last executing test programs: 4.266918594s ago: executing program 2 (id=767): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000280)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@discard}, {@two_active_logs}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 2.681875119s ago: executing program 2 (id=773): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0xfffffffd}) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.498118787s ago: executing program 3 (id=778): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2002, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.411103958s ago: executing program 0 (id=779): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 1.381930109s ago: executing program 1 (id=780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 1.29208166s ago: executing program 0 (id=781): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setreuid(0xee01, 0x0) 1.171086772s ago: executing program 1 (id=782): sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="da47ba04ad503b010768e2d33ae515ea603a1a7992213a02143631502c7a7f19d764eff07bd7a1ed01481edb67fa3a34cd9e4cdf152eec", 0x37, 0x1000, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a801800"], 0x4c}}, 0x4000804) 1.106077203s ago: executing program 0 (id=784): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f00004be000/0x2000)=nil, 0x2000}, 0x1}) 1.062013943s ago: executing program 1 (id=785): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r1, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xb) 977.658475ms ago: executing program 3 (id=786): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 932.779015ms ago: executing program 2 (id=787): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000001540)='./bus\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x5, 0x1502, &(0x7f0000002a80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 880.226106ms ago: executing program 0 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000000010040"]) 841.304777ms ago: executing program 1 (id=789): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r1, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @remote}, 0x10) 753.777838ms ago: executing program 3 (id=790): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000004, 0x0) 575.346351ms ago: executing program 1 (id=791): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 504.017072ms ago: executing program 2 (id=792): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 494.237552ms ago: executing program 3 (id=793): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) read(r0, &(0x7f0000000180)=""/163, 0xa3) 443.335463ms ago: executing program 0 (id=794): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) 443.117513ms ago: executing program 1 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x2100, 0x0}, {0x2, 0x201, 0x0, 0x0}], 0x2}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 291.595635ms ago: executing program 0 (id=796): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 201.400146ms ago: executing program 2 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe7a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 201.224857ms ago: executing program 3 (id=798): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x201, &(0x7f0000000d00)="$eJzsmbGLE0EUxr+Z3eydhyg2CjYWHniit9ndqFxzxQmWgnCKWgazHqd7F9lb4e5ASEhjY2kh2NpYWljYaOFfYKuFCoKFKe2UkZmd3Z0km5hIMMW9H2T229037828DV9gA4IgDixfv/z8/OTyyvXzAA5jEXP6+ncrPYqjvfGfnj0893T1yvNXH1+83z7y6E1/PibniPHrOwDerVlIwGxdsWf2YpE207gBjrNa3wSDm8pfQiFlCyEYbuuYe4ZuHtIiCt07zahxdzMKPTn4cgjkUDPry0V12wwNAPNqdUIw4/7O3v79ehSFcb+oiKzOwK1Jxaj+qfWtcawi654QHMCtx522PNe9gQee988Hh691DQzrWq9gDq7rFi0x9n/SLvJb4+x/tuKlEseW/1dR8LQdYwWz6XwtJhLx2xONWT8UU/wWQkw+qzKV6qz/inwg+ZXj3cwDzZhvM+/YvwtlXAAGbn1YiKKr5bP43zLLjjkljcpF4U/S2c8Y/mTDzv2jmmw9qO7s7S9vbtU3wo1wOwhql7wLnncxqCojSscR/jev/GnByF8ZEuswB7v1JIn9XSCJ/fw8SEfDcddfN3+oOVz5H8fS6TQH079ZnSE1mP5wdZRqySqPbA3dE0EQBEEQBEEQBEEQBEEQRDmnwJD+EyaYfiFaRnBNvaH8EwAA///zPWcb") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r1, 0xe0ffff, 0x4101, 0x3) 18.583999ms ago: executing program 2 (id=799): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x20) 0s ago: executing program 3 (id=800): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/95, 0x320000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2676][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.814303][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.830808][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.845172][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.856789][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.870094][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.905126][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.916718][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.928165][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.939134][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.949122][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.959775][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.974785][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.992238][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.002969][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.016965][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.027809][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.041311][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.056256][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.070169][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.085924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.103446][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.122234][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.139009][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.140766][ T5863] syz.1.6[5863]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.158131][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.158152][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.159748][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.200843][ T5863] loop1: detected capacity change from 0 to 1024 [ 74.212036][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.222297][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.236006][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.248796][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.277272][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.303930][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.312699][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.327321][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.579586][ T11] hfsplus: b-tree write err: -5, ino 4 [ 74.609915][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.619888][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.741597][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.750615][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.798512][ T5872] loop1: detected capacity change from 0 to 512 [ 74.871462][ T5872] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.879267][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.903733][ T5872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.913888][ T5780] Bluetooth: hci2: command tx timeout [ 74.919133][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.921774][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.937100][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.953506][ T5780] Bluetooth: hci3: command tx timeout [ 74.953791][ T5771] Bluetooth: hci0: command tx timeout [ 74.959061][ T5780] Bluetooth: hci1: command tx timeout [ 75.000646][ T5872] EXT4-fs (loop1): 1 truncate cleaned up [ 75.008772][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.169222][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.370973][ T5887] loop2: detected capacity change from 0 to 512 [ 75.383739][ T5887] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.410752][ T5884] Zero length message leads to an empty skb [ 75.433132][ T5887] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.448102][ T5887] EXT4-fs (loop2): 1 truncate cleaned up [ 75.455521][ T5887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.627452][ T5887] EXT4-fs error (device loop2): mb_free_blocks:1943: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 75.651293][ T5887] EXT4-fs (loop2): Remounting filesystem read-only [ 75.658319][ T5887] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -5) [ 75.774054][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.811651][ T5896] loop1: detected capacity change from 0 to 1024 [ 75.858006][ T5892] loop3: detected capacity change from 0 to 2048 [ 75.891536][ T5896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.974358][ T5892] loop3: p1 < > p3 [ 75.998204][ T5892] loop3: p3 size 134217728 extends beyond EOD, truncated [ 76.143150][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.607075][ T5916] syz.3.23 uses obsolete (PF_INET,SOCK_PACKET) [ 76.954564][ T5780] Bluetooth: hci2: command tx timeout [ 77.033754][ T5780] Bluetooth: hci0: command tx timeout [ 77.035036][ T5779] Bluetooth: hci1: command tx timeout [ 77.035385][ T5771] Bluetooth: hci3: command tx timeout [ 77.388091][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 77.400425][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 77.868057][ T5939] binder: 5938:5939 ioctl 40046721 200000000040 returned -22 [ 77.945443][ T5941] loop1: detected capacity change from 0 to 128 [ 77.954004][ T5941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.004536][ T5941] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 78.041877][ T5941] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.158973][ T5945] loop3: detected capacity change from 0 to 2048 [ 78.200344][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.235743][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.389323][ T5945] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 78.418547][ T5945] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 78.459683][ T5945] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.459683][ T5945] [ 78.466188][ T5952] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.490388][ T5945] EXT4-fs (loop3): Total free blocks count 0 [ 78.497865][ T5945] EXT4-fs (loop3): Free/Dirty block details [ 78.504203][ T5945] EXT4-fs (loop3): free_blocks=66060288 [ 78.508002][ T5952] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.508002][ T5952] [ 78.510189][ T5945] EXT4-fs (loop3): dirty_blocks=32 [ 78.527192][ T5952] EXT4-fs (loop3): Total free blocks count 0 [ 78.657518][ T5959] loop1: detected capacity change from 0 to 8 [ 79.177713][ T5816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.396910][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.436752][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.463627][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.497247][ T5816] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.523403][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.563037][ T5816] usb 2-1: config 0 descriptor?? [ 80.008928][ T5816] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 80.035179][ T5816] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 80.064113][ T5816] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 80.071581][ T5816] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 80.109190][ T5816] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 80.124564][ T5816] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 80.147010][ T5816] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 80.187000][ T5982] program syz.2.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.197848][ T5816] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 80.655076][ T5978] loop3: detected capacity change from 0 to 32768 [ 80.684820][ T5978] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.46 (5978) [ 80.703463][ T5808] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.746164][ T5978] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 80.785191][ T5978] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 80.801609][ T5978] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 80.813575][ T5978] BTRFS info (device loop3): use zstd compression, level 3 [ 80.830157][ T5978] BTRFS info (device loop3): using free space tree [ 80.895055][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 80.923129][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.975942][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.016375][ T5978] BTRFS info (device loop3): enabling ssd optimizations [ 81.030302][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.052817][ T5978] BTRFS info (device loop3): auto enabling async discard [ 81.080529][ T5808] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.108427][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.165665][ T5808] usb 3-1: config 0 descriptor?? [ 81.251942][ T27] audit: type=1800 audit(1750723032.990:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 81.356066][ T5816] usb 2-1: USB disconnect, device number 2 [ 81.439942][ T9] cfg80211: failed to load regulatory.db [ 81.648796][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.649623][ T5767] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 81.670044][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.681720][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.693302][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.704682][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.720935][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.730214][ T6008] dvmrp0: entered allmulticast mode [ 81.735634][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.745689][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.764356][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.796355][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.808038][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.816537][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.825328][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.832783][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.853639][ T5808] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 81.912722][ T5808] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input5 [ 82.004349][ T5808] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 82.083460][ T5808] usb 3-1: USB disconnect, device number 2 [ 82.170584][ T5759] udevd[5759]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 82.214894][ T5759] udevd[5759]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 82.298949][ T6009] fido_id[6009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 82.626295][ T6020] loop0: detected capacity change from 0 to 512 [ 82.742650][ T6022] loop3: detected capacity change from 0 to 1024 [ 82.856014][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.918477][ T6020] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.182891][ T6027] loop3: detected capacity change from 0 to 4096 [ 83.340444][ T6031] loop2: detected capacity change from 0 to 2048 [ 83.428727][ T6031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.519608][ T6027] ntfs3: loop3: ino=5, "/" directory corrupted [ 83.645108][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.144375][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.356440][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.382480][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.392390][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.403299][ T23] usb 3-1: Product: syz [ 84.423779][ T23] usb 3-1: Manufacturer: syz [ 84.428440][ T23] usb 3-1: SerialNumber: syz [ 85.054695][ T6056] loop1: detected capacity change from 0 to 8192 [ 85.073551][ T6056] ======================================================= [ 85.073551][ T6056] WARNING: The mand mount option has been deprecated and [ 85.073551][ T6056] and is ignored by this kernel. Remove the mand [ 85.073551][ T6056] option from the mount to silence this warning. [ 85.073551][ T6056] ======================================================= [ 85.130278][ T6052] loop3: detected capacity change from 0 to 32768 [ 85.179918][ T6044] loop0: detected capacity change from 0 to 32768 [ 85.187278][ T6056] process 'syz.1.71' launched './file2' with NULL argv: empty string added [ 85.200360][ T6052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.69 (6052) [ 85.240934][ T6044] XFS: ikeep mount option is deprecated. [ 85.270278][ T6052] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 85.328049][ T6052] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 85.364177][ T6052] BTRFS info (device loop3): enabling disk space caching [ 85.391655][ T6052] BTRFS info (device loop3): doing ref verification [ 85.412075][ T6052] BTRFS info (device loop3): use zlib compression, level 3 [ 85.463101][ T6052] BTRFS info (device loop3): force clearing of disk cache [ 85.474486][ T6044] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.499455][ T6052] BTRFS info (device loop3): setting nodatacow, compression disabled [ 85.511015][ T23] cdc_ncm 3-1:1.0: failed to get mac address [ 85.525051][ T23] cdc_ncm 3-1:1.0: bind() failure [ 85.543431][ T23] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 85.551097][ T23] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 85.561963][ T6052] BTRFS info (device loop3): doing ref verification [ 85.565584][ T23] usbtest: probe of 3-1:1.1 failed with error -71 [ 85.594548][ T23] usb 3-1: USB disconnect, device number 3 [ 85.604619][ T6052] BTRFS info (device loop3): disk space caching is enabled [ 85.673577][ T5780] Bluetooth: hci2: command tx timeout [ 85.751986][ T6052] BTRFS info (device loop3): enabling ssd optimizations [ 85.774212][ T6052] BTRFS info (device loop3): auto enabling async discard [ 85.794621][ T6052] BTRFS info (device loop3): rebuilding free space tree [ 85.875912][ T6052] BTRFS info (device loop3): disabling free space tree [ 85.898618][ T6052] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.935086][ T6052] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.972911][ T6044] XFS (loop0): Ending clean mount [ 86.004374][ T6044] XFS (loop0): Quotacheck needed: Please wait. [ 86.096142][ T6044] XFS (loop0): Quotacheck: Done. [ 86.338843][ T27] audit: type=1326 audit(1750723038.070:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.420930][ T27] audit: type=1326 audit(1750723038.080:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.496697][ T27] audit: type=1326 audit(1750723038.100:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.539009][ T5767] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.560295][ T27] audit: type=1326 audit(1750723038.100:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.641054][ T27] audit: type=1326 audit(1750723038.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.684904][ T6089] loop1: detected capacity change from 0 to 128 [ 86.718604][ T5766] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.745694][ T27] audit: type=1326 audit(1750723038.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.754632][ T6089] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 86.835477][ T27] audit: type=1326 audit(1750723038.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 86.873411][ T6089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.961121][ T27] audit: type=1326 audit(1750723038.120:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 87.031260][ T27] audit: type=1326 audit(1750723038.120:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 87.085184][ T27] audit: type=1326 audit(1750723038.130:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f19b878e929 code=0x7ffc0000 [ 87.412358][ T6095] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 87.601301][ T6100] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 88.047919][ T6102] loop1: detected capacity change from 0 to 32768 [ 88.085516][ T6102] (syz.1.80,6102,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.105378][ T5808] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.121287][ T6102] (syz.1.80,6102,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.203651][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.240986][ T6102] JBD2: Ignoring recovery information on journal [ 88.314200][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 88.322875][ T5808] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 88.342023][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.346361][ T6102] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 88.362619][ T5808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.391287][ T5808] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.408265][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.416827][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 88.428329][ T5808] usb 3-1: Product: syz [ 88.435352][ T5808] usb 3-1: Manufacturer: syz [ 88.435402][ T6114] loop3: detected capacity change from 0 to 2048 [ 88.436323][ T6114] EXT4-fs: Ignoring removed nobh option [ 88.440142][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.462432][ T5808] usb 3-1: SerialNumber: syz [ 88.520395][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.520447][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.533540][ T9] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 88.569126][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.643160][ T9] usb 1-1: config 0 descriptor?? [ 88.733934][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.922681][ T5808] usb 3-1: 0:2 : does not exist [ 89.026526][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 89.083684][ T9] hid (null): report_id 67708416 is invalid [ 89.150708][ T9] cougar 0003:060B:500A.0003: usage count exceeds max: fixing up report descriptor [ 89.186186][ T9] cougar 0003:060B:500A.0003: unexpected long global item [ 89.214641][ T9] cougar 0003:060B:500A.0003: parse failed [ 89.221915][ T9] cougar: probe of 0003:060B:500A.0003 failed with error -22 [ 89.330955][ T6126] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.438042][ T9] usb 1-1: USB disconnect, device number 2 [ 89.509555][ T6128] vlan2: entered promiscuous mode [ 89.515288][ T6128] syz_tun: entered promiscuous mode [ 89.541529][ T5808] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 89.614616][ T5808] usb 3-1: USB disconnect, device number 4 [ 89.693898][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.832187][ T6124] loop3: detected capacity change from 0 to 32768 [ 89.860918][ T6124] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.89 (6124) [ 89.900259][ T6124] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.913004][ T6124] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 89.932777][ T6124] BTRFS info (device loop3): setting nodatacow, compression disabled [ 89.944858][ T6124] BTRFS info (device loop3): force clearing of disk cache [ 89.954992][ T6124] BTRFS info (device loop3): setting datacow [ 89.961782][ T6124] BTRFS info (device loop3): enabling disk space caching [ 89.969874][ T6124] BTRFS info (device loop3): turning on sync discard [ 89.978727][ T6124] BTRFS info (device loop3): disabling disk space caching [ 89.986911][ T6124] BTRFS info (device loop3): turning off discard [ 90.006437][ T6124] BTRFS info (device loop3): use no compression [ 90.122437][ T6149] loop0: detected capacity change from 0 to 64 [ 90.167382][ T6124] BTRFS info (device loop3): rebuilding free space tree [ 90.209188][ T6124] BTRFS info (device loop3): disabling free space tree [ 90.227701][ T6153] loop1: detected capacity change from 0 to 128 [ 90.234368][ T6124] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.273821][ T6124] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.365134][ T6153] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.463793][ T6153] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.731136][ T5767] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.778111][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.422229][ T6159] loop0: detected capacity change from 0 to 32768 [ 91.490430][ T6159] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 91.568805][ T6159] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.608078][ T6179] syzkaller1: entered promiscuous mode [ 91.613841][ T6179] syzkaller1: entered allmulticast mode [ 91.889437][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 92.010092][ T6187] loop3: detected capacity change from 0 to 512 [ 92.043066][ T6187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.111502][ T6187] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 92.158508][ T6187] System zones: 0-2, 18-18, 34-34 [ 92.182878][ T6187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.236801][ T6187] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.384457][ T6187] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 92.514061][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.766050][ T6210] loop2: detected capacity change from 0 to 2048 [ 92.820697][ T6210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.912929][ T6216] loop3: detected capacity change from 0 to 4096 [ 92.997253][ T6217] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.101226][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.365501][ T6223] loop2: detected capacity change from 0 to 64 [ 93.418123][ T6225] loop3: detected capacity change from 0 to 2048 [ 93.467528][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.480221][ T6223] minix_free_block (loop2:2): bit already cleared [ 93.509939][ T6223] minix_free_block (loop2:3): bit already cleared [ 93.510369][ T6225] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.529703][ T6223] minix_free_block (loop2:4): bit already cleared [ 93.581468][ T6225] fs-verity: sha512 using implementation "sha512-avx2" [ 93.705549][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.007926][ T6243] loop1: detected capacity change from 0 to 256 [ 94.530774][ T6256] loop3: detected capacity change from 0 to 1024 [ 94.670915][ T31] hfsplus: b-tree write err: -5, ino 4 [ 95.019266][ T6264] syz.0.140 (6264) used greatest stack depth: 19144 bytes left [ 95.252898][ T6274] loop0: detected capacity change from 0 to 512 [ 95.286525][ T6274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.600897][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 95.628591][ T6274] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #13: comm syz.0.144: verity is only allowed on extent-based files [ 95.749756][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.844304][ T6284] loop1: detected capacity change from 0 to 2048 [ 95.854608][ T6286] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 95.924796][ T6284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.963718][ T6289] loop0: detected capacity change from 0 to 40427 [ 97.003542][ T6289] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 97.012337][ T6289] F2FS-fs (loop0): Image doesn't support compression [ 97.044291][ T6289] F2FS-fs (loop0): Image doesn't support compression [ 97.052562][ T6289] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 97.112587][ T6289] F2FS-fs (loop0): invalid crc value [ 97.133613][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.160080][ T6289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.343097][ T6289] F2FS-fs (loop0): Start checkpoint disabled! [ 97.359799][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 97.380292][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.383587][ T6289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 97.409315][ T6309] loop1: detected capacity change from 0 to 1764 [ 97.416552][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.455354][ T9] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 97.501594][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.539184][ T6288] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 97.542120][ T9] usb 4-1: config 0 descriptor?? [ 98.069916][ T9] holtek 0003:1241:5015.0004: item fetching failed at offset 4/5 [ 98.094202][ T9] holtek 0003:1241:5015.0004: parse failed [ 98.100683][ T9] holtek: probe of 0003:1241:5015.0004 failed with error -22 [ 98.363915][ T9] usb 4-1: USB disconnect, device number 2 [ 99.215205][ T6322] loop2: detected capacity change from 0 to 40427 [ 99.216341][ T6340] loop0: detected capacity change from 0 to 1024 [ 99.241495][ T6322] F2FS-fs (loop2): heap/no_heap options were deprecated [ 101.696001][ T6387] loop0: detected capacity change from 0 to 32768 [ 101.720041][ T6387] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.192 (6387) [ 101.732829][ T5864] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.755533][ T6385] loop3: detected capacity change from 0 to 32768 [ 101.777533][ T6387] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.799368][ T6387] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 101.811073][ T6387] BTRFS info (device loop0): enabling disk space caching [ 101.822808][ T6387] BTRFS info (device loop0): doing ref verification [ 101.829703][ T6387] BTRFS info (device loop0): use zlib compression, level 3 [ 101.838456][ T6387] BTRFS info (device loop0): force clearing of disk cache [ 101.851438][ T6387] BTRFS info (device loop0): setting nodatacow, compression disabled [ 101.860183][ T6387] BTRFS info (device loop0): doing ref verification [ 101.867406][ T6387] BTRFS info (device loop0): disk space caching is enabled [ 101.899681][ T6385] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.943826][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 101.955526][ T5864] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.977511][ T5864] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.993484][ T5864] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 4915, setting to 1024 [ 102.005243][ T5864] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 102.012487][ T6385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.015604][ T5864] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.028705][ T6387] BTRFS info (device loop0): enabling ssd optimizations [ 102.040987][ T5864] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.057048][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.113011][ T6387] BTRFS info (device loop0): auto enabling async discard [ 102.168567][ T6387] BTRFS info (device loop0): rebuilding free space tree [ 102.246812][ T6387] BTRFS info (device loop0): disabling free space tree [ 102.266944][ T6387] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.305267][ T6387] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.322165][ T5864] usb 3-1: GET_CAPABILITIES returned 0 [ 102.338674][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 102.345287][ T5864] usbtmc 3-1:16.0: can't read capabilities [ 102.499265][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 102.499281][ T27] audit: type=1800 audit(1750723054.240:14): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 102.607009][ T27] audit: type=1800 audit(1750723054.310:15): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 102.739306][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.768560][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.777722][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.786934][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.796073][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.805223][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.834799][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.843972][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.853281][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.904540][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.913719][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.922850][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.931973][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.939215][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.948356][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.957484][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.966625][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.975984][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 102.985140][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 103.099312][ T5772] usb 3-1: USB disconnect, device number 5 [ 103.103689][ T6425] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.209270][ T5766] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.807898][ T6439] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.260238][ T6478] loop3: detected capacity change from 0 to 4096 [ 105.294770][ T6478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.599020][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.214984][ T6481] loop0: detected capacity change from 0 to 32768 [ 106.254383][ T6481] XFS: attr2 mount option is deprecated. [ 106.331180][ T6481] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 106.389000][ T6481] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.440300][ T6508] loop1: detected capacity change from 0 to 1764 [ 106.556596][ T6481] XFS (loop0): Ending clean mount [ 106.611879][ T6481] XFS (loop0): Quotacheck needed: Please wait. [ 106.800577][ T6481] XFS (loop0): Quotacheck: Done. [ 106.910204][ T6522] Bluetooth: MGMT ver 1.22 [ 107.122421][ T5766] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.734310][ T6542] loop0: detected capacity change from 0 to 4096 [ 107.775736][ T6542] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 107.913735][ T6542] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 108.055603][ T6534] loop2: detected capacity change from 0 to 32768 [ 108.072878][ T6534] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.241 (6534) [ 108.135392][ T6534] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.165605][ T6534] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 108.189992][ T6534] BTRFS info (device loop2): force clearing of disk cache [ 108.207647][ T6534] BTRFS info (device loop2): enabling auto defrag [ 108.225295][ T6534] BTRFS info (device loop2): max_inline at 0 [ 108.251865][ T6534] BTRFS info (device loop2): enabling disk space caching [ 108.273475][ T6534] BTRFS info (device loop2): disk space caching is enabled [ 108.405465][ T6534] BTRFS info (device loop2): enabling ssd optimizations [ 108.425922][ T6536] loop1: detected capacity change from 0 to 40427 [ 108.455156][ T6534] BTRFS info (device loop2): rebuilding free space tree [ 108.456753][ T6536] F2FS-fs (loop1): invalid crc value [ 108.515793][ T6536] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.516664][ T6534] BTRFS info (device loop2): disabling free space tree [ 108.549917][ T6534] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.568453][ T6534] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.766811][ T6536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 108.969543][ T27] audit: type=1800 audit(1750723060.710:16): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.240" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 108.974777][ T6534] BTRFS warning (device loop2): failed to trim 1 block group(s), last error -512 [ 109.144028][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 109.146366][ T6534] BTRFS warning (device loop2): failed to trim 1 device(s), last error -512 [ 109.173754][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.246'. [ 109.191596][ T5768] syz-executor: attempt to access beyond end of device [ 109.191596][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.203288][ T6571] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.215274][ T6571] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.224116][ T6571] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.226537][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 109.233299][ T6571] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.240363][ T5769] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.490482][ T6573] loop0: detected capacity change from 0 to 512 [ 109.618031][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.714353][ T6573] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.805538][ T6569] loop3: detected capacity change from 0 to 40427 [ 109.867831][ T6569] F2FS-fs (loop3): invalid crc value [ 109.941591][ T6569] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.966546][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.127658][ T6569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 110.289043][ T6569] syz.3.245: attempt to access beyond end of device [ 110.289043][ T6569] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.325018][ T6569] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 110.836393][ T6597] loop1: detected capacity change from 0 to 4096 [ 111.624754][ T6620] netlink: 'syz.1.265': attribute type 29 has an invalid length. [ 111.663874][ T6620] netlink: 'syz.1.265': attribute type 29 has an invalid length. [ 111.696812][ T6620] netlink: 'syz.1.265': attribute type 29 has an invalid length. [ 111.718526][ T6620] netlink: 'syz.1.265': attribute type 29 has an invalid length. [ 111.739097][ T6620] netlink: 'syz.1.265': attribute type 29 has an invalid length. [ 111.873888][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.940263][ T6627] loop1: detected capacity change from 0 to 1024 [ 111.978562][ T6627] EXT4-fs: Ignoring removed orlov option [ 112.008873][ T6627] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 112.065602][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.090483][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 112.115584][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.146716][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.180404][ T6635] loop3: detected capacity change from 0 to 8192 [ 112.191746][ T23] usb 3-1: config 0 descriptor?? [ 112.215381][ T6635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.250868][ T6635] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 112.271738][ T6635] REISERFS (device loop3): using ordered data mode [ 112.303438][ T6635] reiserfs: using flush barriers [ 112.343166][ T6635] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.381478][ T6635] REISERFS (device loop3): checking transaction log (loop3) [ 112.427886][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.636477][ T6635] REISERFS (device loop3): Using tea hash to sort names [ 112.652379][ T6635] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 112.688653][ T23] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 112.730445][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input7 [ 112.956483][ T23] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 113.480339][ T9] usb 3-1: USB disconnect, device number 6 [ 113.554225][ T6647] vlan3: entered allmulticast mode [ 113.585713][ T6647] bridge0: port 3(vlan3) entered blocking state [ 113.614780][ T6647] bridge0: port 3(vlan3) entered disabled state [ 113.626238][ T6647] vlan3: entered promiscuous mode [ 113.632157][ T6647] bridge0: port 3(vlan3) entered blocking state [ 113.639840][ T6647] bridge0: port 3(vlan3) entered forwarding state [ 113.979444][ T6655] loop1: detected capacity change from 0 to 128 [ 114.010977][ T6655] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.046188][ T6655] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.106793][ T6655] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.453084][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 114.764755][ T6655] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.897958][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.982209][ T6631] loop0: detected capacity change from 0 to 131072 [ 115.000349][ T6631] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 115.025934][ T6631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.054366][ T6679] loop1: detected capacity change from 0 to 512 [ 115.073988][ T6631] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 115.086074][ T6679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.135787][ T6679] EXT4-fs (loop1): 1 truncate cleaned up [ 115.232798][ T6679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.462199][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.468776][ T6684] loop0: detected capacity change from 0 to 2048 [ 115.594043][ T6685] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.659698][ T5780] Bluetooth: Frame is too long (len 16, expected len 4) [ 116.283400][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.329310][ T6703] netlink: 'syz.0.298': attribute type 34 has an invalid length. [ 116.484929][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.518835][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 116.535660][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.566936][ T9] usb 4-1: config 0 descriptor?? [ 116.590207][ T6696] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.694762][ T6708] loop0: detected capacity change from 0 to 8192 [ 116.716761][ T6708] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.776312][ T6708] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 116.794457][ T6708] REISERFS (device loop0): using ordered data mode [ 116.821947][ T6708] reiserfs: using flush barriers [ 116.841513][ T6708] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.860154][ T6708] REISERFS (device loop0): checking transaction log (loop0) [ 117.060248][ T6708] REISERFS (device loop0): Using tea hash to sort names [ 117.093053][ T6708] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 117.164505][ T9] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 117.387426][ T6722] loop1: detected capacity change from 0 to 128 [ 117.447319][ T5822] usb 4-1: USB disconnect, device number 3 [ 117.453552][ T6722] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 117.723976][ T5768] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 117.741564][ T5768] FAT-fs (loop1): Filesystem has been set read-only [ 117.759846][ T5768] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 118.031353][ T6734] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.043470][ T5772] IPVS: starting estimator thread 0... [ 118.153546][ T6738] IPVS: using max 16 ests per chain, 38400 per kthread [ 118.262830][ T6744] loop6: detected capacity change from 0 to 4 [ 118.292020][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 118.317278][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.338624][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.348123][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.357022][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.366238][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.382845][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.392144][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.410234][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.419467][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.428728][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.437967][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.466284][ T5772] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.675492][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.703746][ T5772] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.733874][ T5772] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.763578][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.783132][ T5772] usb 3-1: SerialNumber: syz [ 118.835790][ T6759] loop1: detected capacity change from 0 to 2048 [ 118.865220][ T6761] dvmrp0: left allmulticast mode [ 119.021740][ T5772] usb 3-1: 0:2 : does not exist [ 119.054646][ T5772] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 119.117462][ T5772] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 119.146104][ T5772] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 119.229468][ T5772] usb 3-1: USB disconnect, device number 7 [ 119.311157][ T6066] udevd[6066]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.426049][ T6773] loop0: detected capacity change from 0 to 256 [ 119.554855][ T6773] syz.0.327: attempt to access beyond end of device [ 119.554855][ T6773] loop0: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 119.784798][ T6781] netlink: 76 bytes leftover after parsing attributes in process `syz.0.331'. [ 120.277886][ T6799] loop0: detected capacity change from 0 to 512 [ 120.355474][ T6799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.415637][ T5864] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 120.447514][ T6799] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.516639][ T6806] (syz.1.341,6806,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 120.529090][ T6799] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 120.625497][ T5864] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 120.634554][ T5864] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 120.638443][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.664665][ T5864] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 120.685673][ T5864] usb 4-1: config 3 has no interface number 0 [ 120.722808][ T5864] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 120.760127][ T5864] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.790000][ T5864] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 120.822120][ T6810] dummy0: entered promiscuous mode [ 120.825454][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.843337][ T5864] usb 4-1: Product: syz [ 120.855447][ T6810] macsec1: entered promiscuous mode [ 120.857885][ T5864] usb 4-1: Manufacturer: syz [ 120.861287][ T6810] macsec1: entered allmulticast mode [ 120.877803][ T5864] usb 4-1: SerialNumber: syz [ 120.880329][ T6810] dummy0: entered allmulticast mode [ 120.896451][ T6794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.909091][ T6810] dummy0: left allmulticast mode [ 120.922654][ T6810] dummy0: left promiscuous mode [ 121.144250][ T6804] loop2: detected capacity change from 0 to 32768 [ 121.184605][ T5864] usb-storage 4-1:3.20: USB Mass Storage device detected [ 121.242504][ T5864] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 121.308803][ T27] audit: type=1800 audit(1750723073.050:17): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.342" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 121.411624][ T5864] scsi host1: usb-storage 4-1:3.20 [ 121.431013][ T5864] usb 4-1: USB disconnect, device number 4 [ 121.651572][ T6819] loop0: detected capacity change from 0 to 8192 [ 121.777883][ T5143] udevd[5143]: worker [5759] terminated by signal 33 (Unknown signal 33) [ 121.810512][ T5143] udevd[5143]: worker [5759] failed while handling '/devices/virtual/block/loop1' [ 121.830825][ T5143] udevd[5143]: worker [6066] terminated by signal 33 (Unknown signal 33) [ 121.863476][ T5143] udevd[5143]: worker [6066] failed while handling '/devices/virtual/block/loop0' [ 122.578800][ T6846] loop2: detected capacity change from 0 to 2048 [ 122.643556][ T5775] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.918181][ T6833] loop0: detected capacity change from 0 to 32768 [ 122.946897][ T6833] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.353 (6833) [ 123.007787][ T6833] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 123.049409][ T6859] syzkaller1: entered promiscuous mode [ 123.055960][ T6859] syzkaller1: entered allmulticast mode [ 123.056276][ T6833] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 123.077912][ T6833] BTRFS info (device loop0): using free space tree [ 123.224729][ T6833] BTRFS info (device loop0): enabling ssd optimizations [ 123.242081][ T6833] BTRFS info (device loop0): auto enabling async discard [ 123.552760][ T5766] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 123.782024][ T6042] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop0 scanned by udevd (6042) [ 123.979881][ T6875] loop3: detected capacity change from 0 to 32768 [ 124.074167][ T6875] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 124.153796][ T27] audit: type=1800 audit(1750723075.880:18): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.364" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 124.272607][ T6875] syz.3.364 (6875) used greatest stack depth: 18288 bytes left [ 124.446551][ T6888] loop1: detected capacity change from 0 to 4096 [ 124.461213][ T5767] ocfs2: Unmounting device (7,3) on (node local) [ 124.490023][ T6888] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 124.561773][ T6880] loop2: detected capacity change from 0 to 32768 [ 124.641374][ T6880] JBD2: Ignoring recovery information on journal [ 124.668303][ T6888] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 124.975438][ T27] audit: type=1800 audit(1750723076.710:19): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.367" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 125.019261][ T6880] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 125.166025][ T27] audit: type=1804 audit(1750723076.710:20): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.367" name="/newroot/116/file0/file0" dev="loop1" ino=0 res=1 errno=0 [ 125.733228][ C0] sched: RT throttling activated [ 125.911768][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 126.034474][ T6897] loop0: detected capacity change from 0 to 131072 [ 126.044527][ T6897] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 126.052664][ T6897] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 126.096366][ T6897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.188116][ T6897] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 126.195313][ T6897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.409183][ T6926] loop1: detected capacity change from 0 to 32768 [ 127.451796][ T6926] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.382 (6926) [ 127.526435][ T6926] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 127.553427][ T6926] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 127.560023][ T6928] loop2: detected capacity change from 0 to 32768 [ 127.562195][ T6926] BTRFS info (device loop1): using free space tree [ 127.589784][ T6928] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 127.751047][ T6926] BTRFS info (device loop1): enabling ssd optimizations [ 127.791830][ T6926] BTRFS info (device loop1): auto enabling async discard [ 127.953094][ T5761] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 128.388437][ T5768] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 128.560984][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.563528][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 128.971086][ T6962] loop3: detected capacity change from 0 to 4096 [ 129.322732][ T6974] batadv_slave_1: entered allmulticast mode [ 129.343023][ T6973] batadv_slave_1: left allmulticast mode [ 129.351073][ T6972] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 129.394426][ T6962] overlayfs: upper fs does not support tmpfile. [ 129.467056][ T6962] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.942189][ T6976] loop0: detected capacity change from 0 to 32768 [ 129.967994][ T6976] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 130.109984][ T6976] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.600420][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 130.746916][ T7000] loop3: detected capacity change from 0 to 64 [ 130.947929][ T6989] loop1: detected capacity change from 0 to 32768 [ 130.969980][ T6989] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.400 (6989) [ 131.042381][ T6989] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 131.065588][ T6989] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 131.082981][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.082981][ T31] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 131.094225][ T6989] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 131.117361][ T6989] BTRFS info (device loop1): use zstd compression, level 3 [ 131.121509][ T31] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 131.133404][ T6989] BTRFS info (device loop1): using free space tree [ 131.163607][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.163607][ T31] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 131.182018][ T6993] loop2: detected capacity change from 0 to 32768 [ 131.193697][ T31] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 131.202923][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.202923][ T31] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 131.228911][ T31] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 131.237700][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.237700][ T31] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 131.254041][ T31] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 131.257515][ T6993] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.263048][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.263048][ T31] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 131.310655][ T31] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 131.319772][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.319772][ T31] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 131.350171][ T31] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 131.387963][ T6989] BTRFS info (device loop1): enabling ssd optimizations [ 131.396590][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.396590][ T31] loop3: rw=1, sector=76, nr_sectors = 1 limit=64 [ 131.411345][ T31] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 131.412025][ T6993] XFS (loop2): Ending clean mount [ 131.420093][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.420093][ T31] loop3: rw=1, sector=77, nr_sectors = 1 limit=64 [ 131.438622][ T31] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 131.446830][ T6989] BTRFS info (device loop1): auto enabling async discard [ 131.453498][ T31] kworker/u4:2: attempt to access beyond end of device [ 131.453498][ T31] loop3: rw=1, sector=78, nr_sectors = 57 limit=64 [ 131.499583][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'. [ 131.938216][ T5769] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.184956][ T27] audit: type=1326 audit(1750723083.930:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 132.258527][ T27] audit: type=1326 audit(1750723083.950:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 132.327650][ T27] audit: type=1326 audit(1750723083.950:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 132.423148][ T27] audit: type=1326 audit(1750723083.950:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 132.493342][ T27] audit: type=1326 audit(1750723083.950:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7041 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 132.553348][ T7050] loop3: detected capacity change from 0 to 64 [ 132.640302][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.646962][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.661000][ T7048] loop2: detected capacity change from 0 to 4096 [ 133.383080][ T5768] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 133.863448][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 134.025519][ T7079] loop2: detected capacity change from 0 to 512 [ 134.032869][ T7079] EXT4-fs: Ignoring removed nobh option [ 134.065460][ T23] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 134.085026][ T23] usb 1-1: config 0 has no interface number 0 [ 134.100750][ T23] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 134.142006][ T7079] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.426: invalid indirect mapped block 256 (level 2) [ 134.142606][ T23] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 134.195982][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.210314][ T23] usb 1-1: config 0 descriptor?? [ 134.217725][ T7079] EXT4-fs (loop2): 2 truncates cleaned up [ 134.234957][ T7079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.254540][ T23] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input8 [ 134.585222][ T23] usb 1-1: USB disconnect, device number 3 [ 134.677733][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.753675][ T7097] loop3: detected capacity change from 0 to 65 [ 134.800410][ T7097] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 135.083826][ T7099] loop2: detected capacity change from 0 to 4096 [ 135.263024][ T7099] ntfs: volume version 3.1. [ 135.567494][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.583689][ T7110] loop0: detected capacity change from 0 to 16 [ 135.654191][ T7110] erofs: (device loop0): mounted with root inode @ nid 36. [ 135.793404][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 135.816229][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 135.850975][ T9] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 135.888072][ T9] usb 4-1: Product: syz [ 135.892315][ T9] usb 4-1: Manufacturer: syz [ 135.913011][ T9] usb 4-1: SerialNumber: syz [ 135.923141][ T5766] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 135.938873][ T9] usb 4-1: config 0 descriptor?? [ 135.957581][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 135.972845][ T7112] loop1: detected capacity change from 0 to 16384 [ 135.979547][ T5766] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 135.991485][ T5766] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 136.010804][ T7112] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 136.033343][ T7112] UDF-fs: Scanning with blocksize 512 failed [ 136.081449][ T7112] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 136.103484][ T7112] UDF-fs: Scanning with blocksize 1024 failed [ 136.130024][ T7112] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 136.142964][ T7112] UDF-fs: Scanning with blocksize 2048 failed [ 136.248990][ T7112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.310507][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 136.378220][ T9] gspca_zc3xx: reg_r err -71 [ 136.382974][ T9] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 136.415178][ T9] usb 4-1: USB disconnect, device number 5 [ 137.503578][ T7132] loop2: detected capacity change from 0 to 32768 [ 137.527055][ T7131] loop1: detected capacity change from 0 to 32768 [ 137.537144][ T7132] (syz.2.447,7132,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.581117][ T7132] (syz.2.447,7132,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 137.582708][ T7131] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.446 (7131) [ 137.659151][ T7132] JBD2: Ignoring recovery information on journal [ 137.696522][ T7134] loop0: detected capacity change from 0 to 32768 [ 137.732036][ T7131] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.818239][ T7131] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.864654][ T7134] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.914022][ T7131] BTRFS info (device loop1): setting nodatacow, compression disabled [ 137.922260][ T7131] BTRFS info (device loop1): max_inline at 0 [ 137.963519][ T7131] BTRFS info (device loop1): turning off barriers [ 137.979872][ T7132] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.014870][ T7131] BTRFS info (device loop1): force zlib compression, level 3 [ 138.022349][ T7131] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.103302][ T7131] BTRFS info (device loop1): force zstd compression, level 3 [ 138.148040][ T7131] BTRFS info (device loop1): force clearing of disk cache [ 138.196853][ T7131] BTRFS info (device loop1): enabling ssd optimizations [ 138.265746][ T7131] BTRFS info (device loop1): max_inline at 4096 [ 138.282571][ T5766] (syz-executor,5766,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 138.285528][ T7131] BTRFS info (device loop1): using free space tree [ 138.353133][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 138.578679][ T7131] BTRFS info (device loop1): auto enabling async discard [ 138.605257][ T5769] ocfs2: Unmounting device (7,2) on (node local) [ 138.612683][ T7131] BTRFS info (device loop1): rebuilding free space tree [ 139.088542][ T7177] loop3: detected capacity change from 0 to 512 [ 139.114707][ T7177] EXT4-fs: Ignoring removed oldalloc option [ 139.250227][ T7177] EXT4-fs (loop3): 1 truncate cleaned up [ 139.266885][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.288078][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.604265][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.848685][ T7175] loop0: detected capacity change from 0 to 32768 [ 140.341591][ T7195] loop1: detected capacity change from 0 to 2048 [ 140.395465][ T7195] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 140.403681][ T7195] UDF-fs: Scanning with blocksize 512 failed [ 140.448080][ T7195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.655136][ T7199] loop2: detected capacity change from 0 to 2048 [ 140.684921][ T7199] NILFS (loop2): invalid segment: Magic number mismatch [ 140.703518][ T7199] NILFS (loop2): trying rollback from an earlier position [ 140.754125][ T7199] NILFS (loop2): recovery complete [ 140.782246][ T7202] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.942380][ T7199] overlayfs: upper fs does not support tmpfile. [ 140.966607][ T7199] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.980421][ T7199] overlayfs: failed to set xattr on upper [ 141.005805][ T7199] overlayfs: ...falling back to redirect_dir=nofollow. [ 141.015193][ T7199] overlayfs: ...falling back to index=off. [ 141.023290][ T7199] overlayfs: ...falling back to uuid=null. [ 141.158542][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.365483][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.372922][ T5772] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 141.386419][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.391728][ T5772] hid-generic 0000:0000:0000.0007: ignoring exceeding usage max [ 141.404822][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.409116][ T5772] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 141.421682][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.430637][ T5772] hid-generic 0000:0000:0000.0007: unknown main item tag 0x6 [ 141.433468][ T9] usb 1-1: SerialNumber: syz [ 141.439142][ T5780] Bluetooth: hci0: command tx timeout [ 141.449381][ T5772] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 141.477384][ T5772] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.579438][ T7218] fido_id[7218]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.711910][ T9] usb 1-1: 0:2 : does not exist [ 141.761195][ T9] usb 1-1: USB disconnect, device number 4 [ 141.829528][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.175262][ T7223] loop1: detected capacity change from 0 to 256 [ 142.405091][ T7223] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 142.769799][ T7229] loop8: detected capacity change from 0 to 7 [ 142.813139][ T7229] Dev loop8: unable to read RDB block 7 [ 142.819206][ T7229] loop8: unable to read partition table [ 142.829232][ T7229] loop8: partition table beyond EOD, truncated [ 142.842985][ T7229] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 143.016886][ T7233] loop1: detected capacity change from 0 to 1024 [ 143.061222][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.079896][ T7225] loop3: detected capacity change from 0 to 32768 [ 143.090273][ T7233] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.140650][ T7225] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 143.180696][ T7225] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.275996][ T7233] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 143.380212][ T7233] EXT4-fs (loop1): Remounting filesystem read-only [ 143.438998][ T7225] XFS (loop3): Ending clean mount [ 143.460166][ T7225] XFS (loop3): Quotacheck needed: Please wait. [ 143.585984][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.615622][ T7225] XFS (loop3): Quotacheck: Done. [ 143.743876][ T7252] loop0: detected capacity change from 0 to 2048 [ 143.772999][ T7252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.790267][ T27] audit: type=1800 audit(1750723095.530:26): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.480" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 144.321481][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.368329][ T7259] loop0: detected capacity change from 0 to 512 [ 144.408607][ T7259] EXT4-fs (loop0): DAX unsupported by block device. [ 144.803590][ T7254] loop1: detected capacity change from 0 to 32768 [ 144.812034][ T7254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.488 (7254) [ 144.856834][ T7254] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.877875][ T7254] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 144.901677][ T7254] BTRFS info (device loop1): using free space tree [ 145.040908][ T7254] BTRFS info (device loop1): enabling ssd optimizations [ 145.053762][ T7254] BTRFS info (device loop1): auto enabling async discard [ 145.574488][ T993] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 145.775011][ T27] audit: type=1326 audit(1750723097.520:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 145.843312][ T27] audit: type=1326 audit(1750723097.520:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 145.893398][ T27] audit: type=1326 audit(1750723097.520:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 145.938694][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.973598][ T27] audit: type=1326 audit(1750723097.520:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 146.033019][ T27] audit: type=1326 audit(1750723097.530:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 146.063811][ T27] audit: type=1326 audit(1750723097.530:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 146.152061][ T27] audit: type=1326 audit(1750723097.530:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.0.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 146.820637][ T7301] loop1: detected capacity change from 0 to 4096 [ 146.896972][ T7306] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.949508][ T7290] loop2: detected capacity change from 0 to 32768 [ 146.990224][ T7290] XFS: ikeep mount option is deprecated. [ 147.049117][ T27] audit: type=1800 audit(1750723098.790:34): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.500" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 147.088782][ T7290] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.321705][ T7290] XFS (loop2): Ending clean mount [ 147.340073][ T7290] XFS (loop2): Quotacheck needed: Please wait. [ 147.435820][ T7290] XFS (loop2): Quotacheck: Done. [ 147.802791][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.854323][ T7314] loop3: detected capacity change from 0 to 32768 [ 147.878083][ T7314] XFS: attr2 mount option is deprecated. [ 147.893375][ T7314] XFS: ikeep mount option is deprecated. [ 147.906373][ T7314] XFS: noikeep mount option is deprecated. [ 147.966132][ T7335] syzkaller1: entered promiscuous mode [ 147.971689][ T7335] syzkaller1: entered allmulticast mode [ 147.982758][ T7314] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 148.072880][ T7314] XFS (loop3): Ending clean mount [ 148.116206][ T7314] XFS (loop3): Quotacheck needed: Please wait. [ 148.227227][ T7314] XFS (loop3): Quotacheck: Done. [ 148.342406][ T5767] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 148.549352][ T7347] o2cb: This node has not been configured. [ 148.564974][ T7347] o2cb: Cluster check failed. Fix errors before retrying. [ 148.582689][ T7347] (syz.3.510,7347,0):user_dlm_register:674 ERROR: status = -22 [ 148.608090][ T7347] (syz.3.510,7347,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 148.810132][ T7340] loop1: detected capacity change from 0 to 32768 [ 148.868999][ T7356] loop3: detected capacity change from 0 to 512 [ 148.917686][ T7356] EXT4-fs: quotafile must be on filesystem root [ 148.923500][ T7340] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 149.044760][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.139895][ T7340] XFS (loop1): Ending clean mount [ 149.274917][ T9] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 149.317557][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 149.353777][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.362684][ T7364] loop3: detected capacity change from 0 to 256 [ 149.382963][ T9] usb 1-1: Product: syz [ 149.403483][ T9] usb 1-1: Manufacturer: syz [ 149.408321][ T9] usb 1-1: SerialNumber: syz [ 149.426864][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 149.443170][ T7364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 149.481691][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 149.513167][ T5864] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 149.865993][ T7370] loop3: detected capacity change from 0 to 64 [ 149.868823][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.896527][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.978199][ T5768] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 150.030183][ T5772] usb 1-1: USB disconnect, device number 5 [ 150.280354][ T7377] loop3: detected capacity change from 0 to 2048 [ 150.318951][ T7377] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.339752][ T7377] NILFS (loop3): mounting unchecked fs [ 150.344345][ T6042] udevd[6042]: incorrect nilfs2 checksum on /dev/loop3 [ 150.381291][ T7377] NILFS (loop3): recovery complete [ 150.409230][ T7379] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.643016][ T5864] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 150.650894][ T5864] ath9k_htc: Failed to initialize the device [ 150.667799][ T5772] usb 1-1: ath9k_htc: USB layer deinitialized [ 151.033570][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.058003][ T5772] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.249556][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.269474][ T5772] usb 1-1: Using ep0 maxpacket: 32 [ 151.287508][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.297756][ T5772] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 151.332925][ T5772] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08 [ 151.344986][ T23] usb 4-1: config 0 descriptor?? [ 151.360167][ T23] cp210x 4-1:0.0: cp210x converter detected [ 151.366419][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.374850][ T7388] loop2: detected capacity change from 0 to 32768 [ 151.380407][ T5772] usb 1-1: Product: syz [ 151.386577][ T5772] usb 1-1: Manufacturer: syz [ 151.391384][ T5772] usb 1-1: SerialNumber: syz [ 151.456299][ T5772] mos7840 1-1:1.0: missing endpoints [ 151.814092][ T23] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 151.835990][ T9] usb 1-1: USB disconnect, device number 6 [ 151.843930][ T23] usb 4-1: cp210x converter now attached to ttyUSB0 [ 151.902628][ T7398] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 152.106194][ T23] usb 4-1: USB disconnect, device number 6 [ 152.118535][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.166205][ T23] cp210x 4-1:0.0: device disconnected [ 152.387591][ T7405] loop1: detected capacity change from 0 to 1024 [ 152.580868][ T7409] capability: warning: `syz.2.533' uses deprecated v2 capabilities in a way that may be insecure [ 152.866183][ T7416] loop0: detected capacity change from 0 to 1024 [ 152.884701][ T7416] hfsplus: session requires an argument [ 152.903671][ T7416] hfsplus: unable to parse mount options [ 153.008222][ T7419] loop1: detected capacity change from 0 to 512 [ 153.096168][ T7423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 153.101535][ T7419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.185388][ T27] audit: type=1800 audit(1750723104.930:35): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 153.257626][ T7428] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.538: bg 0: block 264: padding at end of block bitmap is not set [ 153.272821][ T27] audit: type=1800 audit(1750723104.930:36): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 153.324606][ T7430] loop3: detected capacity change from 0 to 1024 [ 153.377553][ T7430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.474627][ T7430] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.537588][ T7434] loop0: detected capacity change from 0 to 512 [ 153.558776][ T7434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.614625][ T7434] EXT4-fs (loop0): 1 truncate cleaned up [ 153.621720][ T7434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.681723][ T7430] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.542: lblock 3 mapped to illegal pblock 3 (length 13) [ 153.815656][ T7430] EXT4-fs (loop3): Remounting filesystem read-only [ 153.932423][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.976502][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.050421][ T27] audit: type=1326 audit(1750723105.780:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.126776][ T27] audit: type=1326 audit(1750723105.780:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.151839][ T27] audit: type=1326 audit(1750723105.780:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.170828][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.175894][ T27] audit: type=1326 audit(1750723105.780:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.274454][ T7444] program syz.2.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.297244][ T27] audit: type=1326 audit(1750723105.780:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.367429][ T27] audit: type=1326 audit(1750723105.800:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.464533][ T27] audit: type=1326 audit(1750723105.800:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.560267][ T27] audit: type=1326 audit(1750723105.800:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 154.883576][ T7461] block nbd0: server does not support multiple connections per device. [ 154.916687][ T7461] block nbd0: shutting down sockets [ 155.043414][ T5822] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.263510][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 155.272751][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.284443][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.316159][ T5822] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 155.328256][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.349927][ T5822] usb 3-1: config 0 descriptor?? [ 155.537667][ T7477] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 155.810629][ T7486] loop1: detected capacity change from 0 to 2048 [ 155.827007][ T5822] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 155.883771][ T7486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.195454][ T5864] usb 3-1: USB disconnect, device number 8 [ 156.282521][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.480781][ T7504] loop1: detected capacity change from 0 to 1024 [ 156.542913][ T7504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.555469][ T7504] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.566013][ T5822] kernel write not supported for file [eventfd] (pid: 5822 comm: kworker/1:4) [ 156.610165][ T7504] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.571: lblock 3 mapped to illegal pblock 3 (length 13) [ 156.702055][ T7504] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 156.753307][ T7504] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.753307][ T7504] [ 156.992774][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.068481][ T7525] loop3: detected capacity change from 0 to 8 [ 157.436428][ T7534] loop2: detected capacity change from 0 to 256 [ 157.463686][ T7534] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.478904][ T7534] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 157.488908][ T7535] loop1: detected capacity change from 0 to 2048 [ 157.537836][ T7535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.548108][ T7534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 158.231370][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 158.231385][ T27] audit: type=1326 audit(1750723109.970:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.344301][ T27] audit: type=1326 audit(1750723110.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.375384][ T27] audit: type=1326 audit(1750723110.030:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.467806][ T27] audit: type=1326 audit(1750723110.040:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.490949][ T5864] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.535150][ T27] audit: type=1326 audit(1750723110.040:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.596747][ T27] audit: type=1326 audit(1750723110.040:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.628246][ T27] audit: type=1326 audit(1750723110.040:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.676805][ T27] audit: type=1326 audit(1750723110.060:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.701252][ T27] audit: type=1326 audit(1750723110.060:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.723867][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 158.731686][ T27] audit: type=1326 audit(1750723110.060:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc298e929 code=0x7ffc0000 [ 158.755285][ T5864] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.766443][ T5864] usb 3-1: config 0 has no interface number 0 [ 158.773037][ T5864] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.786461][ T5864] usb 3-1: config 0 interface 85 has no altsetting 0 [ 158.808522][ T5864] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 158.818065][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.834804][ T5864] usb 3-1: Product: syz [ 158.843305][ T5864] usb 3-1: Manufacturer: syz [ 158.856727][ T5864] usb 3-1: SerialNumber: syz [ 158.891084][ T5864] usb 3-1: config 0 descriptor?? [ 159.551238][ T5864] appletouch 3-1:0.85: Geyser mode initialized. [ 159.562579][ T5864] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input10 [ 159.594812][ T7564] loop3: detected capacity change from 0 to 8 [ 159.641127][ T7564] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.663589][ T7564] SQUASHFS error: Failed to read block 0x0: -5 [ 159.670625][ T7564] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.724341][ T7564] SQUASHFS error: Failed to read block 0x0: -5 [ 159.934685][ T5822] usb 3-1: USB disconnect, device number 9 [ 159.982807][ T5822] appletouch 3-1:0.85: input: appletouch disconnected [ 160.287087][ T7580] input: syz0 as /devices/virtual/input/input11 [ 160.308029][ T7580] input: failed to attach handler leds to device input11, error: -6 [ 160.441667][ T7582] loop3: detected capacity change from 0 to 256 [ 160.485631][ T7582] FAT-fs (loop3): Directory bread(block 1285) failed [ 160.565164][ T7582] FAT-fs (loop3): Directory bread(block 1285) failed [ 161.289476][ T7598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 161.313440][ T7598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.608'. [ 161.558930][ T7586] loop2: detected capacity change from 0 to 32768 [ 161.603856][ T7586] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.833636][ T7586] XFS (loop2): Ending clean mount [ 162.097476][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.506736][ T7631] vlan2: entered allmulticast mode [ 163.512051][ T7631] vlan1: entered allmulticast mode [ 163.518408][ T7631] veth0_vlan: entered allmulticast mode [ 163.526482][ T7631] bridge0: port 3(vlan2) entered blocking state [ 163.532970][ T7631] bridge0: port 3(vlan2) entered disabled state [ 163.559594][ T7631] vlan2: entered promiscuous mode [ 163.576747][ T7631] vlan1: entered promiscuous mode [ 163.595522][ T7631] bridge0: port 3(vlan2) entered blocking state [ 163.601994][ T7631] bridge0: port 3(vlan2) entered forwarding state [ 163.694825][ T7636] loop3: detected capacity change from 0 to 1024 [ 163.968802][ T7643] loop0: detected capacity change from 0 to 2048 [ 163.996459][ T7643] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 164.020600][ T7643] UDF-fs: Scanning with blocksize 512 failed [ 164.044289][ T7643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.258278][ T11] hfsplus: b-tree write err: -5, ino 3 [ 165.250604][ T7668] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 165.253284][ T5772] IPVS: starting estimator thread 0... [ 165.343779][ T7648] loop3: detected capacity change from 0 to 40427 [ 165.363391][ T7671] IPVS: using max 17 ests per chain, 40800 per kthread [ 165.374393][ T7648] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 165.392852][ T7648] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.419964][ T7648] F2FS-fs (loop3): invalid crc value [ 165.475687][ T7648] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.599677][ T7648] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.627394][ T7648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.827463][ T7660] loop0: detected capacity change from 0 to 32768 [ 165.863560][ T7660] JBD2: Ignoring recovery information on journal [ 165.897829][ T7648] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 165.977556][ T7660] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 166.025677][ T7685] loop1: detected capacity change from 0 to 2048 [ 166.063457][ T5822] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.079237][ T7685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.125735][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 166.125751][ T27] audit: type=1800 audit(1750723117.870:65): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.630" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 166.128647][ T7685] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 166.172213][ T7685] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 166.218832][ T7685] EXT4-fs (loop1): This should not happen!! Data will be lost [ 166.218832][ T7685] [ 166.236934][ T7685] EXT4-fs (loop1): Total free blocks count 0 [ 166.242993][ T7685] EXT4-fs (loop1): Free/Dirty block details [ 166.243016][ T7689] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 166.250205][ T7685] EXT4-fs (loop1): free_blocks=66060288 [ 166.292347][ T5822] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.306847][ T7685] EXT4-fs (loop1): dirty_blocks=32 [ 166.312270][ T7685] EXT4-fs (loop1): Block reservation details [ 166.319686][ T7685] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 166.331858][ T5822] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.353321][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.381307][ T5822] usb 3-1: SerialNumber: syz [ 166.576258][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 167.093420][ T5822] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 167.168038][ T7703] loop0: detected capacity change from 0 to 1024 [ 167.549557][ T5822] usb 3-1: USB disconnect, device number 10 [ 167.560136][ T5822] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 168.138277][ T7727] loop1: detected capacity change from 0 to 2048 [ 168.255565][ T7727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.343429][ T7727] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.397840][ T7713] loop3: detected capacity change from 0 to 32768 [ 168.478881][ T7731] loop0: detected capacity change from 0 to 4096 [ 168.489553][ T7713] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.647 (7713) [ 168.596173][ T7713] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 168.646288][ T7713] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 168.684791][ T7713] BTRFS info (device loop3): using free space tree [ 168.697897][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.884372][ T7752] netlink: 64 bytes leftover after parsing attributes in process `syz.2.654'. [ 169.011412][ T7713] BTRFS info (device loop3): enabling ssd optimizations [ 169.046051][ T7713] BTRFS info (device loop3): auto enabling async discard [ 169.261881][ T7767] loop1: detected capacity change from 0 to 2048 [ 169.352539][ T7767] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 169.402530][ T7773] loop2: detected capacity change from 0 to 128 [ 169.431824][ T7767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.502829][ T7767] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 169.529040][ T7773] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 169.639903][ T5767] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 169.652709][ T7773] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.036482][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.534493][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 170.613399][ T7797] loop2: detected capacity change from 0 to 4096 [ 171.117312][ T7797] overlayfs: upper fs does not support tmpfile. [ 171.146456][ T7819] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 171.192384][ T7797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 171.417305][ T7828] loop1: detected capacity change from 0 to 256 [ 171.439481][ T7828] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.485692][ T7828] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 171.550774][ T7828] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 171.661099][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.674'. [ 171.906927][ T7838] loop1: detected capacity change from 0 to 512 [ 171.920360][ T7838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.970716][ T7838] EXT4-fs (loop1): 1 truncate cleaned up [ 171.980001][ T7838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.031301][ T7838] syz.1.678 (pid 7838) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 172.090592][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.102049][ T7849] loop3: detected capacity change from 0 to 32768 [ 173.195644][ T7868] batadv0: entered promiscuous mode [ 173.215927][ T7849] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.225448][ T7868] batadv_slave_1: entered promiscuous mode [ 173.241664][ T7864] batadv_slave_1: left promiscuous mode [ 173.302081][ T7864] batadv0: left promiscuous mode [ 173.367142][ T7849] XFS (loop3): Ending clean mount [ 173.396085][ T7876] loop2: detected capacity change from 0 to 512 [ 173.464991][ T7876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.518107][ T7876] EXT4-fs (loop2): 1 truncate cleaned up [ 173.528923][ T7876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.754901][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.837027][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.921386][ T7886] loop2: detected capacity change from 0 to 16 [ 173.978675][ T7886] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.048653][ T7886] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 174.097711][ T7886] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 174.150527][ T7886] erofs: (device loop2): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 174.192893][ T7886] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 174.242700][ T7886] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 174.262613][ T7886] erofs: (device loop2): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 174.296099][ T7886] syz.2.693: attempt to access beyond end of device [ 174.296099][ T7886] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 174.341877][ T7886] syz.2.693: attempt to access beyond end of device [ 174.341877][ T7886] loop2: rw=524288, sector=67108880, nr_sectors = 16 limit=16 [ 174.360901][ T7886] syz.2.693: attempt to access beyond end of device [ 174.360901][ T7886] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 174.385097][ T7892] loop0: detected capacity change from 0 to 64 [ 174.394064][ T7886] syz.2.693: attempt to access beyond end of device [ 174.394064][ T7886] loop2: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 174.423808][ T7886] syz.2.693: attempt to access beyond end of device [ 174.423808][ T7886] loop2: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 174.469652][ T7886] syz.2.693: attempt to access beyond end of device [ 174.469652][ T7886] loop2: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 174.496709][ T7886] syz.2.693: attempt to access beyond end of device [ 174.496709][ T7886] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 174.511349][ T7886] syz.2.693: attempt to access beyond end of device [ 174.511349][ T7886] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 174.572968][ T7886] syz.2.693: attempt to access beyond end of device [ 174.572968][ T7886] loop2: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 174.608761][ T7886] syz.2.693: attempt to access beyond end of device [ 174.608761][ T7886] loop2: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 174.768303][ T7884] loop1: detected capacity change from 0 to 32768 [ 174.802222][ T7898] loop3: detected capacity change from 0 to 512 [ 174.810345][ T7884] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.694 (7884) [ 174.835973][ T7884] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.847635][ T7884] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 174.856908][ T7884] BTRFS info (device loop1): setting nodatacow, compression disabled [ 174.870806][ T7898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.879911][ T7884] BTRFS info (device loop1): force clearing of disk cache [ 174.909608][ T7884] BTRFS info (device loop1): setting datacow [ 174.913522][ T7898] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.941633][ T7884] BTRFS info (device loop1): enabling disk space caching [ 174.977300][ T7884] BTRFS info (device loop1): turning on sync discard [ 174.984882][ T7884] BTRFS info (device loop1): disabling disk space caching [ 174.992058][ T7884] BTRFS info (device loop1): turning off discard [ 175.003616][ T7884] BTRFS info (device loop1): use no compression [ 175.054774][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.236733][ T7884] BTRFS info (device loop1): rebuilding free space tree [ 175.291255][ T7884] BTRFS info (device loop1): disabling free space tree [ 175.304946][ T7884] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.314897][ T7884] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.422609][ T7922] loop3: detected capacity change from 0 to 4096 [ 175.618606][ T5768] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.844687][ T7925] loop0: detected capacity change from 0 to 1024 [ 176.280538][ T7933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.288517][ T7933] IPv6: NLM_F_CREATE should be set when creating new route [ 176.295978][ T7933] IPv6: NLM_F_CREATE should be set when creating new route [ 176.303281][ T7933] IPv6: NLM_F_CREATE should be set when creating new route [ 176.676362][ T7939] loop3: detected capacity change from 0 to 2048 [ 176.733339][ T6042] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.063364][ T5822] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 177.243328][ T5772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.276926][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.287736][ T5822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.299796][ T5822] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.309045][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.317164][ T5822] usb 4-1: Product: syz [ 177.321339][ T5822] usb 4-1: Manufacturer: syz [ 177.326574][ T5822] usb 4-1: SerialNumber: syz [ 177.446607][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.456785][ T5772] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 177.465956][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.479644][ T5772] usb 2-1: config 0 descriptor?? [ 177.549253][ T7953] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 177.551791][ T5822] usb 4-1: 0:2 : does not exist [ 177.600587][ T5822] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 177.654390][ T7955] loop0: detected capacity change from 0 to 2048 [ 177.659516][ T5822] usb 4-1: USB disconnect, device number 7 [ 177.733450][ T7071] udevd[7071]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.765054][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.933858][ T5772] dragonrise 0003:0079:0006.0009: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 177.959621][ T5772] dragonrise 0003:0079:0006.0009: no inputs found [ 177.972333][ T5772] dragonrise 0003:0079:0006.0009: force feedback init failed [ 178.162780][ T9] usb 2-1: USB disconnect, device number 3 [ 178.248373][ T7964] program syz.0.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.311869][ T7966] binder: 7965:7966 ioctl c0306201 0 returned -14 [ 178.341871][ T5143] udevd[5143]: worker [7071] terminated by signal 33 (Unknown signal 33) [ 178.356795][ T5143] udevd[5143]: worker [7071] failed while handling '/devices/virtual/block/loop0' [ 178.728545][ T7978] loop3: detected capacity change from 0 to 4096 [ 178.752266][ T7978] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 178.805863][ T7978] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 179.116176][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802c90b000: rx timeout, send abort [ 179.127588][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802c90b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.376479][ T7986] xt_bpf: check failed: parse error [ 179.783433][ T5822] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.976666][ T7990] loop0: detected capacity change from 0 to 40427 [ 179.995921][ T7990] F2FS-fs (loop0): invalid crc value [ 180.003893][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.015479][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.025409][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.031956][ T7990] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.038828][ T5822] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.038859][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.042121][ T5822] usb 4-1: config 0 descriptor?? [ 180.244817][ T7990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 180.332610][ T27] audit: type=1800 audit(1750723132.070:66): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.735" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 180.352778][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.404132][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e1ad800: rx timeout, send abort [ 180.412941][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e1ad800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 180.510716][ T5822] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 180.537373][ T5766] syz-executor: attempt to access beyond end of device [ 180.537373][ T5766] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.573845][ T5822] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.588441][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 181.555641][ T8007] loop2: detected capacity change from 0 to 32768 [ 181.578956][ T8007] XFS (loop2): Invalid device [./bus], error=-15 [ 181.917027][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 182.163319][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 182.310481][ T8031] loop2: detected capacity change from 0 to 4096 [ 182.322315][ T8031] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 182.348030][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 182.357394][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.370905][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 182.380585][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.388914][ T9] usb 1-1: Product: syz [ 182.393662][ T9] usb 1-1: Manufacturer: syz [ 182.398486][ T9] usb 1-1: SerialNumber: syz [ 182.406618][ T9] usb 1-1: config 0 descriptor?? [ 182.851925][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 183.054533][ T5864] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 183.078497][ T9] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 183.087472][ T5864] usb 4-1: device reset changed ep0 maxpacket size! [ 183.107174][ T9] gs_usb: probe of 1-1:0.0 failed with error -22 [ 183.115578][ T23] usb 4-1: USB disconnect, device number 8 [ 183.299174][ T5822] usb 1-1: USB disconnect, device number 7 [ 183.313433][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.513306][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.523319][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 183.529948][ T23] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.539455][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.550024][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.561515][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.570614][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.578701][ T23] usb 4-1: Product: syz [ 183.582860][ T23] usb 4-1: Manufacturer: syz [ 183.587586][ T23] usb 4-1: SerialNumber: syz [ 183.681558][ T8051] loop2: detected capacity change from 0 to 1024 [ 183.709879][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.728940][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.740659][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.756058][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.778283][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.791742][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.800229][ T9] usb 2-1: Manufacturer: syz [ 183.816374][ T9] usb 2-1: config 0 descriptor?? [ 184.053870][ T23] usb 4-1: 0:2 : does not exist [ 184.270291][ T9] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 184.292325][ T9] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 184.319978][ T9] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 184.679651][ T23] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 184.689870][ T5864] usb 2-1: USB disconnect, device number 4 [ 184.752927][ T23] usb 4-1: USB disconnect, device number 9 [ 184.807185][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.001000][ T8062] loop0: detected capacity change from 0 to 32768 [ 185.160185][ T8066] syz.0.766: attempt to access beyond end of device [ 185.160185][ T8066] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 185.202879][ T8066] metapage_write_end_io: I/O error [ 185.230688][ T8066] ERROR: (device loop0): diWrite: ixpxd invalid [ 185.230688][ T8066] [ 185.258288][ T8066] ERROR: (device loop0): remounting filesystem as read-only [ 185.304661][ T8066] ERROR: (device loop0): txCommit: [ 185.304661][ T8066] [ 185.346455][ T111] blkno = 8ed2c, nblocks = 1 [ 185.347749][ T8066] blkno = 8ed2c, nblocks = 1 [ 185.355420][ T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 185.355420][ T111] [ 185.391435][ T8066] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 185.391435][ T8066] [ 185.405253][ T8066] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 185.405253][ T8066] [ 185.444845][ T8066] jfs_mkdir: dtSearch returned -5 [ 185.463037][ T8070] loop1: detected capacity change from 0 to 2048 [ 185.475631][ T8070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.569360][ T8070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.609072][ T8062] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 185.609072][ T8062] [ 185.634841][ T8062] jfs_readdir: unexpected rc = -5 from dtReadNext [ 185.708721][ T5766] syz-executor: attempt to access beyond end of device [ 185.708721][ T5766] loop0: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 185.731209][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.740967][ T5766] metapage_write_end_io: I/O error [ 185.746611][ T5766] JFS: metapage_get_blocks failed [ 185.769583][ T5766] JFS: metapage_get_blocks failed [ 185.780715][ T5766] JFS: metapage_get_blocks failed [ 185.793659][ T5766] JFS: metapage_get_blocks failed [ 185.803349][ T5864] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.916604][ T8077] syz.1.771: attempt to access beyond end of device [ 185.916604][ T8077] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 185.930173][ T8077] syz.1.771: attempt to access beyond end of device [ 185.930173][ T8077] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 185.949064][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 185.959702][ T8077] syz.1.771: attempt to access beyond end of device [ 185.959702][ T8077] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 185.974136][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 186.004872][ T5864] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 186.014393][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.022441][ T5864] usb 4-1: Product: syz [ 186.027667][ T8077] syz.1.771: attempt to access beyond end of device [ 186.027667][ T8077] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 186.040751][ T5864] usb 4-1: Manufacturer: syz [ 186.045463][ T5864] usb 4-1: SerialNumber: syz [ 186.051063][ T8077] syz.1.771: attempt to access beyond end of device [ 186.051063][ T8077] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 186.067462][ T5864] usb 4-1: config 0 descriptor?? [ 186.091592][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 186.132179][ T8077] syz.1.771: attempt to access beyond end of device [ 186.132179][ T8077] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 186.150597][ T8068] loop2: detected capacity change from 0 to 40427 [ 186.169185][ T8068] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 186.193458][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 186.220507][ T8068] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 186.232883][ T8077] syz.1.771: attempt to access beyond end of device [ 186.232883][ T8077] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 186.240294][ T8068] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 186.273374][ T8068] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 186.276700][ T8077] syz.1.771: attempt to access beyond end of device [ 186.276700][ T8077] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 186.294481][ T8068] F2FS-fs (loop2): invalid crc value [ 186.339989][ T8068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 186.360179][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 186.396716][ T8077] syz.1.771: attempt to access beyond end of device [ 186.396716][ T8077] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 186.430645][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 186.457503][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 186.486060][ T8068] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 186.493681][ T8077] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 186.506104][ T8068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.514790][ T8085] loop0: detected capacity change from 0 to 512 [ 186.555459][ T8077] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 186.568917][ T5864] usb 4-1: Firmware version (0.0) predates our first public release. [ 186.584185][ T5864] usb 4-1: Please update to version 0.2 or newer [ 186.592971][ T5864] usb 4-1: Firmware: build [ 186.683027][ T8085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.707167][ T8085] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.732879][ T27] audit: type=1800 audit(1750723138.470:67): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.767" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 186.832023][ T5864] usb 4-1: USB disconnect, device number 10 [ 186.866338][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 186.876046][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.858384][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 188.285484][ T8115] xt_bpf: check failed: parse error [ 188.697768][ T8127] loop2: detected capacity change from 0 to 256 [ 188.803282][ T8132] batadv_slave_1: entered promiscuous mode [ 188.811450][ T8127] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 188.846259][ T8131] batadv_slave_1: left promiscuous mode [ 189.190770][ T8143] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.792'. [ 189.357034][ T8148] loop3: detected capacity change from 0 to 16 [ 189.384207][ T8148] erofs: (device loop3): mounted with root inode @ nid 36. [ 189.403364][ T787] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 189.524816][ T5767] BUG: Bad page state in process syz-executor pfn:75c48 [ 189.532581][ T5767] page:ffffea0001d71200 refcount:0 mapcount:0 mapping:ffff88805b960d20 index:0x2 pfn:0x75c48 [ 189.542886][ T5767] aops:z_erofs_cache_aops ino:0 [ 189.547857][ T5767] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 189.556032][ T5767] page_type: 0xffffffff() [ 189.560419][ T5767] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805b960d20 [ 189.569719][ T5767] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 189.579068][ T5767] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 189.587751][ T5767] page_owner tracks the page as allocated [ 189.594908][ T5767] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8148, tgid 8147 (syz.3.798), ts 189428420038, free_ts 189322274614 [ 189.605138][ T787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.617197][ T5767] post_alloc_hook+0x1cd/0x210 [ 189.630357][ T5767] get_page_from_freelist+0x195c/0x19f0 [ 189.636574][ T5767] __alloc_pages+0x1e3/0x460 [ 189.641209][ T5767] z_erofs_do_read_page+0x20c0/0x3680 [ 189.646686][ T5767] z_erofs_pcluster_readmore+0x2cf/0x450 [ 189.652374][ T5767] z_erofs_read_folio+0x208/0x540 [ 189.657526][ T5767] filemap_read_folio+0x167/0x760 [ 189.662593][ T5767] do_read_cache_folio+0x470/0x7e0 [ 189.667784][ T5767] erofs_bread+0x16f/0x630 [ 189.669899][ T787] usb 2-1: config 0 has no interface number 0 [ 189.672216][ T5767] erofs_namei+0x28c/0xf00 [ 189.672242][ T5767] erofs_lookup+0x135/0x310 [ 189.672262][ T5767] path_openat+0x10b8/0x3190 [ 189.691822][ T787] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 189.693293][ T5767] do_filp_open+0x1c5/0x3d0 [ 189.693323][ T5767] do_sys_openat2+0x12c/0x1c0 [ 189.693348][ T5767] __x64_sys_openat+0x139/0x160 [ 189.702716][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.707021][ T5767] do_syscall_64+0x55/0xb0 [ 189.707053][ T5767] page last free stack trace: [ 189.707062][ T5767] free_unref_page_prepare+0x7ce/0x8e0 [ 189.707082][ T5767] free_unref_page+0x32/0x2e0 [ 189.707101][ T5767] __unfreeze_partials+0x1cf/0x210 [ 189.707122][ T5767] put_cpu_partial+0x17c/0x250 [ 189.707142][ T5767] __slab_free+0x31d/0x410 [ 189.707162][ T5767] qlist_free_all+0x75/0xe0 [ 189.707178][ T5767] kasan_quarantine_reduce+0x143/0x160 [ 189.707196][ T5767] __kasan_slab_alloc+0x22/0x80 [ 189.721137][ T787] usb 2-1: config 0 descriptor?? [ 189.724825][ T5767] slab_post_alloc_hook+0x6e/0x4d0 [ 189.724854][ T5767] kmem_cache_alloc_node+0x150/0x330 [ 189.724873][ T5767] __alloc_skb+0x108/0x2c0 [ 189.724890][ T5767] _sctp_make_chunk+0x5e/0x430 [ 189.724912][ T5767] sctp_make_datafrag_empty+0x123/0x230 [ 189.724935][ T5767] sctp_datamsg_from_user+0x722/0xee0 [ 189.744058][ T787] usb 2-1: selecting invalid altsetting 1 [ 189.744314][ T5767] sctp_sendmsg_to_asoc+0xff2/0x17f0 [ 189.761759][ T787] dvb_ttusb_budget: ttusb_init_controller: error [ 189.763960][ T5767] sctp_sendmsg+0x1941/0x27e0 [ 189.763991][ T5767] Modules linked in: [ 189.764044][ T5767] CPU: 1 PID: 5767 Comm: syz-executor Not tainted 6.6.94-syzkaller #0 [ 189.764067][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.764078][ T5767] Call Trace: [ 189.857221][ T5767] [ 189.860162][ T5767] dump_stack_lvl+0x16c/0x230 [ 189.864867][ T5767] ? show_regs_print_info+0x20/0x20 [ 189.870081][ T5767] ? swiotlb_print_info+0x70/0x70 [ 189.875138][ T5767] bad_page+0x14b/0x170 [ 189.879323][ T5767] free_unref_page_prepare+0x887/0x8e0 [ 189.884819][ T5767] free_unref_page+0x32/0x2e0 [ 189.889505][ T5767] ? __folio_put+0xef/0x210 [ 189.894044][ T5767] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 189.900482][ T5767] erofs_shrink_workstation+0x118/0x290 [ 189.906041][ T5767] ? erofs_shrinker_unregister+0x170/0x170 [ 189.911858][ T5767] ? io_schedule+0xd0/0xd0 [ 189.916299][ T5767] ? kobject_put+0x43c/0x470 [ 189.921079][ T5767] erofs_shrinker_unregister+0x5d/0x170 [ 189.926639][ T5767] erofs_put_super+0x4e/0x150 [ 189.931327][ T5767] ? erofs_free_inode+0xb0/0xb0 [ 189.936196][ T5767] generic_shutdown_super+0x134/0x2b0 [ 189.941586][ T5767] kill_block_super+0x44/0x90 [ 189.946291][ T5767] erofs_kill_sb+0x4c/0x140 [ 189.950809][ T5767] deactivate_locked_super+0x97/0x100 [ 189.956192][ T5767] cleanup_mnt+0x429/0x4c0 [ 189.960632][ T5767] task_work_run+0x1ce/0x250 [ 189.965242][ T5767] ? task_work_cancel+0x240/0x240 [ 189.970287][ T5767] ? exit_to_user_mode_loop+0x3b/0x110 [ 189.975764][ T5767] exit_to_user_mode_loop+0xe6/0x110 [ 189.981059][ T5767] exit_to_user_mode_prepare+0xb1/0x140 [ 189.986624][ T5767] syscall_exit_to_user_mode+0x1a/0x50 [ 189.992181][ T5767] do_syscall_64+0x61/0xb0 [ 189.996615][ T5767] ? clear_bhb_loop+0x40/0x90 [ 190.001315][ T5767] ? clear_bhb_loop+0x40/0x90 [ 190.006002][ T5767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.011918][ T5767] RIP: 0033:0x7fd80638fc57 [ 190.016348][ T5767] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 190.035965][ T5767] RSP: 002b:00007ffe56a802e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 190.044416][ T5767] RAX: 0000000000000000 RBX: 00007fd806410925 RCX: 00007fd80638fc57 [ 190.052407][ T5767] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe56a803a0 [ 190.060392][ T5767] RBP: 00007ffe56a803a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.068371][ T5767] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe56a81430 [ 190.076348][ T5767] R13: 00007fd806410925 R14: 000000000002e3f4 R15: 00007ffe56a81470 [ 190.084349][ T5767] [ 190.088745][ T5767] Disabling lock debugging due to kernel taint [ 190.117634][ T787] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 190.217086][ T787] DVB: Unable to find symbol cx22700_attach() [ 190.274701][ T787] DVB: Unable to find symbol tda10046_attach() [ 190.280922][ T787] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 190.294796][ T787] usb 2-1: USB disconnect, device number 5 [ 191.034391][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 191.040466][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 191.046526][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 194.079447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.093475][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.099816][ T1280] ieee802154 phy1 wpan1: encryption failed: -22