] usb 1-1: config 220 has no interface number 2 [ 238.730304][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 238.760688][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 238.780261][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 238.788164][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 238.798843][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 238.808903][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.825357][ T8] usb 1-1: Product: syz [ 238.829615][ T8] usb 1-1: Manufacturer: syz [ 238.834278][ T8] usb 1-1: SerialNumber: syz [ 238.891795][ T9311] loop1: detected capacity change from 0 to 256 [ 239.064739][ T8] usb 1-1: selecting invalid altsetting 0 [ 239.081741][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 239.096263][ T8] usb 1-1: No valid video chain found. [ 239.112637][ T8] usb 1-1: selecting invalid altsetting 0 [ 239.122396][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 239.133918][ T8] usb 1-1: USB disconnect, device number 10 [ 239.777552][ T9336] syz.3.1179 uses obsolete (PF_INET,SOCK_PACKET) [ 240.045398][ T28] audit: type=1326 audit(1753775342.988:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9340 comm="syz.4.1182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79a658e9a9 code=0x0 [ 240.113709][ T9332] loop0: detected capacity change from 0 to 32768 [ 240.177656][ T9332] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 240.265157][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 240.350887][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 240.483707][ T9351] loop3: detected capacity change from 0 to 4096 [ 240.518243][ T9351] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 240.573200][ T28] audit: type=1800 audit(1753775343.518:75): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1185" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 240.611170][ T9341] loop1: detected capacity change from 0 to 32768 [ 240.628036][ T9341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1181 (9341) [ 240.651486][ T9341] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.664922][ T9341] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 240.678309][ T9341] BTRFS info (device loop1): setting nodatacow, compression disabled [ 240.707741][ T9341] BTRFS info (device loop1): max_inline at 0 [ 240.713919][ T9341] BTRFS info (device loop1): enabling disk space caching [ 240.735446][ T9341] BTRFS info (device loop1): turning off barriers [ 240.742074][ T9341] BTRFS info (device loop1): turning on flush-on-commit [ 240.758706][ T9341] BTRFS info (device loop1): doing ref verification [ 240.776271][ T9341] BTRFS info (device loop1): force clearing of disk cache [ 240.790333][ T9341] BTRFS info (device loop1): enabling ssd optimizations [ 240.805601][ T9341] BTRFS info (device loop1): max_inline at 4096 [ 240.819876][ T9341] BTRFS info (device loop1): disk space caching is enabled [ 240.872283][ T9370] loop3: detected capacity change from 0 to 64 [ 240.888519][ T9341] BTRFS info (device loop1): auto enabling async discard [ 240.894135][ T9355] loop0: detected capacity change from 0 to 4096 [ 240.906231][ T9341] BTRFS info (device loop1): rebuilding free space tree [ 240.922651][ T9355] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 240.935024][ T9341] BTRFS info (device loop1): disabling free space tree [ 240.942407][ T28] audit: type=1800 audit(1753775343.878:76): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1188" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 240.964578][ T9341] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.974870][ T9341] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.055760][ T9355] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 241.229261][ T5802] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.256300][ T9381] loop0: detected capacity change from 0 to 512 [ 241.282431][ T9382] loop3: detected capacity change from 0 to 512 [ 241.297307][ T9382] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.322337][ T9382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.352953][ T9382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.384315][ T9381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.397893][ T9381] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.415513][ T5849] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 241.420605][ T9382] EXT4-fs (loop3): 1 truncate cleaned up [ 241.441577][ T9382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.549428][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.563057][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.605967][ T5849] usb 5-1: Using ep0 maxpacket: 8 [ 241.613485][ T5849] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 241.626229][ T5849] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 241.654618][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.691110][ T5849] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.700554][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.732931][ T5849] usb 5-1: Product: syz [ 241.742279][ T5849] usb 5-1: Manufacturer: syz [ 241.764159][ T5849] usb 5-1: SerialNumber: syz [ 241.842916][ T9392] syz.0.1196 (9392): /proc/9391/oom_adj is deprecated, please use /proc/9391/oom_score_adj instead. [ 241.967749][ T9396] loop1: detected capacity change from 0 to 64 [ 242.343418][ T9402] loop0: detected capacity change from 0 to 8192 [ 242.366961][ T9402] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 242.381325][ T9402] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 242.390822][ T9402] REISERFS (device loop0): using ordered data mode [ 242.397779][ T9402] reiserfs: using flush barriers [ 242.399428][ T5849] usb 5-1: 0:2 : does not exist [ 242.413027][ T9402] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.441830][ T9402] REISERFS (device loop0): checking transaction log (loop0) [ 242.460097][ T9390] loop3: detected capacity change from 0 to 40427 [ 242.468359][ T9390] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 242.476458][ T9390] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.479510][ T9402] REISERFS (device loop0): Using r5 hash to sort names [ 242.495955][ T9402] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 242.500501][ T9390] F2FS-fs (loop3): invalid crc value [ 242.536146][ T9390] F2FS-fs (loop3): Found nat_bits in checkpoint [ 242.609398][ T5849] usb 5-1: USB disconnect, device number 6 [ 242.631547][ T9390] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 242.639710][ T9390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 242.751776][ T1321] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 242.783869][ T1321] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 242.877246][ T9421] input: syz1 as /devices/virtual/input/input23 [ 243.865015][ T9453] loop4: detected capacity change from 0 to 128 [ 243.872388][ T9453] EXT4-fs: Ignoring removed nobh option [ 243.950326][ T9458] loop1: detected capacity change from 0 to 512 [ 243.959421][ T9458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.970387][ T9453] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.986230][ T9453] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.026953][ T9458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.045619][ T9458] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.045753][ T9453] fscrypt (loop4, inode 12): Reserved bits set in encryption policy [ 244.133823][ T6297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.210708][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.488852][ T9482] loop3: detected capacity change from 0 to 1024 [ 244.507186][ T9478] loop4: detected capacity change from 0 to 4096 [ 244.527066][ T9478] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 244.575251][ T28] audit: type=1800 audit(1753775347.518:77): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1233" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 244.658727][ T1321] hfsplus: bad catalog file entry [ 244.675652][ T1321] hfsplus: b-tree write err: -5, ino 3 [ 244.764085][ T9488] input: syz0 as /devices/virtual/input/input24 [ 245.355237][ T9486] loop1: detected capacity change from 0 to 40427 [ 245.379991][ T9486] F2FS-fs (loop1): invalid crc value [ 245.391672][ T9486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.497838][ T9486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 245.552643][ T9486] syz.1.1237: attempt to access beyond end of device [ 245.552643][ T9486] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 245.663929][ T5802] syz-executor: attempt to access beyond end of device [ 245.663929][ T5802] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.695646][ T5802] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 245.955816][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 245.974456][ T9504] loop0: detected capacity change from 0 to 32768 [ 246.058103][ T9504] ERROR: (device loop0): dtReadFirst: stbl[0] out of bound [ 246.058103][ T9504] [ 246.101617][ T9504] ERROR: (device loop0): remounting filesystem as read-only [ 246.387421][ T9520] loop1: detected capacity change from 0 to 512 [ 246.438164][ T9520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.455223][ T9520] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.583505][ T28] audit: type=1800 audit(1753775349.528:78): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1246" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 246.584588][ T28] audit: type=1800 audit(1753775349.528:79): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1246" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 246.742266][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.747990][ T9528] netlink: 'syz.0.1253': attribute type 12 has an invalid length. [ 247.330090][ T9548] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1262'. [ 247.674359][ T9558] loop0: detected capacity change from 0 to 64 [ 247.887490][ T9538] loop1: detected capacity change from 0 to 32768 [ 247.949115][ T9538] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.140229][ T9538] XFS (loop1): Ending clean mount [ 248.171947][ T9538] XFS (loop1): Quotacheck needed: Please wait. [ 248.203138][ T9552] loop3: detected capacity change from 0 to 32768 [ 248.269656][ T9552] [ 248.269656][ T9552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.269656][ T9552] [ 248.293781][ T9538] XFS (loop1): Quotacheck: Done. [ 248.321011][ T9552] ERROR: (device loop3): diWrite: ixpxd invalid [ 248.321011][ T9552] [ 248.341282][ T9552] ERROR: (device loop3): txCommit: [ 248.341282][ T9552] [ 248.379611][ T9552] [ 248.379611][ T9552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.379611][ T9552] [ 248.384040][ T5802] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.397928][ T9552] [ 248.397928][ T9552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.397928][ T9552] [ 248.421843][ T9560] loop0: detected capacity change from 0 to 32768 [ 248.468035][ T9552] find_entry called with index = 0 [ 248.533752][ T9552] read_mapping_page failed! [ 248.553654][ T9552] ERROR: (device loop3): txCommit: [ 248.553654][ T9552] [ 248.639975][ T1321] ERROR: (device loop3): diWrite: ixpxd invalid [ 248.639975][ T1321] [ 248.673224][ T9559] Process accounting resumed [ 248.682868][ T1321] ERROR: (device loop3): txCommit: [ 248.682868][ T1321] [ 248.711228][ T1321] jfs_write_inode: jfs_commit_inode failed! [ 248.728237][ T5789] [ 248.728237][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.728237][ T5789] [ 248.770746][ T5789] [ 248.770746][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 248.770746][ T5789] [ 249.048305][ T9586] loop4: detected capacity change from 0 to 4096 [ 249.155194][ T9586] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 249.173943][ T9586] ntfs3: loop4: Failed to load $Extend (-22). [ 249.185617][ T9586] ntfs3: loop4: Failed to initialize $Extend. [ 249.286110][ T9593] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 249.795529][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 249.913301][ T9608] loop3: detected capacity change from 0 to 32768 [ 249.937842][ T9608] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 249.978114][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.993789][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.026654][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 250.059947][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.092155][ T8] usb 1-1: config 0 descriptor?? [ 250.134755][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 250.172890][ T9613] loop4: detected capacity change from 0 to 40427 [ 250.182703][ T9613] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 250.200567][ T9613] F2FS-fs (loop4): invalid crc value [ 250.211324][ T9613] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.268621][ T9613] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.341007][ T6297] syz-executor: attempt to access beyond end of device [ 250.341007][ T6297] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.363655][ T6297] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 250.530258][ T8] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 250.551685][ T8] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 250.565569][ T8] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 250.583929][ T8] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 250.595528][ T8] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 250.628583][ T8] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 250.729126][ T8] playstation 0003:054C:0DF2.000B: Invalid byte count transferred, expected 20 got 0 [ 250.754593][ T8] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 250.776906][ T8] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 250.788640][ T8] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 250.804343][ T8] playstation: probe of 0003:054C:0DF2.000B failed with error -22 [ 250.838037][ T9630] Bluetooth: MGMT ver 1.22 [ 250.957208][ T8] usb 1-1: USB disconnect, device number 11 [ 250.986240][ T9634] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1296'. [ 251.054044][ T9636] sp0: Synchronizing with TNC [ 251.163157][ T9636] Falling back ldisc for ptm0. [ 251.331186][ T9645] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 251.576414][ T9638] loop4: detected capacity change from 0 to 40427 [ 251.595995][ T9638] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 251.617836][ T9638] F2FS-fs (loop4): invalid crc value [ 251.638658][ T9638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.705185][ T9638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 251.836962][ T6297] syz-executor: attempt to access beyond end of device [ 251.836962][ T6297] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 251.862656][ T6297] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 252.352085][ T9677] loop0: detected capacity change from 0 to 512 [ 252.418400][ T9677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.460386][ T9677] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.705518][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.284636][ T9692] loop4: detected capacity change from 0 to 32768 [ 253.295618][ T787] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 253.322941][ T9692] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 253.439273][ T6297] ocfs2: Unmounting device (7,4) on (node local) [ 253.486576][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 253.497744][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.520893][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.541759][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.555915][ T787] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 253.566103][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.581960][ T787] usb 1-1: config 0 descriptor?? [ 253.625721][ T1990] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 253.732903][ T9700] loop3: detected capacity change from 0 to 32768 [ 253.743023][ T9700] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1320 (9700) [ 253.766400][ T9700] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 253.781414][ T9700] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 253.791986][ T9700] BTRFS info (device loop3): using free space tree [ 253.835565][ T1990] usb 2-1: Using ep0 maxpacket: 16 [ 253.843168][ T1990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.861792][ T1990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.878207][ T9700] BTRFS info (device loop3): enabling ssd optimizations [ 253.883248][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 253.889203][ T9700] BTRFS info (device loop3): auto enabling async discard [ 253.908816][ T1990] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 253.937625][ T1990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.961305][ T1990] usb 2-1: config 0 descriptor?? [ 254.036740][ T787] logitech 0003:046D:C29C.000C: unknown main item tag 0x1 [ 254.065632][ T787] logitech 0003:046D:C29C.000C: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 254.110795][ T5789] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 254.439102][ T787] logitech 0003:046D:C29C.000C: no inputs found [ 254.473997][ T787] usb 1-1: USB disconnect, device number 12 [ 254.538935][ T9733] loop3: detected capacity change from 0 to 64 [ 254.610481][ T1990] usb 2-1: string descriptor 0 read error: -71 [ 254.652826][ T1990] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 254.669324][ T1990] letsketch: probe of 0003:6161:4D15.000D failed with error -32 [ 254.696678][ T1990] usb 2-1: USB disconnect, device number 12 [ 254.794994][ T9739] loop4: detected capacity change from 0 to 64 [ 254.808433][ T9739] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 256.054419][ T9756] loop3: detected capacity change from 0 to 32768 [ 256.121319][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.127910][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.144012][ T9756] JBD2: Ignoring recovery information on journal [ 256.217356][ T9756] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 256.245897][ T9759] loop1: detected capacity change from 0 to 32768 [ 256.283493][ T9759] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 256.304406][ T9779] loop4: detected capacity change from 0 to 64 [ 256.337320][ T9759] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 256.385199][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 256.500839][ T5802] ocfs2: Unmounting device (7,1) on (node local) [ 256.647196][ T787] IPVS: starting estimator thread 0... [ 256.674639][ T9785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.765987][ T9786] IPVS: using max 18 ests per chain, 43200 per kthread [ 256.803745][ T9788] loop3: detected capacity change from 0 to 16 [ 256.879119][ T9788] erofs: (device loop3): mounted with root inode @ nid 36. [ 257.195451][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.403347][ T23] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 257.430196][ T23] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 257.446597][ T23] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 257.467999][ T23] usb 5-1: config 220 has no interface number 2 [ 257.482865][ T23] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 257.518773][ T23] usb 5-1: config 220 interface 0 has no altsetting 0 [ 257.535652][ T23] usb 5-1: config 220 interface 76 has no altsetting 0 [ 257.552855][ T23] usb 5-1: config 220 interface 1 has no altsetting 0 [ 257.566203][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 257.585527][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.595217][ T9795] loop3: detected capacity change from 0 to 32768 [ 257.603252][ T23] usb 5-1: Product: syz [ 257.609901][ T23] usb 5-1: Manufacturer: syz [ 257.614746][ T23] usb 5-1: SerialNumber: syz [ 257.649100][ T9795] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 257.717655][ T9811] loop0: detected capacity change from 0 to 512 [ 257.725081][ T9811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.740711][ T9811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 257.750863][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 257.769346][ T9811] EXT4-fs (loop0): 1 truncate cleaned up [ 257.771069][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 257.777599][ T9811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.814662][ T28] audit: type=1800 audit(1753775360.758:80): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1362" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 257.850572][ T23] usb 5-1: selecting invalid altsetting 0 [ 257.876456][ T23] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 257.882901][ T23] usb 5-1: No valid video chain found. [ 257.895186][ T23] usb 5-1: selecting invalid altsetting 0 [ 257.906743][ T23] usbtest: probe of 5-1:220.1 failed with error -22 [ 257.920156][ T23] usb 5-1: USB disconnect, device number 7 [ 257.935421][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 257.945693][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.965798][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.985659][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.013193][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.023011][ T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.042087][ T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.085692][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.313420][ T787] usb 2-1: GET_CAPABILITIES returned 0 [ 258.319186][ T787] usbtmc 2-1:16.0: can't read capabilities [ 258.538861][ T23] usb 2-1: USB disconnect, device number 13 [ 258.720256][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1373'. [ 258.749914][ T28] audit: type=1400 audit(1753775367.690:81): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A4C617A79467265653A202020202020202020202020202030206B420A416E6F6E4875676550616765733A20202020202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A50 pid=9840 comm="syz.0.1374" [ 259.768487][ T9878] loop1: detected capacity change from 0 to 4096 [ 259.818465][ T9878] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 260.209294][ T9864] loop3: detected capacity change from 0 to 32768 [ 260.246756][ T9864] XFS: attr2 mount option is deprecated. [ 260.275573][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 260.307884][ T9864] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 260.483611][ T9864] XFS (loop3): Ending clean mount [ 260.514601][ T9864] XFS (loop3): Quotacheck needed: Please wait. [ 260.566578][ T9910] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 260.566578][ T9910] The task syz.4.1402 (9910) triggered the difference, watch for misbehavior. [ 260.571003][ T9864] XFS (loop3): Quotacheck: Done. [ 260.656147][ T9864] XFS (loop3): User initiated shutdown received. [ 260.657170][ T9890] loop0: detected capacity change from 0 to 32768 [ 260.664806][ T9864] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 260.686313][ T9890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1397 (9890) [ 260.690663][ T9864] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 260.716756][ T9890] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.736676][ T9890] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 260.755517][ T9890] BTRFS info (device loop0): setting nodatacow, compression disabled [ 260.765598][ T9890] BTRFS info (device loop0): max_inline at 0 [ 260.771825][ T9890] BTRFS info (device loop0): enabling disk space caching [ 260.773431][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 260.779251][ T9890] BTRFS info (device loop0): turning off barriers [ 260.798323][ T9890] BTRFS info (device loop0): turning on flush-on-commit [ 260.806220][ T9890] BTRFS info (device loop0): doing ref verification [ 260.813069][ T9890] BTRFS info (device loop0): force clearing of disk cache [ 260.834629][ T9890] BTRFS info (device loop0): enabling ssd optimizations [ 260.847808][ T9890] BTRFS info (device loop0): max_inline at 4096 [ 260.854580][ T9890] BTRFS info (device loop0): disk space caching is enabled [ 260.883339][ T9916] loop1: detected capacity change from 0 to 128 [ 260.987187][ T9890] BTRFS info (device loop0): auto enabling async discard [ 261.003776][ T9890] BTRFS info (device loop0): rebuilding free space tree [ 261.095596][ T9890] BTRFS info (device loop0): disabling free space tree [ 261.102618][ T9890] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 261.128892][ T9890] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 261.311164][ T5798] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.651479][ T9944] loop1: detected capacity change from 0 to 256 [ 261.723215][ T9944] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 261.983734][ T9950] loop0: detected capacity change from 0 to 512 [ 261.993125][ T9950] EXT4-fs (loop0): Test dummy encryption mode enabled [ 262.023539][ T9950] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 262.053174][ T9950] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #17: comm syz.0.1410: inline data xattr refers to an external xattr inode [ 262.074705][ T9936] loop3: detected capacity change from 0 to 32768 [ 262.075703][ T9950] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1410: couldn't read orphan inode 17 (err -117) [ 262.100477][ T9950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.118857][ T9936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1408 (9936) [ 262.175540][ T9936] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.206177][ T9936] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 262.225490][ T9936] BTRFS info (device loop3): using free space tree [ 262.321659][ T9950] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 262.385021][ T9936] BTRFS info (device loop3): enabling ssd optimizations [ 262.410039][ T9936] BTRFS info (device loop3): auto enabling async discard [ 262.458689][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.472175][ T9948] loop4: detected capacity change from 0 to 32768 [ 262.556374][ T28] audit: type=1800 audit(1753775371.500:82): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1415" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 262.670904][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.450321][ T28] audit: type=1326 audit(1753775372.390:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.504700][ T28] audit: type=1326 audit(1753775372.390:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.525513][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 263.566571][ T28] audit: type=1326 audit(1753775372.420:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.596908][ T28] audit: type=1326 audit(1753775372.430:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.624809][ T28] audit: type=1326 audit(1753775372.430:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.660974][ T28] audit: type=1326 audit(1753775372.430:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.705043][ T28] audit: type=1326 audit(1753775372.430:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f588f38e9e3 code=0x7ffc0000 [ 263.725538][ T8] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 263.750147][ T28] audit: type=1326 audit(1753775372.440:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f588f38e9e3 code=0x7ffc0000 [ 263.756254][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.805191][ T28] audit: type=1326 audit(1753775372.440:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.815589][ T8] usb 5-1: Product: syz [ 263.852153][ T28] audit: type=1326 audit(1753775372.440:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588f38e9a9 code=0x7ffc0000 [ 263.865367][ T8] usb 5-1: Manufacturer: syz [ 263.885733][ T8] usb 5-1: SerialNumber: syz [ 263.898641][ T8] usb 5-1: config 0 descriptor?? [ 264.037028][T10002] loop3: detected capacity change from 0 to 512 [ 264.075810][T10002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.115805][T10002] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.130299][ T9986] loop0: detected capacity change from 0 to 32768 [ 264.256804][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.593946][T10012] loop3: detected capacity change from 0 to 512 [ 264.607684][T10012] ext4: Unknown parameter 'obj_role' [ 264.646812][T10015] loop1: detected capacity change from 0 to 1024 [ 264.678087][T10015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.749978][ T8] usb 5-1: Firmware version (0.0) predates our first public release. [ 264.760882][ T8] usb 5-1: Please update to version 0.2 or newer [ 264.774089][ T1990] IPVS: starting estimator thread 0... [ 264.783068][T10019] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.843671][ T8] usb 5-1: USB disconnect, device number 8 [ 264.896485][T10021] IPVS: using max 19 ests per chain, 45600 per kthread [ 264.908565][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.024528][T10028] loop1: detected capacity change from 0 to 1024 [ 265.211919][T10037] loop0: detected capacity change from 0 to 1024 [ 265.230344][T10037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 265.244057][T10037] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.276371][T10037] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.1450: lblock 3 mapped to illegal pblock 3 (length 3) [ 265.293892][T10037] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 265.306468][T10037] EXT4-fs (loop0): This should not happen!! Data will be lost [ 265.306468][T10037] [ 265.325153][T10037] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.1450: lblock 0 mapped to illegal pblock 0 (length 3) [ 265.340580][T10037] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 265.353077][T10037] EXT4-fs (loop0): This should not happen!! Data will be lost [ 265.353077][T10037] [ 265.393033][T10043] lo: Caught tx_queue_len zero misconfig [ 265.401197][ T3450] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 265.418785][ T3450] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 265.431447][ T3450] EXT4-fs (loop0): This should not happen!! Data will be lost [ 265.431447][ T3450] [ 265.454666][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.506239][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 265.550830][T10045] loop4: detected capacity change from 0 to 2048 [ 265.568951][T10047] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 265.571744][T10045] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 265.580300][T10047] netlink: 'syz.0.1453': attribute type 2 has an invalid length. [ 265.585260][T10045] UDF-fs: Scanning with blocksize 512 failed [ 265.599249][T10047] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 265.611400][T10047] netlink: 'syz.0.1453': attribute type 2 has an invalid length. [ 265.621753][T10045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.705642][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 265.714821][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.730018][ T23] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 265.741028][ T23] usb 2-1: config 1 has no interface number 0 [ 265.751361][ T23] usb 2-1: config 1 interface 160 has no altsetting 0 [ 265.761654][ T23] usb 2-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 265.771438][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.779703][ T23] usb 2-1: Product: syz [ 265.784481][ T23] usb 2-1: Manufacturer: syz [ 265.789298][ T23] usb 2-1: SerialNumber: syz [ 266.014617][ T23] usb 2-1: palm_os_4_probe - error -71 getting connection info [ 266.024934][ T23] visor 2-1:1.160: Handspring Visor / Palm OS converter detected [ 266.038850][ T23] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 266.062413][ T23] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 266.079608][ T23] usb 2-1: USB disconnect, device number 14 [ 266.080114][T10049] loop0: detected capacity change from 0 to 32768 [ 266.091975][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 266.096100][T10049] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1445 (10049) [ 266.107659][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 266.131905][ T23] visor 2-1:1.160: device disconnected [ 266.144619][T10049] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 266.155898][T10049] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 266.171551][T10049] BTRFS info (device loop0): force zlib compression, level 3 [ 266.182217][T10049] BTRFS info (device loop0): force clearing of disk cache [ 266.193168][T10049] BTRFS info (device loop0): turning off barriers [ 266.200602][T10049] BTRFS info (device loop0): doing ref verification [ 266.207717][T10049] BTRFS info (device loop0): enabling disk space caching [ 266.214816][T10049] BTRFS info (device loop0): disk space caching is enabled [ 266.243230][T10049] BTRFS info (device loop0): enabling ssd optimizations [ 266.250739][T10049] BTRFS info (device loop0): auto enabling async discard [ 266.260726][T10049] BTRFS info (device loop0): rebuilding free space tree [ 266.275054][T10049] BTRFS info (device loop0): disabling free space tree [ 266.282352][T10049] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 266.293517][T10049] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 266.339848][T10049] BTRFS info (device loop0): balance: start -d -m [ 266.347441][T10049] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 266.388587][T10049] BTRFS info (device loop0): balance: paused [ 266.421183][T10049] BTRFS info (device loop0): balance: resume -dusage=90 -musage=90 [ 266.430927][T10049] BTRFS info (device loop0): relocating block group 8519680 flags data|metadata [ 266.490367][T10049] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 266.617978][T10049] BTRFS info (device loop0): found 6 extents, stage: move data extents [ 266.684912][T10069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1446'. [ 266.727908][T10049] BTRFS info (device loop0): balance: canceled [ 266.829957][ T5798] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 267.168594][T10086] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 267.624417][T10099] loop0: detected capacity change from 0 to 512 [ 267.642411][T10099] EXT4-fs: Ignoring removed bh option [ 267.666741][T10099] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 267.711005][T10099] EXT4-fs (loop0): 1 truncate cleaned up [ 267.724491][T10099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.845894][T10099] EXT4-fs warning (device loop0): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 267.961070][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.020632][T10107] loop3: detected capacity change from 0 to 256 [ 268.054430][T10107] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 268.209255][T10100] loop1: detected capacity change from 0 to 32768 [ 268.253396][T10100] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 268.306794][T10117] loop3: detected capacity change from 0 to 256 [ 268.417329][ T5802] ocfs2: Unmounting device (7,1) on (node local) [ 268.547567][T10124] loop3: detected capacity change from 0 to 256 [ 268.698330][T10127] loop0: detected capacity change from 0 to 1024 [ 268.761892][T10129] sctp: [Deprecated]: syz.4.1474 (pid 10129) Use of int in maxseg socket option. [ 268.761892][T10129] Use struct sctp_assoc_value instead [ 268.894787][T10136] bond0: Caught tx_queue_len zero misconfig [ 269.305493][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 269.495669][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 269.513587][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 269.523958][ T9] usb 5-1: config 0 has no interface number 0 [ 269.537556][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 269.562797][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.581406][ T9] usb 5-1: Product: syz [ 269.591542][ T9] usb 5-1: Manufacturer: syz [ 269.596335][ T9] usb 5-1: SerialNumber: syz [ 269.615405][ T9] usb 5-1: config 0 descriptor?? [ 269.635164][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 269.850706][T10154] loop3: detected capacity change from 0 to 32768 [ 269.890351][T10154] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 269.985560][T10154] XFS (loop3): Ending clean mount [ 270.001985][T10154] XFS (loop3): Quotacheck needed: Please wait. [ 270.025098][T10156] loop1: detected capacity change from 0 to 40427 [ 270.050045][T10156] F2FS-fs (loop1): heap/no_heap options were deprecated [ 270.061534][T10156] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 270.072179][T10156] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x77e8c [ 270.099291][T10154] XFS (loop3): Quotacheck: Done. [ 270.105414][T10156] F2FS-fs (loop1): invalid crc value [ 270.127573][T10156] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 270.149447][T10156] F2FS-fs (loop1): Found nat_bits in checkpoint [ 270.219898][T10156] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 270.238082][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 270.257353][T10156] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 270.285723][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 270.306104][T10156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 270.332553][ T5789] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 270.394886][T10156] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 270.418823][T10156] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x338f/0x3c00 [ 270.442006][T10156] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 270.505423][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 270.525648][ T5841] usb 5-1: USB disconnect, device number 9 [ 270.547455][ T5841] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 270.582718][ T5841] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 270.611907][ T5841] quatech2 5-1:0.51: device disconnected [ 270.856872][T10174] loop0: detected capacity change from 0 to 32768 [ 270.864925][T10174] XFS: noikeep mount option is deprecated. [ 270.873180][T10174] XFS (loop0): invalid logbufsize: 34816 [not 16k,32k,64k,128k or 256k] [ 271.198685][T10187] loop4: detected capacity change from 0 to 512 [ 271.246039][T10187] EXT4-fs: Ignoring removed orlov option [ 271.251841][T10187] EXT4-fs: Ignoring removed oldalloc option [ 271.264007][T10187] ext4: Unknown parameter 'defcontext' [ 271.444235][T10199] loop3: detected capacity change from 0 to 2048 [ 271.461093][T10199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.533961][T10202] loop4: detected capacity change from 0 to 64 [ 271.633128][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 271.633143][ T28] audit: type=1800 audit(1753775380.580:96): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1500" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 272.318033][T10216] loop3: detected capacity change from 0 to 4096 [ 272.337717][T10216] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 272.383883][T10216] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 272.416159][T10216] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 272.459828][T10216] ntfs: (device loop3): read_ntfs_boot_sector(): Using backup boot sector. [ 272.475225][T10216] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 272.488937][T10216] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 272.512414][T10216] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 272.529299][T10216] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 272.555557][T10216] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 272.568142][T10216] ntfs: volume version 3.1. [ 272.596685][T10214] loop4: detected capacity change from 0 to 32768 [ 272.627734][T10214] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 272.817754][ T6297] ocfs2: Unmounting device (7,4) on (node local) [ 272.833371][T10230] loop3: detected capacity change from 0 to 512 [ 272.853734][T10230] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.862485][T10230] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 272.891850][T10230] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 272.904218][T10228] loop0: detected capacity change from 0 to 4096 [ 272.911848][T10230] System zones: 1-12 [ 272.920193][T10230] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.1514: corrupted in-inode xattr: e_value size too large [ 272.947642][T10228] ntfs: volume version 3.1. [ 272.954805][T10230] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1514: couldn't read orphan inode 15 (err -117) [ 272.970781][T10230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.117111][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.216385][T10239] loop3: detected capacity change from 0 to 1024 [ 273.341062][ T1321] hfsplus: b-tree write err: -5, ino 8 [ 273.477286][ T5792] block nbd0: Receive control failed (result -32) [ 273.477286][ T5104] block nbd0: Receive control failed (result -32) [ 273.691045][T10256] loop4: detected capacity change from 0 to 256 [ 273.734550][T10253] loop3: detected capacity change from 0 to 4096 [ 273.747005][T10253] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 273.876350][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 274.284129][T10255] loop0: detected capacity change from 0 to 32768 [ 274.340846][T10255] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 274.586278][T10282] loop4: detected capacity change from 0 to 64 [ 274.594983][T10283] loop1: detected capacity change from 0 to 8 [ 274.596773][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 274.965425][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.974853][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'. [ 275.013164][T10292] netlink: 'syz.4.1540': attribute type 7 has an invalid length. [ 275.033986][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 275.076371][T10292] gretap0: entered promiscuous mode [ 275.083836][T10292] gretap0: left promiscuous mode [ 275.155515][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 275.176015][ T23] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 275.200388][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.229082][ T23] usb 4-1: config 0 descriptor?? [ 275.247961][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 275.411052][T10306] bond0: entered promiscuous mode [ 275.420358][T10306] bond_slave_0: entered promiscuous mode [ 275.427589][T10306] bond_slave_1: entered promiscuous mode [ 275.873841][T10316] loop0: detected capacity change from 0 to 2048 [ 275.939885][T10319] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.018931][T10304] loop4: detected capacity change from 0 to 32768 [ 276.029085][T10319] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 276.050677][T10304] XFS: noikeep mount option is deprecated. [ 276.054099][ T23] gspca_vc032x: reg_w err -71 [ 276.056892][T10319] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 276.065187][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.089238][T10319] Remounting filesystem read-only [ 276.095095][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.117011][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.117173][T10304] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.122957][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.122970][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.122981][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.122991][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.123000][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.164024][ T5798] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 276.166334][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.175436][ T5798] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 276.181274][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.185212][ T5798] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 276.198624][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.207673][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.225363][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.232520][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.244933][ T5798] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 276.251820][ T5798] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 276.257772][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.265561][ T5798] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 276.275104][ T5798] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 276.288736][ T5798] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 276.296617][ T5798] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 276.303618][ T5798] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 276.309791][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.316542][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.321900][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.328849][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.334507][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.334536][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.334554][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.338567][ T5798] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 276.346935][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.379730][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 276.381487][ T5798] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 276.385863][ T23] gspca_vc032x: Unknown sensor... [ 276.404384][ T23] vc032x: probe of 4-1:0.0 failed with error -22 [ 276.413331][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.422292][ T23] usb 4-1: USB disconnect, device number 10 [ 276.440640][T10304] XFS (loop4): Ending clean mount [ 276.447697][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.460578][T10304] XFS (loop4): Quotacheck needed: Please wait. [ 276.469771][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.486031][ T5798] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 276.492798][ T5798] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 276.504504][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.513576][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.537360][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.549021][ T5798] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 276.558262][ T5798] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 276.570277][T10304] XFS (loop4): Quotacheck: Done. [ 276.571968][ T5798] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 276.593713][ T5798] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 276.609555][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.619204][ T5798] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 276.626594][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.636822][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.648496][ T5798] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 276.665445][ T5798] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 276.712488][ T6297] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.142090][T10346] loop1: detected capacity change from 0 to 1024 [ 277.156499][T10346] EXT4-fs: Ignoring removed bh option [ 277.206733][T10346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.319546][T10339] loop0: detected capacity change from 0 to 32768 [ 277.384235][ T5802] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.788393][T10372] netlink: 'syz.1.1571': attribute type 12 has an invalid length. [ 278.381492][T10387] bridge0: entered allmulticast mode [ 278.394251][T10368] loop4: detected capacity change from 0 to 40427 [ 278.433958][T10368] F2FS-fs (loop4): heap/no_heap options were deprecated [ 278.465525][T10368] F2FS-fs (loop4): invalid crc value [ 278.490920][T10368] F2FS-fs (loop4): Found nat_bits in checkpoint [ 278.557057][T10394] loop0: detected capacity change from 0 to 512 [ 278.573736][T10368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 278.584483][T10394] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.618012][T10394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.657195][T10394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 278.699767][T10394] EXT4-fs (loop0): 1 truncate cleaned up [ 278.730809][T10403] raw_sendmsg: syz.1.1583 forgot to set AF_INET. Fix it! [ 278.739725][T10394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.809375][T10407] syz_tun: entered promiscuous mode [ 278.816118][T10407] macvlan2: entered promiscuous mode [ 278.821662][T10407] macvlan2: entered allmulticast mode [ 278.827374][T10407] syz_tun: entered allmulticast mode [ 278.835699][T10407] syz_tun: left allmulticast mode [ 278.841364][T10407] syz_tun: left promiscuous mode [ 279.016844][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.151297][T10411] syz.4.1584[10411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.151447][T10411] syz.4.1584[10411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.208547][T10417] io-wq is not configured for unbound workers [ 279.226703][T10416] loop1: detected capacity change from 0 to 1024 [ 279.302059][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 279.302078][ T28] audit: type=1800 audit(1753775388.250:97): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1588" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 279.338990][T10415] loop0: detected capacity change from 0 to 2048 [ 279.396967][T10415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.028944][ T28] audit: type=1326 audit(1753775388.980:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10444 comm="syz.4.1602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79a658e9a9 code=0x0 [ 280.195502][ T1990] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 280.201674][T10436] loop1: detected capacity change from 0 to 40427 [ 280.217913][T10436] F2FS-fs (loop1): invalid crc value [ 280.228800][T10436] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.316683][T10436] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 280.393300][ T1990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.412384][ T1990] usb 4-1: no configurations [ 280.421623][ T1990] usb 4-1: can't read configurations, error -22 [ 280.444883][T10436] syz.1.1598: attempt to access beyond end of device [ 280.444883][T10436] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 280.539465][T10436] syz.1.1598: attempt to access beyond end of device [ 280.539465][T10436] loop1: rw=2049, sector=53256, nr_sectors = 40 limit=40427 [ 280.567692][T10436] syz.1.1598: attempt to access beyond end of device [ 280.567692][T10436] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 280.662049][ T5802] syz-executor: attempt to access beyond end of device [ 280.662049][ T5802] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.676695][ T5802] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 281.230836][T10466] nbd1: detected capacity change from 0 to 549764202496 [ 281.271338][ T5801] block nbd1: Receive control failed (result -32) [ 281.484997][T10480] loop0: detected capacity change from 0 to 1024 [ 281.493551][T10480] EXT4-fs: Ignoring removed orlov option [ 281.518998][T10480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.618541][T10462] loop4: detected capacity change from 0 to 32768 [ 281.686211][T10462] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 281.789312][T10462] XFS (loop4): Ending clean mount [ 281.809506][T10462] XFS (loop4): Quotacheck needed: Please wait. [ 281.834240][ T5798] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 281.865980][ T5798] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 281.927680][T10462] XFS (loop4): Quotacheck: Done. [ 282.003810][T10293] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.261564][ T6297] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 282.389055][T10498] loop1: detected capacity change from 0 to 32768 [ 282.481627][ T23] Process accounting resumed [ 282.589174][T10502] loop4: detected capacity change from 0 to 24 [ 283.075449][ T1990] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 283.106229][T10511] netlink: 'syz.1.1622': attribute type 1 has an invalid length. [ 283.114368][T10511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.122428][T10511] IPv6: NLM_F_CREATE should be set when creating new route [ 283.200484][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.214398][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.224021][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.257806][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.270548][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.280463][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.300067][ T1990] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 283.330377][ T1990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.345533][ T1990] usb 5-1: Product: syz [ 283.349908][ T1990] usb 5-1: Manufacturer: syz [ 283.354583][ T1990] usb 5-1: SerialNumber: syz [ 283.367255][ T1990] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 283.372408][T10515] loop1: detected capacity change from 0 to 1024 [ 283.435973][ T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 283.469172][T10515] hfsplus: can't free extent [ 283.510692][T10514] hfsplus: can't free extent [ 283.523440][T10514] hfsplus: can't free extent [ 283.590219][T10509] loop3: detected capacity change from 0 to 32768 [ 283.783000][T10512] chnl_net:caif_netlink_parms(): no params data found [ 283.901100][T10512] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.910026][T10512] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.935787][T10512] bridge_slave_0: entered allmulticast mode [ 283.944803][ T5801] block nbd2: Receive control failed (result -32) [ 283.945040][ T5104] block nbd2: Receive control failed (result -32) [ 283.966961][T10512] bridge_slave_0: entered promiscuous mode [ 284.000120][T10512] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.026650][T10512] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.049682][T10512] bridge_slave_1: entered allmulticast mode [ 284.061093][T10512] bridge_slave_1: entered promiscuous mode [ 284.174948][T10512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.228164][T10512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.285192][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.306461][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.354940][T10512] team0: Port device team_slave_0 added [ 284.378428][T10512] team0: Port device team_slave_1 added [ 284.474792][T10512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.482941][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.525449][ T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 284.533235][ T23] ath9k_htc: Failed to initialize the device [ 284.555413][T10512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.597325][ T23] usb 5-1: ath9k_htc: USB layer deinitialized [ 284.608525][T10512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.625552][T10512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.635812][ T5849] usb 5-1: USB disconnect, device number 10 [ 284.705385][T10512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.718158][T10534] loop1: detected capacity change from 0 to 8192 [ 284.750679][T10534] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.832152][T10512] hsr_slave_0: entered promiscuous mode [ 284.857769][T10512] hsr_slave_1: entered promiscuous mode [ 284.871159][T10512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.890835][T10512] Cannot create hsr debugfs directory [ 284.960053][T10532] loop3: detected capacity change from 0 to 32768 [ 284.992523][T10532] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 285.099576][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 285.163509][T10512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.187214][T10512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.199699][T10512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.221856][T10512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.315997][ T5104] Bluetooth: hci2: command tx timeout [ 285.544832][T10512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.602219][T10512] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.624178][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.631593][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.657132][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.664371][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.720796][T10560] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 286.214906][T10512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.332686][T10558] loop4: detected capacity change from 0 to 32768 [ 286.348763][T10558] XFS: ikeep mount option is deprecated. [ 286.369210][T10558] XFS: ikeep mount option is deprecated. [ 286.403750][T10570] loop1: detected capacity change from 0 to 2048 [ 286.406140][T10558] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.413904][T10570] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 286.625466][T10558] XFS (loop4): Ending clean mount [ 286.649087][T10585] loop1: detected capacity change from 0 to 1024 [ 286.667059][T10558] XFS (loop4): Quotacheck needed: Please wait. [ 286.695242][T10585] hfsplus: bad catalog entry type [ 286.781459][T10558] XFS (loop4): Quotacheck: Done. [ 286.828553][ T48] hfsplus: b-tree write err: -5, ino 4 [ 286.868756][T10512] veth0_vlan: entered promiscuous mode [ 286.887756][ T6297] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 286.929699][T10512] veth1_vlan: entered promiscuous mode [ 287.025085][T10512] veth0_macvtap: entered promiscuous mode [ 287.056167][T10512] veth1_macvtap: entered promiscuous mode [ 287.100763][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.115176][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.132959][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.153832][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.171058][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.182476][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.194077][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.205250][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.228897][T10512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.243938][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.259049][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.270837][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.282492][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.293679][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.305223][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.316410][T10512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.328690][T10512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.341156][T10512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.359133][T10512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.369614][T10512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.380018][T10512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.395206][T10512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.405711][ T5104] Bluetooth: hci2: command tx timeout [ 287.537759][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.553111][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.590593][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.604557][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.713503][T10599] loop1: detected capacity change from 0 to 16 [ 287.728069][T10599] erofs: (device loop1): mounted with root inode @ nid 36. [ 287.766273][T10599] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 287.780528][T10599] erofs: (device loop1): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 287.792460][T10599] erofs: (device loop1): z_erofs_readahead: readahead error at folio 9 @ nid 36 [ 287.802078][T10599] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 287.811601][T10599] syz.1.1653: attempt to access beyond end of device [ 287.811601][T10599] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 287.827065][T10599] syz.1.1653: attempt to access beyond end of device [ 287.827065][T10599] loop1: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 288.025589][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 288.246631][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 288.264197][ T27] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 288.274492][ T27] usb 6-1: config 0 has no interface number 0 [ 288.300749][ T27] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 288.311207][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.325539][ T27] usb 6-1: Product: syz [ 288.329783][ T27] usb 6-1: Manufacturer: syz [ 288.334427][ T27] usb 6-1: SerialNumber: syz [ 288.368416][ T27] usb 6-1: config 0 descriptor?? [ 288.374424][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1656'. [ 288.398425][ T27] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 288.525740][T10603] loop1: detected capacity change from 0 to 32768 [ 288.577552][T10603] find_entry called with index = 0 [ 288.599131][T10603] read_mapping_page failed! [ 288.603900][T10603] ERROR: (device loop1): txCommit: [ 288.603900][T10603] [ 288.637422][T10609] loop4: detected capacity change from 0 to 8192 [ 288.649580][T10603] ERROR: (device loop1): diFree: numfree > numinos [ 288.649580][T10603] [ 288.730807][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'. [ 288.760048][ T112] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 288.776040][ T112] ------------[ cut here ]------------ [ 288.781622][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 288.805397][ T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 288.811648][ T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.6.100-syzkaller #0 [ 288.819580][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.829694][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 288.834686][ T112] Code: ff f9 60 07 0f 0b e8 38 c4 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba a3 03 00 00 48 c7 c1 20 19 e4 8a e8 d9 f9 60 07 <0f> 0b e8 12 c4 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba [ 288.854520][ T112] RSP: 0018:ffffc90002cb7d08 EFLAGS: 00010246 [ 288.860632][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ca3ef97fd5494600 [ 288.868652][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 288.876666][ T112] RBP: ffffc9000282a168 R08: ffffc90002cb7a07 R09: 1ffff92000596f40 [ 288.884745][ T112] R10: dffffc0000000000 R11: fffff52000596f41 R12: ffff88807ee26ba0 [ 288.892744][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888026146094 [ 288.900733][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 288.909673][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.916267][ T112] CR2: 00007f4d6f8e56c0 CR3: 0000000062544000 CR4: 00000000003506f0 [ 288.924263][ T112] Call Trace: [ 288.927561][ T112] [ 288.930511][ T112] ? lockdep_hardirqs_on+0x98/0x150 [ 288.935737][ T112] jfs_lazycommit+0x570/0xa60 [ 288.940444][ T112] ? txFreelock+0x5a0/0x5a0 [ 288.944975][ T112] ? do_task_dead+0xd0/0xd0 [ 288.949498][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 288.954479][ T112] kthread+0x2fa/0x390 [ 288.958590][ T112] ? txFreelock+0x5a0/0x5a0 [ 288.963110][ T112] ? kthread_blkcg+0xd0/0xd0 [ 288.967809][ T112] ret_from_fork+0x48/0x80 [ 288.972243][ T112] ? kthread_blkcg+0xd0/0xd0 [ 288.976852][ T112] ret_from_fork_asm+0x11/0x20 [ 288.981650][ T112] [ 288.984693][ T112] Modules linked in: [ 289.011131][ T112] ---[ end trace 0000000000000000 ]--- [ 289.014634][ T27] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 289.017594][ T112] RIP: 0010:txUnlock+0xc87/0xcb0 [ 289.041919][ T27] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 289.062249][ T112] Code: ff f9 60 07 0f 0b e8 38 c4 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba a3 03 00 00 48 c7 c1 20 19 e4 8a e8 d9 f9 60 07 <0f> 0b e8 12 c4 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba [ 289.090523][ T112] RSP: 0018:ffffc90002cb7d08 EFLAGS: 00010246 [ 289.102305][ T112] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ca3ef97fd5494600 [ 289.112605][ T112] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 289.121617][ T112] RBP: ffffc9000282a168 R08: ffffc90002cb7a07 R09: 1ffff92000596f40 [ 289.132168][ T112] R10: dffffc0000000000 R11: fffff52000596f41 R12: ffff88807ee26ba0 [ 289.140989][ T112] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888026146094 [ 289.149740][ T112] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 289.160478][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.167640][ T112] CR2: 00007f79a6783178 CR3: 0000000030cbf000 CR4: 00000000003506f0 [ 289.176507][ T112] Kernel panic - not syncing: Fatal exception [ 289.183015][ T112] Kernel Offset: disabled [ 289.187358][ T112] Rebooting in 86400 seconds..