last executing test programs: 32.810303905s ago: executing program 0 (id=4394): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$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") llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 32.540241299s ago: executing program 0 (id=4398): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f0300000000000a040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 32.210567684s ago: executing program 0 (id=4404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x0, {0x80, 0x20, 0x0, 0x9, 0x0, 0x4, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 32.037301807s ago: executing program 0 (id=4406): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 31.696953351s ago: executing program 0 (id=4413): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffff1f, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 31.073824241s ago: executing program 0 (id=4424): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3f3}}, 0x28}}, 0x0) 30.852036044s ago: executing program 32 (id=4424): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3f3}}, 0x28}}, 0x0) 3.190672364s ago: executing program 1 (id=4749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, &(0x7f00000016c0)=""/4096, &(0x7f0000000280), &(0x7f0000000500), 0x401, r0}, 0x38) 3.117719255s ago: executing program 2 (id=4750): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 2.972423767s ago: executing program 1 (id=4752): r0 = socket(0x18, 0x3, 0x1) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) 2.78566669s ago: executing program 1 (id=4754): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) 2.594683502s ago: executing program 1 (id=4756): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)) 2.358539706s ago: executing program 1 (id=4759): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'gre0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x9, 0x900}}) 2.07374899s ago: executing program 1 (id=4763): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 1.753642814s ago: executing program 3 (id=4766): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x8) 1.621766836s ago: executing program 3 (id=4768): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0'], 0x20) 1.454435499s ago: executing program 3 (id=4770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x38, 0x19, 0x1, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0xa}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x38}}, 0x804) 1.38573736s ago: executing program 4 (id=4771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x14000000}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffb, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0xffff0001, 0x0, 0x0, 0xfffffffc, 0x0, 0xff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x0, 0x40000000, 0x7ffffffe}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000000}, {0x4}, {0x4, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1.3381984s ago: executing program 2 (id=4772): r0 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000340)=0x1c) 1.278713682s ago: executing program 4 (id=4773): r0 = socket(0x22, 0x2, 0x3) bind$tipc(r0, 0x0, 0x0) 1.217798872s ago: executing program 3 (id=4774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.175120903s ago: executing program 2 (id=4775): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 1.111750714s ago: executing program 4 (id=4776): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) 1.001503706s ago: executing program 3 (id=4777): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 924.625537ms ago: executing program 2 (id=4778): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 912.802187ms ago: executing program 4 (id=4779): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') 766.008769ms ago: executing program 3 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 526.520013ms ago: executing program 2 (id=4781): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000000180)) 472.280043ms ago: executing program 4 (id=4782): r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 103.129469ms ago: executing program 4 (id=4783): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0xf6, 0x8, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 0s ago: executing program 2 (id=4784): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x3a, 0xd3, 0x0, 0x0) kernel console output (not intermixed with test programs): mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.394002][ T5797] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 445.058137][T14350] loop0: detected capacity change from 0 to 32768 [ 445.094604][T14350] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.3775 (14350) [ 445.154315][T14350] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 445.215361][T14350] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 445.230980][T14366] loop1: detected capacity change from 0 to 4096 [ 445.250326][T14350] BTRFS info (device loop0): using free space tree [ 445.261982][T14366] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 445.269702][ T8] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 445.292920][T14366] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 445.333948][T14366] ntfs3: loop1: try to read out of volume at offset 0x1ff000 [ 445.362913][T14366] ntfs3: loop1: Failed to load $MFT. [ 445.467577][ T8] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 445.475940][ T8] usb 4-1: config 0 has no interface number 0 [ 445.482071][ T8] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 445.491274][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.503631][ T8] usb 4-1: config 0 descriptor?? [ 445.513073][ T8] lan78xx 4-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 445.540624][ T8] lan78xx: probe of 4-1:0.168 failed with error -5 [ 445.588406][T14360] loop2: detected capacity change from 0 to 32768 [ 445.599551][T14350] BTRFS info (device loop0): enabling ssd optimizations [ 445.642995][T14350] BTRFS info (device loop0): auto enabling async discard [ 445.657965][T14360] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop2 scanned by syz.2.3779 (14360) [ 445.711513][T14384] loop1: detected capacity change from 0 to 128 [ 445.718734][T14360] BTRFS info (device loop2): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 445.747450][T14360] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 445.760724][ T8] usb 4-1: USB disconnect, device number 117 [ 445.768125][T14384] befs: (loop1): No write support. Marking filesystem read-only [ 445.784032][T14360] BTRFS info (device loop2): using free space tree [ 445.813642][ T5793] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 445.818571][T14384] befs: (loop1): invalid magic header [ 445.952012][T14400] loop1: detected capacity change from 0 to 16 [ 445.962537][T14400] erofs: (device loop1): mounted with root inode @ nid 36. [ 446.029171][T14360] BTRFS info (device loop2): enabling ssd optimizations [ 446.074822][T14360] BTRFS info (device loop2): auto enabling async discard [ 446.234247][T14409] loop1: detected capacity change from 0 to 16 [ 446.306015][T14409] erofs: (device loop1): mounted with root inode @ nid 36. [ 446.407533][ T5791] BTRFS info (device loop2): last unmount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 446.480087][T14411] loop3: detected capacity change from 0 to 16 [ 446.560044][T14411] erofs: (device loop3): mounted with root inode @ nid 36. [ 446.627958][T14413] loop1: detected capacity change from 0 to 1024 [ 446.752039][T14413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.878447][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.928413][ T5798] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 9 /dev/loop2 scanned by udevd (5798) [ 446.975358][ T5832] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 447.071233][T14422] loop1: detected capacity change from 0 to 512 [ 447.143081][T14422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.189667][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 447.200431][ T5832] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 447.218083][ T5832] usb 3-1: config 0 has no interface number 0 [ 447.227607][T14408] loop0: detected capacity change from 0 to 32768 [ 447.234338][ T5832] usb 3-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 447.269161][ T5832] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 447.278861][ T5832] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 447.287521][ T5832] usb 3-1: Product: syz [ 447.291913][ T5832] usb 3-1: Manufacturer: syz [ 447.319267][ T5832] usb 3-1: SerialNumber: syz [ 447.321350][T14408] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 scanned by syz.0.3783 (14408) [ 447.359901][T14408] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 447.373111][ T5832] usb 3-1: config 0 descriptor?? [ 447.383514][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.386792][T14417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 447.451227][T14408] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 447.513456][T14408] BTRFS info (device loop0): using free space tree [ 447.650694][ T5832] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 447.690425][ T5832] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 447.710832][ T5832] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 447.727120][ T5832] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 447.739292][T14408] BTRFS info (device loop0): enabling ssd optimizations [ 447.746351][T14408] BTRFS info (device loop0): auto enabling async discard [ 447.746519][ T5832] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 447.767636][T14419] loop3: detected capacity change from 0 to 32768 [ 447.786367][T14419] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop3 scanned by syz.3.3790 (14419) [ 447.788298][T14439] loop1: detected capacity change from 0 to 2048 [ 447.806345][ T5832] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 447.817104][ T5832] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 447.830532][ T5832] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 447.848416][ T5832] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 447.880690][T14419] BTRFS info (device loop3): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 447.892766][ T5832] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 447.912819][T14419] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 447.924793][T14419] BTRFS info (device loop3): using free space tree [ 447.942564][T14439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.969414][ T5832] usb 3-1: USB disconnect, device number 119 [ 447.991331][T14439] ext4 filesystem being mounted at /916/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.002730][ T5793] BTRFS info (device loop0): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 448.092965][ T5832] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 448.157809][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.189721][T14419] BTRFS info (device loop3): enabling ssd optimizations [ 448.197610][ T5832] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 448.232094][T14419] BTRFS info (device loop3): auto enabling async discard [ 448.244228][ T5832] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 448.283913][ T5832] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 448.356443][ T5832] keyspan 3-1:0.107: device disconnected [ 448.396253][T14461] loop0: detected capacity change from 0 to 1024 [ 448.487945][ T5797] BTRFS info (device loop3): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5 [ 448.491026][T14463] loop1: detected capacity change from 0 to 1024 [ 448.547037][T14461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.583949][T14466] loop2: detected capacity change from 0 to 512 [ 448.612130][T14463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.715743][T14466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.771084][T14466] ext4 filesystem being mounted at /990/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.838923][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.861027][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.963083][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.987110][ T5798] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 9 /dev/loop3 scanned by udevd (5798) [ 449.024021][T14473] loop0: detected capacity change from 0 to 1024 [ 449.099824][T14473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.133864][T14473] ext4 filesystem being mounted at /946/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.215641][T14478] loop1: detected capacity change from 0 to 2048 [ 449.291978][T14478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.328553][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.549946][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.724040][T14486] loop3: detected capacity change from 0 to 4096 [ 449.802485][T14486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.846758][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 449.933086][T14480] loop2: detected capacity change from 0 to 32768 [ 449.950980][T14480] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz.2.3799 (14480) [ 449.989402][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.000068][T14480] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 450.016189][T14480] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 450.033845][T14480] BTRFS info (device loop2): using free space tree [ 450.042975][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 450.072699][ T23] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 450.118025][T14480] BTRFS info (device loop2): enabling ssd optimizations [ 450.128661][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.138758][ T23] usb 1-1: Product: syz [ 450.142958][ T23] usb 1-1: Manufacturer: syz [ 450.148110][ T23] usb 1-1: SerialNumber: syz [ 450.156562][ T23] usb 1-1: config 0 descriptor?? [ 450.167065][T14480] BTRFS info (device loop2): auto enabling async discard [ 450.275543][ T5791] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 450.406469][ T23] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 450.413627][ T23] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 450.452184][ T23] usb 1-1: USB disconnect, device number 2 [ 450.498985][ T8] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 450.525738][T14489] loop1: detected capacity change from 0 to 32768 [ 450.576789][T14489] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.3803 (14489) [ 450.603257][T14489] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 450.624593][T14489] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 450.636387][T14489] BTRFS info (device loop1): using free space tree [ 450.732157][ T8] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 450.750672][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.802996][ T8] usb 4-1: Product: syz [ 450.821765][ T8] usb 4-1: Manufacturer: syz [ 450.834306][ T8] usb 4-1: SerialNumber: syz [ 450.839168][T14489] BTRFS info (device loop1): enabling ssd optimizations [ 450.871423][T14489] BTRFS info (device loop1): auto enabling async discard [ 450.908341][ T8] usb 4-1: config 0 descriptor?? [ 450.976128][ T8] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 451.009656][ T8] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 451.033254][T14528] loop2: detected capacity change from 0 to 2048 [ 451.080837][T14530] loop0: detected capacity change from 0 to 512 [ 451.095545][ T5788] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 451.108746][T14528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.134660][ T8] peak_usb: probe of 4-1:0.0 failed with error -22 [ 451.138946][T14528] ext4 filesystem being mounted at /993/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.168401][T14530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.227592][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.244688][ T8] usb 4-1: USB disconnect, device number 118 [ 451.289661][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.530954][T14537] loop0: detected capacity change from 0 to 2048 [ 451.536620][T14535] loop2: detected capacity change from 0 to 4096 [ 451.613781][T14537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.615596][T14535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.652071][T14537] ext4 filesystem being mounted at /949/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.789358][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.801264][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.895057][T14543] loop1: detected capacity change from 0 to 2048 [ 452.006134][T14543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.217764][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.326698][T14545] loop2: detected capacity change from 0 to 32768 [ 452.353790][T14545] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.3811 (14545) [ 452.377600][T14552] loop1: detected capacity change from 0 to 16 [ 452.399033][T14552] erofs: (device loop1): mounted with root inode @ nid 36. [ 452.425086][T14545] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 452.450201][T14545] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 452.474596][T14545] BTRFS info (device loop2): using free space tree [ 452.651968][T14545] BTRFS info (device loop2): enabling ssd optimizations [ 452.694653][T14545] BTRFS info (device loop2): auto enabling async discard [ 452.729211][T14570] loop1: detected capacity change from 0 to 1024 [ 452.771252][T14549] loop0: detected capacity change from 0 to 32768 [ 452.807032][T14570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.810794][T14549] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop0 scanned by syz.0.3812 (14549) [ 452.863475][T14549] BTRFS info (device loop0): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 452.878205][ T5791] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 452.911779][T14549] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 452.941114][T14549] BTRFS info (device loop0): using free space tree [ 453.098021][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.270243][T14549] BTRFS info (device loop0): enabling ssd optimizations [ 453.302378][T14549] BTRFS info (device loop0): auto enabling async discard [ 453.421429][T14550] loop3: detected capacity change from 0 to 32768 [ 453.468688][ T5793] BTRFS info (device loop0): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 453.503158][T14550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 453.546072][T14550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 453.667185][T14550] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 453.739502][ T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 453.751284][ T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 453.968210][ T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 232ms [ 454.005660][ T28] gfs2: fsid=syz:syz.0: jid=0: Done [ 454.020576][T14550] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 456.748269][T14602] loop1: detected capacity change from 0 to 512 [ 456.843238][T14602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.901233][T14596] loop0: detected capacity change from 0 to 131072 [ 456.958368][T14596] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 456.968831][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.302061][T14607] loop1: detected capacity change from 0 to 4096 [ 457.397843][T14607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.619396][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.050731][T14615] loop1: detected capacity change from 0 to 64 [ 458.670413][T14619] loop3: detected capacity change from 0 to 2048 [ 458.713227][T14619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.791539][T14619] ext4 filesystem being mounted at /946/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.866989][T14617] loop1: detected capacity change from 0 to 32768 [ 458.877507][T14617] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop1 scanned by syz.1.3826 (14617) [ 458.897935][T14617] BTRFS info (device loop1): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 458.912774][T14617] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 458.929434][T14617] BTRFS info (device loop1): using free space tree [ 458.992822][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.070081][T14617] BTRFS info (device loop1): enabling ssd optimizations [ 459.099947][T14617] BTRFS info (device loop1): auto enabling async discard [ 459.327910][ T5788] BTRFS info (device loop1): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 460.375170][T14639] loop3: detected capacity change from 0 to 32768 [ 460.405763][T14639] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 460.425353][T14639] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 460.436416][T14645] loop2: detected capacity change from 0 to 2048 [ 460.466725][T14639] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 460.485947][ T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 460.497279][ T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 460.527211][T14645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.590013][T14645] ext4 filesystem being mounted at /998/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.650199][ T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 164ms [ 460.658109][ T28] gfs2: fsid=syz:syz.0: jid=0: Done [ 460.663598][T14639] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 460.687753][T14643] loop1: detected capacity change from 0 to 32768 [ 460.753842][T14643] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 460.789889][T14643] CPU: 0 PID: 14643 Comm: syz.1.3829 Not tainted 6.6.95-syzkaller #0 [ 460.798041][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.808116][T14643] Call Trace: [ 460.811406][T14643] [ 460.814345][T14643] dump_stack_lvl+0x16c/0x230 [ 460.819048][T14643] ? show_regs_print_info+0x20/0x20 [ 460.824270][T14643] ? load_image+0x3b0/0x3b0 [ 460.828799][T14643] sysfs_create_dir_ns+0x256/0x280 [ 460.833939][T14643] ? sysfs_warn_dup+0xa0/0xa0 [ 460.838633][T14643] ? do_raw_spin_unlock+0x121/0x230 [ 460.843854][T14643] kobject_add_internal+0x6b8/0xc70 [ 460.849078][T14643] kobject_init_and_add+0x126/0x190 [ 460.854292][T14643] ? lockdep_softirqs_off+0x430/0x430 [ 460.859680][T14643] ? kobject_add+0x220/0x220 [ 460.864290][T14643] ? __init_swait_queue_head+0xa9/0x150 [ 460.869852][T14643] gfs2_sys_fs_add+0x238/0x470 [ 460.874634][T14643] ? gfs2_recover_set+0x250/0x250 [ 460.879687][T14643] ? apply_workqueue_attrs+0x180/0x180 [ 460.885173][T14643] gfs2_fill_super+0x1323/0x1f80 [ 460.890159][T14643] ? gfs2_reconfigure+0xb10/0xb10 [ 460.895234][T14643] ? setup_bdev_super+0x56b/0x660 [ 460.900287][T14643] get_tree_bdev+0x3e4/0x510 [ 460.904966][T14643] ? end_current_label_crit_section+0x170/0x170 [ 460.911254][T14643] ? gfs2_reconfigure+0xb10/0xb10 [ 460.916312][T14643] ? setup_bdev_super+0x660/0x660 [ 460.921372][T14643] gfs2_get_tree+0x51/0x1e0 [ 460.925901][T14643] vfs_get_tree+0x8c/0x280 [ 460.930436][T14643] do_new_mount+0x24b/0xa40 [ 460.934964][T14643] __se_sys_mount+0x2da/0x3c0 [ 460.939755][T14643] ? __x64_sys_mount+0xc0/0xc0 [ 460.944556][T14643] ? lockdep_hardirqs_on+0x98/0x150 [ 460.949772][T14643] ? __x64_sys_mount+0x20/0xc0 [ 460.954561][T14643] do_syscall_64+0x55/0xb0 [ 460.958995][T14643] ? clear_bhb_loop+0x40/0x90 [ 460.963688][T14643] ? clear_bhb_loop+0x40/0x90 [ 460.968381][T14643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.974294][T14643] RIP: 0033:0x7f2c29b900ca [ 460.978720][T14643] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.998352][T14643] RSP: 002b:00007f2c2a99de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 461.006814][T14643] RAX: ffffffffffffffda RBX: 00007f2c2a99def0 RCX: 00007f2c29b900ca [ 461.014813][T14643] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007f2c2a99deb0 [ 461.022812][T14643] RBP: 0000200000013400 R08: 00007f2c2a99def0 R09: 0000000000000000 [ 461.030802][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440 [ 461.038797][T14643] R13: 00007f2c2a99deb0 R14: 00000000000133e0 R15: 0000200000013480 [ 461.040049][T14648] loop0: detected capacity change from 0 to 32768 [ 461.046794][T14643] [ 461.081543][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.109199][T14648] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop0 scanned by syz.0.3831 (14648) [ 461.209228][T14648] BTRFS info (device loop0): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 461.249607][T14648] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 461.272877][T14648] BTRFS info (device loop0): using free space tree [ 461.305438][T14643] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 461.357144][T14643] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 461.400336][T14648] BTRFS info (device loop0): enabling ssd optimizations [ 461.407758][T14648] BTRFS info (device loop0): auto enabling async discard [ 461.526267][ T5793] BTRFS info (device loop0): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc [ 462.226917][T14678] loop1: detected capacity change from 0 to 1024 [ 462.272800][T14656] loop2: detected capacity change from 0 to 32768 [ 462.295183][T14678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.324834][T14656] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 462.382385][T14656] dlm: no local IP address has been set [ 462.387989][T14656] dlm: cannot start dlm midcomms -107 [ 462.419192][T14678] ext4 filesystem being mounted at /930/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.438305][T14656] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 462.618597][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.350726][T14695] loop2: detected capacity change from 0 to 1024 [ 466.619371][T14699] loop2: detected capacity change from 0 to 1024 [ 466.866419][T14692] loop3: detected capacity change from 0 to 32768 [ 466.907196][T14692] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop3 scanned by syz.3.3839 (14692) [ 466.963166][T14692] BTRFS info (device loop3): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 466.995786][T14692] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 467.024395][T14692] BTRFS info (device loop3): using free space tree [ 467.201851][T14692] BTRFS info (device loop3): enabling ssd optimizations [ 467.208875][T14692] BTRFS info (device loop3): auto enabling async discard [ 467.298030][T14697] loop1: detected capacity change from 0 to 32768 [ 467.324034][T14697] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop1 scanned by syz.1.3841 (14697) [ 467.381700][T14697] BTRFS info (device loop1): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 467.416148][T14697] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 467.461855][T14697] BTRFS info (device loop1): using free space tree [ 467.483422][ T5797] BTRFS info (device loop3): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 467.623397][T14697] BTRFS info (device loop1): enabling ssd optimizations [ 467.631058][T14697] BTRFS info (device loop1): auto enabling async discard [ 467.766774][T14701] loop2: detected capacity change from 0 to 32768 [ 467.786876][T14701] BTRFS: device fsid d09153a9-5497-4f31-8e52-d2d02bbdf7fc devid 1 transid 8 /dev/loop2 scanned by syz.2.3843 (14701) [ 467.829703][ T5788] BTRFS info (device loop1): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7 [ 467.887986][T14701] BTRFS info (device loop2): first mount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 467.934038][T14701] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 467.985563][T14701] BTRFS info (device loop2): using free space tree [ 468.260478][T14701] BTRFS info (device loop2): enabling ssd optimizations [ 468.282543][T14701] BTRFS info (device loop2): auto enabling async discard [ 468.332276][T14754] loop1: detected capacity change from 0 to 164 [ 468.466783][ T5791] BTRFS info (device loop2): last unmount of filesystem d09153a9-5497-4f31-8e52-d2d02bbdf7fc [ 468.574017][T14756] loop1: detected capacity change from 0 to 2 [ 468.595866][T14756] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 468.797801][T14758] loop2: detected capacity change from 0 to 21 [ 468.865222][T14760] loop1: detected capacity change from 0 to 2 [ 468.879727][T14758] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 468.898261][T14760] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 468.985799][ T5798] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.187060][T14763] loop2: detected capacity change from 0 to 21 [ 469.194116][T14763] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 469.519538][T14768] loop2: detected capacity change from 0 to 128 [ 469.801454][T14770] loop2: detected capacity change from 0 to 64 [ 470.750272][T14772] loop2: detected capacity change from 0 to 32768 [ 470.778982][T14772] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3854 (14772) [ 470.837075][T14772] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 470.870278][T14772] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 470.898139][T14772] BTRFS info (device loop2): using free space tree [ 471.046555][T14788] loop3: detected capacity change from 0 to 256 [ 471.112158][T14772] BTRFS info (device loop2): enabling ssd optimizations [ 471.152705][T14772] BTRFS info (device loop2): auto enabling async discard [ 471.392817][ T5791] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 471.393009][T14792] loop3: detected capacity change from 0 to 2048 [ 471.733000][T14796] loop3: detected capacity change from 0 to 128 [ 471.847642][ T5798] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (5798) [ 472.093839][T14801] loop3: detected capacity change from 0 to 512 [ 472.401285][T14803] loop3: detected capacity change from 0 to 128 [ 472.471784][T14805] loop2: detected capacity change from 0 to 256 [ 472.675432][T14807] loop2: detected capacity change from 0 to 128 [ 472.835347][T14809] loop3: detected capacity change from 0 to 128 [ 472.992392][T14811] loop2: detected capacity change from 0 to 512 [ 473.115893][T14815] loop0: detected capacity change from 0 to 64 [ 473.191613][T14814] loop1: detected capacity change from 0 to 2048 [ 473.425696][T14817] loop3: detected capacity change from 0 to 8192 [ 473.538477][T14821] loop0: detected capacity change from 0 to 4096 [ 473.547363][T14823] loop1: detected capacity change from 0 to 2048 [ 473.622146][T14824] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.111565][T14826] loop3: detected capacity change from 0 to 16384 [ 474.213650][T14831] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 474.504027][T14828] loop0: detected capacity change from 0 to 32768 [ 474.721065][T14833] loop3: detected capacity change from 0 to 4096 [ 474.750634][T14833] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 474.787618][T14830] loop1: detected capacity change from 0 to 32768 [ 474.858779][T14835] loop0: detected capacity change from 0 to 4096 [ 475.030703][T14836] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.490448][T14838] loop3: detected capacity change from 0 to 8192 [ 475.534862][T14838] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 475.675679][T14842] loop0: detected capacity change from 0 to 8192 [ 475.699148][T14842] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 476.714654][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 476.722047][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.725312][T14845] loop0: detected capacity change from 0 to 32768 [ 476.746074][T14845] (syz.0.3881,14845,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 476.822652][T14845] (syz.0.3881,14845,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 476.913796][T14848] loop2: detected capacity change from 0 to 4096 [ 476.950738][T14848] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 477.393957][T14852] loop2: detected capacity change from 0 to 4096 [ 477.505015][T14852] ntfs: volume version 3.1. [ 477.785928][T14850] loop0: detected capacity change from 0 to 32768 [ 477.818108][T14850] (syz.0.3883,14850,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 477.854510][T14850] (syz.0.3883,14850,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 478.243019][T14856] loop0: detected capacity change from 0 to 4096 [ 478.708220][T14854] loop2: detected capacity change from 0 to 32768 [ 478.719299][T14854] (syz.2.3885,14854,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 478.749247][T14854] (syz.2.3885,14854,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 479.066665][T14860] loop2: detected capacity change from 0 to 4096 [ 479.131704][T14858] loop0: detected capacity change from 0 to 32768 [ 479.139235][T14858] (syz.0.3887,14858,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 479.177000][T14860] ntfs: volume version 3.1. [ 479.182550][T14858] (syz.0.3887,14858,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 479.527693][T14864] loop0: detected capacity change from 0 to 4096 [ 479.607393][T14867] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.156031][T14862] loop1: detected capacity change from 0 to 32768 [ 480.165430][T14862] (syz.1.3889,14862,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 480.200077][T14862] (syz.1.3889,14862,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 480.295285][T14871] loop3: detected capacity change from 0 to 4096 [ 480.372840][T14871] ntfs: volume version 3.1. [ 480.768625][T14875] loop3: detected capacity change from 0 to 4096 [ 480.851728][T14875] ntfs: volume version 3.1. [ 481.327356][T14866] loop2: detected capacity change from 0 to 65536 [ 481.351843][T14866] (syz.2.3891,14866,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 481.372727][T14873] loop1: detected capacity change from 0 to 32768 [ 481.381158][T14866] (syz.2.3891,14866,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 481.414069][T14873] (syz.1.3894,14873,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 481.446723][T14873] (syz.1.3894,14873,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 481.628761][T14879] loop2: detected capacity change from 0 to 256 [ 481.695970][T14869] loop0: detected capacity change from 0 to 65536 [ 481.729486][T14869] (syz.0.3892,14869,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 481.761012][T14869] (syz.0.3892,14869,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 481.879860][T14881] loop1: detected capacity change from 0 to 4096 [ 481.890082][ T6186] I/O error, dev loop0, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 483.068382][T14887] loop0: detected capacity change from 0 to 8192 [ 483.107936][T14887] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 483.179456][T14887] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 483.213708][T14887] REISERFS (device loop0): using ordered data mode [ 483.220313][T14887] reiserfs: using flush barriers [ 483.240428][T14885] loop1: detected capacity change from 0 to 32768 [ 483.248469][T14885] (syz.1.3900,14885,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 483.254754][T14887] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 483.260071][T14885] (syz.1.3900,14885,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 483.328643][T14887] REISERFS (device loop0): checking transaction log (loop0) [ 483.524744][T14887] REISERFS (device loop0): Using r5 hash to sort names [ 483.562123][T14887] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 485.680924][T14896] loop2: detected capacity change from 0 to 8192 [ 485.722166][T14896] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 485.792735][T14896] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 485.835079][T14896] REISERFS (device loop2): using ordered data mode [ 485.841632][T14896] reiserfs: using flush barriers [ 485.909395][T14896] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 485.945488][T14896] REISERFS (device loop2): checking transaction log (loop2) [ 486.121918][T14896] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 486.157621][T14896] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 486.178609][T14896] REISERFS (device loop2): Remounting filesystem read-only [ 486.196528][T14896] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 486.220387][T14896] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 486.245173][T14892] loop0: detected capacity change from 0 to 131072 [ 486.293383][T14892] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 486.309732][T14892] REISERFS (device loop0): found reiserfs format "3.5" with standard journal [ 486.322521][T14892] REISERFS (device loop0): using ordered data mode [ 486.351870][T14892] reiserfs: using flush barriers [ 486.374425][T14892] REISERFS (device loop0): journal params: device loop0, size 8192, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 486.426201][T14892] REISERFS (device loop0): checking transaction log (loop0) [ 486.817707][T14900] syz.2.3906: attempt to access beyond end of device [ 486.817707][T14900] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 486.886286][T14900] SQUASHFS error: Failed to read block 0x0: -5 [ 486.914242][T14900] unable to read squashfs_super_block [ 487.149366][T14902] loop2: detected capacity change from 0 to 3 [ 487.175980][T14902] syz.2.3907: attempt to access beyond end of device [ 487.175980][T14902] loop2: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 487.231593][T14902] SQUASHFS error: Failed to read block 0x0: -5 [ 487.237856][T14902] unable to read squashfs_super_block [ 487.479603][T14904] loop2: detected capacity change from 0 to 8 [ 487.897453][T14906] loop1: detected capacity change from 0 to 8192 [ 487.971245][T14911] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.393715][T14913] loop1: detected capacity change from 0 to 8192 [ 488.450289][T14913] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 488.489600][T14913] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 488.499502][T14913] REISERFS (device loop1): using ordered data mode [ 488.506077][T14913] reiserfs: using flush barriers [ 488.601877][T14913] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 488.672189][T14913] REISERFS (device loop1): checking transaction log (loop1) [ 488.894306][T14913] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 488.931344][T14913] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 488.955693][T14913] REISERFS (device loop1): Remounting filesystem read-only [ 488.963109][T14913] REISERFS error (device loop1): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 489.002055][T14913] REISERFS warning (device loop1): reiserfs_fill_super: corrupt root inode, run fsck [ 489.012118][T14892] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 489.037792][T14892] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 8211. Fsck? [ 489.063159][T14892] REISERFS (device loop0): Remounting filesystem read-only [ 489.075390][T14892] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 489.097029][T14892] REISERFS warning (device loop0): reiserfs_fill_super: corrupt root inode, run fsck [ 491.504978][T14922] loop3: detected capacity change from 0 to 1024 [ 491.558333][T14922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.624929][T14920] loop2: detected capacity change from 0 to 4096 [ 491.652091][T14920] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 491.823261][T14924] loop3: detected capacity change from 0 to 128 [ 491.864604][T14924] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 491.909487][T14924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.175642][T14928] loop3: detected capacity change from 0 to 256 [ 492.208648][T14928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.212261][T14930] loop2: detected capacity change from 0 to 256 [ 492.240672][T14930] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 492.246635][T14928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 492.260042][T14928] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 492.267814][T14928] UDF-fs: Scanning with blocksize 512 failed [ 492.309566][T14928] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.324462][T14930] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 492.344943][T14930] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 492.369644][T14930] UDF-fs: Scanning with blocksize 512 failed [ 492.373579][T14928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.410722][T14930] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 492.459065][T14930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.649739][T14932] loop3: detected capacity change from 0 to 512 [ 492.698790][T14932] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 492.705603][T14934] loop2: detected capacity change from 0 to 512 [ 492.720895][T14932] UDF-fs: Scanning with blocksize 512 failed [ 492.749017][T14934] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 492.769546][T14934] UDF-fs: Scanning with blocksize 512 failed [ 492.780482][T14932] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 492.783468][T14934] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 492.814540][T14932] UDF-fs: Scanning with blocksize 1024 failed [ 492.821290][T14934] UDF-fs: Scanning with blocksize 1024 failed [ 492.826224][T14932] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 492.849007][T14932] UDF-fs: Scanning with blocksize 2048 failed [ 492.867691][T14932] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.883310][T14934] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 492.918699][T14934] UDF-fs: Scanning with blocksize 2048 failed [ 492.944965][T14934] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 492.957744][T14932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.978447][T14934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.240527][T14936] loop3: detected capacity change from 0 to 128 [ 493.278773][T14936] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 493.301607][T14938] loop2: detected capacity change from 0 to 128 [ 493.360330][T14936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.469947][T14940] loop2: detected capacity change from 0 to 512 [ 493.608745][T14942] loop3: detected capacity change from 0 to 512 [ 493.668462][T14942] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 493.686739][T14942] UDF-fs: Scanning with blocksize 512 failed [ 493.713437][T14942] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 493.730821][T14942] UDF-fs: Scanning with blocksize 1024 failed [ 493.759137][T14942] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 493.770190][T14946] loop1: detected capacity change from 0 to 128 [ 493.785610][T14942] UDF-fs: Scanning with blocksize 2048 failed [ 493.810364][T14942] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 493.858508][T14942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.024681][T14948] loop1: detected capacity change from 0 to 8 [ 494.300270][T14952] loop1: detected capacity change from 0 to 256 [ 494.495449][T14955] loop0: detected capacity change from 0 to 128 [ 494.512956][T14956] loop1: detected capacity change from 0 to 128 [ 494.803491][T14960] loop0: detected capacity change from 0 to 512 [ 494.838597][T14959] loop1: detected capacity change from 0 to 2048 [ 495.054932][T14962] loop0: detected capacity change from 0 to 128 [ 495.135902][T14964] loop1: detected capacity change from 0 to 128 [ 495.307996][T14966] loop0: detected capacity change from 0 to 512 [ 495.585105][T14970] loop0: detected capacity change from 0 to 512 [ 499.005325][T14978] loop1: detected capacity change from 0 to 512 [ 499.272356][T14980] loop1: detected capacity change from 0 to 128 [ 500.125385][T14982] loop1: detected capacity change from 0 to 32768 [ 501.478345][T14988] loop2: detected capacity change from 0 to 32768 [ 501.535876][T14988] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 501.689833][T14988] XFS (loop2): Ending clean mount [ 501.809960][ T5791] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 502.095104][T14990] loop3: detected capacity change from 0 to 32768 [ 502.232459][T14990] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 502.388142][T14990] XFS (loop3): Ending clean mount [ 502.536043][ T5797] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 505.019892][T15014] loop1: detected capacity change from 0 to 65536 [ 505.072767][T15014] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 505.973269][T15023] loop2: detected capacity change from 0 to 8192 [ 506.007093][T15023] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 506.025409][T15023] UDF-fs: Scanning with blocksize 512 failed [ 506.058148][T15023] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 506.088154][T15023] UDF-fs: Scanning with blocksize 1024 failed [ 506.109998][T15023] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 506.151224][T15023] UDF-fs: Scanning with blocksize 2048 failed [ 506.204394][T15023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.865890][T15021] loop1: detected capacity change from 0 to 65536 [ 506.953872][T15021] XFS (loop1): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 507.049737][T15021] XFS (loop1): Ending clean mount [ 507.205142][ T5788] XFS (loop1): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 507.398569][T15039] loop1: detected capacity change from 0 to 512 [ 507.470705][T15039] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 507.489743][T15039] UDF-fs: Scanning with blocksize 512 failed [ 507.514993][T15039] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 507.534987][T15039] UDF-fs: Scanning with blocksize 1024 failed [ 507.571490][T15039] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 507.586799][T15039] UDF-fs: Scanning with blocksize 2048 failed [ 507.617237][T15039] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 507.638381][T15039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 508.290869][T15049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3965'. [ 508.524476][T15051] loop1: detected capacity change from 0 to 1024 [ 508.551537][T15043] loop0: detected capacity change from 0 to 32768 [ 508.668085][T15043] loop0: p1 p2 p3 [ 509.680612][T15063] loop1: detected capacity change from 0 to 1024 [ 509.737106][T15063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.802829][T15063] ext4 filesystem being mounted at /972/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.955347][T15063] EXT4-fs error (device loop1): ext4_free_blocks:6681: comm syz.1.3972: Freeing blocks not in datazone - block = 0, count = 16 [ 510.011405][T15063] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 510.169162][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.365848][T15074] loop1: detected capacity change from 0 to 512 [ 510.396777][T15074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.486610][T15074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.499593][T15074] ext4 filesystem being mounted at /973/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.580161][T15068] loop3: detected capacity change from 0 to 32768 [ 510.634355][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.679477][T15068] loop3: p1 p3 < p5 p6 > [ 510.899684][ T5798] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 511.026888][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 511.031708][T11468] udevd[11468]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 511.055039][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 511.066221][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 511.203537][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'. [ 511.494944][T15107] loop2: detected capacity change from 0 to 512 [ 511.589478][T15107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.642182][T15115] binder: 15114:15115 ioctl c018620c 200000000100 returned -22 [ 511.650811][T15107] ext4 filesystem being mounted at /1043/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 511.914554][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.374913][T15143] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4007'. [ 512.504888][ T5874] IPVS: starting estimator thread 0... [ 512.638632][T15149] IPVS: using max 16 ests per chain, 38400 per kthread [ 513.159401][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'. [ 513.328640][T15164] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 513.339832][T15155] loop2: detected capacity change from 0 to 32768 [ 513.388556][T15155] loop2: p9 p11 p16 [ 513.513165][T15133] loop1: detected capacity change from 0 to 65536 [ 513.545117][T15166] netlink: 'syz.0.4019': attribute type 7 has an invalid length. [ 513.568991][T15170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 513.588809][T15166] netlink: 'syz.0.4019': attribute type 8 has an invalid length. [ 513.605255][T15133] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel. [ 513.835823][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 513.849767][ T6698] udevd[6698]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 513.863437][ T5798] udevd[5798]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 514.421915][T15156] loop3: detected capacity change from 0 to 65536 [ 514.532010][T15156] XFS (loop3): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 514.828784][ T5874] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 514.864794][T15156] XFS (loop3): Ending clean mount [ 515.011274][ T5874] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.034704][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.054677][ T5874] usb 1-1: Product: syz [ 515.059047][ T5874] usb 1-1: Manufacturer: syz [ 515.080870][ T5874] usb 1-1: SerialNumber: syz [ 515.086754][ T5797] XFS (loop3): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 515.109723][ T5874] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 515.147034][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 515.681850][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4049'. [ 515.730989][ T9] usb 1-1: USB disconnect, device number 3 [ 516.161022][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 516.182149][ T8] ath9k_htc: Failed to initialize the device [ 516.201861][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 516.465742][T15265] xt_hashlimit: size too large, truncated to 1048576 [ 516.487303][T15265] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 516.711930][T15277] xt_ecn: cannot match TCP bits for non-tcp packets [ 516.739970][ T786] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 516.926096][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 516.936805][T15289] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 516.945790][ T786] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 516.953986][ T786] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 516.977317][ T786] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 517.007264][ T786] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 517.036261][ T786] usb 2-1: config 0 has no interface number 0 [ 517.057027][ T786] usb 2-1: config 0 has no interface number 1 [ 517.073131][ T786] usb 2-1: config 0 has no interface number 2 [ 517.085944][ T786] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.094836][T15293] loop2: detected capacity change from 0 to 1024 [ 517.128467][ T786] usb 2-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 517.159359][ T786] usb 2-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 517.205951][ T786] usb 2-1: config 0 interface 150 has no altsetting 0 [ 517.213079][ T786] usb 2-1: config 0 interface 112 has no altsetting 0 [ 517.233553][ T786] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 517.242624][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.287783][ T786] usb 2-1: config 0 descriptor?? [ 517.686678][T15302] loop2: detected capacity change from 0 to 4096 [ 517.701368][ T786] usb 2-1: string descriptor 0 read error: -71 [ 517.706790][T15302] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 517.743907][ T786] usb 2-1: USB disconnect, device number 125 [ 518.401556][T15322] loop0: detected capacity change from 0 to 64 [ 518.442327][T15322] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 519.060432][T15350] loop0: detected capacity change from 0 to 256 [ 519.444777][T15363] loop2: detected capacity change from 0 to 256 [ 519.451948][T15363] exfat: Deprecated parameter 'utf8' [ 519.475674][T15363] exfat: Deprecated parameter 'namecase' [ 519.512811][T15363] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 519.605070][T15361] loop3: detected capacity change from 0 to 4096 [ 519.662392][T15361] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 519.709207][T15361] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 519.756275][T15361] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 519.775461][T15361] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 519.810625][T15361] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 519.838944][T15361] ntfs: volume version 3.1. [ 519.887580][T15354] loop1: detected capacity change from 0 to 32768 [ 519.892199][T15361] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 519.932478][ T27] audit: type=1800 audit(1751698955.194:14): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4106" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 519.952864][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.976711][T15361] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 520.023905][T15361] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 520.089563][T15361] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 520.539708][T15385] mmap: syz.0.4121 (15385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 521.004095][T15402] loop3: detected capacity change from 0 to 256 [ 521.018189][ T28] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 521.086275][T15402] FAT-fs (loop3): Directory bread(block 64) failed [ 521.101466][T15402] FAT-fs (loop3): Directory bread(block 65) failed [ 521.108184][T15402] FAT-fs (loop3): Directory bread(block 66) failed [ 521.129513][T15402] FAT-fs (loop3): Directory bread(block 67) failed [ 521.146230][T15402] FAT-fs (loop3): Directory bread(block 68) failed [ 521.157335][T15402] FAT-fs (loop3): Directory bread(block 69) failed [ 521.174138][T15402] FAT-fs (loop3): Directory bread(block 70) failed [ 521.185323][T15402] FAT-fs (loop3): Directory bread(block 71) failed [ 521.202625][T15402] FAT-fs (loop3): Directory bread(block 72) failed [ 521.211598][ T28] usb 2-1: config 1 has an invalid interface number: 27 but max is 0 [ 521.221675][T15402] FAT-fs (loop3): Directory bread(block 73) failed [ 521.232068][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.262024][ T28] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 521.288773][ T28] usb 2-1: config 1 has no interface number 1 [ 521.305454][ T28] usb 2-1: config 1 interface 27 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.370038][ T28] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.389278][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 521.412394][ T28] usb 2-1: SerialNumber: syz [ 521.437715][ T28] usb 2-1: bad CDC descriptors [ 521.543381][T15411] loop2: detected capacity change from 0 to 256 [ 521.573095][T15411] exfat: Deprecated parameter 'utf8' [ 521.581025][T15411] exfat: Deprecated parameter 'utf8' [ 521.610593][T15411] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 521.694013][ T28] usb 2-1: USB disconnect, device number 126 [ 521.787364][T15416] loop0: detected capacity change from 0 to 4096 [ 521.806702][T15416] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 522.516915][T15442] warning: `syz.1.4148' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 523.168723][T15438] loop0: detected capacity change from 0 to 32768 [ 523.185398][T15458] loop2: detected capacity change from 0 to 4096 [ 523.194314][T15438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4146 (15438) [ 523.255114][T15438] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.256046][ T6186] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 523.279269][T15438] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 523.334007][T15438] BTRFS info (device loop0): using free space tree [ 523.479075][T15438] BTRFS info (device loop0): enabling ssd optimizations [ 523.514379][T15482] netlink: 'syz.3.4160': attribute type 1 has an invalid length. [ 523.539134][T15438] BTRFS info (device loop0): auto enabling async discard [ 523.679615][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.951061][T15494] loop0: detected capacity change from 0 to 512 [ 524.032724][T15494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.045921][T15494] ext4 filesystem being mounted at /1030/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.221966][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.335030][T15511] loop0: detected capacity change from 0 to 256 [ 524.372610][T15511] exfat: Deprecated parameter 'utf8' [ 524.401341][T15511] exfat: Deprecated parameter 'namecase' [ 524.424062][T15511] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 524.545706][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 524.571259][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 524.593362][T15519] loop2: detected capacity change from 0 to 8 [ 524.632989][T15519] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 524.660544][ T5781] udevd[5781]: incorrect cramfs checksum on /dev/loop2 [ 524.687812][T15519] cramfs: Error -3 while decompressing! [ 524.717954][T15519] cramfs: ffffffff96fda6a8(18)->ffff88804fef8000(4096) [ 524.736995][T15519] cramfs: Error -3 while decompressing! [ 524.742575][T15519] cramfs: ffffffff96fda6a8(18)->ffff88804fef8000(4096) [ 524.763881][ T5781] udevd[5781]: incorrect cramfs checksum on /dev/loop2 [ 524.792909][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 524.792924][ T27] audit: type=1800 audit(1751698960.398:25): pid=15519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4175" name="file1" dev="loop2" ino=324 res=0 errno=0 [ 524.818767][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.881794][T15527] veth3: entered promiscuous mode [ 524.897869][T15527] veth3: entered allmulticast mode [ 525.225176][T15538] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 525.703525][T15525] loop1: detected capacity change from 0 to 40427 [ 525.717330][T15530] loop2: detected capacity change from 0 to 32768 [ 525.726216][T15525] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x7ffff [ 525.745864][T15525] F2FS-fs (loop1): Image doesn't support compression [ 525.770622][T15525] F2FS-fs (loop1): invalid crc value [ 525.803411][T15525] F2FS-fs (loop1): Found nat_bits in checkpoint [ 525.815667][T15530] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 525.942552][T15525] F2FS-fs (loop1): Start checkpoint disabled! [ 525.980709][T15525] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 525.995178][ T786] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 526.044085][ T5791] ocfs2: Unmounting device (7,2) on (node local) [ 526.254615][ T786] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 526.285618][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.319234][ T786] usb 4-1: Product: syz [ 526.334055][ T786] usb 4-1: Manufacturer: syz [ 526.341209][ T786] usb 4-1: SerialNumber: syz [ 526.371442][ T786] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 526.402675][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.540210][T15565] loop2: detected capacity change from 0 to 164 [ 526.873809][ T8] usb 4-1: USB disconnect, device number 119 [ 526.985564][T15577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4202'. [ 527.002996][T15577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4202'. [ 527.018018][T15577] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 527.028552][T15577] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 527.264171][T15583] bond1: entered allmulticast mode [ 527.269695][T15583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.327753][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4205'. [ 527.377528][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4205'. [ 527.428719][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 527.449457][ T23] ath9k_htc: Failed to initialize the device [ 527.469050][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 527.508630][T15575] loop1: detected capacity change from 0 to 32768 [ 527.552966][T15575] ialloc: diAlloc returned -5! [ 527.894016][T15596] loop2: detected capacity change from 0 to 4096 [ 527.894158][T15604] netlink: 'syz.3.4214': attribute type 6 has an invalid length. [ 528.907268][T15626] veth3: entered promiscuous mode [ 528.916916][T15626] veth3: entered allmulticast mode [ 529.036925][T15635] syz.0.4229 uses obsolete (PF_INET,SOCK_PACKET) [ 529.090573][T15637] netlink: 'syz.1.4230': attribute type 6 has an invalid length. [ 529.593874][T15661] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 529.860775][T15673] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4247'. [ 529.948860][ T27] audit: type=1326 audit(1751698965.944:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785dd8e929 code=0x7ffc0000 [ 530.012212][ T27] audit: type=1326 audit(1751698965.944:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785dd8e929 code=0x7ffc0000 [ 530.077303][ T27] audit: type=1326 audit(1751698965.966:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f785dd8e929 code=0x7ffc0000 [ 530.198795][ T27] audit: type=1326 audit(1751698965.966:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785dd8e929 code=0x7ffc0000 [ 530.271826][ T27] audit: type=1326 audit(1751698965.966:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15676 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f785dd8e929 code=0x7ffc0000 [ 530.682059][T15707] netlink: 'syz.1.4263': attribute type 10 has an invalid length. [ 530.729363][T15711] loop3: detected capacity change from 0 to 64 [ 530.739132][T15707] team0: Device ipvlan1 failed to register rx_handler [ 530.893066][ T27] audit: type=1326 audit(1751698966.953:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.0.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8971d8e929 code=0x7ffc0000 [ 530.918861][ T27] audit: type=1326 audit(1751698966.953:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.0.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8971d8e929 code=0x7ffc0000 [ 530.943211][ T27] audit: type=1326 audit(1751698966.953:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.0.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f8971d8e929 code=0x7ffc0000 [ 530.965987][ T27] audit: type=1326 audit(1751698966.953:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.0.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8971d8e929 code=0x7ffc0000 [ 531.102889][ T27] audit: type=1326 audit(1751698966.953:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15713 comm="syz.0.4268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8971d8e929 code=0x7ffc0000 [ 531.233697][T15722] ecryptfs_parse_options: eCryptfs: unrecognized option [Š]] [ 531.252084][T15722] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 531.286960][T15722] Error parsing options; rc = [-22] [ 531.464969][T15728] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 531.556894][T15717] loop1: detected capacity change from 0 to 32768 [ 531.645752][T15732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 531.854403][T15739] netlink: 'syz.0.4279': attribute type 10 has an invalid length. [ 531.905186][T15739] team0: Device ipvlan1 failed to register rx_handler [ 532.173770][T15747] netlink: 'syz.2.4282': attribute type 6 has an invalid length. [ 532.498559][T15759] loop2: detected capacity change from 0 to 64 [ 532.646612][T15766] loop3: detected capacity change from 0 to 256 [ 532.771895][T15766] FAT-fs (loop3): Directory bread(block 64) failed [ 532.778474][T15766] FAT-fs (loop3): Directory bread(block 65) failed [ 532.805903][T15772] loop0: detected capacity change from 0 to 16 [ 532.806777][T15766] FAT-fs (loop3): Directory bread(block 66) failed [ 532.819470][T15766] FAT-fs (loop3): Directory bread(block 67) failed [ 532.827724][T15766] FAT-fs (loop3): Directory bread(block 68) failed [ 532.837548][T15766] FAT-fs (loop3): Directory bread(block 69) failed [ 532.845305][T15772] erofs: (device loop0): mounted with root inode @ nid 36. [ 532.869264][T15766] FAT-fs (loop3): Directory bread(block 70) failed [ 532.901365][T15766] FAT-fs (loop3): Directory bread(block 71) failed [ 532.923014][T15766] FAT-fs (loop3): Directory bread(block 72) failed [ 532.931306][T15766] FAT-fs (loop3): Directory bread(block 73) failed [ 533.520378][T15787] netlink: 'syz.0.4302': attribute type 1 has an invalid length. [ 533.531166][T15787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4302'. [ 533.793597][T15782] loop2: detected capacity change from 0 to 32768 [ 533.806910][T15782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4301 (15782) [ 533.839036][T15782] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 533.862120][T15782] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 533.870856][T15782] BTRFS info (device loop2): using free space tree [ 533.948002][T15782] BTRFS info (device loop2): enabling ssd optimizations [ 533.967789][T15782] BTRFS info (device loop2): auto enabling async discard [ 533.990394][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 533.996904][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 534.208910][ T5791] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 534.242177][T15805] xt_l2tp: invalid flags combination: c [ 534.317694][ T5798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5798) [ 534.624364][ T27] kauditd_printk_skb: 2391 callbacks suppressed [ 534.624378][ T27] audit: type=1326 audit(1751698970.955:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 534.644839][T15815] netlink: 'syz.3.4306': attribute type 10 has an invalid length. [ 534.719080][ T27] audit: type=1326 audit(1751698970.987:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 534.735482][T15815] team0: Device ipvlan1 failed to register rx_handler [ 534.774953][ T27] audit: type=1326 audit(1751698970.987:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 534.839079][ T27] audit: type=1326 audit(1751698970.987:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 534.905768][ T27] audit: type=1326 audit(1751698970.987:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 534.933372][ T5874] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 534.984698][ T27] audit: type=1326 audit(1751698970.987:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 535.063789][ T27] audit: type=1326 audit(1751698970.987:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 535.144426][ T5874] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 535.153718][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.166496][ T27] audit: type=1326 audit(1751698970.987:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 535.213265][ T5874] usb 3-1: Product: syz [ 535.217494][ T5874] usb 3-1: Manufacturer: syz [ 535.222095][ T5874] usb 3-1: SerialNumber: syz [ 535.237638][ T27] audit: type=1326 audit(1751698970.987:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 535.261783][ T5874] usb 3-1: config 0 descriptor?? [ 535.301618][ T27] audit: type=1326 audit(1751698970.987:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.1.4295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c29b8e929 code=0x50000 [ 535.336750][T15822] loop3: detected capacity change from 0 to 8 [ 535.353754][T15822] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 535.411079][T15822] cramfs: Error -3 while decompressing! [ 535.429574][T15822] cramfs: ffffffff96fde6c8(26)->ffff888057893000(4096) [ 535.457067][T15822] cramfs: Error -5 while decompressing! [ 535.463388][ T5874] hso 3-1:0.0: Failed to find INT IN ep [ 535.472741][T15822] cramfs: ffffffff96fde6e2(26)->ffff888058abe000(4096) [ 535.482805][ T5874] usb-storage 3-1:0.0: USB Mass Storage device detected [ 535.502330][T15822] cramfs: Error -3 while decompressing! [ 535.507912][T15822] cramfs: ffffffff96fde6c8(26)->ffff888057893000(4096) [ 535.582810][T15817] loop0: detected capacity change from 0 to 32768 [ 535.672530][ T5874] usb 3-1: USB disconnect, device number 120 [ 535.876341][T15832] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 536.397477][T15845] loop1: detected capacity change from 0 to 512 [ 536.440666][T15845] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.4323: bad orphan inode 15 [ 536.476606][T15845] ext4_test_bit(bit=14, block=5) = 0 [ 536.483283][T15845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.609129][T15845] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.4323: reserved inode found cleared - inode=1 [ 536.650151][T15857] loop3: detected capacity change from 0 to 1024 [ 536.704664][T15851] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 536.779671][T15863] netlink: 'syz.2.4330': attribute type 64 has an invalid length. [ 536.800108][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.840317][T15909] netlink: 'syz.2.4348': attribute type 10 has an invalid length. [ 537.893753][T15909] team0: Device ipvlan1 failed to register rx_handler [ 538.257068][T15902] loop0: detected capacity change from 0 to 32768 [ 538.297525][T15922] bond2: entered promiscuous mode [ 538.304440][T15922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 538.306133][T15902] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 538.365338][T15902] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 538.397968][T15902] BTRFS info (device loop0): using free space tree [ 538.513414][ T5816] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 538.531247][T15902] BTRFS info (device loop0): enabling ssd optimizations [ 538.540708][T15902] BTRFS info (device loop0): auto enabling async discard [ 538.699038][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 538.744250][ T5816] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 538.764306][ T5816] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 538.783519][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 538.802254][ T5793] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 538.811554][ T5816] usb 4-1: config 1 has no interface number 0 [ 538.828675][ T5816] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.844092][T15951] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 538.853761][ T5816] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 538.881944][ T5816] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 538.900822][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.977827][ T5816] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 539.177679][ T5798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5798) [ 539.203012][ T5816] snd_usb_pod 4-1:1.1: invalid control EP [ 539.208782][ T5816] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 539.249322][ T5816] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 539.288081][ T5816] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 539.425356][ T5816] usb 4-1: USB disconnect, device number 120 [ 540.021949][T15967] netlink: 'syz.1.4367': attribute type 1 has an invalid length. [ 540.036199][T15965] loop0: detected capacity change from 0 to 256 [ 540.067133][T15967] netlink: 'syz.1.4367': attribute type 2 has an invalid length. [ 540.341140][T15975] loop3: detected capacity change from 0 to 256 [ 540.353147][T15973] loop1: detected capacity change from 0 to 764 [ 540.407090][T15977] loop0: detected capacity change from 0 to 2048 [ 540.431941][T15973] Symlink component flag not implemented [ 540.439382][T15975] FAT-fs (loop3): Directory bread(block 64) failed [ 540.459871][T15977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.464169][T15975] FAT-fs (loop3): Directory bread(block 65) failed [ 540.486003][T15973] Symlink component flag not implemented [ 540.508640][T15973] Symlink component flag not implemented (129) [ 540.514854][T15973] Symlink component flag not implemented (6) [ 540.521827][T15975] FAT-fs (loop3): Directory bread(block 66) failed [ 540.563218][T15975] FAT-fs (loop3): Directory bread(block 67) failed [ 540.570662][T15975] FAT-fs (loop3): Directory bread(block 68) failed [ 540.609905][T15975] FAT-fs (loop3): Directory bread(block 69) failed [ 540.616750][T15975] FAT-fs (loop3): Directory bread(block 70) failed [ 540.638932][T15975] FAT-fs (loop3): Directory bread(block 71) failed [ 540.645608][T15975] FAT-fs (loop3): Directory bread(block 72) failed [ 540.693974][T15975] FAT-fs (loop3): Directory bread(block 73) failed [ 540.711843][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 540.884204][T15975] syz.3.4372: attempt to access beyond end of device [ 540.884204][T15975] loop3: rw=0, sector=1256, nr_sectors = 4 limit=256 [ 540.892461][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'. [ 540.912536][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4377'. [ 540.922186][T15975] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 328) [ 540.922814][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 540.954381][T15975] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 328) [ 540.978540][T15971] loop2: detected capacity change from 0 to 32768 [ 541.194045][ T112] blkno = 5002c, nblocks = 1 [ 541.202282][ T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 541.202282][ T112] [ 541.226057][ T112] ERROR: (device loop2): remounting filesystem as read-only [ 541.353926][T15998] loop3: detected capacity change from 0 to 256 [ 541.383125][T15998] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 541.405681][T15998] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 541.439514][ T5791] JFS: metapage_get_blocks failed [ 541.441461][T15998] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 541.567565][T16002] netlink: 'syz.0.4386': attribute type 10 has an invalid length. [ 541.605333][T16002] team0: Device ipvlan1 failed to register rx_handler [ 542.052727][T16020] loop0: detected capacity change from 0 to 1024 [ 542.118044][T16022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4396'. [ 542.313483][T16028] netlink: 'syz.0.4398': attribute type 10 has an invalid length. [ 542.334021][T16028] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4398'. [ 542.357107][T16028] bridge0: port 3(batadv0) entered blocking state [ 542.369724][T16028] bridge0: port 3(batadv0) entered disabled state [ 542.376792][T16028] batadv0: entered allmulticast mode [ 542.384950][T16028] batadv0: entered promiscuous mode [ 542.391569][T16028] bridge0: port 3(batadv0) entered blocking state [ 542.398635][T16028] bridge0: port 3(batadv0) entered forwarding state [ 542.793190][T16046] loop0: detected capacity change from 0 to 256 [ 542.821461][T16046] exfat: Deprecated parameter 'namecase' [ 542.822815][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 542.836876][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 542.850940][T16046] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 542.999134][T16056] geneve2: entered promiscuous mode [ 543.097072][T16059] bridge0: port 3(veth0_to_bridge) entered blocking state [ 543.125946][T16059] bridge0: port 3(veth0_to_bridge) entered disabled state [ 543.167014][T16059] veth0_to_bridge: entered allmulticast mode [ 543.192953][T16059] veth0_to_bridge: entered promiscuous mode [ 543.217516][T16059] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.256917][T16059] bridge0: port 3(veth0_to_bridge) entered blocking state [ 543.265748][T16059] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 543.618601][T16077] bond1: entered promiscuous mode [ 543.654008][T16077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.822979][ T1238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.954358][T16086] netlink: 'syz.2.4427': attribute type 3 has an invalid length. [ 544.015380][ T1238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.099858][T16088] loop3: detected capacity change from 0 to 16 [ 544.167534][T16088] erofs: (device loop3): mounted with root inode @ nid 36. [ 544.218270][T16088] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 544.232586][ T1238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.277233][T16088] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 544.396805][ T1238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.592255][T16099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.606052][T16099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.616397][T16099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.647936][T16099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.675755][T16099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 544.691729][T16099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.880489][T16090] loop2: detected capacity change from 0 to 32768 [ 545.524671][T16097] chnl_net:caif_netlink_parms(): no params data found [ 545.684166][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.707951][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.725160][T16097] bridge_slave_0: entered allmulticast mode [ 545.732929][T16097] bridge_slave_0: entered promiscuous mode [ 545.772652][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.780545][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.793543][T16097] bridge_slave_1: entered allmulticast mode [ 545.800919][T16097] bridge_slave_1: entered promiscuous mode [ 545.931593][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.951276][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.022985][T16097] team0: Port device team_slave_0 added [ 546.074819][T16097] team0: Port device team_slave_1 added [ 546.104348][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.115853][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.142498][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.174478][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.181476][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.208753][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.231806][ T1238] hsr_slave_0: left promiscuous mode [ 546.238181][ T1238] hsr_slave_1: left promiscuous mode [ 546.244087][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.252864][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.261369][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.268851][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.276884][ T1238] batadv0: left allmulticast mode [ 546.281960][ T1238] batadv0: left promiscuous mode [ 546.289097][ T1238] bridge0: port 3(batadv0) entered disabled state [ 546.300221][ T1238] bridge_slave_1: left allmulticast mode [ 546.306013][ T1238] bridge_slave_1: left promiscuous mode [ 546.311678][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.320883][ T1238] bridge_slave_0: left allmulticast mode [ 546.326719][ T1238] bridge_slave_0: left promiscuous mode [ 546.332444][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.362284][ T1238] veth1_macvtap: left promiscuous mode [ 546.368287][ T1238] veth0_macvtap: left promiscuous mode [ 546.374933][ T1238] veth1_vlan: left promiscuous mode [ 546.380567][ T1238] veth0_vlan: left promiscuous mode [ 546.671486][T16099] Bluetooth: hci2: command tx timeout [ 546.858400][ T1238] team0 (unregistering): Port device team_slave_1 removed [ 546.911194][ T1238] team0 (unregistering): Port device team_slave_0 removed [ 546.959962][ T1238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.006928][ T1238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.443170][ T1238] bond0 (unregistering): Released all slaves [ 547.553781][T16097] hsr_slave_0: entered promiscuous mode [ 547.563277][T16097] hsr_slave_1: entered promiscuous mode [ 547.575032][T16097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.583004][T16097] Cannot create hsr debugfs directory [ 547.900809][T16097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 547.916406][T16097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 547.936856][T16097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 547.947117][ T1238] IPVS: stop unused estimator thread 0... [ 547.958025][T16097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 548.070127][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.099079][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.117541][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.124722][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.147908][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.155111][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.467846][T16097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.595861][T16099] Bluetooth: hci2: command tx timeout [ 548.800099][T16097] veth0_vlan: entered promiscuous mode [ 548.819322][T16097] veth1_vlan: entered promiscuous mode [ 548.875692][T16097] veth0_macvtap: entered promiscuous mode [ 548.886276][T16097] veth1_macvtap: entered promiscuous mode [ 548.906123][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.917803][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.927789][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.938244][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.948095][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.958659][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.975482][T16097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.995502][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.006179][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.023265][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.033880][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.048627][T16097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.059268][T16097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.080016][T16097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.099837][T16097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.118624][T16097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.129079][T16097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.137790][T16097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.267613][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.287345][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.327250][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.336205][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.468297][T16194] loop1: detected capacity change from 0 to 512 [ 549.546948][T16194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 549.599008][T16194] ext4 filesystem being mounted at /1084/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.744672][T16207] netlink: 'syz.4.4434': attribute type 10 has an invalid length. [ 549.805026][T16207] team0: Device ipvlan1 failed to register rx_handler [ 549.830046][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 550.272694][T16224] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4445'. [ 550.534990][T16234] loop1: detected capacity change from 0 to 2048 [ 550.535918][T16099] Bluetooth: hci2: command tx timeout [ 550.561508][T16236] loop4: detected capacity change from 0 to 1024 [ 550.636100][T16236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.675037][T16234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 550.730107][T16236] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.151953][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 551.181303][T16218] loop2: detected capacity change from 0 to 32768 [ 551.208169][T16218] XFS: noikeep mount option is deprecated. [ 551.280005][T16218] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 551.347237][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 551.390708][ T23] usb 5-1: config 4 has an invalid interface number: 244 but max is 0 [ 551.419384][ T23] usb 5-1: config 4 has no interface number 0 [ 551.475592][ T23] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 551.507970][T16251] loop3: detected capacity change from 0 to 32768 [ 551.515412][ T23] usb 5-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 65267, setting to 1024 [ 551.539120][T16251] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4452 (16251) [ 551.541620][T16218] XFS (loop2): Ending clean mount [ 551.562688][ T23] usb 5-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 551.595279][T16218] XFS (loop2): Quotacheck needed: Please wait. [ 551.604673][ T23] usb 5-1: config 4 interface 244 has no altsetting 0 [ 551.621940][T16251] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 551.626584][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 551.651178][T16251] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 551.683094][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.691144][ T23] usb 5-1: Product: syz [ 551.718132][T16251] BTRFS info (device loop3): force zlib compression, level 3 [ 551.719923][T16218] XFS (loop2): Quotacheck: Done. [ 551.730787][ T23] usb 5-1: Manufacturer: syz [ 551.735405][ T23] usb 5-1: SerialNumber: syz [ 551.750047][T16236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 551.774234][T16251] BTRFS info (device loop3): force clearing of disk cache [ 551.833382][T16251] BTRFS info (device loop3): setting nodatasum [ 551.839606][T16251] BTRFS info (device loop3): doing ref verification [ 551.885641][T16251] BTRFS info (device loop3): allowing degraded mounts [ 551.927681][ T5791] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 551.928864][T16251] BTRFS info (device loop3): enabling disk space caching [ 551.961725][T16251] BTRFS info (device loop3): disk space caching is enabled [ 551.981330][ T23] ipheth 5-1:4.244: Unable to find endpoints [ 552.018582][ T23] usb 5-1: USB disconnect, device number 2 [ 552.254348][T16251] BTRFS info (device loop3): enabling ssd optimizations [ 552.278758][T16251] BTRFS info (device loop3): auto enabling async discard [ 552.299538][T16251] BTRFS info (device loop3): rebuilding free space tree [ 552.392064][T16251] BTRFS info (device loop3): disabling free space tree [ 552.399022][T16251] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 552.409454][T16251] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 552.484214][T16099] Bluetooth: hci2: command tx timeout [ 552.680924][T16097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.882176][ T5797] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 553.222667][T16318] loop1: detected capacity change from 0 to 2048 [ 553.235353][T16325] loop2: detected capacity change from 0 to 256 [ 553.335452][T16318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.171622][T16355] program syz.2.4478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.299595][T16360] netlink: 'syz.1.4480': attribute type 10 has an invalid length. [ 554.309796][T16360] team0: Device ipvlan1 failed to register rx_handler [ 554.552168][T16367] loop3: detected capacity change from 0 to 512 [ 554.647290][T16367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 554.676610][T16367] ext4 filesystem being mounted at /1103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.758465][T16367] __quota_error: 284 callbacks suppressed [ 554.758482][T16367] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 554.775473][T16367] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 554.795958][T16367] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4483: Failed to acquire dquot type 0 [ 555.011399][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 555.270876][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 555.482701][ T786] usb 5-1: Using ep0 maxpacket: 32 [ 555.494126][ T786] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.494157][ T786] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.494195][ T786] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 555.494217][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.499723][ T786] hub 5-1:4.0: USB hub found [ 555.608815][T16403] loop3: detected capacity change from 0 to 4096 [ 555.611457][T16403] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 555.666054][T16403] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 555.730280][ T786] hub 5-1:4.0: 2 ports detected [ 555.884820][T16416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4500'. [ 555.898840][T16418] loop3: detected capacity change from 0 to 64 [ 555.924537][ T786] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 555.933798][T16418] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 555.942086][ T786] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 556.036084][ T786] usb 5-1: USB disconnect, device number 3 [ 556.049687][T16418] minix_free_inode: bit 5 already cleared [ 556.348599][T16434] loop3: detected capacity change from 0 to 256 [ 556.362521][T16434] exfat: Deprecated parameter 'utf8' [ 556.368025][T16434] exfat: Deprecated parameter 'namecase' [ 556.379492][T16434] exfat: Deprecated parameter 'namecase' [ 556.385713][T16434] exfat: Deprecated parameter 'utf8' [ 556.403774][T16434] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 556.510340][ T5874] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 556.634113][T16440] autofs4:pid:16440:autofs_fill_super: called with bogus options [ 556.697858][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 556.719059][ T5874] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 556.749745][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.779746][ T5874] usb 3-1: Product: syz [ 556.793975][ T5874] usb 3-1: Manufacturer: syz [ 556.814142][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 556.818634][ T5874] usb 3-1: SerialNumber: syz [ 556.846701][ T5874] r8152-cfgselector 3-1: config 0 descriptor?? [ 557.237185][ T5874] r8152-cfgselector 3-1: Unknown version 0x0000 [ 557.263963][ T5874] r8152-cfgselector 3-1: USB disconnect, device number 121 [ 557.564632][T16481] trusted_key: encrypted_key: keylen parameter is missing [ 557.671578][T16485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4532'. [ 557.703388][ T8] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 557.756140][T16489] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4534'. [ 557.882951][ T8] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 557.899209][ T8] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 557.916218][ T8] usb 2-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 557.955501][ T8] usb 2-1: config 220 has no interface number 2 [ 557.964236][T16495] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4537'. [ 557.980021][ T8] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 557.999451][ T8] usb 2-1: config 220 interface 0 has no altsetting 0 [ 558.006534][ T8] usb 2-1: config 220 interface 76 has no altsetting 0 [ 558.020701][ T8] usb 2-1: config 220 interface 1 has no altsetting 0 [ 558.032422][ T8] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 558.048376][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.076159][ T8] usb 2-1: Product: syz [ 558.080429][ T8] usb 2-1: Manufacturer: syz [ 558.085044][ T8] usb 2-1: SerialNumber: syz [ 558.243149][T16505] loop2: detected capacity change from 0 to 128 [ 558.289052][T16505] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 558.307599][T16505] ext4 filesystem being mounted at /1182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.327306][T16505] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4542: No space for directory leaf checksum. Please run e2fsck -D. [ 558.331824][ T8] usb 2-1: selecting invalid altsetting 0 [ 558.343877][T16505] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.4542: checksumming directory block 0 [ 558.418100][ T8] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 558.418134][ T8] usb 2-1: No valid video chain found. [ 558.476640][ T8] usb 2-1: selecting invalid altsetting 0 [ 558.476669][ T8] usbtest: probe of 2-1:220.1 failed with error -22 [ 558.484738][ T8] usb 2-1: USB disconnect, device number 127 [ 558.521240][ T5791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 558.833967][T16521] xt_CT: No such helper "snmp" [ 559.140259][T16539] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 559.157581][T16539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.250775][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 559.427734][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 559.441141][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 559.473199][ T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 559.488694][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.502609][ T8] usb 2-1: Product: syz [ 559.512951][ T8] usb 2-1: Manufacturer: syz [ 559.519045][T16556] loop3: detected capacity change from 0 to 8 [ 559.525276][ T8] usb 2-1: SerialNumber: syz [ 559.536280][ T8] usb 2-1: config 0 descriptor?? [ 559.550535][ T8] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 559.598562][ T8] usb 2-1: Detected FT232B [ 559.749865][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 559.771294][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 559.787669][ T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 559.820146][ T8] usb 2-1: USB disconnect, device number 2 [ 559.880347][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 559.932039][ T8] ftdi_sio 2-1:0.0: device disconnected [ 560.037985][T16568] loop3: detected capacity change from 0 to 2048 [ 560.099095][T16568] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 560.104426][T16573] loop4: detected capacity change from 0 to 64 [ 560.125014][T16568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.467082][T16583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4577'. [ 560.955375][T16608] xt_policy: output policy not valid in PREROUTING and INPUT [ 561.307806][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'. [ 561.317429][T16625] PKCS8: Unsupported PKCS#8 version [ 561.336008][T16626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4596'. [ 561.788231][T16622] loop4: detected capacity change from 0 to 32768 [ 562.273874][T16661] Option ' ' to dns_resolver key: bad/missing value [ 563.000057][T16649] loop2: detected capacity change from 0 to 32768 [ 563.022374][T16649] XFS: ikeep mount option is deprecated. [ 563.057827][T16681] loop3: detected capacity change from 0 to 4096 [ 563.071895][T16687] sp0: Synchronizing with TNC [ 563.086710][T16649] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 563.172152][T16681] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 563.200631][T16649] XFS (loop2): Ending clean mount [ 563.251406][T16649] XFS (loop2): Quotacheck needed: Please wait. [ 563.267911][T16681] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 563.300506][T16681] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 563.400776][T16649] XFS (loop2): Quotacheck: Done. [ 563.610271][ T5791] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 563.661814][T16707] loop4: detected capacity change from 0 to 256 [ 563.795934][T16707] FAT-fs (loop4): Directory bread(block 64) failed [ 563.813039][T16707] FAT-fs (loop4): Directory bread(block 65) failed [ 563.842521][T16707] FAT-fs (loop4): Directory bread(block 66) failed [ 563.866044][T16707] FAT-fs (loop4): Directory bread(block 67) failed [ 563.872734][T16707] FAT-fs (loop4): Directory bread(block 68) failed [ 563.930129][T16707] FAT-fs (loop4): Directory bread(block 69) failed [ 563.936832][T16707] FAT-fs (loop4): Directory bread(block 70) failed [ 563.943744][T16707] FAT-fs (loop4): Directory bread(block 71) failed [ 563.959168][T16707] FAT-fs (loop4): Directory bread(block 72) failed [ 563.976377][T16707] FAT-fs (loop4): Directory bread(block 73) failed [ 564.098181][T16715] loop3: detected capacity change from 0 to 4096 [ 564.122433][T16715] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 564.263736][T16715] ntfs3: loop3: ino=0, attr_set_size [ 564.319445][T16715] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 565.210464][T16723] loop4: detected capacity change from 0 to 32768 [ 565.262644][T16723] [ 565.262644][T16723] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 565.262644][T16723] [ 565.324294][T16723] ERROR: (device loop4): dtSearch: stack overrun! [ 565.324294][T16723] [ 565.378745][T16723] ERROR: (device loop4): remounting filesystem as read-only [ 565.402523][T16723] btstack dump: [ 565.406041][T16723] bn = 0, index = 0 [ 565.409849][T16723] bn = 0, index = 0 [ 565.439870][T16723] bn = 0, index = 0 [ 565.449998][T16723] bn = 0, index = 0 [ 565.459514][T16723] bn = 0, index = 0 [ 565.492939][T16723] bn = 0, index = 0 [ 565.502998][T16723] bn = 0, index = 0 [ 565.525644][T16723] bn = 0, index = 0 [ 565.552381][T16723] jfs_lookup: dtSearch returned -5 [ 565.608293][T16764] loop1: detected capacity change from 0 to 1024 [ 565.713306][T16764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.714657][T16770] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 565.836427][T16764] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 565.909736][T16764] EXT4-fs (loop1): Remounting filesystem read-only [ 565.990133][T16764] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.1.4653: cleanup dec ref error -28 [ 566.079256][T16785] loop3: detected capacity change from 0 to 512 [ 566.093218][T16783] netlink: 'syz.2.4660': attribute type 10 has an invalid length. [ 566.114616][T16783] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4660'. [ 566.141352][T16783] ipvlan1: entered promiscuous mode [ 566.151913][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.164397][T16783] bridge0: port 3(ipvlan1) entered blocking state [ 566.165331][T16785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 566.182310][T16783] bridge0: port 3(ipvlan1) entered disabled state [ 566.206688][T16783] ipvlan1: entered allmulticast mode [ 566.225207][T16783] veth0_vlan: entered allmulticast mode [ 566.239910][T16783] ipvlan1: left allmulticast mode [ 566.246027][T16783] veth0_vlan: left allmulticast mode [ 566.280981][T16785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.293661][T16785] ext4 filesystem being mounted at /1156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.486086][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.499857][T16802] netlink: 'syz.2.4662': attribute type 10 has an invalid length. [ 566.609487][T16802] team0: Port device syz_tun added [ 566.686708][T16808] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4665'. [ 567.105603][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 567.122561][T16827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4674'. [ 567.186050][T16831] syz.4.4675 uses old SIOCAX25GETINFO [ 567.349349][T16838] loop1: detected capacity change from 0 to 256 [ 567.465979][T16838] FAT-fs (loop1): Directory bread(block 64) failed [ 567.492357][T16838] FAT-fs (loop1): Directory bread(block 65) failed [ 567.542402][T16838] FAT-fs (loop1): Directory bread(block 66) failed [ 567.581079][T16838] FAT-fs (loop1): Directory bread(block 67) failed [ 567.591656][T16838] FAT-fs (loop1): Directory bread(block 68) failed [ 567.610679][T16838] FAT-fs (loop1): Directory bread(block 69) failed [ 567.634659][T16838] FAT-fs (loop1): Directory bread(block 70) failed [ 567.655904][T16838] FAT-fs (loop1): Directory bread(block 71) failed [ 567.656684][T16851] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 567.670807][T16838] FAT-fs (loop1): Directory bread(block 72) failed [ 567.704043][T16838] FAT-fs (loop1): Directory bread(block 73) failed [ 567.922846][T16862] xt_hashlimit: max too large, truncated to 1048576 [ 568.841950][T16902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4703'. [ 569.168086][ T8] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 569.266907][T16926] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4711'. [ 569.359763][ T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 569.387457][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.429983][ T8] usb 4-1: config 0 descriptor?? [ 569.642561][ T8] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00 [ 569.668606][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 569.815696][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 569.859308][ T8] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 569.866832][ T8] [drm] Initialized udl on minor 2 [ 569.899874][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 569.938052][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 569.955304][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 570.004295][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 570.009369][T16953] loop2: detected capacity change from 0 to 164 [ 570.015971][ T8] usb 4-1: USB disconnect, device number 121 [ 570.033458][ T5874] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 570.073166][T16953] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 570.115743][T16953] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 570.163284][T16953] rock: directory entry would overflow storage [ 570.189261][T16953] rock: sig=0x4f50, size=4, remaining=3 [ 570.221568][T16953] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 570.484613][T16970] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4729'. [ 570.734826][T16984] QAT: Device 127 not found [ 570.974052][T16993] loop1: detected capacity change from 0 to 1024 [ 571.178648][T17000] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4741'. [ 571.207594][T17002] cgroup: Name too long [ 571.210451][T17004] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4743'. [ 571.595233][T17012] loop4: detected capacity change from 0 to 4096 [ 571.973069][ T5816] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 572.207306][ T5816] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 572.229625][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.253422][ T5816] usb 3-1: Product: syz [ 572.264231][ T5816] usb 3-1: Manufacturer: syz [ 572.268878][ T5816] usb 3-1: SerialNumber: syz [ 572.325181][ T5816] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 572.370586][ T786] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 572.716427][T17061] loop1: detected capacity change from 0 to 8 [ 572.824792][ T23] usb 3-1: USB disconnect, device number 122 [ 572.843337][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4764'. [ 572.874698][T17061] SQUASHFS error: xz decompression failed, data probably corrupt [ 572.887102][T17061] SQUASHFS error: Failed to read block 0x108: -5 [ 572.913955][T17061] SQUASHFS error: Unable to read metadata cache entry [106] [ 572.950610][T17061] SQUASHFS error: Unable to read inode 0x11f [ 573.208688][T17083] AppArmor: change_hat: Invalid input '0' [ 573.355769][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 573.379675][ T786] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 573.407388][ T786] ath9k_htc: Failed to initialize the device [ 573.430289][ T23] usb 3-1: ath9k_htc: USB layer deinitialized [ 573.573739][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 573.600874][ T28] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 573.640084][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 573.682318][ T28] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 573.698855][ T28] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 573.715552][ T28] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 573.729008][ T28] usb 2-1: Manufacturer: syz [ 573.745941][ T28] usb 2-1: config 0 descriptor?? [ 573.757075][T17061] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.774159][ T28] smsusb:smsusb_probe: board id=9, interface number 0 [ 573.784549][ T28] smsusb:siano_media_device_register: media controller created [ 573.822108][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.829476][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.836799][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.844134][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.851450][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.858779][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.868703][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.876289][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.883587][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.890871][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.898135][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.905403][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.914761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.922076][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.929356][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.936724][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.944014][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.951298][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.960186][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.967487][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.974761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.988719][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 573.996022][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.003295][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.020796][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.028113][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.035385][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.043008][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.050292][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.057570][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.066176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.073491][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.080778][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.088069][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.095357][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.102646][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.110982][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.118298][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.125578][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.132824][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.140067][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.147309][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.154945][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.162254][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.169553][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.176869][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.184173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.191468][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.200551][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.207886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.215207][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.222499][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.229793][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.237075][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.244720][ T28] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 574.253781][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.253888][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.253988][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254078][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254165][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254251][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254426][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254513][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.254601][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.329344][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.336656][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.343960][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.351257][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.358551][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.365861][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.373155][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.380456][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.387751][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.395898][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.403210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.410487][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.417759][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.425036][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.432326][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.439619][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.446885][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.454130][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.461355][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.469481][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.476766][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.484047][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.491301][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.498524][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.505744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.512966][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.520186][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.527419][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.534638][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.546452][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.553769][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.561074][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.568373][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.575674][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.582983][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.590271][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.597568][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.604859][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.612156][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.627954][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.635291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.642581][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.649869][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.657155][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.664399][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.671678][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.678951][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.686376][ T28] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 574.693505][ T28] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 574.702354][ T28] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 574.710659][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.717960][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.726486][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.733786][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.741778][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 574.749008][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.756278][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 574.766300][ T28] ------------[ cut here ]------------ [ 574.771893][ T28] ODEBUG: free active (active state 0) object: ffff888030d028c8 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 574.785036][ T786] ================================================================== [ 574.793115][ T786] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 574.800761][ T786] Read of size 8 at addr ffff888021359098 by task kworker/1:2/786 [ 574.808571][ T786] [ 574.810897][ T786] CPU: 1 PID: 786 Comm: kworker/1:2 Not tainted 6.6.95-syzkaller #0 [ 574.818877][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.828934][ T786] Workqueue: events do_submit_urb [ 574.833965][ T786] Call Trace: [ 574.837235][ T786] [ 574.840154][ T786] dump_stack_lvl+0x16c/0x230 [ 574.844837][ T786] ? __lock_acquire+0x7c80/0x7c80 [ 574.849850][ T786] ? show_regs_print_info+0x20/0x20 [ 574.855035][ T786] ? load_image+0x3b0/0x3b0 [ 574.859524][ T786] ? __virt_addr_valid+0x469/0x540 [ 574.864639][ T786] print_report+0xac/0x230 [ 574.869053][ T786] ? __lock_acquire+0xff/0x7c80 [ 574.873900][ T786] kasan_report+0x117/0x150 [ 574.878407][ T786] ? mark_lock+0x94/0x320 [ 574.882738][ T786] ? __lock_acquire+0xff/0x7c80 [ 574.887579][ T786] __lock_acquire+0xff/0x7c80 [ 574.892243][ T786] ? mark_lock+0x94/0x320 [ 574.896559][ T786] ? __lock_acquire+0x1334/0x7c80 [ 574.901571][ T786] ? mark_lock+0x94/0x320 [ 574.905886][ T786] ? look_up_lock_class+0x75/0x140 [ 574.910990][ T786] ? verify_lock_unused+0x140/0x140 [ 574.916175][ T786] ? register_lock_class+0xb5/0x890 [ 574.921357][ T786] ? is_dynamic_key+0x260/0x260 [ 574.926192][ T786] ? mark_lock+0x94/0x320 [ 574.930509][ T786] ? __lock_acquire+0x1334/0x7c80 [ 574.935517][ T786] lock_acquire+0x197/0x410 [ 574.940008][ T786] ? smscore_getbuffer+0xa9/0x440 [ 574.945030][ T786] ? read_lock_is_recursive+0x20/0x20 [ 574.950394][ T786] _raw_spin_lock_irqsave+0xa8/0xf0 [ 574.955848][ T786] ? smscore_getbuffer+0xa9/0x440 [ 574.960858][ T786] ? _raw_spin_lock+0x40/0x40 [ 574.965540][ T786] smscore_getbuffer+0xa9/0x440 [ 574.970376][ T786] ? smscore_onresponse+0xf10/0xf10 [ 574.975650][ T786] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 574.981622][ T786] ? read_lock_is_recursive+0x20/0x20 [ 574.986988][ T786] do_submit_urb+0x98/0x360 [ 574.991481][ T786] ? process_scheduled_works+0x957/0x15b0 [ 574.997189][ T786] ? process_scheduled_works+0x957/0x15b0 [ 575.002894][ T786] process_scheduled_works+0xa45/0x15b0 [ 575.008441][ T786] ? assign_work+0x400/0x400 [ 575.013018][ T786] ? assign_work+0x39e/0x400 [ 575.017596][ T786] worker_thread+0xa55/0xfc0 [ 575.022171][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 575.028052][ T786] ? _raw_spin_unlock+0x40/0x40 [ 575.032889][ T786] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 575.038783][ T786] kthread+0x2fa/0x390 [ 575.042841][ T786] ? pr_cont_work+0x560/0x560 [ 575.047504][ T786] ? kthread_blkcg+0xd0/0xd0 [ 575.052076][ T786] ret_from_fork+0x48/0x80 [ 575.056478][ T786] ? kthread_blkcg+0xd0/0xd0 [ 575.061054][ T786] ret_from_fork_asm+0x11/0x20 [ 575.065812][ T786] [ 575.068817][ T786] [ 575.071122][ T786] Allocated by task 28: [ 575.075350][ T786] kasan_set_track+0x4e/0x70 [ 575.079928][ T786] __kasan_kmalloc+0x8f/0xa0 [ 575.084502][ T786] smscore_register_device+0x63/0x10f0 [ 575.089947][ T786] smsusb_probe+0x1362/0x1da0 [ 575.094610][ T786] usb_probe_interface+0x5a4/0xb00 [ 575.099705][ T786] really_probe+0x25b/0xb40 [ 575.104194][ T786] __driver_probe_device+0x18c/0x330 [ 575.109463][ T786] driver_probe_device+0x4f/0x420 [ 575.114472][ T786] __device_attach_driver+0x2ca/0x520 [ 575.119833][ T786] bus_for_each_drv+0x24b/0x2d0 [ 575.124669][ T786] __device_attach+0x2b5/0x400 [ 575.129421][ T786] bus_probe_device+0x180/0x260 [ 575.134261][ T786] device_add+0x85b/0xc20 [ 575.138576][ T786] usb_set_configuration+0x1a79/0x20c0 [ 575.144028][ T786] usb_generic_driver_probe+0x8d/0x150 [ 575.149481][ T786] usb_probe_device+0x13d/0x280 [ 575.154316][ T786] really_probe+0x25b/0xb40 [ 575.158810][ T786] __driver_probe_device+0x18c/0x330 [ 575.164088][ T786] driver_probe_device+0x4f/0x420 [ 575.169101][ T786] __device_attach_driver+0x2ca/0x520 [ 575.174460][ T786] bus_for_each_drv+0x24b/0x2d0 [ 575.179296][ T786] __device_attach+0x2b5/0x400 [ 575.184044][ T786] bus_probe_device+0x180/0x260 [ 575.188877][ T786] device_add+0x85b/0xc20 [ 575.193197][ T786] usb_new_device+0xa31/0x1630 [ 575.197947][ T786] hub_event+0x2957/0x49c0 [ 575.202347][ T786] process_scheduled_works+0xa45/0x15b0 [ 575.207877][ T786] worker_thread+0xa55/0xfc0 [ 575.212453][ T786] kthread+0x2fa/0x390 [ 575.216508][ T786] ret_from_fork+0x48/0x80 [ 575.220910][ T786] ret_from_fork_asm+0x11/0x20 [ 575.225661][ T786] [ 575.227967][ T786] Freed by task 28: [ 575.231754][ T786] kasan_set_track+0x4e/0x70 [ 575.236330][ T786] kasan_save_free_info+0x2e/0x50 [ 575.241359][ T786] ____kasan_slab_free+0x126/0x1e0 [ 575.246463][ T786] slab_free_freelist_hook+0x130/0x1b0 [ 575.251924][ T786] __kmem_cache_free+0xba/0x1f0 [ 575.256764][ T786] smscore_unregister_device+0x603/0x6e0 [ 575.262381][ T786] smsusb_term_device+0x18f/0x220 [ 575.267393][ T786] smsusb_probe+0x1708/0x1da0 [ 575.272057][ T786] usb_probe_interface+0x5a4/0xb00 [ 575.277151][ T786] really_probe+0x25b/0xb40 [ 575.281641][ T786] __driver_probe_device+0x18c/0x330 [ 575.286912][ T786] driver_probe_device+0x4f/0x420 [ 575.291921][ T786] __device_attach_driver+0x2ca/0x520 [ 575.297276][ T786] bus_for_each_drv+0x24b/0x2d0 [ 575.302110][ T786] __device_attach+0x2b5/0x400 [ 575.306857][ T786] bus_probe_device+0x180/0x260 [ 575.311695][ T786] device_add+0x85b/0xc20 [ 575.316007][ T786] usb_set_configuration+0x1a79/0x20c0 [ 575.321540][ T786] usb_generic_driver_probe+0x8d/0x150 [ 575.326989][ T786] usb_probe_device+0x13d/0x280 [ 575.331821][ T786] really_probe+0x25b/0xb40 [ 575.336312][ T786] __driver_probe_device+0x18c/0x330 [ 575.341581][ T786] driver_probe_device+0x4f/0x420 [ 575.346592][ T786] __device_attach_driver+0x2ca/0x520 [ 575.351949][ T786] bus_for_each_drv+0x24b/0x2d0 [ 575.356786][ T786] __device_attach+0x2b5/0x400 [ 575.361536][ T786] bus_probe_device+0x180/0x260 [ 575.366370][ T786] device_add+0x85b/0xc20 [ 575.370687][ T786] usb_new_device+0xa31/0x1630 [ 575.375434][ T786] hub_event+0x2957/0x49c0 [ 575.379834][ T786] process_scheduled_works+0xa45/0x15b0 [ 575.385367][ T786] worker_thread+0xa55/0xfc0 [ 575.389939][ T786] kthread+0x2fa/0x390 [ 575.393992][ T786] ret_from_fork+0x48/0x80 [ 575.398396][ T786] ret_from_fork_asm+0x11/0x20 [ 575.403144][ T786] [ 575.405457][ T786] Last potentially related work creation: [ 575.411158][ T786] kasan_save_stack+0x3e/0x60 [ 575.415831][ T786] __kasan_record_aux_stack+0xaf/0xc0 [ 575.421193][ T786] call_rcu+0x14f/0x920 [ 575.425336][ T786] netlink_release+0x16d8/0x1ad0 [ 575.430279][ T786] sock_close+0xbd/0x230 [ 575.434503][ T786] __fput+0x234/0x970 [ 575.438470][ T786] __se_sys_close+0x15f/0x220 [ 575.443140][ T786] do_syscall_64+0x55/0xb0 [ 575.447544][ T786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.453419][ T786] [ 575.455726][ T786] The buggy address belongs to the object at ffff888021359000 [ 575.455726][ T786] which belongs to the cache kmalloc-2k of size 2048 [ 575.469762][ T786] The buggy address is located 152 bytes inside of [ 575.469762][ T786] freed 2048-byte region [ffff888021359000, ffff888021359800) [ 575.483628][ T786] [ 575.485936][ T786] The buggy address belongs to the physical page: [ 575.492335][ T786] page:ffffea000084d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21358 [ 575.502468][ T786] head:ffffea000084d600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 575.511385][ T786] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 575.519359][ T786] page_type: 0xffffffff() [ 575.523671][ T786] raw: 00fff00000000840 ffff888017842000 dead000000000100 dead000000000122 [ 575.532243][ T786] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 575.540803][ T786] page dumped because: kasan: bad access detected [ 575.547202][ T786] page_owner tracks the page as allocated [ 575.552897][ T786] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5974932194, free_ts 0 [ 575.572501][ T786] post_alloc_hook+0x1cd/0x210 [ 575.577254][ T786] get_page_from_freelist+0x195c/0x19f0 [ 575.582785][ T786] __alloc_pages+0x1e3/0x460 [ 575.587357][ T786] alloc_page_interleave+0x24/0x1e0 [ 575.592539][ T786] alloc_slab_page+0x5d/0x170 [ 575.597199][ T786] new_slab+0x87/0x2e0 [ 575.601250][ T786] ___slab_alloc+0xc6d/0x12f0 [ 575.605912][ T786] __kmem_cache_alloc_node+0x1a2/0x260 [ 575.611351][ T786] kmalloc_trace+0x2a/0xe0 [ 575.615746][ T786] acpi_ds_create_walk_state+0xda/0x270 [ 575.621278][ T786] acpi_ps_execute_method+0x220/0x7c0 [ 575.626634][ T786] acpi_ns_evaluate+0x5a6/0xa20 [ 575.631470][ T786] acpi_evaluate_object+0x540/0xa10 [ 575.636649][ T786] acpi_evaluate_integer+0xfd/0x270 [ 575.641835][ T786] acpi_bus_get_status+0x14b/0x2e0 [ 575.646933][ T786] acpi_serdev_add_device+0x11a/0x6a0 [ 575.652292][ T786] page_owner free stack trace missing [ 575.657638][ T786] [ 575.659945][ T786] Memory state around the buggy address: [ 575.665558][ T786] ffff888021358f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 575.673609][ T786] ffff888021359000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.681657][ T786] >ffff888021359080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.689698][ T786] ^ [ 575.694533][ T786] ffff888021359100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.702594][ T786] ffff888021359180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 575.710652][ T786] ================================================================== [ 575.718716][ T786] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 575.725892][ T786] CPU: 1 PID: 786 Comm: kworker/1:2 Not tainted 6.6.95-syzkaller #0 [ 575.733862][ T786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.743905][ T786] Workqueue: events do_submit_urb [ 575.748926][ T786] Call Trace: [ 575.752194][ T786] [ 575.755111][ T786] dump_stack_lvl+0x16c/0x230 [ 575.759782][ T786] ? show_regs_print_info+0x20/0x20 [ 575.764966][ T786] ? load_image+0x3b0/0x3b0 [ 575.769456][ T786] panic+0x2c0/0x710 [ 575.773335][ T786] ? bpf_jit_dump+0xd0/0xd0 [ 575.777820][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 575.783706][ T786] ? _raw_spin_unlock+0x40/0x40 [ 575.788541][ T786] ? print_memory_metadata+0x314/0x400 [ 575.793988][ T786] ? __lock_acquire+0xff/0x7c80 [ 575.798822][ T786] check_panic_on_warn+0x84/0xa0 [ 575.803753][ T786] ? __lock_acquire+0xff/0x7c80 [ 575.808589][ T786] end_report+0x6f/0x140 [ 575.812908][ T786] kasan_report+0x128/0x150 [ 575.817398][ T786] ? mark_lock+0x94/0x320 [ 575.821715][ T786] ? __lock_acquire+0xff/0x7c80 [ 575.826553][ T786] __lock_acquire+0xff/0x7c80 [ 575.831216][ T786] ? mark_lock+0x94/0x320 [ 575.835528][ T786] ? __lock_acquire+0x1334/0x7c80 [ 575.840542][ T786] ? mark_lock+0x94/0x320 [ 575.844857][ T786] ? look_up_lock_class+0x75/0x140 [ 575.849955][ T786] ? verify_lock_unused+0x140/0x140 [ 575.855134][ T786] ? register_lock_class+0xb5/0x890 [ 575.860316][ T786] ? is_dynamic_key+0x260/0x260 [ 575.865151][ T786] ? mark_lock+0x94/0x320 [ 575.869466][ T786] ? __lock_acquire+0x1334/0x7c80 [ 575.874474][ T786] lock_acquire+0x197/0x410 [ 575.878961][ T786] ? smscore_getbuffer+0xa9/0x440 [ 575.883977][ T786] ? read_lock_is_recursive+0x20/0x20 [ 575.889339][ T786] _raw_spin_lock_irqsave+0xa8/0xf0 [ 575.894524][ T786] ? smscore_getbuffer+0xa9/0x440 [ 575.899533][ T786] ? _raw_spin_lock+0x40/0x40 [ 575.904199][ T786] smscore_getbuffer+0xa9/0x440 [ 575.909037][ T786] ? smscore_onresponse+0xf10/0xf10 [ 575.914221][ T786] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 575.920187][ T786] ? read_lock_is_recursive+0x20/0x20 [ 575.925549][ T786] do_submit_urb+0x98/0x360 [ 575.930045][ T786] ? process_scheduled_works+0x957/0x15b0 [ 575.935750][ T786] ? process_scheduled_works+0x957/0x15b0 [ 575.941451][ T786] process_scheduled_works+0xa45/0x15b0 [ 575.946991][ T786] ? assign_work+0x400/0x400 [ 575.951568][ T786] ? assign_work+0x39e/0x400 [ 575.956145][ T786] worker_thread+0xa55/0xfc0 [ 575.960806][ T786] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 575.966689][ T786] ? _raw_spin_unlock+0x40/0x40 [ 575.971519][ T786] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 575.977400][ T786] kthread+0x2fa/0x390 [ 575.981452][ T786] ? pr_cont_work+0x560/0x560 [ 575.986145][ T786] ? kthread_blkcg+0xd0/0xd0 [ 575.990719][ T786] ret_from_fork+0x48/0x80 [ 575.995122][ T786] ? kthread_blkcg+0xd0/0xd0 [ 575.999695][ T786] ret_from_fork_asm+0x11/0x20 [ 576.004451][ T786] [ 576.007704][ T786] Kernel Offset: disabled [ 576.012015][ T786] Rebooting in 86400 seconds..