last executing test programs: 3.664625371s ago: executing program 1 (id=2400): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c03080006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0) 3.476663249s ago: executing program 1 (id=2404): syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x45, &(0x7f0000000400)={0x5, 0xf, 0x45, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "3458a6cbeb683a6be6dce1a001bcc39f"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x4, 0x0, 0x80, [0x3fc0, 0xffcf, 0xffc000, 0xff0030, 0xff0000, 0xff00]}, @ptm_cap={0x3}, @generic={0x5, 0x10, 0x1, "aa10"}]}, 0x5, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x42c}}, {0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "90a4c7e98ccf5cf130c52d803beb7f9d245181a801bf27e1c1ac0f6b5f42ef06b1b36c08d3de30ad6a8769a60be78460ed85ba7a0f3e17d4be0919e1c5583f7486c6e70892124a3b284c272f559781ae6b214b76795766e4779cd05d6e5e45b7efd73cc0c2ace83270d7f2397ed10cf2c067dfb138cb35854de989bdd2c39be47c15097c05ad8485c0408a0beedd301f35f1da6f3d724e18edfebe"}}, {0xa6, &(0x7f00000005c0)=@string={0xa6, 0x3, "e73dd921d6ad5b691eaa7022a19cf29c4767a8da334255946cf29e9493270266bbb36a2d8d7aaa9442f6a50c75a2a09b3fff4d30ce2fc582620dcc975fc7aebbf2bd28d2e4006195525b04cc0a6cde84e6422bac803cb4a1c4bafdfff8bc2c2a410788024ac9e377f478e51a94b33a8d6a8e066ef71e9ad56760b503b5a48163559be2ca326408982d6b5b7d2d201f2936a974e5442acc2d7ecc910e49cf2d1694f561ec"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1801}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 2.92363712s ago: executing program 4 (id=2419): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000340)='./bus\x00', 0x0, 0x9000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1a00) 2.867050975s ago: executing program 4 (id=2421): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000040)="1c3f79", 0x3}], 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x4) 2.691923211s ago: executing program 4 (id=2427): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c00)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r1, @ANYBLOB="200025801c0001"], 0x3c}}, 0x0) 2.453720123s ago: executing program 1 (id=2429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780), 0x3, 0x434, &(0x7f00000002c0)="$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") creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0506617, &(0x7f0000000040)=0x1) 2.453644343s ago: executing program 4 (id=2430): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000280)={0x34, &(0x7f0000000100)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 2.199390127s ago: executing program 1 (id=2432): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000340)='./bus\x00', 0x0, 0x9000, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1a00) 2.0539329s ago: executing program 1 (id=2434): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 1.818856522s ago: executing program 0 (id=2439): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r1 = open_tree(r0, &(0x7f0000000140)='.\x00', 0x0) fchdir(r1) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x0, 0x0, 0xb}, 0x18) 1.800457734s ago: executing program 0 (id=2440): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x2b, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque="c6"}}}}}, 0x0) 1.746744318s ago: executing program 0 (id=2441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) fdatasync(r0) 1.707541492s ago: executing program 0 (id=2442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4092, 0xffc) 1.599503392s ago: executing program 0 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getaddr={0x14, 0x16, 0x300, 0x0, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c014}, 0x24000803) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0x4, 0x1, @multicast}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@norecovery}, {@jqfmt_vfsold}, {@dioread_lock}, {@nombcache}, {@usrquota}, {@noauto_da_alloc}]}, 0x0, 0x54b, &(0x7f0000000400)="$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") 1.599325022s ago: executing program 0 (id=2444): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400350064"], 0x100}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000b0000000b002a4c487d04a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.376575752s ago: executing program 2 (id=2445): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "39360000000000006f16247174"}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x0) 1.341921576s ago: executing program 2 (id=2446): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x12) 1.262588863s ago: executing program 2 (id=2447): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 947.229822ms ago: executing program 3 (id=2449): r0 = fsopen(&(0x7f0000000080)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='async\x00', &(0x7f0000000040)='async\x00', 0x0) 886.943128ms ago: executing program 3 (id=2450): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) close(r0) 857.54422ms ago: executing program 3 (id=2451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000080)) 752.69008ms ago: executing program 3 (id=2452): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) 752.4057ms ago: executing program 3 (id=2453): syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000000080), 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401}) 666.172938ms ago: executing program 4 (id=2454): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 589.090855ms ago: executing program 4 (id=2455): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000740), 0x1, 0x4f8, &(0x7f0000001080)="$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") ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x222464, 0x0) 515.539292ms ago: executing program 3 (id=2456): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000002700)=ANY=[], 0x1, 0x282, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r0, &(0x7f0000004200)='t', 0x7ffff000) 401.827722ms ago: executing program 2 (id=2457): socket$nl_crypto(0x10, 0x3, 0x15) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0xec}}, 0x0) 186.416472ms ago: executing program 2 (id=2458): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) 71.326413ms ago: executing program 1 (id=2459): syz_mount_image$f2fs(&(0x7f0000000340), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6e6f657874656e745f63616368652c6a71666d743d76667376312c66617374626f6f742c757365725f78617474722c6772706a71756f74613d00233f5b2c7768696e745f6d6f64653d757365722d62617365642c6673796e635f6d6f64653d7374726963742c6e6f657874656e0c5f63616368652cba727f3e50c9f1da74722c00"], 0x21, 0x5536, &(0x7f00000010c0)="$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") truncate(0x0, 0xa00) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 0s ago: executing program 2 (id=2460): syz_open_dev$media(&(0x7f0000000ac0), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): 212291][ T7365] program syz.4.1313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.232090][ T7353] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 187.236618][ T7340] (syz.3.1304,7340,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 187.316122][ T7340] JBD2: Ignoring recovery information on journal [ 187.598683][ T7340] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 187.695777][ T7377] loop2: detected capacity change from 0 to 256 [ 187.787994][ T4522] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 187.885771][ T6121] ocfs2: Unmounting device (7,3) on (node local) [ 188.027160][ T7389] loop1: detected capacity change from 0 to 1024 [ 188.192767][ T4522] usb 5-1: config 0 has an invalid interface number: 107 but max is 1 [ 188.221041][ T4522] usb 5-1: config 0 has an invalid interface number: 107 but max is 1 [ 188.234420][ T4522] usb 5-1: config 0 has no interface number 1 [ 188.240712][ T4522] usb 5-1: config 0 interface 107 altsetting 15 endpoint 0x8 has invalid wMaxPacketSize 0 [ 188.268521][ T4522] usb 5-1: too many endpoints for config 0 interface 107 altsetting 240: 254, using maximum allowed: 30 [ 188.290380][ T4522] usb 5-1: config 0 interface 107 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 188.316552][ T4522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 188.329872][ T4522] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 188.344474][ T4522] usb 5-1: config 0 interface 107 has no altsetting 0 [ 188.356001][ T4522] usb 5-1: config 0 interface 107 has no altsetting 1 [ 188.574859][ T4522] usb 5-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=17.19 [ 188.594479][ T4522] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.603325][ T4522] usb 5-1: Product: syz [ 188.607659][ T4522] usb 5-1: Manufacturer: syz [ 188.613680][ T4522] usb 5-1: SerialNumber: syz [ 188.620199][ T4522] usb 5-1: config 0 descriptor?? [ 188.754286][ T7391] loop1: detected capacity change from 0 to 32768 [ 188.946887][ T4522] usb 5-1: USB disconnect, device number 17 [ 189.127117][ T7407] program syz.0.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.189850][ T7409] UHID_CREATE from different security context by process 590 (syz.0.1334), this is not allowed. [ 189.339737][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'. [ 189.488560][ T7377] FAT-fs (loop2): Directory bread(block 64) failed [ 189.522139][ T7377] FAT-fs (loop2): Directory bread(block 65) failed [ 189.529453][ T7377] FAT-fs (loop2): Directory bread(block 66) failed [ 189.541265][ T7377] FAT-fs (loop2): Directory bread(block 67) failed [ 189.581307][ T7377] FAT-fs (loop2): Directory bread(block 68) failed [ 189.587863][ T7377] FAT-fs (loop2): Directory bread(block 69) failed [ 189.608921][ T7420] loop4: detected capacity change from 0 to 512 [ 189.621321][ T7377] FAT-fs (loop2): Directory bread(block 70) failed [ 189.627964][ T7377] FAT-fs (loop2): Directory bread(block 71) failed [ 189.647782][ T7421] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 189.661383][ T7377] FAT-fs (loop2): Directory bread(block 72) failed [ 189.696146][ T7377] FAT-fs (loop2): Directory bread(block 73) failed [ 189.789014][ T7421] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.801203][ T7420] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 189.823384][ T7420] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 189.892195][ T7421] bond0: (slave team0): Enslaving as an active interface with an up link [ 189.913591][ T7420] System zones: 0-2, 18-18, 34-35 [ 189.961330][ T7422] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 189.979497][ T7420] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.110402][ T7422] bond0: (slave team0): Releasing backup interface [ 190.153073][ T7422] bridge0: port 3(team0) entered blocking state [ 190.159509][ T7422] bridge0: port 3(team0) entered disabled state [ 190.193277][ T7422] device team0 entered promiscuous mode [ 190.198993][ T7422] device team_slave_0 entered promiscuous mode [ 190.205546][ T7422] device team_slave_1 entered promiscuous mode [ 190.361411][ T4522] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 190.713445][ T7424] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set [ 190.771408][ T4522] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 190.795163][ T4522] usb 5-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 190.840462][ T4522] usb 5-1: config 0 has no interface number 0 [ 190.877191][ T4522] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 52412, setting to 64 [ 190.970916][ T4522] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.049792][ T4522] usb 5-1: config 0 interface 52 has no altsetting 0 [ 191.221498][ T4522] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 191.230568][ T4522] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 191.288896][ T6889] udevd[6889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.107/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.339647][ T4522] usb 5-1: Product: syz [ 191.364771][ T4522] usb 5-1: SerialNumber: syz [ 191.415864][ T4522] usb 5-1: config 0 descriptor?? [ 191.526438][ T3617] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 191.692966][ T4522] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input19 [ 191.802921][ T7443] loop1: detected capacity change from 0 to 32768 [ 191.933928][ T3617] usb 4-1: Using ep0 maxpacket: 16 [ 191.977637][ T7443] XFS (loop1): Mounting V5 Filesystem [ 191.986786][ T4522] usb 5-1: USB disconnect, device number 18 [ 192.083379][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.094447][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.115897][ T3617] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 192.134530][ T7443] XFS (loop1): Ending clean mount [ 192.136958][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.176473][ T3617] usb 4-1: config 0 descriptor?? [ 192.337626][ T3569] XFS (loop1): Unmounting Filesystem [ 192.572395][ T7471] loop2: detected capacity change from 0 to 64 [ 192.717020][ T3617] cp2112 0003:10C4:EA90.0021: unbalanced delimiter at end of report description [ 192.730891][ T3617] cp2112 0003:10C4:EA90.0021: parse failed [ 192.751216][ T3617] cp2112: probe of 0003:10C4:EA90.0021 failed with error -22 [ 192.830336][ T7471] attempt to access beyond end of device [ 192.830336][ T7471] loop2: rw=2049, want=162, limit=64 [ 193.010532][ T3669] usb 4-1: USB disconnect, device number 16 [ 193.382228][ T7482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 193.751352][ T7493] loop3: detected capacity change from 0 to 2048 [ 193.864179][ T7502] program syz.1.1373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.082462][ T7509] loop1: detected capacity change from 0 to 4096 [ 194.173178][ T7509] ntfs3: loop1: failed to convert "0080" to macgaelic [ 194.190965][ T7509] ntfs3: loop1: failed to convert name for inode 1e. [ 194.212915][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219228][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.149102][ T7527] loop2: detected capacity change from 0 to 8192 [ 195.224359][ T7527] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 195.253810][ T7527] REISERFS (device loop2): using ordered data mode [ 195.275695][ T7527] reiserfs: using flush barriers [ 195.299962][ T7527] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.360608][ T7527] REISERFS (device loop2): checking transaction log (loop2) [ 195.390931][ T7527] REISERFS (device loop2): Using r5 hash to sort names [ 195.398166][ T4859] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 195.408161][ T7527] REISERFS (device loop2): using 3.5.x disk format [ 195.420871][ T7527] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 195.443254][ T7527] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 195.593878][ T7493] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 195.688248][ T7556] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.811526][ T4859] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.818663][ T7558] trusted_key: encrypted_key: keylen parameter is missing [ 195.841125][ T4859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.926777][ T4859] usb 2-1: config 0 descriptor?? [ 196.017695][ T4859] cp210x 2-1:0.0: cp210x converter detected [ 196.191011][ T7569] loop4: detected capacity change from 0 to 4096 [ 196.247632][ T4859] usb 2-1: cp210x converter now attached to ttyUSB0 [ 196.350250][ T7576] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1406'. [ 196.445911][ T4859] usb 2-1: USB disconnect, device number 14 [ 196.473791][ T4859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.504790][ T4859] cp210x 2-1:0.0: device disconnected [ 196.770531][ T7567] loop2: detected capacity change from 0 to 32768 [ 196.902260][ T7567] jfs_rename did not expect dtDelete to return rc = -2 [ 196.939718][ T7567] ERROR: (device loop2): jfs_rename: [ 196.939718][ T7567] [ 197.123931][ T7572] loop3: detected capacity change from 0 to 32768 [ 197.292290][ T7572] XFS (loop3): Mounting V5 Filesystem [ 197.545383][ T7572] XFS (loop3): Ending clean mount [ 197.640310][ T6121] XFS (loop3): Unmounting Filesystem [ 197.677025][ T7605] netlink: 'syz.0.1417': attribute type 12 has an invalid length. [ 197.685227][ T7605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1417'. [ 197.907410][ T7569] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 198.510397][ T7623] device tunl0 entered promiscuous mode [ 198.546174][ T7623] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 198.591230][ T7623] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1423'. [ 198.871407][ T4255] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 198.903405][ T7631] loop4: detected capacity change from 0 to 2048 [ 199.330423][ T4255] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.364892][ T4255] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.375439][ T4859] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 199.387419][ T4255] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.394954][ T4255] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 199.404819][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.430344][ T4255] usb 2-1: config 0 descriptor?? [ 199.641273][ T4859] usb 5-1: Using ep0 maxpacket: 8 [ 199.821469][ T4859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 199.906280][ T4255] wacom 0003:056A:005E.0022: unknown main item tag 0x0 [ 199.916464][ T4859] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 199.941394][ T4859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.952429][ T4255] wacom 0003:056A:005E.0022: unknown main item tag 0x0 [ 199.971314][ T4255] wacom 0003:056A:005E.0022: unknown main item tag 0x0 [ 199.981507][ T4859] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.999824][ T4255] wacom 0003:056A:005E.0022: unknown main item tag 0x0 [ 200.007308][ T4859] usb 5-1: config 1 has no interface number 1 [ 200.023941][ T4255] wacom 0003:056A:005E.0022: hidraw0: USB HID v0.00 Device [HID 056a:005e] on usb-dummy_hcd.1-1/input0 [ 200.046797][ T4859] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.069640][ T4859] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 248, changing to 7 [ 200.082451][ T4859] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 33341, setting to 1024 [ 200.151597][ T4522] usb 2-1: USB disconnect, device number 15 [ 200.244175][ T7651] loop3: detected capacity change from 0 to 32768 [ 200.275471][ T4859] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.299604][ T7655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1440'. [ 200.305531][ T4859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.311476][ T7651] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1438 (7651) [ 200.318629][ T4859] usb 5-1: Product: syz [ 200.333606][ T4859] usb 5-1: Manufacturer: syz [ 200.338216][ T4859] usb 5-1: SerialNumber: syz [ 200.451264][ T7651] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 200.460021][ T7651] BTRFS info (device loop3): using free space tree [ 200.471331][ T7651] BTRFS info (device loop3): has skinny extents [ 200.559114][ T7669] loop2: detected capacity change from 0 to 1024 [ 200.683498][ T4859] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 200.695476][ T4859] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 200.767937][ T7669] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.786594][ T4859] usb 5-1: found format II with max.bitrate = 0, frame size=39301 [ 200.841326][ T7651] BTRFS info (device loop3): enabling ssd optimizations [ 200.858235][ T4859] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 200.875328][ T4859] usb 5-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 200.884271][ T4859] usb 5-1: found format II with max.bitrate = 0, frame size=39301 [ 201.075268][ T4859] usb 5-1: USB disconnect, device number 19 [ 201.930625][ T7714] loop4: detected capacity change from 0 to 64 [ 202.133399][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 202.183588][ T7726] x_tables: ip_tables: udp match: only valid for protocol 17 [ 202.394308][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1469'. [ 202.631109][ T7745] loop1: detected capacity change from 0 to 256 [ 202.667594][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 202.773841][ T7745] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 203.120975][ T7758] loop2: detected capacity change from 0 to 2048 [ 203.202946][ T7764] loop3: detected capacity change from 0 to 256 [ 203.322650][ T7764] FAT-fs (loop3): Directory bread(block 64) failed [ 203.349798][ T7764] FAT-fs (loop3): Directory bread(block 65) failed [ 203.366293][ T7764] FAT-fs (loop3): Directory bread(block 66) failed [ 203.407430][ T7764] FAT-fs (loop3): Directory bread(block 67) failed [ 203.445357][ T7764] FAT-fs (loop3): Directory bread(block 68) failed [ 203.462459][ T7764] FAT-fs (loop3): Directory bread(block 69) failed [ 203.489563][ T7764] FAT-fs (loop3): Directory bread(block 70) failed [ 203.506878][ T7764] FAT-fs (loop3): Directory bread(block 71) failed [ 203.524056][ T7764] FAT-fs (loop3): Directory bread(block 72) failed [ 203.544250][ T7764] FAT-fs (loop3): Directory bread(block 73) failed [ 204.047495][ T7767] loop1: detected capacity change from 0 to 40427 [ 204.085271][ T7767] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 204.102656][ T7767] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 204.115236][ T7767] F2FS-fs (loop1): invalid crc value [ 204.131331][ T3615] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 204.144317][ T7767] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.150135][ T3669] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 204.206440][ T7767] F2FS-fs (loop1): recover fsync data on readonly fs [ 204.221759][ T7767] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 204.228995][ T7767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 204.421037][ T7758] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 204.441238][ T7758] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 204.441238][ T7758] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 204.441238][ T7758] [ 204.544678][ T3615] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 204.560246][ T3615] usb 4-1: config 4 has no interface number 0 [ 204.592110][ T7758] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,max_batch_time=0x0000000000000002,nomblk_io_submit,norecovery,nouser_xattr,errors=remount-ro,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,. Quota mode: writeback. [ 204.631737][ T3669] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.640803][ T3669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.668391][ T3669] usb 5-1: config 0 descriptor?? [ 204.742821][ T3669] cp210x 5-1:0.0: cp210x converter detected [ 204.807888][ T7784] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 204.824868][ T3615] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 204.858041][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.876713][ T3615] usb 4-1: Product: syz [ 204.893357][ T7784] EXT4-fs (loop2): Remounting filesystem read-only [ 204.893414][ T3615] usb 4-1: Manufacturer: syz [ 204.911575][ T3615] usb 4-1: SerialNumber: syz [ 204.963894][ T3615] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 205.196265][ T3669] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 205.253654][ T7793] loop2: detected capacity change from 0 to 512 [ 205.270187][ T3669] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 205.285435][ T3669] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 205.312524][ T7793] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.319926][ T3669] usb 5-1: cp210x converter now attached to ttyUSB0 [ 205.366532][ T7793] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 205.385740][ T3615] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 205.415836][ T3669] usb 5-1: USB disconnect, device number 20 [ 205.425137][ T7793] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1493: invalid indirect mapped block 2683928664 (level 1) [ 205.425325][ T3669] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.425684][ T3669] cp210x 5-1:0.0: device disconnected [ 205.470105][ T3615] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 205.563573][ T7793] EXT4-fs (loop2): Remounting filesystem read-only [ 205.570418][ T7793] EXT4-fs (loop2): 1 truncate cleaned up [ 205.604800][ T3615] usb 4-1: USB disconnect, device number 17 [ 205.614939][ T7793] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 205.758906][ T6405] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 205.882690][ T6405] EXT4-fs (loop2): Remounting filesystem read-only [ 205.903930][ T6405] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 205.929238][ T6405] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 206.166894][ T3615] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 206.279396][ T7803] loop3: detected capacity change from 0 to 2048 [ 206.296341][ T7786] loop1: detected capacity change from 0 to 65536 [ 206.355102][ T7803] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.425952][ T7806] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.441430][ T3615] usb 5-1: Using ep0 maxpacket: 16 [ 206.503806][ T7786] XFS (loop1): Mounting V5 Filesystem [ 206.573234][ T3615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.614685][ T3615] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.678226][ T3615] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.718598][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.776643][ T3615] usb 5-1: config 0 descriptor?? [ 206.838294][ T7786] XFS (loop1): Ending clean mount [ 206.872654][ T7786] XFS (loop1): Quotacheck needed: Please wait. [ 206.979157][ T6157] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode [ 206.991969][ T6157] XFS (loop1): Unmount and run xfs_repair [ 206.997805][ T6157] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 207.046933][ T6157] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 207.089224][ T6157] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.128994][ T6157] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 207.153522][ T7795] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 207.185347][ T6157] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 207.238054][ T6157] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.271306][ T6157] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 207.293264][ T3615] elan 0003:04F3:0755.0023: global environment stack underflow [ 207.300847][ T3615] elan 0003:04F3:0755.0023: item 0 0 1 11 parsing failed [ 207.314532][ T6157] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 207.334865][ T3615] elan 0003:04F3:0755.0023: Hid Parse failed [ 207.340965][ T3615] elan: probe of 0003:04F3:0755.0023 failed with error -22 [ 207.355248][ T6157] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 207.404812][ T7786] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 207.448725][ T7786] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode [ 207.460321][ T7786] XFS (loop1): Unmount and run xfs_repair [ 207.468647][ T7786] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 207.519826][ T7786] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 207.524564][ T3615] usb 5-1: USB disconnect, device number 21 [ 207.550465][ T7786] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.586516][ T7786] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 207.641198][ T7786] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 207.681420][ T7786] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 207.696323][ T7786] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 207.735064][ T7786] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 207.761436][ T7786] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 207.914024][ T3569] XFS (loop1): Unmounting Filesystem [ 209.150176][ T7886] loop1: detected capacity change from 0 to 4096 [ 209.153350][ T7870] loop4: detected capacity change from 0 to 32768 [ 209.398407][ T7892] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.427911][ T7872] loop3: detected capacity change from 0 to 32768 [ 209.526724][ T7897] tipc: Enabling of bearer rejected, failed to enable media [ 209.581114][ T7872] JBD2: Ignoring recovery information on journal [ 209.639166][ T7872] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 209.692132][ T26] audit: type=1800 audit(1727971209.691:11): pid=7872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1528" name="file1" dev="loop3" ino=16946 res=0 errno=0 [ 209.760030][ T6121] ocfs2: Unmounting device (7,3) on (node local) [ 210.054392][ T7904] loop3: detected capacity change from 0 to 8192 [ 210.100401][ T7904] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 210.113132][ T7904] REISERFS (device loop3): using ordered data mode [ 210.120029][ T7904] reiserfs: using flush barriers [ 210.135646][ T7904] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.164345][ T7904] REISERFS (device loop3): checking transaction log (loop3) [ 210.182943][ T7904] REISERFS (device loop3): Using r5 hash to sort names [ 210.190043][ T7904] REISERFS (device loop3): using 3.5.x disk format [ 210.207823][ T7904] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 210.414232][ T7870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1526 (7870) [ 210.483869][ T7870] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 210.510107][ T7870] BTRFS info (device loop4): metadata ratio 1025 [ 210.530451][ T7870] BTRFS info (device loop4): doing ref verification [ 210.537144][ T7870] BTRFS info (device loop4): force clearing of disk cache [ 210.563493][ T7870] BTRFS info (device loop4): turning off barriers [ 210.569953][ T7870] BTRFS info (device loop4): setting nodatacow, compression disabled [ 210.602926][ T7870] BTRFS info (device loop4): enabling ssd optimizations [ 210.609904][ T7870] BTRFS info (device loop4): using spread ssd allocation scheme [ 210.634210][ T7870] BTRFS info (device loop4): not using ssd optimizations [ 210.657426][ T7870] BTRFS info (device loop4): not using spread ssd allocation scheme [ 210.665515][ T7870] BTRFS info (device loop4): using free space tree [ 210.699832][ T7870] BTRFS info (device loop4): has skinny extents [ 210.853877][ T7907] chnl_net:caif_netlink_parms(): no params data found [ 210.959649][ T7870] BTRFS info (device loop4): clearing free space tree [ 210.983751][ T7870] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 211.029671][ T7932] loop1: detected capacity change from 0 to 2048 [ 211.041311][ T7870] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.100280][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.115386][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.126056][ T7907] device bridge_slave_0 entered promiscuous mode [ 211.135359][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.143222][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.152687][ T7907] device bridge_slave_1 entered promiscuous mode [ 211.158299][ T7870] BTRFS info (device loop4): creating free space tree [ 211.168289][ T7870] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 211.197754][ T7870] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.227629][ T7907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.256537][ T7932] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.277605][ T7932] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038 (0x7fffffff) [ 211.300088][ T7907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.806301][ T7907] team0: Port device team_slave_0 added [ 211.838212][ T7907] team0: Port device team_slave_1 added [ 212.032573][ T7945] loop3: detected capacity change from 0 to 256 [ 212.149112][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.175390][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.255846][ T7907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.288141][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.320971][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.377191][ T7907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.488456][ T3669] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 212.499664][ T7907] device hsr_slave_0 entered promiscuous mode [ 212.506677][ T7907] device hsr_slave_1 entered promiscuous mode [ 212.546641][ T7907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.579494][ T7907] Cannot create hsr debugfs directory [ 212.671251][ T4522] Bluetooth: hci3: command 0x0409 tx timeout [ 212.799289][ T7907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.812771][ T3669] usb 1-1: Using ep0 maxpacket: 32 [ 212.953429][ T3669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.972940][ T3669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.991394][ T3669] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 213.026231][ T3669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.053856][ T3669] usb 1-1: config 0 descriptor?? [ 213.234623][ T7970] loop4: detected capacity change from 0 to 40427 [ 213.290315][ T7970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.361271][ T7970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 213.429395][ T3579] attempt to access beyond end of device [ 213.429395][ T3579] loop4: rw=2049, want=45104, limit=40427 [ 213.585343][ T3669] kone 0003:1E7D:2CED.0024: item fetching failed at offset 2/5 [ 213.608165][ T7945] FAT-fs (loop3): Directory bread(block 64) failed [ 213.611575][ T3669] kone 0003:1E7D:2CED.0024: parse failed [ 213.627086][ T3669] kone: probe of 0003:1E7D:2CED.0024 failed with error -22 [ 213.650305][ T7945] FAT-fs (loop3): Directory bread(block 65) failed [ 213.679386][ T7945] FAT-fs (loop3): Directory bread(block 66) failed [ 213.696159][ T7945] FAT-fs (loop3): Directory bread(block 67) failed [ 213.703318][ T7945] FAT-fs (loop3): Directory bread(block 68) failed [ 213.709863][ T7945] FAT-fs (loop3): Directory bread(block 69) failed [ 213.731842][ T7945] FAT-fs (loop3): Directory bread(block 70) failed [ 213.738475][ T7945] FAT-fs (loop3): Directory bread(block 71) failed [ 213.788402][ T7945] FAT-fs (loop3): Directory bread(block 72) failed [ 213.817025][ T4528] usb 1-1: USB disconnect, device number 11 [ 213.831584][ T7945] FAT-fs (loop3): Directory bread(block 73) failed [ 213.871657][ T7980] loop4: detected capacity change from 0 to 1024 [ 214.057501][ T7982] netlink: 'syz.3.1563': attribute type 3 has an invalid length. [ 214.393297][ T7984] loop3: detected capacity change from 0 to 256 [ 214.578902][ T7907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.679746][ T7989] loop1: detected capacity change from 0 to 2048 [ 214.751483][ T4528] Bluetooth: hci3: command 0x041b tx timeout [ 214.796079][ T7989] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.812869][ T7989] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038 (0x7fffffff) [ 215.050536][ T7980] hfsplus: bad catalog entry type [ 215.099926][ T7697] hfsplus: b-tree write err: -5, ino 4 [ 215.210038][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 215.558524][ T8028] loop4: detected capacity change from 0 to 512 [ 215.619529][ T8028] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 215.637108][ T8028] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 215.650312][ T8028] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.704645][ T7984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 215.800330][ T8028] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e019, mo2=0000] [ 215.846811][ T8028] EXT4-fs (loop4): 1 truncate cleaned up [ 215.883751][ T8028] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nogrpid,jqfmt=vfsv1,resgid=0x000000000000ee01,jqfmt=vfsv1,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 215.927968][ T7697] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 215.959941][ T7697] EXT4-fs error (device loop4): ext4_release_dquot:6219: comm kworker/u4:9: Failed to release dquot type 1 [ 216.048749][ T8028] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 216.430448][ T8044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.515906][ T8046] loop1: detected capacity change from 0 to 64 [ 216.631525][ T4555] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 216.841302][ T4528] Bluetooth: hci3: command 0x040f tx timeout [ 217.051360][ T4555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.077630][ T4555] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.098017][ T4555] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.121300][ T4555] usb 5-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 217.140618][ T4555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.157287][ T4555] usb 5-1: config 0 descriptor?? [ 217.341126][ T7907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.667557][ T4555] wacom 0003:056A:0343.0025: hidraw0: USB HID v0.00 Device [HID 056a:0343] on usb-dummy_hcd.4-1/input0 [ 217.680848][ T8060] loop3: detected capacity change from 0 to 32768 [ 217.816537][ T8060] XFS (loop3): Mounting V5 Filesystem [ 217.905468][ T3865] usb 5-1: USB disconnect, device number 22 [ 217.971326][ T8060] XFS (loop3): Ending clean mount [ 217.982781][ T8060] XFS (loop3): Quotacheck needed: Please wait. [ 218.078955][ T8060] XFS (loop3): Quotacheck: Done. [ 218.164103][ T8080] netlink: 'syz.0.1604': attribute type 28 has an invalid length. [ 218.294851][ T6121] XFS (loop3): Unmounting Filesystem [ 218.325959][ T8090] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1606'. [ 218.550270][ T8096] loop4: detected capacity change from 0 to 2048 [ 218.612736][ T8100] loop1: detected capacity change from 0 to 256 [ 218.683854][ T8104] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.911563][ T4555] Bluetooth: hci3: command 0x0419 tx timeout [ 219.421386][ T4555] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 219.711619][ T4555] usb 4-1: Using ep0 maxpacket: 32 [ 219.855673][ T4555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.872912][ T4555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.899306][ T4555] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 219.916783][ T4555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.940828][ T4555] usb 4-1: config 0 descriptor?? [ 220.101429][ T8123] x_tables: ip_tables: udp match: only valid for protocol 17 [ 220.366435][ T7907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.434616][ T4555] kone 0003:1E7D:2CED.0026: item fetching failed at offset 2/5 [ 220.457079][ T4555] kone 0003:1E7D:2CED.0026: parse failed [ 220.480784][ T4555] kone: probe of 0003:1E7D:2CED.0026 failed with error -22 [ 220.535679][ T8136] loop1: detected capacity change from 0 to 8192 [ 220.648106][ T8136] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 220.657580][ T8136] REISERFS (device loop1): using ordered data mode [ 220.672880][ T8136] reiserfs: using flush barriers [ 220.694456][ T8136] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.713896][ T3669] usb 4-1: USB disconnect, device number 18 [ 220.724397][ T8136] REISERFS (device loop1): checking transaction log (loop1) [ 220.765652][ T8133] loop4: detected capacity change from 0 to 32768 [ 220.783207][ T8136] REISERFS (device loop1): Using r5 hash to sort names [ 220.800814][ T8136] reiserfs: enabling write barrier flush mode [ 220.826370][ T8136] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 220.888431][ T8133] JBD2: Ignoring recovery information on journal [ 220.935783][ T8133] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 220.989552][ T26] audit: type=1800 audit(1727971220.991:12): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1625" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 221.102334][ T3579] ocfs2: Unmounting device (7,4) on (node local) [ 221.331671][ T8145] UBIFS error (pid: 8145): cannot open "ub ", error -22 [ 221.647930][ T8162] loop1: detected capacity change from 0 to 64 [ 221.989650][ T8173] loop1: detected capacity change from 0 to 1024 [ 222.077375][ T8177] loop3: detected capacity change from 0 to 1024 [ 222.142152][ T4859] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 222.187523][ T8177] hfsplus: bad catalog entry type [ 222.315581][ T8153] loop4: detected capacity change from 0 to 32768 [ 222.378234][ T8153] XFS (loop4): Mounting V5 Filesystem [ 222.436514][ T8153] XFS (loop4): Ending clean mount [ 222.490164][ T3579] XFS (loop4): Unmounting Filesystem [ 222.798089][ T4859] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=9e.b6 [ 222.818840][ T4859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.844005][ T4859] usb 1-1: Product: syz [ 222.848209][ T4859] usb 1-1: Manufacturer: syz [ 222.874268][ T4859] usb 1-1: SerialNumber: syz [ 222.885342][ T4859] usb 1-1: config 0 descriptor?? [ 222.947898][ T4859] gspca_main: spca500-2.14.0 probing 041e:400a [ 223.191100][ T3669] usb 1-1: USB disconnect, device number 12 [ 223.297494][ T8173] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,grpquota,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 223.427195][ T7907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.509810][ T7907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.555146][ T7907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.598756][ T7907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.676440][ T8202] loop3: detected capacity change from 0 to 2048 [ 223.908525][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.942060][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.951702][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.995174][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.034724][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.044139][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.067222][ T8218] loop1: detected capacity change from 0 to 4096 [ 224.071251][ T2674] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.080631][ T2674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.124574][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.181508][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.190601][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.209629][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.216781][ T3696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.242912][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.277958][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.304476][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.330503][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.350653][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.359486][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.377478][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.387780][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.413789][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.444489][ T7907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.463836][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.481051][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 224.499225][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.509528][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.564338][ T8218] ntfs: volume version 3.1. [ 224.812731][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 224.828817][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.831524][ T3617] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 224.859080][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.893091][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.963593][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.983660][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.038765][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.057494][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.072192][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.081078][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.111826][ T7907] device veth0_vlan entered promiscuous mode [ 225.149355][ T7907] device veth1_vlan entered promiscuous mode [ 225.174688][ T3617] usb 5-1: Using ep0 maxpacket: 32 [ 225.268171][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.280805][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.300178][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.312468][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.334426][ T7907] device veth0_macvtap entered promiscuous mode [ 225.343185][ T3617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.354203][ T3617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.362141][ T7907] device veth1_macvtap entered promiscuous mode [ 225.388153][ T3617] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 225.400083][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.417256][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.428622][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.447834][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.448096][ T3617] usb 5-1: config 0 descriptor?? [ 225.461904][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.483542][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.500809][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.514814][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.531269][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.549655][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.564483][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.576182][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.586630][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.598726][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.622357][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.639465][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.658756][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.697692][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.718810][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.749550][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.768189][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.816521][ T8202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.833840][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.876034][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.891746][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.904221][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.915290][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.925257][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.936155][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.961196][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.979192][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.984845][ T3617] kone 0003:1E7D:2CED.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 225.991918][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.032165][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.065996][ T1190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.104239][ T7907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.128982][ T7907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.149610][ T7907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.159819][ T7907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.185732][ T3617] kone 0003:1E7D:2CED.0027: couldn't init struct kone_device [ 226.193313][ T3617] kone 0003:1E7D:2CED.0027: couldn't install mouse [ 226.209851][ T3617] kone: probe of 0003:1E7D:2CED.0027 failed with error -5 [ 226.289417][ T3617] usb 5-1: USB disconnect, device number 23 [ 226.315090][ T3696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.352626][ T3696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.398456][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.407800][ T2674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.427314][ T2674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.461010][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.685496][ T8270] loop2: detected capacity change from 0 to 1024 [ 226.802815][ T8270] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.125759][ T8284] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1689'. [ 227.431272][ T8299] loop4: detected capacity change from 0 to 1024 [ 228.221963][ T8301] loop2: detected capacity change from 0 to 32768 [ 228.275166][ T144] device hsr_slave_0 left promiscuous mode [ 228.282007][ T144] device hsr_slave_1 left promiscuous mode [ 228.296885][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.315306][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.323673][ T8301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1699 (8301) [ 228.340241][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.362826][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.392261][ T144] device bridge_slave_1 left promiscuous mode [ 228.407541][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.427607][ T144] device bridge_slave_0 left promiscuous mode [ 228.434210][ T8301] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 228.453067][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.460901][ T8301] BTRFS info (device loop2): using free space tree [ 228.493865][ T8301] BTRFS info (device loop2): has skinny extents [ 228.508499][ T144] device veth1_macvtap left promiscuous mode [ 228.526530][ T144] device veth0_macvtap left promiscuous mode [ 228.569258][ T144] device veth1_vlan left promiscuous mode [ 228.576409][ T8305] loop1: detected capacity change from 0 to 40427 [ 228.576530][ T144] device veth0_vlan left promiscuous mode [ 228.733093][ T8301] BTRFS info (device loop2): enabling ssd optimizations [ 229.142330][ T8299] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 229.283636][ T8299] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 229.898214][ T144] team0 (unregistering): Port device team_slave_1 removed [ 229.937710][ T144] team0 (unregistering): Port device team_slave_0 removed [ 229.983093][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.046451][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.173127][ T8367] loop2: detected capacity change from 0 to 256 [ 230.240605][ T8305] F2FS-fs (loop1): invalid crc value [ 230.314125][ T8305] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.348021][ T144] bond0 (unregistering): Released all slaves [ 230.417122][ T8305] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 230.472086][ T8305] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 230.554699][ T8305] F2FS-fs (loop1): user quota file already specified [ 231.875011][ T8391] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1730'. [ 231.908730][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1730'. [ 231.945649][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1730'. [ 231.974166][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1730'. [ 232.120813][ T26] audit: type=1326 audit(1727971232.121:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8410 comm="syz.0.1740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5db14ff9 code=0x0 [ 232.174656][ T8417] netlink: 'syz.4.1744': attribute type 2 has an invalid length. [ 232.228804][ T8422] loop4: detected capacity change from 0 to 256 [ 232.274451][ T8422] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 232.275526][ T8424] loop1: detected capacity change from 0 to 164 [ 232.384586][ T8424] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 232.394575][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.401623][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.410350][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.416803][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.426353][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.432792][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.443288][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.449741][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.469690][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 232.476187][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 232.485344][ T3614] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.606270][ T8428] netlink: 'syz.1.1749': attribute type 2 has an invalid length. [ 232.784388][ T8432] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 232.901512][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.928088][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.957099][ T3614] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 232.972753][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.989406][ T3614] usb 4-1: config 0 descriptor?? [ 233.097198][ T26] audit: type=1326 audit(1727971233.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.1758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a12e07ff9 code=0x0 [ 233.514162][ T3614] uclogic 0003:28BD:0074.0028: interface is invalid, ignoring [ 233.751724][ T3614] usb 4-1: USB disconnect, device number 19 [ 234.133223][ T3617] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 234.151737][ T8476] loop1: detected capacity change from 0 to 8 [ 234.512744][ T3617] usb 3-1: Using ep0 maxpacket: 16 [ 234.518191][ T8476] SQUASHFS error: Unable to read directory block [629:46] [ 234.552956][ T8489] loop3: detected capacity change from 0 to 16 [ 234.720571][ T8489] erofs: (device loop3): mounted with root inode @ nid 36. [ 234.796759][ T8496] loop1: detected capacity change from 0 to 1024 [ 234.866768][ T8496] EXT4-fs (loop1): Ignoring removed bh option [ 234.956741][ T8496] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,bh,init_itable=0x0000000000000001,usrquota,init_itable,,errors=continue. Quota mode: writeback. [ 235.067856][ T3617] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 235.091199][ T3617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.099311][ T3617] usb 3-1: Product: syz [ 235.133452][ T3617] usb 3-1: Manufacturer: syz [ 235.138090][ T3617] usb 3-1: SerialNumber: syz [ 235.190785][ T3617] usb 3-1: config 0 descriptor?? [ 235.261196][ T8519] loop4: detected capacity change from 0 to 8 [ 235.269140][ T3617] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 235.434442][ T8519] SQUASHFS error: xz decompression failed, data probably corrupt [ 235.443484][ T8519] SQUASHFS error: Failed to read block 0x60: -5 [ 235.462886][ T8519] SQUASHFS error: xz decompression failed, data probably corrupt [ 235.477815][ T8519] SQUASHFS error: Failed to read block 0x60: -5 [ 235.486224][ T26] audit: type=1800 audit(1727971235.491:15): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1791" name="file0" dev="loop4" ino=1 res=0 errno=0 [ 235.713335][ T3865] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 235.721089][ T3617] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 235.729865][ T3617] visor: probe of 3-1:0.0 failed with error -5 [ 235.968527][ T3857] usb 3-1: USB disconnect, device number 17 [ 236.208675][ T3865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.227188][ T3865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.254285][ T3865] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 236.285786][ T3865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.315504][ T3865] usb 2-1: config 0 descriptor?? [ 236.411360][ T3616] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.807490][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 236.816688][ T3865] hid-retrode 0003:0403:97C1.0029: unbalanced collection at end of report description [ 236.841200][ T3616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 236.847049][ T3865] hid-retrode: probe of 0003:0403:97C1.0029 failed with error -22 [ 236.888153][ T3616] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.935391][ T3616] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.974059][ T3616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.008327][ T3616] usb 1-1: config 0 descriptor?? [ 237.051533][ T8547] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 237.164276][ T8553] loop4: detected capacity change from 0 to 32768 [ 237.183254][ T4555] usb 2-1: USB disconnect, device number 16 [ 237.226753][ T8553] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1807 (8553) [ 237.320083][ T8553] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 237.360908][ T8553] BTRFS info (device loop4): setting nodatacow, compression disabled [ 237.389726][ T8553] BTRFS info (device loop4): force clearing of disk cache [ 237.421236][ T8553] BTRFS info (device loop4): setting datacow [ 237.439533][ T8553] BTRFS info (device loop4): doing ref verification [ 237.457801][ T8553] BTRFS info (device loop4): turning off barriers [ 237.478184][ T8553] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 237.508434][ T8553] BTRFS info (device loop4): use zstd compression, level 3 [ 237.528829][ T8553] BTRFS info (device loop4): enabling ssd optimizations [ 237.538044][ T3616] plantronics 0003:047F:FFFF.002A: unknown main item tag 0xd [ 237.551197][ T8553] BTRFS info (device loop4): using spread ssd allocation scheme [ 237.561081][ T3616] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 237.583282][ T8553] BTRFS info (device loop4): not using ssd optimizations [ 237.590345][ T8553] BTRFS info (device loop4): not using spread ssd allocation scheme [ 237.617118][ T3616] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 237.640207][ T8553] BTRFS info (device loop4): using free space tree [ 237.659917][ T8553] BTRFS info (device loop4): has skinny extents [ 237.818511][ T4555] usb 1-1: USB disconnect, device number 13 [ 238.057355][ T8553] BTRFS info (device loop4): clearing free space tree [ 238.071436][ T8553] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.101814][ T8553] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.155051][ T8555] loop2: detected capacity change from 0 to 65536 [ 238.171475][ T8553] BTRFS info (device loop4): creating free space tree [ 238.174759][ T8555] XFS: noikeep mount option is deprecated. [ 238.179117][ T8553] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.223177][ T8553] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.379206][ T8555] XFS (loop2): Mounting V5 Filesystem [ 238.385937][ T8553] BTRFS error (device loop4): balance: invalid convert metadata profile raid10 [ 238.449452][ T8576] loop1: detected capacity change from 0 to 32768 [ 238.546096][ T8598] netlink: 'syz.0.1815': attribute type 3 has an invalid length. [ 238.588409][ T8555] XFS (loop2): Ending clean mount [ 238.691279][ T3865] XFS (loop2): Metadata CRC error detected at xfs_agi_read_verify+0x1df/0x2a0, xfs_agi block 0x8002 [ 238.775913][ T3865] XFS (loop2): Unmount and run xfs_repair [ 238.810922][ T3865] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 238.850377][ T3865] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 238.867845][ T8576] JBD2: Ignoring recovery information on journal [ 238.890706][ T3865] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 238.918178][ T3865] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 238.959964][ T3865] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 238.979832][ T3865] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 239.001807][ T8576] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 239.038702][ T3865] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 239.059823][ T3865] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 239.085873][ T3865] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 239.097335][ T26] audit: type=1800 audit(1727971239.101:16): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1811" name="file1" dev="loop1" ino=16946 res=0 errno=0 [ 239.118962][ T8555] XFS (loop2): metadata I/O error in "xfs_read_agi+0x265/0x550" at daddr 0x8002 len 1 error 74 [ 239.164928][ T7907] XFS (loop2): Unmounting Filesystem [ 239.337301][ T3569] ocfs2: Unmounting device (7,1) on (node local) [ 239.458511][ T8612] (syz.3.1823,8612,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 239.502677][ T8612] (syz.3.1823,8612,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 239.958658][ T8633] loop3: detected capacity change from 0 to 256 [ 239.997108][ T8633] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 240.571332][ T3615] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.841539][ T3615] usb 4-1: Using ep0 maxpacket: 32 [ 241.162665][ T3615] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=17.22 [ 241.191191][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.203947][ T3615] usb 4-1: Product: syz [ 241.208136][ T3615] usb 4-1: Manufacturer: syz [ 241.223215][ T8664] loop1: detected capacity change from 0 to 64 [ 241.233235][ T3615] usb 4-1: SerialNumber: syz [ 241.244288][ T3615] usb 4-1: config 0 descriptor?? [ 241.313864][ T26] audit: type=1800 audit(1727971241.321:17): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1845" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 241.351284][ T3615] usb 4-1: selecting invalid altsetting 3 [ 241.378155][ T3615] comedi comedi0: could not set alternate setting 3 in high speed [ 241.415666][ T3615] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 241.457526][ T3615] usbdux: probe of 4-1:0.0 failed with error -22 [ 241.520096][ T3865] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.525378][ T3615] usb 4-1: USB disconnect, device number 20 [ 241.810844][ T8656] loop4: detected capacity change from 0 to 40427 [ 241.842964][ T3865] usb 1-1: Using ep0 maxpacket: 16 [ 241.869296][ T8656] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 241.901719][ T8656] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 241.928872][ T8656] F2FS-fs (loop4): invalid crc value [ 241.943636][ T8656] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 241.969632][ T8656] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.992745][ T3865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.003725][ T3865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.025560][ T8656] F2FS-fs (loop4): recover fsync data on readonly fs [ 242.026493][ T3865] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 242.035502][ T8656] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 242.052755][ T3614] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 242.057246][ T3865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.065645][ T8656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.107581][ T3865] usb 1-1: config 0 descriptor?? [ 242.368128][ T3616] Bluetooth: hci1: command 0x0406 tx timeout [ 242.451677][ T3614] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 242.485804][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 242.507498][ T26] audit: type=1326 audit(1727971242.511:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.3.1854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1c62c7ff9 code=0x0 [ 242.540041][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59357, setting to 1024 [ 242.558758][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 242.627208][ T3865] wacom 0003:056A:032F.002B: unknown main item tag 0x0 [ 242.634286][ T3865] wacom 0003:056A:032F.002B: unknown main item tag 0x0 [ 242.675101][ T3865] wacom 0003:056A:032F.002B: unknown main item tag 0x0 [ 242.695271][ T3865] wacom 0003:056A:032F.002B: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.0-1/input0 [ 242.751839][ T3614] usb 2-1: New USB device found, idVendor=0f11, idProduct=2051, bcdDevice=79.c5 [ 242.769858][ T3614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.787465][ T3614] usb 2-1: Product: syz [ 242.792253][ T3614] usb 2-1: Manufacturer: syz [ 242.812727][ T3614] usb 2-1: SerialNumber: syz [ 242.838925][ T3614] usb 2-1: config 0 descriptor?? [ 242.891783][ T8670] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 242.905618][ T3865] usb 1-1: USB disconnect, device number 14 [ 242.938018][ T3614] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 243.171621][ T3614] usb 2-1: USB disconnect, device number 17 [ 243.210745][ T3614] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 243.228459][ T8686] loop2: detected capacity change from 0 to 32768 [ 243.329136][ T8686] JBD2: Ignoring recovery information on journal [ 243.403346][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 243.509086][ T8686] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 243.640459][ T8686] (syz.2.1856,8686,1):ocfs2_group_add:487 ERROR: The disk is too old and small. Force to do offline resize. [ 243.685431][ T7907] ocfs2: Unmounting device (7,2) on (node local) [ 244.476173][ T8738] loop2: detected capacity change from 0 to 256 [ 244.573503][ T8738] exfat: Deprecated parameter 'utf8' [ 244.702783][ T8748] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 244.722996][ T8748] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1884'. [ 244.744017][ T8738] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 244.776447][ T3857] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 244.791352][ T3614] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.086921][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1891'. [ 245.096124][ T3614] usb 2-1: Using ep0 maxpacket: 16 [ 245.137740][ T3857] usb 5-1: Using ep0 maxpacket: 16 [ 245.241657][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.263353][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.299632][ T3857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.309244][ T3614] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.314051][ T8769] loop3: detected capacity change from 0 to 1024 [ 245.329689][ T3857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.347964][ T3614] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 245.355753][ T3857] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 245.366795][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.374614][ T3857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.387122][ T3614] usb 2-1: config 0 descriptor?? [ 245.418773][ T3857] usb 5-1: config 0 descriptor?? [ 245.900032][ T3614] ryos 0003:1E7D:31CE.002C: unbalanced collection at end of report description [ 245.919713][ T3614] ryos 0003:1E7D:31CE.002C: parse failed [ 245.919756][ T3857] uclogic 0003:28BD:0071.002D: interface is invalid, ignoring [ 245.939553][ T3614] ryos: probe of 0003:1E7D:31CE.002C failed with error -22 [ 246.152751][ T3614] usb 2-1: USB disconnect, device number 18 [ 246.183300][ T3615] usb 5-1: USB disconnect, device number 24 [ 246.765507][ T8801] loop4: detected capacity change from 0 to 256 [ 246.796034][ T8769] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 246.933420][ T8769] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 246.950782][ T8804] loop1: detected capacity change from 0 to 4096 [ 247.142005][ T8804] ntfs: (device loop1): parse_options(): NLS character set tefault not found. Using previous one cp864. [ 247.191369][ T8804] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 247.214691][ T8804] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 247.241067][ T8804] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 247.278267][ T8804] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 247.318750][ T8820] loop4: detected capacity change from 0 to 512 [ 247.359572][ T8804] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 247.379934][ T8804] ntfs: volume version 3.1. [ 247.387040][ T8804] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 247.408943][ T8804] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 247.430428][ T8804] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 247.469144][ T8804] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 249.035206][ T8820] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 249.064096][ T8820] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 249.097580][ T8820] System zones: 0-2, 18-18, 34-35 [ 249.183221][ T8820] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 249.288281][ T8820] EXT4-fs (loop4): shut down requested (0) [ 249.559074][ T8824] loop3: detected capacity change from 0 to 32768 [ 249.667711][ T8842] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1924'. [ 249.853144][ T8848] usb usb1: check_ctrlrecip: process 8848 (syz.4.1926) requesting ep 01 but needs 81 [ 250.051700][ T8859] loop2: detected capacity change from 0 to 1024 [ 250.240627][ T8870] process 'syz.0.1938' launched './file2' with NULL argv: empty string added [ 250.841199][ T8866] loop4: detected capacity change from 0 to 32768 [ 250.946311][ T8866] XFS (loop4): Mounting V5 Filesystem [ 251.065744][ T8866] XFS (loop4): Ending clean mount [ 251.246419][ T8892] net_ratelimit: 1990 callbacks suppressed [ 251.246438][ T8892] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 251.304170][ T3579] XFS (loop4): Unmounting Filesystem [ 251.447662][ T8897] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1947'. [ 251.530869][ T8824] XFS (loop3): Mounting V5 Filesystem [ 251.704983][ T8824] XFS (loop3): Ending clean mount [ 251.707835][ T8824] XFS (loop3): Quotacheck needed: Please wait. [ 251.829202][ T8824] XFS (loop3): Quotacheck: Done. [ 251.900091][ T6121] XFS (loop3): Unmounting Filesystem [ 252.058181][ T8921] program syz.0.1955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.254187][ T8932] loop1: detected capacity change from 0 to 128 [ 252.300373][ T8932] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 252.429745][ T8934] loop2: detected capacity change from 0 to 4096 [ 252.553124][ T8938] tipc: Enabling of bearer rejected, failed to enable media [ 252.653766][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1966'. [ 252.789501][ T8950] loop1: detected capacity change from 0 to 190 [ 252.928123][ T8958] program syz.3.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.116160][ T8966] loop3: detected capacity change from 0 to 164 [ 253.158746][ T8966] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 253.849417][ T8996] loop4: detected capacity change from 0 to 2048 [ 253.850616][ T8934] __ntfs_warning: 7 callbacks suppressed [ 253.850630][ T8934] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 253.907161][ T8934] ntfs: volume version 3.1. [ 253.976826][ T8996] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.050390][ T6591] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 254.264837][ T8950] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 254.299625][ T8950] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 254.325874][ T8950] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 254.412627][ T8950] ntfs: volume version 0.0. [ 254.417171][ T8950] ntfs: (device loop1): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 254.451585][ T6591] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.459728][ T6591] usb 4-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 254.492467][ T8950] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 254.500720][ T6591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.500751][ T8950] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 254.537919][ T9017] loop4: detected capacity change from 0 to 1024 [ 254.542277][ T6591] usb 4-1: config 0 descriptor?? [ 254.596982][ T8950] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 254.636198][ T8950] attempt to access beyond end of device [ 254.636198][ T8950] loop1: rw=0, want=560, limit=190 [ 254.663658][ T8950] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x45. [ 254.674372][ T8950] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 254.718904][ T9019] loop2: detected capacity change from 0 to 4096 [ 254.808514][ T9019] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 255.035340][ T6591] logitech 0003:046D:C283.002E: hidraw0: USB HID v1.01 Device [HID 046d:c283] on usb-dummy_hcd.3-1/input0 [ 255.065472][ T6591] logitech 0003:046D:C283.002E: no inputs found [ 255.087803][ T9023] tipc: Started in network mode [ 255.099967][ T9023] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 255.113384][ T9023] tipc: Enabled bearer , priority 0 [ 255.308424][ T3617] usb 4-1: USB disconnect, device number 21 [ 255.644784][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.651085][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.974481][ T9066] device gre0 entered promiscuous mode [ 256.012247][ T9066] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 256.146730][ T6591] tipc: Node number set to 4269801642 [ 256.383463][ T9081] program syz.1.2002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.423557][ T9067] loop2: detected capacity change from 0 to 8192 [ 256.541827][ T9067] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 256.561572][ T9067] REISERFS (device loop2): using ordered data mode [ 256.568100][ T9067] reiserfs: using flush barriers [ 256.602364][ T9067] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.699190][ T9094] loop1: detected capacity change from 0 to 24 [ 256.721697][ T9067] REISERFS (device loop2): checking transaction log (loop2) [ 256.795727][ T9096] loop3: detected capacity change from 0 to 512 [ 256.851900][ T9094] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 256.901326][ T9094] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 257.047902][ T9096] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.087889][ T9096] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038 (0x7fffffff) [ 257.111282][ T9067] REISERFS (device loop2): Using tea hash to sort names [ 257.118530][ T9067] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 257.141506][ T9067] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 257.520807][ T9105] loop3: detected capacity change from 0 to 4096 [ 257.619929][ T9087] loop4: detected capacity change from 0 to 32768 [ 257.640852][ T9105] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 257.712542][ T9087] XFS: ikeep mount option is deprecated. [ 257.718259][ T9087] XFS: ikeep mount option is deprecated. [ 257.743362][ T9105] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 257.881694][ T9105] EXT4-fs error (device loop3): ext4_empty_dir:3152: inode #12: block 80: comm syz.3.2041: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 257.949475][ T9087] XFS (loop4): Mounting V5 Filesystem [ 257.993722][ T9105] EXT4-fs warning (device loop3): ext4_empty_dir:3154: inode #12: comm syz.3.2041: directory missing '..' [ 258.028260][ T9131] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2050'. [ 258.126239][ T9133] loop2: detected capacity change from 0 to 1024 [ 258.346749][ T9133] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 258.511563][ T9087] XFS (loop4): Ending clean mount [ 258.855686][ T3579] XFS (loop4): Unmounting Filesystem [ 259.518601][ T9164] loop1: detected capacity change from 0 to 4096 [ 259.597732][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 260.116619][ T9197] loop4: detected capacity change from 0 to 24 [ 260.281519][ T4563] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 260.433838][ T9203] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2082'. [ 260.551432][ T4563] usb 4-1: Using ep0 maxpacket: 16 [ 260.691644][ T4563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.728701][ T4563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.745223][ T4563] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 260.771332][ T4563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.797881][ T4563] usb 4-1: config 0 descriptor?? [ 260.924698][ T9164] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 261.150590][ T9164] ntfs3: loop1: ino=5, "/" directory corrupted [ 261.303859][ T4563] apple 0003:05AC:026C.002F: unknown main item tag 0x0 [ 261.318295][ T4563] apple 0003:05AC:026C.002F: unknown main item tag 0x0 [ 261.358833][ T4563] apple 0003:05AC:026C.002F: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.3-1/input0 [ 261.534810][ T3615] usb 4-1: USB disconnect, device number 22 [ 262.126986][ T9259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2111'. [ 262.149888][ T9259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2111'. [ 262.153269][ T9256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2110'. [ 262.641557][ T9283] raw_sendmsg: syz.3.2122 forgot to set AF_INET. Fix it! [ 263.397539][ T9272] loop2: detected capacity change from 0 to 32768 [ 263.805848][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2141'. [ 264.155740][ T9311] loop1: detected capacity change from 0 to 32768 [ 264.265263][ T9343] loop3: detected capacity change from 0 to 256 [ 264.282455][ T9311] (syz.1.2134,9311,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.317037][ T9311] (syz.1.2134,9311,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 264.376768][ T6591] Bluetooth: hci0: command 0x0401 tx timeout [ 264.439421][ T9311] JBD2: Ignoring recovery information on journal [ 264.510156][ T9354] loop4: detected capacity change from 0 to 64 [ 264.552955][ T9311] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 264.783944][ T3569] ocfs2: Unmounting device (7,1) on (node local) [ 265.442748][ T9363] loop4: detected capacity change from 0 to 32768 [ 265.660146][ T9363] XFS (loop4): Mounting V5 Filesystem [ 265.685680][ T9390] loop1: detected capacity change from 0 to 32768 [ 265.706143][ T9363] XFS (loop4): Ending clean mount [ 265.769796][ T3579] XFS (loop4): Unmounting Filesystem [ 266.748261][ T9417] loop4: detected capacity change from 0 to 32768 [ 266.907938][ T9417] JBD2: Ignoring recovery information on journal [ 267.077231][ T9417] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 267.263756][ T3579] ocfs2: Unmounting device (7,4) on (node local) [ 267.788940][ T9440] loop2: detected capacity change from 0 to 2048 [ 268.032965][ T9432] loop3: detected capacity change from 0 to 32768 [ 268.095561][ T9432] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2185 (9432) [ 268.160560][ T9432] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 268.171792][ T9432] BTRFS info (device loop3): setting nodatacow, compression disabled [ 268.180266][ T9432] BTRFS info (device loop3): setting datacow [ 268.194375][ T9432] BTRFS info (device loop3): doing ref verification [ 268.208117][ T9432] BTRFS info (device loop3): force clearing of disk cache [ 268.218906][ T9432] BTRFS info (device loop3): turning off barriers [ 268.229896][ T9432] BTRFS info (device loop3): enabling ssd optimizations [ 268.240591][ T9432] BTRFS info (device loop3): using spread ssd allocation scheme [ 268.252061][ T9432] BTRFS info (device loop3): not using ssd optimizations [ 268.259172][ T9432] BTRFS info (device loop3): not using spread ssd allocation scheme [ 268.272820][ T9432] BTRFS info (device loop3): using free space tree [ 268.279490][ T9432] BTRFS info (device loop3): has skinny extents [ 268.320176][ T9432] BTRFS info (device loop3): clearing free space tree [ 268.329147][ T9432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 268.338852][ T9432] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 268.366757][ T9432] BTRFS info (device loop3): creating free space tree [ 268.374964][ T9432] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 268.384810][ T9432] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.253043][ T9486] vivid-000: disconnect [ 269.270813][ T9485] vivid-000: reconnect [ 269.304016][ T9440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.913764][ T3865] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 270.008533][ T9501] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 270.092314][ T9501] hfsplus: unable to find HFS+ superblock [ 270.399841][ T9483] loop3: detected capacity change from 0 to 32768 [ 270.478881][ T3865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.501057][ T9483] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2199 (9483) [ 270.501461][ T3865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.541805][ T3865] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 270.550910][ T3865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.622677][ T3865] usb 5-1: config 0 descriptor?? [ 270.655963][ T9483] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 270.711261][ T9483] BTRFS info (device loop3): using free space tree [ 270.734456][ T9492] loop1: detected capacity change from 0 to 40427 [ 270.748191][ T9483] BTRFS info (device loop3): has skinny extents [ 270.840390][ T9492] F2FS-fs (loop1): invalid crc value [ 270.943279][ T9505] loop2: detected capacity change from 0 to 32768 [ 270.965746][ T9492] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.077032][ T9492] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 271.102205][ T9483] BTRFS info (device loop3): enabling ssd optimizations [ 271.122974][ T9492] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 271.134825][ T9530] program syz.0.2211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.157967][ T3865] corsair-psu 0003:1B1C:1C0D.0030: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 271.367428][ T3865] corsair-psu 0003:1B1C:1C0D.0030: unable to initialize device (-71) [ 271.417951][ T3865] corsair-psu: probe of 0003:1B1C:1C0D.0030 failed with error -71 [ 271.480263][ T3865] usb 5-1: USB disconnect, device number 25 [ 272.031898][ T7697] bond0: (slave bond_slave_0): interface is now down [ 272.039603][ T7697] bond0: (slave bond_slave_1): interface is now down [ 272.090456][ T7697] bond0: now running without any active interface! [ 272.226830][ T9557] loop4: detected capacity change from 0 to 512 [ 272.410860][ T9557] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,journal_ioprio=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 272.436299][ T9557] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038 (0x7fffffff) [ 272.450502][ T9566] loop3: detected capacity change from 0 to 1024 [ 272.594485][ T9566] hfsplus: bad catalog entry type [ 272.629653][ T9] hfsplus: b-tree write err: -5, ino 4 [ 272.715226][ T9568] Zero length message leads to an empty skb [ 273.366072][ T9584] loop4: detected capacity change from 0 to 2048 [ 273.507095][ T9584] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.533774][ T9584] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038 (0x7fffffff) [ 273.770030][ T9576] loop3: detected capacity change from 0 to 32768 [ 273.926369][ T9576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2232 (9576) [ 274.021640][ T9603] loop1: detected capacity change from 0 to 512 [ 274.051175][ T9576] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 274.059849][ T9576] BTRFS info (device loop3): using free space tree [ 274.092505][ T9576] BTRFS info (device loop3): has skinny extents [ 274.125945][ T9609] loop4: detected capacity change from 0 to 256 [ 274.301505][ T9603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.349043][ T9609] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 274.356828][ T9603] ext4 filesystem being mounted at /451/bus supports timestamps until 2038 (0x7fffffff) [ 274.502385][ T9603] EXT4-fs (loop1): shut down requested (2) [ 274.527518][ T9635] overlayfs: conflicting lowerdir path [ 274.584914][ T9637] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 274.603466][ T9576] BTRFS info (device loop3): enabling ssd optimizations [ 274.997989][ T1190] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 275.731972][ T9642] loop2: detected capacity change from 0 to 32768 [ 275.814092][ T9642] JBD2: Ignoring recovery information on journal [ 275.852065][ T9667] netlink: 'syz.3.2263': attribute type 1 has an invalid length. [ 275.911363][ T4556] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 276.031445][ T9642] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 276.308035][ T4556] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 276.330033][ T4556] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.380820][ T7907] ocfs2: Unmounting device (7,2) on (node local) [ 276.465362][ T4556] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.494989][ T4556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.521464][ T4556] usb 5-1: SerialNumber: syz [ 276.541632][ T9652] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 276.778090][ T9652] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 276.828150][ T9677] loop3: detected capacity change from 0 to 40427 [ 277.319474][ T4556] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 277.586359][ T3857] usb 5-1: USB disconnect, device number 26 [ 277.645623][ T3617] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 277.980391][ T3617] usb 2-1: Using ep0 maxpacket: 8 [ 278.158453][ T9720] netlink: 'syz.4.2287': attribute type 12 has an invalid length. [ 278.362220][ T9677] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 278.369216][ T9677] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 278.393272][ T3617] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 278.407551][ T3617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.428311][ T3617] usb 2-1: Product: syz [ 278.432725][ T3617] usb 2-1: Manufacturer: syz [ 278.437336][ T3617] usb 2-1: SerialNumber: syz [ 278.478423][ T3617] usb 2-1: config 0 descriptor?? [ 278.504587][ T9677] F2FS-fs (loop3): invalid crc value [ 278.630730][ T9677] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.785521][ T3617] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.831760][ T9677] F2FS-fs (loop3): Start checkpoint disabled! [ 278.858665][ T9740] loop4: detected capacity change from 0 to 4096 [ 278.911087][ T9677] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 278.952103][ T9677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 279.015687][ T9740] ntfs: volume version 3.1. [ 279.175291][ T7697] attempt to access beyond end of device [ 279.175291][ T7697] loop3: rw=2049, want=40992, limit=40427 [ 279.350709][ T3617] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 279.371478][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 279.388957][ T3617] usb 2-1: USB disconnect, device number 19 [ 279.693582][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 279.762294][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 279.810446][ T23] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 279.829017][ T23] usb 3-1: config 0 has no interface number 0 [ 279.845977][ T23] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.882001][ T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 279.922259][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.947382][ T23] usb 3-1: config 0 descriptor?? [ 280.083556][ T9762] loop3: detected capacity change from 0 to 8192 [ 280.132456][ T9762] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 280.156138][ T9762] REISERFS (device loop3): using ordered data mode [ 280.181419][ T9762] reiserfs: using flush barriers [ 280.213532][ T9762] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 280.260750][ T9762] REISERFS (device loop3): checking transaction log (loop3) [ 280.280529][ T9762] REISERFS (device loop3): Using r5 hash to sort names [ 280.309772][ T9762] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 280.344697][ T9762] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 280.370130][ T3857] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 280.469913][ T144] device hsr_slave_0 left promiscuous mode [ 280.489231][ T23] uclogic 0003:5543:0522.0031: unknown main item tag 0x0 [ 280.510617][ T23] uclogic 0003:5543:0522.0031: unknown main item tag 0x0 [ 280.526148][ T23] uclogic 0003:5543:0522.0031: unknown main item tag 0x0 [ 280.536904][ T23] uclogic 0003:5543:0522.0031: unknown main item tag 0x0 [ 280.549665][ T23] uclogic 0003:5543:0522.0031: unknown main item tag 0x0 [ 280.566861][ T23] uclogic 0003:5543:0522.0031: No inputs registered, leaving [ 280.577723][ T23] uclogic 0003:5543:0522.0031: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input2 [ 280.613310][ T144] device hsr_slave_1 left promiscuous mode [ 280.650088][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.662125][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.670518][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.693791][ T3857] usb 2-1: Using ep0 maxpacket: 32 [ 280.716098][ T23] usb 3-1: USB disconnect, device number 18 [ 280.722308][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.740529][ T144] device bridge_slave_1 left promiscuous mode [ 280.748770][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.767600][ T144] device bridge_slave_0 left promiscuous mode [ 280.830666][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.859671][ T3857] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 280.961779][ T144] device veth1_macvtap left promiscuous mode [ 280.967866][ T144] device veth0_macvtap left promiscuous mode [ 280.974009][ T144] device veth1_vlan left promiscuous mode [ 280.979832][ T144] device veth0_vlan left promiscuous mode [ 281.073979][ T3857] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 281.083215][ T3857] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 281.127067][ T3857] usb 2-1: Product: syz [ 281.147577][ T3857] usb 2-1: Manufacturer: syz [ 281.157149][ T3857] usb 2-1: SerialNumber: syz [ 281.187814][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 281.187831][ T26] audit: type=1326 audit(1727975376.172:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9782 comm="syz.3.2315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1c62c7ff9 code=0x0 [ 281.250475][ T3857] usb 2-1: config 0 descriptor?? [ 281.292892][ T9764] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 281.630816][ T144] team0 (unregistering): Port device team_slave_1 removed [ 281.642597][ T1078] usb 2-1: USB disconnect, device number 20 [ 281.680023][ T144] team0 (unregistering): Port device team_slave_0 removed [ 281.699570][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.720004][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.863326][ T144] bond0 (unregistering): Released all slaves [ 283.105838][ T9800] loop3: detected capacity change from 0 to 32768 [ 284.301458][ T9781] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 284.316396][ T9807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2325'. [ 284.384351][ T9800] XFS: ikeep mount option is deprecated. [ 284.384384][ T9814] loop4: detected capacity change from 0 to 512 [ 284.458094][ T26] audit: type=1326 audit(1727975379.452:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.1.2329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a12e07ff9 code=0x0 [ 284.578307][ T9800] XFS (loop3): Mounting V5 Filesystem [ 284.680081][ T9814] EXT4-fs (loop4): 1 orphan inode deleted [ 284.718068][ T9814] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.729560][ T9800] XFS (loop3): Ending clean mount [ 284.760759][ T9800] XFS (loop3): Quotacheck needed: Please wait. [ 284.785658][ T9814] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038 (0x7fffffff) [ 285.082232][ T9800] XFS (loop3): Quotacheck: Done. [ 285.386335][ T6121] XFS (loop3): Unmounting Filesystem [ 286.127836][ T9860] loop2: detected capacity change from 0 to 512 [ 286.230664][ T9866] loop3: detected capacity change from 0 to 2048 [ 286.244024][ T9860] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.272992][ T9869] loop1: detected capacity change from 0 to 256 [ 286.299274][ T9860] EXT4-fs (loop2): orphan cleanup on readonly fs [ 286.316054][ T9866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.343603][ T9860] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 286.407666][ T9869] FAT-fs (loop1): Directory bread(block 64) failed [ 286.455241][ T9869] FAT-fs (loop1): Directory bread(block 65) failed [ 286.482781][ T9869] FAT-fs (loop1): Directory bread(block 66) failed [ 286.511785][ T9860] Quota error (device loop2): write_blk: dquota write failed [ 286.520916][ T6121] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 286.541947][ T9860] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 286.547230][ T9869] FAT-fs (loop1): Directory bread(block 67) failed [ 286.561419][ T6121] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 286.569813][ T9860] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.2342: Failed to acquire dquot type 0 [ 286.589273][ T9869] FAT-fs (loop1): Directory bread(block 68) failed [ 286.602840][ T9860] EXT4-fs (loop2): 1 truncate cleaned up [ 286.608002][ T9869] FAT-fs (loop1): Directory bread(block 69) failed [ 286.625807][ T9860] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 286.631779][ T9869] FAT-fs (loop1): Directory bread(block 70) failed [ 286.660034][ T9869] FAT-fs (loop1): Directory bread(block 71) failed [ 286.674077][ T9869] FAT-fs (loop1): Directory bread(block 72) failed [ 286.680757][ T9869] FAT-fs (loop1): Directory bread(block 73) failed [ 287.323959][ T1078] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 287.551807][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 287.691815][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.709281][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.730626][ T9886] device bridge_slave_0 entered promiscuous mode [ 287.758870][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.769740][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.778652][ T9886] device bridge_slave_1 entered promiscuous mode [ 287.781516][ T1078] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.862014][ T1078] usb 5-1: not running at top speed; connect to a high speed hub [ 287.888496][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'. [ 287.907983][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.923579][ T9898] loop2: detected capacity change from 0 to 8192 [ 287.942777][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.966605][ T1078] usb 5-1: config 15 has an invalid interface number: 168 but max is 0 [ 287.985546][ T1078] usb 5-1: config 15 has no interface number 0 [ 287.999556][ T1078] usb 5-1: config 15 interface 168 has no altsetting 0 [ 288.018608][ T9886] team0: Port device team_slave_0 added [ 288.041333][ T9898] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 288.050529][ T9898] REISERFS (device loop2): using ordered data mode [ 288.055086][ T9886] team0: Port device team_slave_1 added [ 288.110906][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.118075][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.144420][ T9898] reiserfs: using flush barriers [ 288.150027][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.151600][ T9898] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 288.164278][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.184825][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.213144][ T1078] usb 5-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 288.218784][ T9898] REISERFS (device loop2): checking transaction log (loop2) [ 288.222357][ T9903] vivid-003: ================= START STATUS ================= [ 288.222410][ T9903] vivid-003: Radio HW Seek Mode: [ 288.239693][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.240856][ T9898] REISERFS (device loop2): Using r5 hash to sort names [ 288.245202][ T1078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.272139][ T1078] usb 5-1: Product: syz [ 288.282590][ T1078] usb 5-1: Manufacturer: syz [ 288.287216][ T1078] usb 5-1: SerialNumber: syz [ 288.300939][ T9903] Bounded [ 288.310170][ T9903] vivid-003: Radio Programmable HW Seek: false [ 288.324006][ T9898] reiserfs: enabling write barrier flush mode [ 288.324502][ T9903] vivid-003: RDS Rx I/O Mode: Block I/O [ 288.338245][ T9903] vivid-003: Generate RBDS Instead of RDS: false [ 288.341060][ T9898] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 288.347597][ T9886] device hsr_slave_0 entered promiscuous mode [ 288.363607][ T9886] device hsr_slave_1 entered promiscuous mode [ 288.365155][ T9903] vivid-003: RDS Reception: true [ 288.377793][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.380902][ T9903] vivid-003: RDS Program Type: [ 288.386348][ T9886] Cannot create hsr debugfs directory [ 288.389011][ T9903] 0 inactive [ 288.414781][ T9903] vivid-003: RDS PS Name: inactive [ 288.420345][ T9903] vivid-003: RDS Radio Text: inactive [ 288.426113][ T9903] vivid-003: RDS Traffic Announcement: false inactive [ 288.433431][ T9903] vivid-003: RDS Traffic Program: false inactive [ 288.439875][ T9903] vivid-003: RDS Music: false inactive [ 288.446320][ T9903] vivid-003: ================== END STATUS ================== [ 288.600022][ T9886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.723399][ T9886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.843600][ T9886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.899706][ T9886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.021725][ T1078] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 289.069188][ T1078] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 289.092419][ T1078] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 289.106032][ T1078] usb 5-1: media controller created [ 289.134504][ T1078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.147319][ T9886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.194094][ T9886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.228780][ T9886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.245972][ T1078] DVB: Unable to find symbol dib7000p_attach() [ 289.253030][ T1078] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 289.272419][ T9886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.351424][ T1078] rc_core: IR keymap rc-dib0700-rc5 not found [ 289.357625][ T1078] Registered IR keymap rc-empty [ 289.372252][ T1078] dvb-usb: could not initialize remote control. [ 289.381816][ T1078] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 289.411020][ T4520] Bluetooth: hci1: command 0x0409 tx timeout [ 289.422335][ T1078] usb 5-1: USB disconnect, device number 27 [ 289.493287][ T1078] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 289.510953][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.541617][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.570287][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.582415][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.594682][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.610978][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.620984][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.628187][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.645490][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.665121][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.683008][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.693489][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.700570][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.722019][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.738037][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.756350][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.770236][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.779321][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.790468][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.801658][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.824801][ T9886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.836268][ T9886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.848166][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.857878][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.867561][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.876469][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.885453][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.915235][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 290.068346][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 290.078092][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 290.091719][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 290.092091][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.132639][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 290.151891][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 290.190890][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 290.211589][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 290.221113][ T9886] device veth0_vlan entered promiscuous mode [ 290.233112][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 290.238380][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 290.253869][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 290.264735][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 290.273350][ T9886] device veth1_vlan entered promiscuous mode [ 290.285230][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.309204][ T9935] loop1: detected capacity change from 0 to 65536 [ 290.316002][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.320466][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.348166][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.348481][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.366284][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.378078][ T2674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.385876][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.396056][ T9950] loop4: detected capacity change from 0 to 4096 [ 290.402790][ T9886] device veth0_macvtap entered promiscuous mode [ 290.428201][ T9886] device veth1_macvtap entered promiscuous mode [ 290.432881][ T9935] XFS (loop1): Mounting V5 Filesystem [ 290.447436][ T9950] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 290.459018][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.470105][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.479993][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.491369][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.501990][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.515618][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.525697][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.538660][ T9950] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 290.542758][ T9935] XFS (loop1): Ending clean mount [ 290.545897][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.557877][ T9935] XFS (loop1): Quotacheck needed: Please wait. [ 290.568681][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.584956][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.586346][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.590561][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.590582][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.590593][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.590606][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.590615][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.590627][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.590638][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.590650][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.590661][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.590673][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.596843][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.598566][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.599187][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.599652][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.600117][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.600570][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 290.605441][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 290.608312][ T9886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.608343][ T9886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.608367][ T9886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.608392][ T9886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.664511][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 290.712434][ T2674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.760315][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.767358][ T23] usbtmc 3-1:16.0: can't read capabilities [ 290.785655][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.793905][ T2674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.812905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 290.879941][ T9935] XFS (loop1): Quotacheck: Done. [ 290.928259][ T23] usb 3-1: USB disconnect, device number 19 [ 290.944769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.105347][ T9962] MTD: Couldn't look up './file0': -15 [ 291.118660][ T3569] XFS (loop1): Unmounting Filesystem [ 291.511488][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 291.737864][ T9992] loop2: detected capacity change from 0 to 128 [ 291.862707][ T9992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.884778][ T9992] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038 (0x7fffffff) [ 292.045551][T10002] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 292.235397][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 292.267922][T10011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2400'. [ 292.529371][T10024] loop4: detected capacity change from 0 to 1024 [ 292.681598][ T1078] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 292.821072][T10042] bond0: Unable to set up delay as MII monitoring is disabled [ 292.853019][T10043] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 293.088341][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 293.101960][ T1078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.131436][ T1078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.149989][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2427'. [ 293.171341][ T3617] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 293.171734][ T1078] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 293.205720][ T1078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.228176][ T1078] usb 3-1: config 0 descriptor?? [ 293.381433][T10071] loop1: detected capacity change from 0 to 512 [ 293.411282][ T3617] usb 4-1: Using ep0 maxpacket: 16 [ 293.465745][T10071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.499992][T10071] EXT4-fs (loop1): 1 truncate cleaned up [ 293.507578][T10071] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.531482][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 293.551677][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.551731][ T4520] Bluetooth: hci1: command 0x040f tx timeout [ 293.561827][ T3617] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.581618][ T3617] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 293.591509][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.604893][ T3617] usb 4-1: config 0 descriptor?? [ 293.653667][ T1075] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 293.706439][ T1078] steelseries_srws1 0003:1038:1410.0032: not enough fields in HID_OUTPUT_REPORT 0 [ 293.860265][T10089] netlink: 'syz.0.2435': attribute type 7 has an invalid length. [ 293.901370][ T1075] usb 5-1: Using ep0 maxpacket: 8 [ 293.910618][ T4520] usb 3-1: USB disconnect, device number 20 [ 293.927279][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2436'. [ 294.021331][ T1075] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 294.030498][ T1075] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.050909][ T1075] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.061277][ T1078] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 294.068022][ T1075] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.083126][ T3617] cmedia_hs100b 0003:0D8C:0014.0033: item fetching failed at offset 0/2 [ 294.092290][ T3617] cmedia_hs100b: probe of 0003:0D8C:0014.0033 failed with error -22 [ 294.107807][ T1075] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.129841][ T1075] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.139188][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.182293][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 294.296475][ T3865] usb 4-1: USB disconnect, device number 23 [ 294.331548][ T1078] usb 2-1: Using ep0 maxpacket: 8 [ 294.421424][ T1075] usb 5-1: GET_CAPABILITIES returned 0 [ 294.427196][ T1075] usbtmc 5-1:16.0: can't read capabilities [ 294.481518][ T1078] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 294.495067][ T1078] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.517319][ T1078] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.529271][ T1078] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.539636][ T1078] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.553549][ T1078] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.563280][ T1078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.638114][ T4556] usb 5-1: USB disconnect, device number 28 [ 294.852863][ T1078] usb 2-1: GET_CAPABILITIES returned 0 [ 294.861580][ T1078] usbtmc 2-1:16.0: can't read capabilities [ 295.056640][ T23] usb 2-1: USB disconnect, device number 21 [ 295.098175][T10128] loop3: detected capacity change from 0 to 2048 [ 295.158183][T10128] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 295.200552][T10130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.252825][T10134] loop4: detected capacity change from 0 to 512 [ 295.335300][T10134] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.346279][T10134] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (171798693888 > 6144). [ 295.362294][ T26] audit: type=1326 audit(1727975390.362:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.390782][ T26] audit: type=1326 audit(1727975390.362:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.414911][ T26] audit: type=1326 audit(1727975390.362:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.419330][T10137] loop3: detected capacity change from 0 to 64 [ 295.437972][ T26] audit: type=1326 audit(1727975390.362:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.438012][ T26] audit: type=1326 audit(1727975390.362:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.438041][ T26] audit: type=1326 audit(1727975390.362:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.438070][ T26] audit: type=1326 audit(1727975390.362:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.438099][ T26] audit: type=1326 audit(1727975390.362:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.438128][ T26] audit: type=1326 audit(1727975390.362:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.2.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6f6339ff9 code=0x7fc00000 [ 295.460131][T10134] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 295.596554][T10134] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 295.603784][T10134] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2455: couldn't read orphan inode 26 (err -116) [ 295.617548][T10134] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.631960][ T1078] Bluetooth: hci1: command 0x0419 tx timeout [ 295.719521][T10134] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 295.759528][T10137] [ 295.761895][T10137] ====================================================== [ 295.768904][T10137] WARNING: possible circular locking dependency detected [ 295.775918][T10137] 5.15.167-syzkaller #0 Not tainted [ 295.781105][T10137] ------------------------------------------------------ [ 295.788148][T10137] syz.3.2456/10137 is trying to acquire lock: [ 295.794207][T10137] ffff88801c2341f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x1440 [ 295.805019][T10137] [ 295.805019][T10137] but task is already holding lock: [ 295.812386][T10137] ffff8880589040b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0 [ 295.821730][T10137] [ 295.821730][T10137] which lock already depends on the new lock. [ 295.821730][T10137] [ 295.832131][T10137] [ 295.832131][T10137] the existing dependency chain (in reverse order) is: [ 295.841231][T10137] [ 295.841231][T10137] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 295.849158][T10137] lock_acquire+0x1db/0x4f0 [ 295.854191][T10137] __mutex_lock_common+0x1da/0x25a0 [ 295.859918][T10137] mutex_lock_nested+0x17/0x20 [ 295.865208][T10137] hfs_find_init+0x16a/0x1e0 [ 295.870326][T10137] hfs_extend_file+0x317/0x1440 [ 295.875701][T10137] hfs_bmap_reserve+0xd5/0x3f0 [ 295.880999][T10137] hfs_cat_create+0x1e7/0xa60 [ 295.886207][T10137] hfs_mkdir+0x68/0xe0 [ 295.890806][T10137] vfs_mkdir+0x3b6/0x590 [ 295.895581][T10137] do_mkdirat+0x260/0x520 [ 295.900433][T10137] __x64_sys_mkdirat+0x85/0x90 [ 295.905726][T10137] do_syscall_64+0x3b/0xb0 [ 295.910686][T10137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.917108][T10137] [ 295.917108][T10137] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 295.926328][T10137] validate_chain+0x1649/0x5930 [ 295.931711][T10137] __lock_acquire+0x1295/0x1ff0 [ 295.937090][T10137] lock_acquire+0x1db/0x4f0 [ 295.942128][T10137] __mutex_lock_common+0x1da/0x25a0 [ 295.947862][T10137] mutex_lock_nested+0x17/0x20 [ 295.953185][T10137] hfs_extend_file+0xfb/0x1440 [ 295.958614][T10137] hfs_bmap_reserve+0xd5/0x3f0 [ 295.963913][T10137] __hfs_ext_write_extent+0x22e/0x4f0 [ 295.969821][T10137] __hfs_ext_cache_extent+0x6a/0x990 [ 295.970338][T10143] loop1: detected capacity change from 0 to 40427 [ 295.975632][T10137] hfs_extend_file+0x340/0x1440 [ 295.975654][T10137] hfs_get_block+0x3e0/0xb60 [ 295.975670][T10137] __block_write_begin_int+0x60b/0x1650 [ 295.998533][T10137] cont_write_begin+0x5d6/0x840 [ 296.003907][T10137] hfs_write_begin+0x92/0xd0 [ 296.008257][T10143] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 296.009023][T10137] generic_perform_write+0x2bf/0x5b0 [ 296.009048][T10137] __generic_file_write_iter+0x243/0x4f0 [ 296.023150][T10143] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 296.027977][T10137] generic_file_write_iter+0xa7/0x1b0 [ 296.028009][T10137] vfs_write+0xacd/0xe50 [ 296.028027][T10137] ksys_write+0x1a2/0x2c0 [ 296.039021][T10143] F2FS-fs (loop1): invalid crc value [ 296.042030][T10137] do_syscall_64+0x3b/0xb0 [ 296.042054][T10137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.042075][T10137] [ 296.042075][T10137] other info that might help us debug this: [ 296.042075][T10137] [ 296.042079][T10137] Possible unsafe locking scenario: [ 296.042079][T10137] [ 296.042083][T10137] CPU0 CPU1 [ 296.042088][T10137] ---- ---- [ 296.042091][T10137] lock(&tree->tree_lock/1); [ 296.042111][T10137] lock(&HFS_I(tree->inode)->extents_lock); [ 296.042123][T10137] lock(&tree->tree_lock/1); [ 296.042140][T10137] lock(&HFS_I(tree->inode)->extents_lock); [ 296.042152][T10137] [ 296.042152][T10137] *** DEADLOCK *** [ 296.042152][T10137] [ 296.042155][T10137] 5 locks held by syz.3.2456/10137: [ 296.042165][T10137] #0: ffff8880740325f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 296.042213][T10137] #1: ffff8880775b4460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 296.042263][T10137] #2: ffff88801c233028 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: generic_file_write_iter+0x7c/0x1b0 [ 296.042316][T10137] #3: ffff88801c232e78 (&HFS_I(inode)->extents_lock){+.+.}-{3:3} [ 296.050532][T10143] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.051899][T10137] , at: hfs_extend_file+0xfb/0x1440 [ 296.051924][T10137] #4: ffff8880589040b0 (&tree->tree_lock/1 [ 296.081305][T10134] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 296.086268][T10137] ){+.+.}-{3:3} [ 296.099590][T10143] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 296.101736][T10137] , at: hfs_find_init+0x16a/0x1e0 [ 296.101760][T10137] [ 296.101760][T10137] stack backtrace: [ 296.101766][T10137] CPU: 0 PID: 10137 Comm: syz.3.2456 Not tainted 5.15.167-syzkaller #0 [ 296.111012][T10143] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 296.117492][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.117514][T10137] Call Trace: [ 296.117521][T10137] [ 296.117527][T10137] dump_stack_lvl+0x1e3/0x2d0 [ 296.117555][T10137] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 296.117576][T10137] ? print_circular_bug+0x12b/0x1a0 [ 296.117597][T10137] check_noncircular+0x2f8/0x3b0 [ 296.117618][T10137] ? add_chain_block+0x850/0x850 [ 296.117636][T10137] ? lockdep_lock+0x11f/0x2a0 [ 296.117658][T10137] validate_chain+0x1649/0x5930 [ 296.117682][T10137] ? reacquire_held_locks+0x660/0x660 [ 296.117701][T10137] ? validate_chain+0x112/0x5930 [ 296.117719][T10137] ? reacquire_held_locks+0x660/0x660 [ 296.117737][T10137] ? validate_chain+0x112/0x5930 [ 296.117759][T10137] ? look_up_lock_class+0x77/0x120 [ 296.117777][T10137] ? register_lock_class+0x100/0x9a0 [ 296.117792][T10137] ? mark_lock+0x98/0x340 [ 296.117807][T10137] ? is_dynamic_key+0x1f0/0x1f0 [ 296.330730][T10137] ? mark_lock+0x98/0x340 [ 296.335051][T10137] __lock_acquire+0x1295/0x1ff0 [ 296.339885][T10137] lock_acquire+0x1db/0x4f0 [ 296.344371][T10137] ? hfs_extend_file+0xfb/0x1440 [ 296.349388][T10137] ? read_lock_is_recursive+0x10/0x10 [ 296.354747][T10137] ? __might_sleep+0xc0/0xc0 [ 296.359328][T10137] ? deref_stack_reg+0xbe/0x110 [ 296.364323][T10137] ? look_up_lock_class+0x77/0x120 [ 296.369446][T10137] ? register_lock_class+0x100/0x9a0 [ 296.374719][T10137] __mutex_lock_common+0x1da/0x25a0 [ 296.379903][T10137] ? hfs_extend_file+0xfb/0x1440 [ 296.384822][T10137] ? mark_lock+0x98/0x340 [ 296.389160][T10137] ? __lock_acquire+0x1295/0x1ff0 [ 296.394168][T10137] ? hfs_extend_file+0xfb/0x1440 [ 296.399111][T10137] ? mutex_lock_io_nested+0x60/0x60 [ 296.404315][T10137] mutex_lock_nested+0x17/0x20 [ 296.409062][T10137] hfs_extend_file+0xfb/0x1440 [ 296.413842][T10137] ? read_lock_is_recursive+0x10/0x10 [ 296.419210][T10137] ? __mutex_trylock_common+0x17e/0x2e0 [ 296.424893][T10137] ? hfs_get_block+0xb60/0xb60 [ 296.429647][T10137] ? rcu_lock_release+0x20/0x20 [ 296.434484][T10137] ? do_syscall_64+0x3b/0xb0 [ 296.439060][T10137] ? __mutex_lock_common+0x444/0x25a0 [ 296.444430][T10137] ? hfs_brec_find+0x193/0x570 [ 296.449351][T10137] hfs_bmap_reserve+0xd5/0x3f0 [ 296.454103][T10137] __hfs_ext_write_extent+0x22e/0x4f0 [ 296.459460][T10137] __hfs_ext_cache_extent+0x6a/0x990 [ 296.464735][T10137] ? mutex_lock_nested+0x17/0x20 [ 296.469655][T10137] ? hfs_find_init+0x16a/0x1e0 [ 296.474494][T10137] hfs_extend_file+0x340/0x1440 [ 296.479332][T10137] ? hfs_get_block+0xb60/0xb60 [ 296.484073][T10137] ? find_lock_entries+0x1030/0x1030 [ 296.489339][T10137] ? __lock_acquire+0x1ff0/0x1ff0 [ 296.494341][T10137] ? pagevec_lookup_range+0x2e/0x70 [ 296.499517][T10137] ? clean_bdev_aliases+0x801/0x940 [ 296.504693][T10137] hfs_get_block+0x3e0/0xb60 [ 296.509262][T10137] ? hfs_free_extents+0x420/0x420 [ 296.514268][T10137] ? create_page_buffers+0x24b/0x330 [ 296.519578][T10137] __block_write_begin_int+0x60b/0x1650 [ 296.525128][T10137] ? hfs_free_extents+0x420/0x420 [ 296.530167][T10137] ? page_zero_new_buffers+0x510/0x510 [ 296.535604][T10137] ? exc_page_fault+0x342/0x700 [ 296.540433][T10137] ? wait_for_stable_page+0xe2/0x110 [ 296.545707][T10137] cont_write_begin+0x5d6/0x840 [ 296.550536][T10137] ? generic_cont_expand_simple+0x230/0x230 [ 296.556405][T10137] ? fault_in_readable+0x1d5/0x2e0 [ 296.561586][T10137] ? fault_in_safe_writeable+0x250/0x250 [ 296.567196][T10137] hfs_write_begin+0x92/0xd0 [ 296.571763][T10137] ? hfs_free_extents+0x420/0x420 [ 296.576768][T10137] generic_perform_write+0x2bf/0x5b0 [ 296.582471][T10137] ? grab_cache_page_write_begin+0x90/0x90 [ 296.588267][T10137] ? file_remove_privs+0x610/0x610 [ 296.593370][T10137] ? rwsem_write_trylock+0x166/0x210 [ 296.598638][T10137] __generic_file_write_iter+0x243/0x4f0 [ 296.604294][T10137] generic_file_write_iter+0xa7/0x1b0 [ 296.609653][T10137] vfs_write+0xacd/0xe50 [ 296.613882][T10137] ? file_end_write+0x250/0x250 [ 296.618732][T10137] ? __fget_files+0x413/0x480 [ 296.623387][T10137] ? mutex_lock_nested+0x17/0x20 [ 296.628303][T10137] ? __fdget_pos+0x2cb/0x380 [ 296.632870][T10137] ? ksys_write+0x77/0x2c0 [ 296.637265][T10137] ksys_write+0x1a2/0x2c0 [ 296.641743][T10137] ? print_irqtrace_events+0x210/0x210 [ 296.647372][T10137] ? __ia32_sys_read+0x80/0x80 [ 296.652121][T10137] ? syscall_enter_from_user_mode+0x2e/0x240 [ 296.658082][T10137] ? lockdep_hardirqs_on+0x94/0x130 [ 296.663275][T10137] ? syscall_enter_from_user_mode+0x2e/0x240 [ 296.669251][T10137] do_syscall_64+0x3b/0xb0 [ 296.673662][T10137] ? clear_bhb_loop+0x15/0x70 [ 296.678425][T10137] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.684338][T10137] RIP: 0033:0x7fd3cbd05ff9 [ 296.688734][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.708316][T10137] RSP: 002b:00007fd3ca17e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.716713][T10137] RAX: ffffffffffffffda RBX: 00007fd3cbebdf80 RCX: 00007fd3cbd05ff9 [ 296.724671][T10137] RDX: 000000007ffff000 RSI: 0000000020004200 RDI: 0000000000000004 [ 296.732650][T10137] RBP: 00007fd3cbd78296 R08: 0000000000000000 R09: 0000000000000000 [ 296.740727][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.748704][T10137] R13: 0000000000000000 R14: 00007fd3cbebdf80 R15: 00007fff6370ede8 [ 296.756667][T10137]