last executing test programs: 1m47.534511233s ago: executing program 2 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x7f, 0xef0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x6, r0}, 0x38) 1m46.892438498s ago: executing program 2 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 1m46.673085189s ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) 1m46.467141458s ago: executing program 2 (id=371): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m45.68928708s ago: executing program 2 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9c}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x3c}}, 0x0) 1m43.440091069s ago: executing program 2 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1m42.968513664s ago: executing program 32 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1m35.073810927s ago: executing program 3 (id=464): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCFLSH(r0, 0x80047456, 0x20001100) 1m34.093161825s ago: executing program 3 (id=469): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) 1m33.916217503s ago: executing program 3 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, r1, 0x201, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x2a, 0xe, [@ssid={0x0, 0xc, @random="55438198b214a54c68bf28ae"}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x31, @val="eca5ea5628151301619efd1977ccda55"}}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1m33.354517398s ago: executing program 3 (id=476): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000001a40)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@uid}, {@uid_forget}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x100}}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x20000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir, 0x5c}], [], 0x2e}) 1m32.470150755s ago: executing program 3 (id=482): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x1, @sdr={0x3436324d, 0x9}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0xffff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x4, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 1m31.620104286s ago: executing program 3 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x3, '3'}, @main=@item_4={0x3, 0x0, 0x9, "eea51251"}]}}, 0x0}, 0x0) 1m31.194027476s ago: executing program 33 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0xfc, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x3, '3'}, @main=@item_4={0x3, 0x0, 0x9, "eea51251"}]}}, 0x0}, 0x0) 1m11.408845162s ago: executing program 0 (id=619): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 1m10.573101237s ago: executing program 0 (id=628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) 1m10.46527005s ago: executing program 0 (id=629): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000005c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x882}}, 0x10) 1m10.356022111s ago: executing program 0 (id=631): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000540)=@loop={'/dev/loop', 0x0}, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='f2fs\x00', 0x0, 0x0) 1m9.173448515s ago: executing program 0 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) 1m7.684137548s ago: executing program 0 (id=652): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f0000000e80)="$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") mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 1m7.255533456s ago: executing program 34 (id=652): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f0000000e80)="$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") mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) 6.556406152s ago: executing program 7 (id=1134): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.778555667s ago: executing program 4 (id=1148): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010102, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4.777892231s ago: executing program 7 (id=1149): syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x1, 0x67c, &(0x7f0000000080)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4.303256836s ago: executing program 7 (id=1155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, '3'}]}}, 0x0}, 0x0) 4.248136863s ago: executing program 4 (id=1157): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) listen(r0, 0x3) 4.056725149s ago: executing program 4 (id=1159): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00'}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 3.943089236s ago: executing program 1 (id=1162): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @short}, 0x14, &(0x7f00000001c0)={0x0}}, 0x0) 3.768070074s ago: executing program 1 (id=1163): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="c1", 0xfe41) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 3.747668483s ago: executing program 1 (id=1164): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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") lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000004c0)=@v2={0x5, 0x0, 0x1, 0x207}, 0x9, 0x1) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x5, 0x0, 0x14, 0x6, 0x2, "f85b"}, 0xb, 0x2) 3.160094231s ago: executing program 4 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003800800040000000000080002002000000004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.64413832s ago: executing program 4 (id=1172): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e", 0x27}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066ea6d07128"], 0x2c}}, 0x0) 2.634042123s ago: executing program 1 (id=1173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0xdc, 0x24, 0x0, 0x0, 0x25dfdbfc, {}, [@TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x31, 0xd2, 0x200, 0x8, 0x2, 0x9, 0x4, 0x9}}, {0x16, 0x2, [0x0, 0x8, 0xa, 0x1, 0x4, 0x2, 0x54, 0x3, 0x0]}}, {{0x1c, 0x1, {0x5, 0x3, 0xff14, 0x400, 0x0, 0x7, 0xe2, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0xec, 0x2, 0xf, 0x9, 0x2, 0xcb, 0x9, 0x5}}, {0xe, 0x2, [0x6, 0x10, 0x1ff, 0x40, 0x6]}}, {{0x1c, 0x1, {0x7, 0xfd, 0x0, 0x9, 0x0, 0xc13, 0x9, 0x8}}, {0x14, 0x2, [0x178, 0xef36, 0xffff, 0x7, 0x0, 0x7, 0x2, 0xd]}}]}]}, 0xdc}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.409801688s ago: executing program 4 (id=1176): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0}) 2.242447467s ago: executing program 5 (id=1178): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2.241934246s ago: executing program 6 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0xb42c9ed17f5f835b, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000) 2.116122225s ago: executing program 5 (id=1180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}}, 0x14b6deac033214c2) 1.864797891s ago: executing program 6 (id=1182): mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r0 = io_uring_setup(0x341a, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0x7fffc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.827119348s ago: executing program 5 (id=1183): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 1.80079929s ago: executing program 8 (id=1184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r0, 0x540b, 0x0) 1.702771271s ago: executing program 7 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 1.475980281s ago: executing program 5 (id=1186): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1.297287453s ago: executing program 8 (id=1187): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0xfffffffffffffef1, 0x0, 0x1, 0x2}}, 0x48) 1.216796666s ago: executing program 7 (id=1188): r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xfdfffffffffffffe}], 0x0, 0x7}, 0x20) 1.154337241s ago: executing program 5 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.09511977s ago: executing program 6 (id=1190): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}, 0x2c}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000003ffffff8d00000100"/39, 0x27}, {&(0x7f00000008c0)="83", 0x1}], 0x2}, 0x0) 1.019256375s ago: executing program 7 (id=1191): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4000, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 994.870333ms ago: executing program 1 (id=1192): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 853.157121ms ago: executing program 5 (id=1193): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000003c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6c6f63616c616c6c6f633d31383434363734343037333730393535313631302c6e6f61636c2c009e952c808f009b8a2a2ba5c45decab84ea8c68fb7016e25d75317ec64ca76ee292fe2e1a2a41aaf805a4bb34d7776eb390b8fade283f3d2957e4b70a21bc08d561546ded2783f4c4fd223b24044bbd7e720c3b85c2a5fa4df07027e648a2bab84e71838bec147b85485acfd6db4ac607060e6585f04feaf6705b0547a170164b415c767dcbfa4d5140560b030a74bc334a9332d0cd2851a36806fdcc5c5d34b81dc0b229dcd31e40309ede3c36fa0b64a4731ade0637b9bbc589bc269e00776a9d8b6a794daf03f71926"], 0x1, 0x470b, &(0x7f0000008f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 757.977682ms ago: executing program 8 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 757.194349ms ago: executing program 6 (id=1195): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045510, &(0x7f0000002a40)) 536.483042ms ago: executing program 8 (id=1196): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x15, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x9) 231.976162ms ago: executing program 6 (id=1197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 216.386156ms ago: executing program 8 (id=1198): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 79.134921ms ago: executing program 6 (id=1199): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0x2, 0x32, 0x21, 0xfba2, 0x4, "2b637c249f80c67f"}) 493.08µs ago: executing program 8 (id=1200): unshare(0x2a020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 0s ago: executing program 1 (id=1201): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0601000000000040120c300000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, &(0x7f0000000380)={0x40, 0x21, 0x19, {0x19, 0xf, "639ebe3011b83bde1c6be17684a462471ba7a5c612a1cc"}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): 3][ T7094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.889679][ T5844] Bluetooth: hci0: command tx timeout [ 134.965194][ T7103] FAT-fs (loop0): Directory bread(block 64) failed [ 134.971936][ T7103] FAT-fs (loop0): Directory bread(block 65) failed [ 134.978551][ T7103] FAT-fs (loop0): Directory bread(block 66) failed [ 134.985381][ T7103] FAT-fs (loop0): Directory bread(block 67) failed [ 134.992023][ T7103] FAT-fs (loop0): Directory bread(block 68) failed [ 134.998649][ T7103] FAT-fs (loop0): Directory bread(block 69) failed [ 135.005335][ T7103] FAT-fs (loop0): Directory bread(block 70) failed [ 135.008642][ T7094] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.439: Unrecognised inode hash code 20 [ 135.012036][ T7103] FAT-fs (loop0): Directory bread(block 71) failed [ 135.023550][ T7094] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.439: Corrupt directory, running e2fsck is recommended [ 135.030354][ T7103] FAT-fs (loop0): Directory bread(block 72) failed [ 135.049453][ T7103] FAT-fs (loop0): Directory bread(block 73) failed [ 135.067371][ T7082] loop1: detected capacity change from 0 to 32768 [ 135.112950][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.158846][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.176864][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.184444][ T7006] bridge_slave_0: entered allmulticast mode [ 135.192023][ T7006] bridge_slave_0: entered promiscuous mode [ 135.239757][ T7090] XFS (loop3): Ending clean mount [ 135.251504][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.258642][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.289826][ T7006] bridge_slave_1: entered allmulticast mode [ 135.297124][ T7006] bridge_slave_1: entered promiscuous mode [ 135.321346][ T7090] XFS (loop3): Quotacheck needed: Please wait. [ 135.407812][ T7082] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 135.617740][ T7082] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.661934][ T7090] XFS (loop3): Quotacheck: Done. [ 135.720280][ T7106] loop4: detected capacity change from 0 to 32768 [ 135.870480][ T7141] loop0: detected capacity change from 0 to 64 [ 135.919695][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.923944][ T7006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.005203][ T7082] syz.1.434 (7082) used greatest stack depth: 16952 bytes left [ 136.022051][ T7006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.138169][ T7106] gfs2: fsid=sx: Trying to join cluster "lock_nolock", "sx" [ 136.147054][ T7106] gfs2: fsid=sx: Now mounting FS (format 1801)... [ 136.240186][ T5833] ocfs2: Unmounting device (7,1) on (node local) [ 136.450658][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 136.460887][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 136.470291][ T7147] netlink: 'syz.0.451': attribute type 5 has an invalid length. [ 136.476331][ T7138] loop5: detected capacity change from 0 to 40427 [ 136.478147][ T7147] netlink: 'syz.0.451': attribute type 6 has an invalid length. [ 136.509170][ T7106] gfs2: fsid=sx.0: journal 0 mapped with 16 extents in 0ms [ 136.532391][ T8] gfs2: fsid=sx.0: jid=0, already locked for use [ 136.540950][ T8] gfs2: fsid=sx.0: jid=0: Looking at journal... [ 136.572489][ T7149] loop1: detected capacity change from 0 to 64 [ 136.605377][ T7138] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 136.613529][ T7138] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.627675][ T7138] F2FS-fs (loop5): invalid crc value [ 136.634575][ T2912] hsr_slave_0: left promiscuous mode [ 136.652404][ T7138] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.708180][ T2912] hsr_slave_1: left promiscuous mode [ 136.742673][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.795741][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.847650][ T8] gfs2: fsid=sx.0: jid=0: Journal head lookup took 306ms [ 136.863738][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.877706][ T8] gfs2: fsid=sx.0: jid=0: Done [ 136.894356][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.901159][ T7106] gfs2: fsid=sx.0: first mount done, others may mount [ 136.939384][ T5844] Bluetooth: hci0: command tx timeout [ 136.945081][ T7138] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.980814][ T2912] veth1_macvtap: left promiscuous mode [ 136.987499][ T2912] veth0_macvtap: left promiscuous mode [ 136.993475][ T2912] veth1_vlan: left promiscuous mode [ 136.999377][ T2912] veth0_vlan: left promiscuous mode [ 137.015401][ T7138] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 138.578987][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 138.617751][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 138.719762][ T5836] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.788727][ T7177] slcan: can't register candev [ 138.794960][ T7177] Falling back ldisc for ptm0. [ 138.900879][ T5836] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 138.930694][ T5836] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 138.949677][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.957713][ T5836] usb 5-1: Product: syz [ 138.962906][ T5836] usb 5-1: Manufacturer: syz [ 138.967530][ T5836] usb 5-1: SerialNumber: syz [ 138.998669][ T5836] usb 5-1: config 0 descriptor?? [ 139.018447][ T5844] Bluetooth: hci0: command tx timeout [ 139.503313][ T7006] team0: Port device team_slave_0 added [ 139.545805][ T7006] team0: Port device team_slave_1 added [ 139.679643][ T5836] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 139.691643][ T5836] asix 5-1:0.0: probe with driver asix failed with error -71 [ 139.739347][ T5836] usb 5-1: USB disconnect, device number 7 [ 139.846106][ T7209] loop3: detected capacity change from 0 to 2048 [ 139.849144][ T7204] mkiss: ax0: crc mode is auto. [ 139.870973][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.928889][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.962109][ T7207] loop0: detected capacity change from 0 to 2048 [ 139.977852][ T7209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.001188][ T7207] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.007711][ T7216] binder: 7215:7216 ioctl c00c620f 20000380 returned -22 [ 140.039213][ T7006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.055961][ T7209] overlayfs: upper fs needs to support d_type. [ 140.069615][ T5838] udevd[5838]: incorrect nilfs2 checksum on /dev/loop0 [ 140.078933][ T7217] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.118745][ T7209] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.136348][ T7209] overlayfs: failed to set xattr on upper [ 140.145969][ T7006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.167834][ T7209] overlayfs: ...falling back to redirect_dir=nofollow. [ 140.181815][ T7006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.208070][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.238080][ T7209] overlayfs: ...falling back to index=off. [ 140.270048][ T7209] overlayfs: ...falling back to uuid=null. [ 140.337905][ T7222] loop1: detected capacity change from 0 to 64 [ 140.373716][ T7006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.657882][ T5830] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 140.702488][ T5830] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 140.885297][ T7006] hsr_slave_0: entered promiscuous mode [ 140.942825][ T7006] hsr_slave_1: entered promiscuous mode [ 140.989798][ T7006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.029834][ T7006] Cannot create hsr debugfs directory [ 141.170028][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.357201][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 141.384437][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.416178][ T8] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 141.430957][ T7225] loop4: detected capacity change from 0 to 40427 [ 141.464359][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.503859][ T8] usb 1-1: config 0 descriptor?? [ 141.537343][ T7225] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.722816][ T2912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.753140][ T7225] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.811005][ T7228] loop5: detected capacity change from 0 to 32768 [ 141.913471][ T7228] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.090350][ T7228] XFS (loop5): Ending clean mount [ 142.100072][ T7228] XFS (loop5): Quotacheck needed: Please wait. [ 142.150940][ T2912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.168198][ T5842] syz-executor: attempt to access beyond end of device [ 142.168198][ T5842] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.188997][ T8] aureal 0003:0755:2626.000D: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 142.202168][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.206500][ T7228] XFS (loop5): Quotacheck: Done. [ 142.280379][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.293543][ T5842] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 142.293598][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.331509][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.344518][ T5841] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.357180][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.370499][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.412283][ T5906] usb 1-1: USB disconnect, device number 4 [ 142.661599][ T2912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.003286][ T7268] loop1: detected capacity change from 0 to 1024 [ 143.071391][ T2912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.116117][ T7268] hfsplus: catalog searching failed [ 143.328919][ T7006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 143.412393][ T7006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 143.546500][ T7006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 143.707834][ T7006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 143.931283][ T2912] bridge_slave_1: left allmulticast mode [ 143.937008][ T2912] bridge_slave_1: left promiscuous mode [ 143.942966][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.047043][ T7273] loop0: detected capacity change from 0 to 32768 [ 144.059616][ T2912] bridge_slave_0: left allmulticast mode [ 144.065362][ T2912] bridge_slave_0: left promiscuous mode [ 144.072266][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.227053][ T7273] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.514548][ T7290] loop1: detected capacity change from 0 to 40427 [ 144.522504][ T7290] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 144.526003][ T5855] Bluetooth: hci1: command tx timeout [ 144.530318][ T7290] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.567998][ T7290] F2FS-fs (loop1): invalid crc value [ 144.747285][ T7290] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.789730][ T5855] Bluetooth: hci5: unexpected event for opcode 0x0c46 [ 144.873976][ T7290] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.883145][ T7273] XFS (loop0): Ending clean mount [ 144.897474][ T7290] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 144.918458][ T7273] XFS (loop0): Quotacheck needed: Please wait. [ 144.995093][ T29] audit: type=1800 audit(1733437764.394:28): pid=7290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.496" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 145.015202][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.047207][ T7273] XFS (loop0): Quotacheck: Done. [ 145.135441][ T5833] syz-executor: attempt to access beyond end of device [ 145.135441][ T5833] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.184513][ T5833] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 145.197642][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.482355][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.609720][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.675512][ T2912] bond0 (unregistering): Released all slaves [ 145.899570][ T7321] loop4: detected capacity change from 0 to 1024 [ 146.114665][ T7254] chnl_net:caif_netlink_parms(): no params data found [ 146.330384][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.415600][ T7331] loop4: detected capacity change from 0 to 512 [ 146.500685][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 146.564433][ T7331] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.508: attempt to clear invalid blocks 2 len 1 [ 146.586180][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 146.595659][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.604539][ T9] usb 2-1: Product: syz [ 146.608822][ T9] usb 2-1: Manufacturer: syz [ 146.619579][ T9] usb 2-1: SerialNumber: syz [ 146.620486][ T5855] Bluetooth: hci1: command tx timeout [ 146.642307][ T9] usb 2-1: config 0 descriptor?? [ 146.644553][ T7331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 146.706391][ T7331] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.508: invalid indirect mapped block 1819239214 (level 0) [ 146.757384][ T7316] loop0: detected capacity change from 0 to 32768 [ 146.759304][ T7331] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.508: invalid indirect mapped block 1819239214 (level 1) [ 146.790877][ T7316] XFS: ikeep mount option is deprecated. [ 146.804944][ T7331] EXT4-fs (loop4): 1 truncate cleaned up [ 146.821435][ T7331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.830669][ T7316] XFS: noikeep mount option is deprecated. [ 146.856541][ T7345] loop5: detected capacity change from 0 to 128 [ 146.887508][ T7316] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 146.911355][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.920556][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.928211][ T7254] bridge_slave_0: entered allmulticast mode [ 146.950436][ T7254] bridge_slave_0: entered promiscuous mode [ 146.985338][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.006037][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.052144][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.059439][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.068558][ T7345] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.080894][ T9] airspy 2-1:0.0: Board ID: 00 [ 147.085710][ T9] airspy 2-1:0.0: Firmware version: [ 147.101252][ T7345] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.129795][ T7316] XFS (loop0): Ending clean mount [ 147.155582][ T7316] XFS (loop0): Quotacheck needed: Please wait. [ 147.208493][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.215696][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.239700][ T7316] XFS (loop0): Quotacheck: Done. [ 147.262794][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.288812][ T5841] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.336693][ T9] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 147.367145][ T9] airspy 2-1:0.0: Registered as swradio24 [ 147.373275][ T9] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 147.391230][ T9] usb 2-1: USB disconnect, device number 6 [ 147.452623][ T2912] hsr_slave_0: left promiscuous mode [ 147.526936][ T5831] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 147.578408][ T2912] hsr_slave_1: left promiscuous mode [ 147.600716][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.607211][ T7361] loop5: detected capacity change from 0 to 64 [ 147.608450][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.657635][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.666040][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.827303][ T2912] veth1_macvtap: left promiscuous mode [ 147.839657][ T2912] veth0_macvtap: left promiscuous mode [ 147.861659][ T2912] veth1_vlan: left promiscuous mode [ 147.867410][ T2912] veth0_vlan: left promiscuous mode [ 148.076774][ T7370] loop5: detected capacity change from 0 to 1024 [ 148.298108][ T7375] loop1: detected capacity change from 0 to 2048 [ 148.440672][ T7375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.618204][ T35] hfsplus: b-tree write err: -5, ino 4 [ 148.691356][ T5855] Bluetooth: hci1: command tx timeout [ 148.953695][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.075012][ T7391] loop0: detected capacity change from 0 to 8192 [ 149.081377][ T7393] netlink: 'syz.5.525': attribute type 1 has an invalid length. [ 149.081972][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.278493][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.299608][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.319927][ T25] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 149.351062][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.435812][ T25] usb 5-1: config 0 descriptor?? [ 149.448546][ T7399] loop1: detected capacity change from 0 to 512 [ 149.489688][ T5836] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 149.512982][ T7399] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.552163][ T7399] EXT4-fs (loop1): 1 orphan inode deleted [ 149.558014][ T7399] EXT4-fs (loop1): 1 truncate cleaned up [ 149.565116][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.682460][ T5836] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.695658][ T5836] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.704853][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.709375][ T5836] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.727137][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.801514][ T7397] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 149.876716][ T25] saitek 0003:06A3:0621.000E: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 149.902335][ T5836] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.092186][ T9] usb 5-1: USB disconnect, device number 8 [ 150.107400][ T7407] loop0: detected capacity change from 0 to 2048 [ 150.280410][ T25] usb 6-1: USB disconnect, device number 6 [ 150.535201][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 150.636724][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 150.770133][ T5855] Bluetooth: hci1: command tx timeout [ 151.020955][ T5836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 151.190735][ T5836] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.219589][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.239028][ T5836] usb 5-1: Product: syz [ 151.246364][ T5836] usb 5-1: Manufacturer: syz [ 151.271984][ T5836] usb 5-1: SerialNumber: syz [ 151.304404][ T5836] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.322409][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.157109][ T29] audit: type=1326 audit(1733437771.544:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.181366][ T29] audit: type=1326 audit(1733437771.544:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.223978][ T29] audit: type=1326 audit(1733437771.544:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.263206][ T29] audit: type=1326 audit(1733437771.544:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.309146][ T29] audit: type=1326 audit(1733437771.544:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.357487][ T29] audit: type=1326 audit(1733437771.564:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.389950][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 152.403060][ T29] audit: type=1326 audit(1733437771.564:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.5.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 152.406311][ T25] ath9k_htc: Failed to initialize the device [ 152.433908][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.444777][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.473315][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 152.474618][ T7254] bridge_slave_1: entered allmulticast mode [ 152.496872][ T7254] bridge_slave_1: entered promiscuous mode [ 152.702775][ T5959] usb 5-1: USB disconnect, device number 9 [ 152.790227][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.827646][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.838249][ T7453] loop5: detected capacity change from 0 to 2048 [ 152.994560][ T7453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.004849][ T7254] team0: Port device team_slave_0 added [ 153.069976][ T7254] team0: Port device team_slave_1 added [ 153.089345][ T7458] loop1: detected capacity change from 0 to 2048 [ 153.090325][ T29] audit: type=1800 audit(1733437772.484:36): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.547" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 153.208807][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.246046][ T7466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.325817][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.333708][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.361972][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.431045][ T7469] loop0: detected capacity change from 0 to 64 [ 153.631437][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.638427][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.664395][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.671626][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.971758][ T7254] hsr_slave_0: entered promiscuous mode [ 153.991325][ T7254] hsr_slave_1: entered promiscuous mode [ 154.033555][ T7254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.049736][ T7254] Cannot create hsr debugfs directory [ 154.056119][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 154.078256][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.094814][ T7489] tipc: Enabling of bearer rejected, media not registered [ 154.827275][ T7497] loop4: detected capacity change from 0 to 32768 [ 154.904213][ T7254] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.986484][ T7497] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 155.003249][ T7254] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 155.027533][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.045643][ T7254] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 155.086095][ T7254] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 155.179836][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 155.204620][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.224520][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.234649][ T7497] XFS (loop4): Ending clean mount [ 155.267419][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.285360][ T7006] veth0_vlan: entered promiscuous mode [ 155.319922][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.329065][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.354527][ T7006] veth1_vlan: entered promiscuous mode [ 155.368500][ T9] usb 1-1: config 0 descriptor?? [ 155.453075][ T5842] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 155.504934][ T7006] veth0_macvtap: entered promiscuous mode [ 155.515486][ T7006] veth1_macvtap: entered promiscuous mode [ 155.583544][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.631970][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.661033][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.686525][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.732002][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.752023][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.789764][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.805471][ T9] microsoft 0003:045E:07DA.000F: item 0 4 0 11 parsing failed [ 155.829789][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.840367][ T9] microsoft 0003:045E:07DA.000F: parse failed [ 155.847814][ T9] microsoft 0003:045E:07DA.000F: probe with driver microsoft failed with error -22 [ 155.895130][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.989401][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.033481][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.044013][ T5836] usb 1-1: USB disconnect, device number 5 [ 156.063764][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.077945][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.090922][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.109631][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.123659][ T7554] usb usb5: usbfs: process 7554 (syz.4.571) did not claim interface 4 before use [ 156.139585][ T7006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.176211][ T7006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.235028][ T7006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.321859][ T7006] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.330874][ T7006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.339989][ T7006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.348827][ T7006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.446216][ T7254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.558318][ T7254] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.627798][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.635089][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.783651][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.791345][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.856771][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.897160][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.059666][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.070396][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.190145][ T7583] loop4: detected capacity change from 0 to 4096 [ 157.324255][ T7591] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.132023][ T7254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.166397][ T7622] loop1: detected capacity change from 0 to 1024 [ 158.173740][ T7622] EXT4-fs: Ignoring removed orlov option [ 158.179431][ T7622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.300533][ T7614] loop5: detected capacity change from 0 to 8192 [ 158.350291][ T7622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.407398][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.492748][ T5845] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.773249][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 158.875215][ T5845] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 158.887437][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.899251][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.909660][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 158.921302][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.932337][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 158.945962][ T5845] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 158.951773][ T7254] veth0_vlan: entered promiscuous mode [ 158.955288][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.978043][ T5845] usb 5-1: config 0 descriptor?? [ 159.059851][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 159.155362][ T7254] veth1_vlan: entered promiscuous mode [ 159.326722][ T7254] veth0_macvtap: entered promiscuous mode [ 159.337133][ T7254] veth1_macvtap: entered promiscuous mode [ 159.356753][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.367467][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.377433][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.388549][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.395819][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.398932][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.420590][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.420687][ T25] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=20.00 [ 159.431477][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.440936][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.450421][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.469161][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.479401][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.490274][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.501864][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.512685][ T25] usb 6-1: config 0 descriptor?? [ 159.550233][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.569344][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.580945][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.592680][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.602886][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.613625][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.627508][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.639583][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.649468][ T7254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.660197][ T7254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.671425][ T7254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.699379][ T7254] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.703233][ T5845] hid-u2fzero 0003:20A0:4287.0010: unknown main item tag 0x0 [ 159.739617][ T5845] hid-u2fzero 0003:20A0:4287.0010: unknown main item tag 0x0 [ 159.749379][ T7254] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.755401][ T5845] hid-u2fzero 0003:20A0:4287.0010: unknown main item tag 0x0 [ 159.765588][ T5845] hid-u2fzero 0003:20A0:4287.0010: unknown main item tag 0x0 [ 159.773111][ T5845] hid-u2fzero 0003:20A0:4287.0010: unknown main item tag 0x0 [ 159.782904][ T5845] hid-u2fzero 0003:20A0:4287.0010: hidraw0: USB HID vff.fd Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 159.797662][ T5845] hid-u2fzero 0003:20A0:4287.0010: NitroKey U2F LED initialised [ 159.805626][ T5845] hid-u2fzero 0003:20A0:4287.0010: NitroKey U2F RNG initialised [ 159.829721][ T7254] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.858613][ T7254] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.142458][ T5959] usb 5-1: USB disconnect, device number 10 [ 160.270054][ T25] cypress 0003:04B4:DE61.0011: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.5-1/input0 [ 160.330218][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.375607][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.509081][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.546098][ T9] usb 6-1: USB disconnect, device number 7 [ 160.574246][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.941578][ T5906] kernel write not supported for file /input/mice (pid: 5906 comm: kworker/1:4) [ 161.179164][ T7670] loop0: detected capacity change from 0 to 32768 [ 161.431394][ T7701] mkiss: ax0: crc mode is auto. [ 161.935822][ T7717] loop1: detected capacity change from 0 to 64 [ 162.109691][ T5845] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 162.111455][ T7723] loop5: detected capacity change from 0 to 256 [ 162.236298][ T7723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 162.325699][ T7689] loop4: detected capacity change from 0 to 32768 [ 162.442591][ T7734] nbd: must specify a size in bytes for the device [ 162.612616][ T7732] xt_CT: No such helper "pptp" [ 162.672300][ T7689] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 162.912165][ T7743] loop0: detected capacity change from 0 to 40427 [ 162.989614][ T5845] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 162.998050][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.041562][ T7750] netlink: 312 bytes leftover after parsing attributes in process `syz.5.633'. [ 163.051161][ T5845] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 163.060866][ T5845] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 163.068950][ T5845] usb 7-1: Manufacturer: syz [ 163.076526][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 163.090675][ T5845] usb 7-1: config 0 descriptor?? [ 163.096064][ T7743] F2FS-fs (loop0): invalid crc value [ 163.245611][ T5845] rc_core: IR keymap rc-hauppauge not found [ 163.252009][ T7743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.269451][ T5845] Registered IR keymap rc-empty [ 163.277494][ T5845] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 163.289095][ T5845] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 163.365748][ T7743] F2FS-fs (loop0): Start checkpoint disabled! [ 163.373657][ T7743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 163.732287][ T7771] loop1: detected capacity change from 0 to 128 [ 163.738808][ C0] igorplugusb 7-1:0.0: receive overflow invalid: 235 [ 163.740040][ T5831] syz-executor: attempt to access beyond end of device [ 163.740040][ T5831] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 163.773600][ T5831] syz-executor: attempt to access beyond end of device [ 163.773600][ T5831] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 163.819177][ T7771] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 163.966455][ T7771] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 164.033876][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.642'. [ 164.086020][ T25] usb 7-1: USB disconnect, device number 2 [ 164.109430][ T7771] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.640: Block bitmap for bg 0 marked uninitialized [ 164.158959][ T7763] loop5: detected capacity change from 0 to 40427 [ 164.247485][ T69] kworker/u8:4: attempt to access beyond end of device [ 164.247485][ T69] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 164.262089][ T69] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 164.269049][ T69] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 164.285925][ T5906] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 164.298131][ T7763] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 164.322940][ T7763] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 164.364673][ T7763] F2FS-fs (loop5): heap/no_heap options were deprecated [ 164.380316][ T5833] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.399241][ T7763] F2FS-fs (loop5): invalid crc value [ 164.534132][ T7789] loop1: detected capacity change from 0 to 4096 [ 164.565082][ T7763] F2FS-fs (loop5): Found nat_bits in checkpoint [ 164.566500][ T7789] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 164.675622][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.686942][ T7763] F2FS-fs (loop5): Start checkpoint disabled! [ 164.693855][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.709302][ T5906] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 164.713365][ T7789] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 164.720660][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.765901][ T7791] loop7: detected capacity change from 0 to 512 [ 164.810060][ T7763] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 164.851064][ T5906] usb 5-1: config 0 descriptor?? [ 164.866758][ T7763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 164.911376][ T7791] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.952979][ T7791] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.999008][ T7789] ntfs3(loop1): ino=1b, "file0" failed to parse mft record [ 165.014201][ T7789] ntfs3(loop1): ino=1b, "file0" attr_set_size [ 165.216386][ T5833] ntfs3(loop1): ino=1a, ntfs_sync_fs failed, -22. [ 165.240625][ T69] kworker/u8:4: attempt to access beyond end of device [ 165.240625][ T69] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 165.275072][ T7254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.318122][ T69] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 165.348272][ T69] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 165.371583][ T5906] aquacomputer_d5next 0003:0C70:F011.0012: unknown main item tag 0x0 [ 165.380079][ T5906] aquacomputer_d5next 0003:0C70:F011.0012: unknown main item tag 0x0 [ 165.393152][ T5906] aquacomputer_d5next 0003:0C70:F011.0012: unknown main item tag 0x0 [ 165.406878][ T5906] aquacomputer_d5next 0003:0C70:F011.0012: unknown main item tag 0x0 [ 165.417426][ T5906] aquacomputer_d5next 0003:0C70:F011.0012: unknown main item tag 0x0 [ 165.432058][ T5906] aquacomputer_d5next 0003:0C70:F011.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 165.502780][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.653'. [ 165.651785][ T7810] loop1: detected capacity change from 0 to 64 [ 165.784847][ T9] usb 5-1: USB disconnect, device number 11 [ 166.115553][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.512630][ T7817] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 166.560341][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.634334][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.731249][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.796876][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.818580][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.939962][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.949193][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.163474][ T7846] netlink: 'syz.4.665': attribute type 2 has an invalid length. [ 167.266657][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.539775][ T7855] program syz.5.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.805502][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.812080][ T7840] loop1: detected capacity change from 0 to 32768 [ 168.082049][ T5959] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 168.261010][ T5959] usb 8-1: Using ep0 maxpacket: 32 [ 168.274092][ T5959] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 168.299080][ T5959] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 168.349150][ T5959] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 168.425922][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.478677][ T12] bridge_slave_1: left allmulticast mode [ 168.491036][ T5959] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.499610][ T12] bridge_slave_1: left promiscuous mode [ 168.507416][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.549610][ T5959] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.610905][ T12] bridge_slave_0: left allmulticast mode [ 168.615034][ T5959] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 168.626920][ T12] bridge_slave_0: left promiscuous mode [ 168.646389][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.650327][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.678167][ T5959] usb 8-1: config 0 descriptor?? [ 168.799825][ T5836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 168.889459][ T7893] loop5: detected capacity change from 0 to 4096 [ 168.976536][ T5959] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 169.024034][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 169.046862][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.094549][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.121003][ T5836] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 169.160643][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.172807][ T5855] Bluetooth: hci2: command tx timeout [ 169.187380][ T5836] usb 7-1: config 0 descriptor?? [ 169.195771][ T8] usb 8-1: USB disconnect, device number 2 [ 169.221153][ T5906] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.221780][ T8] usblp0: removed [ 169.400905][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.436769][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.446955][ T5906] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 169.456147][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.486342][ T5906] usb 5-1: config 0 descriptor?? [ 169.825538][ T5836] magicmouse 0003:05AC:0265.0013: unknown main item tag 0x0 [ 169.833302][ T5836] magicmouse 0003:05AC:0265.0013: unknown main item tag 0x0 [ 169.841161][ T5836] magicmouse 0003:05AC:0265.0013: unknown main item tag 0x0 [ 169.848551][ T5836] magicmouse 0003:05AC:0265.0013: unknown main item tag 0x0 [ 169.856018][ T5836] magicmouse 0003:05AC:0265.0013: unknown main item tag 0x0 [ 169.865665][ T5836] magicmouse 0003:05AC:0265.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0 [ 169.883151][ T5836] usb 7-1: USB disconnect, device number 3 [ 169.921429][ T5906] cypress 0003:04B4:07B1.0014: unknown main item tag 0x6 [ 169.928547][ T5906] cypress 0003:04B4:07B1.0014: item fetching failed at offset 4/5 [ 169.957479][ T5906] cypress 0003:04B4:07B1.0014: parse failed [ 169.963585][ T5906] cypress 0003:04B4:07B1.0014: probe with driver cypress failed with error -22 [ 170.148715][ T5959] usb 5-1: USB disconnect, device number 12 [ 170.410714][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.481503][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.501994][ T12] bond0 (unregistering): Released all slaves [ 171.150323][ T7911] loop1: detected capacity change from 0 to 40427 [ 171.279985][ T7939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 171.319729][ T5855] Bluetooth: hci2: command tx timeout [ 171.479741][ T7911] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 171.487541][ T7911] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.521194][ T7911] F2FS-fs (loop1): invalid crc value [ 171.548807][ T7911] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 171.586995][ T7950] overlayfs: failed to resolve './file0/file0': -2 [ 171.639942][ T7911] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 171.822333][ T7954] loop4: detected capacity change from 0 to 2048 [ 171.875203][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 171.911455][ T7911] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.918966][ T7911] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.016420][ T7959] loop7: detected capacity change from 0 to 512 [ 172.181635][ T7937] loop6: detected capacity change from 0 to 32768 [ 172.279315][ T7959] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.704: corrupted in-inode xattr: invalid ea_ino [ 172.371558][ T7967] loop4: detected capacity change from 0 to 16 [ 172.439873][ T7967] erofs (device loop4): mounted with root inode @ nid 36. [ 172.472609][ T7959] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.704: couldn't read orphan inode 15 (err -117) [ 172.596263][ T7937] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 172.680871][ T7959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.699858][ T7937] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 172.707904][ T7962] loop5: detected capacity change from 0 to 32768 [ 172.770563][ T7962] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 172.809855][ T7937] bcachefs (loop6): Version upgrade required: [ 172.809855][ T7937] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 172.809855][ T7937] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 172.809855][ T7937] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 172.882167][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.967611][ T7937] bcachefs (loop6): dropping and reconstructing all alloc info [ 173.056695][ T7254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.120666][ T7937] bcachefs (loop6): check_topology... done [ 173.126620][ T7937] bcachefs (loop6): accounting_read... done [ 173.136949][ T7937] bcachefs (loop6): alloc_read... done [ 173.143047][ T7937] bcachefs (loop6): stripes_read... done [ 173.148881][ T7937] bcachefs (loop6): snapshots_read... done [ 173.156852][ T7937] bcachefs (loop6): check_allocations... [ 173.167463][ T5841] ocfs2: Unmounting device (7,5) on (node local) [ 173.218837][ T7937] done [ 173.300385][ T7937] bcachefs (loop6): going read-write [ 173.323138][ T7988] loop1: detected capacity change from 0 to 256 [ 173.349639][ T5855] Bluetooth: hci2: command tx timeout [ 173.374027][ T7937] bcachefs (loop6): done starting filesystem [ 173.381234][ T7992] loop4: detected capacity change from 0 to 16 [ 173.555199][ T7992] erofs (device loop4): mounted with root inode @ nid 36. [ 173.629832][ T7006] bcachefs (loop6): shutting down [ 173.655190][ T7006] bcachefs (loop6): going read-only [ 173.686321][ T7006] bcachefs (loop6): finished waiting for writes to stop [ 173.765213][ T8004] loop5: detected capacity change from 0 to 736 [ 173.835544][ T12] hsr_slave_0: left promiscuous mode [ 173.900122][ T7006] bcachefs (loop6): flushing journal and stopping allocators, journal seq 11 [ 173.917345][ T12] hsr_slave_1: left promiscuous mode [ 173.964610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.973948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.011542][ T7006] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 12 [ 174.022929][ T8004] Symlink component flag not implemented [ 174.040628][ T8006] loop1: detected capacity change from 0 to 16 [ 174.051555][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.059034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.066847][ T8004] Symlink component flag not implemented (122) [ 174.121225][ T8006] erofs (device loop1): mounted with root inode @ nid 36. [ 174.139680][ T7006] bcachefs (loop6): unshutdown complete, journal seq 13 [ 174.147881][ T7006] bcachefs (loop6): done going read-only, filesystem not clean [ 174.292316][ T12] veth1_macvtap: left promiscuous mode [ 174.298027][ T12] veth0_macvtap: left promiscuous mode [ 174.309723][ T12] veth1_vlan: left promiscuous mode [ 174.315073][ T12] veth0_vlan: left promiscuous mode [ 174.348210][ T7006] bcachefs (loop6): shutdown complete [ 175.275080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.337845][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.412462][ T5855] Bluetooth: hci2: command tx timeout [ 175.418801][ T8022] Falling back ldisc for ttyS3. [ 176.677478][ T8038] loop5: detected capacity change from 0 to 32768 [ 176.684310][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.693753][ T8038] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.734 (8038) [ 176.706672][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.714005][ T7826] bridge_slave_0: entered allmulticast mode [ 176.722365][ T7826] bridge_slave_0: entered promiscuous mode [ 176.747107][ T8038] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.765870][ T8038] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 176.784374][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.798899][ T8038] BTRFS info (device loop5): using free-space-tree [ 176.814787][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.850247][ T7826] bridge_slave_1: entered allmulticast mode [ 176.857576][ T7826] bridge_slave_1: entered promiscuous mode [ 177.240258][ T5841] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.285719][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.337944][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.515713][ T8040] loop6: detected capacity change from 0 to 32768 [ 177.640565][ T8076] loop1: detected capacity change from 0 to 8 [ 177.659802][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.5.740'. [ 177.802093][ T52] read_mapping_page failed! [ 177.821038][ T52] ERROR: (device loop6): txCommit: [ 177.821038][ T52] [ 177.825883][ T7826] team0: Port device team_slave_0 added [ 177.870557][ T8081] loop7: detected capacity change from 0 to 2048 [ 177.896073][ T52] ERROR: (device loop6): remounting filesystem as read-only [ 177.919409][ T7826] team0: Port device team_slave_1 added [ 177.925644][ T52] jfs_write_inode: jfs_commit_inode failed! [ 177.952278][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 178.013054][ T8081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.223194][ T8086] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.354982][ T7254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.813917][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.755'. [ 179.169655][ T8107] loop6: detected capacity change from 0 to 32768 [ 179.184381][ T8105] loop7: detected capacity change from 0 to 40427 [ 179.284680][ T8105] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 179.317337][ T8105] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 179.416960][ T8107] find_entry called with index >= next_index [ 179.447275][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.461306][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.506313][ T8121] loop4: detected capacity change from 0 to 1024 [ 179.545271][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.760'. [ 179.572110][ T8105] F2FS-fs (loop7): Found nat_bits in checkpoint [ 179.579825][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.760'. [ 179.607434][ T7826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.673858][ T8128] loop1: detected capacity change from 0 to 2048 [ 179.673901][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.755422][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.783352][ T35] hfsplus: b-tree write err: -5, ino 4 [ 179.785190][ T8105] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 179.793062][ T8128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.807812][ T8105] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 179.882225][ T7826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.912701][ T8128] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 179.961514][ T8105] syz.7.746: attempt to access beyond end of device [ 179.961514][ T8105] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 180.101885][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.202819][ T7254] syz-executor: attempt to access beyond end of device [ 180.202819][ T7254] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.218010][ T7254] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 180.344245][ T7826] hsr_slave_0: entered promiscuous mode [ 180.350474][ T8144] loop4: detected capacity change from 0 to 256 [ 180.401139][ T7826] hsr_slave_1: entered promiscuous mode [ 180.407470][ T7826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.488701][ T7826] Cannot create hsr debugfs directory [ 180.679981][ T8152] nbd: socks must be embedded in a SOCK_ITEM attr [ 180.724060][ T8155] loop5: detected capacity change from 0 to 128 [ 180.809799][ T8155] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 180.860157][ T8155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.430280][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 181.436960][ T8177] netlink: 'syz.6.777': attribute type 1 has an invalid length. [ 181.518014][ T7826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 181.573560][ T7826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 181.590081][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 181.639283][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.667143][ T8181] loop1: detected capacity change from 0 to 16 [ 181.680203][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.693015][ T7826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 181.717562][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.733218][ T5906] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 181.735322][ T8184] loop6: detected capacity change from 0 to 256 [ 181.743157][ T8181] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 181.776538][ T5906] usb 6-1: Product: syz [ 181.783503][ T7826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 181.808837][ T5906] usb 6-1: Manufacturer: syz [ 181.825083][ T5906] hub 6-1:4.0: USB hub found [ 181.924799][ T8184] FAT-fs (loop6): Directory bread(block 64) failed [ 181.954370][ T8184] FAT-fs (loop6): Directory bread(block 65) failed [ 182.003336][ T8184] FAT-fs (loop6): Directory bread(block 66) failed [ 182.034500][ T5906] hub 6-1:4.0: 2 ports detected [ 182.067283][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.079912][ T8184] FAT-fs (loop6): Directory bread(block 67) failed [ 182.117530][ T8184] FAT-fs (loop6): Directory bread(block 68) failed [ 182.138735][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.147185][ T8184] FAT-fs (loop6): Directory bread(block 69) failed [ 182.193159][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.200418][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.227733][ T8184] FAT-fs (loop6): Directory bread(block 70) failed [ 182.250887][ T8184] FAT-fs (loop6): Directory bread(block 71) failed [ 182.257644][ T8184] FAT-fs (loop6): Directory bread(block 72) failed [ 182.295309][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.302557][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.338632][ T8184] FAT-fs (loop6): Directory bread(block 73) failed [ 182.451926][ T5906] hub 6-1:4.0: set hub depth failed [ 182.491769][ T5906] usb 6-1: USB disconnect, device number 8 [ 182.670021][ T5907] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 182.810523][ T8206] loop1: detected capacity change from 0 to 128 [ 182.840901][ T5907] usb 8-1: Using ep0 maxpacket: 16 [ 182.859250][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.865585][ T8206] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 182.883324][ T5907] usb 8-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 182.883363][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.949102][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.984803][ T5907] usb 8-1: config 0 descriptor?? [ 183.275774][ T5833] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.328496][ T8219] loop5: detected capacity change from 0 to 1024 [ 183.463200][ T5907] input: HID 0458:5019 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5019.0015/input/input16 [ 183.493260][ T8224] loop4: detected capacity change from 0 to 2048 [ 183.508764][ T8229] loop1: detected capacity change from 0 to 256 [ 183.547844][ T8229] exfat: Deprecated parameter 'utf8' [ 183.568973][ T8224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.574940][ T8229] exfat: Deprecated parameter 'utf8' [ 183.615977][ T8229] exfat: Deprecated parameter 'utf8' [ 183.631056][ T5907] input: HID 0458:5019 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5019.0015/input/input17 [ 183.771492][ T8229] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 183.785140][ T5907] kye 0003:0458:5019.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.7-1/input0 [ 183.904410][ T5907] usb 8-1: USB disconnect, device number 3 [ 184.094487][ T7826] veth0_vlan: entered promiscuous mode [ 184.100648][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 184.110388][ T7826] veth1_vlan: entered promiscuous mode [ 184.144576][ T7826] veth0_macvtap: entered promiscuous mode [ 184.231923][ T7826] veth1_macvtap: entered promiscuous mode [ 184.286029][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.296968][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 184.304097][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.324623][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.389904][ T9] usb 6-1: config 0 descriptor?? [ 184.407717][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.422816][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.6.798'. [ 184.449949][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.472652][ T8251] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 184.498863][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.519843][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.530485][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.541819][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.575281][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.594804][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.614753][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.640045][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.657654][ T8256] loop6: detected capacity change from 0 to 2048 [ 184.664322][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.684579][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.712300][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.733094][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.743969][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.756845][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.769155][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.780833][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.792195][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.887239][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.971453][ T7826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.982612][ T7826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.026683][ T7826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.038421][ T8262] loop7: detected capacity change from 0 to 1024 [ 185.057231][ T7826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.082544][ T8262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.107012][ T9] ath6kl: Failed to read usb control message: -71 [ 185.115493][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 185.157520][ T9] ath6kl: unable to read target info byte count: -71 [ 185.189760][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.239321][ T9] ath6kl: Failed to init ath6kl core: -71 [ 185.246391][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 185.339770][ T9] usb 6-1: USB disconnect, device number 9 [ 185.389831][ T5906] usb 2-1: config 0 has an invalid interface number: 250 but max is 0 [ 185.399230][ T5906] usb 2-1: config 0 has no interface number 0 [ 185.419002][ T5906] usb 2-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 185.444811][ T5906] usb 2-1: config 0 interface 250 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 185.475497][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 185.506049][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.535502][ T5906] usb 2-1: config 0 descriptor?? [ 185.557801][ T8258] loop6: detected capacity change from 0 to 32768 [ 185.578032][ T8258] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.802 (8258) [ 185.613744][ T8258] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 185.638178][ T8258] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 185.675749][ T8258] BTRFS info (device loop6): using free-space-tree [ 185.700920][ T7254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.880288][ T5906] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 185.978587][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.035545][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.171275][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.179361][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.289999][ T5845] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 186.459853][ T5906] usb 2-1: device descriptor read/64, error -71 [ 186.660684][ T7006] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 186.739015][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.749980][ T5906] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 186.760124][ T5845] usb 8-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 186.771277][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.782312][ T5845] usb 8-1: config 0 descriptor?? [ 187.204019][ T5845] kye 0003:0458:500F.0016: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 187.258637][ T5845] kye 0003:0458:500F.0016: hidraw0: USB HID v0.09 Device [HID 0458:500f] on usb-dummy_hcd.7-1/input0 [ 187.269763][ T968] usb 2-1: USB disconnect, device number 7 [ 187.329975][ T5845] kye 0003:0458:500F.0016: tablet-enabling feature report not found [ 187.397220][ T5845] kye 0003:0458:500F.0016: tablet enabling failed [ 187.432262][ T8327] loop5: detected capacity change from 0 to 64 [ 187.475195][ T5845] usb 8-1: USB disconnect, device number 4 [ 187.611316][ T8332] loop6: detected capacity change from 0 to 256 [ 187.702867][ T8332] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 188.153494][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.821'. [ 188.403784][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.823'. [ 188.531037][ T8357] loop7: detected capacity change from 0 to 512 [ 188.531817][ T8357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.531847][ T8357] EXT4-fs: Ignoring removed bh option [ 188.678522][ T8361] loop6: detected capacity change from 0 to 1024 [ 188.941393][ T8325] loop8: detected capacity change from 0 to 32768 [ 188.948009][ T8357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.948166][ T8357] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.091676][ T8325] JBD2: Ignoring recovery information on journal [ 189.187910][ T8357] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #2: comm syz.7.826: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 189.269611][ T8357] EXT4-fs (loop7): Remounting filesystem read-only [ 189.320279][ T8325] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 189.391443][ T7254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.469890][ T5906] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 189.514444][ T7826] ocfs2: Unmounting device (7,8) on (node local) [ 189.519681][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 189.570052][ T5845] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.619961][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 189.633537][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.647422][ T8395] sp0: Synchronizing with TNC [ 189.678111][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.689603][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 189.705949][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.724680][ T5906] usb 7-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 189.730534][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 189.757162][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.769668][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.800263][ T5906] usb 7-1: config 0 descriptor?? [ 189.820142][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.839997][ T5845] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 189.862399][ T5845] usb 5-1: config 0 has no interface number 0 [ 189.889071][ T5845] usb 5-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 189.919679][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 189.929025][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.939566][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.948581][ T5845] usb 5-1: Product: syz [ 189.959584][ T5845] usb 5-1: Manufacturer: syz [ 189.978703][ T5845] usb 5-1: SerialNumber: syz [ 190.002047][ T9] usb 6-1: config 0 descriptor?? [ 190.020682][ T5845] usb 5-1: config 0 descriptor?? [ 190.062185][ T5845] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 190.248799][ T5906] waltop 0003:172F:0038.0017: item fetching failed at offset 5/8 [ 190.258646][ T5906] waltop 0003:172F:0038.0017: probe with driver waltop failed with error -22 [ 190.448207][ T9] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 190.459425][ T9] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 190.504505][ T9] microsoft 0003:045E:07DA.0018: no inputs found [ 190.540868][ T9] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 190.542917][ T5906] usb 7-1: USB disconnect, device number 4 [ 190.637950][ T5845] gspca_sunplus: reg_w_riv err -71 [ 190.643427][ T5845] sunplus 5-1:0.250: probe with driver sunplus failed with error -71 [ 190.676081][ T5845] usb 5-1: USB disconnect, device number 13 [ 190.712615][ T8409] loop1: detected capacity change from 0 to 4096 [ 190.766697][ T5907] usb 6-1: USB disconnect, device number 10 [ 190.885801][ T8402] loop8: detected capacity change from 0 to 32768 [ 190.909641][ T8409] ntfs3(loop1): Failed to load $BadClus (-22). [ 191.049639][ T29] audit: type=1800 audit(1733437810.444:37): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.837" name="file1" dev="loop8" ino=4 res=0 errno=0 [ 191.071694][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.719594][ T5845] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 191.860546][ T8445] loop7: detected capacity change from 0 to 256 [ 191.908595][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.908643][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.908674][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 191.908709][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 191.908739][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 191.908786][ T5845] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 191.908818][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.913792][ T5845] usb 5-1: config 0 descriptor?? [ 192.408087][ T5845] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 192.408128][ T5845] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 192.408156][ T5845] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 192.408186][ T5845] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 192.408213][ T5845] ntrig 0003:1B96:000A.0019: unknown main item tag 0x0 [ 192.418260][ T5845] ntrig 0003:1B96:000A.0019: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 192.470645][ T8451] loop1: detected capacity change from 0 to 1024 [ 192.613595][ T5845] usb 5-1: USB disconnect, device number 14 [ 192.817417][ T8434] loop5: detected capacity change from 0 to 32768 [ 192.944263][ T8465] loop8: detected capacity change from 0 to 256 [ 192.971006][ T8467] netlink: 'syz.6.859': attribute type 1 has an invalid length. [ 192.999331][ T8465] exfat: Deprecated parameter 'utf8' [ 193.189938][ T8465] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 193.279847][ T5845] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 193.459674][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 193.496535][ T8492] loop6: detected capacity change from 0 to 64 [ 193.632429][ T5845] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.684198][ T5845] usb 8-1: config 0 has no interface number 0 [ 193.745841][ T5845] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.778050][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.807152][ T5845] usb 8-1: Product: syz [ 193.819756][ T5845] usb 8-1: Manufacturer: syz [ 193.824451][ T5845] usb 8-1: SerialNumber: syz [ 193.866007][ T5845] usb 8-1: config 0 descriptor?? [ 193.875346][ T8497] loop8: detected capacity change from 0 to 512 [ 193.917382][ T5845] smsc95xx v2.0.0 [ 193.939088][ T5845] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 193.990459][ T5845] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 194.058960][ T8502] loop4: detected capacity change from 0 to 256 [ 194.137965][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.147565][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.168958][ T8502] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 194.256839][ T8497] EXT4-fs: Conflicting test_dummy_encryption options [ 194.318083][ T5845] usb 8-1: USB disconnect, device number 5 [ 194.622361][ T8520] loop5: detected capacity change from 0 to 512 [ 194.696035][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 194.895550][ T8507] loop1: detected capacity change from 0 to 32768 [ 195.061252][ T8520] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #17: comm syz.5.873: iget: bogus i_mode (0) [ 195.074099][ T8535] loop4: detected capacity change from 0 to 64 [ 195.082760][ T8532] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 195.195783][ T8520] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.873: couldn't read orphan inode 17 (err -117) [ 195.275834][ T8520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.635541][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.659897][ T8551] qrtr: Invalid version 0 [ 195.923609][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.888'. [ 195.947238][ T8558] loop4: detected capacity change from 0 to 2048 [ 195.987498][ T8562] loop1: detected capacity change from 0 to 8 [ 196.044632][ T8558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.175307][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.890'. [ 196.230048][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.890'. [ 196.256830][ T8569] netlink: 'syz.7.890': attribute type 6 has an invalid length. [ 196.299726][ T8572] ubi0: attaching mtd0 [ 196.306521][ T8572] ubi0: scanning is finished [ 196.340775][ T8572] ubi0: empty MTD device detected [ 196.865609][ T8572] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 196.911764][ T8572] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3008 bytes [ 196.941854][ T8572] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 196.949083][ T8572] ubi0: VID header offset: 1024 (aligned 1024), data offset: 1088 [ 196.992726][ T5845] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.994504][ T8572] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 197.057580][ T8572] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 17 [ 197.088034][ T8572] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3293601664 [ 197.153852][ T8572] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 197.198944][ T8590] ubi0: background thread "ubi_bgt0d" started, PID 8590 [ 197.199986][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 197.266522][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.298433][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.364831][ T5845] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 197.417246][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.441575][ T5845] usb 2-1: config 0 descriptor?? [ 197.583340][ T8605] dccp_invalid_packet: pskb_may_pull failed [ 197.711954][ T8567] loop8: detected capacity change from 0 to 32768 [ 197.801996][ T8578] loop5: detected capacity change from 0 to 32768 [ 197.809317][ T8567] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 197.870405][ T8616] loop7: detected capacity change from 0 to 512 [ 197.882285][ T8578] XFS: ikeep mount option is deprecated. [ 197.919606][ T8578] XFS: noikeep mount option is deprecated. [ 198.041211][ T8616] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.905: casefold flag without casefold feature [ 198.066395][ T5845] smartjoyplus 0003:6666:8804.001A: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0 [ 198.078216][ T5845] smartjoyplus 0003:6666:8804.001A: no output reports found [ 198.097930][ T8616] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.905: couldn't read orphan inode 15 (err -117) [ 198.144142][ T8567] XFS (loop8): Ending clean mount [ 198.158178][ T8578] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.159918][ T8616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.222671][ T8567] XFS (loop8): Quotacheck needed: Please wait. [ 198.228706][ T8616] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #2: comm syz.7.905: invalid size [ 198.247940][ T5907] usb 2-1: USB disconnect, device number 8 [ 198.297203][ T8589] loop4: detected capacity change from 0 to 40427 [ 198.319725][ T8578] XFS (loop5): Ending clean mount [ 198.331840][ T8589] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff [ 198.356986][ T8578] XFS (loop5): Quotacheck needed: Please wait. [ 198.389872][ T968] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 198.404078][ T7254] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.406441][ T8589] F2FS-fs (loop4): invalid crc value [ 198.457353][ T8567] XFS (loop8): Quotacheck: Done. [ 198.458630][ T8589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.542750][ T7826] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.547314][ T8578] XFS (loop5): Quotacheck: Done. [ 198.659137][ T8589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.723706][ T5841] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.772648][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.839666][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 198.882120][ T968] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 198.933563][ T968] usb 7-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 198.994830][ T29] audit: type=1800 audit(1733437818.354:38): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.899" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 199.029917][ T968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.041047][ T8589] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x1244/0x4fa0 [ 199.077788][ T968] usb 7-1: config 0 descriptor?? [ 199.108026][ T8629] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 199.120328][ T8589] syz.4.899: attempt to access beyond end of device [ 199.120328][ T8589] loop4: rw=34817, sector=77824, nr_sectors = 976 limit=40427 [ 199.213219][ T8647] loop1: detected capacity change from 0 to 128 [ 199.430119][ T8647] affs: No valid root block on device loop1 [ 199.461509][ T5842] syz-executor: attempt to access beyond end of device [ 199.461509][ T5842] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.476647][ T5842] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 199.566281][ T968] aureal 0003:0755:2626.001B: unknown main item tag 0x6 [ 199.579580][ T968] aureal 0003:0755:2626.001B: report_id 29495 is invalid [ 199.587338][ T968] aureal 0003:0755:2626.001B: item 0 2 1 8 parsing failed [ 199.660151][ T968] aureal 0003:0755:2626.001B: probe with driver aureal failed with error -22 [ 199.745113][ T8660] Invalid logical block size (3) [ 199.768905][ T5845] usb 7-1: USB disconnect, device number 5 [ 199.863822][ T8664] loop5: detected capacity change from 0 to 1764 [ 200.627186][ T8680] netlink: 'syz.8.920': attribute type 29 has an invalid length. [ 200.643993][ T8647] loop1: detected capacity change from 0 to 32768 [ 200.683077][ T8647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.910 (8647) [ 200.697600][ T8680] netlink: 'syz.8.920': attribute type 29 has an invalid length. [ 200.739585][ T8647] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.750058][ T8647] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 200.758616][ T8647] BTRFS info (device loop1): using free-space-tree [ 200.838778][ T8685] loop4: detected capacity change from 0 to 64 [ 200.876294][ T8689] loop7: detected capacity change from 0 to 128 [ 200.983110][ T8689] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.037324][ T8689] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.103000][ T8706] netlink: 64 bytes leftover after parsing attributes in process `syz.8.922'. [ 201.520436][ T8710] loop5: detected capacity change from 0 to 32768 [ 201.529217][ T8710] BTRFS: device /dev/loop5 (7:5) using temp-fsid 954c3aa3-f25b-4cc5-a3da-2c7e94d7ddcb [ 201.540245][ T8710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.927 (8710) [ 201.583142][ T7254] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.597466][ T8710] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.608444][ T8710] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 201.618460][ T8710] BTRFS info (device loop5): using free-space-tree [ 201.647223][ T8647] BTRFS info (device loop1): device stats zeroed by syz.1.910 (8647) [ 201.739993][ T8720] netlink: 72 bytes leftover after parsing attributes in process `syz.4.925'. [ 201.776968][ T5833] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.884192][ T8731] loop6: detected capacity change from 0 to 256 [ 201.970861][ T8731] FAT-fs (loop6): Directory bread(block 64) failed [ 202.014954][ T8731] FAT-fs (loop6): Directory bread(block 65) failed [ 202.022948][ T29] audit: type=1326 audit(1733437821.434:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.8.931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3680b7ff19 code=0x0 [ 202.058487][ T8731] FAT-fs (loop6): Directory bread(block 66) failed [ 202.065397][ T8731] FAT-fs (loop6): Directory bread(block 67) failed [ 202.093442][ T8731] FAT-fs (loop6): Directory bread(block 68) failed [ 202.100826][ T8731] FAT-fs (loop6): Directory bread(block 69) failed [ 202.108001][ T8731] FAT-fs (loop6): Directory bread(block 70) failed [ 202.115376][ T8731] FAT-fs (loop6): Directory bread(block 71) failed [ 202.122430][ T8731] FAT-fs (loop6): Directory bread(block 72) failed [ 202.137138][ T8731] FAT-fs (loop6): Directory bread(block 73) failed [ 202.484323][ T8751] loop4: detected capacity change from 0 to 512 [ 202.668030][ T8751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 202.680329][ T8751] System zones: 0-2, 18-18, 34-34 [ 202.728056][ T8751] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.935: bg 0: block 248: padding at end of block bitmap is not set [ 202.897184][ T8764] loop6: detected capacity change from 0 to 2048 [ 203.015756][ T8751] Quota error (device loop4): write_blk: dquota write failed [ 203.023939][ T8751] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 203.036240][ T8751] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.935: Failed to acquire dquot type 1 [ 203.060842][ T8751] EXT4-fs (loop4): 1 truncate cleaned up [ 203.068279][ T8751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.081693][ T8751] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.223975][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.242074][ T8764] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 203.250041][ T8764] UDF-fs: Scanning with blocksize 512 failed [ 203.284218][ T8764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.410074][ T8784] loop7: detected capacity change from 0 to 256 [ 203.497532][ T8784] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 203.534396][ T5841] BTRFS info (device loop5): last unmount of filesystem 954c3aa3-f25b-4cc5-a3da-2c7e94d7ddcb [ 204.414866][ T8809] loop4: detected capacity change from 0 to 4096 [ 204.469635][ T8809] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 204.572322][ T8812] devtmpfs: Unknown parameter 'posixacl' [ 204.924815][ T8825] loop8: detected capacity change from 0 to 256 [ 204.959933][ T8825] exfat: Deprecated parameter 'namecase' [ 204.965898][ T8825] exfat: Deprecated parameter 'namecase' [ 205.078647][ T8830] Bluetooth: MGMT ver 1.23 [ 205.169199][ T8825] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 205.529934][ C1] vkms_vblank_simulate: vblank timer overrun [ 205.619758][ T8848] sp0: Synchronizing with TNC [ 206.026378][ T8862] loop5: detected capacity change from 0 to 512 [ 206.039384][ T8865] loop8: detected capacity change from 0 to 256 [ 206.098298][ T8862] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 206.157896][ T8865] FAT-fs (loop8): Directory bread(block 64) failed [ 206.168145][ T8862] EXT4-fs (loop5): invalid journal inode [ 206.189669][ T8865] FAT-fs (loop8): Directory bread(block 65) failed [ 206.197841][ T8865] FAT-fs (loop8): Directory bread(block 66) failed [ 206.249883][ T8862] EXT4-fs (loop5): can't get journal size [ 206.278877][ T8875] loop6: detected capacity change from 0 to 1024 [ 206.279767][ T8865] FAT-fs (loop8): Directory bread(block 67) failed [ 206.332861][ T8875] hfsplus: bad catalog entry type [ 206.341739][ T8865] FAT-fs (loop8): Directory bread(block 68) failed [ 206.348466][ T8865] FAT-fs (loop8): Directory bread(block 69) failed [ 206.430908][ T8865] FAT-fs (loop8): Directory bread(block 70) failed [ 206.444583][ T8862] EXT4-fs (loop5): 1 truncate cleaned up [ 206.499852][ T8865] FAT-fs (loop8): Directory bread(block 71) failed [ 206.507426][ T8865] FAT-fs (loop8): Directory bread(block 72) failed [ 206.514239][ T8865] FAT-fs (loop8): Directory bread(block 73) failed [ 206.522467][ T8862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.549938][ T52] hfsplus: b-tree write err: -5, ino 4 [ 206.617204][ T8880] loop4: detected capacity change from 0 to 128 [ 206.789910][ T8880] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.800685][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.848621][ T8880] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.976275][ T8880] EXT4-fs (loop4): resizing filesystem from 64 to 2 blocks [ 206.984933][ T8880] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 207.409964][ T5844] Bluetooth: hci2: command 0x0405 tx timeout [ 207.478319][ T5842] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.550709][ T8868] loop7: detected capacity change from 0 to 32768 [ 207.579840][ T8868] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.967 (8868) [ 207.691617][ T8890] loop8: detected capacity change from 0 to 32768 [ 207.706504][ T8868] BTRFS info (device loop7): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 207.784408][ T8890] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.976 (8890) [ 207.819727][ T8868] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 207.828671][ T8868] BTRFS info (device loop7): using free-space-tree [ 207.855896][ T29] audit: type=1326 audit(1733437827.254:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 207.958900][ T29] audit: type=1326 audit(1733437827.254:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.039464][ T8890] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.126180][ T8890] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 208.178749][ T29] audit: type=1326 audit(1733437827.254:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.256083][ T8925] loop5: detected capacity change from 0 to 2048 [ 208.259825][ T8890] BTRFS info (device loop8): using free-space-tree [ 208.283405][ T8933] loop4: detected capacity change from 0 to 1024 [ 208.350629][ T8933] EXT4-fs: Ignoring removed nobh option [ 208.382460][ T8939] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.420607][ T8933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.441857][ T29] audit: type=1326 audit(1733437827.254:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.475900][ T29] audit: type=1326 audit(1733437827.254:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.498142][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.506860][ T29] audit: type=1326 audit(1733437827.254:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.529018][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.536593][ T29] audit: type=1326 audit(1733437827.254:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.558914][ T8933] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.559447][ T29] audit: type=1326 audit(1733437827.254:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1fc17ff19 code=0x7ffc0000 [ 208.735393][ T8933] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.988: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 208.831678][ T8890] BTRFS info (device loop8): rebuilding free space tree [ 208.850126][ T8933] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.988: couldn't read orphan inode 11 (err -117) [ 208.935024][ T8905] loop6: detected capacity change from 0 to 32768 [ 208.946152][ T8933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.974451][ T8905] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.983 (8905) [ 209.060273][ T8905] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 209.099807][ T8905] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 209.129837][ T8905] BTRFS info (device loop6): using free-space-tree [ 209.203126][ T8933] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.988: Invalid block bitmap block 0 in block_group 0 [ 209.219628][ T29] audit: type=1800 audit(1733437828.564:48): pid=8974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.992" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 209.289772][ T8933] Quota error (device loop4): write_blk: dquota write failed [ 209.359151][ T8933] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.988: Failed to acquire dquot type 0 [ 209.364883][ T7254] BTRFS info (device loop7): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 209.408732][ T7826] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 209.899978][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 0 [ 209.971795][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.189276][ T7006] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 210.601029][ T9011] loop7: detected capacity change from 0 to 32768 [ 210.762767][ T9026] netlink: 'syz.5.1003': attribute type 12 has an invalid length. [ 210.787957][ T9026] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1003'. [ 211.271751][ T9011] XFS (loop7): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 211.359704][ T5907] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 211.468373][ T9051] loop5: detected capacity change from 0 to 2048 [ 211.537026][ T5907] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 211.547318][ T5850] udevd[5850]: incorrect nilfs2 checksum on /dev/loop5 [ 211.551130][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 211.557911][ T9011] XFS (loop7): Ending clean mount [ 211.564690][ T9051] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 211.622861][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.670873][ T9055] netlink: 260 bytes leftover after parsing attributes in process `syz.8.1011'. [ 211.693922][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 211.726378][ T9057] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.767955][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 211.828534][ T5907] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 211.869617][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 211.899895][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 211.940733][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 211.993173][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 212.008943][ T5907] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 212.016983][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 212.037609][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.056002][ T7254] XFS (loop7): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 212.105596][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 212.140905][ T5907] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 212.173531][ T5907] usb 5-1: string descriptor 0 read error: -22 [ 212.180569][ T5907] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.252120][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.268826][ T5907] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.457445][ T9068] loop6: detected capacity change from 0 to 512 [ 212.490869][ T9069] netlink: 168592 bytes leftover after parsing attributes in process `syz.5.1015'. [ 212.519870][ T5907] usb 5-1: USB disconnect, device number 15 [ 212.542415][ T9069] netlink: zone id is out of range [ 212.604188][ T9069] netlink: zone id is out of range [ 212.610108][ T9068] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.999: invalid block [ 212.667438][ T9069] netlink: zone id is out of range [ 212.709604][ T9068] EXT4-fs (loop6): Remounting filesystem read-only [ 212.716442][ T9069] netlink: zone id is out of range [ 212.746690][ T9069] netlink: zone id is out of range [ 212.760461][ T9068] EXT4-fs (loop6): 2 truncates cleaned up [ 212.766498][ T9069] netlink: zone id is out of range [ 212.767874][ T9056] loop1: detected capacity change from 0 to 32768 [ 212.783099][ T9068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.795998][ T9069] netlink: zone id is out of range [ 212.819057][ T9069] netlink: zone id is out of range [ 212.847639][ T9069] netlink: zone id is out of range [ 212.860541][ T9069] netlink: zone id is out of range [ 212.900420][ T9056] XFS: ikeep mount option is deprecated. [ 213.182519][ T9093] loop8: detected capacity change from 0 to 2048 [ 213.303191][ T7006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.394141][ T9093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.409903][ T9056] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.482389][ T9093] process 'syz.8.1022' launched './file2' with NULL argv: empty string added [ 213.738690][ T9114] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1026'. [ 213.761662][ T9118] loop5: detected capacity change from 0 to 64 [ 214.103487][ T7826] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.156485][ T9056] XFS (loop1): Ending clean mount [ 214.174886][ T9056] XFS (loop1): Quotacheck needed: Please wait. [ 214.398695][ T9136] loop7: detected capacity change from 0 to 256 [ 214.432002][ T9136] exfat: Deprecated parameter 'namecase' [ 214.444722][ T9056] XFS (loop1): Quotacheck: Done. [ 214.762169][ T9145] loop4: detected capacity change from 0 to 2048 [ 214.858211][ T9136] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7748ec01, utbl_chksum : 0xe619d30d) [ 214.882249][ T5847] udevd[5847]: incorrect nilfs2 checksum on /dev/loop4 [ 214.903086][ T9145] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.948584][ T5833] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.025660][ T9157] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.072494][ T9150] loop5: detected capacity change from 0 to 32768 [ 216.080147][ T9150] XFS: attr2 mount option is deprecated. [ 216.085853][ T9150] XFS: ikeep mount option is deprecated. [ 216.091846][ T9150] XFS: noikeep mount option is deprecated. [ 216.319752][ T9205] loop8: detected capacity change from 0 to 128 [ 216.503990][ T9150] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 216.578450][ T9213] loop4: detected capacity change from 0 to 256 [ 216.598808][ T9213] exfat: Deprecated parameter 'utf8' [ 216.604450][ T9213] exfat: Deprecated parameter 'utf8' [ 216.650251][ T9150] XFS (loop5): Ending clean mount [ 216.663697][ T9213] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 216.687368][ T9150] XFS (loop5): Quotacheck needed: Please wait. [ 216.698452][ T9219] loop7: detected capacity change from 0 to 4096 [ 216.713572][ T9219] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 216.724930][ T9219] ntfs3(loop7): It is recommened to use chkdsk. [ 216.800451][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 216.802440][ T9219] ntfs3(loop7): ino=1b, "file0" directory corrupted [ 216.948702][ T9150] XFS (loop5): Quotacheck: Done. [ 216.991301][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.002622][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 217.037646][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.109159][ T9] usb 7-1: config 0 descriptor?? [ 217.324700][ T5841] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 217.328617][ T9233] loop7: detected capacity change from 0 to 8 [ 217.707290][ T9227] loop8: detected capacity change from 0 to 32768 [ 217.724524][ T9] kye 0003:0458:5017.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 217.818487][ T9] kye 0003:0458:5017.001C: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.6-1/input0 [ 217.833547][ T9227] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1056 (9227) [ 217.861405][ T9] kye 0003:0458:5017.001C: tablet-enabling feature report not found [ 217.879945][ T9] kye 0003:0458:5017.001C: tablet enabling failed [ 217.937827][ T9227] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.977931][ T9227] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 218.004406][ T5836] usb 7-1: USB disconnect, device number 6 [ 218.012874][ T9227] BTRFS info (device loop8): using free-space-tree [ 218.381481][ T9248] loop7: detected capacity change from 0 to 32768 [ 219.268946][ T9284] loop1: detected capacity change from 0 to 128 [ 219.551887][ T9284] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 219.701082][ T5833] sysv_free_block: trying to free block not in datazone [ 219.758615][ T5833] sysv_free_block: trying to free block not in datazone [ 219.827220][ T5833] sysv_free_block: getblk() failed [ 219.864357][ T5833] sysv_free_block: getblk() failed [ 219.879872][ T5833] sysv_free_block: getblk() failed [ 219.885221][ T5833] sysv_free_block: getblk() failed [ 219.913957][ T5833] sysv_free_block: getblk() failed [ 219.919273][ T5833] sysv_free_block: getblk() failed [ 219.955828][ T5833] sysv_free_block: getblk() failed [ 219.979625][ T5833] sysv_free_block: getblk() failed [ 219.984866][ T5833] sysv_free_block: getblk() failed [ 220.010580][ T5833] sysv_free_block: getblk() failed [ 220.015991][ T5833] sysv_free_block: getblk() failed [ 220.031672][ T5833] sysv_free_block: getblk() failed [ 220.036963][ T5833] sysv_free_block: getblk() failed [ 220.059728][ T5833] sysv_free_block: getblk() failed [ 220.065053][ T5833] sysv_free_block: getblk() failed [ 220.079654][ T5833] sysv_free_block: getblk() failed [ 220.089626][ T5833] sysv_free_block: getblk() failed [ 220.099609][ T5833] sysv_free_block: getblk() failed [ 220.104958][ T5833] sysv_free_block: getblk() failed [ 220.119628][ T5833] sysv_free_block: getblk() failed [ 220.129646][ T5833] sysv_free_block: getblk() failed [ 220.134832][ T5833] sysv_free_block: getblk() failed [ 220.152593][ T5833] sysv_free_block: getblk() failed [ 220.159034][ T5833] sysv_free_block: getblk() failed [ 220.174425][ T5833] sysv_free_block: getblk() failed [ 220.184506][ T5833] sysv_free_block: getblk() failed [ 220.196858][ T5833] sysv_free_block: getblk() failed [ 220.206614][ T5833] sysv_free_block: getblk() failed [ 220.218762][ T5833] sysv_free_block: getblk() failed [ 220.228510][ T5833] sysv_free_block: getblk() failed [ 220.241235][ T5833] sysv_free_block: getblk() failed [ 220.246454][ T5833] sysv_free_block: getblk() failed [ 220.263494][ T5833] sysv_free_block: getblk() failed [ 220.268699][ T5833] sysv_free_block: getblk() failed [ 220.285485][ T5833] sysv_free_block: getblk() failed [ 220.295634][ T5833] sysv_free_block: getblk() failed [ 220.307803][ T5833] sysv_free_block: getblk() failed [ 220.317786][ T5833] sysv_free_block: getblk() failed [ 220.327606][ T5833] sysv_free_block: trying to free block not in datazone [ 220.343574][ T5833] sysv_free_block: trying to free block not in datazone [ 220.363026][ T5833] sysv_free_block: trying to free block not in datazone [ 220.379557][ T5833] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 220.603640][ T7826] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.435103][ T9358] loop5: detected capacity change from 0 to 256 [ 221.626661][ T9358] FAT-fs (loop5): Directory bread(block 1285) failed [ 221.999627][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 222.193644][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.212531][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.267472][ T25] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 222.299729][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.361593][ T25] usb 9-1: config 0 descriptor?? [ 222.521198][ T9357] loop6: detected capacity change from 0 to 32768 [ 222.767245][ T9357] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 222.953355][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 222.961546][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 222.968977][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 222.976453][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 222.983990][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 222.991991][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 223.000171][ T25] steelseries 0003:1038:12B6.001D: unknown main item tag 0x0 [ 223.016205][ T25] steelseries 0003:1038:12B6.001D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.8-1/input0 [ 223.035989][ T9411] loop1: detected capacity change from 0 to 1024 [ 223.207118][ T25] steelseries 0003:1038:12B6.001D: hid_hw_raw_request() failed with -71 [ 223.283181][ T25] usb 9-1: USB disconnect, device number 2 [ 223.387443][ T2966] hfsplus: b-tree write err: -5, ino 4 [ 223.553297][ T7006] ocfs2: Unmounting device (7,6) on (node local) [ 224.253780][ T9412] loop5: detected capacity change from 0 to 32768 [ 224.325702][ T9412] JBD2: Ignoring recovery information on journal [ 224.505096][ T9412] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 224.720541][ T5841] ocfs2: Unmounting device (7,5) on (node local) [ 224.838197][ T9431] loop7: detected capacity change from 0 to 32768 [ 225.072224][ T9438] loop6: detected capacity change from 0 to 32768 [ 225.090760][ T9438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1116 (9438) [ 225.154109][ T9468] loop1: detected capacity change from 0 to 512 [ 225.166412][ T9431] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.198732][ T9438] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 225.219953][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.244756][ T9468] EXT4-fs: Ignoring removed orlov option [ 225.284686][ T9438] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 225.347766][ T9468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.376428][ T9438] BTRFS info (device loop6): using free-space-tree [ 225.389675][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 225.410715][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.423084][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.435913][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.439096][ T9431] XFS (loop7): Ending clean mount [ 225.459895][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 225.468969][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.488671][ T9468] EXT4-fs (loop1): orphan cleanup on readonly fs [ 225.493286][ T25] usb 5-1: config 0 descriptor?? [ 225.507797][ T9457] loop8: detected capacity change from 0 to 40427 [ 225.584100][ T9468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1130: bg 0: block 248: padding at end of block bitmap is not set [ 225.593807][ T9481] loop5: detected capacity change from 0 to 256 [ 225.612073][ T9468] __quota_error: 2 callbacks suppressed [ 225.612136][ T9468] Quota error (device loop1): write_blk: dquota write failed [ 225.650203][ T9431] XFS (loop7): Quotacheck needed: Please wait. [ 225.727988][ T9468] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 225.744071][ T9468] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1130: Failed to acquire dquot type 1 [ 225.776013][ T9468] EXT4-fs (loop1): 1 truncate cleaned up [ 225.806233][ T9457] F2FS-fs (loop8): Found nat_bits in checkpoint [ 225.856160][ T9468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.928548][ T25] hid-picolcd 0003:04D8:C002.001E: item fetching failed at offset 5/7 [ 225.939708][ T25] hid-picolcd 0003:04D8:C002.001E: device report parse failed [ 225.947577][ T25] hid-picolcd 0003:04D8:C002.001E: probe with driver hid-picolcd failed with error -22 [ 226.054522][ T9438] BTRFS info (device loop6): rebuilding free space tree [ 226.092626][ T9468] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 226.099343][ T9431] XFS (loop7): Quotacheck: Done. [ 226.102613][ T9457] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 226.188016][ T9] usb 5-1: USB disconnect, device number 16 [ 226.208840][ T9468] EXT4-fs error (device loop1): __ext4_remount:6749: comm syz.1.1130: Abort forced by user [ 226.279769][ T9468] EXT4-fs (loop1): Remounting filesystem read-only [ 226.279800][ T9468] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 226.279874][ T9468] ext4 filesystem being remounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.282501][ T9468] EXT4-fs: Ignoring removed orlov option [ 226.282652][ T9468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.310825][ T9468] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 226.437211][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.463866][ T7006] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.517016][ T7826] syz-executor: attempt to access beyond end of device [ 226.517016][ T7826] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.517503][ T7826] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 226.522154][ T7254] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.720888][ T9516] loop1: detected capacity change from 0 to 64 [ 227.578522][ T9533] loop4: detected capacity change from 0 to 2048 [ 227.735958][ T9533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.220980][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.313785][ T9562] loop7: detected capacity change from 0 to 164 [ 228.799391][ T29] audit: type=1326 audit(1733437848.194:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 228.822016][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.961365][ T29] audit: type=1326 audit(1733437848.194:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 229.106037][ T29] audit: type=1326 audit(1733437848.214:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 229.149849][ T5836] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 229.159134][ T9592] net_ratelimit: 25 callbacks suppressed [ 229.159155][ T9592] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 229.210373][ T5906] IPVS: starting estimator thread 0... [ 229.268522][ T29] audit: type=1326 audit(1733437848.214:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 229.290887][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.409768][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 229.451113][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.490138][ T29] audit: type=1326 audit(1733437848.224:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 229.503661][ T9600] loop1: detected capacity change from 0 to 32768 [ 229.514282][ T9593] IPVS: using max 21 ests per chain, 50400 per kthread [ 229.528528][ T9600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1164 (9600) [ 229.569874][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.609803][ T5836] usb 8-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 229.629555][ T9600] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.637051][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.648030][ T29] audit: type=1326 audit(1733437848.224:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9cd7ff19 code=0x7ffc0000 [ 229.687516][ T5836] usb 8-1: config 0 descriptor?? [ 229.689791][ T9600] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 229.784648][ T9600] BTRFS info (device loop1): using free-space-tree [ 230.183835][ T5836] wacom 0003:056A:0323.001F: unknown main item tag 0x0 [ 230.192989][ T5836] wacom 0003:056A:0323.001F: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 230.255753][ T5836] wacom 0003:056A:0323.001F: hidraw0: USB HID v0.00 Device [HID 056a:0323] on usb-dummy_hcd.7-1/input0 [ 230.269360][ T5836] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0323.001F/input/input19 [ 230.448457][ T5833] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.621902][ T9] usb 8-1: USB disconnect, device number 6 [ 230.790286][ T9657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.798239][ T9657] IPv6: NLM_F_CREATE should be set when creating new route [ 230.805786][ T9657] IPv6: NLM_F_CREATE should be set when creating new route [ 230.848405][ T5836] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 230.923853][ T9666] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 230.951984][ T9664] loop8: detected capacity change from 0 to 128 [ 231.037140][ T5836] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 231.068007][ T5836] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 231.135463][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.199163][ T5836] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 231.478678][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1185'. [ 232.300523][ T5836] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 232.331615][ T5836] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 232.455648][ T9708] loop5: detected capacity change from 0 to 32768 [ 232.457516][ T5836] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 232.507017][ T9708] (syz.5.1193,9708,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 232.552229][ T9708] (syz.5.1193,9708,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.573161][ T9708] (syz.5.1193,9708,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.651732][ T9708] JBD2: Ignoring recovery information on journal [ 232.787122][ T9] usb 5-1: USB disconnect, device number 17 [ 232.890965][ T9708] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 232.996958][ T9708] [ 232.999341][ T9708] ====================================================== [ 233.006369][ T9708] WARNING: possible circular locking dependency detected [ 233.013397][ T9708] 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 Not tainted [ 233.020608][ T9708] ------------------------------------------------------ [ 233.027644][ T9708] syz.5.1193/9708 is trying to acquire lock: [ 233.033753][ T9708] ffff888057909628 (&oi->ip_io_mutex){+.+.}-{4:4}, at: __ocfs2_journal_access+0x4a1/0x8b0 [ 233.043906][ T9708] [ 233.043906][ T9708] but task is already holding lock: [ 233.051645][ T9708] ffff888028ec0958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 233.060995][ T9708] [ 233.060995][ T9708] which lock already depends on the new lock. [ 233.060995][ T9708] [ 233.071506][ T9708] [ 233.071506][ T9708] the existing dependency chain (in reverse order) is: [ 233.080541][ T9708] [ 233.080541][ T9708] -> #6 (jbd2_handle){++++}-{0:0}: [ 233.087979][ T9708] lock_acquire+0x1ed/0x550 [ 233.093046][ T9708] start_this_handle+0x1eb4/0x2110 [ 233.098758][ T9708] jbd2__journal_start+0x2da/0x5d0 [ 233.104429][ T9708] __ext4_journal_start_sb+0x239/0x600 [ 233.110438][ T9708] ext4_dirty_inode+0x92/0x110 [ 233.115835][ T9708] __mark_inode_dirty+0x2f0/0xe90 [ 233.121403][ T9708] touch_atime+0x413/0x690 [ 233.126363][ T9708] ext4_file_mmap+0x18c/0x540 [ 233.131643][ T9708] __mmap_region+0x2206/0x2cd0 [ 233.137056][ T9708] mmap_region+0x226/0x2c0 [ 233.142018][ T9708] do_mmap+0x8f0/0x1000 [ 233.146734][ T9708] vm_mmap_pgoff+0x1dd/0x3d0 [ 233.151882][ T9708] ksys_mmap_pgoff+0x4eb/0x720 [ 233.157209][ T9708] do_syscall_64+0xf3/0x230 [ 233.162270][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.168730][ T9708] [ 233.168730][ T9708] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 233.176431][ T9708] lock_acquire+0x1ed/0x550 [ 233.181519][ T9708] __might_fault+0xc6/0x120 [ 233.186588][ T9708] _copy_from_user+0x2a/0xc0 [ 233.191732][ T9708] blk_trace_setup+0xd2/0x1e0 [ 233.196967][ T9708] sg_ioctl+0xa46/0x2e80 [ 233.201763][ T9708] __se_sys_ioctl+0xf7/0x170 [ 233.206902][ T9708] do_syscall_64+0xf3/0x230 [ 233.211969][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.218421][ T9708] [ 233.218421][ T9708] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 233.226383][ T9708] lock_acquire+0x1ed/0x550 [ 233.231448][ T9708] __mutex_lock+0x1ac/0xee0 [ 233.236513][ T9708] blk_mq_init_sched+0x3fa/0x830 [ 233.241999][ T9708] elevator_init_mq+0x20e/0x320 [ 233.247404][ T9708] add_disk_fwnode+0x10d/0xf80 [ 233.252720][ T9708] sd_probe+0xba6/0x1100 [ 233.257526][ T9708] really_probe+0x2ba/0xad0 [ 233.262591][ T9708] __driver_probe_device+0x1a2/0x390 [ 233.268433][ T9708] driver_probe_device+0x50/0x430 [ 233.274012][ T9708] __device_attach_driver+0x2d6/0x530 [ 233.279956][ T9708] bus_for_each_drv+0x250/0x2e0 [ 233.285375][ T9708] __device_attach_async_helper+0x22d/0x300 [ 233.291825][ T9708] async_run_entry_fn+0xaa/0x420 [ 233.297312][ T9708] process_scheduled_works+0xa68/0x1840 [ 233.303406][ T9708] worker_thread+0x870/0xd30 [ 233.308547][ T9708] kthread+0x2f2/0x390 [ 233.313172][ T9708] ret_from_fork+0x4d/0x80 [ 233.318135][ T9708] ret_from_fork_asm+0x1a/0x30 [ 233.323454][ T9708] [ 233.323454][ T9708] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 233.332379][ T9708] lock_acquire+0x1ed/0x550 [ 233.337527][ T9708] blk_queue_enter+0xe1/0x600 [ 233.342794][ T9708] blk_mq_alloc_request+0x4fa/0xaa0 [ 233.348556][ T9708] scsi_execute_cmd+0x177/0x1090 [ 233.354048][ T9708] read_capacity_16+0x2b4/0x1450 [ 233.359542][ T9708] sd_revalidate_disk+0x1013/0xbce0 [ 233.365302][ T9708] sd_probe+0x9fa/0x1100 [ 233.370120][ T9708] really_probe+0x2ba/0xad0 [ 233.375170][ T9708] __driver_probe_device+0x1a2/0x390 [ 233.380997][ T9708] driver_probe_device+0x50/0x430 [ 233.386570][ T9708] __device_attach_driver+0x2d6/0x530 [ 233.392493][ T9708] bus_for_each_drv+0x250/0x2e0 [ 233.397898][ T9708] __device_attach_async_helper+0x22d/0x300 [ 233.404355][ T9708] async_run_entry_fn+0xaa/0x420 [ 233.410053][ T9708] process_scheduled_works+0xa68/0x1840 [ 233.416150][ T9708] worker_thread+0x870/0xd30 [ 233.421287][ T9708] kthread+0x2f2/0x390 [ 233.425902][ T9708] ret_from_fork+0x4d/0x80 [ 233.430872][ T9708] ret_from_fork_asm+0x1a/0x30 [ 233.436184][ T9708] [ 233.436184][ T9708] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 233.443880][ T9708] lock_acquire+0x1ed/0x550 [ 233.448955][ T9708] __mutex_lock+0x1ac/0xee0 [ 233.454193][ T9708] loop_reconfigure_limits+0x43f/0x900 [ 233.460418][ T9708] lo_ioctl+0x1351/0x1f50 [ 233.465293][ T9708] blkdev_ioctl+0x57f/0x6a0 [ 233.470333][ T9708] __se_sys_ioctl+0xf7/0x170 [ 233.475477][ T9708] do_syscall_64+0xf3/0x230 [ 233.481316][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.487763][ T9708] [ 233.487763][ T9708] -> #1 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 233.496537][ T9708] lock_acquire+0x1ed/0x550 [ 233.501597][ T9708] blk_mq_submit_bio+0x1536/0x2390 [ 233.507452][ T9708] __submit_bio+0x2c6/0x560 [ 233.512530][ T9708] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 233.518751][ T9708] ocfs2_read_blocks+0x8d9/0x1600 [ 233.524360][ T9708] ocfs2_read_inode_block+0x106/0x1e0 [ 233.530288][ T9708] ocfs2_get_clusters+0x3d2/0xbd0 [ 233.536380][ T9708] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 233.542734][ T9708] ocfs2_read_virt_blocks+0x313/0xb10 [ 233.548654][ T9708] ocfs2_find_entry+0x43b/0x2730 [ 233.554136][ T9708] ocfs2_find_files_on_disk+0xff/0x360 [ 233.560138][ T9708] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 233.566315][ T9708] ocfs2_get_system_file_inode+0x305/0x7b0 [ 233.572676][ T9708] ocfs2_init_global_system_inodes+0x32c/0x730 [ 233.579379][ T9708] ocfs2_fill_super+0x2f5b/0x5760 [ 233.584954][ T9708] mount_bdev+0x20c/0x2d0 [ 233.589835][ T9708] legacy_get_tree+0xf0/0x190 [ 233.595172][ T9708] vfs_get_tree+0x92/0x2b0 [ 233.600185][ T9708] do_new_mount+0x2be/0xb40 [ 233.605247][ T9708] __se_sys_mount+0x2d6/0x3c0 [ 233.610568][ T9708] do_syscall_64+0xf3/0x230 [ 233.615626][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.622109][ T9708] [ 233.622109][ T9708] -> #0 (&oi->ip_io_mutex){+.+.}-{4:4}: [ 233.629926][ T9708] validate_chain+0x18ef/0x5920 [ 233.635346][ T9708] __lock_acquire+0x1397/0x2100 [ 233.640750][ T9708] lock_acquire+0x1ed/0x550 [ 233.645893][ T9708] __mutex_lock+0x1ac/0xee0 [ 233.650962][ T9708] __ocfs2_journal_access+0x4a1/0x8b0 [ 233.656897][ T9708] ocfs2_modify_bh+0x15d/0x4d0 [ 233.662251][ T9708] ocfs2_local_read_info+0x158f/0x19f0 [ 233.668264][ T9708] dquot_load_quota_sb+0x764/0xbb0 [ 233.673932][ T9708] dquot_load_quota_inode+0x320/0x600 [ 233.679875][ T9708] ocfs2_enable_quotas+0x169/0x450 [ 233.685534][ T9708] ocfs2_fill_super+0x4ca1/0x5760 [ 233.691140][ T9708] mount_bdev+0x20c/0x2d0 [ 233.696027][ T9708] legacy_get_tree+0xf0/0x190 [ 233.701255][ T9708] vfs_get_tree+0x92/0x2b0 [ 233.706228][ T9708] do_new_mount+0x2be/0xb40 [ 233.711298][ T9708] __se_sys_mount+0x2d6/0x3c0 [ 233.716540][ T9708] do_syscall_64+0xf3/0x230 [ 233.721602][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.728066][ T9708] [ 233.728066][ T9708] other info that might help us debug this: [ 233.728066][ T9708] [ 233.738309][ T9708] Chain exists of: [ 233.738309][ T9708] &oi->ip_io_mutex --> &mm->mmap_lock --> jbd2_handle [ 233.738309][ T9708] [ 233.751041][ T9708] Possible unsafe locking scenario: [ 233.751041][ T9708] [ 233.751086][ T5836] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 233.758536][ T9708] CPU0 CPU1 [ 233.758552][ T9708] ---- ---- [ 233.758560][ T9708] rlock(jbd2_handle); [ 233.758585][ T9708] lock(&mm->mmap_lock); [ 233.787927][ T9708] lock(jbd2_handle); [ 233.794555][ T9708] lock(&oi->ip_io_mutex); [ 233.799094][ T9708] [ 233.799094][ T9708] *** DEADLOCK *** [ 233.799094][ T9708] [ 233.807262][ T9708] 4 locks held by syz.5.1193/9708: [ 233.812377][ T9708] #0: ffff88806c7720e0 (&type->s_umount_key#67/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 233.823057][ T9708] #1: ffff88806c772610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_modify_bh+0xed/0x4d0 [ 233.832743][ T9708] #2: ffff88807e0f38e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3be/0x700 [ 233.843499][ T9708] #3: ffff888028ec0958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 233.853207][ T9708] [ 233.853207][ T9708] stack backtrace: [ 233.859102][ T9708] CPU: 0 UID: 0 PID: 9708 Comm: syz.5.1193 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 233.869779][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.879868][ T9708] Call Trace: [ 233.883147][ T9708] [ 233.886076][ T9708] dump_stack_lvl+0x241/0x360 [ 233.890773][ T9708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.896070][ T9708] ? __pfx__printk+0x10/0x10 [ 233.900681][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.906418][ T9708] print_circular_bug+0x13a/0x1b0 [ 233.911461][ T9708] check_noncircular+0x36a/0x4a0 [ 233.916412][ T9708] ? __pfx_check_noncircular+0x10/0x10 [ 233.921907][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.927558][ T9708] ? lockdep_lock+0x123/0x2b0 [ 233.932251][ T9708] ? __pfx___bfs+0x10/0x10 [ 233.936678][ T9708] ? __pfx_validate_chain+0x10/0x10 [ 233.941981][ T9708] validate_chain+0x18ef/0x5920 [ 233.946856][ T9708] ? lockdep_unlock+0x16a/0x300 [ 233.951713][ T9708] ? __pfx_validate_chain+0x10/0x10 [ 233.956928][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.962565][ T9708] ? validate_chain+0x15c0/0x5920 [ 233.967626][ T9708] ? __pfx_validate_chain+0x10/0x10 [ 233.972846][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 233.978537][ T9708] ? mark_lock+0x9a/0x360 [ 233.982926][ T9708] __lock_acquire+0x1397/0x2100 [ 233.987809][ T9708] lock_acquire+0x1ed/0x550 [ 233.992326][ T9708] ? __ocfs2_journal_access+0x4a1/0x8b0 [ 233.997900][ T9708] ? __pfx_lock_acquire+0x10/0x10 [ 234.002951][ T9708] ? __pfx___might_resched+0x10/0x10 [ 234.006141][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.008255][ T9708] __mutex_lock+0x1ac/0xee0 [ 234.019414][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.023603][ T9708] ? __ocfs2_journal_access+0x4a1/0x8b0 [ 234.023655][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.037800][ T5836] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 234.039042][ T9708] ? __pfx_lock_acquire+0x10/0x10 [ 234.045080][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.053698][ T9708] ? __ocfs2_journal_access+0x4a1/0x8b0 [ 234.053753][ T9708] ? __pfx___mutex_lock+0x10/0x10 [ 234.053791][ T9708] ? do_raw_spin_lock+0x14f/0x370 [ 234.053821][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.053849][ T9708] ? do_raw_spin_unlock+0x13c/0x8b0 [ 234.053875][ T9708] ? rcu_is_watching+0x15/0xb0 [ 234.053915][ T9708] __ocfs2_journal_access+0x4a1/0x8b0 [ 234.053954][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.053981][ T9708] ? jbd2__journal_start+0x3b8/0x5d0 [ 234.100517][ T5836] usb 2-1: config 0 descriptor?? [ 234.103653][ T9708] ? __pfx___ocfs2_journal_access+0x10/0x10 [ 234.125603][ T9708] ? ocfs2_start_trans+0x4e3/0x700 [ 234.130853][ T9708] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 234.136453][ T9708] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 234.142563][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.148237][ T9708] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 234.154003][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.159671][ T9708] ocfs2_modify_bh+0x15d/0x4d0 [ 234.164824][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.170596][ T9708] ? __pfx_olq_update_info+0x10/0x10 [ 234.175932][ T9708] ? __pfx_ocfs2_modify_bh+0x10/0x10 [ 234.181254][ T9708] ? __pfx_ocfs2_read_quota_block+0x10/0x10 [ 234.187270][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.192915][ T9708] ? rcu_is_watching+0x15/0xb0 [ 234.197827][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.203480][ T9708] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 234.209161][ T9708] ocfs2_local_read_info+0x158f/0x19f0 [ 234.214667][ T9708] ? __pfx_ocfs2_local_read_info+0x10/0x10 [ 234.220528][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.226188][ T9708] ? dquot_load_quota_sb+0x164/0xbb0 [ 234.231518][ T9708] ? do_raw_spin_lock+0x14f/0x370 [ 234.236563][ T9708] ? __pfx_lock_release+0x10/0x10 [ 234.241616][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.247288][ T9708] ? do_raw_spin_unlock+0x13c/0x8b0 [ 234.252530][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.258222][ T9708] dquot_load_quota_sb+0x764/0xbb0 [ 234.263372][ T9708] dquot_load_quota_inode+0x320/0x600 [ 234.268846][ T9708] ocfs2_enable_quotas+0x169/0x450 [ 234.274000][ T9708] ? __pfx_ocfs2_enable_quotas+0x10/0x10 [ 234.279658][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.285321][ T9708] ? __wake_up_common_lock+0x18c/0x1e0 [ 234.290827][ T9708] ocfs2_fill_super+0x4ca1/0x5760 [ 234.295880][ T9708] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 234.301906][ T9708] ? __pfx_validate_chain+0x10/0x10 [ 234.307149][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.312827][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.318500][ T9708] ? __pfx_validate_chain+0x10/0x10 [ 234.323758][ T9708] ? preempt_count_add+0x93/0x190 [ 234.328845][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.334603][ T9708] ? mark_lock+0x9a/0x360 [ 234.338980][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.344633][ T9708] ? mark_lock+0x9a/0x360 [ 234.348997][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.354652][ T9708] ? __lock_acquire+0x1397/0x2100 [ 234.359719][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.365392][ T9708] ? validate_chain+0x11e/0x5920 [ 234.370358][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.376011][ T9708] ? mark_lock+0x9a/0x360 [ 234.380386][ T9708] ? __pfx_validate_chain+0x10/0x10 [ 234.385617][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.391308][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.396996][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.402648][ T9708] ? string+0x26a/0x2b0 [ 234.406838][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.412518][ T9708] ? widen_string+0x3a/0x310 [ 234.417158][ T9708] ? string+0x26a/0x2b0 [ 234.421366][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.427027][ T9708] ? bdev_name+0x2b1/0x3c0 [ 234.431513][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.437184][ T9708] ? pointer+0x703/0x1210 [ 234.442066][ T9708] ? __pfx_pointer+0x10/0x10 [ 234.446744][ T9708] ? __pfx_format_decode+0x10/0x10 [ 234.451905][ T9708] ? __lock_acquire+0x1397/0x2100 [ 234.456969][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.462628][ T9708] ? vsnprintf+0x1ccd/0x1da0 [ 234.467256][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.472913][ T9708] ? snprintf+0xda/0x120 [ 234.477162][ T9708] ? __pfx_lock_release+0x10/0x10 [ 234.482212][ T9708] ? do_raw_spin_lock+0x14f/0x370 [ 234.487245][ T9708] ? __pfx_snprintf+0x10/0x10 [ 234.491978][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.497753][ T9708] ? set_blocksize+0x1f9/0x360 [ 234.502553][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.508469][ T9708] ? sb_set_blocksize+0x98/0xf0 [ 234.513446][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.519238][ T9708] ? setup_bdev_super+0x4e6/0x5d0 [ 234.520299][ T5836] zeroplus 0003:0C12:0030.0020: unknown main item tag 0x6 [ 234.524280][ T9708] mount_bdev+0x20c/0x2d0 [ 234.533571][ T5836] zeroplus 0003:0C12:0030.0020: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.1-1/input0 [ 234.535888][ T9708] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 234.552675][ T9708] ? __pfx_mount_bdev+0x10/0x10 [ 234.555436][ T5836] zeroplus 0003:0C12:0030.0020: no inputs found [ 234.557759][ T9708] ? vfs_parse_fs_string+0x190/0x230 [ 234.557810][ T9708] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 234.575291][ T9708] legacy_get_tree+0xf0/0x190 [ 234.580026][ T9708] ? __pfx_ocfs2_mount+0x10/0x10 [ 234.585012][ T9708] vfs_get_tree+0x92/0x2b0 [ 234.589508][ T9708] do_new_mount+0x2be/0xb40 [ 234.594136][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.599856][ T9708] ? __pfx_do_new_mount+0x10/0x10 [ 234.604932][ T9708] __se_sys_mount+0x2d6/0x3c0 [ 234.609739][ T9708] ? __pfx___se_sys_mount+0x10/0x10 [ 234.615175][ T9708] ? exc_page_fault+0x590/0x8b0 [ 234.620689][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.626441][ T9708] ? srso_alias_return_thunk+0x5/0xfbef5 [ 234.632261][ T9708] ? __x64_sys_mount+0x20/0xc0 [ 234.637403][ T9708] do_syscall_64+0xf3/0x230 [ 234.642601][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.648763][ T9708] RIP: 0033:0x7ffa9cd816ba [ 234.653221][ T9708] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.672880][ T9708] RSP: 002b:00007ffa9dbe1e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.681344][ T9708] RAX: ffffffffffffffda RBX: 00007ffa9dbe1f10 RCX: 00007ffa9cd816ba [ 234.689340][ T9708] RDX: 0000000020004740 RSI: 0000000020004780 RDI: 00007ffa9dbe1ed0 [ 234.697393][ T9708] RBP: 0000000020004740 R08: 00007ffa9dbe1f10 R09: 000000000100000a [ 234.705431][ T9708] R10: 000000000100000a R11: 0000000000000246 R12: 0000000020004780 [ 234.713889][ T9708] R13: 00007ffa9dbe1ed0 R14: 000000000000470b R15: 00000000200003c0 [ 234.722517][ T9708] [ 234.835617][ T9708] (syz.5.1193,9708,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x36fa8088. Applying ECC. [ 234.862186][ T9708] (syz.5.1193,9708,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x26885ba0 [ 234.863538][ T25] usb 2-1: USB disconnect, device number 9 [ 234.881950][ T9708] (syz.5.1193,9708,0):ocfs2_search_chain:1814 ERROR: status = -5 [ 234.892808][ T9708] (syz.5.1193,9708,0):ocfs2_search_chain:1926 ERROR: status = -5 [ 234.904149][ T9708] (syz.5.1193,9708,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -5 [ 234.912971][ T9708] (syz.5.1193,9708,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 234.922405][ T9708] (syz.5.1193,9708,0):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 234.931519][ T9708] (syz.5.1193,9708,0):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 234.940238][ T9708] (syz.5.1193,9708,0):ocfs2_local_alloc_new_window:1216 ERROR: status = -5 [ 234.950154][ T9708] (syz.5.1193,9708,0):ocfs2_local_alloc_new_window:1241 ERROR: status = -5 [ 234.959390][ T9708] (syz.5.1193,9708,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -5 [ 234.974136][ T9708] (syz.5.1193,9708,0):ocfs2_local_alloc_slide_window:1334 ERROR: status = -5 [ 234.983479][ T9708] (syz.5.1193,9708,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -5 [ 234.992446][ T9708] (syz.5.1193,9708,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -5 [ 235.003519][ T9708] (syz.5.1193,9708,0):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -5 [ 235.013164][ T9708] (syz.5.1193,9708,0):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -5 [ 235.023672][ T9708] (syz.5.1193,9708,0):ocfs2_lock_allocators:2749 ERROR: status = -5 [ 235.031842][ T9708] (syz.5.1193,9708,0):ocfs2_extend_allocation:592 ERROR: status = -5 [ 235.041829][ T9708] (syz.5.1193,9708,0):ocfs2_extend_no_holes:1030 ERROR: status = -5 [ 235.051394][ T9708] (syz.5.1193,9708,0):ocfs2_acquire_dquot:885 ERROR: status = -5 [ 235.104880][ T5841] ocfs2: Unmounting device (7,5) on (node local)