last executing test programs: 4.981098971s ago: executing program 4 (id=884): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c726573765f6c6576656c3d30303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c646174613d77726974656261636b2c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00149e0cb4c679a55808f10855fc0d9b9d7241cc60c5c0b35a9ce6bd73d50a863d736b7f64cdbf2582b25c868128f5a0c3ca71ea7a85f79743e17bbb3291a3c43eb49fcfcab9a806f939773a5895370494ec438f24b77c23cb13a0c7c11503d4e4a25d5e8142cc163f75ca2557bc5b3dd2856dbf2f4fbffb092b1a8d3f410d0daefab8a2f41a23713a02fa9349bc76bc637fe28f733ee38a6de0e2174f54e7f4ebc705a06c4b7d76bcc94f8985dbf4791afe238c9f24f48c0f98d3898ad1f3597c15fdc241ce161617ca162b1d4a17900f12843677d372e706"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40186f03, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 4.693892425s ago: executing program 1 (id=886): syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 4.483644418s ago: executing program 1 (id=888): io_setup(0x97c, &(0x7f0000000380)=0x0) io_destroy(r0) io_setup(0xbee, &(0x7f00000007c0)) 4.261072661s ago: executing program 3 (id=890): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000700)={[{@noalign}, {@nolazytime}, {@qnoenforce}, {@inode32}, {@pquota}, {@dax}, {@uquota}]}, 0x2, 0x98cd, &(0x7f000001c9c0)="$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") 4.010812225s ago: executing program 1 (id=891): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000380)="$eJzs3U1rK1UYwPEnaZImKW2yEEVBerAb3QxtdC0GaUEIWNpGbAVh2k40ZExKJlQjYtuVW3HvSnBRurPgoqD9At24040I7roRXFhQ71zmrZm89SU3ae5t/z8oOTnnPDNnck7KM2knc/7+159USpZW0hsSTSqJiIhciGQlKoGI/xh1ywkJ25fXpv7+9eXV9WLSq1BL+bXXc0qpmdmfPv0i5Xc7mZSz7Ifnf+X+PHv+7MXzR2sfly1VtlS11lC62qz93tA3TUNtl62KptSyaeiWocpVy6h77T/42zFrOztNpVe3p9M7dcOylF5tqorRVI2aatSbSv9IL1eVpmlqOi24TvFwZUXPDxi8NeTBYETq9bw+ISKprpbi4VgGBAAAxqoz/486Kf0g+f+GzBQKiyvK6dzK/49eOW1MvXc84+f/J4le+f8bv3nbasv/ndOJVv5f884PStfn/9/KLfL/7ozoYRk4/8+OYDAYzGyiqyrS9szJ/9P++9d18MHRvFsg/wcAAAAAAAAAAAAAAAAAAAAA4FlwYdsZ27YzwWPw07qEwH+Oe6nf/E+KSNKZfZv5v89W1zck6V6458yx+dVucbfoPfodTkXEFON/u5OzNoIrj5QjKz+be3783m5xwm3Jl6TsxMuCZCTrrqdQvG0vvVNYXFAePz64TOnfdDg+Jxl5Lhz/o7s6nfhce7y//4S8OheK1yQjv2xJTUzZdiNb+/9yQam33y10xKfcfiLyx93PCgAAAAAAw6WpSz3P3zWtX7v3LSP5kvsxkSHzkpH/ep/fz/c8P49lXoqN++gBAAAAAHgYrObnFV2iRt0tmGavQkr6Ng2hEGuriYtIz86Jjpr4VVueCB3hTceTEO8OJk96XN8Fr+ptooJ/pHAGftnk31FFBhtPcPxuTSQ2+DRF9sVdAPvhpqjcIDzWOfhZp0L17DzXdzsH/oFc1gQfGyX6vM6y3L2d6BUrId5VY0cGWwAvfPP9P8N7g7x57K+Az67vfGAa9p7cZFI6Cs4uupviI//FAwAAAODOtZL+oOatcHP4RiLhm+Xwl3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIZoJF/p11EY9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT4vHAQAA///NePSO") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x40, 0x8000}) 3.506209191s ago: executing program 4 (id=893): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be", 0x1}], 0x1}, 0x0) 3.261663825s ago: executing program 1 (id=894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) 3.069073187s ago: executing program 4 (id=895): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) 2.973221879s ago: executing program 4 (id=896): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000003c0)={[{@space_cache}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@enospc_debug}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@clear_cache}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@noflushoncommit}, {@subvolid}, {@ssd_spread}, {@skip_balance}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x16a) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xb80, 0x9, 0x4, 0x6}) 2.477788326s ago: executing program 1 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="010000000000fdffffff03000000cc0001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a30000000002c0004001400010002004e21ac14144200000000000000001400020002004e20ac1414aa0000000000000000080003"], 0xe0}}, 0x0) 2.057134511s ago: executing program 1 (id=901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 2.043273072s ago: executing program 0 (id=902): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) 1.743535796s ago: executing program 0 (id=904): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) io_setup(0x8, &(0x7f0000000a00)=0x0) io_submit(r1, 0x1, &(0x7f0000000d40)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f0000000a40)="e198461474b6df", 0x7, 0x3, 0x0, 0x2}]) 1.4256488s ago: executing program 2 (id=905): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) 1.377754931s ago: executing program 3 (id=906): r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) 1.319778872s ago: executing program 2 (id=907): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000200030000000800010003000000340004"], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.277419292s ago: executing program 0 (id=908): io_setup(0x2003, &(0x7f00000002c0)=0x0) r1 = memfd_create(&(0x7f0000000080)='$(}]#\\\x00', 0x7) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x0, 0x2}]) 1.199695773s ago: executing program 2 (id=909): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="ae7a0dadf24984174336c19bd4f6eb98b0c50f5a9bd5286d2e7f0e4f054a25414aa32fdeef450696d15e128704af022de14173ebb760e32e889e14da2357898d351e050f1f225943a3c36490490da55de4e8c8ab43db748d9f9b003303df9de176b1b3daf0236cbae146c6350db7b278a26de50afdfce6537d0db2e2bf4981b5867c58dd2482d0aed80e28cdfc25086a2ee544803ddea6f5114b1f40a2e0ab2d3521b833cbea05551041bca8bf1f55c4e1f71c12512edcbfe00ab970afffd12d82e24cc27a826f541121bf02e1676ca028699487710fd312eb", @ANYRES16=0x0], 0x21, 0x9e84, &(0x7f000000a180)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 966.282756ms ago: executing program 0 (id=910): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x0, 0x0) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r1, 0x1, &(0x7f0000003d80)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000003bc0)="c6", 0x1, 0x800}]) 966.153876ms ago: executing program 3 (id=911): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x16, 0x7f, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 908.582347ms ago: executing program 2 (id=912): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r0) 832.322838ms ago: executing program 4 (id=913): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 758.37245ms ago: executing program 3 (id=914): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) 648.064561ms ago: executing program 0 (id=915): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW2(r0, 0x5435, 0x0) 478.550193ms ago: executing program 3 (id=916): membarrier(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) membarrier(0x8, 0x0) 406.816804ms ago: executing program 2 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 232.712197ms ago: executing program 2 (id=918): syz_usb_connect(0x6, 0x213, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xab, 0x31, 0xda, 0x0, 0x1189, 0x893, 0x418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x201, 0x2, 0x29, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x21, 0xa, 0x1, 0xcc, 0x48, 0x58, 0x2, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0xa, "ee06384900b23133"}]}, @generic={0x39, 0xe, "6cfc27a4eaac32fae0b47c6bdfcc19e722894da2d979df4a86b8c1ba5f928d0805f1aecbdbfa673e7b0e57ae3ed9e419e451ebd3821452"}], [{{0x9, 0x5, 0x80, 0x4, 0x20, 0xd4, 0x3, 0x5, [@generic={0x1b, 0x22, "16112ec09801dc57bdabbda4b40f7223f162bb514d0cd93df6"}, @generic={0xaf, 0x10, "5db5f7ea8eaa51e8414795d8a76c7c1c751caedcb3ed7cb91ebe50e218cc943f010f5d485139b550a81b0a9712465455d5c884dece44d6f8d42c3de09446f229a0d85bc2593a62358cf346e8afedc23e580085ca89157af6f26ddf31346036cb58b73c634864bb5d11c23e422a76dd420450adfcf502572a77232c63c45b0c28e24948de436be9238b3ac72e800c55a7fc1e4a59bdb95b7ec7a88329cef53eec6e007c77d1ddc250f4e1fd4fcf"}]}}]}}, {{0x9, 0x4, 0xa5, 0x2, 0x2, 0x1, 0xad, 0x1, 0x80, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x98, 0x5, '#', "93b9bb"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x3}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x6f, 0x40, 0xa, [@generic={0x9d, 0x23, "96e7c6411fc68e1480e6b259c82b6a5d84535b7251ef971dfe58be0a8f70a683e279f5d4f1f5a9c14eadd5acfd32d086f258c0631320f2c8c5439f7a1330eea619abb37da5696b7b5aed312a3cf66be7d384873efc1dba52417b8287acbc584d449cec5607a8600dff8c827796b34dfb3b1fb9ebdc1e7293fb71157476dfb11aaa67580bfc405f2420986f97daf32d7ccc8dd5833ce141be99d305"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x2}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xa, 0x7f, 0x7}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 223.849467ms ago: executing program 0 (id=919): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{}, {@nodecompose}, {@force}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='dyn']) 187.520637ms ago: executing program 3 (id=920): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) 0s ago: executing program 4 (id=921): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000000180)=[{}], &(0x7f00000000c0)) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.838812][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.850981][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.862025][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.872628][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.883678][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.886705][ T4358] loop2: detected capacity change from 0 to 4096 [ 84.894340][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.911438][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.944039][ T4358] ntfs: volume version 3.1. [ 84.956920][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.987045][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.998948][ T4358] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccroatian. You might want to try to use the mount option nls=utf8. [ 85.001060][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.027961][ T4358] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 85.035819][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.088558][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.139531][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.159726][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.169766][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.186266][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.196889][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.215098][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.270731][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.283070][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.312605][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.349668][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.390112][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.409430][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.418992][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.441877][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.470879][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.602262][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.620071][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.656381][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.711402][ T4368] can0: slcan on ptm0. [ 85.722275][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.776229][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.804605][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.856530][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.882771][ T4367] can0 (unregistered): slcan off ptm0. [ 85.921637][ T4376] loop3: detected capacity change from 0 to 512 [ 85.953555][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.996118][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.080626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.126044][ T4376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.141530][ T4376] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.229031][ T4376] ======================================================= [ 86.229031][ T4376] WARNING: The mand mount option has been deprecated and [ 86.229031][ T4376] and is ignored by this kernel. Remove the mand [ 86.229031][ T4376] option from the mount to silence this warning. [ 86.229031][ T4376] ======================================================= [ 86.424516][ T4376] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.443533][ T4394] loop0: detected capacity change from 0 to 16 [ 86.478707][ T4376] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 86.524582][ T4394] erofs: (device loop0): mounted with root inode @ nid 36. [ 86.692927][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 86.805211][ T1169] cfg80211: failed to load regulatory.db [ 86.851779][ T4400] loop2: detected capacity change from 0 to 512 [ 86.901920][ T4400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.061252][ T4400] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.162271][ T4400] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.249275][ T4400] EXT4-fs (loop2): 1 truncate cleaned up [ 87.261347][ T4400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.557987][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 87.756856][ T4420] loop2: detected capacity change from 0 to 512 [ 87.871159][ T4420] EXT4-fs (loop2): 1 orphan inode deleted [ 87.899346][ T9] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 87.901242][ T4420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.950456][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 1 [ 88.002696][ T4420] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.321995][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 88.703796][ T4432] loop3: detected capacity change from 0 to 4096 [ 88.796361][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.809539][ T4441] loop1: detected capacity change from 0 to 164 [ 88.837290][ T4432] fs-verity: sha256 using implementation "sha256-avx2" [ 88.854105][ T4441] Unable to read rock-ridge attributes [ 88.993294][ T4432] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.30: bg 0: block 66: padding at end of block bitmap is not set [ 89.058298][ T4432] fs-verity (loop3, inode 16): Error -117 writing Merkle tree block 0 [ 89.095703][ T4432] fs-verity (loop3, inode 16): Error -117 building Merkle tree [ 89.261406][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.282319][ T4451] loop2: detected capacity change from 0 to 512 [ 89.314756][ T4451] EXT4-fs: Ignoring removed orlov option [ 89.335785][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 89.373417][ T4451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.475896][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 89.484766][ T4451] EXT4-fs (loop2): orphan cleanup on readonly fs [ 89.536217][ T22] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.608264][ T4451] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.36: bg 0: block 248: padding at end of block bitmap is not set [ 89.651567][ T22] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.673257][ T4451] Quota error (device loop2): write_blk: dquota write failed [ 89.691937][ T4451] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 89.720510][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 89.741437][ T4451] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.36: Failed to acquire dquot type 1 [ 89.788270][ T22] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 89.809811][ T4451] EXT4-fs (loop2): 1 truncate cleaned up [ 89.836136][ T22] usb 2-1: Product: syz [ 89.840397][ T22] usb 2-1: Manufacturer: syz [ 89.942372][ T22] hub 2-1:4.0: USB hub found [ 89.987097][ T4451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.135895][ T22] hub 2-1:4.0: 2 ports detected [ 90.195938][ T4451] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 90.286567][ T4451] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 90.291442][ T4446] loop4: detected capacity change from 0 to 32768 [ 90.298865][ T4451] ext4 filesystem being remounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.361867][ T22] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 90.373456][ T4446] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 90.379160][ T22] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 90.422163][ T4446] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 90.489440][ T22] usb 2-1: USB disconnect, device number 2 [ 90.501560][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.529942][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 90.610692][ T4446] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 90.656138][ T4298] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 90.673180][ T4298] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 90.703941][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.726116][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.744213][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 90.794871][ T7] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 90.821998][ T7] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 90.837015][ T7] usb 1-1: Product: syz [ 90.857731][ T4475] tipc: Enabling of bearer rejected, failed to enable media [ 90.874853][ T7] usb 1-1: config 0 descriptor?? [ 90.887074][ T4298] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 213ms [ 90.908336][ T4298] gfs2: fsid=syz:syz.0: jid=0: Done [ 90.920205][ T4446] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 91.299180][ T7] waltop 0003:172F:0037.0001: unknown main item tag 0x0 [ 91.307497][ T7] waltop 0003:172F:0037.0001: unknown main item tag 0x0 [ 91.315508][ T7] waltop 0003:172F:0037.0001: unknown main item tag 0x0 [ 91.330071][ T7] waltop 0003:172F:0037.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 91.540105][ T7] usb 1-1: USB disconnect, device number 2 [ 91.635326][ T4484] fido_id[4484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.775325][ T4494] loop4: detected capacity change from 0 to 256 [ 91.807517][ T4494] exfat: Deprecated parameter 'namecase' [ 91.848417][ T4299] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 91.871766][ T4494] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 92.042681][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.064441][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.064515][ T4299] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 92.064540][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.077613][ T4299] usb 4-1: config 0 descriptor?? [ 92.170921][ T4319] tipc: Subscription rejected, illegal request [ 92.491608][ T4299] lenovo 0003:17EF:6047.0002: unknown main item tag 0x0 [ 92.515965][ T4299] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 92.726674][ T4299] usb 4-1: USB disconnect, device number 2 [ 92.934685][ T4528] capability: warning: `syz.2.65' uses deprecated v2 capabilities in a way that may be insecure [ 92.938352][ T4526] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 92.956880][ T4516] fido_id[4516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 93.416648][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.591603][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.621436][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 93.629438][ T14] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 93.658596][ T14] usb 3-1: config 0 has no interface number 0 [ 93.668726][ T14] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.689264][ T14] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.709915][ T14] usb 3-1: config 0 interface 41 has no altsetting 0 [ 93.733760][ T14] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 93.735197][ T4530] loop1: detected capacity change from 0 to 40427 [ 93.761555][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.788764][ T4530] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 93.797680][ T14] usb 3-1: Product: syz [ 93.797701][ T14] usb 3-1: Manufacturer: syz [ 93.797717][ T14] usb 3-1: SerialNumber: syz [ 93.817736][ T4538] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 93.837979][ T14] usb 3-1: config 0 descriptor?? [ 93.855455][ T4534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.870749][ T4530] F2FS-fs (loop1): invalid crc value [ 93.872319][ T4534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.890500][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.919107][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 93.937811][ T4530] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.945604][ T7] usb 5-1: can't read configurations, error -71 [ 94.040001][ T4536] loop0: detected capacity change from 0 to 32768 [ 94.110506][ T4530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.128818][ T4534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.150096][ T4534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.183490][ T4536] XFS (loop0): Mounting V5 Filesystem [ 94.250936][ T27] audit: type=1800 audit(1747962969.161:2): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 94.355193][ T4252] syz-executor: attempt to access beyond end of device [ 94.355193][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.483224][ T4536] XFS (loop0): Ending clean mount [ 94.553060][ T4536] XFS (loop0): Quotacheck needed: Please wait. [ 94.575204][ T14] CoreChips: probe of 3-1:0.41 failed with error -71 [ 94.601992][ T14] usb 3-1: USB disconnect, device number 2 [ 94.687501][ T4536] XFS (loop0): Quotacheck: Done. [ 95.023242][ T4257] XFS (loop0): Unmounting Filesystem [ 95.543116][ T4581] futex_wake_op: syz.3.84 tries to shift op by -1; fix this program [ 95.551504][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.733281][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.790124][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 95.810508][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.849916][ T22] usb 2-1: config 0 descriptor?? [ 96.041778][ T4591] loop2: detected capacity change from 0 to 512 [ 96.097367][ T4597] capability: warning: `syz.4.90' uses 32-bit capabilities (legacy support in use) [ 96.247444][ T4591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.279422][ T22] logitech 0003:046D:C50C.0003: unbalanced collection at end of report description [ 96.299770][ T22] logitech 0003:046D:C50C.0003: parse failed [ 96.309696][ T22] logitech: probe of 0003:046D:C50C.0003 failed with error -22 [ 96.321701][ T4591] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.380057][ T4605] loop0: detected capacity change from 0 to 1024 [ 96.425394][ T4609] loop4: detected capacity change from 0 to 164 [ 96.526409][ T7] usb 2-1: USB disconnect, device number 3 [ 96.538913][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 96.614893][ T4282] hfsplus: b-tree write err: -5, ino 4 [ 97.471904][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 97.482134][ T4629] loop2: detected capacity change from 0 to 32768 [ 97.489457][ T4629] XFS: ikeep mount option is deprecated. [ 97.539026][ T4635] netlink: 160 bytes leftover after parsing attributes in process `syz.3.107'. [ 97.580529][ T4629] XFS (loop2): Mounting V5 Filesystem [ 97.626243][ T4635] netlink: 56 bytes leftover after parsing attributes in process `syz.3.107'. [ 97.708936][ T4629] XFS (loop2): Ending clean mount [ 97.726849][ T4629] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x42b dinode [ 97.738128][ T4629] XFS (loop2): Unmount and run xfs_repair [ 97.745209][ T4629] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 97.752759][ T4629] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00 IN.............. [ 97.761905][ T4629] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.770865][ T4629] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.780527][ T4629] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.789547][ T4629] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.798502][ T4629] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 97.807451][ T4629] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00 ....e?.......... [ 97.816398][ T4629] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 ................ [ 97.826626][ T4629] XFS (loop2): Internal error xfs_trans_cancel at line 1096 of file fs/xfs/xfs_trans.c. Caller xfs_qm_qino_alloc+0x493/0x940 [ 97.842412][ T4629] CPU: 1 PID: 4629 Comm: syz.2.104 Not tainted 6.1.140-syzkaller #0 [ 97.851400][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.861696][ T4629] Call Trace: [ 97.865001][ T4629] [ 97.868109][ T4629] dump_stack_lvl+0x168/0x22e [ 97.873797][ T4629] ? show_regs_print_info+0x12/0x12 [ 97.879068][ T4629] ? xfs_error_report+0x8e/0xc0 [ 97.884051][ T4629] ? xfs_qm_qino_alloc+0x493/0x940 [ 97.889394][ T4629] ? xfs_qm_qino_alloc+0x493/0x940 [ 97.894566][ T4629] ? xfs_qm_qino_alloc+0x493/0x940 [ 97.899820][ T4629] xfs_trans_cancel+0x1d8/0x470 [ 97.904823][ T4629] xfs_qm_qino_alloc+0x493/0x940 [ 97.909864][ T4629] ? xfs_qm_shrink_scan+0x380/0x380 [ 97.915119][ T4629] ? lockdep_init_map_type+0x9d/0x880 [ 97.920547][ T4629] ? lockdep_softirqs_off+0x420/0x420 [ 97.925972][ T4629] ? free_zapped_rcu+0x1d0/0x1d0 [ 97.931028][ T4629] xfs_qm_init_quotainos+0x505/0x6c0 [ 97.936467][ T4629] ? xfs_qm_dqpurge+0x650/0x650 [ 97.941473][ T4629] ? __raw_spin_lock_init+0x41/0x100 [ 97.946919][ T4629] xfs_qm_init_quotainfo+0x121/0x1130 [ 97.952358][ T4629] ? __percpu_counter_compare+0xab/0x130 [ 97.958045][ T4629] ? xfs_qm_mount_quotas+0x600/0x600 [ 97.963476][ T4629] ? xfs_fs_unreserve_ag_blocks+0xce/0x190 [ 97.969333][ T4629] ? rcu_is_watching+0x11/0xa0 [ 97.974248][ T4629] ? xfs_fs_unreserve_ag_blocks+0xce/0x190 [ 97.980205][ T4629] xfs_qm_mount_quotas+0x9c/0x600 [ 97.985299][ T4629] xfs_mountfs+0x1637/0x1d10 [ 97.989959][ T4629] ? lockdep_softirqs_off+0x420/0x420 [ 97.995381][ T4629] ? xfs_default_resblks+0x70/0x70 [ 98.000536][ T4629] ? init_timer_key+0x178/0x320 [ 98.005456][ T4629] ? rcu_is_watching+0x11/0xa0 [ 98.010284][ T4629] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 98.016608][ T4629] xfs_fs_fill_super+0x10f0/0x1350 [ 98.022197][ T4629] get_tree_bdev+0x3f1/0x610 [ 98.026814][ T4629] ? xfs_fs_warn_deprecated+0x190/0x190 [ 98.032380][ T4629] vfs_get_tree+0x88/0x270 [ 98.036936][ T4629] do_new_mount+0x24a/0xa40 [ 98.041466][ T4629] __se_sys_mount+0x2d6/0x3c0 [ 98.046358][ T4629] ? __x64_sys_mount+0xc0/0xc0 [ 98.051178][ T4629] ? lockdep_hardirqs_on+0x94/0x140 [ 98.056428][ T4629] ? __x64_sys_mount+0x1c/0xc0 [ 98.061309][ T4629] do_syscall_64+0x4c/0xa0 [ 98.065768][ T4629] ? clear_bhb_loop+0x60/0xb0 [ 98.070516][ T4629] ? clear_bhb_loop+0x60/0xb0 [ 98.075442][ T4629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.081388][ T4629] RIP: 0033:0x7f270c79010a [ 98.085834][ T4629] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.105478][ T4629] RSP: 002b:00007f270d575e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.113918][ T4629] RAX: ffffffffffffffda RBX: 00007f270d575ef0 RCX: 00007f270c79010a [ 98.121903][ T4629] RDX: 0000200000000700 RSI: 00002000000002c0 RDI: 00007f270d575eb0 [ 98.129894][ T4629] RBP: 0000200000000700 R08: 00007f270d575ef0 R09: 0000000000808050 [ 98.137929][ T4629] R10: 0000000000808050 R11: 0000000000000246 R12: 00002000000002c0 [ 98.145927][ T4629] R13: 00007f270d575eb0 R14: 000000000000996e R15: 0000200000001640 [ 98.154036][ T4629] [ 98.172884][ T4629] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1f1/0x470 (fs/xfs/xfs_trans.c:1097). Shutting down filesystem. [ 98.188589][ T4629] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 98.199032][ T4629] XFS (loop2): xfs_qm_mount_quotas: Superblock update failed! [ 98.206635][ T4629] XFS (loop2): Failed to initialize disk quotas. [ 98.213235][ T4629] XFS (loop2): Error -5 reserving per-AG metadata reserve pool. [ 98.319027][ T4653] netlink: 256 bytes leftover after parsing attributes in process `syz.3.111'. [ 98.376500][ T4620] loop4: detected capacity change from 0 to 32768 [ 98.411443][ T4653] netlink: 72 bytes leftover after parsing attributes in process `syz.3.111'. [ 98.468183][ T4620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.99 (4620) [ 98.600526][ T4620] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.650768][ T4620] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 98.693681][ T4620] BTRFS info (device loop4): using free space tree [ 99.086486][ T4620] BTRFS info (device loop4): enabling ssd optimizations [ 99.354452][ T27] audit: type=1800 audit(1747962974.271:3): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.99" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 99.428935][ T4701] Zero length message leads to an empty skb [ 99.533813][ T4251] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.576432][ T4703] sp0: Synchronizing with TNC [ 99.889127][ T4345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4345) [ 100.286789][ T4724] loop3: detected capacity change from 0 to 1024 [ 100.378703][ T4724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.401646][ T4724] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.577782][ T4724] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.133: bg 0: block 393: padding at end of block bitmap is not set [ 100.626076][ T4724] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 100.653415][ T4724] EXT4-fs (loop3): This should not happen!! Data will be lost [ 100.653415][ T4724] [ 100.750633][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 101.200170][ T4722] loop2: detected capacity change from 0 to 32768 [ 101.327039][ T4722] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 101.382686][ T4722] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 101.439755][ T4753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 101.514153][ T4757] loop1: detected capacity change from 0 to 256 [ 101.533285][ T4262] ocfs2: Unmounting device (7,2) on (node local) [ 101.843213][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 101.878922][ T4763] loop3: detected capacity change from 0 to 1764 [ 102.476898][ T4750] loop4: detected capacity change from 0 to 32768 [ 102.540665][ T4750] (syz.4.143,4750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.616696][ T4750] (syz.4.143,4750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.734001][ T4750] (syz.4.143,4750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 102.867258][ T4793] loop3: detected capacity change from 0 to 512 [ 102.876274][ T4793] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.890664][ T4750] JBD2: Ignoring recovery information on journal [ 102.911431][ T4793] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 102.948140][ T4793] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.991480][ T4793] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 103.039966][ T4750] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.091413][ T4299] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.111671][ T4793] EXT4-fs warning (device loop3): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.160772][ T4799] loop2: detected capacity change from 0 to 1024 [ 103.167102][ T4793] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 103.210890][ T4793] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.162: bg 0: block 40: padding at end of block bitmap is not set [ 103.287963][ T4299] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.321169][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.340148][ T4793] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 103.361836][ T4299] usb 2-1: Product: syz [ 103.372906][ T4750] (syz.4.143,4750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 103.395641][ T4299] usb 2-1: Manufacturer: syz [ 103.403718][ T4793] EXT4-fs (loop3): 1 truncate cleaned up [ 103.420768][ T4299] usb 2-1: SerialNumber: syz [ 103.425558][ T4793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.443902][ T4299] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.466879][ T4750] (syz.4.143,4750,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 103.566627][ T4299] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.591573][ T4750] (syz.4.143,4750,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 103.610530][ T4750] (syz.4.143,4750,0):ocfs2_quota_read:201 ERROR: status = -5 [ 103.638787][ T4750] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 103.664535][ T4750] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 103.738962][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 103.742636][ T4802] (syz.4.143,4802,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 103.793815][ T4750] (syz.4.143,4750,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 103.843184][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.861667][ T4802] (syz.4.143,4802,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 103.863090][ T4750] (syz.4.143,4750,0):ocfs2_mknod:314 ERROR: status = -5 [ 103.916558][ T4802] (syz.4.143,4802,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 103.924513][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.942444][ T4812] loop3: detected capacity change from 0 to 128 [ 103.944808][ T4811] netlink: 'syz.2.169': attribute type 2 has an invalid length. [ 103.949087][ T4802] (syz.4.143,4802,1):ocfs2_quota_read:201 ERROR: status = -5 [ 103.967759][ T4750] (syz.4.143,4750,0):ocfs2_mknod:502 ERROR: status = -5 [ 103.993604][ T4802] Quota error (device loop4): find_next_id: Can't read quota tree block 5 [ 104.016614][ T4802] (syz.4.143,4802,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 104.025036][ T4750] (syz.4.143,4750,0):ocfs2_mkdir:659 ERROR: status = -5 [ 104.184781][ T4356] usb 2-1: USB disconnect, device number 4 [ 104.212238][ T4261] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.254112][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 104.447621][ T1169] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.673247][ T1169] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.713327][ T1169] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.750837][ T1169] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.795095][ T1169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.811715][ T4808] loop0: detected capacity change from 0 to 40427 [ 104.821668][ T1169] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 104.840965][ T4808] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 104.850203][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.866868][ T4808] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.869307][ T4827] tipc: Started in network mode [ 104.876939][ T4829] loop1: detected capacity change from 0 to 256 [ 104.889598][ T1169] usb 3-1: config 0 descriptor?? [ 104.917245][ T4808] F2FS-fs (loop0): invalid crc value [ 104.920505][ T4827] tipc: Node identity , cluster identity 4711 [ 104.970472][ T4808] F2FS-fs (loop0): Found nat_bits in checkpoint [ 105.031521][ T4299] usb 2-1: Service connection timeout for: 256 [ 105.037842][ T4299] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 105.049605][ T4829] FAT-fs (loop1): Directory bread(block 64) failed [ 105.088413][ T4299] ath9k_htc: Failed to initialize the device [ 105.107752][ T4829] FAT-fs (loop1): Directory bread(block 65) failed [ 105.143407][ T4356] usb 2-1: ath9k_htc: USB layer deinitialized [ 105.171183][ T4808] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.186512][ T4829] FAT-fs (loop1): Directory bread(block 66) failed [ 105.210143][ T4829] FAT-fs (loop1): Directory bread(block 67) failed [ 105.225064][ T4808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.256065][ T4829] FAT-fs (loop1): Directory bread(block 68) failed [ 105.276230][ T4829] FAT-fs (loop1): Directory bread(block 69) failed [ 105.311611][ T4829] FAT-fs (loop1): Directory bread(block 70) failed [ 105.357666][ T4829] FAT-fs (loop1): Directory bread(block 71) failed [ 105.386636][ T4829] FAT-fs (loop1): Directory bread(block 72) failed [ 105.404270][ T1169] kye 0003:0458:5015.0004: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 105.426496][ T4829] FAT-fs (loop1): Directory bread(block 73) failed [ 105.445583][ T1169] kye 0003:0458:5015.0004: tablet-enabling feature report not found [ 105.463221][ T4808] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 105.502093][ T1169] kye 0003:0458:5015.0004: tablet enabling failed [ 105.565261][ T4808] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 105.618218][ T4841] loop4: detected capacity change from 0 to 512 [ 105.648833][ T4298] usb 3-1: USB disconnect, device number 3 [ 105.693824][ T4841] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 105.787116][ T4841] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.844464][ T4843] fido_id[4843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 105.865963][ T4841] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 105.951039][ T4841] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.003602][ T4846] netlink: 116 bytes leftover after parsing attributes in process `syz.3.181'. [ 106.031345][ T4841] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 106.063131][ T4841] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.180: casefold flag without casefold feature [ 106.089400][ T4841] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.180: couldn't read orphan inode 16 (err -117) [ 106.117868][ T4841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.143266][ T4848] loop1: detected capacity change from 0 to 2048 [ 106.203380][ T4848] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.342813][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 106.347934][ T4345] udevd[4345]: incorrect nilfs2 checksum on /dev/loop1 [ 106.402690][ T4853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.872266][ T4299] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.990212][ T4866] loop0: detected capacity change from 0 to 4096 [ 107.036528][ T4870] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 107.050517][ T4866] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 107.073295][ T4299] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 107.092004][ T4299] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 107.133182][ T4299] usb 3-1: config 220 has no interface number 2 [ 107.139546][ T4299] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.151214][ T4866] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.201397][ T4299] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 107.223177][ T4866] ntfs3: loop0: Failed to load $Extend. [ 107.242728][ T4299] usb 3-1: config 220 interface 0 has no altsetting 0 [ 107.259953][ T4299] usb 3-1: config 220 interface 76 has no altsetting 0 [ 107.288003][ T4299] usb 3-1: config 220 interface 1 has no altsetting 0 [ 107.299210][ T4876] fuse: Bad value for 'fd' [ 107.306261][ T4299] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 107.337383][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.375294][ T4299] usb 3-1: Product: syz [ 107.395514][ T4299] usb 3-1: Manufacturer: syz [ 107.408427][ T4299] usb 3-1: SerialNumber: syz [ 107.440181][ T4866] syz.0.183 (4866) used greatest stack depth: 20624 bytes left [ 107.708966][ T4299] usb 3-1: selecting invalid altsetting 0 [ 107.732695][ T4299] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 107.758961][ T4299] usb 3-1: No valid video chain found. [ 107.813699][ T4299] usb 3-1: selecting invalid altsetting 0 [ 107.850045][ T4299] usbtest: probe of 3-1:220.1 failed with error -22 [ 107.886729][ T4299] usb 3-1: USB disconnect, device number 4 [ 108.428094][ T4911] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0005 with DS=0xf [ 108.478268][ T4913] loop2: detected capacity change from 0 to 256 [ 108.611802][ T4913] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x03493fd8, utbl_chksum : 0xe619d30d) [ 108.682025][ T4912] loop0: detected capacity change from 0 to 8192 [ 108.750607][ T4912] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.781408][ T4912] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 108.790738][ T4912] REISERFS (device loop0): using ordered data mode [ 108.876080][ T4912] reiserfs: using flush barriers [ 108.950745][ T4912] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.021011][ T4919] loop3: detected capacity change from 0 to 4096 [ 109.074237][ T4912] REISERFS (device loop0): checking transaction log (loop0) [ 109.219126][ T4927] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.486932][ T4912] REISERFS (device loop0): Using tea hash to sort names [ 109.525361][ T4912] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 109.576074][ T4932] loop2: detected capacity change from 0 to 2048 [ 109.608154][ T4912] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 109.661506][ T4932] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 109.731862][ T4932] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 109.777882][ T4932] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 109.837941][ T4932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.969583][ T4938] loop4: detected capacity change from 0 to 256 [ 110.094948][ T4938] FAT-fs (loop4): Directory bread(block 64) failed [ 110.105516][ T4940] loop1: detected capacity change from 0 to 512 [ 110.116895][ T4938] FAT-fs (loop4): Directory bread(block 65) failed [ 110.164207][ T4938] FAT-fs (loop4): Directory bread(block 66) failed [ 110.170812][ T4938] FAT-fs (loop4): Directory bread(block 67) failed [ 110.211023][ T4938] FAT-fs (loop4): Directory bread(block 68) failed [ 110.250885][ T4938] FAT-fs (loop4): Directory bread(block 69) failed [ 110.262289][ T4942] loop2: detected capacity change from 0 to 2048 [ 110.277587][ T4940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.291980][ T4942] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.309103][ T4936] loop3: detected capacity change from 0 to 4096 [ 110.316084][ T4938] FAT-fs (loop4): Directory bread(block 70) failed [ 110.334111][ T4940] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.393146][ T4938] FAT-fs (loop4): Directory bread(block 71) failed [ 110.399827][ T4938] FAT-fs (loop4): Directory bread(block 72) failed [ 110.451738][ T4938] FAT-fs (loop4): Directory bread(block 73) failed [ 110.466713][ T4946] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.737779][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 110.955924][ T4955] loop0: detected capacity change from 0 to 1024 [ 111.241993][ T4307] hfsplus: b-tree write err: -5, ino 4 [ 111.271666][ T4959] loop2: detected capacity change from 0 to 2048 [ 111.373517][ T4959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.696914][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 111.813401][ T4967] loop0: detected capacity change from 0 to 256 [ 111.873146][ T4967] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 111.901621][ T4967] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 111.936901][ T4967] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 111.980121][ T4967] UDF-fs: Scanning with blocksize 512 failed [ 111.989301][ T4967] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 112.043399][ T4967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.208925][ T4964] loop4: detected capacity change from 0 to 32768 [ 112.217362][ T4953] loop1: detected capacity change from 0 to 40427 [ 112.264754][ T4953] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 112.297275][ T4953] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.389006][ T4953] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.614182][ T4953] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.631461][ T4953] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.796886][ T4985] loop4: detected capacity change from 0 to 164 [ 112.946921][ T4977] loop3: detected capacity change from 0 to 8192 [ 113.136606][ T4977] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.228198][ T4995] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.245'. [ 113.241417][ T4977] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 113.261499][ T4993] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.245'. [ 113.321466][ T4977] REISERFS (device loop3): using ordered data mode [ 113.400692][ T4977] reiserfs: using flush barriers [ 113.531533][ T4977] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.631842][ T4977] REISERFS (device loop3): checking transaction log (loop3) [ 113.681070][ T4977] REISERFS (device loop3): Using r5 hash to sort names [ 113.808271][ T5001] tipc: Started in network mode [ 113.847926][ T5001] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 113.849531][ T4982] loop2: detected capacity change from 0 to 32768 [ 113.882505][ T5001] tipc: Enabling of bearer rejected, failed to enable media [ 113.892076][ T4977] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "noload" [ 113.946601][ T4982] [ 113.946601][ T4982] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.946601][ T4982] [ 114.019478][ T4982] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 114.019478][ T4982] [ 114.229228][ T5005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 114.241056][ T56] [ 114.241056][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.241056][ T56] [ 114.268545][ T56] [ 114.268545][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.268545][ T56] [ 114.332626][ T4262] [ 114.332626][ T4262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.332626][ T4262] [ 114.366694][ T107] [ 114.366694][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.366694][ T107] [ 114.411354][ T4262] [ 114.411354][ T4262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.411354][ T4262] [ 115.526288][ T4994] loop0: detected capacity change from 0 to 65536 [ 115.610449][ T4994] XFS (loop0): Mounting V5 Filesystem [ 115.712681][ T4994] XFS (loop0): Ending clean mount [ 115.805749][ T5050] loop3: detected capacity change from 0 to 64 [ 115.887848][ T4257] XFS (loop0): Unmounting Filesystem [ 115.908665][ T5052] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 115.938654][ T5052] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 115.981091][ T5053] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 116.483953][ T5061] loop1: detected capacity change from 0 to 256 [ 116.541471][ T5061] exfat: Deprecated parameter 'utf8' [ 116.571899][ T5040] loop2: detected capacity change from 0 to 32768 [ 116.588312][ T5061] exfat: Deprecated parameter 'utf8' [ 116.606889][ T5040] XFS: ikeep mount option is deprecated. [ 116.646662][ T5040] XFS (loop2): Mounting V5 Filesystem [ 116.674847][ T5061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 116.733756][ T5040] XFS (loop2): Ending clean mount [ 116.746517][ T5040] XFS (loop2): Quotacheck needed: Please wait. [ 116.826911][ T5040] XFS (loop2): Quotacheck: Done. [ 117.148968][ T4262] XFS (loop2): Unmounting Filesystem [ 117.439618][ T5077] loop4: detected capacity change from 0 to 512 [ 117.508736][ T5078] [U]  [ 117.540064][ T5077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.727499][ T5077] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.275: bg 0: block 67: padding at end of block bitmap is not set [ 117.796992][ T5077] EXT4-fs (loop4): Remounting filesystem read-only [ 117.808902][ T5073] loop0: detected capacity change from 0 to 32768 [ 117.917467][ T5073] XFS (loop0): Mounting V5 Filesystem [ 117.982409][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 118.027943][ T5073] XFS (loop0): Ending clean mount [ 118.246773][ T4257] XFS (loop0): Unmounting Filesystem [ 118.360803][ T5106] Bluetooth: MGMT ver 1.22 [ 118.375472][ T5101] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 118.382609][ T5101] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.480495][ T5101] vhci_hcd vhci_hcd.0: Device attached [ 118.555740][ T5107] vhci_hcd: connection closed [ 118.559579][ T56] vhci_hcd: stop threads [ 118.601910][ T56] vhci_hcd: release socket [ 118.618324][ T56] vhci_hcd: disconnect device [ 118.686656][ T4299] vhci_hcd: vhci_device speed not set [ 119.198546][ T5128] loop0: detected capacity change from 0 to 2048 [ 119.224671][ T5128] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.300321][ T5130] loop2: detected capacity change from 0 to 1024 [ 119.328539][ T5135] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.388708][ T5130] hfsplus: bad catalog entry type [ 119.429438][ T5137] loop1: detected capacity change from 0 to 1024 [ 119.438362][ T4307] hfsplus: b-tree write err: -5, ino 4 [ 119.668340][ T5141] loop4: detected capacity change from 0 to 512 [ 119.712356][ T5141] EXT4-fs: Ignoring removed oldalloc option [ 119.718642][ T5141] EXT4-fs: Ignoring removed bh option [ 119.802361][ T56] hfsplus: b-tree write err: -5, ino 8 [ 119.806711][ T5146] loop2: detected capacity change from 0 to 256 [ 119.820098][ T5141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b80ee02c, mo2=0002] [ 119.829927][ T5141] System zones: 1-12 [ 119.896970][ T5141] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.296: invalid indirect mapped block 1 (level 1) [ 119.941856][ T5141] EXT4-fs (loop4): Remounting filesystem read-only [ 119.965717][ T5146] FAT-fs (loop2): Directory bread(block 64) failed [ 120.001474][ T5141] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.296: invalid indirect mapped block 7 (level 2) [ 120.038644][ T5146] FAT-fs (loop2): Directory bread(block 65) failed [ 120.049633][ T5146] FAT-fs (loop2): Directory bread(block 66) failed [ 120.078871][ T5141] EXT4-fs (loop4): Remounting filesystem read-only [ 120.113402][ T5141] EXT4-fs (loop4): 1 truncate cleaned up [ 120.119132][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.128210][ T5146] FAT-fs (loop2): Directory bread(block 67) failed [ 120.128575][ T5146] FAT-fs (loop2): Directory bread(block 68) failed [ 120.188126][ T5146] FAT-fs (loop2): Directory bread(block 69) failed [ 120.195073][ T5146] FAT-fs (loop2): Directory bread(block 70) failed [ 120.223894][ T5146] FAT-fs (loop2): Directory bread(block 71) failed [ 120.292139][ T5146] FAT-fs (loop2): Directory bread(block 72) failed [ 120.298839][ T5146] FAT-fs (loop2): Directory bread(block 73) failed [ 120.437307][ T5161] loop3: detected capacity change from 0 to 512 [ 120.512906][ T5161] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.559728][ T5161] EXT4-fs (loop3): 1 truncate cleaned up [ 120.581750][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 120.616916][ T5161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.756364][ T27] audit: type=1800 audit(1747962995.671:4): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 120.922974][ T5175] loop1: detected capacity change from 0 to 1024 [ 120.972192][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 121.000531][ T5175] hfsplus: bad catalog entry type [ 121.168945][ T9] hfsplus: b-tree write err: -5, ino 4 [ 121.251413][ T1169] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.453174][ T1169] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.478422][ T1169] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 121.508787][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.538892][ T1169] usb 1-1: config 0 descriptor?? [ 121.711364][ T4299] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 121.858657][ T5180] loop2: detected capacity change from 0 to 40427 [ 121.903836][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.925348][ T5180] F2FS-fs (loop2): invalid crc value [ 121.941567][ T4299] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 121.963007][ T5189] loop3: detected capacity change from 0 to 32768 [ 121.969485][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.980292][ T4299] usb 5-1: config 0 descriptor?? [ 121.980802][ T1169] elecom 0003:056E:00FC.0005: unknown main item tag 0x0 [ 121.993036][ T1169] elecom 0003:056E:00FC.0005: unknown main item tag 0x0 [ 122.000203][ T1169] elecom 0003:056E:00FC.0005: unknown main item tag 0x0 [ 122.018556][ T5189] XFS: attr2 mount option is deprecated. [ 122.026483][ T1169] elecom 0003:056E:00FC.0005: unknown main item tag 0x0 [ 122.040377][ T5180] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.048187][ T1169] elecom 0003:056E:00FC.0005: unknown main item tag 0x0 [ 122.077758][ T1169] elecom 0003:056E:00FC.0005: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 122.117807][ T5189] XFS (loop3): Mounting V5 Filesystem [ 122.212492][ T1169] usb 1-1: USB disconnect, device number 3 [ 122.269651][ T5180] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.345078][ T5189] XFS (loop3): Ending clean mount [ 122.378007][ T5189] XFS (loop3): Quotacheck needed: Please wait. [ 122.405206][ T4299] wacom 0003:056A:032F.0006: hidraw0: USB HID v0.02 Device [HID 056a:032f] on usb-dummy_hcd.4-1/input0 [ 122.512016][ T5189] XFS (loop3): Quotacheck: Done. [ 122.618435][ T1169] usb 5-1: USB disconnect, device number 4 [ 122.628759][ T4262] syz-executor: attempt to access beyond end of device [ 122.628759][ T4262] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.632053][ T5212] fido_id[5212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 122.720483][ T4261] XFS (loop3): Unmounting Filesystem [ 123.031739][ T5210] loop1: detected capacity change from 0 to 32768 [ 123.102853][ T5213] fido_id[5213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 123.111224][ T5210] JBD2: Ignoring recovery information on journal [ 123.212729][ T5218] loop0: detected capacity change from 0 to 8192 [ 123.307746][ T5210] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.339167][ T27] audit: type=1800 audit(1747962998.251:5): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.325" name="bus" dev="loop0" ino=1048628 res=0 errno=0 [ 123.507618][ T5210] (syz.1.321,5210,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 123.741782][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 124.185674][ T5237] loop0: detected capacity change from 0 to 256 [ 124.263002][ T5237] exfat: Deprecated parameter 'utf8' [ 124.329187][ T5237] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 124.564638][ T4298] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.696112][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 124.775044][ T4298] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.787111][ T4298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.820798][ T4298] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.849761][ T4298] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.855646][ T5226] loop3: detected capacity change from 0 to 32768 [ 124.880235][ T4298] usb 3-1: Manufacturer: syz [ 124.906795][ T4298] usb 3-1: config 0 descriptor?? [ 125.041179][ T5226] XFS (loop3): Mounting V5 Filesystem [ 125.074804][ T27] audit: type=1326 audit(1747962999.991:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.153516][ T5226] XFS (loop3): Ending clean mount [ 125.174750][ T5226] XFS (loop3): Quotacheck needed: Please wait. [ 125.186950][ T27] audit: type=1326 audit(1747962999.991:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.218908][ T27] audit: type=1326 audit(1747963000.011:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.242415][ T4298] rc_core: IR keymap rc-hauppauge not found [ 125.247906][ T27] audit: type=1326 audit(1747963000.011:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.271483][ T4298] Registered IR keymap rc-empty [ 125.298599][ T4298] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 125.317692][ T27] audit: type=1326 audit(1747963000.011:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.339009][ T4298] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 125.361173][ T27] audit: type=1326 audit(1747963000.011:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.385806][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'. [ 125.421734][ T5226] XFS (loop3): Quotacheck: Done. [ 125.447105][ T27] audit: type=1326 audit(1747963000.011:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.506640][ T5271] rc rc0: two consecutive events of type space [ 125.547915][ T27] audit: type=1326 audit(1747963000.011:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.1.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61298e969 code=0x7ffc0000 [ 125.621943][ T5274] loop4: detected capacity change from 0 to 64 [ 125.749677][ T4298] usb 3-1: USB disconnect, device number 5 [ 125.783567][ T4261] XFS (loop3): Unmounting Filesystem [ 125.995834][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 125.995850][ T27] audit: type=1326 audit(1747963000.911:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b238e969 code=0x7ffc0000 [ 126.095971][ T27] audit: type=1326 audit(1747963000.951:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe1b238e969 code=0x7ffc0000 [ 126.128826][ T27] audit: type=1326 audit(1747963000.951:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b238e969 code=0x7ffc0000 [ 126.152121][ T27] audit: type=1326 audit(1747963000.951:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b238e969 code=0x7ffc0000 [ 126.176713][ T27] audit: type=1326 audit(1747963000.951:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe1b238e969 code=0x7ffc0000 [ 126.207021][ T27] audit: type=1326 audit(1747963000.951:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz.0.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b238e969 code=0x7ffc0000 [ 126.473858][ T27] audit: type=1326 audit(1747963001.391:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09378e969 code=0x7ffc0000 [ 126.553284][ T27] audit: type=1326 audit(1747963001.431:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09378e969 code=0x7ffc0000 [ 126.641534][ T27] audit: type=1326 audit(1747963001.431:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa09378d2d0 code=0x7ffc0000 [ 126.728164][ T27] audit: type=1326 audit(1747963001.431:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5285 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa09378d2d0 code=0x7ffc0000 [ 127.218458][ T5308] loop4: detected capacity change from 0 to 4096 [ 127.341714][ T5308] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 127.661074][ T4251] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 127.961668][ T5338] loop4: detected capacity change from 0 to 164 [ 127.988358][ T5338] rock: directory entry would overflow storage [ 128.018617][ T5338] rock: sig=0x66, size=4, remaining=3 [ 128.294480][ T5344] loop2: detected capacity change from 0 to 4096 [ 128.541469][ T1169] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.561426][ T4298] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.599944][ T5353] autofs4:pid:5353:autofs_fill_super: called with bogus options [ 128.763337][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.765747][ T4298] usb 2-1: Using ep0 maxpacket: 16 [ 128.781408][ T1169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.806864][ T1169] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 128.808677][ T4298] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.825275][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.854701][ T1169] usb 5-1: config 0 descriptor?? [ 128.856737][ T4298] usb 2-1: config 0 has no interface number 0 [ 128.880246][ T4298] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 128.911353][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.919563][ T4298] usb 2-1: Product: syz [ 128.931386][ T4298] usb 2-1: Manufacturer: syz [ 128.936044][ T4298] usb 2-1: SerialNumber: syz [ 128.972363][ T4298] usb 2-1: config 0 descriptor?? [ 128.991409][ T4298] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 129.227920][ T5357] loop3: detected capacity change from 0 to 32768 [ 129.261405][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.278899][ T1169] megaworld 0003:07B5:0312.0007: item fetching failed at offset 2/5 [ 129.298526][ T1169] megaworld 0003:07B5:0312.0007: parse failed [ 129.306825][ T1169] megaworld: probe of 0003:07B5:0312.0007 failed with error -22 [ 129.446913][ T5359] loop2: detected capacity change from 0 to 40427 [ 129.475710][ T14] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 129.501097][ T5359] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 129.512614][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.530718][ T14] usb 1-1: Product: syz [ 129.535669][ T14] usb 1-1: Manufacturer: syz [ 129.540673][ T14] usb 1-1: SerialNumber: syz [ 129.545630][ T5359] F2FS-fs (loop2): invalid crc value [ 129.564215][ T14] usb 1-1: config 0 descriptor?? [ 129.570464][ T4356] usb 5-1: USB disconnect, device number 5 [ 129.591050][ T5359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.599968][ T4298] gspca_spca1528: reg_w err -71 [ 129.651447][ T4298] spca1528: probe of 2-1:0.1 failed with error -71 [ 129.693411][ T4298] usb 2-1: USB disconnect, device number 5 [ 129.697489][ T5359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.775681][ T14] usb 1-1: ignoring: probably an ADSL modem [ 130.039756][ T5368] loop3: detected capacity change from 0 to 2048 [ 130.092414][ T5368] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.154565][ T5371] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.154932][ T5368] syz.3.389: attempt to access beyond end of device [ 130.154932][ T5368] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 130.191212][ T14] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 130.231583][ T14] usb 1-1: USB disconnect, device number 4 [ 130.443504][ T5368] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 16777227 [ 130.458967][ T5368] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 130.520962][ T5368] Remounting filesystem read-only [ 130.567722][ T5368] NILFS (loop3): error -5 truncating bmap (ino=16) [ 130.610083][ T5380] loop4: detected capacity change from 0 to 64 [ 130.663792][ T5382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 130.683776][ T5380] syz.4.394: attempt to access beyond end of device [ 130.683776][ T5380] loop4: rw=0, sector=130062, nr_sectors = 2 limit=64 [ 130.728484][ T5380] Buffer I/O error on dev loop4, logical block 65031, async page read [ 130.824576][ T4261] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 130.910376][ T5389] loop2: detected capacity change from 0 to 764 [ 130.977547][ T5389] Symlink component flag not implemented [ 130.994890][ T5391] loop1: detected capacity change from 0 to 64 [ 131.002073][ T5389] Symlink component flag not implemented (116) [ 131.576606][ T4298] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.775381][ T4298] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 131.794721][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.814965][ T4298] usb 4-1: Product: syz [ 131.819194][ T4298] usb 4-1: Manufacturer: syz [ 131.849474][ T4298] usb 4-1: SerialNumber: syz [ 131.872750][ T4298] usb 4-1: config 0 descriptor?? [ 131.894601][ T4298] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 131.949346][ T5415] loop1: detected capacity change from 0 to 1024 [ 131.985232][ T5415] EXT4-fs: Ignoring removed i_version option [ 132.008603][ T5400] loop2: detected capacity change from 0 to 32768 [ 132.010760][ T5415] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.068715][ T5415] EXT4-fs: Ignoring removed nobh option [ 132.088383][ T5415] EXT4-fs: Ignoring removed bh option [ 132.113288][ T5415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.241580][ T5415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.263997][ T5409] loop4: detected capacity change from 0 to 32768 [ 132.327361][ T4298] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 132.343721][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 132.348923][ T5409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.407 (5409) [ 132.453598][ T5409] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.493238][ T5409] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 132.561432][ T5409] BTRFS info (device loop4): force clearing of disk cache [ 132.582134][ T4242] usb 4-1: USB disconnect, device number 3 [ 132.590860][ T5409] BTRFS info (device loop4): enabling auto defrag [ 132.635850][ T5409] BTRFS info (device loop4): max_inline at 0 [ 132.684736][ T5409] BTRFS info (device loop4): enabling disk space caching [ 132.723165][ T5409] BTRFS info (device loop4): disk space caching is enabled [ 132.875442][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882398][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.995911][ T5409] BTRFS info (device loop4): enabling ssd optimizations [ 133.014430][ T5409] BTRFS info (device loop4): rebuilding free space tree [ 133.152993][ T5409] BTRFS info (device loop4): disabling free space tree [ 133.200009][ T5409] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.222505][ T5409] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.489021][ T5424] loop1: detected capacity change from 0 to 32768 [ 133.496899][ T5428] loop0: detected capacity change from 0 to 32768 [ 133.650142][ T5428] XFS (loop0): Mounting V5 Filesystem [ 133.799834][ T5428] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 133.813172][ T4251] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.881825][ T5428] XFS (loop0): Starting recovery (logdev: internal) [ 133.985723][ T5428] XFS (loop0): Ending recovery (logdev: internal) [ 134.298218][ T4257] XFS (loop0): Unmounting Filesystem [ 134.769733][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 135.069711][ T5497] loop4: detected capacity change from 0 to 1024 [ 135.121657][ T5477] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.314799][ T5477] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 135.334958][ T5477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.349156][ T5505] loop1: detected capacity change from 0 to 64 [ 135.373637][ T5477] usb 4-1: config 0 descriptor?? [ 135.404318][ T5477] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 135.438887][ T5506] loop0: detected capacity change from 0 to 2048 [ 135.456261][ T4356] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.491960][ T5506] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 135.511797][ T5506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.678119][ T4356] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 135.694692][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.711380][ T4356] usb 3-1: Product: syz [ 135.715831][ T4356] usb 3-1: Manufacturer: syz [ 135.720456][ T4356] usb 3-1: SerialNumber: syz [ 135.734207][ T4356] usb 3-1: config 0 descriptor?? [ 135.858700][ T5512] loop1: detected capacity change from 0 to 4096 [ 135.860677][ T5511] loop4: detected capacity change from 0 to 4096 [ 135.956664][ T5511] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 136.014511][ T5477] gspca_cpia1: usb_control_msg 01, error -71 [ 136.032562][ T5477] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 136.080470][ T5478] usb 3-1: USB disconnect, device number 6 [ 136.120489][ T5477] usb 4-1: USB disconnect, device number 4 [ 136.154986][ T5511] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 136.206250][ T5511] ntfs3: loop4: Failed to load $Extend. [ 136.280073][ T5511] ntfs3: loop4: ino=1e, "file1" fallocate(0x11) is not supported [ 136.846006][ T5532] loop2: detected capacity change from 0 to 2048 [ 136.895308][ T5532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.236151][ T5543] loop2: detected capacity change from 0 to 256 [ 137.325611][ T5543] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x59eca5ea, utbl_chksum : 0xe619d30d) [ 137.887965][ T5563] loop1: detected capacity change from 0 to 1024 [ 137.903139][ T5566] loop3: detected capacity change from 0 to 64 [ 138.071675][ T5563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.340916][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 138.466029][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 138.635677][ T5568] loop2: detected capacity change from 0 to 40427 [ 138.686316][ T5568] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.721330][ T5568] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.758834][ T5568] F2FS-fs (loop2): invalid crc value [ 138.811882][ T5568] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.031901][ T5568] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.039068][ T5568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.043292][ T5590] loop3: detected capacity change from 0 to 164 [ 139.149977][ T5590] Unable to read rock-ridge attributes [ 139.392374][ T4307] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 139.437313][ T4307] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 139.445090][ T14] kernel write not supported for file /uinput (pid: 14 comm: kworker/0:1) [ 139.461555][ T4356] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.661628][ T4356] usb 4-1: Using ep0 maxpacket: 32 [ 139.672843][ T4356] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.679995][ T5602] loop1: detected capacity change from 0 to 512 [ 139.700738][ T4356] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.759694][ T4356] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 139.789814][ T5602] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 139.792518][ T4356] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 139.822293][ T4356] usb 4-1: Product: syz [ 139.826523][ T4356] usb 4-1: Manufacturer: syz [ 139.844735][ T5602] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.854148][ T4356] hub 4-1:4.0: USB hub found [ 139.882563][ T5602] __quota_error: 6 callbacks suppressed [ 139.882580][ T5602] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 139.940487][ T5602] EXT4-fs warning (device loop1): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 139.955413][ T5602] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 139.964685][ T5602] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #16: comm syz.1.476: casefold flag without casefold feature [ 139.987756][ T5602] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.476: couldn't read orphan inode 16 (err -117) [ 140.040982][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 140.053767][ T4356] hub 4-1:4.0: 2 ports detected [ 140.108813][ T5573] loop0: detected capacity change from 0 to 32768 [ 140.147688][ T5573] XFS: ikeep mount option is deprecated. [ 140.217132][ T5607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.478'. [ 140.266984][ T4356] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 140.276463][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 140.293708][ T4356] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 140.301204][ T5611] loop2: detected capacity change from 0 to 4096 [ 140.345244][ T5611] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 140.356259][ T5611] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 140.370188][ T4356] usb 4-1: USB disconnect, device number 5 [ 140.371517][ T5611] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 140.422783][ T5611] ntfs: volume version 3.1. [ 140.431616][ T5573] XFS (loop0): Mounting V5 Filesystem [ 140.631078][ T4262] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 140.834686][ T5573] XFS (loop0): Ending clean mount [ 140.922082][ T5573] XFS (loop0): Quotacheck needed: Please wait. [ 141.101520][ T5573] XFS (loop0): Quotacheck: Done. [ 141.231102][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 141.397578][ T4257] XFS (loop0): Unmounting Filesystem [ 141.403927][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 141.664306][ T5648] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 141.942178][ T27] audit: type=1326 audit(1747963016.861:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 142.018781][ T27] audit: type=1326 audit(1747963016.891:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 142.094118][ T5661] loop1: detected capacity change from 0 to 64 [ 142.112996][ T27] audit: type=1326 audit(1747963016.891:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 142.223072][ T27] audit: type=1326 audit(1747963016.891:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 142.337772][ T27] audit: type=1326 audit(1747963016.891:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.3.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 142.418135][ T5668] loop2: detected capacity change from 0 to 256 [ 142.939816][ T5677] loop1: detected capacity change from 0 to 4096 [ 142.997831][ T5677] ntfs: volume version 3.1. [ 144.305731][ T1169] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.501405][ T1169] usb 3-1: Using ep0 maxpacket: 32 [ 144.509244][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.550738][ T1169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.580635][ T1169] usb 3-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 144.610225][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.633470][ T1169] usb 3-1: config 0 descriptor?? [ 145.059147][ T1169] hid_mf 0003:0079:1843.0008: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.2-1/input0 [ 145.084181][ T1169] hid_mf 0003:0079:1843.0008: Invalid report, this should never happen! [ 145.101387][ T1169] hid_mf 0003:0079:1843.0008: Force feedback init failed. [ 145.108704][ T5710] loop0: detected capacity change from 0 to 32768 [ 145.193766][ T5704] loop3: detected capacity change from 0 to 65536 [ 145.264966][ T5710] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 145.286874][ T5478] usb 3-1: USB disconnect, device number 7 [ 145.337042][ T5704] XFS (loop3): Mounting V5 Filesystem [ 145.437466][ T5710] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.474754][ T5704] XFS (loop3): Ending clean mount [ 145.587770][ T5725] fido_id[5725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 145.649213][ T4261] XFS (loop3): Unmounting Filesystem [ 145.748601][ T5737] device veth1_macvtap left promiscuous mode [ 145.872029][ T4257] ocfs2: Unmounting device (7,0) on (node local) [ 145.921479][ T5738] device veth1_macvtap entered promiscuous mode [ 146.418156][ T5744] loop2: detected capacity change from 0 to 1024 [ 147.007000][ T5760] loop3: detected capacity change from 0 to 128 [ 147.037861][ T5760] EXT4-fs: Invalid gid value -1 [ 147.181581][ T5759] loop2: detected capacity change from 0 to 4096 [ 147.231206][ T5759] __ntfs_error: 6 callbacks suppressed [ 147.231225][ T5759] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.327230][ T5759] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 147.392086][ T5759] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 147.407201][ T5766] loop4: detected capacity change from 0 to 2048 [ 147.440420][ T5759] ntfs: volume version 3.1. [ 147.455625][ T5766] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 147.563704][ T5773] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.821877][ T4262] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 148.561268][ C0] sched: RT throttling activated [ 148.647599][ T5774] loop3: detected capacity change from 0 to 131072 [ 148.760009][ T5774] XFS (loop3): Mounting V5 Filesystem [ 148.872034][ T5477] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.907687][ T5774] XFS (loop3): Starting recovery (logdev: internal) [ 149.073345][ T5477] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 149.086714][ T5477] usb 1-1: config 0 has no interface number 0 [ 149.111502][ T5477] usb 1-1: config 0 interface 2 altsetting 27 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.123138][ T5802] loop2: detected capacity change from 0 to 1024 [ 149.167278][ T5477] usb 1-1: config 0 interface 2 altsetting 27 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.217569][ T5477] usb 1-1: config 0 interface 2 has no altsetting 0 [ 149.251377][ T5477] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 149.291043][ T5477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.317036][ T4307] hfsplus: b-tree write err: -5, ino 4 [ 149.358726][ T5477] usb 1-1: config 0 descriptor?? [ 149.471107][ T5774] XFS (loop3): Ending recovery (logdev: internal) [ 149.814667][ T5477] corsair 0003:1B1C:1B09.0009: hidraw0: USB HID v0.80 Device [HID 1b1c:1b09] on usb-dummy_hcd.0-1/input2 [ 149.871062][ T4261] XFS (loop3): Unmounting Filesystem [ 150.024981][ T5474] usb 1-1: USB disconnect, device number 5 [ 150.190970][ T5808] fido_id[5808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 150.261424][ T5478] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.481591][ T5478] usb 5-1: Using ep0 maxpacket: 8 [ 150.491870][ T5478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.513972][ T5478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.566744][ T5478] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 150.600923][ T5478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.626279][ T5478] usb 5-1: config 0 descriptor?? [ 150.705788][ T5818] loop0: detected capacity change from 0 to 512 [ 150.732347][ T5818] EXT4-fs: Ignoring removed i_version option [ 150.762398][ T5818] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.965544][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 151.030485][ T5822] loop1: detected capacity change from 0 to 2048 [ 151.064901][ T5478] koneplus 0003:1E7D:2E22.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 151.127570][ T5822] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.187329][ T5827] loop3: detected capacity change from 0 to 2048 [ 151.202975][ T5827] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 151.219672][ T5822] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #12: block 9: comm syz.1.566: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 151.250312][ T5829] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.294560][ T5478] usb 5-1: USB disconnect, device number 6 [ 151.427345][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 151.616425][ T5828] fido_id[5828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 151.931073][ T5842] loop2: detected capacity change from 0 to 64 [ 152.007779][ T5845] loop4: detected capacity change from 0 to 512 [ 152.124020][ T5845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.194907][ T5845] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.450806][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 152.647629][ T5833] loop3: detected capacity change from 0 to 40427 [ 152.705695][ T5833] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 152.745780][ T5833] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 152.837075][ T5833] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.028277][ T5833] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 153.041518][ T5833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.064965][ T5850] loop1: detected capacity change from 0 to 32768 [ 153.135241][ T5850] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 153.165131][ T5869] loop4: detected capacity change from 0 to 1024 [ 153.177273][ T5850] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 153.220629][ T5850] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 153.528596][ T5850] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 153.737481][ T5870] loop2: detected capacity change from 0 to 8192 [ 153.989911][ T5877] loop0: detected capacity change from 0 to 256 [ 154.026951][ T27] audit: type=1800 audit(1747963028.941:38): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.580" name="bus" dev="loop2" ino=1048636 res=0 errno=0 [ 154.053878][ T5877] exfat: Deprecated parameter 'namecase' [ 154.101859][ T5877] exfat: Deprecated parameter 'utf8' [ 154.107266][ T5877] exfat: Deprecated parameter 'namecase' [ 154.193393][ T5877] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 154.573005][ T5883] lo speed is unknown, defaulting to 1000 [ 154.579807][ T5883] lo speed is unknown, defaulting to 1000 [ 154.618358][ T5883] lo speed is unknown, defaulting to 1000 [ 154.634007][ T5883] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.649460][ T5883] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 154.800518][ T5883] lo speed is unknown, defaulting to 1000 [ 154.822921][ T5883] lo speed is unknown, defaulting to 1000 [ 154.843246][ T5883] lo speed is unknown, defaulting to 1000 [ 154.859291][ T5883] lo speed is unknown, defaulting to 1000 [ 154.914116][ T5883] lo speed is unknown, defaulting to 1000 [ 154.927230][ T5875] loop4: detected capacity change from 0 to 32768 [ 154.996336][ T5875] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 155.030618][ T5875] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 155.187177][ T5875] (syz.4.585,5875,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 155.230330][ T5875] (syz.4.585,5875,1):ocfs2_trim_mainbm:7611 ERROR: status = -12 [ 155.476126][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 155.546344][ T5908] loop0: detected capacity change from 0 to 4096 [ 155.771610][ T5908] ntfs3: loop0: failed to convert "0080" to cp869 [ 155.817336][ T5908] ntfs3: loop0: failed to convert name for inode 1e. [ 156.016427][ T5920] loop3: detected capacity change from 0 to 512 [ 156.082103][ T5920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.120637][ T5920] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.131981][ T27] audit: type=1326 audit(1747963031.051:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c78e969 code=0x7ffc0000 [ 156.157917][ T5920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 156.202789][ T5920] System zones: 1-12 [ 156.258071][ T5920] EXT4-fs (loop3): 1 truncate cleaned up [ 156.291499][ T27] audit: type=1326 audit(1747963031.101:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f270c78d2d0 code=0x7ffc0000 [ 156.320061][ T5920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.421361][ T27] audit: type=1326 audit(1747963031.101:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f270c78d2d0 code=0x7ffc0000 [ 156.523736][ T27] audit: type=1326 audit(1747963031.101:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c78e969 code=0x7ffc0000 [ 156.548539][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 156.611368][ T27] audit: type=1326 audit(1747963031.101:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c78e969 code=0x7ffc0000 [ 156.711912][ T27] audit: type=1326 audit(1747963031.121:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f270c78e969 code=0x7ffc0000 [ 156.782211][ T27] audit: type=1326 audit(1747963031.121:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c78e969 code=0x7ffc0000 [ 156.877966][ T27] audit: type=1326 audit(1747963031.121:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.2.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270c78e969 code=0x7ffc0000 [ 157.059330][ T5918] loop1: detected capacity change from 0 to 32768 [ 157.080469][ T5914] loop4: detected capacity change from 0 to 40427 [ 157.116232][ T5918] XFS: attr2 mount option is deprecated. [ 157.140450][ T5914] F2FS-fs (loop4): invalid crc value [ 157.269044][ T5914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.302684][ T5918] XFS (loop1): Mounting V5 Filesystem [ 157.440881][ T5914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.491900][ T5918] XFS (loop1): Ending clean mount [ 157.512451][ T5918] XFS (loop1): Quotacheck needed: Please wait. [ 157.571651][ T5918] XFS (loop1): Quotacheck: Done. [ 157.713356][ T5936] loop2: detected capacity change from 0 to 32768 [ 157.846989][ T4251] syz-executor: attempt to access beyond end of device [ 157.846989][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.871713][ T4252] XFS (loop1): Unmounting Filesystem [ 158.125678][ T5936] JBD2: Ignoring recovery information on journal [ 158.237634][ T5962] loop3: detected capacity change from 0 to 1024 [ 158.302392][ T5962] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 158.353031][ T5962] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 158.415152][ T5962] EXT4-fs (loop3): invalid journal inode [ 158.435066][ T5936] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 158.439611][ T5962] EXT4-fs (loop3): can't get journal size [ 158.493071][ T5962] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.620: blocks 2-2 from inode overlap system zone [ 158.521979][ T5962] EXT4-fs (loop3): failed to initialize system zone (-117) [ 158.536217][ T5962] EXT4-fs (loop3): mount failed [ 158.695740][ T5936] (syz.2.612,5936,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 158.999504][ T4262] ocfs2: Unmounting device (7,2) on (node local) [ 159.529984][ T5983] loop3: detected capacity change from 0 to 512 [ 159.582660][ T5983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.661417][ T5474] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 159.699309][ T5983] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.628: bg 0: block 67: padding at end of block bitmap is not set [ 159.770756][ T5983] EXT4-fs (loop3): Remounting filesystem read-only [ 159.854896][ T5474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.874806][ T5474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.907728][ T5474] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 159.931405][ T5474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.944559][ T5474] usb 1-1: config 0 descriptor?? [ 159.962385][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 160.135023][ T5970] loop4: detected capacity change from 0 to 40427 [ 160.193549][ T5970] F2FS-fs (loop4): invalid crc value [ 160.269655][ T5970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.361567][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.368611][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.401334][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.434041][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.439370][ T5970] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 160.451422][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.478409][ T5970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.491414][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.491447][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.491472][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.491496][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.491520][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.491543][ T5474] hid_mf 0003:0079:1846.000B: unknown main item tag 0x0 [ 160.500156][ T5474] hid_mf 0003:0079:1846.000B: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 160.500192][ T5474] hid_mf 0003:0079:1846.000B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 160.602481][ T5474] usb 1-1: USB disconnect, device number 6 [ 160.662439][ T4251] syz-executor: attempt to access beyond end of device [ 160.662439][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.747289][ T6002] loop3: detected capacity change from 0 to 65 [ 160.858056][ T5998] fido_id[5998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 160.959099][ T6002] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 161.827044][ T6023] tipc: Enabling of bearer rejected, failed to enable media [ 161.837202][ T6021] Bluetooth: MGMT ver 1.22 [ 162.291430][ T5475] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.471413][ T5475] usb 2-1: Using ep0 maxpacket: 16 [ 162.478566][ T5475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.520496][ T5475] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 162.540719][ T5475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.583256][ T5475] usb 2-1: config 0 descriptor?? [ 162.995163][ T6012] loop3: detected capacity change from 0 to 32768 [ 163.006213][ T5475] uclogic 0003:5543:0005.000C: unknown main item tag 0x0 [ 163.021400][ T5475] uclogic 0003:5543:0005.000C: unknown main item tag 0x0 [ 163.049140][ T5475] uclogic 0003:5543:0005.000C: unknown main item tag 0x0 [ 163.067282][ T5475] uclogic 0003:5543:0005.000C: No inputs registered, leaving [ 163.105451][ T5475] uclogic 0003:5543:0005.000C: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 163.227634][ T5477] usb 2-1: USB disconnect, device number 6 [ 163.495241][ T6039] fido_id[6039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 163.655248][ T6038] loop4: detected capacity change from 0 to 32768 [ 163.662679][ T6038] XFS: ikeep mount option is deprecated. [ 163.705850][ T6038] XFS (loop4): Mounting V5 Filesystem [ 163.830589][ T6038] XFS (loop4): Ending clean mount [ 163.876892][ T6038] XFS (loop4): Quotacheck needed: Please wait. [ 164.006164][ T6038] XFS (loop4): Quotacheck: Done. [ 164.046622][ T6059] loop2: detected capacity change from 0 to 1024 [ 164.318355][ T4251] XFS (loop4): Unmounting Filesystem [ 164.401891][ T34] hfsplus: b-tree write err: -5, ino 4 [ 164.427928][ T6066] loop1: detected capacity change from 0 to 2048 [ 164.537502][ T6066] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 164.595680][ T6066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.841408][ T4242] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.031492][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 165.038533][ T4242] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.080485][ T4242] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.111391][ T4242] usb 3-1: config 0 interface 0 has no altsetting 0 [ 165.133966][ T4242] usb 3-1: New USB device found, idVendor=1b96, idProduct=0016, bcdDevice= 0.00 [ 165.172136][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.220511][ T4242] usb 3-1: config 0 descriptor?? [ 165.518762][ T6089] loop1: detected capacity change from 0 to 8192 [ 165.568548][ T6089] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.619438][ T6089] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 165.661192][ T4242] hid-generic 0003:1B96:0016.000D: unknown main item tag 0x1 [ 165.679663][ T4242] hid-generic 0003:1B96:0016.000D: hidraw0: USB HID v8.00 Device [HID 1b96:0016] on usb-dummy_hcd.2-1/input0 [ 165.707065][ T6089] REISERFS (device loop1): using ordered data mode [ 165.741507][ T6089] reiserfs: using flush barriers [ 165.754235][ T6089] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.795508][ T6089] REISERFS (device loop1): checking transaction log (loop1) [ 165.902860][ T4242] usb 3-1: USB disconnect, device number 8 [ 166.045011][ T6089] REISERFS (device loop1): Using tea hash to sort names [ 166.058996][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 166.081870][ T6089] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 166.141578][ T5477] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.151811][ T6089] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=12, len=4 - odd [ 166.341498][ T5477] usb 4-1: Using ep0 maxpacket: 32 [ 166.363955][ T5477] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 166.421463][ T5477] usb 4-1: config 4 has no interface number 0 [ 166.427640][ T5477] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.467857][ T5477] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.487964][ T5477] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.507492][ T5477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.563523][ T5477] hub 4-1:4.128: USB hub found [ 166.612126][ T6111] loop4: detected capacity change from 0 to 8 [ 166.753594][ T6111] SQUASHFS error: xz decompression failed, data probably corrupt [ 166.781826][ T5477] hub 4-1:4.128: 2 ports detected [ 166.786960][ T5477] hub 4-1:4.128: Using single TT (err -22) [ 166.816744][ T6111] SQUASHFS error: Failed to read block 0x108: -5 [ 166.847110][ T6111] SQUASHFS error: Unable to read metadata cache entry [106] [ 166.890518][ T6111] SQUASHFS error: Unable to read inode 0x11f [ 166.962414][ T6119] loop2: detected capacity change from 0 to 256 [ 166.998440][ T6119] exfat: Deprecated parameter 'utf8' [ 167.049279][ T5477] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 167.057388][ T5477] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 167.059024][ T6119] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 167.141997][ T5477] usb 4-1: USB disconnect, device number 6 [ 167.373549][ T6125] loop4: detected capacity change from 0 to 256 [ 167.446538][ T6125] FAT-fs (loop4): Directory bread(block 64) failed [ 167.501487][ T6125] FAT-fs (loop4): Directory bread(block 65) failed [ 167.508184][ T6125] FAT-fs (loop4): Directory bread(block 66) failed [ 167.551444][ T6125] FAT-fs (loop4): Directory bread(block 67) failed [ 167.558178][ T6125] FAT-fs (loop4): Directory bread(block 68) failed [ 167.603428][ T6125] FAT-fs (loop4): Directory bread(block 69) failed [ 167.610124][ T6125] FAT-fs (loop4): Directory bread(block 70) failed [ 167.621042][ T6129] loop1: detected capacity change from 0 to 4096 [ 167.627574][ T6125] FAT-fs (loop4): Directory bread(block 71) failed [ 167.643048][ T6125] FAT-fs (loop4): Directory bread(block 72) failed [ 167.650840][ T6129] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 167.660291][ T6125] FAT-fs (loop4): Directory bread(block 73) failed [ 167.763950][ T4242] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.906233][ T4252] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 167.947431][ T4252] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 167.967257][ T4242] usb 3-1: Using ep0 maxpacket: 32 [ 167.968692][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 167.980244][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.041415][ T4242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.072172][ T4242] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 168.118367][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.158238][ T4242] usb 3-1: config 0 descriptor?? [ 168.421549][ T5477] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.604292][ T4242] ft260 0003:0403:6030.000E: item fetching failed at offset 0/2 [ 168.613616][ T5477] usb 4-1: Using ep0 maxpacket: 16 [ 168.621906][ T4242] ft260 0003:0403:6030.000E: failed to parse HID [ 168.626605][ T5477] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.638703][ T4242] ft260: probe of 0003:0403:6030.000E failed with error -22 [ 168.665459][ T5477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.689265][ T5477] usb 4-1: Product: syz [ 168.698202][ T5477] usb 4-1: Manufacturer: syz [ 168.715559][ T5477] usb 4-1: SerialNumber: syz [ 168.732909][ T5477] r8152-cfgselector 4-1: config 0 descriptor?? [ 168.836992][ T4356] usb 3-1: USB disconnect, device number 9 [ 168.964796][ T5477] r8152-cfgselector 4-1: Unknown version 0x0000 [ 169.178456][ T5477] r8152-cfgselector 4-1: Unknown version 0x0000 [ 169.188658][ T5477] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 169.412512][ T4356] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.623255][ T4356] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.642120][ T4356] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.661331][ T4356] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.670456][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.682968][ T6170] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.971698][ T6189] usb 1-1: USB disconnect, device number 7 [ 170.067135][ T6170] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 170.073727][ T6170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.108447][ T6170] vhci_hcd vhci_hcd.0: Device attached [ 170.133909][ T6195] vhci_hcd: connection closed [ 170.134351][ T34] vhci_hcd: stop threads [ 170.160260][ T34] vhci_hcd: release socket [ 170.171551][ T34] vhci_hcd: disconnect device [ 170.291403][ T6193] usb usb1: check_ctrlrecip: process 6193 (syz.3.716) requesting ep 01 but needs 81 [ 171.061329][ T6226] loop3: detected capacity change from 0 to 8 [ 171.124917][ T6232] loop2: detected capacity change from 0 to 512 [ 171.138004][ T6226] process 'syz.3.733' launched './file1' with NULL argv: empty string added [ 171.207470][ T6234] loop0: detected capacity change from 0 to 256 [ 171.229902][ T6226] SQUASHFS error: zstd decompression failed, data probably corrupt [ 171.261725][ T6226] SQUASHFS error: Failed to read block 0x60: -5 [ 171.269747][ T6234] exfat: Deprecated parameter 'namecase' [ 171.293929][ T6232] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 171.307935][ T6226] SQUASHFS error: zstd decompression failed, data probably corrupt [ 171.316485][ T6226] SQUASHFS error: Failed to read block 0x60: -5 [ 171.362254][ T6232] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 171.384326][ T6232] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.735: Corrupt directory, running e2fsck is recommended [ 171.403280][ T6234] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 171.417978][ T6232] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 171.482348][ T6232] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.735: corrupted in-inode xattr [ 171.545722][ T6232] EXT4-fs (loop2): Remounting filesystem read-only [ 171.561524][ T6232] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.735: couldn't read orphan inode 15 (err -117) [ 171.598690][ T6232] EXT4-fs (loop2): Remounting filesystem read-only [ 171.622463][ T6232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.669940][ T6232] EXT4-fs: group quota file already specified [ 171.751462][ T4242] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 171.780543][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 171.918879][ T6251] loop2: detected capacity change from 0 to 4096 [ 171.943162][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.955423][ T6251] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 171.971125][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.005174][ T4242] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 172.018230][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.044166][ T4242] usb 2-1: config 0 descriptor?? [ 172.071728][ T1169] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.283260][ T1169] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.309922][ T1169] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.337365][ T1169] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.377847][ T1169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.433723][ T6247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.571191][ T6262] loop4: detected capacity change from 0 to 2048 [ 172.625388][ T6262] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 172.667505][ T1169] usb 2-1: USB disconnect, device number 7 [ 172.690648][ T6266] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.834538][ T6247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 172.841125][ T6247] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.851975][ T6247] vhci_hcd vhci_hcd.0: Device attached [ 172.906365][ T6267] vhci_hcd: connection closed [ 172.906705][ T34] vhci_hcd: stop threads [ 172.918028][ T34] vhci_hcd: release socket [ 172.931026][ T34] vhci_hcd: disconnect device [ 173.054927][ T5475] usb 4-1: USB disconnect, device number 8 [ 173.143364][ T6276] loop2: detected capacity change from 0 to 256 [ 173.155663][ T6276] exfat: Deprecated parameter 'namecase' [ 173.171445][ T6276] exfat: Deprecated parameter 'namecase' [ 173.198570][ T6276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 173.306743][ T6282] loop4: detected capacity change from 0 to 128 [ 173.361612][ T6284] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 173.405536][ T6284] netlink: 17 bytes leftover after parsing attributes in process `syz.1.758'. [ 173.480289][ T6287] loop2: detected capacity change from 0 to 1024 [ 173.527616][ T6287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.616111][ T6287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 173.778329][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 173.800035][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 173.941737][ T5475] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.143004][ T5475] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 174.162475][ T5475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.195110][ T5475] usb 2-1: config 0 descriptor?? [ 174.216000][ T5475] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 174.341444][ T5477] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.516401][ T6319] netlink: 56 bytes leftover after parsing attributes in process `syz.0.774'. [ 174.544068][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 174.552898][ T5477] usb 4-1: Using ep0 maxpacket: 32 [ 174.571334][ T5477] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 174.600902][ T5477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.614650][ T5475] gspca_cpia1: usb_control_msg 03, error -32 [ 174.623512][ T5475] gspca_cpia1: usb_control_msg 03, error -71 [ 174.631743][ T5477] usb 4-1: Product: syz [ 174.641596][ T5475] gspca_cpia1: usb_control_msg 01, error -71 [ 174.649162][ T5477] usb 4-1: Manufacturer: syz [ 174.658759][ T5477] usb 4-1: SerialNumber: syz [ 174.667258][ T5475] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 174.684671][ T5477] usb 4-1: config 0 descriptor?? [ 174.702891][ T5475] usb 2-1: USB disconnect, device number 8 [ 174.730987][ T5477] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 174.867163][ T6309] loop2: detected capacity change from 0 to 32768 [ 174.939967][ T6323] loop0: detected capacity change from 0 to 16 [ 175.214848][ T6317] loop4: detected capacity change from 0 to 32768 [ 175.348476][ T5477] gspca_stk1135: reg_w 0x3 err -71 [ 175.372795][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.379559][ T5477] gspca_stk1135: Sensor write failed [ 175.390875][ T6329] loop1: detected capacity change from 0 to 512 [ 175.427906][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.462928][ T6329] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.467316][ T5477] gspca_stk1135: Sensor write failed [ 175.510909][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.538392][ T5477] gspca_stk1135: Sensor read failed [ 175.550264][ T6329] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.779: invalid indirect mapped block 2185560079 (level 0) [ 175.564225][ T6333] loop2: detected capacity change from 0 to 2048 [ 175.581378][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.587767][ T5477] gspca_stk1135: Sensor read failed [ 175.611338][ T5477] gspca_stk1135: Detected sensor type unknown (0x0) [ 175.618596][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.626110][ T6329] EXT4-fs (loop1): Remounting filesystem read-only [ 175.626871][ T6333] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 175.650228][ T5477] gspca_stk1135: Sensor read failed [ 175.691170][ T6329] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.779: invalid indirect mapped block 2683928664 (level 1) [ 175.715659][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.735918][ T5477] gspca_stk1135: Sensor read failed [ 175.741206][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.770644][ T6329] EXT4-fs (loop1): Remounting filesystem read-only [ 175.790078][ T6329] EXT4-fs (loop1): 1 truncate cleaned up [ 175.806250][ T5477] gspca_stk1135: Sensor write failed [ 175.816408][ T6329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.834993][ T5477] gspca_stk1135: serial bus timeout: status=0x00 [ 175.883765][ T5477] gspca_stk1135: Sensor write failed [ 175.889194][ T5477] stk1135: probe of 4-1:0.0 failed with error -71 [ 175.939847][ T5477] usb 4-1: USB disconnect, device number 9 [ 176.000521][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 176.085580][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 176.339727][ T6349] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 177.056457][ T6363] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.093119][ T6361] loop4: detected capacity change from 0 to 32768 [ 177.139612][ T6361] Dev loop4 Sun disklabel: Csum bad, label corrupted [ 177.151311][ T6361] loop4: unable to read partition table [ 177.157183][ T6361] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 177.192254][ T1169] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.393566][ T1169] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.419665][ T1169] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 177.454552][ T1169] usb 4-1: config 6 has no interface number 0 [ 177.460860][ T1169] usb 4-1: config 6 interface 200 has no altsetting 0 [ 177.533858][ T1169] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 177.561320][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.569377][ T1169] usb 4-1: Product: syz [ 177.611839][ T1169] usb 4-1: Manufacturer: syz [ 177.631304][ T1169] usb 4-1: SerialNumber: syz [ 178.006392][ T6384] loop1: detected capacity change from 0 to 1024 [ 178.482229][ T6395] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 178.540248][ T6365] loop2: detected capacity change from 0 to 32768 [ 178.566632][ T6365] XFS: ikeep mount option is deprecated. [ 178.614931][ T6365] XFS (loop2): Mounting V5 Filesystem [ 178.848931][ T6365] XFS (loop2): Ending clean mount [ 178.868515][ T6365] XFS (loop2): Quotacheck needed: Please wait. [ 178.918126][ T6376] loop4: detected capacity change from 0 to 40427 [ 178.998488][ T6365] XFS (loop2): Quotacheck: Done. [ 179.026249][ T6376] F2FS-fs (loop4): invalid crc value [ 179.065683][ T6414] device bridge_slave_1 left promiscuous mode [ 179.102564][ T6376] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.140315][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.224456][ T4262] XFS (loop2): Unmounting Filesystem [ 179.291971][ T6376] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 179.333552][ T6376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 179.753074][ T1169] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 179.797544][ T1169] dvb-usb: bulk message failed: -71 (3/0) [ 179.853321][ T1169] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.930018][ T1169] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 179.960694][ T6434] loop2: detected capacity change from 0 to 512 [ 180.021404][ T1169] usb 4-1: media controller created [ 180.022446][ T6434] EXT4-fs: Ignoring removed i_version option [ 180.061563][ T6437] netlink: 'syz.1.813': attribute type 30 has an invalid length. [ 180.101957][ T6438] loop0: detected capacity change from 0 to 256 [ 180.110012][ T6434] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.134675][ T6438] exfat: Deprecated parameter 'namecase' [ 180.148561][ T1169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.162225][ T6440] loop3: detected capacity change from 0 to 1024 [ 180.198725][ T6438] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 180.229946][ T27] audit: type=1800 audit(1747963055.141:47): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.808" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 180.319275][ T1169] dvb-usb: bulk message failed: -71 (6/0) [ 180.388635][ T1169] dvb-usb: bulk message failed: -71 (6/0) [ 180.438033][ T1169] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 180.460188][ T11] hfsplus: b-tree write err: -5, ino 4 [ 180.479108][ T1169] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 180.561711][ T1169] dvb-usb: schedule remote query interval to 150 msecs. [ 180.614676][ T1169] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 180.674354][ T1169] usb 4-1: USB disconnect, device number 10 [ 180.764154][ T4262] EXT4-fs (loop2): unmounting filesystem. [ 180.912080][ T1169] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 180.962397][ T6461] loop2: detected capacity change from 0 to 64 [ 181.419867][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 181.671874][ T27] audit: type=1326 audit(1747963056.591:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6482 comm="syz.3.830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08acd8e969 code=0x0 [ 181.707433][ T6488] tipc: Started in network mode [ 181.738782][ T6488] tipc: Node identity ac14140f, cluster identity 4711 [ 181.765219][ T6488] tipc: New replicast peer: 255.255.255.255 [ 181.788018][ T6488] tipc: Enabled bearer , priority 10 [ 181.906602][ T6494] netlink: 104 bytes leftover after parsing attributes in process `syz.4.834'. [ 182.285806][ T6512] loop1: detected capacity change from 0 to 512 [ 182.301739][ T6512] EXT4-fs: Ignoring removed orlov option [ 182.319928][ T6512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.357057][ T6512] EXT4-fs (loop1): 1 truncate cleaned up [ 182.363499][ T6512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 182.452024][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 182.699307][ T6523] binder: 6522:6523 ioctl 40046205 0 returned -22 [ 182.809467][ T6526] loop1: detected capacity change from 0 to 1024 [ 182.916434][ T1169] tipc: Node number set to 2886997007 [ 183.072749][ T6532] loop1: detected capacity change from 0 to 4096 [ 183.120028][ T6535] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.235981][ T6537] loop4: detected capacity change from 0 to 65 [ 183.299787][ T6537] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 184.027396][ T6534] loop3: detected capacity change from 0 to 40427 [ 184.072617][ T6534] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 184.097748][ T6534] F2FS-fs (loop3): invalid crc value [ 184.141592][ T6534] F2FS-fs (loop3): Found nat_bits in checkpoint [ 184.284062][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 184.330896][ T6534] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 184.540689][ T4261] syz-executor: attempt to access beyond end of device [ 184.540689][ T4261] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.253231][ T6592] loop4: detected capacity change from 0 to 64 [ 185.979842][ T6613] loop1: detected capacity change from 0 to 64 [ 186.645125][ T6612] loop4: detected capacity change from 0 to 32768 [ 186.777542][ T6612] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 186.921137][ T6612] (syz.4.884,6612,0):ocfs2_verify_group_and_input:425 ERROR: the add group should be in chain 1 [ 186.971475][ T6612] (syz.4.884,6612,1):ocfs2_group_add:503 ERROR: status = -22 [ 187.002264][ T6632] loop1: detected capacity change from 0 to 128 [ 187.200925][ T6632] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 548, start 0000fb00) [ 187.212242][ T27] audit: type=1800 audit(1747963062.101:49): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.891" name="file1" dev="loop1" ino=1048652 res=0 errno=0 [ 187.276935][ T6631] loop2: detected capacity change from 0 to 32768 [ 187.287053][ T6632] FAT-fs (loop1): Filesystem has been set read-only [ 187.369125][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 187.454644][ T6626] loop3: detected capacity change from 0 to 32768 [ 187.482965][ T6631] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 187.513591][ T5475] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 187.566010][ T5475] XFS (loop2): Unmount and run xfs_repair [ 187.576327][ T6626] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 187.615878][ T5475] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 187.661349][ T5475] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 187.700141][ T5475] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 187.743486][ T5475] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 187.782055][ T5475] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 187.806932][ T5475] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 187.836608][ T5475] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 187.866064][ T5475] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 187.886015][ T5475] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 187.916576][ T6631] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 187.949647][ T6626] XFS (loop3): Mounting V5 Filesystem [ 188.345765][ T6626] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x420 dinode [ 188.392944][ T6626] XFS (loop3): Unmount and run xfs_repair [ 188.398749][ T6626] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 188.434260][ T6626] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 188.471791][ T6626] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 188.495727][ T6663] netlink: 88 bytes leftover after parsing attributes in process `syz.1.899'. [ 188.507835][ T6661] loop0: detected capacity change from 0 to 2048 [ 188.514348][ T6626] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 a5 a5 b6 11 ..e.....4.Xh.... [ 188.518862][ T6663] tipc: Enabling of bearer rejected, failed to enable media [ 188.550341][ T6626] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 4b 4.Xh...........K [ 188.581408][ T6626] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 188.606088][ T6665] loop2: detected capacity change from 0 to 2048 [ 188.613101][ T6626] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 188.644742][ T6626] 00000060: ff ff ff ff 02 f4 00 cc 00 00 00 00 00 00 00 07 ................ [ 188.657051][ T6626] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 188.669718][ T6626] XFS (loop3): Failed to read root inode 0x420, error 117 [ 188.670466][ T6661] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.710126][ T6665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.772191][ T6652] loop4: detected capacity change from 0 to 32768 [ 188.798107][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 188.829485][ T6652] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.896 (6652) [ 188.898493][ T6652] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.933256][ T6652] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 188.960302][ T6652] BTRFS info (device loop4): enabling disk space caching [ 188.989242][ T6652] BTRFS info (device loop4): force clearing of disk cache [ 189.022314][ T6652] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.069670][ T6652] BTRFS info (device loop4): use lzo compression, level 0 [ 189.093790][ T6652] BTRFS info (device loop4): doing ref verification [ 189.171445][ T6652] BTRFS info (device loop4): enabling ssd optimizations [ 189.190552][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.903'. [ 189.227329][ T6652] BTRFS info (device loop4): using spread ssd allocation scheme [ 189.253146][ T6652] BTRFS info (device loop4): disk space caching is enabled [ 189.549598][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.2.907'. [ 189.550247][ T6652] BTRFS info (device loop4): rebuilding free space tree [ 189.610817][ T6652] BTRFS info (device loop4): disabling free space tree [ 189.620634][ T6652] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.660827][ T6652] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.720820][ T6704] loop2: detected capacity change from 0 to 128 [ 189.758135][ T6704] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 189.929271][ T4262] sysv_free_block: flc_count > flc_size [ 189.953826][ T4262] sysv_free_block: flc_count > flc_size [ 189.978443][ T4262] sysv_free_block: flc_count > flc_size [ 189.978884][ T4251] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.991493][ T4262] sysv_free_block: flc_count > flc_size [ 190.031386][ T4262] sysv_free_block: flc_count > flc_size [ 190.037006][ T4262] sysv_free_block: flc_count > flc_size [ 190.048577][ T4262] sysv_free_block: flc_count > flc_size [ 190.059544][ T4262] sysv_free_block: flc_count > flc_size [ 190.072001][ T4262] sysv_free_block: flc_count > flc_size [ 190.112077][ T4262] sysv_free_block: flc_count > flc_size [ 190.119256][ T4262] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 190.388678][ T6715] sp0: Synchronizing with TNC [ 190.503920][ T27] audit: type=1326 audit(1747963065.421:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 190.578154][ T27] audit: type=1326 audit(1747963065.421:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 190.668597][ T27] audit: type=1326 audit(1747963065.441:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 190.752429][ T6725] loop0: detected capacity change from 0 to 1024 [ 190.759257][ T27] audit: type=1326 audit(1747963065.441:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 190.852686][ T27] audit: type=1326 audit(1747963065.441:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acd8e969 code=0x7ffc0000 [ 191.004840][ T4257] [ 191.007230][ T4257] ============================================ [ 191.013399][ T4257] WARNING: possible recursive locking detected [ 191.019579][ T4257] 6.1.140-syzkaller #0 Not tainted [ 191.024706][ T4257] -------------------------------------------- [ 191.030868][ T4257] syz-executor/4257 is trying to acquire lock: [ 191.037036][ T4257] ffff888074882988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x39b/0x1530 [ 191.047959][ T4257] [ 191.047959][ T4257] but task is already holding lock: [ 191.055368][ T4257] ffff888074884488 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 191.066549][ T4257] [ 191.066549][ T4257] other info that might help us debug this: [ 191.074617][ T4257] Possible unsafe locking scenario: [ 191.074617][ T4257] [ 191.082170][ T4257] CPU0 [ 191.085456][ T4257] ---- [ 191.088738][ T4257] lock(&HFSPLUS_I(inode)->extents_lock); [ 191.094656][ T4257] lock(&HFSPLUS_I(inode)->extents_lock); [ 191.100474][ T4257] [ 191.100474][ T4257] *** DEADLOCK *** [ 191.100474][ T4257] [ 191.108618][ T4257] May be due to missing lock nesting notation [ 191.108618][ T4257] [ 191.116938][ T4257] 6 locks held by syz-executor/4257: [ 191.122222][ T4257] #0: ffff888027e76460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 191.131462][ T4257] #1: ffff888074883240 (&type->i_mutex_dir_key#12/1){+.+.}-{3:3}, at: do_unlinkat+0x178/0x560 [ 191.141834][ T4257] #2: ffff888074884680 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_unlink+0xee/0x600 [ 191.152027][ T4257] #3: ffff888055404198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x15a/0x760 [ 191.161522][ T4257] #4: ffff888074884488 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 191.173101][ T4257] #5: ffff8880554040f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbf/0x4b0 [ 191.183127][ T4257] [ 191.183127][ T4257] stack backtrace: [ 191.189034][ T4257] CPU: 1 PID: 4257 Comm: syz-executor Not tainted 6.1.140-syzkaller #0 [ 191.197302][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.207367][ T4257] Call Trace: [ 191.210647][ T4257] [ 191.213580][ T4257] dump_stack_lvl+0x168/0x22e [ 191.218274][ T4257] ? show_regs_print_info+0x12/0x12 [ 191.223480][ T4257] ? load_image+0x3b0/0x3b0 [ 191.228001][ T4257] __lock_acquire+0x122f/0x7c50 [ 191.232889][ T4257] ? check_path+0x21/0x40 [ 191.237286][ T4257] ? check_noncircular+0x16f/0x310 [ 191.242427][ T4257] ? verify_lock_unused+0x140/0x140 [ 191.247645][ T4257] ? lockdep_lock+0xdc/0x1e0 [ 191.252256][ T4257] ? lockdep_unlock+0x133/0x2d0 [ 191.257113][ T4257] ? lockdep_lock+0x1e0/0x1e0 [ 191.261847][ T4257] ? _find_first_zero_bit+0xcf/0x100 [ 191.267163][ T4257] lock_acquire+0x1b4/0x490 [ 191.271685][ T4257] ? hfsplus_get_block+0x39b/0x1530 [ 191.276896][ T4257] ? __might_sleep+0xd0/0xd0 [ 191.281503][ T4257] ? read_lock_is_recursive+0x10/0x10 [ 191.286907][ T4257] ? verify_lock_unused+0x140/0x140 [ 191.292132][ T4257] __mutex_lock+0x120/0xaf0 [ 191.296654][ T4257] ? hfsplus_get_block+0x39b/0x1530 [ 191.301870][ T4257] ? memset+0x1e/0x40 [ 191.305911][ T4257] ? hfsplus_get_block+0x39b/0x1530 [ 191.311112][ T4257] ? mutex_lock_nested+0x10/0x10 [ 191.316062][ T4257] hfsplus_get_block+0x39b/0x1530 [ 191.321094][ T4257] ? alloc_buffer_head+0xd4/0x100 [ 191.326134][ T4257] ? hfsplus_ext_write_extent+0x200/0x200 [ 191.331860][ T4257] ? create_empty_buffers+0x59e/0x7a0 [ 191.337341][ T4257] ? verify_lock_unused+0x140/0x140 [ 191.342554][ T4257] ? do_raw_spin_unlock+0x11d/0x230 [ 191.347780][ T4257] ? create_page_buffers+0x24f/0x4a0 [ 191.353093][ T4257] block_read_full_folio+0x3c9/0xed0 [ 191.358410][ T4257] ? _raw_spin_unlock_irq+0x1f/0x40 [ 191.363632][ T4257] ? hfsplus_ext_write_extent+0x200/0x200 [ 191.369360][ T4257] ? block_is_partially_uptodate+0x5f0/0x5f0 [ 191.375366][ T4257] ? __lock_acquire+0x7c50/0x7c50 [ 191.380404][ T4257] ? folio_put+0xd0/0xd0 [ 191.384659][ T4257] ? filemap_alloc_folio+0xdb/0x460 [ 191.389869][ T4257] filemap_read_folio+0x160/0x760 [ 191.394903][ T4257] ? folio_batch_add_and_move+0x14a/0x250 [ 191.400638][ T4257] ? hfsplus_writepage+0x30/0x30 [ 191.405577][ T4257] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 191.411351][ T4257] ? hfsplus_block_free+0xbf/0x4b0 [ 191.416496][ T4257] do_read_cache_folio+0x2a0/0x760 [ 191.421720][ T4257] ? hfsplus_writepage+0x30/0x30 [ 191.426666][ T4257] do_read_cache_page+0x32/0x220 [ 191.431637][ T4257] hfsplus_block_free+0x128/0x4b0 [ 191.436673][ T4257] ? hfsplus_find_init+0x85/0x1c0 [ 191.441706][ T4257] hfsplus_free_extents+0x176/0xac0 [ 191.446913][ T4257] hfsplus_file_truncate+0x731/0xb30 [ 191.452212][ T4257] ? hfsplus_add_extent+0x890/0x890 [ 191.457416][ T4257] ? hfsplus_unlink+0x15a/0x760 [ 191.462308][ T4257] hfsplus_delete_inode+0x17c/0x230 [ 191.467513][ T4257] hfsplus_unlink+0x4c0/0x760 [ 191.472198][ T4257] ? hfsplus_link+0x700/0x700 [ 191.476998][ T4257] ? preempt_count_add+0x8d/0x190 [ 191.482050][ T4257] ? rwsem_write_trylock+0x12f/0x1b0 [ 191.487404][ T4257] ? bpf_lsm_inode_unlink+0x5/0x10 [ 191.492533][ T4257] ? security_inode_unlink+0xcb/0x110 [ 191.497916][ T4257] vfs_unlink+0x385/0x600 [ 191.502264][ T4257] do_unlinkat+0x324/0x560 [ 191.506715][ T4257] ? fsnotify_link_count+0xf0/0xf0 [ 191.511836][ T4257] ? getname_flags+0x206/0x500 [ 191.516615][ T4257] __x64_sys_unlink+0x45/0x50 [ 191.521297][ T4257] do_syscall_64+0x4c/0xa0 [ 191.525727][ T4257] ? clear_bhb_loop+0x60/0xb0 [ 191.530413][ T4257] ? clear_bhb_loop+0x60/0xb0 [ 191.535088][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.540996][ T4257] RIP: 0033:0x7fe1b238df17 [ 191.545431][ T4257] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.565040][ T4257] RSP: 002b:00007fff573f8b48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 191.573458][ T4257] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1b238df17 [ 191.581430][ T4257] RDX: 00007fff573f8b70 RSI: 00007fff573f8c00 RDI: 00007fff573f8c00 [ 191.589403][ T4257] RBP: 00007fff573f8c00 R08: 0000000000000000 R09: 0000000000000000 [ 191.597386][ T4257] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff573f9cf0 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 191.605374][ T4257] R13: 00007fe1b241089d R14: 000000000002e992 R15: 00007fff573fadc0 [ 191.613379][ T4257] [ 191.616919][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 191.644805][ T4257] hfsplus: unable to mark blocks free: error -5 [ 191.651100][ T4257] hfsplus: can't free extent [ 192.229004][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.330764][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.435056][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.516269][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.285489][ T11] device hsr_slave_0 left promiscuous mode [ 193.294910][ T11] device hsr_slave_1 left promiscuous mode [ 193.303430][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.310876][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.319456][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.332473][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.340245][ T11] device bridge_slave_1 left promiscuous mode [ 193.348497][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.357132][ T11] device bridge_slave_0 left promiscuous mode [ 193.365311][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.376371][ T11] device veth1_macvtap left promiscuous mode [ 193.382573][ T11] device veth0_macvtap left promiscuous mode [ 193.389270][ T11] device veth1_vlan left promiscuous mode [ 193.395466][ T11] device veth0_vlan left promiscuous mode [ 193.551620][ T11] team0 (unregistering): Port device team_slave_1 removed [ 193.562960][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.589147][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.616706][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.667166][ T11] bond0 (unregistering): Released all slaves [ 194.170217][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.228436][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.296558][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.314711][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.321135][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.346795][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.473123][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.525512][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.566136][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.609207][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.691468][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.747157][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.787130][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.845791][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.963802][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.016364][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.048608][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.096406][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.223540][ T11] tipc: Left network mode [ 195.229490][ T11] tipc: Disabling bearer [ 195.237611][ T11] tipc: Left network mode [ 195.922387][ T11] IPVS: stopping backup sync thread 6349 ... [ 196.562923][ T11] device hsr_slave_0 left promiscuous mode [ 196.569253][ T11] device hsr_slave_1 left promiscuous mode [ 196.577412][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.585293][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.594869][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.602872][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.610652][ T11] device bridge_slave_1 left promiscuous mode [ 196.618687][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.627286][ T11] device bridge_slave_0 left promiscuous mode [ 196.635625][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.647639][ T11] device hsr_slave_0 left promiscuous mode [ 196.655633][ T11] device hsr_slave_1 left promiscuous mode [ 196.662410][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.669830][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.677678][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.685491][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.693141][ T11] device bridge_slave_0 left promiscuous mode [ 196.699307][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.709956][ T11] device hsr_slave_0 left promiscuous mode [ 196.716565][ T11] device hsr_slave_1 left promiscuous mode [ 196.722955][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.730342][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.738002][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.745496][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.753175][ T11] device bridge_slave_1 left promiscuous mode [ 196.759340][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.767398][ T11] device bridge_slave_0 left promiscuous mode [ 196.773718][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.784982][ T11] device hsr_slave_0 left promiscuous mode [ 196.791117][ T11] device hsr_slave_1 left promiscuous mode [ 196.797471][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.804978][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.812701][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.820092][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.827699][ T11] device bridge_slave_1 left promiscuous mode [ 196.833943][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.842294][ T11] device bridge_slave_0 left promiscuous mode [ 196.848519][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.862538][ T11] device veth1_macvtap left promiscuous mode [ 196.868586][ T11] device veth0_macvtap left promiscuous mode [ 196.875079][ T11] device veth1_vlan left promiscuous mode [ 196.880850][ T11] device veth0_vlan left promiscuous mode [ 196.887440][ T11] device veth1_macvtap left promiscuous mode [ 196.893711][ T11] device veth0_macvtap left promiscuous mode [ 196.899773][ T11] device veth1_vlan left promiscuous mode [ 196.905596][ T11] device veth0_vlan left promiscuous mode [ 196.912296][ T11] device veth1_macvtap left promiscuous mode [ 196.918309][ T11] device veth0_macvtap left promiscuous mode [ 196.924484][ T11] device veth1_vlan left promiscuous mode [ 196.930306][ T11] device veth0_vlan left promiscuous mode [ 196.936930][ T11] device veth1_macvtap left promiscuous mode [ 196.943108][ T11] device veth0_macvtap left promiscuous mode [ 196.949159][ T11] device veth1_vlan left promiscuous mode [ 196.955210][ T11] device veth0_vlan left promiscuous mode [ 197.255918][ T11] team0 (unregistering): Port device team_slave_1 removed [ 197.284305][ T11] team0 (unregistering): Port device team_slave_0 removed [ 197.312037][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.341904][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.392739][ T11] bond0 (unregistering): Released all slaves [ 197.567705][ T11] team0 (unregistering): Port device team_slave_1 removed [ 197.597749][ T11] team0 (unregistering): Port device team_slave_0 removed [ 197.624829][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.653024][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.704540][ T11] bond0 (unregistering): Released all slaves [ 197.827256][ T11] team0 (unregistering): Port device team_slave_1 removed [ 197.838828][ T11] team0 (unregistering): Port device team_slave_0 removed [ 197.866758][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.895148][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.947775][ T11] bond0 (unregistering): Released all slaves [ 198.088607][ T11] team0 (unregistering): Port device team_slave_1 removed [ 198.117075][ T11] team0 (unregistering): Port device team_slave_0 removed [ 198.143344][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.171706][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.221484][ T11] bond0 (unregistering): Released all slaves [ 198.297760][ T1169] lo speed is unknown, defaulting to 1000