last executing test programs: 2.515582175s ago: executing program 0 (id=854): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.515076595s ago: executing program 4 (id=856): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x2000479a, 0x0, 0x0, 0x0, 0x0) 2.35534953s ago: executing program 4 (id=860): socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x1242000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.210293182s ago: executing program 3 (id=861): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffff7f}]}}]}, 0x40}}, 0x0) 2.01550599s ago: executing program 3 (id=863): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000004000226,adinicb,gid=forget,nostrict,unhide,nostrict,dmode=00000000000017777777777,uid=ignore,shortad,volume=00000000000000000006,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x400141042, 0x0) write$cgroup_devices(r0, 0x0, 0x1800) truncate(&(0x7f0000000440)='./file1\x00', 0x18) 1.997669931s ago: executing program 2 (id=865): r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1.90208691s ago: executing program 0 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 1.538874962s ago: executing program 0 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.538511092s ago: executing program 1 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 1.479122268s ago: executing program 2 (id=870): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006980)={0x2020}, 0x2020) 1.420159633s ago: executing program 3 (id=871): socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_io_uring_setup(0x28ad, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x69b4, 0x0, 0x0, 0x0, 0x0) 1.349451759s ago: executing program 0 (id=872): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@dev, 0x800, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000, @empty}, 0x1c) 1.275405536s ago: executing program 1 (id=873): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.243119509s ago: executing program 2 (id=874): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) setpriority(0x2, 0x0, 0x0) 1.158782586s ago: executing program 0 (id=875): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80002) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f0000", 0x55}], 0x1) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.060960035s ago: executing program 4 (id=876): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1.060030805s ago: executing program 1 (id=886): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) 1.059638565s ago: executing program 3 (id=877): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1.021404019s ago: executing program 2 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x45110, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) 881.892351ms ago: executing program 0 (id=879): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x442a, &(0x7f0000008940)="$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") open(&(0x7f0000000000)='./file0\x00', 0x8741, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 869.126022ms ago: executing program 3 (id=880): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x3, {0x0, 0xf0}}, 0x18) 813.645357ms ago: executing program 1 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000200), &(0x7f0000000080)=@tcp6=r1}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000200), &(0x7f0000000140)=@tcp6=r1}, 0x20) 659.686951ms ago: executing program 3 (id=882): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000180)={[{@autodefrag}, {@discard}, {@ref_verify}, {@acl}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nodatacow}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) 658.942641ms ago: executing program 2 (id=893): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 556.24364ms ago: executing program 4 (id=883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}]}]}, 0x30}}, 0x0) 478.289497ms ago: executing program 1 (id=884): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x2}) 295.167934ms ago: executing program 4 (id=885): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000840)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80a053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 156.144516ms ago: executing program 2 (id=887): r0 = io_uring_setup(0x2e34, &(0x7f00000000c0)={0x0, 0x0, 0x10}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 153.651626ms ago: executing program 1 (id=888): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @remote, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=889): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): r in segment payload [ 81.817056][ T4465] NILFS (loop3): trying rollback from an earlier position [ 81.870270][ T4465] NILFS (loop3): recovery complete [ 81.929436][ T4468] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.165728][ T4472] capability: warning: `syz.0.48' uses deprecated v2 capabilities in a way that may be insecure [ 82.275642][ T4474] loop1: detected capacity change from 0 to 256 [ 82.361657][ T4474] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 82.490360][ T4476] loop0: detected capacity change from 0 to 256 [ 82.501329][ T4478] loop3: detected capacity change from 0 to 8 [ 82.624376][ T4476] FAT-fs (loop0): Directory bread(block 64) failed [ 82.655261][ T4478] overlayfs: './file0' not a directory [ 82.661772][ T4476] FAT-fs (loop0): Directory bread(block 65) failed [ 82.693142][ T4480] SQUASHFS error: lzo decompression failed, data probably corrupt [ 82.700132][ T4476] FAT-fs (loop0): Directory bread(block 66) failed [ 82.708537][ T4480] SQUASHFS error: Failed to read block 0x71: -5 [ 82.727602][ T4476] FAT-fs (loop0): Directory bread(block 67) failed [ 82.734429][ T4480] SQUASHFS error: lzo decompression failed, data probably corrupt [ 82.751316][ T4480] SQUASHFS error: Failed to read block 0x71: -5 [ 82.754310][ T4476] FAT-fs (loop0): Directory bread(block 68) failed [ 82.769392][ T26] audit: type=1800 audit(1730863257.638:2): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.50" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 82.803938][ T4463] loop4: detected capacity change from 0 to 32768 [ 82.828234][ T4476] FAT-fs (loop0): Directory bread(block 69) failed [ 82.844462][ T4476] FAT-fs (loop0): Directory bread(block 70) failed [ 82.858107][ T4476] FAT-fs (loop0): Directory bread(block 71) failed [ 82.865890][ T4476] FAT-fs (loop0): Directory bread(block 72) failed [ 82.872457][ T4476] FAT-fs (loop0): Directory bread(block 73) failed [ 82.968116][ T4463] XFS (loop4): Mounting V5 Filesystem [ 83.112690][ T4470] loop2: detected capacity change from 0 to 32768 [ 83.130202][ T4470] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.47 (4470) [ 83.163918][ T4470] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 83.189240][ T4470] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 83.209393][ T4470] BTRFS info (device loop2): using free space tree [ 83.223071][ T4463] XFS (loop4): Ending clean mount [ 83.271296][ T4463] XFS (loop4): Quotacheck needed: Please wait. [ 83.383851][ T4515] xt_cgroup: invalid path, errno=-2 [ 83.518525][ T4463] XFS (loop4): Quotacheck: Done. [ 83.557500][ T4521] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3696. macoff=96 [ 83.613914][ T4470] BTRFS info (device loop2): enabling ssd optimizations [ 83.800511][ T4526] loop1: detected capacity change from 0 to 4096 [ 83.823346][ T4249] XFS (loop4): Unmounting Filesystem [ 83.838933][ T4526] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 83.967675][ T4255] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 84.230903][ T4541] loop3: detected capacity change from 0 to 64 [ 85.477053][ T4547] loop3: detected capacity change from 0 to 32768 [ 85.607758][ T4555] loop2: detected capacity change from 0 to 32768 [ 85.623244][ T4555] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.64 (4555) [ 85.631617][ T4547] XFS (loop3): Mounting V5 Filesystem [ 85.652664][ T4555] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 85.675234][ T4555] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 85.713842][ T4555] BTRFS info (device loop2): turning off barriers [ 85.720383][ T4555] BTRFS info (device loop2): ignoring bad roots [ 85.743864][ T4555] BTRFS info (device loop2): disabling tree log [ 85.750222][ T4555] BTRFS info (device loop2): turning on flush-on-commit [ 85.785176][ T4547] XFS (loop3): Ending clean mount [ 85.789107][ T4555] BTRFS info (device loop2): using free space tree [ 85.979304][ T4260] XFS (loop3): Unmounting Filesystem [ 86.013839][ T4555] BTRFS info (device loop2): enabling ssd optimizations [ 86.191750][ T4571] loop1: detected capacity change from 0 to 32768 [ 86.286265][ T4571] [ 86.286265][ T4571] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.286265][ T4571] [ 86.314089][ T4255] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 86.524708][ T4571] find_entry called with index = 0 [ 86.530960][ T4571] read_mapping_page failed! [ 86.618313][ T41] cfg80211: failed to load regulatory.db [ 86.635321][ T4571] ERROR: (device loop1): txCommit: [ 86.635321][ T4571] [ 86.784412][ T4257] [ 86.784412][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.784412][ T4257] [ 86.824895][ T4257] [ 86.824895][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.824895][ T4257] [ 86.952176][ T4623] mmap: syz.4.86 (4623) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.456948][ T4639] 9p: Unknown access argument u: -22 [ 87.709358][ T4647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.840198][ T4651] loop3: detected capacity change from 0 to 512 [ 87.914084][ T4651] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.942476][ T4651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 88.002223][ T4651] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.051453][ T4651] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 88.083874][ T4651] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 88.115235][ T4662] loop2: detected capacity change from 0 to 256 [ 88.128959][ T4651] EXT4-fs (loop3): 1 truncate cleaned up [ 88.170401][ T4651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.173584][ T4659] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.196897][ T4662] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 88.344458][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 88.440387][ T4659] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.599628][ T4659] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.811752][ T4659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.938929][ T4655] loop1: detected capacity change from 0 to 40427 [ 88.968244][ T4655] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 88.983805][ T4655] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.997540][ T4660] loop4: detected capacity change from 0 to 32768 [ 89.024380][ T4655] F2FS-fs (loop1): invalid crc value [ 89.044589][ T4676] 9pnet_rdma: rdma_create_trans (4676): problem binding to privport: 13 [ 89.054848][ T4659] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.080553][ T4655] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.093057][ T4659] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.135878][ T4660] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 89.166409][ T4660] (syz.4.101,4660,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 89.190023][ T4659] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.203861][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.211873][ T4655] F2FS-fs (loop1): Start checkpoint disabled! [ 89.221332][ T4659] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.283485][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 89.300750][ T4655] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.312453][ T4655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 89.536439][ T56] kworker/u4:4: attempt to access beyond end of device [ 89.536439][ T56] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 89.593966][ T4538] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.614138][ T7] usb 4-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 89.638455][ T7] usb 4-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 89.658721][ T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 89.674088][ T4686] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 89.691644][ T7] usb 4-1: config 16 has no interfaces? [ 89.718477][ T7] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 89.733609][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.833767][ T4538] usb 3-1: Using ep0 maxpacket: 32 [ 89.954012][ T4538] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 89.988860][ T4681] loop0: detected capacity change from 0 to 32768 [ 90.020228][ T7] usb 4-1: USB disconnect, device number 2 [ 90.044950][ T4681] XFS: ikeep mount option is deprecated. [ 90.144797][ T4538] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 90.154085][ T4681] XFS (loop0): Mounting V5 Filesystem [ 90.160310][ T4538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.169599][ T4538] usb 3-1: Product: syz [ 90.174222][ T4538] usb 3-1: Manufacturer: syz [ 90.178853][ T4538] usb 3-1: SerialNumber: syz [ 90.189890][ T4538] usb 3-1: config 0 descriptor?? [ 90.214180][ T4684] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.297018][ T4681] XFS (loop0): Ending clean mount [ 90.325146][ T4681] XFS (loop0): Quotacheck needed: Please wait. [ 90.389013][ T4681] XFS (loop0): Quotacheck: Done. [ 90.399973][ T4710] nbd: must specify a size in bytes for the device [ 90.566863][ T7] usb 3-1: USB disconnect, device number 2 [ 90.613195][ T4250] XFS (loop0): Unmounting Filesystem [ 90.801335][ T4721] loop4: detected capacity change from 0 to 512 [ 90.820736][ T4721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.830588][ T4721] EXT4-fs: old and new quota format mixing [ 90.891890][ T4721] loop4: detected capacity change from 0 to 1764 [ 90.952527][ T4725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.127'. [ 91.317579][ T4739] loop4: detected capacity change from 0 to 16 [ 91.359691][ T4739] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 91.636960][ T26] audit: type=1326 audit(1730863266.508:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf17e719 code=0x7ffc0000 [ 91.688775][ T26] audit: type=1326 audit(1730863266.508:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf17e719 code=0x7ffc0000 [ 91.760896][ T4754] loop3: detected capacity change from 0 to 4096 [ 91.781362][ T26] audit: type=1326 audit(1730863266.528:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fddcf17e719 code=0x7ffc0000 [ 91.785003][ T4754] ntfs3: Invalid value for gid. [ 91.903887][ T26] audit: type=1326 audit(1730863266.528:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf17e719 code=0x7ffc0000 [ 91.983875][ T26] audit: type=1326 audit(1730863266.528:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcf17e719 code=0x7ffc0000 [ 92.839224][ T4299] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.022096][ T4765] loop1: detected capacity change from 0 to 32768 [ 93.033619][ T4765] [ 93.033619][ T4765] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.033619][ T4765] [ 93.085056][ T4790] loop4: detected capacity change from 0 to 4096 [ 93.110663][ T4790] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 93.157454][ T4257] [ 93.157454][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.157454][ T4257] [ 93.180454][ T4257] [ 93.180454][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.180454][ T4257] [ 93.186928][ T4792] loop3: detected capacity change from 0 to 4096 [ 93.248404][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.287118][ T4299] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 93.287258][ T4792] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 93.326161][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.382051][ T4299] usb 1-1: config 0 descriptor?? [ 93.384428][ T4790] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 93.399939][ T4792] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 93.421006][ T4790] ntfs3: loop4: ino=1d, "file1" attr_set_size [ 93.429466][ T4792] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 93.465125][ T4792] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 93.488248][ T4792] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 93.503146][ T4792] ntfs: volume version 3.1. [ 93.511975][ T4249] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 93.566752][ T4249] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 93.919393][ T4299] apple 0003:05AC:027A.0001: hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 94.128648][ T4299] usb 1-1: USB disconnect, device number 3 [ 94.168893][ T4809] loop2: detected capacity change from 0 to 256 [ 94.228992][ T4809] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 94.461227][ T4817] loop1: detected capacity change from 0 to 128 [ 94.490557][ T4817] EXT4-fs: Ignoring removed i_version option [ 94.513479][ T4817] EXT4-fs: Ignoring removed orlov option [ 94.548933][ T4817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.578731][ T4817] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.695756][ T4800] loop4: detected capacity change from 0 to 32768 [ 94.719118][ T4817] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 4095 (only 1 groups) [ 94.760757][ T4800] JBD2: Ignoring recovery information on journal [ 94.875110][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 94.914653][ T4800] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.038125][ T4543] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.040903][ T4820] loop3: detected capacity change from 0 to 32768 [ 95.126457][ T4249] ocfs2: Unmounting device (7,4) on (node local) [ 95.176415][ T4820] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.205922][ T4838] loop0: detected capacity change from 0 to 2048 [ 95.217638][ T4838] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.269339][ T4839] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.283829][ T4543] usb 3-1: Using ep0 maxpacket: 32 [ 95.304717][ T4260] ocfs2: Unmounting device (7,3) on (node local) [ 95.403800][ T41] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.422356][ T4543] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 95.447695][ T4543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.480779][ T4543] usb 3-1: config 0 descriptor?? [ 95.538899][ T4543] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 95.552329][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 95.581234][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 95.628151][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 95.643960][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 95.677063][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 95.696512][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 95.727478][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 95.757550][ T4543] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 95.769207][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.780743][ T4851] process 'syz.0.182' launched './file1' with NULL argv: empty string added [ 95.792320][ T4543] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 95.801081][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.818970][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.861716][ T41] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.884444][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.904046][ T4299] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.904767][ T41] usb 2-1: config 0 descriptor?? [ 96.163857][ T4299] usb 4-1: Using ep0 maxpacket: 16 [ 96.281340][ T4543] usb 3-1: USB disconnect, device number 3 [ 96.294033][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.305474][ T4865] loop0: detected capacity change from 0 to 2048 [ 96.316769][ T4543] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 96.342216][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.348797][ T4543] keyspan 3-1:0.0: device disconnected [ 96.379135][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.385559][ T4299] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.396812][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.421518][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.436533][ T4866] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.449486][ T4299] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 96.460313][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.470244][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.501663][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.504979][ T4299] usb 4-1: config 0 descriptor?? [ 96.521036][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.546053][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.565758][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.579736][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.595006][ T41] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.629456][ T41] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6 [ 96.687351][ T41] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 96.714777][ T41] usb 2-1: USB disconnect, device number 2 [ 96.750100][ T4866] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 96.795097][ T4866] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 96.866981][ T4866] Remounting filesystem read-only [ 96.914057][ T9] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 96.921378][ T9] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 96.962967][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.966450][ T4861] loop4: detected capacity change from 0 to 32768 [ 96.979065][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.988410][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.995789][ T4874] loop2: detected capacity change from 0 to 256 [ 97.013530][ T4299] uclogic 0003:28BD:0078.0003: interface is invalid, ignoring [ 97.029636][ T9] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 97.037596][ T9] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 97.060827][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.080299][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.103175][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.112571][ T4861] XFS (loop4): Mounting V5 Filesystem [ 97.122335][ T9] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 97.140394][ T9] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 97.171759][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.182934][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.195553][ T9] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.219932][ T4299] usb 4-1: USB disconnect, device number 3 [ 97.227290][ T4250] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 97.235694][ T4861] XFS (loop4): Ending clean mount [ 97.267849][ T4250] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 97.274860][ T4250] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 97.284250][ T4250] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 97.291673][ T4250] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 97.299834][ T4250] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 97.313152][ T4250] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 97.322342][ T4250] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 97.350243][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.381587][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.391291][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.401328][ T4249] XFS (loop4): Unmounting Filesystem [ 97.441475][ T4250] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 97.463038][ T4250] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 97.474304][ T4250] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 97.481642][ T4250] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 97.493829][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.493893][ T4250] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 97.493913][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.493931][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.493949][ T4250] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 97.493967][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 97.635399][ T4891] loop2: detected capacity change from 0 to 256 [ 98.166951][ T4907] loop3: detected capacity change from 0 to 1024 [ 98.544667][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 98.544683][ T26] audit: type=1326 audit(1730863273.418:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffbd7e719 code=0x7ffc0000 [ 98.643869][ T26] audit: type=1326 audit(1730863273.418:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffbd7e719 code=0x7ffc0000 [ 98.670538][ T4916] loop2: detected capacity change from 0 to 1024 [ 98.727877][ T4916] hfsplus: bad catalog entry type [ 98.733449][ T26] audit: type=1326 audit(1730863273.448:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fcffbd7e719 code=0x7ffc0000 [ 98.817447][ T26] audit: type=1326 audit(1730863273.448:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffbd7e719 code=0x7ffc0000 [ 98.853840][ T4306] hfsplus: b-tree write err: -5, ino 4 [ 98.880524][ T4895] loop1: detected capacity change from 0 to 32768 [ 98.904021][ T26] audit: type=1326 audit(1730863273.448:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4913 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffbd7e719 code=0x7ffc0000 [ 98.926882][ T4895] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.199 (4895) [ 98.990490][ T4895] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.012942][ T4895] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 99.048287][ T4895] BTRFS info (device loop1): using free space tree [ 99.077113][ T4925] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.159348][ T4908] loop4: detected capacity change from 0 to 32768 [ 99.204933][ T4908] XFS: attr2 mount option is deprecated. [ 99.300221][ T4908] XFS (loop4): Mounting V5 Filesystem [ 99.330163][ T4895] BTRFS info (device loop1): enabling ssd optimizations [ 99.346130][ T4904] loop0: detected capacity change from 0 to 32768 [ 99.391184][ T4954] loop3: detected capacity change from 0 to 256 [ 99.508171][ T4908] XFS (loop4): Ending clean mount [ 99.509427][ T4904] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 99.533889][ T4904] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 99.550537][ T4908] XFS (loop4): Quotacheck needed: Please wait. [ 99.625484][ T4904] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 2ms [ 99.681176][ T4908] XFS (loop4): Quotacheck: Done. [ 99.685909][ T4610] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 99.693585][ T4610] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 99.702482][ T33] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 99.802392][ T4610] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 108ms [ 99.823147][ T4610] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 99.830832][ T4904] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 99.852544][ T4249] XFS (loop4): Unmounting Filesystem [ 99.884090][ T4257] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.214171][ T4543] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.358679][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 100.463855][ T4543] usb 4-1: Using ep0 maxpacket: 16 [ 100.481481][ T4966] netlink: 'syz.0.219': attribute type 8 has an invalid length. [ 100.583873][ T4543] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 100.597712][ T4543] usb 4-1: config 0 has no interface number 0 [ 100.631252][ T4970] loop1: detected capacity change from 0 to 1024 [ 100.641186][ T4543] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.673069][ T4543] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.755428][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.824199][ T4543] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 100.842602][ T4543] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 100.866962][ T4543] usb 4-1: Product: syz [ 100.880826][ T4543] usb 4-1: SerialNumber: syz [ 100.882656][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 100.892724][ T4986] loop2: detected capacity change from 0 to 1024 [ 100.895657][ T4543] usb 4-1: config 0 descriptor?? [ 100.939035][ T4986] EXT4-fs: Ignoring removed orlov option [ 100.965556][ T4986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.974402][ T4543] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 100.990611][ T4543] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 101.016170][ T4986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.158145][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 101.264426][ T4962] usb 4-1: USB disconnect, device number 4 [ 101.283937][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 101.291588][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 101.320750][ T4962] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 101.324820][ T4998] loop2: detected capacity change from 0 to 512 [ 101.379353][ T4998] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.230: iget: bad extended attribute block 1 [ 101.401359][ T4998] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.230: couldn't read orphan inode 15 (err -117) [ 101.457824][ T4998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.491562][ T5005] loop1: detected capacity change from 0 to 128 [ 101.508354][ T4998] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 13: comm syz.2.230: lblock 0 mapped to illegal pblock 13 (length 1) [ 101.561737][ T5005] hpfs: bad mount options. [ 101.579567][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 102.026177][ T5022] netlink: 1 bytes leftover after parsing attributes in process `syz.3.242'. [ 102.061374][ T5025] loop1: detected capacity change from 0 to 64 [ 102.120155][ T26] audit: type=1326 audit(1730863276.988:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267937e719 code=0x7ffc0000 [ 102.217138][ T26] audit: type=1326 audit(1730863276.988:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267937e719 code=0x7ffc0000 [ 102.295805][ T26] audit: type=1326 audit(1730863276.988:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f267937e719 code=0x7ffc0000 [ 102.381048][ T26] audit: type=1326 audit(1730863276.988:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267937e719 code=0x7ffc0000 [ 102.417743][ T26] audit: type=1326 audit(1730863276.988:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5026 comm="syz.2.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267937e719 code=0x7ffc0000 [ 102.549971][ T5033] loop0: detected capacity change from 0 to 4096 [ 102.568051][ T5033] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 102.752713][ T5044] loop4: detected capacity change from 0 to 1024 [ 102.803302][ T5049] loop2: detected capacity change from 0 to 512 [ 102.835016][ T5049] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.849584][ T5044] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 102.878043][ T5049] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.902291][ T5049] EXT4-fs (loop2): 1 truncate cleaned up [ 102.911563][ T5049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.965275][ T5049] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 32793 (only 1 groups) [ 103.074608][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 103.489274][ T4611] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.743981][ T4611] usb 3-1: Using ep0 maxpacket: 8 [ 103.864045][ T4611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.884584][ T4611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.903784][ T4611] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 103.934760][ T4611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.970224][ T4611] usb 3-1: config 0 descriptor?? [ 103.973960][ T4543] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.078978][ T5097] netlink: 'syz.4.276': attribute type 4 has an invalid length. [ 104.087414][ T5097] netlink: 'syz.4.276': attribute type 2 has an invalid length. [ 104.223801][ T4543] usb 2-1: Using ep0 maxpacket: 16 [ 104.343940][ T4543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.363743][ T4543] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.393768][ T4543] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.433762][ T4543] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.463199][ T4543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.477908][ T4611] wacom 0003:056A:003F.0004: unknown main item tag 0x0 [ 104.495573][ T4543] usb 2-1: config 0 descriptor?? [ 104.532860][ T4611] wacom 0003:056A:003F.0004: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0 [ 104.708923][ T4611] usb 3-1: USB disconnect, device number 4 [ 105.007302][ T4543] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input11 [ 105.091582][ T5103] loop3: detected capacity change from 0 to 40427 [ 105.144560][ T4543] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 105.164270][ T5103] F2FS-fs (loop3): invalid crc value [ 105.181339][ T4543] usb 2-1: USB disconnect, device number 3 [ 105.198273][ T5103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.295613][ T5107] loop0: detected capacity change from 0 to 40427 [ 105.337969][ T5107] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 105.355228][ T5107] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 105.386922][ T5107] F2FS-fs (loop0): invalid crc value [ 105.432410][ T5107] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.434167][ T5103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.561789][ T4260] syz-executor: attempt to access beyond end of device [ 105.561789][ T4260] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.616371][ T5113] loop4: detected capacity change from 0 to 32768 [ 105.623656][ T5107] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.625175][ T5113] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.284 (5113) [ 105.663841][ T5107] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.719022][ T5113] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 105.768278][ T5113] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 105.799285][ T5113] BTRFS info (device loop4): enabling ssd optimizations [ 105.839280][ T5113] BTRFS info (device loop4): not using ssd optimizations [ 105.846645][ T5113] BTRFS info (device loop4): turning off barriers [ 105.856056][ T4250] syz-executor: attempt to access beyond end of device [ 105.856056][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.884575][ T5113] BTRFS info (device loop4): use no compression [ 105.890882][ T5113] BTRFS info (device loop4): using free space tree [ 105.916183][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 106.329459][ T5150] loop2: detected capacity change from 0 to 1024 [ 106.404459][ T5150] ext4: Bad value for 'max_batch_time' [ 106.448445][ T4249] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 106.481276][ T4243] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.682622][ T5155] loop1: detected capacity change from 0 to 2048 [ 106.694145][ T4543] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.740630][ T5155] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.776393][ T5158] loop0: detected capacity change from 0 to 1024 [ 106.780903][ T5159] netlink: 56 bytes leftover after parsing attributes in process `syz.2.296'. [ 106.793036][ T5158] EXT4-fs: Ignoring removed orlov option [ 106.802782][ T5159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 106.824766][ T5160] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.825103][ T5155] syz.1.294: attempt to access beyond end of device [ 106.825103][ T5155] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 106.858866][ T5158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.905606][ T5158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 107.054146][ T4543] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 107.081117][ T5169] loop2: detected capacity change from 0 to 256 [ 107.084726][ T4543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.152505][ T4543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.165361][ T5169] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 107.173846][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 107.207405][ T4543] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 107.210488][ T5169] FAT-fs (loop2): Filesystem has been set read-only [ 107.268931][ T4543] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 107.280989][ T4543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.308882][ T4543] usb 4-1: config 0 descriptor?? [ 107.480512][ T5179] loop1: detected capacity change from 0 to 2048 [ 107.540433][ T5179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.712160][ T5191] loop0: detected capacity change from 0 to 256 [ 107.759692][ T5191] exfat: Deprecated parameter 'utf8' [ 107.769025][ T5191] exfat: Deprecated parameter 'namecase' [ 107.778732][ T5191] exfat: Deprecated parameter 'namecase' [ 107.786686][ T5191] exfat: Deprecated parameter 'utf8' [ 107.826133][ T4543] thrustmaster 0003:044F:B653.0006: unbalanced delimiter at end of report description [ 107.831879][ T5191] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 107.840262][ T5195] loop4: detected capacity change from 0 to 64 [ 107.855806][ T4543] thrustmaster 0003:044F:B653.0006: parse failed [ 107.874142][ T4543] thrustmaster: probe of 0003:044F:B653.0006 failed with error -22 [ 107.977130][ T4249] hfs: node 4:3 still has 1 user(s)! [ 108.063854][ T4538] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 108.080310][ T5201] loop4: detected capacity change from 0 to 1024 [ 108.083303][ T4543] usb 4-1: USB disconnect, device number 5 [ 108.103307][ T5201] EXT4-fs: Ignoring removed orlov option [ 108.112740][ T5201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.202732][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.271564][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 108.434036][ T4538] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 108.442168][ T4538] usb 2-1: config 0 has no interface number 0 [ 108.483928][ T4538] usb 2-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.524275][ T4538] usb 2-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 108.538876][ T4538] usb 2-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.578962][ T4538] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 108.592786][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.621916][ T4538] usb 2-1: config 0 descriptor?? [ 108.674258][ T5194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.094727][ T5235] capability: warning: `syz.2.329' uses 32-bit capabilities (legacy support in use) [ 109.141991][ T4538] uclogic 0003:28BD:0909.0007: interface is invalid, ignoring [ 109.364616][ T4962] usb 2-1: USB disconnect, device number 4 [ 109.403009][ T5241] usb usb8: usbfs: process 5241 (syz.3.332) did not claim interface 0 before use [ 109.428830][ T5244] device gretap0 entered promiscuous mode [ 109.432963][ T5223] loop4: detected capacity change from 0 to 32768 [ 109.453610][ T5223] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.323 (5223) [ 109.498431][ T5244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.570170][ T5223] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 109.607882][ T5223] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 109.623805][ T5223] BTRFS info (device loop4): using free space tree [ 109.682477][ T5226] loop0: detected capacity change from 0 to 32768 [ 109.748049][ T5226] JBD2: Ignoring recovery information on journal [ 109.860080][ T5223] BTRFS info (device loop4): enabling ssd optimizations [ 109.910499][ T5226] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.025865][ T4249] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 110.060449][ T4612] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.352572][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 110.359230][ T4612] usb 4-1: Using ep0 maxpacket: 32 [ 110.506632][ T4612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 110.518818][ T4612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.548195][ T5290] loop4: detected capacity change from 0 to 512 [ 110.549069][ T4612] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 110.565846][ T5290] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.594083][ T4612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.604044][ T4295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.620299][ T4612] usb 4-1: config 0 descriptor?? [ 110.642420][ T5290] EXT4-fs (loop4): 1 orphan inode deleted [ 110.658026][ T5290] EXT4-fs (loop4): 1 truncate cleaned up [ 110.697438][ T5290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.770261][ T5290] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.340: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 110.854691][ T5290] EXT4-fs (loop4): Remounting filesystem read-only [ 110.869013][ T4295] usb 2-1: Using ep0 maxpacket: 16 [ 110.948659][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 110.993970][ T4295] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.034124][ T4295] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.048835][ T4295] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.077863][ T4295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.091661][ T4295] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 111.109398][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.126398][ T4612] kye 0003:0458:501A.0008: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 111.156758][ T4295] usb 2-1: config 0 descriptor?? [ 111.167942][ T4612] kye 0003:0458:501A.0008: tablet-enabling feature report not found [ 111.198172][ T4612] kye 0003:0458:501A.0008: tablet enabling failed [ 111.320441][ T5289] loop2: detected capacity change from 0 to 32768 [ 111.339058][ T4612] usb 4-1: USB disconnect, device number 6 [ 111.549871][ T5309] loop0: detected capacity change from 0 to 4096 [ 111.565039][ T5309] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 111.612636][ T5309] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 111.640302][ T4295] hid-generic 0003:045E:05DA.0009: ignoring exceeding usage max [ 111.676232][ T4295] hid-generic 0003:045E:05DA.0009: unbalanced collection at end of report description [ 111.739384][ T4295] hid-generic: probe of 0003:045E:05DA.0009 failed with error -22 [ 111.879190][ T4295] usb 2-1: USB disconnect, device number 5 [ 112.476143][ T5311] loop4: detected capacity change from 0 to 32768 [ 112.526382][ T5311] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.354 (5311) [ 112.598158][ T5311] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.634220][ T5311] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 112.644318][ T5311] BTRFS info (device loop4): using free space tree [ 112.952935][ T5319] loop3: detected capacity change from 0 to 32768 [ 112.997248][ T5360] loop0: detected capacity change from 0 to 256 [ 113.047986][ T5311] BTRFS info (device loop4): enabling ssd optimizations [ 113.066322][ T5362] loop1: detected capacity change from 0 to 1024 [ 113.068341][ T5319] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 113.122281][ T5362] hfsplus: request for non-existent node 3 in B*Tree [ 113.150069][ T5362] hfsplus: request for non-existent node 3 in B*Tree [ 113.234981][ T56] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 113.323174][ T4249] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.360011][ T4260] ocfs2: Unmounting device (7,3) on (node local) [ 114.158385][ T5389] loop0: detected capacity change from 0 to 1024 [ 114.228457][ T5389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 114.243941][ T5389] System zones: 0-1, 3-12 [ 114.257120][ T5353] loop2: detected capacity change from 0 to 32768 [ 114.270979][ T5389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 114.305867][ T4611] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.360712][ T5353] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.449849][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 114.551742][ T5378] loop4: detected capacity change from 0 to 32768 [ 114.573767][ T4611] usb 2-1: Using ep0 maxpacket: 8 [ 114.588118][ T5398] loop0: detected capacity change from 0 to 128 [ 114.604223][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 114.714167][ T4611] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 114.736512][ T4611] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 114.817838][ T4611] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.871701][ T5378] XFS (loop4): Mounting V5 Filesystem [ 115.024058][ T4611] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.033144][ T4611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.042002][ T5378] XFS (loop4): Ending clean mount [ 115.089622][ T4611] usb 2-1: Product: syz [ 115.094410][ T4611] usb 2-1: Manufacturer: syz [ 115.099056][ T4611] usb 2-1: SerialNumber: syz [ 115.142905][ T5378] XFS (loop4): Quotacheck needed: Please wait. [ 115.238256][ T5378] XFS (loop4): Quotacheck: Done. [ 115.280769][ T5420] loop0: detected capacity change from 0 to 512 [ 115.329599][ T5420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.372866][ T5420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.393965][ T4249] XFS (loop4): Unmounting Filesystem [ 115.472839][ T5420] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.526040][ T5416] loop3: detected capacity change from 0 to 40427 [ 115.547824][ T5416] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 115.555799][ T5416] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.592762][ T5416] F2FS-fs (loop3): invalid crc value [ 115.609449][ T5420] EXT4-fs warning (device loop0): __ext4_unlink:3335: inode #16: comm syz.0.385: Deleting file 'file2' with no links [ 115.637119][ T4611] usb 2-1: 0:2 : does not exist [ 115.680051][ T5416] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.753361][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 115.777266][ T5407] loop2: detected capacity change from 0 to 32768 [ 115.859636][ T5416] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.875693][ T5374] usb 2-1: USB disconnect, device number 6 [ 115.889766][ T5407] JBD2: Ignoring recovery information on journal [ 115.930486][ T5416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 115.958888][ T5430] autofs4:pid:5430:autofs_fill_super: called with bogus options [ 116.065294][ T5407] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.201563][ T4260] syz-executor: attempt to access beyond end of device [ 116.201563][ T4260] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.292628][ T5440] loop0: detected capacity change from 0 to 512 [ 116.321364][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 116.388507][ T5440] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.392: casefold flag without casefold feature [ 116.401748][ T5440] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.392: couldn't read orphan inode 15 (err -117) [ 116.433371][ T5440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.544761][ T5443] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 116.662243][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 116.952494][ T5458] loop1: detected capacity change from 0 to 1024 [ 117.043893][ T5374] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.121003][ T5457] loop0: detected capacity change from 0 to 8192 [ 117.167986][ T5457] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.182980][ T5457] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 117.194441][ T5457] REISERFS (device loop0): using ordered data mode [ 117.201392][ T5457] reiserfs: using flush barriers [ 117.209723][ T5457] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.226895][ T5457] REISERFS (device loop0): checking transaction log (loop0) [ 117.343120][ T5457] REISERFS (device loop0): Using tea hash to sort names [ 117.355427][ T5457] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 117.564068][ T5374] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 117.583394][ T5374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.612888][ T5374] usb 5-1: Product: syz [ 117.633193][ T5374] usb 5-1: Manufacturer: syz [ 117.640128][ T5374] usb 5-1: SerialNumber: syz [ 117.664777][ T5374] usb 5-1: config 0 descriptor?? [ 117.760888][ T5473] loop2: detected capacity change from 0 to 8192 [ 117.787791][ T5473] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.933848][ T5374] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.937085][ T5473] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 117.952891][ T5374] asix: probe of 5-1:0.0 failed with error -71 [ 117.974170][ T5473] REISERFS (device loop2): using ordered data mode [ 118.000806][ T5374] usb 5-1: USB disconnect, device number 2 [ 118.017092][ T5473] reiserfs: using flush barriers [ 118.065245][ T5473] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.122555][ T5473] REISERFS (device loop2): checking transaction log (loop2) [ 118.356889][ T5473] REISERFS (device loop2): Using tea hash to sort names [ 118.377229][ T5473] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 118.496481][ T5471] loop3: detected capacity change from 0 to 32768 [ 118.570052][ T5471] JBD2: Ignoring recovery information on journal [ 118.665137][ T5487] can0: slcan on ptm0. [ 118.698090][ T5484] loop0: detected capacity change from 0 to 2048 [ 118.703172][ T5471] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 118.762359][ T5484] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.794750][ T5486] can0 (unregistered): slcan off ptm0. [ 118.859425][ T4260] ocfs2: Unmounting device (7,3) on (node local) [ 119.067324][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 119.775751][ T5529] program syz.1.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.231596][ T5533] loop4: detected capacity change from 0 to 8192 [ 120.280678][ T5533] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.389125][ T5521] loop0: detected capacity change from 0 to 32768 [ 120.391601][ T5533] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 120.478645][ T5533] REISERFS (device loop4): using ordered data mode [ 120.494167][ T5533] reiserfs: using flush barriers [ 120.497096][ T4611] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.505673][ T5533] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.584860][ T5533] REISERFS (device loop4): checking transaction log (loop4) [ 120.616511][ T5533] REISERFS (device loop4): Using tea hash to sort names [ 120.655164][ T5523] loop3: detected capacity change from 0 to 32768 [ 120.783728][ T4611] usb 3-1: Using ep0 maxpacket: 16 [ 120.792383][ T5523] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 120.904034][ T4611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.959893][ T4611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.997981][ T4611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.031739][ T4611] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.047899][ T4260] ocfs2: Unmounting device (7,3) on (node local) [ 121.071200][ T4611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.129187][ T4611] usb 3-1: config 0 descriptor?? [ 121.349348][ T5555] loop4: detected capacity change from 0 to 164 [ 121.620222][ T4611] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 121.643637][ T5544] loop1: detected capacity change from 0 to 32768 [ 121.653625][ T5561] loop3: detected capacity change from 0 to 128 [ 121.682747][ T5561] EXT4-fs: Ignoring removed i_version option [ 121.684209][ T4611] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input12 [ 121.704731][ T5561] EXT4-fs: Ignoring removed orlov option [ 121.748689][ T5544] XFS (loop1): Mounting V5 Filesystem [ 121.760713][ T4611] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 121.805475][ T5550] loop0: detected capacity change from 0 to 32768 [ 121.842839][ T5561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.862010][ T5550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.876814][ T5561] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.899400][ T5550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 121.908615][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.935895][ T5544] XFS (loop1): Ending clean mount [ 121.965947][ T5550] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 121.977065][ T4611] usb 3-1: USB disconnect, device number 5 [ 121.983414][ T4538] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 121.990745][ T4538] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.045371][ T5561] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 122.111000][ T4257] XFS (loop1): Unmounting Filesystem [ 122.118905][ T4538] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 122.135707][ T4538] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.142188][ T5550] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.157102][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 122.703001][ T5579] loop2: detected capacity change from 0 to 64 [ 122.926646][ T5581] loop0: detected capacity change from 0 to 256 [ 122.969708][ T5581] exfat: Deprecated parameter 'namecase' [ 123.003467][ T5566] loop4: detected capacity change from 0 to 32768 [ 123.037976][ T5581] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d) [ 123.099545][ T5566] find_entry called with index = 0 [ 123.117151][ T5566] read_mapping_page failed! [ 123.133529][ T5566] ERROR: (device loop4): txCommit: [ 123.133529][ T5566] [ 123.262971][ T5575] loop3: detected capacity change from 0 to 32768 [ 123.344111][ T4538] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.390086][ T5575] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 123.541374][ T5592] loop4: detected capacity change from 0 to 512 [ 123.549998][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 123.550021][ T26] audit: type=1800 audit(1730863298.418:21): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.448" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 123.613817][ T4538] usb 3-1: Using ep0 maxpacket: 32 [ 123.615180][ T5592] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.453: casefold flag without casefold feature [ 123.632700][ T5592] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.453: couldn't read orphan inode 15 (err -117) [ 123.648225][ T5592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.681064][ T4260] ocfs2: Unmounting device (7,3) on (node local) [ 123.752734][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 123.893963][ T4538] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 123.914133][ T4538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.922189][ T4538] usb 3-1: Product: syz [ 123.954561][ T4538] usb 3-1: Manufacturer: syz [ 123.969422][ T4538] usb 3-1: SerialNumber: syz [ 123.990025][ T4538] usb 3-1: config 0 descriptor?? [ 124.044560][ T4538] hub 3-1:0.0: bad descriptor, ignoring hub [ 124.070877][ T4538] hub: probe of 3-1:0.0 failed with error -5 [ 124.088224][ T4538] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 124.183775][ T4612] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.423902][ T4612] usb 5-1: Using ep0 maxpacket: 16 [ 124.490498][ T5615] vivid-006: disconnect [ 124.498088][ T5614] vivid-006: reconnect [ 124.546076][ T5600] loop1: detected capacity change from 0 to 32768 [ 124.557261][ T4612] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 124.594095][ T4612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.625891][ T4612] usb 5-1: config 0 descriptor?? [ 124.634415][ T5600] XFS (loop1): Mounting V5 Filesystem [ 124.679789][ T4612] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 124.703936][ T4538] gspca_vc032x: reg_r err -71 [ 124.715469][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.747682][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.764764][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.791927][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.798595][ T5609] loop0: detected capacity change from 0 to 40427 [ 124.816996][ T5609] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 124.829932][ T5609] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.834915][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.848524][ T5609] F2FS-fs (loop0): invalid crc value [ 124.862384][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.877648][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.885941][ T5609] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.890411][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.909988][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.922603][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.934186][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.939626][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.950053][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.957369][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.962847][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.975328][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.981051][ T5609] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.981064][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.981078][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 124.992024][ T5609] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.000076][ T4538] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.012231][ T4538] gspca_vc032x: Unknown sensor... [ 125.019539][ T4538] vc032x: probe of 3-1:0.0 failed with error -22 [ 125.038693][ T5600] XFS (loop1): Ending clean mount [ 125.053004][ T5600] XFS (loop1): Quotacheck needed: Please wait. [ 125.071012][ T4538] usb 3-1: USB disconnect, device number 6 [ 125.110626][ T5600] XFS (loop1): Quotacheck: Done. [ 125.142240][ T26] audit: type=1800 audit(1730863300.008:22): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.461" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 125.212557][ T4257] XFS (loop1): Unmounting Filesystem [ 125.293610][ T5634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 125.333927][ T4612] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 125.348908][ T4612] sq905c: probe of 5-1:0.0 failed with error -71 [ 125.392356][ T4612] usb 5-1: USB disconnect, device number 3 [ 125.579711][ T5638] loop3: detected capacity change from 0 to 1024 [ 125.895695][ T5644] device vlan2 entered promiscuous mode [ 125.901299][ T5644] device wlan0 entered promiscuous mode [ 125.939818][ T5644] device wlan0 left promiscuous mode [ 126.665040][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 126.782114][ T5642] loop1: detected capacity change from 0 to 32768 [ 126.824077][ T5642] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.466 (5642) [ 126.892042][ T5642] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 126.934945][ T5642] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 126.970301][ T5642] BTRFS info (device loop1): using free space tree [ 127.251662][ T5658] loop3: detected capacity change from 0 to 32768 [ 127.271355][ T5642] BTRFS info (device loop1): enabling ssd optimizations [ 127.291874][ T5654] loop0: detected capacity change from 0 to 40427 [ 127.303452][ T5654] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 127.319913][ T5654] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.335972][ T5654] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 127.365892][ T5654] F2FS-fs (loop0): invalid crc value [ 127.383522][ T5658] XFS (loop3): Mounting V5 Filesystem [ 127.389255][ T4612] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.438528][ T5654] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.460971][ T4257] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.530325][ T5660] loop4: detected capacity change from 0 to 40427 [ 127.577443][ T5660] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 127.616938][ T5654] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.629217][ T5660] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 127.638409][ T5654] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.640867][ T4612] usb 3-1: Using ep0 maxpacket: 32 [ 127.655674][ T5660] F2FS-fs (loop4): invalid crc value [ 127.717173][ T5658] XFS (loop3): Ending clean mount [ 127.729359][ T5658] XFS (loop3): Quotacheck needed: Please wait. [ 127.741298][ T5660] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.785368][ T4612] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 127.806020][ T5658] XFS (loop3): Quotacheck: Done. [ 127.955059][ T5660] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 127.962151][ T5660] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.983561][ T4260] XFS (loop3): Unmounting Filesystem [ 128.005999][ T4612] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 128.024033][ T4612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.065118][ T4612] usb 3-1: Product: syz [ 128.069339][ T4612] usb 3-1: Manufacturer: syz [ 128.100119][ T4612] usb 3-1: SerialNumber: syz [ 128.121690][ T4612] usb 3-1: config 0 descriptor?? [ 128.164028][ T5675] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.172250][ T4249] syz-executor: attempt to access beyond end of device [ 128.172250][ T4249] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.191003][ T4612] hub 3-1:0.0: bad descriptor, ignoring hub [ 128.207202][ T4612] hub: probe of 3-1:0.0 failed with error -5 [ 128.217241][ T4612] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 128.307397][ T5708] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 128.513795][ T4612] usb 3-1: USB disconnect, device number 7 [ 129.117642][ T5734] syz.3.498 sent an empty control message without MSG_MORE. [ 129.129842][ T5732] loop1: detected capacity change from 0 to 512 [ 129.153891][ T5732] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.182179][ T5732] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 129.207302][ T5732] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.497: bg 0: block 18: invalid block bitmap [ 129.370481][ T5732] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 129.410683][ T5732] EXT4-fs (loop1): 1 truncate cleaned up [ 129.424958][ T5732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.438340][ T5732] ext2 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.547803][ T5743] loop4: detected capacity change from 0 to 1024 [ 129.567573][ T5732] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #2: block 3: comm syz.1.497: lblock 0 mapped to illegal pblock 3 (length 1) [ 129.586024][ T5739] loop3: detected capacity change from 0 to 8192 [ 129.618206][ T5739] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 129.639714][ T5739] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 129.656112][ T5739] REISERFS (device loop3): using ordered data mode [ 129.671034][ T5739] reiserfs: using flush barriers [ 129.718086][ T5729] loop0: detected capacity change from 0 to 32768 [ 129.740599][ T5739] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.790704][ T26] audit: type=1804 audit(1730863304.658:23): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.502" name="/newroot/105/file0/bus" dev="loop4" ino=26 res=1 errno=0 [ 129.860881][ T5739] REISERFS (device loop3): checking transaction log (loop3) [ 129.920958][ T5729] XFS (loop0): Mounting V5 Filesystem [ 129.921441][ T5739] REISERFS (device loop3): Using r5 hash to sort names [ 129.945595][ T5739] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 129.983163][ T46] hfsplus: b-tree write err: -5, ino 4 [ 130.026425][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 130.124987][ T5729] XFS (loop0): Ending clean mount [ 130.317191][ T4250] XFS (loop0): Unmounting Filesystem [ 130.547466][ T41] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.824076][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 130.848322][ T5776] loop2: detected capacity change from 0 to 1024 [ 130.866418][ T5776] EXT4-fs: Ignoring removed orlov option [ 130.873407][ T5776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.900446][ T5776] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.918020][ T5776] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 130.930229][ T5776] EXT4-fs (loop2): invalid journal inode [ 130.940559][ T5776] EXT4-fs (loop2): can't get journal size [ 130.952574][ T5776] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.964057][ T41] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.981674][ T41] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 130.992960][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.010139][ T5783] loop4: detected capacity change from 0 to 256 [ 131.017637][ T41] usb 2-1: config 0 descriptor?? [ 131.030560][ T5782] loop0: detected capacity change from 0 to 128 [ 131.063880][ T5783] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.075580][ T5782] vxfs: unable to set final block size [ 131.083948][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 131.103948][ T4543] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.137194][ T5783] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 131.160449][ T5782] VFS: could not find a valid V7 on nullb0. [ 131.167361][ T5783] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 131.175473][ T5783] UDF-fs: Scanning with blocksize 512 failed [ 131.213306][ T5783] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 131.224612][ T5785] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 131.237159][ T5783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.288436][ T5785] team0: Device hsr_slave_0 failed to register rx_handler [ 131.290263][ T41] usb 2-1: USB disconnect, device number 7 [ 131.339486][ T26] audit: type=1800 audit(1730863306.208:24): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.514" name="file2" dev="loop4" ino=66 res=0 errno=0 [ 131.360819][ T4543] usb 4-1: Using ep0 maxpacket: 8 [ 131.494140][ T4543] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.505449][ T4543] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.516160][ T4543] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.537450][ T4543] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.559910][ T4543] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.569794][ T4543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.743777][ T26] audit: type=1326 audit(1730863306.608:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.2.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f267937e719 code=0x0 [ 131.843935][ T4543] usb 4-1: GET_CAPABILITIES returned 0 [ 131.849644][ T4543] usbtmc 4-1:16.0: can't read capabilities [ 131.989060][ T4538] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.064286][ T4543] usb 4-1: USB disconnect, device number 7 [ 132.243884][ T4538] usb 5-1: Using ep0 maxpacket: 8 [ 132.252152][ T5807] binder: 5806:5807 ioctl c00c620f 0 returned -14 [ 132.364022][ T4538] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.382031][ T4538] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.394381][ T4538] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.404603][ T4538] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.423904][ T4538] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.432983][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.707653][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.714152][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.722061][ T4538] usb 5-1: GET_CAPABILITIES returned 0 [ 132.727713][ T4538] usbtmc 5-1:16.0: can't read capabilities [ 132.944694][ T5374] usb 5-1: USB disconnect, device number 4 [ 133.013383][ T5827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'. [ 133.197447][ T5831] netlink: 88 bytes leftover after parsing attributes in process `syz.2.536'. [ 133.222708][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 133.457332][ T5835] loop1: detected capacity change from 0 to 4096 [ 133.501945][ T5835] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 133.828044][ T5825] loop3: detected capacity change from 0 to 32768 [ 133.885077][ T5825] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.533 (5825) [ 133.928308][ T5825] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.946553][ T5825] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 133.965621][ T5825] BTRFS info (device loop3): using free space tree [ 134.086532][ T5835] ntfs3: Cannot load iocharset cp862Œ`sk=00000000000000000000006 [ 134.115826][ T5825] BTRFS info (device loop3): enabling ssd optimizations [ 134.338520][ T4260] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.403218][ T5837] loop2: detected capacity change from 0 to 32768 [ 134.537434][ T5877] loop0: detected capacity change from 0 to 64 [ 134.678347][ T5837] XFS (loop2): Mounting V5 Filesystem [ 134.810790][ T5837] XFS (loop2): Ending clean mount [ 135.004986][ T4255] XFS (loop2): Unmounting Filesystem [ 135.451531][ T2944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.668017][ T2944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.852556][ T5882] loop3: detected capacity change from 0 to 32768 [ 135.871825][ T2944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.961071][ T5882] find_entry called with index = 0 [ 135.997399][ T5882] read_mapping_page failed! [ 136.002064][ T5882] ERROR: (device loop3): txCommit: [ 136.002064][ T5882] [ 136.037554][ T2944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.199187][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.210487][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.223980][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.232894][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.241645][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 136.254242][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.902806][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 136.932473][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 136.989702][ T5915] device macvlan2 entered promiscuous mode [ 137.716564][ T5949] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 137.757452][ T5949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.569'. [ 137.826187][ T5953] loop0: detected capacity change from 0 to 256 [ 137.891349][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 137.907661][ T5953] exfat: Deprecated parameter 'namecase' [ 137.913388][ T5953] exfat: Deprecated parameter 'utf8' [ 137.969436][ T5953] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 138.031435][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 138.050379][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 138.088024][ T5957] device macvlan2 entered promiscuous mode [ 138.294219][ T4263] Bluetooth: hci3: command tx timeout [ 138.305329][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.577'. [ 138.585957][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.606757][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.629739][ T5907] device bridge_slave_0 entered promiscuous mode [ 138.651556][ T5973] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.045376][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.062850][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.104138][ T5907] device bridge_slave_1 entered promiscuous mode [ 139.259950][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.482425][ T5964] loop0: detected capacity change from 0 to 32768 [ 139.515164][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.558016][ T5964] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.576 (5964) [ 139.625586][ T5964] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 139.684880][ T5964] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 139.711696][ T2944] device hsr_slave_0 left promiscuous mode [ 139.723881][ T5964] BTRFS info (device loop0): using free space tree [ 139.779897][ T2944] device hsr_slave_1 left promiscuous mode [ 139.811132][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.837008][ T5964] BTRFS info (device loop0): enabling ssd optimizations [ 139.863814][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.953083][ T2944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.970745][ T2944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.026205][ T2944] device bridge_slave_1 left promiscuous mode [ 140.034832][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.121539][ T2944] device bridge_slave_0 left promiscuous mode [ 140.134807][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.245449][ T4250] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 140.374360][ T4263] Bluetooth: hci3: command tx timeout [ 140.491987][ T5983] loop2: detected capacity change from 0 to 40427 [ 140.500167][ T2944] device veth1_macvtap left promiscuous mode [ 140.507013][ T2944] device veth0_macvtap left promiscuous mode [ 140.531265][ T2944] device veth1_vlan left promiscuous mode [ 140.550544][ T2944] device veth0_vlan left promiscuous mode [ 140.556568][ T5983] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 140.583895][ T5983] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.626128][ T5983] F2FS-fs (loop2): invalid crc value [ 140.665449][ T5983] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.761468][ T5983] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.769258][ T5983] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.925815][ T4333] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 140.941267][ T4333] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 141.697756][ T2944] team0 (unregistering): Port device team_slave_1 removed [ 141.783337][ T2944] team0 (unregistering): Port device team_slave_0 removed [ 141.840781][ T2944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.904709][ T2944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.293802][ T2944] bond0 (unregistering): Released all slaves [ 142.405110][ T6022] netlink: 'syz.3.586': attribute type 10 has an invalid length. [ 142.453983][ T4266] Bluetooth: hci3: command tx timeout [ 142.472946][ T6022] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.519294][ T5907] team0: Port device team_slave_0 added [ 142.575569][ T5907] team0: Port device team_slave_1 added [ 142.689567][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.737257][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.763439][ T26] audit: type=1326 audit(1730863317.608:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.3.595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcffbd7e719 code=0x0 [ 142.792903][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.807384][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.814990][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.825281][ T6051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.596'. [ 142.842041][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.862252][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.596'. [ 143.141086][ T6059] loop4: detected capacity change from 0 to 512 [ 143.165046][ T6059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.166262][ T5907] device hsr_slave_0 entered promiscuous mode [ 143.229388][ T5907] device hsr_slave_1 entered promiscuous mode [ 143.249136][ T6059] EXT4-fs (loop4): 1 truncate cleaned up [ 143.269184][ T6059] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.281375][ T5907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.294895][ T5907] Cannot create hsr debugfs directory [ 143.369743][ T6059] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.599: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 143.421070][ T6059] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 143.551959][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 143.972435][ T6078] loop4: detected capacity change from 0 to 512 [ 144.008949][ T6078] EXT4-fs: Ignoring removed orlov option [ 144.116725][ T6078] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.177615][ T6078] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 144.248046][ T6078] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.604: Failed to acquire dquot type 0 [ 144.337079][ T6078] EXT4-fs (loop4): Remounting filesystem read-only [ 144.376631][ T6078] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.435608][ T6078] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 144.450611][ T6078] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.604: Failed to acquire dquot type 0 [ 144.462990][ T6078] EXT4-fs (loop4): Remounting filesystem read-only [ 144.493603][ T6078] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.521622][ T6078] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 144.531812][ T6078] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.604: Failed to acquire dquot type 0 [ 144.545854][ T4266] Bluetooth: hci3: command tx timeout [ 144.557555][ T6078] EXT4-fs (loop4): Remounting filesystem read-only [ 144.569227][ T6078] EXT4-fs (loop4): 1 orphan inode deleted [ 144.577243][ T6078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.589918][ T6078] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.644711][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 144.687484][ T6078] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.689693][ T6093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 144.710375][ T6078] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 144.723970][ T6093] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.761511][ T6078] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.604: Failed to acquire dquot type 0 [ 144.791163][ T6078] EXT4-fs (loop4): Remounting filesystem read-only [ 144.903974][ T5374] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.919530][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 145.153947][ T5374] usb 3-1: Using ep0 maxpacket: 16 [ 145.258282][ T6109] loop4: detected capacity change from 0 to 1024 [ 145.275277][ T5374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 145.285673][ T6110] netlink: 'syz.0.614': attribute type 1 has an invalid length. [ 145.342018][ T5907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.363119][ T5907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.401834][ T5907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.420264][ T9] hfsplus: b-tree write err: -5, ino 4 [ 145.460933][ T5907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.464014][ T5374] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 145.508191][ T5374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.557990][ T5374] usb 3-1: Product: syz [ 145.579060][ T5374] usb 3-1: Manufacturer: syz [ 145.602406][ T5374] usb 3-1: SerialNumber: syz [ 145.640404][ T5374] usb 3-1: config 0 descriptor?? [ 145.716081][ T5374] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 145.732988][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.748274][ T5374] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 145.834820][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.850603][ T6126] loop4: detected capacity change from 0 to 512 [ 145.865911][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.916066][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.951108][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.982087][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.021561][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.030198][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.129394][ T6126] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.169661][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.197124][ T6126] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.204566][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.278128][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.303292][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.310495][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.344143][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.364017][ T5374] em28xx 3-1:0.0: unknown em28xx chip ID (127) [ 146.374553][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.432990][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.483789][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.503178][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.536870][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.563207][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.592725][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.611627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.648890][ T5907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.693037][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.723891][ T5374] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 146.737786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.754644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.757315][ T5374] em28xx 3-1:0.0: board has no eeprom [ 146.934000][ T5374] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 146.952173][ T5374] em28xx 3-1:0.0: dvb set to bulk mode. [ 146.997699][ T5374] usb 3-1: USB disconnect, device number 8 [ 147.014665][ T5374] em28xx 3-1:0.0: Disconnecting em28xx [ 147.020786][ T4296] em28xx 3-1:0.0: Binding DVB extension [ 147.119330][ T6150] loop0: detected capacity change from 0 to 8192 [ 147.192343][ T6150] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.234275][ T6150] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 147.263988][ T6150] REISERFS (device loop0): using ordered data mode [ 147.270609][ T6150] reiserfs: using flush barriers [ 147.288604][ T4296] em28xx 3-1:0.0: Registering input extension [ 147.316186][ T5374] em28xx 3-1:0.0: Closing input extension [ 147.326819][ T6150] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.402149][ T5374] em28xx 3-1:0.0: Freeing device [ 147.407929][ T6150] REISERFS (device loop0): checking transaction log (loop0) [ 147.479419][ T6150] REISERFS (device loop0): Using r5 hash to sort names [ 147.481936][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 147.501203][ T6150] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 147.507029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.528273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.577308][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.662269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.691150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.808874][ T5907] device veth0_vlan entered promiscuous mode [ 147.850858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.885298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.928645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.985382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.039413][ T5907] device veth1_vlan entered promiscuous mode [ 148.085744][ T6144] loop3: detected capacity change from 0 to 40427 [ 148.103496][ T6144] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 148.124655][ T6144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.160491][ T6144] F2FS-fs (loop3): invalid crc value [ 148.227453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.243538][ T6144] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.251286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.269941][ T5907] device veth0_macvtap entered promiscuous mode [ 148.290790][ T5907] device veth1_macvtap entered promiscuous mode [ 148.344320][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.374878][ T6188] loop4: detected capacity change from 0 to 2048 [ 148.413779][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.439002][ T6144] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 148.440401][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.447994][ T6188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.477799][ T6144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.491165][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.532727][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.560677][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.599799][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.615904][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.631591][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.645614][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 148.666627][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.685725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.713048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.745422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.762052][ T4306] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 148.773415][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.791791][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.811498][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.835168][ T4306] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 148.855720][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.884009][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.919269][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.951288][ T5907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.978851][ T5907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.002960][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.014781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.048596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.074757][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.119944][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.150704][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.160070][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.339968][ T6203] loop4: detected capacity change from 0 to 4096 [ 149.346649][ T5374] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.390098][ T6181] loop2: detected capacity change from 0 to 32768 [ 149.397253][ T6203] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 149.409090][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.450743][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.501645][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.507929][ T6203] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.521977][ T6181] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.571545][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.592159][ T6203] ntfs3: loop4: Failed to load $Extend. [ 149.594036][ T5374] usb 1-1: Using ep0 maxpacket: 16 [ 149.624257][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.672961][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.739081][ T5374] usb 1-1: config 0 has no interfaces? [ 149.846753][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 149.870302][ T5374] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.903248][ T5374] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.930174][ T5374] usb 1-1: Product: syz [ 149.948472][ T5374] usb 1-1: Manufacturer: syz [ 150.019579][ T5374] r8152-cfgselector 1-1: config 0 descriptor?? [ 150.117097][ T6220] device bond1 entered promiscuous mode [ 150.146976][ T6220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.354927][ T5374] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 150.568703][ T4422] usb 1-1: USB disconnect, device number 4 [ 150.921270][ T6220] bond1 (unregistering): Released all slaves [ 150.972459][ T6237] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 151.501870][ T6275] loop3: detected capacity change from 0 to 1024 [ 151.885313][ T4306] hfsplus: b-tree write err: -5, ino 4 [ 152.189832][ T26] audit: type=1326 audit(1730863327.058:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.4.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f243117e719 code=0x0 [ 152.419706][ T6268] loop1: detected capacity change from 0 to 32768 [ 152.441495][ T6270] loop0: detected capacity change from 0 to 32768 [ 152.448186][ T6268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.652 (6268) [ 152.493980][ T6268] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.555796][ T6270] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 152.599398][ T6268] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 152.669961][ T6268] BTRFS info (device loop1): using free space tree [ 152.673780][ T6289] loop2: detected capacity change from 0 to 32768 [ 152.691679][ T6289] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.660 (6289) [ 152.708575][ T6270] (syz.0.653,6270,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 152.757957][ T6289] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.774215][ T6289] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 152.782939][ T6289] BTRFS info (device loop2): using free space tree [ 152.837887][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 152.944343][ T6268] BTRFS info (device loop1): enabling ssd optimizations [ 153.019881][ T6289] BTRFS info (device loop2): enabling ssd optimizations [ 153.266598][ T6343] loop3: detected capacity change from 0 to 256 [ 153.276715][ T4255] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.298350][ T6343] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 153.368654][ T5907] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.359465][ T6339] loop4: detected capacity change from 0 to 32768 [ 154.387225][ T6339] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.665 (6339) [ 154.413960][ T4538] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.467625][ T6339] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 154.493754][ T6339] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 154.503234][ T6339] BTRFS info (device loop4): using free space tree [ 154.629395][ T6339] BTRFS info (device loop4): enabling ssd optimizations [ 154.774353][ T4538] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.785835][ T4538] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 154.820708][ T4538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.858076][ T4538] usb 4-1: config 0 descriptor?? [ 154.889413][ T4249] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 154.908444][ T6388] program syz.0.680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.312786][ T6399] loop1: detected capacity change from 0 to 128 [ 155.405724][ T6399] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.431460][ T6399] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.793944][ T4538] video4linux radio48: keene_cmd_main failed (-71) [ 155.801126][ T4538] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 155.851114][ T4538] usb 4-1: USB disconnect, device number 8 [ 155.921556][ T5907] EXT4-fs (loop1): unmounting filesystem. [ 156.052899][ T6415] loop4: detected capacity change from 0 to 2048 [ 156.160674][ T6415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.257585][ T6415] EXT4-fs error (device loop4): ext4_ext_precache:645: inode #2: comm syz.4.688: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 156.419955][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 156.556771][ T6427] loop4: detected capacity change from 0 to 64 [ 156.984960][ T6439] loop2: detected capacity change from 0 to 128 [ 157.027156][ T6439] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 157.189671][ T4255] sysv_free_block: trying to free block not in datazone [ 157.223582][ T4255] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 157.431767][ T6451] Bluetooth: MGMT ver 1.22 [ 157.433845][ T4538] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.486043][ T6453] loop4: detected capacity change from 0 to 164 [ 157.693848][ T4538] usb 2-1: Using ep0 maxpacket: 16 [ 157.785904][ T6433] loop3: detected capacity change from 0 to 32768 [ 157.813541][ T6433] XFS: attr2 mount option is deprecated. [ 157.833917][ T4538] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.841975][ T4538] usb 2-1: config 0 has no interface number 0 [ 157.869377][ T4538] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.901821][ T4538] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.950705][ T4538] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 157.955458][ T6433] XFS (loop3): Mounting V5 Filesystem [ 157.972373][ T4538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.995753][ T4538] usb 2-1: config 0 descriptor?? [ 158.108442][ T6433] XFS (loop3): Ending clean mount [ 158.126448][ T6433] XFS (loop3): Quotacheck needed: Please wait. [ 158.158656][ T6449] loop2: detected capacity change from 0 to 32768 [ 158.200950][ T6433] XFS (loop3): Quotacheck: Done. [ 158.219319][ T4608] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.268540][ T6449] XFS (loop2): Mounting V5 Filesystem [ 158.347302][ T4260] XFS (loop3): Unmounting Filesystem [ 158.415472][ T6449] XFS (loop2): Ending clean mount [ 158.490342][ T6449] XFS (loop2): Quotacheck needed: Please wait. [ 158.577990][ T6449] XFS (loop2): Quotacheck: Done. [ 158.643927][ T4608] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.651984][ T4608] usb 1-1: config 0 has no interface number 0 [ 158.668957][ T4608] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.694092][ T4538] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000B/input/input15 [ 158.700364][ T4608] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.748800][ T4608] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 158.778434][ T4608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.808745][ T4608] usb 1-1: config 0 descriptor?? [ 158.834228][ T4538] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.000B/input/input16 [ 158.871516][ T4255] XFS (loop2): Unmounting Filesystem [ 158.948845][ T6484] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 158.984179][ T4538] uclogic 0003:28BD:0071.000B: input,hiddev0,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 159.022438][ T4538] usb 2-1: USB disconnect, device number 8 [ 159.027187][ T6482] loop4: detected capacity change from 0 to 4096 [ 159.041844][ T6482] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 159.086555][ T6482] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 159.106106][ T6482] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 159.125591][ T6482] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 159.144618][ T6482] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 159.202372][ T6482] ntfs: volume version 3.1. [ 159.317477][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.339833][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.366041][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.375460][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.383284][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.392334][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.425962][ T4608] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 159.470708][ T4608] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 159.510974][ T4608] hid_prodikeys: hid-prodikeys: failed to find output report [ 159.510974][ T4608] [ 159.572111][ T4608] usb 1-1: USB disconnect, device number 5 [ 159.612229][ T6494] loop2: detected capacity change from 0 to 128 [ 159.730662][ T6494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.748344][ T6499] loop1: detected capacity change from 0 to 512 [ 159.760123][ T6494] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.827823][ T6499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.838110][ T6499] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.848720][ T26] audit: type=1326 audit(1730863334.708:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.2.712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f267937e719 code=0x0 [ 160.018198][ T5907] EXT4-fs (loop1): unmounting filesystem. [ 160.160399][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 160.568498][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 160.653014][ T6526] loop0: detected capacity change from 0 to 512 [ 160.754237][ T6528] loop4: detected capacity change from 0 to 1024 [ 160.890273][ T6528] hfsplus: found bad thread record in catalog [ 160.993421][ T2944] hfsplus: found bad thread record in catalog [ 161.012855][ T2944] hfsplus: found bad thread record in catalog [ 161.096295][ T4607] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.273942][ T4606] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.297578][ T6553] device bond_slave_0 entered promiscuous mode [ 161.304451][ T6553] device bond_slave_1 entered promiscuous mode [ 161.315759][ T6553] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 161.325173][ T6553] device bond_slave_0 left promiscuous mode [ 161.331149][ T6553] device bond_slave_1 left promiscuous mode [ 161.377959][ T4607] usb 1-1: Using ep0 maxpacket: 8 [ 161.504015][ T4607] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 161.543556][ T4607] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 161.584060][ T4607] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.612326][ T4607] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.637678][ T4607] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 161.658899][ T4607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.684009][ T4606] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 161.701961][ T4606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.712625][ T4606] usb 4-1: config 0 descriptor?? [ 161.773039][ T4606] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 161.829341][ T6567] tap0: tun_chr_ioctl cmd 3233830971 [ 161.851878][ T6569] loop2: detected capacity change from 0 to 1024 [ 161.987403][ T4607] usb 1-1: GET_CAPABILITIES returned 0 [ 161.998837][ T4607] usbtmc 1-1:16.0: can't read capabilities [ 162.040909][ T9] hfsplus: b-tree write err: -5, ino 4 [ 162.233929][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.245620][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.254988][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.264284][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.273570][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.282877][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.292393][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.301693][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.310992][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.320284][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.329569][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.338818][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.348150][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.357387][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.366627][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.375868][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 162.385588][ T6536] usbtmc 1-1:16.0: Unable to send data, error -71 [ 162.442247][ T4605] usb 1-1: USB disconnect, device number 6 [ 162.453871][ T4606] gspca_cpia1: usb_control_msg 01, error -71 [ 162.459901][ T4606] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 162.511153][ T4606] usb 4-1: USB disconnect, device number 9 [ 162.721971][ T6586] loop1: detected capacity change from 0 to 4096 [ 162.745651][ T6586] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 162.822645][ T6586] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 162.830163][ T6586] ntfs3: loop1: Failed to load $Extend. [ 163.047381][ T6591] device bond_slave_0 entered promiscuous mode [ 163.053695][ T6591] device bond_slave_1 entered promiscuous mode [ 163.100552][ T6591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.135208][ T6591] device bond_slave_0 left promiscuous mode [ 163.141248][ T6591] device bond_slave_1 left promiscuous mode [ 163.399410][ T6601] loop0: detected capacity change from 0 to 1024 [ 163.770784][ T46] hfsplus: b-tree write err: -5, ino 4 [ 164.155943][ T6597] loop2: detected capacity change from 0 to 32768 [ 164.168129][ T6619] loop3: detected capacity change from 0 to 256 [ 164.590962][ T6633] device bond_slave_0 entered promiscuous mode [ 164.597276][ T6633] device bond_slave_1 entered promiscuous mode [ 164.624250][ T6633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.642694][ T6633] device bond_slave_0 left promiscuous mode [ 164.648836][ T6633] device bond_slave_1 left promiscuous mode [ 164.742504][ T6637] loop2: detected capacity change from 0 to 2048 [ 164.787345][ T6638] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.819335][ T26] audit: type=1800 audit(1730863339.688:29): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.777" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 164.898290][ T26] audit: type=1800 audit(1730863339.718:30): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.777" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 165.156006][ T6635] loop4: detected capacity change from 0 to 40427 [ 165.173966][ T4266] Bluetooth: hci1: command tx timeout [ 165.182755][ T6635] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 165.194772][ T6635] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.208598][ T6635] F2FS-fs (loop4): invalid crc value [ 165.231900][ T6635] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.358662][ T6649] loop1: detected capacity change from 0 to 1024 [ 165.381143][ T6635] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.401116][ T6635] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.640854][ T33] hfsplus: b-tree write err: -5, ino 4 [ 165.694194][ T33] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 165.774115][ T33] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 166.093880][ T4543] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.230095][ T6643] loop2: detected capacity change from 0 to 32768 [ 166.269454][ T6643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.780 (6643) [ 166.335593][ T6643] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 166.369452][ T6643] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 166.392037][ T6643] BTRFS info (device loop2): enabling auto defrag [ 166.413849][ T6643] BTRFS info (device loop2): turning on sync discard [ 166.443901][ T6643] BTRFS info (device loop2): doing ref verification [ 166.464078][ T6643] BTRFS info (device loop2): force clearing of disk cache [ 166.474994][ T4543] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.481533][ T6643] BTRFS info (device loop2): setting nodatacow, compression disabled [ 166.499812][ T4543] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.513518][ T6643] BTRFS info (device loop2): using free space tree [ 166.555809][ T4543] usb 2-1: config 0 descriptor?? [ 166.633206][ T4543] cp210x 2-1:0.0: cp210x converter detected [ 166.770286][ T6643] BTRFS info (device loop2): enabling ssd optimizations [ 166.789458][ T6643] BTRFS info (device loop2): rebuilding free space tree [ 166.858950][ T6688] loop4: detected capacity change from 0 to 2048 [ 166.862022][ T6643] BTRFS info (device loop2): scrub: started on devid 1 [ 166.924573][ T6688] UDF-fs: bad mount option "ÿÿ00000000000000000000" or missing value [ 166.958628][ T6688] [U] [ 166.977721][ T6688] [U] ¿ÒLë\ÑÈ‚÷Ï\M+‹… [ 166.978172][ T6643] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 167.000012][ T6688] [U] ¿ŠœØˉQ»ŸK¹A½ÓÒ°¨È×|ÖÞ" [ 167.044371][ T6688] [U] *KÛ¶W—Õ :64]ÀÏT~÷Y“Z~¯½ØQÈ 3ÕSÇ•CPYŒÇƒ®V¤]DB [ 167.051412][ T6688] [U] [ 167.063911][ T4543] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 167.091968][ T6688] [U] [ 167.094718][ T6688] [U] [ 167.097420][ T6688] [U] [ 167.100122][ T6688] [U] [ 167.138365][ T4543] usb 2-1: cp210x converter now attached to ttyUSB0 [ 167.165967][ T6688] [U] [ 167.168727][ T6688] [U] [ 167.221567][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.793'. [ 167.221821][ T6688] [U] [ 167.278764][ T6688] [U] OÍ·GF[{ÞÂ~Ë¿N¤: [ 167.300097][ T4255] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.317387][ T6686] [U] EOEŠWÞݪQÅQK?V~ÔW‡¾WÌØ“÷ØNYÖ¹ˆX-Ö6&÷HB<‘&RZÄC‰?Σˆ?ÊÃß¾Ù¨ [ 167.332644][ T4543] usb 2-1: USB disconnect, device number 9 [ 167.362935][ T4543] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.389907][ T4543] cp210x 2-1:0.0: device disconnected [ 167.836319][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 167.853304][ T6705] netlink: 52 bytes leftover after parsing attributes in process `syz.0.798'. [ 168.016156][ T6707] loop3: detected capacity change from 0 to 1024 [ 168.070453][ T6713] loop4: detected capacity change from 0 to 256 [ 168.147809][ T6707] hfsplus: found bad thread record in catalog [ 168.251198][ T56] hfsplus: found bad thread record in catalog [ 168.274373][ T56] hfsplus: found bad thread record in catalog [ 168.806853][ T4604] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 168.863986][ T4604] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 168.931437][ T6740] loop4: detected capacity change from 0 to 512 [ 168.940960][ T4604] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 168.959644][ T6740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.017486][ T6740] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 169.058151][ T6740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 169.069266][ T6740] System zones: 0-1, 15-15, 18-18, 34-34 [ 169.076467][ T6740] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.083133][ T6740] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 169.093218][ T6740] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 169.108920][ T6740] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 169.124752][ T6740] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.815: bg 0: block 40: padding at end of block bitmap is not set [ 169.143593][ T6740] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 169.154329][ T6740] EXT4-fs (loop4): 1 truncate cleaned up [ 169.160025][ T6740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.214043][ T6740] EXT4-fs (loop4): shut down requested (2) [ 169.285572][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 169.333194][ T6746] loop1: detected capacity change from 0 to 1024 [ 169.386295][ T6717] loop0: detected capacity change from 0 to 32768 [ 169.414246][ T6717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.803 (6717) [ 169.488839][ T6746] hfsplus: request for non-existent node 2048 in B*Tree [ 169.519071][ T6746] hfsplus: request for non-existent node 2048 in B*Tree [ 169.540178][ T6717] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.573855][ T6717] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 169.594960][ T6755] netlink: 280 bytes leftover after parsing attributes in process `syz.3.820'. [ 169.604237][ T6717] BTRFS info (device loop0): enabling auto defrag [ 169.610738][ T6717] BTRFS info (device loop0): turning on sync discard [ 169.627865][ T6752] hfsplus: request for non-existent node 2048 in B*Tree [ 169.653793][ T6717] BTRFS info (device loop0): doing ref verification [ 169.654000][ T6752] hfsplus: request for non-existent node 2048 in B*Tree [ 169.660545][ T6717] BTRFS info (device loop0): force clearing of disk cache [ 169.660581][ T6717] BTRFS info (device loop0): setting nodatacow, compression disabled [ 169.724564][ T6730] loop2: detected capacity change from 0 to 32768 [ 169.733276][ T6717] BTRFS info (device loop0): using free space tree [ 169.788802][ T6730] JBD2: Ignoring recovery information on journal [ 169.849246][ T6730] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 169.901784][ T6717] BTRFS info (device loop0): enabling ssd optimizations [ 169.904383][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 169.949474][ T6717] BTRFS info (device loop0): rebuilding free space tree [ 170.066093][ T6717] BTRFS info (device loop0): scrub: started on devid 1 [ 170.102198][ T6717] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 170.231988][ T4250] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.291197][ T6781] netlink: 100 bytes leftover after parsing attributes in process `syz.3.824'. [ 170.916296][ T6799] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.832'. [ 170.951095][ T6799] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.832'. [ 170.993345][ T6799] tc_dump_action: action bad kind [ 171.352638][ T6817] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 171.569810][ T6824] loop4: detected capacity change from 0 to 2048 [ 171.644440][ T6830] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.713681][ T6824] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 171.783928][ T6824] Remounting filesystem read-only [ 171.929439][ T6838] device macsec1 entered promiscuous mode [ 171.936062][ T6838] device macvlan0 entered promiscuous mode [ 171.964218][ T6838] device macvlan0 left promiscuous mode [ 172.102865][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 172.309918][ T6852] loop2: detected capacity change from 0 to 512 [ 172.376871][ T6852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 172.474813][ T6852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.494058][ T6852] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.638882][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 172.780567][ T6866] loop3: detected capacity change from 0 to 2048 [ 172.834424][ T6866] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 172.881722][ T6866] UDF-fs: Scanning with blocksize 512 failed [ 172.946143][ T6866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.538973][ T6895] program syz.0.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.621921][ T6897] Zero length message leads to an empty skb [ 174.041869][ T6912] mkiss: ax0: crc mode is auto. [ 174.210989][ T6915] mkiss: ax0: crc mode is auto. [ 174.362427][ T6923] loop4: detected capacity change from 0 to 256 [ 174.577942][ T6906] loop0: detected capacity change from 0 to 32768 [ 174.638355][ T6906] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.661707][ T6906] [ 174.664094][ T6906] ====================================================== [ 174.671132][ T6906] WARNING: possible circular locking dependency detected [ 174.678171][ T6906] 6.1.115-syzkaller #0 Not tainted [ 174.683295][ T6906] ------------------------------------------------------ [ 174.690327][ T6906] syz.0.879/6906 is trying to acquire lock: [ 174.696231][ T6906] ffff888068eb5f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xe96/0x1930 [ 174.708465][ T6906] [ 174.708465][ T6906] but task is already holding lock: [ 174.715843][ T6906] ffff888068eb4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 174.725370][ T6906] [ 174.725370][ T6906] which lock already depends on the new lock. [ 174.725370][ T6906] [ 174.735789][ T6906] [ 174.735789][ T6906] the existing dependency chain (in reverse order) is: [ 174.744817][ T6906] [ 174.744817][ T6906] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 174.752673][ T6906] lock_acquire+0x1f8/0x5a0 [ 174.757744][ T6906] down_read+0xad/0xa30 [ 174.762446][ T6906] ocfs2_init_acl+0x398/0x930 [ 174.767732][ T6906] ocfs2_mknod+0x1f75/0x2e20 [ 174.772889][ T6906] ocfs2_create+0x1c0/0x4e0 [ 174.777936][ T6906] path_openat+0x12f1/0x2e60 [ 174.783087][ T6906] do_filp_open+0x230/0x480 [ 174.788141][ T6906] do_sys_openat2+0x13b/0x4f0 [ 174.793377][ T6906] __x64_sys_open+0x221/0x270 [ 174.798612][ T6906] do_syscall_64+0x3b/0xb0 [ 174.803573][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.810027][ T6906] [ 174.810027][ T6906] -> #1 (jbd2_handle){++++}-{0:0}: [ 174.817389][ T6906] lock_acquire+0x1f8/0x5a0 [ 174.822448][ T6906] jbd2_journal_lock_updates+0xa6/0x380 [ 174.828546][ T6906] __ocfs2_flush_truncate_log+0x2ef/0x12a0 [ 174.834907][ T6906] ocfs2_flush_truncate_log+0x4b/0x60 [ 174.840828][ T6906] ocfs2_sync_fs+0x121/0x380 [ 174.845977][ T6906] sync_filesystem+0x1bc/0x220 [ 174.851295][ T6906] generic_shutdown_super+0x6b/0x340 [ 174.857131][ T6906] kill_block_super+0x7a/0xe0 [ 174.862361][ T6906] deactivate_locked_super+0xa0/0x110 [ 174.868283][ T6906] cleanup_mnt+0x490/0x520 [ 174.873251][ T6906] task_work_run+0x246/0x300 [ 174.878392][ T6906] exit_to_user_mode_loop+0xde/0x100 [ 174.884216][ T6906] exit_to_user_mode_prepare+0xb1/0x140 [ 174.890303][ T6906] syscall_exit_to_user_mode+0x60/0x270 [ 174.896403][ T6906] do_syscall_64+0x47/0xb0 [ 174.901357][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.907803][ T6906] [ 174.907803][ T6906] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 174.918351][ T6906] validate_chain+0x1661/0x5950 [ 174.923742][ T6906] __lock_acquire+0x125b/0x1f80 [ 174.929155][ T6906] lock_acquire+0x1f8/0x5a0 [ 174.934209][ T6906] down_write+0x36/0x60 [ 174.938924][ T6906] ocfs2_xattr_set+0xe96/0x1930 [ 174.944316][ T6906] __vfs_setxattr+0x3e7/0x420 [ 174.949522][ T6906] __vfs_setxattr_noperm+0x12a/0x5e0 [ 174.955335][ T6906] vfs_setxattr+0x21d/0x420 [ 174.960359][ T6906] setxattr+0x250/0x2b0 [ 174.965042][ T6906] path_setxattr+0x1bc/0x2a0 [ 174.970166][ T6906] __x64_sys_setxattr+0xb7/0xd0 [ 174.975546][ T6906] do_syscall_64+0x3b/0xb0 [ 174.980938][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.987396][ T6906] [ 174.987396][ T6906] other info that might help us debug this: [ 174.987396][ T6906] [ 174.997646][ T6906] Chain exists of: [ 174.997646][ T6906] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 174.997646][ T6906] [ 175.013406][ T6906] Possible unsafe locking scenario: [ 175.013406][ T6906] [ 175.020851][ T6906] CPU0 CPU1 [ 175.026216][ T6906] ---- ---- [ 175.031576][ T6906] lock(&oi->ip_xattr_sem); [ 175.036167][ T6906] lock(jbd2_handle); [ 175.042753][ T6906] lock(&oi->ip_xattr_sem); [ 175.049863][ T6906] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 175.057174][ T6906] [ 175.057174][ T6906] *** DEADLOCK *** [ 175.057174][ T6906] [ 175.065315][ T6906] 3 locks held by syz.0.879/6906: [ 175.070334][ T6906] #0: ffff88805652c460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 175.079578][ T6906] #1: ffff888068eb5108 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 175.090036][ T6906] #2: ffff888068eb4e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 175.099963][ T6906] [ 175.099963][ T6906] stack backtrace: [ 175.105857][ T6906] CPU: 0 PID: 6906 Comm: syz.0.879 Not tainted 6.1.115-syzkaller #0 [ 175.113834][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.123912][ T6906] Call Trace: [ 175.127212][ T6906] [ 175.130159][ T6906] dump_stack_lvl+0x1e3/0x2cb [ 175.134848][ T6906] ? nf_tcp_handle_invalid+0x642/0x642 [ 175.140316][ T6906] ? print_circular_bug+0x12b/0x1a0 [ 175.145522][ T6906] check_noncircular+0x2fa/0x3b0 [ 175.150469][ T6906] ? add_chain_block+0x850/0x850 [ 175.155411][ T6906] ? lockdep_lock+0x11f/0x2a0 [ 175.160104][ T6906] ? _find_first_zero_bit+0xd0/0x100 [ 175.165406][ T6906] validate_chain+0x1661/0x5950 [ 175.170258][ T6906] ? kernel_text_address+0x9f/0xd0 [ 175.175389][ T6906] ? stack_trace_save+0x113/0x1c0 [ 175.180424][ T6906] ? reacquire_held_locks+0x660/0x660 [ 175.185795][ T6906] ? stack_trace_snprint+0xe0/0xe0 [ 175.190918][ T6906] ? look_up_lock_class+0x77/0x140 [ 175.196039][ T6906] ? register_lock_class+0x100/0x990 [ 175.201334][ T6906] ? is_dynamic_key+0x260/0x260 [ 175.206194][ T6906] ? mark_lock+0x9a/0x340 [ 175.210533][ T6906] __lock_acquire+0x125b/0x1f80 [ 175.215402][ T6906] lock_acquire+0x1f8/0x5a0 [ 175.219916][ T6906] ? ocfs2_xattr_set+0xe96/0x1930 [ 175.224947][ T6906] ? read_lock_is_recursive+0x10/0x10 [ 175.230334][ T6906] ? __might_sleep+0xb0/0xb0 [ 175.234925][ T6906] ? rwsem_write_trylock+0x166/0x210 [ 175.240216][ T6906] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 175.245771][ T6906] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 175.251328][ T6906] ? ocfs2_xattr_ibody_find+0xc6/0x7c0 [ 175.256802][ T6906] down_write+0x36/0x60 [ 175.260978][ T6906] ? ocfs2_xattr_set+0xe96/0x1930 [ 175.266010][ T6906] ocfs2_xattr_set+0xe96/0x1930 [ 175.270879][ T6906] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 175.276780][ T6906] ? __lock_acquire+0x125b/0x1f80 [ 175.281853][ T6906] ? do_raw_spin_unlock+0x137/0x8a0 [ 175.287057][ T6906] ? privileged_wrt_inode_uidgid+0x210/0x260 [ 175.293048][ T6906] ? posix_xattr_acl+0xa5/0xd0 [ 175.297820][ T6906] ? evm_protect_xattr+0x366/0xb10 [ 175.302939][ T6906] ? ocfs2_xattr_user_set+0xaa/0xf0 [ 175.308141][ T6906] ? ocfs2_xattr_user_get+0xe0/0xe0 [ 175.313345][ T6906] __vfs_setxattr+0x3e7/0x420 [ 175.318028][ T6906] __vfs_setxattr_noperm+0x12a/0x5e0 [ 175.323318][ T6906] vfs_setxattr+0x21d/0x420 [ 175.327839][ T6906] ? xattr_permission+0x4f0/0x4f0 [ 175.332860][ T6906] ? __might_fault+0xbd/0x110 [ 175.337546][ T6906] setxattr+0x250/0x2b0 [ 175.341703][ T6906] ? path_setxattr+0x2a0/0x2a0 [ 175.346480][ T6906] ? __mnt_want_write+0x222/0x2a0 [ 175.351511][ T6906] path_setxattr+0x1bc/0x2a0 [ 175.356104][ T6906] ? simple_xattr_list_add+0xf0/0xf0 [ 175.361392][ T6906] ? syscall_enter_from_user_mode+0x2e/0x230 [ 175.367380][ T6906] __x64_sys_setxattr+0xb7/0xd0 [ 175.372232][ T6906] do_syscall_64+0x3b/0xb0 [ 175.376648][ T6906] ? clear_bhb_loop+0x45/0xa0 [ 175.381329][ T6906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.387231][ T6906] RIP: 0033:0x7f8b57d7e719 [ 175.391657][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.411264][ T6906] RSP: 002b:00007f8b58a92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 175.419682][ T6906] RAX: ffffffffffffffda RBX: 00007f8b57f35f80 RCX: 00007f8b57d7e719 [ 175.427656][ T6906] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 175.435629][ T6906] RBP: 00007f8b57df139e R08: 0000000000000000 R09: 0000000000000000 [ 175.443597][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.451567][ T6906] R13: 0000000000000000 R14: 00007f8b57f35f80 R15: 00007ffdad34bda8 [ 175.459548][ T6906] [ 175.472929][ T6914] loop3: detected capacity change from 0 to 32768 [ 175.507213][ T6914] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.882 (6914) [ 175.542130][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 175.583951][ T6914] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.626858][ T6914] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 175.646311][ T6914] BTRFS info (device loop3): enabling auto defrag [ 175.652781][ T6914] BTRFS info (device loop3): turning on sync discard [ 175.675134][ T6914] BTRFS info (device loop3): doing ref verification [ 175.691928][ T6914] BTRFS info (device loop3): force clearing of disk cache [ 175.717236][ T6914] BTRFS info (device loop3): setting nodatacow, compression disabled [ 175.727384][ T6914] BTRFS info (device loop3): using free space tree [ 175.792230][ T6914] BTRFS info (device loop3): enabling ssd optimizations [ 175.800339][ T6914] BTRFS info (device loop3): rebuilding free space tree [ 175.827840][ T6914] BTRFS info (device loop3): scrub: started on devid 1 [ 175.846088][ T6914] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 175.875368][ T4260] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d