last executing test programs: 1m57.827838591s ago: executing program 4 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d986ddc8421d7fb2465abe96ddb08bbf6db422e0475ca797364ccfe8886e4a522b20af52b657302d6bfeac", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m57.523490486s ago: executing program 4 (id=378): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) recvmsg(r0, 0x0, 0x40012662) 1m57.463096877s ago: executing program 4 (id=379): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x10000042, 0xffffffff, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m57.317659009s ago: executing program 4 (id=381): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000100)='...', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 1m57.004247614s ago: executing program 4 (id=386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 1m56.61015379s ago: executing program 4 (id=393): r0 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='adfs\x00', 0x0) 1m41.388357582s ago: executing program 32 (id=393): r0 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='adfs\x00', 0x0) 59.58832783s ago: executing program 3 (id=1000): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000e00)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@noquota}, {}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x5}}, {@uid}]}, 0x24, 0x6220, &(0x7f0000014680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 58.462089467s ago: executing program 3 (id=1012): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$nci(r0, 0x0, 0x4) 57.538614541s ago: executing program 3 (id=1024): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000200)) 57.459290843s ago: executing program 3 (id=1028): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 57.103555688s ago: executing program 3 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x3, 0xaa7, &(0x7f00000005c0)="$eJzs3UuMHEfBAODq2Z2113Z+j/PbZLFNYvNIwiO78XoxDwviKL5gxRG3SBEXy3GChWMQjgSJImH7xAWRKDJXCOIUDhEgpOSCrJy4RCKWuOQUOHDAMlIkDhCwB+1O1exMeSY9+/D2zM73SbU13dXdVd3b09OvqgrA2Kot/V1YmClCuPLWq8f/fv/fphfHPNKeorH0d7JjqB5CKOLwZLa89yda8c0PXjrdKy7C/NLfNByeuNGed3sI4WI4EK6GRth75dor78w/fvLSicsH33396PU7s/YAADBevnn16MKev/xp364P37j3WNjSHp/OzxtxeEc87z8WT/zT+X8tdA8XHaHTVDbdZAy1bLqJ0Hv5Ka5n0032yX8qW269nb6va7otJflPdIzrVS4YZWk/boSiNts1XKvNzrauycPSdf1UMXv+7LlnLlRUUGDd/fO+EMKBasLWVIiK8l9LaDabPxqOsteHoAzCqIbmziqPPgDL8ueFt7mY31lYm/bSJgfL/8ajtd7zwzrY6P1f/qOV/68uOeKwfjbr3pTWK32PdsTh/DlC/v7SSr//aXn584j6gOXs9xxhVJ4v9CvnxAaXY7X6lT/fLzarr8U4bYevZ+md35/8fzoq/2Ogt39t1P3/16Yrv9e5GA4MQRk2dagPQRmEgUOz6gMQMLSW35traUYpPX+vL0/fUpK+tSR9uiR9W0n69pJ0GGe/e/6n4eVi+To/v6Zf6f2wdJ/trhj/3wrLk9+PXGn++Xu/K7XW/PP3iWGYvXnqyTNffvqpa633/4v2/n8r7u8H4nAjfreuxgnS/cL8vnr73f9Gdz75e/xpuruz8tx12/TNVo67u6crdi8vJ3QcZ24rx0z3fDv7Tbe/e7pGNt10DFuz8ubnJ9uy+dL5Rzqupu01ma1vPVuPqawc6biyK8Z5OWA10v7Y7/3/tH/OhHrxzNlzZx6Ow2k//eNEfcvi+EOdC/31xpQdWJtB6//MhO76Pzva4+u1zuPCzuXxRedxoZGNn28Nth+Tp/GH43D6nfv2xPTS+NnT3z339HqvPIy5Cy+8+J1T586d+b4P6cO0zeLDyH9IF5irXk7ZkWOzvjkI42Pu+ee+N3fhhRcfOvvcqWfPPHvm/OEjRw7Pzx/5yuGFuaXz+rnOs3tgM1n+0a+6JAAAAAAAAAAAAMCgfnDi+LU/v/2l91r1/5fr/6X6/+nN31T//8dZ/f+8nnyqFZDqAe7qkb7U796b3eWYyqarx/D/WXl3Z/nsyeb7WIzb/fjF+v+pOkTermsqzz3Z+Lz93jRd1pzAbe2lTGVtkLT7C4wV9j8Zhy/H+JcBKlRM9x4d47L2rdO+ntqn0C7FaEr/t7Q3pHZMUv3vfu06peP/rg0oI+tvI2ojVr2OQG//qLD/z8FCx5l45WX5yNBstuKfNKsvy+rD8G9nYR1Ds6kXD2A4VNb/Xryxke57pvj8H76xdTGkyW482n28zNsvhbUY9v4n5b+5+v9s93830PGvR+vqXe08D967wr9/fv29jmzD3kGPv/n6p3agd5fn2enDmH9a/wfCYPk3X8vyzx8IDeg/Wf7bBsz/tvXfv7r8/xvzT5vtwU8Nmn+rxEWtVY5+943T87/8vnFyM1v/1Lbnitd/lR013or5wzjr38/soD3YDqdR6f+3n/w9jC/G4XQgTO855L/IKy1/er8i/Q7syZZflPy+jUo/xf2Me/+/X41x6fch7uNpf2z0GK51DNd7bNtR31dgs3m/+ud/k6uab/Eic0353qHnihdXPE8xWDm2bV9TWdd7PYVVhOHoA7szNJvNShvy1op4tare/lU/fa46/6q3f5m8/9/8HL51/bm8FWvZBUTe/28+f97/b56e96+Xp+f9/+bbM+//N0+/J1tufgd7piT94yXpe0vS9y2nT/dK318y/ydK0g+WpN9bkn5fSfrdJekTJemfLkn/TEn6/SXpD350evHZkvk3u6X6KB1fqnFbfxhnef08338YH+n5T7/v/+6SdGB0/eyNQ4899dtvNVr1/6fa12vpOd6xOFyP184/jMP5c+/QMbyY9nYc/muWPuz3O2Cc5O1n5L/vD5SkA6Mrvefl+w1jqOjdYk/+vK1fu1X9zvMZLZ+L8edj/IUYPxTj2RjPxfhQjOc3qHzcGY/95vdHXy6Wr/d3ZumDvk+e6gMleTtRhwcsT35/YKXvs+ft+K3UWvNfZXUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSW/i4szBQhXHnr1eNPnjw7tzjmkfYUjaW/kx1D9fZ8ITwc44kY/yJ+uPnBS6c741sxLsJ8KELRHh+euNHOaXsI4WI4EK6GRth75dor78w/fvLSicsH33396PU7twUAAABg8/tfAAAA///Q5Rsl") 56.675982175s ago: executing program 3 (id=1036): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 56.554744936s ago: executing program 33 (id=1036): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 3.103954712s ago: executing program 1 (id=1726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.011715243s ago: executing program 6 (id=1727): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(r0, 0x84) 2.534648471s ago: executing program 6 (id=1728): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000004340), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000f7dbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="08001d000500000008001e00"], 0x34}}, 0x40002) 2.524369281s ago: executing program 1 (id=1729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) 2.476399892s ago: executing program 2 (id=1730): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f000009df80)={[{@barrier}, {@gid}, {@barrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@force}, {@nls={'nls', 0x3d, 'maciceland'}}, {}]}, 0x1, 0x6e4, &(0x7f0000000240)="$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") mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f0000000540)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 2.395955383s ago: executing program 6 (id=1731): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff05"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 2.374267203s ago: executing program 1 (id=1732): r0 = syz_open_dev$dri(&(0x7f0000002a40), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) close(r0) 2.239858015s ago: executing program 1 (id=1733): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000340)=ANY=[], 0x1, 0x20a, &(0x7f00000003c0)="$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") sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 2.190867146s ago: executing program 5 (id=1734): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x3000c1e, &(0x7f0000001a40)=ANY=[@ANYBLOB='iocharset=maccenteuro,uid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=0xee01, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',subj_type=],\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) 2.010925649s ago: executing program 2 (id=1736): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.009966789s ago: executing program 1 (id=1737): syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@gquota}, {@nolargeio}, {@pqnoenforce}]}, 0x1, 0x9804, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000000000, 0x100000000000000}) 1.800046752s ago: executing program 2 (id=1738): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xcc0a, &(0x7f0000000240)={[{@noblock_validity}, {@nolazytime}, {@nobh}, {@nobh}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@nouid32}], [], 0x2c}, 0x84, 0x467, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000002540)={0xfffffffffffffdfd, 0x10100002000007, 0x0, 0x80000000}) 1.612451745s ago: executing program 5 (id=1741): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x1d4, &(0x7f00000002c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') sendfile(r0, r0, &(0x7f0000000040)=0xfff, 0x2) 1.388721778s ago: executing program 5 (id=1743): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0xaeb, &(0x7f00000012c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000180)={0x3, 0x6, 0xf, 0xbd, 0x0, 0xfffc, 0x2401}) 1.374027549s ago: executing program 2 (id=1744): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x61, 0x0, 0x0, @time, {}, {0x0, 0x1}, @result}], 0x1c) 1.088703773s ago: executing program 2 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/97, 0x61}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x4}}], 0x3, 0x0, 0x0) 1.015761484s ago: executing program 2 (id=1750): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 965.790805ms ago: executing program 5 (id=1751): pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x26, 0x0) 651.84632ms ago: executing program 5 (id=1753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0xa00, 0x0, {0x2}}, 0x14}}, 0x0) 607.63681ms ago: executing program 1 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140140000250900010073797a30000000000900020073797a32"], 0x74}}, 0x0) 515.971262ms ago: executing program 5 (id=1756): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c40)={0x34, &(0x7f00000009c0)={0x20, 0x3, 0x2, "1791"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 515.765962ms ago: executing program 0 (id=1757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x2, 0x108, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 482.805362ms ago: executing program 6 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x8, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x20004804) 441.363923ms ago: executing program 0 (id=1759): setuid(0xee00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x0, &(0x7f000063c000/0x3000)=nil) 375.897674ms ago: executing program 6 (id=1760): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty, 0x80000000}, 0x1c) 375.772893ms ago: executing program 0 (id=1761): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000777000/0x6000)=nil, &(0x7f000022d000/0x2000)=nil, 0x6000, 0x5}) 297.883295ms ago: executing program 0 (id=1762): pipe(0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) 297.709755ms ago: executing program 6 (id=1763): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa08006, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x6b7, &(0x7f00000003c0)="$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") lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'com.apple.FinderInfo\x00'}, 0x0, 0x30) 142.647688ms ago: executing program 0 (id=1764): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000400)="020000ffffffba000040000086dd9d249473cc2b822af8bc37b1ee1c7a1aff64056d5afbd17a220e873800"/54, 0x36, 0x80400c0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) 0s ago: executing program 0 (id=1765): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): xPacketSize 0 [ 123.497504][ T4570] usb 3-1: config 0 interface 0 altsetting 19 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.500938][ T154] team0 (unregistering): Port device team_slave_1 removed [ 123.510871][ T4570] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.524535][ T4570] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.533850][ T4570] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.551355][ T154] team0 (unregistering): Port device team_slave_0 removed [ 123.552562][ T4570] usb 3-1: config 0 descriptor?? [ 123.574282][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.591945][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.691672][ T4567] wacom 0003:056A:0017.0011: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 123.741850][ T4567] wacom 0003:056A:0017.0011: hidraw0: USB HID v0.05 Device [HID 056a:0017] on usb-dummy_hcd.1-1/input0 [ 123.763190][ T4567] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0017.0011/input/input21 [ 123.880611][ T154] bond0 (unregistering): Released all slaves [ 123.915322][ T5691] loop3: detected capacity change from 0 to 32768 [ 123.940073][ T4567] usb 2-1: USB disconnect, device number 6 [ 123.988182][ T5691] XFS (loop3): Mounting V5 Filesystem [ 124.052171][ T4570] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 124.082943][ T5691] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x422 dinode [ 124.094848][ T5691] XFS (loop3): Unmount and run xfs_repair [ 124.101449][ T5691] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.108984][ T5691] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 124.117856][ T5691] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.126803][ T5691] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f 41 c3 20 ..e.....4.Xh.A. [ 124.134873][ T4570] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 124.135722][ T5691] 00000030: 34 f7 58 68 7f 41 c3 20 00 00 00 00 00 00 00 00 4.Xh.A. ........ [ 124.156942][ T5691] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.166465][ T5691] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.175535][ T5691] 00000060: ff ff ff ff 4d 6e 96 d4 00 00 00 00 00 00 00 02 ....Mn.......... [ 124.184491][ T5691] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 124.193518][ T5691] XFS (loop3): failed to read RT inodes [ 124.327935][ T1325] usb 3-1: USB disconnect, device number 8 [ 124.371112][ T5548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.410131][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.436460][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.451535][ T5548] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.472580][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.482768][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.492975][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.500107][ T5585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.689727][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.704155][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.723335][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.750826][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.757970][ T5585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.826205][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.877536][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.924309][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.967296][ T5722] loop1: detected capacity change from 0 to 8 [ 124.988819][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.037102][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.085400][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.122110][ T5722] SQUASHFS error: Unable to read directory block [2c0:35] [ 125.147496][ T5548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.188610][ T5548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.216941][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.235510][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.278613][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.309800][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.342046][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.396619][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.459182][ T5328] Bluetooth: hci3: command 0x040f tx timeout [ 125.706822][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.715199][ T3026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.764283][ T5548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.029308][ T5724] loop2: detected capacity change from 0 to 40427 [ 126.076002][ T5724] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 126.108811][ T5724] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 126.192345][ T5724] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.329549][ T4569] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.361887][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.408601][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.421251][ T5724] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.428905][ T5724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.511575][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.543624][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.594341][ T5548] device veth0_vlan entered promiscuous mode [ 126.637153][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.650755][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.702346][ T5548] device veth1_vlan entered promiscuous mode [ 126.755103][ T4569] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.773262][ T4569] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.810289][ T4569] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.817331][ T4569] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 126.836161][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.852873][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.905358][ T4569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.919880][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.953741][ T4569] usb 4-1: config 0 descriptor?? [ 126.980843][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.031656][ T5548] device veth0_macvtap entered promiscuous mode [ 127.076849][ T5548] device veth1_macvtap entered promiscuous mode [ 127.133299][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.133335][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.133348][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.133363][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.133374][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.133389][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.133399][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.133414][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.134797][ T5548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.328462][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 127.359620][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.405383][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.437778][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.479156][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.494105][ T4569] wacom 0003:056A:0017.0013: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 127.518846][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.537124][ T4569] wacom 0003:056A:0017.0013: hidraw0: USB HID v0.05 Device [HID 056a:0017] on usb-dummy_hcd.3-1/input0 [ 127.563785][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.576635][ T4569] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0017.0013/input/input24 [ 127.589336][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.607443][ T4567] Bluetooth: hci3: command 0x0419 tx timeout [ 127.615071][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.648406][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.668690][ T5548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.685378][ T5548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.707754][ T5548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.731723][ T4570] usb 4-1: USB disconnect, device number 7 [ 127.748123][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.769618][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.805271][ T5548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.820518][ T5548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.831904][ T5548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.841148][ T5548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.002445][ T5585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.020871][ T5585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.053101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.077811][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.097490][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.130928][ T5585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.288028][ T5818] binder: 5815:5818 ioctl 400c620e 200000000140 returned -22 [ 128.516626][ T5826] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.589'. [ 128.552588][ T5830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.590'. [ 128.737274][ T5833] loop5: detected capacity change from 0 to 2048 [ 128.789883][ T5833] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.901237][ T5840] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.368004][ T5817] loop0: detected capacity change from 0 to 32768 [ 129.435951][ T5859] loop2: detected capacity change from 0 to 1024 [ 129.569619][ T5859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.595043][ T5328] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.718949][ T4569] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.010220][ T5328] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.031760][ T5328] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.078180][ T5328] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.095450][ T5328] usb 6-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 130.121248][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 130.125905][ T5328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.139767][ T4569] usb 4-1: config 0 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.168176][ T4569] usb 4-1: config 0 interface 0 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.209425][ T5328] usb 6-1: config 0 descriptor?? [ 130.215766][ T4569] usb 4-1: config 0 interface 0 altsetting 19 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.235994][ T4569] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.242945][ T4569] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.259208][ T4569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.277861][ T4569] usb 4-1: config 0 descriptor?? [ 130.592838][ T5907] vivid-003: disconnect [ 130.597902][ T5906] vivid-003: reconnect [ 130.728023][ T5328] wacom 0003:056A:0017.0014: Unknown device_type for 'HID 056a:0017'. Assuming pen. [ 130.782901][ T4569] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 130.803193][ T5328] wacom 0003:056A:0017.0014: hidraw0: USB HID v0.05 Device [HID 056a:0017] on usb-dummy_hcd.5-1/input0 [ 130.813302][ T5918] loop1: detected capacity change from 0 to 1024 [ 130.840895][ T4569] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 130.869938][ T5328] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0017.0014/input/input27 [ 130.896387][ T5923] netlink: 104 bytes leftover after parsing attributes in process `syz.2.618'. [ 130.941969][ T5918] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none. [ 130.985525][ T5328] usb 6-1: USB disconnect, device number 2 [ 131.039633][ T7] usb 4-1: USB disconnect, device number 8 [ 131.642262][ T5958] loop3: detected capacity change from 0 to 256 [ 131.689093][ T5962] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'. [ 131.705432][ T5964] loop5: detected capacity change from 0 to 16 [ 131.787642][ T5964] erofs: (device loop5): mounted with root inode @ nid 36. [ 131.823499][ T5964] attempt to access beyond end of device [ 131.823499][ T5964] loop5: rw=524288, want=268435464, limit=16 [ 131.853804][ T5970] netlink: 'syz.1.635': attribute type 29 has an invalid length. [ 131.862069][ T5970] netlink: 'syz.1.635': attribute type 29 has an invalid length. [ 131.889176][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 131.909164][ T5974] netlink: 'syz.1.635': attribute type 29 has an invalid length. [ 131.998143][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 132.046465][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 132.093558][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 132.155595][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 132.211463][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 132.268489][ T5964] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 132.291427][ T5964] attempt to access beyond end of device [ 132.291427][ T5964] loop5: rw=0, want=268435464, limit=16 [ 132.323734][ T26] audit: type=1800 audit(1745355353.358:6): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.633" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 132.508758][ T5014] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.576614][ T5999] loop5: detected capacity change from 0 to 1024 [ 132.732254][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741488][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.750504][ T154] hfsplus: b-tree write err: -5, ino 4 [ 132.756189][ T5977] loop3: detected capacity change from 0 to 32768 [ 132.854563][ T6005] netlink: 104 bytes leftover after parsing attributes in process `syz.5.646'. [ 132.870450][ T5977] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.637 (5977) [ 132.883241][ T5014] usb 2-1: config 0 interface 0 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.910873][ T5014] usb 2-1: config 0 interface 0 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.931295][ T5014] usb 2-1: config 0 interface 0 altsetting 19 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.970605][ T5014] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.990487][ T5014] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.008757][ T5014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.049497][ T5977] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 133.049747][ T6010] sock: sock_set_timeout: `syz.5.648' (pid 6010) tries to set negative timeout [ 133.059591][ T5014] usb 2-1: config 0 descriptor?? [ 133.084902][ T5977] BTRFS info (device loop3): metadata ratio 2 [ 133.106100][ T5977] BTRFS info (device loop3): enabling ssd optimizations [ 133.157342][ T5977] BTRFS info (device loop3): using spread ssd allocation scheme [ 133.200940][ T5977] BTRFS info (device loop3): enabling disk space caching [ 133.208038][ T5977] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 133.210028][ T6012] loop0: detected capacity change from 0 to 1024 [ 133.259487][ T5977] BTRFS info (device loop3): use zstd compression, level 3 [ 133.266764][ T5977] BTRFS info (device loop3): force clearing of disk cache [ 133.295235][ T5977] BTRFS info (device loop3): max_inline at 8 [ 133.324551][ T5977] BTRFS info (device loop3): disk space caching is enabled [ 133.352487][ T5977] BTRFS info (device loop3): has skinny extents [ 133.472845][ T6003] loop2: detected capacity change from 0 to 32768 [ 133.502774][ T6032] netlink: 9 bytes leftover after parsing attributes in process `syz.5.652'. [ 133.513763][ T6032] device gretap0 entered promiscuous mode [ 133.525221][ T4224] hfsplus: b-tree write err: -5, ino 4 [ 133.577280][ T5977] BTRFS info (device loop3): clearing free space tree [ 133.589575][ T6032] netlink: 5 bytes leftover after parsing attributes in process `syz.5.652'. [ 133.592746][ T5014] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 133.604305][ T6032] 0ªX¹¦D: renamed from gretap0 [ 133.613647][ T6032] device 30ªX¹¦D left promiscuous mode [ 133.624627][ T6003] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 133.624627][ T6003] [ 133.640070][ T5977] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.653402][ T6032] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 133.670263][ T5977] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.678186][ T5014] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 133.680725][ T6003] ERROR: (device loop2): dbDiscardAG: -EIO [ 133.680725][ T6003] [ 133.878015][ T5014] usb 2-1: USB disconnect, device number 7 [ 134.239379][ T6055] loop0: detected capacity change from 0 to 256 [ 134.293999][ T6057] loop2: detected capacity change from 0 to 1024 [ 134.453049][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 134.675928][ T6067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.659'. [ 134.877657][ T6069] loop2: detected capacity change from 0 to 4096 [ 134.899039][ T5014] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 135.063768][ T6075] netlink: 9 bytes leftover after parsing attributes in process `syz.0.665'. [ 135.103265][ T6075] device gretap0 entered promiscuous mode [ 135.143349][ T6061] loop3: detected capacity change from 0 to 40427 [ 135.157194][ T4178] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 135.159843][ T6078] netlink: 5 bytes leftover after parsing attributes in process `syz.0.665'. [ 135.169419][ T4178] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 135.190409][ T6078] 0ªX¹¦D: renamed from gretap0 [ 135.203563][ T6078] device 30ªX¹¦D left promiscuous mode [ 135.206584][ T6080] loop5: detected capacity change from 0 to 8 [ 135.220925][ T6078] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 135.256352][ T6061] F2FS-fs (loop3): invalid crc value [ 135.268975][ T5014] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 135.308516][ T5014] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.312400][ T6080] SQUASHFS error: Unable to read directory block [2c0:35] [ 135.332651][ T6061] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.343898][ T5014] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 135.388893][ T5014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.425770][ T5014] usb 2-1: config 0 descriptor?? [ 135.459330][ T6065] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.538955][ T6061] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 135.647185][ T26] audit: type=1800 audit(1745355356.678:7): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.658" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 135.675006][ T6093] loop0: detected capacity change from 0 to 4096 [ 135.746873][ T4174] attempt to access beyond end of device [ 135.746873][ T4174] loop3: rw=2049, want=45104, limit=40427 [ 135.763281][ T6100] loop5: detected capacity change from 0 to 2048 [ 135.885377][ T6100] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 135.921149][ T5014] konepure 0003:1E7D:2DBE.0017: unknown main item tag 0x0 [ 135.937640][ T5014] konepure 0003:1E7D:2DBE.0017: unknown main item tag 0x0 [ 135.989557][ T5014] konepure 0003:1E7D:2DBE.0017: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 136.079636][ T6100] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,errors=continue,mblk_io_submit,minixdf,auto_da_alloc,grpjquota=,bsddf,. Quota mode: none. [ 136.130939][ T6089] loop2: detected capacity change from 0 to 32768 [ 136.152765][ T6058] usb 2-1: USB disconnect, device number 8 [ 136.220127][ T6089] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.672 (6089) [ 136.275861][ T6089] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 136.312338][ T6089] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.334393][ T6089] BTRFS info (device loop2): use zstd compression, level 3 [ 136.384448][ T6089] BTRFS info (device loop2): using free space tree [ 136.409331][ T6089] BTRFS info (device loop2): has skinny extents [ 136.575635][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 136.739253][ T6089] BTRFS info (device loop2): enabling ssd optimizations [ 136.798859][ T5014] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 136.870095][ T6153] netlink: 1021 bytes leftover after parsing attributes in process `syz.3.689'. [ 137.158940][ T5014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.186201][ T5014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.207874][ T5014] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 137.242283][ T5014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.253532][ T5014] usb 6-1: config 0 descriptor?? [ 137.288849][ T1325] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.649052][ T1325] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 137.658620][ T1325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.670933][ T1325] usb 2-1: config 0 descriptor?? [ 137.750932][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.765336][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.772377][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.788989][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.795648][ T6179] loop2: detected capacity change from 0 to 32768 [ 137.795741][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.815628][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.822590][ T5014] kye 0003:0458:0138.0018: unknown main item tag 0x0 [ 137.831011][ T5014] kye 0003:0458:0138.0018: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.5-1/input0 [ 137.878324][ T6179] XFS (loop2): Mounting V5 Filesystem [ 137.920270][ T6179] XFS (loop2): Ending clean mount [ 137.978174][ T6171] usb 6-1: USB disconnect, device number 3 [ 137.981419][ T4178] XFS (loop2): Unmounting Filesystem [ 137.994822][ T6198] loop3: detected capacity change from 0 to 16 [ 138.061957][ T6198] erofs: (device loop3): mounted with root inode @ nid 36. [ 138.369070][ T1325] usb 2-1: Cannot set autoneg [ 138.374389][ T1325] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 138.386190][ T1325] usb 2-1: USB disconnect, device number 9 [ 138.766476][ T6207] loop5: detected capacity change from 0 to 32768 [ 138.818795][ T5328] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.872869][ T6207] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.702 (6207) [ 138.941123][ T6207] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 138.961922][ T6207] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.992489][ T6207] BTRFS info (device loop5): use zstd compression, level 3 [ 139.038150][ T6207] BTRFS info (device loop5): using free space tree [ 139.069193][ T6207] BTRFS info (device loop5): has skinny extents [ 139.089042][ T5328] usb 3-1: Using ep0 maxpacket: 32 [ 139.334362][ T6220] loop1: detected capacity change from 0 to 32768 [ 139.421070][ T6220] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 139.448224][ T6220] (syz.1.707,6220,0):ocfs2_load_local_alloc:338 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 139.448224][ T6220] found = 5, set = 0, taken = 0, off = 0 [ 139.448947][ T6207] BTRFS info (device loop5): enabling ssd optimizations [ 139.468801][ T6220] (syz.1.707,6220,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 139.483774][ T6220] (syz.1.707,6220,0):ocfs2_check_volume:2462 ERROR: status = -22 [ 139.491574][ T6220] (syz.1.707,6220,0):ocfs2_check_volume:2490 ERROR: status = -22 [ 139.499397][ T6220] (syz.1.707,6220,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 139.513406][ T6220] (syz.1.707,6220,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 139.669790][ T5328] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 139.707132][ T6228] loop3: detected capacity change from 0 to 32768 [ 139.733925][ T5328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.761583][ T6228] XFS: ikeep mount option is deprecated. [ 139.774723][ T5328] usb 3-1: Product: syz [ 139.790508][ T5328] usb 3-1: SerialNumber: syz [ 139.832380][ T5328] usb 3-1: config 0 descriptor?? [ 139.896038][ T6228] XFS (loop3): Mounting V5 Filesystem [ 140.198996][ T6171] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.213930][ T5014] usb 3-1: USB disconnect, device number 9 [ 140.290941][ T6228] XFS (loop3): Ending clean mount [ 140.306617][ T6228] XFS (loop3): Quotacheck needed: Please wait. [ 140.372661][ T6258] loop0: detected capacity change from 0 to 4096 [ 140.415362][ T6228] XFS (loop3): Quotacheck: Done. [ 140.429343][ T6258] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 140.563329][ T4174] XFS (loop3): Unmounting Filesystem [ 140.635442][ T6171] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 140.652463][ T6171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.674188][ T6171] usb 2-1: config 0 descriptor?? [ 140.971935][ T6171] kaweth 2-1:0.0: Firmware present in device. [ 141.012821][ T6280] netlink: 96 bytes leftover after parsing attributes in process `syz.0.724'. [ 141.144939][ T6288] netlink: 52 bytes leftover after parsing attributes in process `syz.5.727'. [ 141.169186][ T4569] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.177056][ T6171] kaweth 2-1:0.0: Statistics collection: 0 [ 141.183489][ T6171] kaweth 2-1:0.0: Multicast filter limit: 0 [ 141.208234][ T6171] kaweth 2-1:0.0: MTU: 0 [ 141.218692][ T6171] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 141.388010][ T6292] loop5: detected capacity change from 0 to 4096 [ 141.405312][ T6171] kaweth: probe of 2-1:0.0 failed with error -5 [ 141.419124][ T6171] usb 2-1: USB disconnect, device number 10 [ 141.448854][ T4569] usb 3-1: Using ep0 maxpacket: 8 [ 141.450818][ T6292] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 141.569230][ T4569] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 141.578325][ T4569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.646624][ T4569] usb 3-1: config 0 descriptor?? [ 141.655145][ T6308] netlink: 48 bytes leftover after parsing attributes in process `syz.0.737'. [ 142.045314][ T6335] loop5: detected capacity change from 0 to 16 [ 142.145087][ T4569] nti 0003:0757:0A00.0019: unknown main item tag 0xd [ 142.152499][ T6335] erofs: (device loop5): mounted with root inode @ nid 36. [ 142.168041][ T4569] nti 0003:0757:0A00.0019: unexpected long global item [ 142.205082][ T4569] nti: probe of 0003:0757:0A00.0019 failed with error -22 [ 142.217039][ T6335] erofs: (device loop5): z_erofs_readahead: readahead error at page 3604 @ nid 36 [ 142.278896][ T6335] erofs: (device loop5): z_erofs_readahead: readahead error at page 3603 @ nid 36 [ 142.311933][ T6335] erofs: (device loop5): z_erofs_readahead: readahead error at page 3602 @ nid 36 [ 142.350024][ T6335] erofs: (device loop5): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 142.359462][ T6335] erofs: (device loop5): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 142.389046][ T6171] usb 3-1: USB disconnect, device number 10 [ 142.392847][ T6335] erofs: (device loop5): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 142.766059][ T6357] loop5: detected capacity change from 0 to 4096 [ 142.855912][ T6330] loop3: detected capacity change from 0 to 32768 [ 142.911179][ T6357] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nogrpid,init_itable,dioread_nolock,errors=remount-ro,. Quota mode: writeback. [ 142.930802][ T6330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.743 (6330) [ 142.965781][ T6330] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 143.039008][ T6330] BTRFS info (device loop3): using free space tree [ 143.071070][ T6330] BTRFS info (device loop3): has skinny extents [ 143.248949][ T5025] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 143.399497][ T6330] BTRFS info (device loop3): enabling ssd optimizations [ 143.480807][ T6330] 9pnet: p9_fd_create_unix (6330): problem connecting socket: ./file0: -30 [ 143.619011][ T5025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.650649][ T5025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.680842][ T5025] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.715294][ T5025] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 143.744393][ T5025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.754036][ T6419] netlink: 96 bytes leftover after parsing attributes in process `syz.5.763'. [ 143.798891][ T5025] usb 3-1: config 0 descriptor?? [ 143.977924][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.5.765'. [ 143.998084][ T6392] loop1: detected capacity change from 0 to 32768 [ 144.062759][ T6392] XFS: ikeep mount option is deprecated. [ 144.172615][ T6434] netlink: 52 bytes leftover after parsing attributes in process `syz.3.761'. [ 144.181958][ T5025] usbhid 3-1:0.0: can't add hid device: -71 [ 144.187965][ T5025] usbhid: probe of 3-1:0.0 failed with error -71 [ 144.224753][ T5025] usb 3-1: USB disconnect, device number 11 [ 144.401183][ T6392] XFS (loop1): Mounting V5 Filesystem [ 144.615142][ T6392] XFS (loop1): Ending clean mount [ 144.671409][ T6392] XFS (loop1): Quotacheck needed: Please wait. [ 144.752690][ T26] audit: type=1326 audit(1745355365.788:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb81aec169 code=0x0 [ 144.787922][ T6392] XFS (loop1): Quotacheck: Done. [ 145.009374][ T4166] XFS (loop1): Unmounting Filesystem [ 145.376669][ T6489] loop5: detected capacity change from 0 to 64 [ 146.052967][ T6529] netlink: 'syz.5.796': attribute type 30 has an invalid length. [ 146.273652][ T6541] loop2: detected capacity change from 0 to 1024 [ 146.447030][ T6541] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,nombcache,,errors=continue. Quota mode: none. [ 146.469652][ T6541] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.030053][ T6587] loop5: detected capacity change from 0 to 16 [ 147.369463][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 147.392600][ T6587] erofs: (device loop5): mounted with root inode @ nid 36. [ 147.528924][ T5025] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 147.888817][ T5025] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.908023][ T5025] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.018919][ T5025] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 148.028376][ T5025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.069916][ T5025] usb 2-1: SerialNumber: syz [ 148.131792][ T5025] usb 2-1: 0:2 : does not exist [ 148.137621][ T5025] usb 2-1: unit 101 not found! [ 148.166544][ T6634] netlink: 'syz.3.828': attribute type 30 has an invalid length. [ 148.318394][ T6638] loop5: detected capacity change from 0 to 256 [ 148.379593][ T5025] usb 2-1: USB disconnect, device number 11 [ 148.440646][ T6638] FAT-fs (loop5): Directory bread(block 64) failed [ 148.447785][ T6638] FAT-fs (loop5): Directory bread(block 65) failed [ 148.497850][ T6638] FAT-fs (loop5): Directory bread(block 66) failed [ 148.541116][ T6638] FAT-fs (loop5): Directory bread(block 67) failed [ 148.547758][ T6638] FAT-fs (loop5): Directory bread(block 68) failed [ 148.556644][ T6638] FAT-fs (loop5): Directory bread(block 69) failed [ 148.564964][ T6638] FAT-fs (loop5): Directory bread(block 70) failed [ 148.571918][ T6638] FAT-fs (loop5): Directory bread(block 71) failed [ 148.579160][ T6638] FAT-fs (loop5): Directory bread(block 72) failed [ 148.586016][ T6638] FAT-fs (loop5): Directory bread(block 73) failed [ 148.595574][ T6646] CUSE: unknown device info "íSüÑìidOvé­¯P]¿%F“]Mì1˜ŽðàeÄmm÷×/ªSè…pµ0ý_ôÁJ!@4šÞZ2×öˆEkSñt‰±ÄÑ¡«ÇbZàH3" [ 148.622639][ T6646] CUSE: DEVNAME unspecified [ 148.737235][ T6650] loop3: detected capacity change from 0 to 1024 [ 148.780355][ T6650] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,nombcache,,errors=continue. Quota mode: none. [ 148.794775][ T6650] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.063137][ T6664] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 149.208323][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 149.248278][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 149.272791][ T6670] nbd: socks must be embedded in a SOCK_ITEM attr [ 149.458585][ T6685] loop1: detected capacity change from 0 to 1024 [ 149.626099][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,nombcache,,errors=continue. Quota mode: none. [ 149.672813][ T6685] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.840939][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.864'. [ 149.854493][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 149.868104][ T6712] nbd: socks must be embedded in a SOCK_ITEM attr [ 149.898903][ T5025] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.929018][ T6428] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.138919][ T5025] usb 4-1: Using ep0 maxpacket: 8 [ 150.143599][ T6729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 150.175599][ T6428] usb 3-1: Using ep0 maxpacket: 16 [ 150.258982][ T5025] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 150.274305][ T5025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.294781][ T5025] usb 4-1: config 0 descriptor?? [ 150.300241][ T6428] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 150.313042][ T6428] usb 3-1: config 0 has no interface number 0 [ 150.328810][ T6428] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.508967][ T6428] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 150.528389][ T6428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.548735][ T6428] usb 3-1: Product: syz [ 150.552937][ T6428] usb 3-1: Manufacturer: syz [ 150.557545][ T6428] usb 3-1: SerialNumber: syz [ 150.578928][ T5025] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 150.581017][ T6730] loop5: detected capacity change from 0 to 32768 [ 150.609839][ T6428] usb 3-1: config 0 descriptor?? [ 150.670056][ T6428] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 150.715284][ T6730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.871 (6730) [ 150.824826][ T6730] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 150.844208][ T6730] BTRFS info (device loop5): using free space tree [ 150.864017][ T6730] BTRFS info (device loop5): has skinny extents [ 150.885766][ T5012] usb 3-1: USB disconnect, device number 12 [ 150.899083][ T154] usb 3-1: Failed to submit usb control message: -71 [ 150.918898][ T154] usb 3-1: unable to send the bmi data to the device: -71 [ 150.926155][ T154] usb 3-1: unable to get target info from device [ 150.956999][ T154] usb 3-1: could not get target info (-71) [ 150.971591][ T154] usb 3-1: could not probe fw (-71) [ 151.019057][ T5025] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 151.049023][ T5025] asix: probe of 4-1:0.0 failed with error -71 [ 151.074239][ T5025] usb 4-1: USB disconnect, device number 9 [ 151.167813][ T6730] BTRFS info (device loop5): enabling ssd optimizations [ 151.237272][ T6730] 9pnet: p9_fd_create_unix (6730): problem connecting socket: ./file0: -30 [ 151.298998][ T5007] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 151.688984][ T5007] usb 2-1: config 0 interface 0 altsetting 101 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 151.700219][ T6775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.728744][ T5007] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.755964][ T5007] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 151.783926][ T5007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.834789][ T5007] usb 2-1: config 0 descriptor?? [ 151.948801][ T6773] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.078825][ T5025] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 152.187066][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 152.218863][ T5012] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 152.318962][ T6773] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 152.322259][ T5007] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x2 [ 152.338024][ T6773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.338366][ T5007] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x3 [ 152.355151][ T6773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.359446][ T5007] hid-rmi 0003:06CB:81A7.001A: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 152.366621][ T6773] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 152.396652][ T6773] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 152.406057][ T6773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.427922][ T6773] usb 3-1: config 0 descriptor?? [ 152.448971][ T5025] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.460699][ T5025] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.471028][ T5025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 152.477660][ T5025] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 152.487018][ T5025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.497491][ T5025] usb 6-1: config 0 descriptor?? [ 152.544634][ T6058] usb 2-1: USB disconnect, device number 12 [ 152.628870][ T5012] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.639299][ T5012] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.648258][ T5012] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.657462][ T5012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.667603][ T5012] usb 4-1: config 0 descriptor?? [ 152.710476][ T5012] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 152.717504][ T5012] dvb-usb: bulk message failed: -22 (3/0) [ 152.736261][ T5012] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.759414][ T5012] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.766988][ T5012] usb 4-1: media controller created [ 152.774321][ T5012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.788625][ T5012] dvb-usb: bulk message failed: -22 (6/0) [ 152.795017][ T5012] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.842586][ T5012] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 152.857572][ T5012] dvb-usb: schedule remote query interval to 150 msecs. [ 152.864650][ T5012] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 152.921362][ T6773] hid-picolcd 0003:04D8:C002.001B: item fetching failed at offset 3/7 [ 152.935057][ T6773] hid-picolcd 0003:04D8:C002.001B: device report parse failed [ 152.943805][ T6773] hid-picolcd: probe of 0003:04D8:C002.001B failed with error -22 [ 152.975703][ T5012] usb 4-1: USB disconnect, device number 10 [ 152.990753][ T5025] zeroplus 0003:0C12:0005.001C: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.5-1/input0 [ 153.002370][ T5025] zeroplus 0003:0C12:0005.001C: no inputs found [ 153.060470][ T5012] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 153.114178][ T5025] usb 3-1: USB disconnect, device number 13 [ 153.137920][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 153.206412][ T5007] usb 6-1: USB disconnect, device number 4 [ 153.357245][ T6816] loop1: detected capacity change from 0 to 512 [ 153.407213][ T6816] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.421238][ T6816] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.900: bg 0: block 248: padding at end of block bitmap is not set [ 153.449619][ T6816] Quota error (device loop1): write_blk: dquota write failed [ 153.457400][ T6816] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.467536][ T6816] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.900: Failed to acquire dquot type 1 [ 153.485771][ T6816] EXT4-fs (loop1): 1 truncate cleaned up [ 153.493988][ T6816] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.536684][ T6816] syz.1.900 (6816) used greatest stack depth: 18752 bytes left [ 153.758399][ T6824] loop1: detected capacity change from 0 to 2048 [ 153.877218][ T6824] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.331520][ T6852] netlink: 'syz.5.919': attribute type 3 has an invalid length. [ 154.709334][ T6830] loop2: detected capacity change from 0 to 32768 [ 154.718750][ T5025] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 154.839014][ T4565] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.896177][ T6876] loop5: detected capacity change from 0 to 1024 [ 154.910978][ T6830] XFS (loop2): Mounting V5 Filesystem [ 154.980346][ T6830] XFS (loop2): Ending clean mount [ 154.998506][ T6830] XFS (loop2): Quotacheck needed: Please wait. [ 155.018279][ T3026] hfsplus: b-tree write err: -5, ino 4 [ 155.087158][ T6830] XFS (loop2): Quotacheck: Done. [ 155.089942][ T4565] usb 2-1: Using ep0 maxpacket: 8 [ 155.109092][ T5025] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.135536][ T5025] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.156027][ T5025] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.175951][ T5025] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 155.196815][ T5025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.216122][ T6883] loop5: detected capacity change from 0 to 1024 [ 155.225174][ T26] audit: type=1800 audit(1745355376.258:9): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.908" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 155.250411][ T5025] usb 4-1: config 0 descriptor?? [ 155.269044][ T4565] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 155.282557][ T4565] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 155.294061][ T4565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.312427][ T4565] usb 2-1: config 0 descriptor?? [ 155.743596][ T5025] zeroplus 0003:0C12:0005.001D: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 155.769141][ T5025] zeroplus 0003:0C12:0005.001D: no inputs found [ 155.787016][ T4565] hid-generic 0003:04D8:00DF.001E: unbalanced collection at end of report description [ 155.806385][ T4178] XFS (loop2): Unmounting Filesystem [ 155.844432][ T4565] hid-generic: probe of 0003:04D8:00DF.001E failed with error -22 [ 155.961623][ T6773] usb 4-1: USB disconnect, device number 11 [ 156.008142][ T4571] usb 2-1: USB disconnect, device number 13 [ 156.043119][ T1130] hfsplus: b-tree write err: -5, ino 8 [ 156.449876][ T6900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 156.718167][ T6915] loop2: detected capacity change from 0 to 64 [ 157.056995][ T6933] loop2: detected capacity change from 0 to 128 [ 157.148941][ T6937] loop5: detected capacity change from 0 to 512 [ 157.170241][ T6936] device veth0_macvtap left promiscuous mode [ 157.218947][ T6936] device macvtap0 entered promiscuous mode [ 157.263473][ T6936] device veth0_macvtap entered promiscuous mode [ 157.290664][ T6937] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.329803][ T6937] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.359394][ T6936] team0: Device macvtap0 failed to register rx_handler [ 157.387423][ T6936] device veth0_macvtap left promiscuous mode [ 157.419413][ T6937] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 157.435890][ T6937] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 157.447118][ T6937] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.957: Failed to acquire dquot type 0 [ 157.545053][ T6947] loop2: detected capacity change from 0 to 16 [ 157.558607][ T6947] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.602161][ T6911] loop3: detected capacity change from 0 to 40427 [ 157.664900][ T6911] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 157.715268][ T6911] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 157.765864][ T6911] F2FS-fs (loop3): invalid crc value [ 157.803468][ T6954] loop1: detected capacity change from 0 to 2048 [ 157.818273][ T6911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.873507][ T6954] NILFS (loop1): corrupt root inode [ 157.884638][ T6961] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.897865][ T6960] loop2: detected capacity change from 0 to 1024 [ 158.026920][ T6911] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 158.068851][ T6911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 158.099282][ T1130] hfsplus: b-tree write err: -5, ino 4 [ 158.430055][ T6953] loop5: detected capacity change from 0 to 32768 [ 158.675325][ T4571] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.900437][ T6967] loop1: detected capacity change from 0 to 32768 [ 158.956865][ T6967] XFS: ikeep mount option is deprecated. [ 158.962862][ T4571] usb 3-1: Using ep0 maxpacket: 8 [ 159.086820][ T6967] XFS (loop1): Mounting V5 Filesystem [ 159.106259][ T4571] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 159.115490][ T4571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.137643][ T4571] usb 3-1: config 0 descriptor?? [ 159.200170][ T6967] XFS (loop1): Ending clean mount [ 159.220830][ T6967] XFS (loop1): Quotacheck needed: Please wait. [ 159.318437][ T6967] XFS (loop1): Quotacheck: Done. [ 159.377984][ T4166] XFS (loop1): Unmounting Filesystem [ 159.399091][ T4571] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.611462][ T6999] loop5: detected capacity change from 0 to 40427 [ 159.685745][ T6999] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 159.705255][ T6999] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 159.732178][ T6999] F2FS-fs (loop5): invalid crc value [ 159.785059][ T6999] F2FS-fs (loop5): Found nat_bits in checkpoint [ 159.849044][ T4571] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 159.868949][ T4571] asix: probe of 3-1:0.0 failed with error -71 [ 159.888177][ T4571] usb 3-1: USB disconnect, device number 14 [ 159.913692][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.992'. [ 159.924747][ T6999] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 159.933091][ T6999] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 159.941263][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.992'. [ 160.071213][ T7020] loop1: detected capacity change from 0 to 128 [ 160.597874][ T7044] loop2: detected capacity change from 0 to 1024 [ 160.704479][ T7050] loop5: detected capacity change from 0 to 16 [ 160.733540][ T7044] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 160.779490][ T7050] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 160.805228][ T7044] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 161.274368][ T7046] loop1: detected capacity change from 0 to 40427 [ 161.334377][ T7063] loop2: detected capacity change from 0 to 512 [ 161.373514][ T7046] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 161.387834][ T7046] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 161.455840][ T7063] EXT4-fs (loop2): 1 orphan inode deleted [ 161.458342][ T7039] loop3: detected capacity change from 0 to 32768 [ 161.463114][ T7063] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.480723][ T7063] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.486469][ T7046] F2FS-fs (loop1): invalid crc value [ 161.528495][ T7046] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.697374][ T7046] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 161.711486][ T7046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 162.025416][ T7080] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1018'. [ 162.192253][ T7086] loop5: detected capacity change from 0 to 64 [ 162.237737][ T7088] device veth0_macvtap left promiscuous mode [ 162.254836][ T7088] device macvtap0 entered promiscuous mode [ 162.293681][ T7088] device veth0_macvtap entered promiscuous mode [ 162.343429][ T7088] team0: Device macvtap0 failed to register rx_handler [ 162.401403][ T7088] device veth0_macvtap left promiscuous mode [ 162.429591][ T6058] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 162.452805][ T7095] loop1: detected capacity change from 0 to 4096 [ 162.645283][ T7109] loop3: detected capacity change from 0 to 8 [ 162.666756][ T7095] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.882195][ T4174] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 162.899214][ T6058] usb 3-1: config 0 interface 0 altsetting 101 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 162.909236][ T4174] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 162.920895][ T6058] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.927715][ T6058] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 162.958354][ T6058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.006380][ T6058] usb 3-1: config 0 descriptor?? [ 163.316616][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.429854][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.475073][ T7115] loop5: detected capacity change from 0 to 40427 [ 163.518139][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.537175][ T6058] hid-rmi 0003:06CB:81A7.001F: unknown main item tag 0x2 [ 163.554664][ T7115] F2FS-fs (loop5): invalid crc value [ 163.568789][ T6058] hid-rmi 0003:06CB:81A7.001F: unknown main item tag 0x3 [ 163.588373][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.589552][ T6058] hid-rmi 0003:06CB:81A7.001F: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 163.616136][ T7115] F2FS-fs (loop5): Found nat_bits in checkpoint [ 163.718872][ T7115] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 163.801069][ T6058] usb 3-1: USB disconnect, device number 15 [ 163.864354][ T5548] attempt to access beyond end of device [ 163.864354][ T5548] loop5: rw=2049, want=45104, limit=40427 [ 164.093832][ T7129] lo speed is unknown, defaulting to 1000 [ 164.635977][ T4166] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 164.771576][ T7155] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1042'. [ 164.787505][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 164.816497][ T7155] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 165.094960][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.114320][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.190327][ T7129] device bridge_slave_0 entered promiscuous mode [ 165.283786][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.295750][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.310586][ T7129] device bridge_slave_1 entered promiscuous mode [ 165.319585][ T7180] loop1: detected capacity change from 0 to 1024 [ 165.416538][ T7180] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 165.467434][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.517008][ T7180] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 165.618143][ T7184] loop5: detected capacity change from 0 to 4096 [ 165.644168][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.690581][ T144] device hsr_slave_0 left promiscuous mode [ 165.703253][ T144] device hsr_slave_1 left promiscuous mode [ 165.745919][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.758916][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.808060][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.818463][ T7184] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 165.837252][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.868240][ T144] device bridge_slave_1 left promiscuous mode [ 165.897340][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.951095][ T7195] loop1: detected capacity change from 0 to 4096 [ 165.976083][ T144] device bridge_slave_0 left promiscuous mode [ 165.984679][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.054983][ T144] device veth1_macvtap left promiscuous mode [ 166.098963][ T6773] Bluetooth: hci2: command 0x0409 tx timeout [ 166.103305][ T144] device veth0_macvtap left promiscuous mode [ 166.158072][ T144] device veth1_vlan left promiscuous mode [ 166.196656][ T144] device veth0_vlan left promiscuous mode [ 166.909737][ T144] team0 (unregistering): Port device team_slave_1 removed [ 166.963330][ T144] team0 (unregistering): Port device team_slave_0 removed [ 167.001093][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.055054][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.272238][ T144] bond0 (unregistering): Released all slaves [ 167.433160][ T7129] team0: Port device team_slave_0 added [ 167.487282][ T7129] team0: Port device team_slave_1 added [ 167.550252][ T7231] loop1: detected capacity change from 0 to 8 [ 167.636105][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.669919][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.703081][ T7231] SQUASHFS error: Failed to read block 0x2fc: -5 [ 167.730595][ T7231] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 167.735456][ T7238] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 167.737920][ T7231] SQUASHFS error: Unable to read directory block [247:26] [ 167.768222][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.788388][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.807190][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.816861][ T7238] SQUASHFS error: Unable to read directory block [247:26] [ 167.869570][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.982108][ T7129] device hsr_slave_0 entered promiscuous mode [ 167.997839][ T7129] device hsr_slave_1 entered promiscuous mode [ 168.057239][ T7129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.088220][ T7129] Cannot create hsr debugfs directory [ 168.168956][ T5012] Bluetooth: hci2: command 0x041b tx timeout [ 168.380487][ T5548] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 168.620968][ T7129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 168.659161][ T7129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 168.690794][ T7129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 168.733024][ T7129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 169.077231][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.132676][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.159614][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.231504][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.283150][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.336386][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.376882][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.384035][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.415018][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.490108][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.510095][ T7261] loop1: detected capacity change from 0 to 32768 [ 169.550031][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.616920][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.624084][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.690379][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.720744][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.756212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.799684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.811561][ T7306] loop5: detected capacity change from 0 to 256 [ 169.842345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.879010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.925783][ T7129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.997920][ T7129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.047247][ T7277] loop2: detected capacity change from 0 to 32768 [ 170.079722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.099829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.149370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.181283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.193861][ T7277] XFS: noikeep mount option is deprecated. [ 170.232003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.248938][ T5007] Bluetooth: hci2: command 0x040f tx timeout [ 170.297320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.365247][ T7277] XFS (loop2): Mounting V5 Filesystem [ 170.473589][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 170.491780][ T7334] nbd: socks must be embedded in a SOCK_ITEM attr [ 170.560702][ T7277] XFS (loop2): Ending clean mount [ 170.604210][ T7277] XFS (loop2): Quotacheck needed: Please wait. [ 170.641048][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1101'. [ 170.660157][ T7341] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1101'. [ 170.699607][ T7277] XFS (loop2): Quotacheck: Done. [ 170.740594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.748098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.772211][ T7341] netlink: 'syz.0.1101': attribute type 6 has an invalid length. [ 170.803859][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.827045][ T7341] netlink: 'syz.0.1101': attribute type 5 has an invalid length. [ 170.874532][ T7341] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1101'. [ 170.979750][ T4178] XFS (loop2): Unmounting Filesystem [ 171.330928][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.364736][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.429338][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.439853][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.486139][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.519512][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.568295][ T7129] device veth0_vlan entered promiscuous mode [ 171.615553][ T7129] device veth1_vlan entered promiscuous mode [ 171.703971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.738443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.782044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.812297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.847816][ T7129] device veth0_macvtap entered promiscuous mode [ 171.905528][ T7129] device veth1_macvtap entered promiscuous mode [ 171.999146][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.040326][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.071789][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.138739][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.154221][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.165776][ T7385] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1113'. [ 172.202079][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.207224][ T7385] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1113'. [ 172.212718][ T7387] loop2: detected capacity change from 0 to 256 [ 172.247865][ T7385] netlink: 'syz.5.1113': attribute type 6 has an invalid length. [ 172.256086][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.272543][ T7385] netlink: 'syz.5.1113': attribute type 5 has an invalid length. [ 172.293490][ T7385] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1113'. [ 172.308606][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.326066][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.329143][ T5025] Bluetooth: hci2: command 0x0419 tx timeout [ 172.359076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.381522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.411900][ T7387] exfat: Deprecated parameter 'utf8' [ 172.417259][ T7387] exfat: Deprecated parameter 'utf8' [ 172.424746][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.448981][ T7387] exfat: Deprecated parameter 'utf8' [ 172.454307][ T7387] exfat: Deprecated parameter 'utf8' [ 172.458674][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.521705][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.565658][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.606933][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.637601][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.657837][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.678672][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.728768][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.738549][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.772657][ T7387] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 172.791497][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.826675][ T7129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.878684][ T7129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.887435][ T7129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.943030][ T7129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.176605][ T7414] loop2: detected capacity change from 0 to 1024 [ 173.224693][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.245805][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.330464][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.355609][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.370431][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.417359][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.947525][ T7401] loop5: detected capacity change from 0 to 32768 [ 174.021821][ T7401] XFS: noikeep mount option is deprecated. [ 174.209489][ T7464] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.328896][ T7401] XFS (loop5): Mounting V5 Filesystem [ 174.517744][ T7401] XFS (loop5): Ending clean mount [ 174.539362][ T7401] XFS (loop5): Quotacheck needed: Please wait. [ 174.549484][ T6058] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 174.649894][ T7401] XFS (loop5): Quotacheck: Done. [ 174.775410][ T5548] XFS (loop5): Unmounting Filesystem [ 174.865488][ T6058] usb 2-1: Using ep0 maxpacket: 16 [ 174.918748][ T5012] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 175.019021][ T6058] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.039368][ T6058] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.068680][ T6058] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.099893][ T6058] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.106656][ T6058] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 175.117872][ T6058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.129910][ T6058] usb 2-1: config 0 descriptor?? [ 175.170070][ T7501] loop6: detected capacity change from 0 to 8192 [ 175.183517][ T5012] usb 3-1: Using ep0 maxpacket: 16 [ 175.267212][ T7501] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 175.287680][ T7501] REISERFS (device loop6): using ordered data mode [ 175.304667][ T7501] reiserfs: using flush barriers [ 175.318845][ T7501] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.349561][ T5012] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.384215][ T7501] REISERFS (device loop6): checking transaction log (loop6) [ 175.415945][ T7501] REISERFS (device loop6): Using r5 hash to sort names [ 175.428938][ T5012] usb 3-1: config 5 has an invalid interface number: 227 but max is 0 [ 175.464763][ T5012] usb 3-1: config 5 has no interface number 0 [ 175.481379][ T5012] usb 3-1: config 5 interface 227 has no altsetting 0 [ 175.510737][ T7501] REISERFS warning (device loop6): super-6502 reiserfs_getopt: unknown mount option "noload" [ 175.571818][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 175.612088][ T6058] hid-generic 0003:045E:05DA.0020: unbalanced collection at end of report description [ 175.639389][ T6058] hid-generic: probe of 0003:045E:05DA.0020 failed with error -22 [ 175.656184][ T5012] usb 3-1: New USB device found, idVendor=1453, idProduct=4026, bcdDevice=fa.af [ 175.705883][ T5012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.733824][ T5012] usb 3-1: Product: syz [ 175.738040][ T5012] usb 3-1: Manufacturer: syz [ 175.757614][ T5012] usb 3-1: SerialNumber: syz [ 175.822911][ T6058] usb 2-1: USB disconnect, device number 14 [ 176.100211][ T5012] pl2303 3-1:5.227: required endpoints missing [ 176.114743][ T5012] usb 3-1: USB disconnect, device number 16 [ 176.427453][ T7546] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 176.597367][ T7537] loop6: detected capacity change from 0 to 32768 [ 176.642964][ T7537] XFS: noikeep mount option is deprecated. [ 176.849462][ T7537] XFS (loop6): Mounting V5 Filesystem [ 177.106335][ T7537] XFS (loop6): Ending clean mount [ 177.149553][ T7537] XFS (loop6): Quotacheck needed: Please wait. [ 177.235078][ T7537] XFS (loop6): Quotacheck: Done. [ 177.367532][ T7129] XFS (loop6): Unmounting Filesystem [ 177.549620][ T7610] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 177.887340][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1194'. [ 178.422338][ T7646] loop5: detected capacity change from 0 to 256 [ 178.598288][ T7652] sp0: Synchronizing with TNC [ 178.744998][ T7622] loop1: detected capacity change from 0 to 32768 [ 178.818609][ T7622] XFS: noikeep mount option is deprecated. [ 178.866774][ T7626] loop2: detected capacity change from 0 to 32768 [ 178.965427][ T7622] XFS (loop1): Mounting V5 Filesystem [ 178.977431][ T7626] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1193 (7626) [ 179.077831][ T7626] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 179.095566][ T7626] BTRFS info (device loop2): use zlib compression, level 3 [ 179.107011][ T7626] BTRFS info (device loop2): using free space tree [ 179.120978][ T7622] XFS (loop1): Ending clean mount [ 179.130565][ T7622] XFS (loop1): Quotacheck needed: Please wait. [ 179.180824][ T7622] XFS (loop1): Quotacheck: Done. [ 179.180835][ T7626] BTRFS info (device loop2): has skinny extents [ 179.270337][ T4166] XFS (loop1): Unmounting Filesystem [ 179.573517][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1215'. [ 179.626122][ T7626] BTRFS info (device loop2): enabling ssd optimizations [ 179.688438][ T7655] loop6: detected capacity change from 0 to 32768 [ 179.701954][ T26] audit: type=1800 audit(1745355400.738:10): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1193" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 179.862813][ T7655] XFS (loop6): Mounting V5 Filesystem [ 180.038855][ T7655] XFS (loop6): Ending clean mount [ 180.400770][ T7655] XFS (loop6): Quotacheck needed: Please wait. [ 180.529163][ T7720] loop2: detected capacity change from 0 to 1024 [ 180.564439][ T7655] XFS (loop6): Quotacheck: Done. [ 180.677651][ T7129] XFS (loop6): Unmounting Filesystem [ 180.798295][ T4224] hfsplus: b-tree write err: -5, ino 4 [ 180.808331][ T7724] loop5: detected capacity change from 0 to 764 [ 181.114790][ T7734] loop2: detected capacity change from 0 to 64 [ 181.347082][ T7740] loop1: detected capacity change from 0 to 2048 [ 181.529973][ T7740] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.638080][ T7740] EXT4-fs error (device loop1): ext4_ext_precache:608: inode #2: comm syz.1.1238: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 182.363076][ T7751] loop6: detected capacity change from 0 to 32768 [ 182.633427][ T7760] loop2: detected capacity change from 0 to 32768 [ 182.658768][ T4208] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 182.795829][ T7760] XFS (loop2): Mounting V5 Filesystem [ 182.980689][ T7760] XFS (loop2): Ending clean mount [ 182.988046][ T7760] XFS (loop2): Quotacheck needed: Please wait. [ 183.039993][ T4208] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 183.066890][ T4208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.098156][ T7760] XFS (loop2): Quotacheck: Done. [ 183.106450][ T4208] usb 6-1: config 0 descriptor?? [ 183.248427][ T4178] XFS (loop2): Unmounting Filesystem [ 183.589173][ T4208] ath6kl: Unsupported hardware version: 0x0 [ 183.615815][ T4208] ath6kl: Failed to init ath6kl core: -22 [ 183.647235][ T4208] ath6kl_usb: probe of 6-1:0.0 failed with error -22 [ 183.798331][ T4208] usb 6-1: USB disconnect, device number 5 [ 183.802180][ T7809] loop1: detected capacity change from 0 to 32768 [ 184.099105][ T4565] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 184.358987][ T4565] usb 7-1: Using ep0 maxpacket: 16 [ 184.479511][ T4565] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.533336][ T4565] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.548878][ T4565] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.579443][ T4565] usb 7-1: config 0 interface 0 has no altsetting 0 [ 184.596360][ T4565] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 184.626945][ T4565] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.644902][ T4565] usb 7-1: config 0 descriptor?? [ 184.672666][ T7840] loop1: detected capacity change from 0 to 32768 [ 184.781378][ T7840] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1269 (7840) [ 184.838951][ T7840] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 184.869373][ T7840] BTRFS info (device loop1): enabling auto defrag [ 184.877845][ T7840] BTRFS info (device loop1): use no compression [ 184.915752][ T7840] BTRFS info (device loop1): force clearing of disk cache [ 184.941116][ T7840] BTRFS info (device loop1): max_inline at 4096 [ 184.962150][ T7840] BTRFS info (device loop1): disabling free space tree [ 184.993806][ T7840] BTRFS info (device loop1): has skinny extents [ 185.031478][ T7854] loop2: detected capacity change from 0 to 64 [ 185.147519][ T26] audit: type=1800 audit(1745355406.178:11): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1274" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 185.176539][ T4565] hid-generic 0003:045E:05DA.0021: unbalanced collection at end of report description [ 185.188571][ T7847] loop5: detected capacity change from 0 to 32768 [ 185.204116][ T4565] hid-generic: probe of 0003:045E:05DA.0021 failed with error -22 [ 185.320743][ T7840] BTRFS info (device loop1): enabling ssd optimizations [ 185.377281][ T7840] BTRFS info (device loop1): clearing free space tree [ 185.382503][ T7847] XFS (loop5): Mounting V5 Filesystem [ 185.389808][ T7840] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.406247][ T4565] usb 7-1: USB disconnect, device number 2 [ 185.432657][ T7840] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.490013][ T7847] XFS (loop5): Ending clean mount [ 185.647990][ T5548] XFS (loop5): Unmounting Filesystem [ 186.022213][ T6058] Bluetooth: hci0: command 0x0406 tx timeout [ 186.103654][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 187.238946][ T7911] loop6: detected capacity change from 0 to 32768 [ 187.320041][ T7911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1286 (7911) [ 187.401103][ T7911] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 187.457326][ T7911] BTRFS info (device loop6): use zlib compression, level 3 [ 187.487911][ T7911] BTRFS info (device loop6): using free space tree [ 187.528464][ T7911] BTRFS info (device loop6): has skinny extents [ 187.638494][ T7932] loop2: detected capacity change from 0 to 32768 [ 187.695037][ T7932] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1293 (7932) [ 187.854234][ T7932] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.898951][ T7932] BTRFS info (device loop2): enabling auto defrag [ 187.910129][ T7988] loop1: detected capacity change from 0 to 8192 [ 187.928996][ T7932] BTRFS info (device loop2): use no compression [ 187.979095][ T7932] BTRFS info (device loop2): force clearing of disk cache [ 187.989045][ T7988] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 187.990544][ T7932] BTRFS info (device loop2): max_inline at 4096 [ 188.018869][ T7932] BTRFS info (device loop2): disabling free space tree [ 188.030268][ T7988] REISERFS (device loop1): using ordered data mode [ 188.040823][ T7932] BTRFS info (device loop2): has skinny extents [ 188.048774][ T7911] BTRFS info (device loop6): enabling ssd optimizations [ 188.086281][ T26] audit: type=1800 audit(1745355409.118:12): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1286" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 188.134559][ T7988] reiserfs: using flush barriers [ 188.218614][ T7988] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.365259][ T7932] BTRFS info (device loop2): enabling ssd optimizations [ 188.401496][ T7988] REISERFS (device loop1): checking transaction log (loop1) [ 188.455540][ T7988] REISERFS (device loop1): Using r5 hash to sort names [ 188.460281][ T7932] BTRFS info (device loop2): clearing free space tree [ 188.468807][ T7988] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 188.485257][ T7988] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 188.536598][ T7932] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.595558][ T7988] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=119, len=0 - odd [ 188.611379][ T7932] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.745942][ T7996] loop5: detected capacity change from 0 to 32768 [ 189.506683][ T8071] netlink: 'syz.5.1318': attribute type 1 has an invalid length. [ 190.074998][ T8097] loop2: detected capacity change from 0 to 512 [ 190.204434][ T8097] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 190.258828][ T8097] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 190.276636][ T8115] loop5: detected capacity change from 0 to 512 [ 190.360258][ T8097] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 190.368209][ T8097] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 190.391331][ T8097] System zones: 0-1, 15-15, 18-18, 34-34 [ 190.418342][ T8097] EXT4-fs (loop2): orphan cleanup on readonly fs [ 190.428821][ T8097] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 190.453058][ T8115] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.509183][ T8097] EXT4-fs warning (device loop2): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 190.590690][ T8097] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 190.615498][ T8097] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1329: bg 0: block 40: padding at end of block bitmap is not set [ 190.630441][ T8115] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.660693][ T8097] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 190.697244][ T8097] EXT4-fs (loop2): 1 truncate cleaned up [ 190.728997][ T8097] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsold,norecovery,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 190.798295][ T8115] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.1336: corrupted inode contents [ 190.819349][ T8140] loop1: detected capacity change from 0 to 512 [ 190.820011][ T8097] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 190.869726][ T8145] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 190.887602][ T8115] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #2: comm syz.5.1336: mark_inode_dirty error [ 190.912027][ T8140] EXT4-fs (loop1): Ignoring removed orlov option [ 190.926254][ T8115] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.1336: corrupted inode contents [ 190.987620][ T8140] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,orlov,minixdf,,errors=continue. Quota mode: writeback. [ 191.019002][ T8140] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.726209][ T6058] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 192.006919][ T8210] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 192.019035][ T6058] usb 7-1: Using ep0 maxpacket: 16 [ 192.110647][ T8216] loop1: detected capacity change from 0 to 16 [ 192.160659][ T6058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.181942][ T6058] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.210303][ T8216] erofs: (device loop1): mounted with root inode @ nid 36. [ 192.210904][ T6058] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 192.247042][ T6058] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.278577][ T6058] usb 7-1: config 0 descriptor?? [ 192.316127][ T8218] loop2: detected capacity change from 0 to 8192 [ 192.396005][ T8218] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 192.421135][ T8218] REISERFS (device loop2): using ordered data mode [ 192.441410][ T8218] reiserfs: using flush barriers [ 192.468384][ T8218] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.485230][ T8218] REISERFS (device loop2): checking transaction log (loop2) [ 192.508697][ T8218] REISERFS (device loop2): Using r5 hash to sort names [ 192.516142][ T8218] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 192.535021][ T8218] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 192.570640][ T8218] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=119, len=0 - odd [ 192.782378][ T6058] nzxt-kraken2 0003:1E71:170E.0022: unknown main item tag 0x7 [ 192.800173][ T6058] nzxt-kraken2 0003:1E71:170E.0022: unbalanced delimiter at end of report description [ 192.845370][ T6058] nzxt-kraken2 0003:1E71:170E.0022: hid parse failed with -22 [ 192.870245][ T6058] nzxt-kraken2: probe of 0003:1E71:170E.0022 failed with error -22 [ 192.989681][ T6058] usb 7-1: USB disconnect, device number 3 [ 193.046527][ T8251] ptrace attach of "./syz-executor exec"[4178] was attempted by ""[8251] [ 193.966596][ T8276] loop2: detected capacity change from 0 to 32768 [ 194.066450][ T8276] (syz.2.1384,8276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.081034][ T8276] (syz.2.1384,8276,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.123983][ T8276] JBD2: Ignoring recovery information on journal [ 194.157434][ T8276] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 194.171417][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177786][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.335347][ T4178] ocfs2: Unmounting device (7,2) on (node local) [ 194.557424][ T8307] loop5: detected capacity change from 0 to 1024 [ 194.578795][ T4288] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 194.626711][ T8307] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 194.666042][ T8307] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 194.682754][ T8307] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.716692][ T8307] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.1396: Inode bitmap for bg 0 marked uninitialized [ 194.738053][ T8317] loop6: detected capacity change from 0 to 128 [ 194.761011][ T8307] EXT4-fs (loop5): Remounting filesystem read-only [ 194.771480][ T8307] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000080,errors=remount-ro,usrjquota=,lazytime,. Quota mode: writeback. [ 194.840875][ T8307] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:510: comm syz.5.1396: Block bitmap for bg 0 marked uninitialized [ 194.876734][ T8319] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.938831][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.971366][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.023319][ T4288] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 195.038766][ T4288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.100451][ T4288] usb 2-1: config 0 descriptor?? [ 195.115022][ T8327] ptrace attach of "./syz-executor exec"[4167] was attempted by ""[8327] [ 195.169504][ T8323] loop6: detected capacity change from 0 to 4096 [ 195.255578][ T8323] ntfs: (device loop6): parse_options(): NLS character set tefault not found. Using previous one cp864. [ 195.311378][ T8323] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 195.325449][ T8323] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 195.342353][ T8323] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 195.354420][ T8323] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 195.367680][ T8323] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 195.382493][ T8323] ntfs: volume version 3.1. [ 195.396615][ T8323] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 195.417563][ T8323] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 195.444689][ T8323] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 195.470755][ T8323] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 195.483129][ T8323] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 195.488928][ T6058] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 195.514404][ T8323] ntfs: (device loop6): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 195.563069][ T8323] ntfs: (device loop6): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 195.591563][ T4288] holtek 0003:1241:5015.0023: item fetching failed at offset 3/5 [ 195.599017][ T8323] ntfs: (device loop6): load_and_init_quota(): Failed to load $Quota/$Q index. [ 195.609290][ T4288] holtek 0003:1241:5015.0023: parse failed [ 195.616639][ T8323] ntfs: (device loop6): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 195.625357][ T4288] holtek: probe of 0003:1241:5015.0023 failed with error -22 [ 195.734607][ T8323] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp864. You might want to try to use the mount option nls=utf8. [ 195.761197][ T8323] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 195.788766][ T6058] usb 3-1: Using ep0 maxpacket: 32 [ 195.815280][ T4390] usb 2-1: USB disconnect, device number 15 [ 195.888876][ T8354] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 195.898049][ T8353] loop5: detected capacity change from 0 to 2048 [ 195.952491][ T8356] loop6: detected capacity change from 0 to 512 [ 195.969398][ T6058] usb 3-1: config 0 has an invalid interface number: 173 but max is 0 [ 195.983699][ T6058] usb 3-1: config 0 has no interface number 0 [ 195.997386][ T8353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.018776][ T8356] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.174759][ T8356] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.189342][ T6058] usb 3-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=db.5b [ 196.198421][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.207129][ T6058] usb 3-1: Product: syz [ 196.212022][ T6058] usb 3-1: Manufacturer: syz [ 196.216641][ T6058] usb 3-1: SerialNumber: syz [ 196.223420][ T6058] usb 3-1: config 0 descriptor?? [ 196.247016][ T8356] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #2: comm syz.6.1418: corrupted inode contents [ 196.256602][ T8049] Bluetooth: hci4: command 0x0406 tx timeout [ 196.276967][ T8356] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #2: comm syz.6.1418: mark_inode_dirty error [ 196.290236][ T6058] ftdi_sio 3-1:0.173: FTDI USB Serial Device converter detected [ 196.304861][ T6058] usb 3-1: Detected FT-X [ 196.323099][ T8356] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #2: comm syz.6.1418: corrupted inode contents [ 196.520748][ T6058] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 196.539109][ T6058] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 196.587440][ T6058] ftdi_sio 3-1:0.173: GPIO initialisation failed: -71 [ 196.597620][ T6058] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 196.634393][ T6058] usb 3-1: USB disconnect, device number 17 [ 196.651990][ T6058] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 196.687624][ T6058] ftdi_sio 3-1:0.173: device disconnected [ 196.711123][ T8390] loop6: detected capacity change from 0 to 256 [ 197.088176][ T8407] netlink: 'syz.6.1442': attribute type 9 has an invalid length. [ 197.112634][ T8413] loop2: detected capacity change from 0 to 512 [ 197.188586][ T8417] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1445'. [ 197.198149][ T8413] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.240411][ T8413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.393544][ T8413] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1441: corrupted inode contents [ 197.409480][ T8413] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.1441: mark_inode_dirty error [ 197.435395][ T8427] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 197.473108][ T8413] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1441: corrupted inode contents [ 198.085477][ T8443] loop5: detected capacity change from 0 to 512 [ 198.112585][ T8429] loop1: detected capacity change from 0 to 40427 [ 198.161755][ T8444] loop6: detected capacity change from 0 to 4096 [ 198.173776][ T8429] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 198.182373][ T8429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 198.198370][ T8429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.308586][ T8429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 198.315763][ T8429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.324816][ T8433] loop2: detected capacity change from 0 to 32768 [ 198.330837][ T8443] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,nobarrier,,errors=continue. Quota mode: writeback. [ 198.380229][ T8443] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.412050][ T8433] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 198.412050][ T8433] [ 198.482397][ T8433] ERROR: (device loop2): remounting filesystem as read-only [ 198.526432][ T8433] ERROR: (device loop2): jfs_unlink: [ 198.526432][ T8433] [ 198.710390][ T4178] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 198.710390][ T4178] [ 198.748967][ T4178] ERROR: (device loop2): remounting filesystem as read-only [ 199.041356][ T8470] loop6: detected capacity change from 0 to 256 [ 199.073643][ T8472] loop1: detected capacity change from 0 to 256 [ 199.075623][ T8474] loop2: detected capacity change from 0 to 256 [ 199.100531][ T8470] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.126623][ T8474] exfat: Deprecated parameter 'namecase' [ 199.160176][ T8472] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 199.174266][ T8474] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 199.497261][ T8485] loop1: detected capacity change from 0 to 512 [ 199.586051][ T8485] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.663872][ T8485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.707153][ T8495] loop6: detected capacity change from 0 to 128 [ 199.728873][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 199.789322][ T8485] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.1474: corrupted inode contents [ 199.809250][ T8476] loop5: detected capacity change from 0 to 32768 [ 199.866566][ T8485] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz.1.1474: mark_inode_dirty error [ 199.888998][ T8485] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #2: comm syz.1.1474: corrupted inode contents [ 199.983056][ T8507] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1482'. [ 200.022025][ T8476] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 200.101218][ T8511] netlink: 'syz.6.1484': attribute type 4 has an invalid length. [ 200.238890][ T5548] XFS (loop5): Unmounting Filesystem [ 200.425153][ T8522] IPVS: ovf: UDP 0.0.0.0:0 - no destination available [ 200.630468][ T8501] loop2: detected capacity change from 0 to 32768 [ 201.484430][ T8533] loop1: detected capacity change from 0 to 32768 [ 201.629363][ T8533] XFS (loop1): Mounting V5 Filesystem [ 201.727317][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 201.788923][ T8049] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 201.807608][ T8533] XFS (loop1): Ending clean mount [ 201.821203][ T8585] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 201.835421][ T8533] XFS (loop1): Quotacheck needed: Please wait. [ 201.843969][ T8585] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 201.915919][ T8533] XFS (loop1): Quotacheck: Done. [ 201.929515][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 202.036136][ T4166] XFS (loop1): Unmounting Filesystem [ 202.159687][ T8049] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.193409][ T8049] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.240134][ T8049] usb 7-1: config 0 descriptor?? [ 202.278384][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1519'. [ 202.296005][ T8049] cp210x 7-1:0.0: cp210x converter detected [ 202.324837][ T8599] loop2: detected capacity change from 0 to 16 [ 202.361614][ T8601] loop5: detected capacity change from 0 to 8 [ 202.441496][ T8601] SQUASHFS error: lzo decompression failed, data probably corrupt [ 202.450254][ T8599] erofs: (device loop2): mounted with root inode @ nid 36. [ 202.500310][ T8601] SQUASHFS error: Failed to read block 0x71: -5 [ 202.514086][ T8599] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 202.543179][ T8601] SQUASHFS error: lzo decompression failed, data probably corrupt [ 202.591096][ T8601] SQUASHFS error: Failed to read block 0x71: -5 [ 202.592065][ T8599] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -6 in[55, 4041] out[1851] [ 202.616355][ T26] audit: type=1800 audit(1745355423.648:13): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1521" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 202.709039][ T8599] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 202.726782][ T8604] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 202.738993][ T8604] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -6 in[55, 4041] out[1851] [ 202.775697][ T8606] 9pnet: p9_fd_create_unix (8606): problem connecting socket: éq‰Y’3aK: -111 [ 202.804908][ T8604] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 202.969060][ T8049] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 202.978829][ T8049] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 203.038132][ T8049] usb 7-1: cp210x converter now attached to ttyUSB0 [ 203.050333][ T8614] loop1: detected capacity change from 0 to 256 [ 203.070477][ T8049] usb 7-1: USB disconnect, device number 4 [ 203.075719][ T8616] loop2: detected capacity change from 0 to 1024 [ 203.089345][ T8049] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 203.097878][ T8049] cp210x 7-1:0.0: device disconnected [ 203.110299][ T8614] exfat: Deprecated parameter 'namecase' [ 203.169890][ T8614] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 203.247266][ T8616] hfsplus: bad catalog entry type [ 203.300885][ T9] hfsplus: b-tree write err: -5, ino 4 [ 203.406478][ T8625] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 203.426353][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 203.442829][ T8626] loop2: detected capacity change from 0 to 8 [ 203.822267][ T8645] loop5: detected capacity change from 0 to 64 [ 203.978524][ T13] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 203.996745][ T13] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 204.252505][ T8669] mmap: syz.6.1553 (8669) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 204.297434][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1555'. [ 204.770679][ T8688] loop1: detected capacity change from 0 to 4096 [ 204.835224][ T8698] syz.5.1566 uses obsolete (PF_INET,SOCK_PACKET) [ 204.877599][ T8703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1569'. [ 204.921707][ T8688] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 205.090003][ T26] audit: type=1800 audit(1745355426.128:14): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1560" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 205.223025][ T8720] loop2: detected capacity change from 0 to 1024 [ 205.265369][ T8720] EXT4-fs (loop2): Ignoring removed orlov option [ 205.374265][ T8720] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 205.517620][ T8733] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 205.557439][ T26] audit: type=1800 audit(1745355426.588:15): pid=8720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1577" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 205.593485][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.603407][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.710168][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.717373][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.726563][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.733719][ T8733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.754850][ T8733] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.868744][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 205.912994][ T8736] device bridge_slave_1 left promiscuous mode [ 205.921355][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.960115][ T8736] device bridge_slave_0 left promiscuous mode [ 205.981069][ T8744] loop2: detected capacity change from 0 to 64 [ 205.987564][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.036682][ T8736] bond0: (slave bridge0): Releasing backup interface [ 206.435337][ T8758] netlink: 'syz.5.1594': attribute type 196 has an invalid length. [ 206.569851][ T8738] loop1: detected capacity change from 0 to 32768 [ 206.651609][ T8738] ERROR: (device loop1): diWrite: ixpxd invalid [ 206.651609][ T8738] [ 206.702083][ T8738] ERROR: (device loop1): remounting filesystem as read-only [ 206.711991][ T8738] ERROR: (device loop1): txCommit: [ 206.711991][ T8738] [ 206.719767][ T4288] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 206.969299][ T4288] usb 7-1: Using ep0 maxpacket: 32 [ 207.080311][ T8786] loop1: detected capacity change from 0 to 16 [ 207.089241][ T4288] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.111134][ T8786] erofs: (device loop1): mounted with root inode @ nid 36. [ 207.127466][ T4288] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.161438][ T146] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 207.190395][ T8786] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 207.213780][ T26] audit: type=1800 audit(1745355428.248:16): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1603" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 207.258148][ T8790] loop2: detected capacity change from 0 to 1024 [ 207.269289][ T4288] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.307466][ T4288] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 207.316628][ T8049] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 207.352876][ T4288] usb 7-1: Product: syz [ 207.377578][ T4288] usb 7-1: Manufacturer: syz [ 207.412459][ T154] hfsplus: b-tree write err: -5, ino 4 [ 207.430206][ T4288] hub 7-1:4.0: USB hub found [ 207.649255][ T4288] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 207.708978][ T8049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.709017][ T8049] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 207.709049][ T8049] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 207.709091][ T8049] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 207.709118][ T8049] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.724231][ T8049] usb 6-1: config 0 descriptor?? [ 207.743716][ T8782] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.909453][ T8807] loop2: detected capacity change from 0 to 8192 [ 207.970728][ T13] usb 7-1: USB disconnect, device number 5 [ 208.115338][ T8817] loop1: detected capacity change from 0 to 64 [ 208.166660][ T8817] hfs: request for non-existent node 56 in B*Tree [ 208.184691][ T8817] hfs: request for non-existent node 56 in B*Tree [ 208.184853][ T8817] hfs: request for non-existent node 57 in B*Tree [ 208.184868][ T8817] hfs: request for non-existent node 57 in B*Tree [ 208.210699][ T8049] aureal 0003:0755:2626.0025: unknown main item tag 0x6 [ 208.283151][ T8049] aureal 0003:0755:2626.0025: report_id 29495 is invalid [ 208.311332][ T8049] aureal 0003:0755:2626.0025: item 0 2 1 8 parsing failed [ 208.327966][ T8049] aureal: probe of 0003:0755:2626.0025 failed with error -22 [ 208.428896][ T4390] usb 6-1: USB disconnect, device number 6 [ 208.790458][ T8847] loop6: detected capacity change from 0 to 512 [ 208.803120][ T8847] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.816238][ T8847] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 208.828233][ T8847] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 208.838854][ T8847] System zones: 0-2, 18-18, 34-34 [ 208.846506][ T8847] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 208.863662][ T8847] EXT4-fs (loop6): 1 truncate cleaned up [ 208.871150][ T8847] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000003,usrquota,. Quota mode: writeback. [ 208.895234][ T8847] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.1637: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 208.900575][ T8049] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 208.926190][ T8847] EXT4-fs (loop6): Remounting filesystem read-only [ 209.136649][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1640'. [ 209.279027][ T8049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.295573][ T8049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.307345][ T8049] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 209.322625][ T8049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.335518][ T8049] usb 2-1: config 0 descriptor?? [ 209.488885][ T4288] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 209.643494][ T8880] loop2: detected capacity change from 0 to 2048 [ 209.728845][ T4288] usb 7-1: Using ep0 maxpacket: 8 [ 209.786318][ T8880] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 209.820236][ T8880] EXT4-fs error (device loop2): ext4_find_extent:929: inode #2: comm syz.2.1651: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 209.825420][ T8049] wacom 0003:056A:0063.0026: ignoring exceeding usage max [ 209.850323][ T8049] wacom 0003:056A:0063.0026: Unknown device_type for 'HID 056a:0063'. Assuming pen. [ 209.872451][ T8049] wacom 0003:056A:0063.0026: hidraw0: USB HID v0.00 Device [HID 056a:0063] on usb-dummy_hcd.1-1/input0 [ 209.884431][ T4288] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.895429][ T4288] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.906835][ T8049] input: Wacom Volito2 2x3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0063.0026/input/input32 [ 209.919278][ T4288] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.933067][ T4288] usb 7-1: config 0 interface 0 has no altsetting 0 [ 209.939558][ T8880] EXT4-fs (loop2): Remounting filesystem read-only [ 209.940557][ T4288] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 209.955614][ T4288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.968917][ T4288] usb 7-1: config 0 descriptor?? [ 210.028049][ T8049] usb 2-1: USB disconnect, device number 16 [ 210.307592][ T8896] loop5: detected capacity change from 0 to 64 [ 210.450785][ T4288] chicony 0003:04F2:1421.0027: bogus close delimiter [ 210.457586][ T4288] chicony 0003:04F2:1421.0027: item 0 2 2 10 parsing failed [ 210.491728][ T4288] chicony 0003:04F2:1421.0027: Chicony hid parse failed: -22 [ 210.499663][ T4288] chicony: probe of 0003:04F2:1421.0027 failed with error -22 [ 210.527465][ T8900] sp0: Synchronizing with TNC [ 210.603252][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1659'. [ 210.661973][ T4288] usb 7-1: USB disconnect, device number 6 [ 210.694709][ T8904] netlink: 'syz.1.1661': attribute type 29 has an invalid length. [ 210.728543][ T8904] netlink: 'syz.1.1661': attribute type 29 has an invalid length. [ 210.750726][ T8909] netlink: 'syz.1.1661': attribute type 29 has an invalid length. [ 210.761593][ T8908] loop2: detected capacity change from 0 to 1024 [ 210.765112][ T8906] loop5: detected capacity change from 0 to 2048 [ 210.846023][ T8906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.883534][ T8911] loop1: detected capacity change from 0 to 512 [ 211.048051][ T8911] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 211.105837][ T8911] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.231870][ T8911] EXT4-fs error (device loop1): ext4_get_first_dir_block:3597: inode #12: comm syz.1.1664: Attempting to read directory block (0) that is past i_size (3) [ 211.319039][ T8911] EXT4-fs (loop1): Remounting filesystem read-only [ 211.469063][ T8915] loop5: detected capacity change from 0 to 32768 [ 211.613113][ T8915] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 211.811540][ T8926] (syz.5.1665,8926,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 211.893922][ T8926] (syz.5.1665,8926,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 211.924359][ T8926] (syz.5.1665,8926,1):ocfs2_symlink:1864 ERROR: status = -2 [ 211.936993][ T8919] loop6: detected capacity change from 0 to 32768 [ 211.945277][ T8917] loop2: detected capacity change from 0 to 32768 [ 211.948721][ T8926] (syz.5.1665,8926,1):ocfs2_symlink:2065 ERROR: status = -2 [ 212.027124][ T8917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1666 (8917) [ 212.054911][ T5548] ocfs2: Unmounting device (7,5) on (node local) [ 212.073014][ T8917] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 212.129988][ T8917] BTRFS info (device loop2): force clearing of disk cache [ 212.139148][ T8917] BTRFS info (device loop2): enabling auto defrag [ 212.155925][ T8917] BTRFS info (device loop2): max_inline at 0 [ 212.210560][ T8919] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 212.258799][ T8917] BTRFS info (device loop2): enabling disk space caching [ 212.292944][ T8917] BTRFS info (device loop2): disk space caching is enabled [ 212.326789][ T8917] BTRFS info (device loop2): has skinny extents [ 212.435165][ T7129] (syz-executor,7129,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 212.459624][ T7129] ocfs2: Unmounting device (7,6) on (node local) [ 212.760278][ T8925] loop1: detected capacity change from 0 to 65536 [ 212.782766][ T8917] BTRFS info (device loop2): enabling ssd optimizations [ 212.815458][ T8917] BTRFS info (device loop2): clearing free space tree [ 212.871143][ T8917] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.918986][ T8917] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.952340][ T8925] XFS (loop1): Mounting V5 Filesystem [ 213.233490][ T8937] loop5: detected capacity change from 0 to 32768 [ 213.233991][ T8925] XFS (loop1): Ending clean mount [ 213.308959][ T8937] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1670 (8937) [ 213.719420][ T4166] XFS (loop1): Unmounting Filesystem [ 213.722990][ T8937] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 213.754799][ T8937] BTRFS info (device loop5): turning off barriers [ 213.812596][ T8937] BTRFS info (device loop5): enabling auto defrag [ 213.828781][ T8937] BTRFS info (device loop5): doing ref verification [ 213.835459][ T8937] BTRFS info (device loop5): force clearing of disk cache [ 213.879307][ T8937] BTRFS info (device loop5): max_inline at 4096 [ 213.892534][ T8937] BTRFS info (device loop5): turning on barriers [ 213.938889][ T8937] BTRFS info (device loop5): disabling free space tree [ 213.960096][ T8937] BTRFS info (device loop5): has skinny extents [ 214.106717][ T8984] loop2: detected capacity change from 0 to 128 [ 214.156983][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1683'. [ 214.236803][ T8984] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.268816][ T8984] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.288422][ T8937] BTRFS info (device loop5): enabling ssd optimizations [ 214.343407][ T8937] BTRFS info (device loop5): clearing free space tree [ 214.368727][ T8937] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 214.421471][ T8937] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.670740][ T5007] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 214.813959][ T9015] loop1: detected capacity change from 0 to 256 [ 214.898988][ T9015] exfat: Deprecated parameter 'namecase' [ 214.904707][ T9015] exfat: Deprecated parameter 'utf8' [ 214.933002][ T9015] exfat: Deprecated parameter 'utf8' [ 214.938899][ T5007] usb 7-1: Using ep0 maxpacket: 16 [ 215.003757][ T9015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 215.064937][ T5007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.102101][ T5007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.130056][ T5007] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 215.189676][ T5007] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.228712][ T5007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.267004][ T5007] usb 7-1: config 0 descriptor?? [ 215.607653][ T9043] damon: kdamond (9043) starts [ 215.717598][ T9045] loop1: detected capacity change from 0 to 1024 [ 215.758416][ T9049] netlink: zone id is out of range [ 215.764875][ T5007] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 215.765526][ T9049] netlink: zone id is out of range [ 215.785430][ T9049] netlink: zone id is out of range [ 215.787981][ T5007] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0028/input/input35 [ 215.791740][ T9049] netlink: zone id is out of range [ 215.816008][ T9050] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 215.848828][ T5007] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 215.853903][ T9049] netlink: zone id is out of range [ 215.925187][ T9049] netlink: zone id is out of range [ 215.971542][ T5007] usb 7-1: USB disconnect, device number 7 [ 216.000163][ T4249] hfsplus: b-tree write err: -5, ino 4 [ 216.151491][ T9029] loop2: detected capacity change from 0 to 32768 [ 216.339635][ T9070] netlink: 'syz.1.1712': attribute type 5 has an invalid length. [ 217.211614][ T9064] loop5: detected capacity change from 0 to 40427 [ 217.491673][ T9064] F2FS-fs (loop5): invalid crc value [ 217.502325][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 217.566587][ T9064] F2FS-fs (loop5): Found nat_bits in checkpoint [ 217.752120][ T9111] loop2: detected capacity change from 0 to 1024 [ 217.765595][ T9064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 217.845765][ T9116] loop1: detected capacity change from 0 to 8 [ 217.968873][ T4390] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 217.980223][ T26] audit: type=1800 audit(1745355439.018:17): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1733" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 218.025478][ T144] hfsplus: b-tree write err: -5, ino 4 [ 218.294240][ T9125] loop2: detected capacity change from 0 to 512 [ 218.310383][ T9129] loop5: detected capacity change from 0 to 256 [ 218.353408][ T9125] EXT4-fs (loop2): Ignoring removed nobh option [ 218.370421][ T9129] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 218.378843][ T9125] EXT4-fs (loop2): Ignoring removed nobh option [ 218.448277][ T9125] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 218.466837][ T9125] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1738: invalid indirect mapped block 4294967295 (level 2) [ 218.534835][ T9135] loop5: detected capacity change from 0 to 256 [ 218.563432][ T9125] EXT4-fs (loop2): 1 truncate cleaned up [ 218.569779][ T9125] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nolazytime,nobh,nobh,acl,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,nouid32,,,errors=continue. Quota mode: writeback. [ 218.638871][ T4390] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 218.647947][ T4390] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.685141][ T4390] usb 7-1: Product: syz [ 218.689454][ T4390] usb 7-1: Manufacturer: syz [ 218.694065][ T4390] usb 7-1: SerialNumber: syz [ 218.722667][ T4390] usb 7-1: config 0 descriptor?? [ 218.820793][ T9141] loop5: detected capacity change from 0 to 2048 [ 218.869885][ T9123] loop1: detected capacity change from 0 to 32768 [ 218.954516][ T9147] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.986902][ T4390] usb-storage 7-1:0.0: USB Mass Storage device detected [ 219.022351][ T9123] XFS (loop1): Mounting V5 Filesystem [ 219.112367][ T4390] usb 7-1: USB disconnect, device number 8 [ 219.167174][ T9123] XFS (loop1): Ending clean mount [ 219.191636][ T9123] XFS (loop1): Quotacheck needed: Please wait. [ 219.366167][ T9123] XFS (loop1): Quotacheck: Done. [ 219.449418][ T4166] XFS (loop1): Unmounting Filesystem [ 219.546077][ T9164] loop2: detected capacity change from 0 to 32768 [ 219.665465][ T9164] (syz.2.1750,9164,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 219.706995][ T9164] (syz.2.1750,9164,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 219.798198][ T9164] JBD2: Ignoring recovery information on journal [ 219.806868][ T9190] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1762'. [ 219.845796][ T9188] loop6: detected capacity change from 0 to 1024 [ 219.854105][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1762'. [ 219.863339][ T4211] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 219.864951][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1762'. [ 219.881172][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1762'. [ 219.920430][ T9164] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.060427][ T9164] [ 220.062794][ T9164] ====================================================== [ 220.069821][ T9164] WARNING: possible circular locking dependency detected [ 220.076842][ T9164] 5.15.180-syzkaller #0 Not tainted [ 220.082044][ T9164] ------------------------------------------------------ [ 220.089064][ T9164] syz.2.1750/9164 is trying to acquire lock: [ 220.095045][ T9164] ffff888075321808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 220.107683][ T9164] [ 220.107683][ T9164] but task is already holding lock: [ 220.115052][ T9164] ffff88801db8a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 220.124643][ T9164] [ 220.124643][ T9164] which lock already depends on the new lock. [ 220.124643][ T9164] [ 220.135155][ T9164] [ 220.135155][ T9164] the existing dependency chain (in reverse order) is: [ 220.144270][ T9164] [ 220.144270][ T9164] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 220.151968][ T9164] lock_acquire+0x1db/0x4f0 [ 220.157024][ T9164] __mutex_lock_common+0x1da/0x25a0 [ 220.162764][ T9164] mutex_lock_nested+0x17/0x20 [ 220.168156][ T9164] dquot_commit+0x57/0x510 [ 220.173116][ T9164] ext4_write_dquot+0x1fd/0x360 [ 220.178512][ T9164] mark_all_dquot_dirty+0xf7/0x400 [ 220.184182][ T9164] __dquot_free_space+0x932/0xe40 [ 220.189831][ T9164] ext4_free_blocks+0x1f5c/0x2e90 [ 220.195379][ T9164] ext4_ext_remove_space+0x24da/0x4db0 [ 220.201361][ T9164] ext4_ext_truncate+0x191/0x250 [ 220.206818][ T9164] ext4_truncate+0x9fd/0x1130 [ 220.212013][ T9164] ext4_evict_inode+0xba1/0x1100 [ 220.217469][ T9164] evict+0x529/0x930 [ 220.221881][ T9164] vfs_rmdir+0x33c/0x460 [ 220.226642][ T9164] do_rmdir+0x368/0x670 [ 220.231315][ T9164] __x64_sys_unlinkat+0xdc/0xf0 [ 220.236682][ T9164] do_syscall_64+0x3b/0x80 [ 220.241617][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.248028][ T9164] [ 220.248028][ T9164] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 220.255671][ T9164] lock_acquire+0x1db/0x4f0 [ 220.260690][ T9164] down_write+0x38/0x60 [ 220.265447][ T9164] ext4_map_blocks+0x9a2/0x1c70 [ 220.270814][ T9164] ext4_writepages+0x160e/0x3d10 [ 220.276275][ T9164] do_writepages+0x481/0x730 [ 220.281394][ T9164] __writeback_single_inode+0x15b/0xe30 [ 220.287466][ T9164] writeback_sb_inodes+0xbce/0x1a40 [ 220.293180][ T9164] __writeback_inodes_wb+0x114/0x400 [ 220.298981][ T9164] wb_writeback+0x465/0xc50 [ 220.304003][ T9164] wb_workfn+0xd07/0x1130 [ 220.308853][ T9164] process_one_work+0x8a1/0x10c0 [ 220.314313][ T9164] worker_thread+0xaca/0x1280 [ 220.319506][ T9164] kthread+0x3f6/0x4f0 [ 220.324090][ T9164] ret_from_fork+0x1f/0x30 [ 220.329037][ T9164] [ 220.329037][ T9164] -> #4 (jbd2_handle){++++}-{0:0}: [ 220.336335][ T9164] lock_acquire+0x1db/0x4f0 [ 220.341452][ T9164] start_this_handle+0x12e1/0x1570 [ 220.347080][ T9164] jbd2__journal_start+0x2d1/0x5c0 [ 220.352706][ T9164] jbd2_journal_start+0x25/0x30 [ 220.358079][ T9164] ocfs2_start_trans+0x3c2/0x6f0 [ 220.363533][ T9164] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 220.369772][ T9164] ocfs2_dismount_volume+0x1db/0x8b0 [ 220.375590][ T9164] generic_shutdown_super+0x130/0x310 [ 220.381487][ T9164] kill_block_super+0x7a/0xe0 [ 220.386702][ T9164] deactivate_locked_super+0xa0/0x110 [ 220.392599][ T9164] cleanup_mnt+0x44e/0x500 [ 220.397534][ T9164] task_work_run+0x129/0x1a0 [ 220.402654][ T9164] exit_to_user_mode_loop+0x106/0x130 [ 220.408541][ T9164] exit_to_user_mode_prepare+0xb1/0x140 [ 220.414608][ T9164] syscall_exit_to_user_mode+0x5d/0x240 [ 220.420673][ T9164] do_syscall_64+0x47/0x80 [ 220.425606][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.432014][ T9164] [ 220.432014][ T9164] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 220.440544][ T9164] lock_acquire+0x1db/0x4f0 [ 220.445568][ T9164] down_read+0x45/0x2e0 [ 220.450241][ T9164] ocfs2_start_trans+0x3b7/0x6f0 [ 220.455693][ T9164] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 220.461930][ T9164] ocfs2_dismount_volume+0x1db/0x8b0 [ 220.467734][ T9164] generic_shutdown_super+0x130/0x310 [ 220.473624][ T9164] kill_block_super+0x7a/0xe0 [ 220.478818][ T9164] deactivate_locked_super+0xa0/0x110 [ 220.484708][ T9164] cleanup_mnt+0x44e/0x500 [ 220.489642][ T9164] task_work_run+0x129/0x1a0 [ 220.494747][ T9164] exit_to_user_mode_loop+0x106/0x130 [ 220.500634][ T9164] exit_to_user_mode_prepare+0xb1/0x140 [ 220.506694][ T9164] syscall_exit_to_user_mode+0x5d/0x240 [ 220.512754][ T9164] do_syscall_64+0x47/0x80 [ 220.517690][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.524102][ T9164] [ 220.524102][ T9164] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 220.531665][ T9164] lock_acquire+0x1db/0x4f0 [ 220.536696][ T9164] ocfs2_start_trans+0x2b2/0x6f0 [ 220.542149][ T9164] ocfs2_write_info+0x124/0x3a0 [ 220.547519][ T9164] dquot_set_dqinfo+0x488/0x6f0 [ 220.552895][ T9164] quota_setinfo+0x3d6/0x4f0 [ 220.558006][ T9164] __se_sys_quotactl+0x2b1/0x770 [ 220.563460][ T9164] do_syscall_64+0x3b/0x80 [ 220.568395][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.574805][ T9164] [ 220.574805][ T9164] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 220.583661][ T9164] lock_acquire+0x1db/0x4f0 [ 220.588689][ T9164] down_write+0x38/0x60 [ 220.593358][ T9164] ocfs2_lock_global_qf+0x221/0x2a0 [ 220.599074][ T9164] ocfs2_write_info+0xd2/0x3a0 [ 220.604368][ T9164] dquot_set_dqinfo+0x488/0x6f0 [ 220.609745][ T9164] quota_setinfo+0x3d6/0x4f0 [ 220.614849][ T9164] __se_sys_quotactl+0x2b1/0x770 [ 220.620300][ T9164] do_syscall_64+0x3b/0x80 [ 220.625236][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.631645][ T9164] [ 220.631645][ T9164] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 220.642154][ T9164] validate_chain+0x1649/0x5930 [ 220.647519][ T9164] __lock_acquire+0x1295/0x1ff0 [ 220.652890][ T9164] lock_acquire+0x1db/0x4f0 [ 220.657918][ T9164] down_write+0x38/0x60 [ 220.662601][ T9164] ocfs2_lock_global_qf+0x202/0x2a0 [ 220.668318][ T9164] ocfs2_acquire_dquot+0x299/0xb40 [ 220.673943][ T9164] dqget+0x762/0xe90 [ 220.678355][ T9164] __dquot_initialize+0x2d9/0xea0 [ 220.683894][ T9164] ocfs2_get_init_inode+0x154/0x1c0 [ 220.689607][ T9164] ocfs2_mknod+0xdcb/0x2cd0 [ 220.694629][ T9164] ocfs2_mkdir+0x194/0x430 [ 220.699564][ T9164] vfs_mkdir+0x3b6/0x590 [ 220.704331][ T9164] do_mkdirat+0x260/0x520 [ 220.709178][ T9164] __x64_sys_mkdirat+0x85/0x90 [ 220.714461][ T9164] do_syscall_64+0x3b/0x80 [ 220.719393][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.725803][ T9164] [ 220.725803][ T9164] other info that might help us debug this: [ 220.725803][ T9164] [ 220.736022][ T9164] Chain exists of: [ 220.736022][ T9164] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &ei->i_data_sem --> &dquot->dq_lock [ 220.736022][ T9164] [ 220.751920][ T9164] Possible unsafe locking scenario: [ 220.751920][ T9164] [ 220.759373][ T9164] CPU0 CPU1 [ 220.764750][ T9164] ---- ---- [ 220.770111][ T9164] lock(&dquot->dq_lock); [ 220.774526][ T9164] lock(&ei->i_data_sem); [ 220.781457][ T9164] lock(&dquot->dq_lock); [ 220.788389][ T9164] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 220.795676][ T9164] [ 220.795676][ T9164] *** DEADLOCK *** [ 220.795676][ T9164] [ 220.803938][ T9164] 4 locks held by syz.2.1750/9164: [ 220.809062][ T9164] #0: ffff88807237e460 (sb_writers#33){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 220.818320][ T9164] #1: ffff888075325108 (&type->i_mutex_dir_key#26/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 220.829048][ T9164] #2: ffff88805f855f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 220.842710][ T9164] #3: ffff88801db8a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 220.852748][ T9164] [ 220.852748][ T9164] stack backtrace: [ 220.858647][ T9164] CPU: 0 PID: 9164 Comm: syz.2.1750 Not tainted 5.15.180-syzkaller #0 [ 220.866793][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.876954][ T9164] Call Trace: [ 220.880243][ T9164] [ 220.883173][ T9164] dump_stack_lvl+0x1e3/0x2d0 [ 220.887862][ T9164] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 220.893500][ T9164] ? print_circular_bug+0x12b/0x1a0 [ 220.898703][ T9164] check_noncircular+0x2f8/0x3b0 [ 220.903644][ T9164] ? add_chain_block+0x850/0x850 [ 220.908580][ T9164] ? lockdep_lock+0x11f/0x2a0 [ 220.913264][ T9164] ? _find_first_zero_bit+0xcf/0xf0 [ 220.918485][ T9164] validate_chain+0x1649/0x5930 [ 220.923340][ T9164] ? ocfs2_refresh_inode+0x960/0x960 [ 220.928626][ T9164] ? reacquire_held_locks+0x660/0x660 [ 220.933993][ T9164] ? ocfs2_read_blocks_sync+0xbc0/0xbc0 [ 220.939545][ T9164] ? look_up_lock_class+0x77/0x120 [ 220.944655][ T9164] ? register_lock_class+0x100/0x9a0 [ 220.949940][ T9164] ? ocfs2_read_inode_block+0x148/0x1d0 [ 220.955482][ T9164] ? is_dynamic_key+0x1f0/0x1f0 [ 220.960334][ T9164] ? mark_lock+0x98/0x340 [ 220.964672][ T9164] __lock_acquire+0x1295/0x1ff0 [ 220.969558][ T9164] lock_acquire+0x1db/0x4f0 [ 220.974062][ T9164] ? ocfs2_lock_global_qf+0x202/0x2a0 [ 220.979434][ T9164] ? read_lock_is_recursive+0x10/0x10 [ 220.984804][ T9164] ? __might_sleep+0xc0/0xc0 [ 220.989395][ T9164] ? do_raw_spin_lock+0x14a/0x370 [ 220.994418][ T9164] ? do_raw_spin_unlock+0x137/0x8b0 [ 220.999613][ T9164] down_write+0x38/0x60 [ 221.003766][ T9164] ? ocfs2_lock_global_qf+0x202/0x2a0 [ 221.009134][ T9164] ocfs2_lock_global_qf+0x202/0x2a0 [ 221.014333][ T9164] ? lock_buffer+0x80/0x80 [ 221.018771][ T9164] ? __mutex_lock_common+0x444/0x25a0 [ 221.024146][ T9164] ocfs2_acquire_dquot+0x299/0xb40 [ 221.029255][ T9164] ? dqget+0x6dc/0xe90 [ 221.033325][ T9164] ? mutex_unlock+0x10/0x10 [ 221.037825][ T9164] ? ocfs2_destroy_dquot+0x40/0x40 [ 221.042937][ T9164] dqget+0x762/0xe90 [ 221.046834][ T9164] __dquot_initialize+0x2d9/0xea0 [ 221.051858][ T9164] ? new_inode+0x1ba/0x1d0 [ 221.056278][ T9164] ? dquot_initialize+0x20/0x20 [ 221.061125][ T9164] ? do_raw_spin_unlock+0x137/0x8b0 [ 221.066321][ T9164] ? inode_init_owner+0x292/0x430 [ 221.071344][ T9164] ocfs2_get_init_inode+0x154/0x1c0 [ 221.076562][ T9164] ? ocfs2_create_inode_in_orphan+0x15a0/0x15a0 [ 221.082797][ T9164] ? validate_chain+0x112/0x5930 [ 221.087744][ T9164] ocfs2_mknod+0xdcb/0x2cd0 [ 221.092257][ T9164] ? ocfs2_mkdir+0x430/0x430 [ 221.096849][ T9164] ? mark_lock+0x98/0x340 [ 221.101184][ T9164] ? __lock_acquire+0x1295/0x1ff0 [ 221.106213][ T9164] ? mark_lock+0x98/0x340 [ 221.110563][ T9164] ? read_lock_is_recursive+0x10/0x10 [ 221.115935][ T9164] ? ocfs2_inode_unlock_tracker+0x236/0x2a0 [ 221.121827][ T9164] ? __lock_acquire+0x1ff0/0x1ff0 [ 221.126848][ T9164] ? do_raw_spin_lock+0x14a/0x370 [ 221.131868][ T9164] ? do_raw_spin_unlock+0x137/0x8b0 [ 221.137065][ T9164] ? _raw_spin_unlock+0x24/0x40 [ 221.141917][ T9164] ? put_pid+0xd8/0x120 [ 221.146077][ T9164] ? ocfs2_permission+0xfb/0x1b0 [ 221.151016][ T9164] ocfs2_mkdir+0x194/0x430 [ 221.155429][ T9164] ? ocfs2_symlink+0x2e20/0x2e20 [ 221.160362][ T9164] ? HAS_UNMAPPED_ID+0x1ef/0x240 [ 221.165299][ T9164] ? inode_permission+0xf7/0x450 [ 221.170236][ T9164] ? ocfs2_getattr+0x380/0x380 [ 221.174995][ T9164] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 221.180015][ T9164] ? security_inode_mkdir+0xb4/0x100 [ 221.185300][ T9164] vfs_mkdir+0x3b6/0x590 [ 221.189543][ T9164] do_mkdirat+0x260/0x520 [ 221.193885][ T9164] ? vfs_mkdir+0x590/0x590 [ 221.198297][ T9164] ? getname_flags+0x1ec/0x4e0 [ 221.203058][ T9164] __x64_sys_mkdirat+0x85/0x90 [ 221.207823][ T9164] do_syscall_64+0x3b/0x80 [ 221.212240][ T9164] ? clear_bhb_loop+0x15/0x70 [ 221.216915][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.222805][ T9164] RIP: 0033:0x7f1c3a6aa9d7 [ 221.227218][ T9164] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.246817][ T9164] RSP: 002b:00007f1c38513e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 221.255226][ T9164] RAX: ffffffffffffffda RBX: 00007f1c38513ef0 RCX: 00007f1c3a6aa9d7 [ 221.263195][ T9164] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 221.271160][ T9164] RBP: 0000200000000140 R08: 00002000000000c0 R09: 0000000000000000 [ 221.279124][ T9164] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000040 [ 221.287097][ T9164] R13: 00007f1c38513eb0 R14: 0000000000000000 R15: 0000000000000000 [ 221.295092][ T9164] [ 221.393566][ T4178] ocfs2: Unmounting device (7,2) on (node local) [ 221.565719][ T9206] loop6: detected capacity change from 0 to 32768 [ 221.628794][ T4211] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 221.637862][ T4211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.646866][ T4211] usb 6-1: Product: syz [ 221.651789][ T4211] usb 6-1: Manufacturer: syz [ 221.656417][ T4211] usb 6-1: SerialNumber: syz [ 221.677007][ T4211] usb 6-1: config 0 descriptor?? [ 221.719773][ T4211] ch341 6-1:0.0: ch341-uart converter detected [ 222.378849][ T4211] usb 6-1: failed to send control message: -71 [ 222.385059][ T4211] ch341-uart: probe of ttyUSB0 failed with error -71 [ 222.393787][ T4211] usb 6-1: USB disconnect, device number 7 [ 222.400598][ T4211] ch341 6-1:0.0: device disconnected