last executing test programs: 3.482532837s ago: executing program 2 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01082b9d7000fedbdf250c00000020000580070001"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) 3.415297932s ago: executing program 2 (id=916): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80) sendto(r0, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a13016d", 0x38, 0x800, &(0x7f0000000080)=@phonet={0x1d, 0xc, 0x3, 0x7f}, 0x80) 3.258714301s ago: executing program 2 (id=919): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYBLOB="acfbbc2bce1f6e70ab297d0ef2ac220be830d22d4ab0edc01f9c9df59c65d811f6a6eb82", @ANYRES64=0x0, @ANYRES32], 0x9f, 0x1a1, &(0x7f00000004c0)="$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") syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@datacow}, {@nodatasum}, {@compress_force}, {@rescue={'rescue', 0x3d, 'ignorebadroots'}}, {@barrier}, {@rescue={'rescue', 0x3d, 'ignoremetacsums'}}, {@acl}, {@nodiscard}]}, 0xfb, 0x516c, &(0x7f0000005140)="$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") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.890931482s ago: executing program 0 (id=922): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x6, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xb, 0xc3, 0x800, 0x1, 0x800, 0x20, 0x6, 0x2, 0x4, &(0x7f0000000040)=[0x6], 0x1, 0x0}) 2.877250903s ago: executing program 0 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xdc6e}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000080) 2.304289166s ago: executing program 2 (id=928): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e04000000ea"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000300)={0x0, 0xd47870137cfab7ea, 0x1, "06"}, 0x0, 0x0}) 2.297195317s ago: executing program 0 (id=929): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 2.086846629s ago: executing program 0 (id=930): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./control\x00') 2.086408809s ago: executing program 3 (id=931): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x28, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2.039933212s ago: executing program 3 (id=932): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xf504, 0x0) 1.488785514s ago: executing program 3 (id=935): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@fatal_errors_bug}, {@rescue={'rescue', 0x3d, 'all'}}, {@fatal_errors_bug}, {@noflushoncommit}, {@nodiscard}, {@noacl}, {@space_cache}, {@notreelog}, {@usebackuproot}]}, 0x9, 0x559d, &(0x7f0000010200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.305878385s ago: executing program 4 (id=938): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2e2, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) fdatasync(r0) 1.223289409s ago: executing program 0 (id=939): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4207, r0) 1.114399115s ago: executing program 0 (id=941): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 1.006872382s ago: executing program 4 (id=942): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x22, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd0017085080092624cf43f7b424432fc2142a9969ce36ebb5dac", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 914.421457ms ago: executing program 4 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 769.523176ms ago: executing program 4 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 654.880832ms ago: executing program 4 (id=945): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xd0db8000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 648.177303ms ago: executing program 4 (id=946): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)={0x0, 0x24, 0x5, {0x5, 0x5, "513196"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 558.271078ms ago: executing program 1 (id=947): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0xfe, 0x7bb2}, {0x20, 0xce, 0x2, 0xfffff038}, {0x6, 0x9, 0xb8, 0x9a}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) 426.707276ms ago: executing program 1 (id=948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007b80bdb2aa1b627d163b734a83dc77f4955103decba75e6eca0fb2577d7264d2fdf068b53ef891d2de2010000000000000056187b35709857568cb174c08c91a22106f531506ccc"], &(0x7f0000000000)='GPL\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100000003, &(0x7f0000000200)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000000c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) 346.44096ms ago: executing program 3 (id=949): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001180)={0x10, 0xfffffffffffffff5, 0x3}, 0x10) 337.547021ms ago: executing program 1 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 298.595153ms ago: executing program 1 (id=951): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x4b, 0x4a014, &(0x7f00000002c0)={0xa, 0x4e22, 0x4005, @empty, 0x404}, 0x1a) 186.82193ms ago: executing program 2 (id=952): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') setuid(0xee01) setns(r0, 0x0) 186.58716ms ago: executing program 1 (id=953): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004200010200000000000000b9d5bb"], 0x14}}, 0x40044c4) 180.81361ms ago: executing program 3 (id=954): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 121.493063ms ago: executing program 1 (id=955): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) exit(0xffff) close(0x3) 42.855368ms ago: executing program 2 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x1}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 0s ago: executing program 3 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.969541][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.978440][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.987387][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.995954][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.004973][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.014157][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.022363][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.045664][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.064060][ T4184] device veth0_vlan entered promiscuous mode [ 55.071925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.082470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.091606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.099815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.108784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.117599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.125390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.133397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.141259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.150743][ T4185] device veth0_vlan entered promiscuous mode [ 55.164432][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.174888][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.183942][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.193098][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.208495][ T4184] device veth1_vlan entered promiscuous mode [ 55.221933][ T4185] device veth1_vlan entered promiscuous mode [ 55.237775][ T4188] device veth0_macvtap entered promiscuous mode [ 55.247450][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.255825][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.264934][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.274301][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.287155][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.304028][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.314099][ T4188] device veth1_macvtap entered promiscuous mode [ 55.355033][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.367771][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.379052][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.407004][ T4184] device veth0_macvtap entered promiscuous mode [ 55.420465][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.428598][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.437327][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.446476][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.455102][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.463801][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.473537][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.482715][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.491802][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.500544][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.516941][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.528681][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.542403][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.555406][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.564387][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.573452][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.583050][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.605882][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.614975][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.641464][ T4184] device veth1_macvtap entered promiscuous mode [ 55.646545][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.653983][ T4185] device veth0_macvtap entered promiscuous mode [ 55.671062][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.694603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.704854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.713338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.723711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.735404][ T4185] device veth1_macvtap entered promiscuous mode [ 55.761678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.772695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.781460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.789661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.798278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.810901][ T4193] device veth0_vlan entered promiscuous mode [ 55.823576][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.836499][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.848768][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.859994][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.872513][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.884860][ T4193] device veth1_vlan entered promiscuous mode [ 55.902258][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.911271][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.919301][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.929224][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.940698][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.942380][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.956005][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.962910][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.969707][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.987093][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.998389][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.023576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.032098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.041245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.067180][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.078985][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.089297][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.100037][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.112136][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.123369][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.134689][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.148669][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.159250][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.170508][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.181457][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.191557][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.202278][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.213757][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.222886][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.232982][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.243069][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.252653][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.262209][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.271350][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.282398][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.291810][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.299356][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.309733][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.318660][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.328056][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.344103][ T4193] device veth0_macvtap entered promiscuous mode [ 56.353570][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.363287][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.372453][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.381515][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.402513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.417924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.487362][ T4173] Bluetooth: hci1: command 0x040f tx timeout [ 56.493392][ T4193] device veth1_macvtap entered promiscuous mode [ 56.506278][ T4173] Bluetooth: hci2: command 0x040f tx timeout [ 56.515742][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.535822][ T4173] Bluetooth: hci0: command 0x040f tx timeout [ 56.536595][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.552666][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.563387][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.566180][ T4173] Bluetooth: hci3: command 0x040f tx timeout [ 56.576055][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.590321][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.600830][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.604382][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 56.611864][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.628449][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.642340][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.654666][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.665981][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.676646][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.687425][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.698402][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.708458][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.719086][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.730694][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.741367][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.752844][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.762262][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.771600][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.779362][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.788222][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.797312][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.807071][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.828078][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.854050][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.872442][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.892834][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.966012][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.982041][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.014042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.060516][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.090594][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.137857][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.167752][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.177625][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.193077][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.205712][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.219368][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.238427][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.274120][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.292093][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.306512][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.323628][ T4309] tipc: Enabling of bearer rejected, media not registered [ 57.352314][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.377666][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.391674][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.523817][ T4317] kernel read not supported for file / -Ö9÷mZr†ś7łĎüâW)ës“§Ç!QŹöěĄfsől{T‡rŇ)r§ÖOšő2:"ôŔT+Íźv|ŤŐ˛ (pid: 4317 comm: syz.1.2) [ 57.579059][ T26] audit: type=1800 audit(1770915215.991:2): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=32303 res=0 errno=0 [ 57.610052][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.718062][ T26] audit: type=1804 audit(1770915216.041:3): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=32303 res=1 errno=0 [ 57.748795][ C0] vkms_vblank_simulate: vblank timer overrun [ 57.821045][ T4332] netlink: 268 bytes leftover after parsing attributes in process `syz.0.18'. [ 57.900749][ T4332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 57.993025][ T4311] loop4: detected capacity change from 0 to 32768 [ 58.072748][ T4345] mmap: syz.2.24 (4345) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 58.106287][ T4311] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.11 (4311) [ 58.120558][ T4261] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 58.222121][ T4311] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 58.259813][ T4311] BTRFS info (device loop4): enabling auto defrag [ 58.283048][ T4311] BTRFS info (device loop4): use no compression [ 58.305342][ T4311] BTRFS info (device loop4): force clearing of disk cache [ 58.339128][ T4311] BTRFS info (device loop4): max_inline at 4096 [ 58.375602][ T4311] BTRFS info (device loop4): disabling free space tree [ 58.390262][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 58.404803][ T4311] BTRFS info (device loop4): has skinny extents [ 58.510525][ T4261] usb 2-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 58.569066][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.621856][ T4261] usb 2-1: config 0 descriptor?? [ 58.630522][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 58.637731][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 58.649481][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 58.655957][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 58.686869][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 58.923609][ T4375] loop0: detected capacity change from 0 to 32768 [ 58.930296][ T4311] BTRFS info (device loop4): enabling ssd optimizations [ 58.954130][ T4395] loop3: detected capacity change from 0 to 1024 [ 58.962060][ T4311] BTRFS info (device loop4): clearing free space tree [ 58.969392][ T4311] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 58.981391][ T4375] ======================================================= [ 58.981391][ T4375] WARNING: The mand mount option has been deprecated and [ 58.981391][ T4375] and is ignored by this kernel. Remove the mand [ 58.981391][ T4375] option from the mount to silence this warning. [ 58.981391][ T4375] ======================================================= [ 59.005235][ T4311] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 59.061255][ T4395] EXT4-fs (loop3): Ignoring removed bh option [ 59.106563][ T4261] wacom 0003:056A:00B2.0001: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 59.169410][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4176) [ 59.199013][ T4395] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 59.223376][ C0] vkms_vblank_simulate: vblank timer overrun [ 59.235281][ T4261] wacom 0003:056A:00B2.0001: hidraw0: USB HID v0.f2 Device [HID 056a:00b2] on usb-dummy_hcd.1-1/input0 [ 59.246838][ T4375] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 59.299944][ T4375] BTRFS info (device loop0): setting nodatacow, compression disabled [ 59.322612][ T4261] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B2.0001/input/input6 [ 59.348635][ T4395] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 59.379130][ T4375] BTRFS info (device loop0): turning on sync discard [ 59.408787][ T4375] BTRFS info (device loop0): turning on flush-on-commit [ 59.449229][ T4375] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 59.508016][ T4375] BTRFS info (device loop0): trying to use backup root at mount time [ 59.534054][ T4412] loop2: detected capacity change from 0 to 512 [ 59.539306][ T4261] usb 2-1: USB disconnect, device number 2 [ 59.557204][ T4375] BTRFS info (device loop0): using free space tree [ 59.604576][ T4375] BTRFS info (device loop0): has skinny extents [ 59.780491][ T4413] fido_id[4413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 59.782342][ T4420] loop3: detected capacity change from 0 to 256 [ 59.808439][ T4311] syz.4.11 (4311) used greatest stack depth: 20688 bytes left [ 59.950825][ T144] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 59.975391][ T4420] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 60.009488][ T4375] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 60.316408][ T4455] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 60.486537][ T4177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4177) [ 60.515828][ T4463] capability: warning: `syz.2.54' uses deprecated v2 capabilities in a way that may be insecure [ 60.669157][ T4471] loop3: detected capacity change from 0 to 2048 [ 60.819302][ T4476] mkiss: ax0: crc mode is auto. [ 60.836971][ T4176] Alternate GPT is invalid, using primary GPT. [ 60.849820][ T4176] loop3: p1 p2 p3 [ 60.869583][ T4482] tipc: Started in network mode [ 60.899629][ T4482] tipc: Node identity 7f000001, cluster identity 4711 [ 60.918918][ T4482] tipc: Enabled bearer , priority 10 [ 60.950072][ T4471] Alternate GPT is invalid, using primary GPT. [ 60.958931][ T4471] loop3: p1 p2 p3 [ 61.024455][ T4485] loop4: detected capacity change from 0 to 4096 [ 61.038247][ T4489] loop1: detected capacity change from 0 to 64 [ 61.112430][ T4485] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 61.183549][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 61.195771][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 61.208889][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 61.282756][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 61.296433][ T4490] udevd[4490]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 61.324499][ T4456] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.338609][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 61.574692][ T4504] usb usb8: usbfs: process 4504 (syz.3.67) did not claim interface 0 before use [ 61.608150][ T4190] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 61.643177][ T4190] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 61.666741][ T4190] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 61.715598][ T4508] loop3: detected capacity change from 0 to 1024 [ 61.730413][ T4456] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 61.738432][ T4456] usb 1-1: config 1 has no interface number 0 [ 61.785685][ T4456] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 61.791047][ T4510] netlink: 822 bytes leftover after parsing attributes in process `syz.1.72'. [ 61.813565][ T4510] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0 [ 61.827170][ T4456] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.840829][ T4512] loop4: detected capacity change from 0 to 256 [ 61.922123][ T21] tipc: Node number set to 2130706433 [ 61.942115][ T4512] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 62.061315][ T4456] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 62.107748][ T4456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.148592][ T4456] usb 1-1: Product: syz [ 62.176726][ T4456] usb 1-1: Manufacturer: syz [ 62.213439][ T4456] usb 1-1: SerialNumber: syz [ 62.251910][ T4487] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 62.281292][ T4456] usb 1-1: Expected 3 endpoints, found: 2 [ 62.318791][ T4524] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 62.639758][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 62.664100][ T4544] device vlan2 entered promiscuous mode [ 62.669840][ T4544] device gretap0 entered promiscuous mode [ 62.690245][ T4261] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 62.717262][ T4546] program syz.2.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.736538][ T4546] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.739033][ T4540] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 62.761339][ T4540] REISERFS (device loop4): using ordered data mode [ 62.768050][ T4540] reiserfs: using flush barriers [ 62.794571][ T4540] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 62.847916][ T4540] REISERFS (device loop4): checking transaction log (loop4) [ 62.950153][ T4261] usb 2-1: Using ep0 maxpacket: 8 [ 62.963925][ T4540] REISERFS (device loop4): Using tea hash to sort names [ 62.992338][ T4560] binder: 4559:4560 ioctl 541b 0 returned -22 [ 62.998099][ T4540] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 63.070415][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59209, setting to 1024 [ 63.095201][ T4261] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.119963][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.139736][ T4261] usb 2-1: config 0 descriptor?? [ 63.170412][ T4534] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 63.204259][ T4566] set_capacity_and_notify: 3 callbacks suppressed [ 63.204273][ T4566] loop2: detected capacity change from 0 to 1024 [ 63.307043][ T615] hfsplus: b-tree write err: -5, ino 4 [ 63.416372][ T4261] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 63.432105][ T4572] loop2: detected capacity change from 0 to 128 [ 63.511943][ T4572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 63.529078][ T4572] System zones: 1-3, 19-19, 35-36 [ 63.544765][ T4572] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 63.556848][ T4572] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.686459][ T4258] usb 2-1: USB disconnect, device number 3 [ 63.745928][ T4584] program syz.3.104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.019232][ T21] usb 1-1: USB disconnect, device number 2 [ 64.084589][ T4586] loop2: detected capacity change from 0 to 32768 [ 64.145819][ T4592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 64.163414][ T4586] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 64.202180][ T4586] BTRFS info (device loop2): setting nodatacow, compression disabled [ 64.234564][ T4586] BTRFS info (device loop2): enabling disk space caching [ 64.260014][ T4586] BTRFS info (device loop2): turning off barriers [ 64.289028][ T4586] BTRFS info (device loop2): force clearing of disk cache [ 64.327564][ T4586] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 64.359183][ T4586] BTRFS info (device loop2): force lzo compression, level 0 [ 64.382823][ T4586] BTRFS info (device loop2): max_inline at 0 [ 64.388889][ T4586] BTRFS info (device loop2): using default commit interval 30s [ 64.431601][ T4586] BTRFS info (device loop2): enabling ssd optimizations [ 64.448867][ T4586] BTRFS info (device loop2): max_inline at 868 [ 64.464725][ T4586] BTRFS info (device loop2): disk space caching is enabled [ 64.493094][ T4586] BTRFS info (device loop2): has skinny extents [ 64.510736][ T4261] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.750275][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 64.853452][ T4603] loop1: detected capacity change from 0 to 32768 [ 64.870469][ T4261] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 64.878759][ T4261] usb 4-1: config 0 has no interface number 0 [ 64.933824][ T4635] bridge_slave_0: default FDB implementation only supports local addresses [ 64.949360][ T4586] BTRFS info (device loop2): clearing free space tree [ 65.002834][ T4586] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.052716][ T4586] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.063496][ T4261] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 65.077768][ T4638] loop0: detected capacity change from 0 to 64 [ 65.085231][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.115331][ T4261] usb 4-1: Product: syz [ 65.121972][ T4261] usb 4-1: Manufacturer: syz [ 65.127511][ T4261] usb 4-1: SerialNumber: syz [ 65.134955][ T4261] usb 4-1: config 0 descriptor?? [ 65.182001][ T4261] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 65.237014][ T4644] loop4: detected capacity change from 0 to 64 [ 65.449882][ T4261] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 65.507659][ T4261] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 65.578869][ T4490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4490) [ 65.650243][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 80 [ 65.793268][ T4658] netlink: 'syz.0.130': attribute type 9 has an invalid length. [ 65.816218][ T4662] loop1: detected capacity change from 0 to 256 [ 65.857377][ T4261] usb 4-1: USB disconnect, device number 2 [ 65.865469][ T4662] exfat: Deprecated parameter 'namecase' [ 65.870163][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 65.889223][ T4662] exfat: Deprecated parameter 'utf8' [ 65.949407][ T4261] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 65.950442][ T4662] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 65.992990][ T4261] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 66.071004][ T4261] quatech2 4-1:0.51: device disconnected [ 66.198243][ T4676] loop0: detected capacity change from 0 to 256 [ 66.232765][ T26] audit: type=1400 audit(1770915224.651:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=4677 comm="syz.2.138" [ 66.723426][ T4670] loop4: detected capacity change from 0 to 32768 [ 66.740303][ T4261] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.864196][ T4706] capability: warning: `syz.2.153' uses 32-bit capabilities (legacy support in use) [ 66.980330][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 67.045220][ T4717] loop1: detected capacity change from 0 to 512 [ 67.100352][ T4261] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 67.140215][ T4261] usb 4-1: config 0 has no interface number 0 [ 67.143051][ T4717] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 67.143051][ T4717] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.143051][ T4717] [ 67.325041][ T4717] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,init_itable,nouser_xattr,nobarrier,,errors=continue. Quota mode: writeback. [ 67.330536][ T4261] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 67.360345][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.370268][ T4261] usb 4-1: Product: syz [ 67.374641][ T4261] usb 4-1: Manufacturer: syz [ 67.381488][ T4261] usb 4-1: SerialNumber: syz [ 67.388209][ T4261] usb 4-1: config 0 descriptor?? [ 67.396191][ T4717] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.710387][ T4261] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 67.718748][ T4261] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 67.747459][ T4261] usb 4-1: USB disconnect, device number 3 [ 68.206502][ T4757] netlink: 88 bytes leftover after parsing attributes in process `syz.2.175'. [ 68.238991][ T4759] set_capacity_and_notify: 2 callbacks suppressed [ 68.239006][ T4759] loop4: detected capacity change from 0 to 16 [ 68.260152][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.328660][ T4759] erofs: (device loop4): mounted with root inode @ nid 36. [ 68.488670][ T4763] loop2: detected capacity change from 0 to 4096 [ 68.510475][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 68.618475][ T4765] loop3: detected capacity change from 0 to 32768 [ 68.645653][ T4229] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 68.672383][ T4229] usb 2-1: config 0 has no interface number 0 [ 68.702951][ T4765] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 68.712740][ T4765] gfs2: fsid=syz:syz: unknown hostdata (\) [ 68.790441][ T4229] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice= 0.ce [ 68.809774][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.851569][ T4229] usb 2-1: SerialNumber: syz [ 68.911176][ T4229] usb 2-1: config 0 descriptor?? [ 68.968060][ T4229] smsc95xx v2.0.0 [ 69.098042][ T4789] loop4: detected capacity change from 0 to 64 [ 69.305749][ T4794] loop3: detected capacity change from 0 to 8192 [ 69.352932][ T4794] loop3: AHDI p1 p3 p4 [ 69.357282][ T4794] loop3: p3 start 3996538112 is beyond EOD, truncated [ 69.365115][ T4799] netlink: 'syz.4.194': attribute type 10 has an invalid length. [ 69.384577][ T4794] loop3: p4 start 4278231049 is beyond EOD, truncated [ 69.417283][ T4799] batman_adv: batadv0: Adding interface: team0 [ 69.452439][ T4799] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.484438][ T4799] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 69.511322][ T4800] netlink: 'syz.4.194': attribute type 10 has an invalid length. [ 69.519301][ T4800] netlink: 2 bytes leftover after parsing attributes in process `syz.4.194'. [ 69.528683][ T4800] device team0 entered promiscuous mode [ 69.535259][ T4802] loop3: detected capacity change from 0 to 8 [ 69.563843][ T4800] device team_slave_0 entered promiscuous mode [ 69.565873][ T4792] loop2: detected capacity change from 0 to 32768 [ 69.572793][ T4800] device team_slave_1 entered promiscuous mode [ 69.604730][ T4792] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.191 (4792) [ 69.606601][ T4800] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.624165][ T4229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 69.626232][ T4802] unable to read inode lookup table [ 69.659187][ T4800] batman_adv: batadv0: Interface activated: team0 [ 69.660958][ T4229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 69.666587][ T4800] batman_adv: batadv0: Interface deactivated: team0 [ 69.684755][ T4800] batman_adv: batadv0: Removing interface: team0 [ 69.693946][ T4800] bridge0: port 3(team0) entered blocking state [ 69.701620][ T4792] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 69.703625][ T4800] bridge0: port 3(team0) entered disabled state [ 69.714996][ T4229] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 69.745950][ T4792] BTRFS info (device loop2): enabling ssd optimizations [ 69.754407][ T4229] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 69.758257][ T4800] bridge0: port 3(team0) entered blocking state [ 69.768090][ T4800] bridge0: port 3(team0) entered forwarding state [ 69.778203][ T4792] BTRFS info (device loop2): not using ssd optimizations [ 69.812752][ T4229] usb 2-1: USB disconnect, device number 4 [ 69.862505][ T4792] BTRFS info (device loop2): turning off barriers [ 69.870279][ T4792] BTRFS info (device loop2): using free space tree [ 69.899081][ T4792] BTRFS info (device loop2): has skinny extents [ 70.046849][ T4806] loop3: detected capacity change from 0 to 8192 [ 70.376451][ T4839] loop4: detected capacity change from 0 to 4096 [ 70.449691][ T4837] loop1: detected capacity change from 0 to 32768 [ 70.486598][ T4839] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 70.513588][ T4806] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 70.534632][ T26] audit: type=1800 audit(1770915228.951:5): pid=4837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.202" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 70.592744][ T4806] REISERFS (device loop3): using journaled data mode [ 70.599562][ T4806] reiserfs: using flush barriers [ 70.644901][ T4806] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 70.683971][ T4839] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 70.706014][ T4839] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 70.722362][ T4839] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 70.735734][ T4806] REISERFS (device loop3): checking transaction log (loop3) [ 70.771287][ T4806] REISERFS (device loop3): Using r5 hash to sort names [ 70.780378][ T4839] ntfs: volume version 3.1. [ 70.803336][ T4806] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 70.876215][ T4839] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 70.900926][ T4806] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 70.979884][ T4839] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 71.157562][ T4190] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 71.227378][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 71.367562][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.374192][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.629319][ T4867] sock: sock_timestamping_bind_phc: sock not bind to device [ 71.658311][ T4860] EXT4-fs warning (device loop2): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 71.670192][ T4860] EXT4-fs warning (device loop2): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 71.857594][ T4875] Zero length message leads to an empty skb [ 72.134262][ T4890] IPVS: Error connecting to the multicast addr [ 72.176535][ T4892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.710303][ T4456] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.743755][ T4920] SQUASHFS error: zlib decompression failed, data probably corrupt [ 72.780204][ T4920] SQUASHFS error: Failed to read block 0x9b: -5 [ 72.799242][ T4920] SQUASHFS error: Unable to read metadata cache entry [99] [ 72.806946][ T4920] SQUASHFS error: Unable to read inode 0x127 [ 73.137401][ T4456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.171322][ T4456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.207107][ T4456] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 73.236050][ T4456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.272865][ T4456] usb 4-1: config 0 descriptor?? [ 73.397151][ T4926] set_capacity_and_notify: 5 callbacks suppressed [ 73.397165][ T4926] loop1: detected capacity change from 0 to 32768 [ 73.517979][ T4926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.243 (4926) [ 73.536936][ T4453] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 73.557903][ T4453] Bluetooth: hci4: Injecting HCI hardware error event [ 73.572253][ T4202] Bluetooth: hci4: hardware error 0x00 [ 73.583195][ T4929] loop4: detected capacity change from 0 to 32768 [ 73.585975][ T4926] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 73.621282][ T4926] BTRFS info (device loop1): setting nodatacow, compression disabled [ 73.630786][ T4926] BTRFS info (device loop1): disabling tree log [ 73.644317][ T4926] BTRFS info (device loop1): turning on sync discard [ 73.652001][ T4926] BTRFS error (device loop1): unrecognized compression value zs [ 73.665548][ T4926] BTRFS error (device loop1): open_ctree failed: -22 [ 73.712620][ T4929] [ 73.712620][ T4929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.712620][ T4929] [ 73.756064][ T4177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4177) [ 73.770279][ T4456] sony 0003:1345:3008.0002: unbalanced collection at end of report description [ 73.790697][ T4456] sony 0003:1345:3008.0002: parse failed [ 73.806755][ T26] audit: type=1800 audit(1770915232.221:6): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.244" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 73.811208][ T4456] sony: probe of 0003:1345:3008.0002 failed with error -22 [ 73.842907][ T4929] [ 73.842907][ T4929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.842907][ T4929] [ 73.870843][ T4929] [ 73.870843][ T4929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.870843][ T4929] [ 73.981663][ T277] [ 73.981663][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 73.981663][ T277] [ 74.048794][ T4190] [ 74.048794][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.048794][ T4190] [ 74.075002][ T4229] usb 4-1: USB disconnect, device number 4 [ 74.100557][ T4190] [ 74.100557][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.100557][ T4190] [ 74.455644][ T4941] loop2: detected capacity change from 0 to 40427 [ 74.550733][ T4941] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 74.581047][ T4941] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.589451][ T4941] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 74.602646][ T4976] loop0: detected capacity change from 0 to 1024 [ 74.657278][ T4979] usb usb7: usbfs: process 4979 (syz.1.268) did not claim interface 0 before use [ 74.725501][ T4941] F2FS-fs (loop2): invalid crc value [ 74.785162][ T4941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.952881][ T4941] F2FS-fs (loop2): Start checkpoint disabled! [ 75.025903][ T4992] loop0: detected capacity change from 0 to 512 [ 75.057484][ T4941] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.075750][ T4941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 75.127909][ T4992] EXT4-fs (loop0): Ignoring removed nobh option [ 75.373468][ T4992] EXT4-fs (loop0): Test dummy encryption mode enabled [ 75.389762][ T4977] loop4: detected capacity change from 0 to 32768 [ 75.441868][ T4992] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 1: comm syz.0.272: invalid block [ 75.497117][ T4992] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.272: couldn't read orphan inode 11 (err -117) [ 75.518907][ T4977] XFS (loop4): Mounting V5 Filesystem [ 75.529926][ T4992] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 75.748026][ T4977] XFS (loop4): Ending clean mount [ 75.832606][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 75.836236][ T5019] loop1: detected capacity change from 0 to 4096 [ 75.875458][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 75.924006][ T4190] XFS (loop4): Unmounting Filesystem [ 76.012076][ T5036] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.230183][ T4258] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.436227][ T5031] loop2: detected capacity change from 0 to 32768 [ 76.470176][ T4258] usb 1-1: Using ep0 maxpacket: 8 [ 76.485437][ T7] cfg80211: failed to load regulatory.db [ 76.586646][ T5031] XFS (loop2): Mounting V5 Filesystem [ 76.593260][ T4258] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 76.606504][ T4258] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 76.622414][ T4258] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.629417][ T4258] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 76.641193][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.668281][ T4258] usb 1-1: config 0 descriptor?? [ 76.673095][ T5031] XFS (loop2): Ending clean mount [ 76.746815][ T5031] XFS (loop2): Quotacheck needed: Please wait. [ 76.849879][ T5068] loop3: detected capacity change from 0 to 1024 [ 76.979265][ T5031] XFS (loop2): Quotacheck: Done. [ 77.009073][ T5068] hfsplus: bad catalog entry type [ 77.095576][ T615] hfsplus: b-tree write err: -5, ino 4 [ 77.186931][ T4258] gt683r_led 0003:1770:FF00.0003: ignoring exceeding usage max [ 77.208919][ T4258] gt683r_led 0003:1770:FF00.0003: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 77.290000][ T5066] loop4: detected capacity change from 0 to 32768 [ 77.335471][ T4185] XFS (loop2): Unmounting Filesystem [ 77.385389][ T4453] usb 1-1: USB disconnect, device number 3 [ 77.408433][ T4456] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 77.460794][ T5073] fido_id[5073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 77.690489][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.940183][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 78.143216][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.220373][ T7] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.240678][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.268772][ T7] usb 4-1: Product: syz [ 78.290784][ T7] usb 4-1: Manufacturer: syz [ 78.299369][ T7] usb 4-1: SerialNumber: syz [ 78.317173][ T7] r8152-cfgselector 4-1: config 0 descriptor?? [ 78.355017][ T5099] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.421083][ T5085] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 78.421083][ T5085] [ 78.484978][ T5085] ERROR: (device loop1): remounting filesystem as read-only [ 78.510700][ T5085] xtLookup: xtSearch returned -5 [ 78.519615][ T5099] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 78.580344][ T7] r8152-cfgselector 4-1: Unknown version 0x0000 [ 78.643839][ T7] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 78.702871][ T5124] set_capacity_and_notify: 2 callbacks suppressed [ 78.702884][ T5124] loop2: detected capacity change from 0 to 1024 [ 78.818014][ T5130] loop4: detected capacity change from 0 to 64 [ 78.848290][ T4258] usb 4-1: USB disconnect, device number 5 [ 78.888076][ T9] hfsplus: b-tree write err: -5, ino 4 [ 79.128530][ T5148] loop1: detected capacity change from 0 to 8 [ 79.247184][ T5148] SQUASHFS error: lzo decompression failed, data probably corrupt [ 79.256753][ T5159] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 79.279238][ T5148] SQUASHFS error: Failed to read block 0x202: -5 [ 79.298196][ T5148] SQUASHFS error: Unable to read metadata cache entry [200] [ 79.340417][ T4258] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 79.670221][ T4258] usb 1-1: not running at top speed; connect to a high speed hub [ 79.720337][ T4456] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 79.750425][ T4258] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.759520][ T4258] usb 1-1: config 1 has no interface number 1 [ 79.784706][ T4258] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 79.980364][ T4258] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.989534][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.025048][ T4258] usb 1-1: Product: syz [ 80.030020][ T4258] usb 1-1: Manufacturer: syz [ 80.056194][ T4258] usb 1-1: SerialNumber: syz [ 80.103749][ T5175] loop1: detected capacity change from 0 to 32768 [ 80.120490][ T4456] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.141684][ T4456] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 80.160106][ T4456] usb 3-1: config 0 interface 0 has no altsetting 0 [ 80.176405][ T4456] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 80.202940][ T5204] netlink: 'syz.3.353': attribute type 8 has an invalid length. [ 80.215211][ T4456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.233730][ T5204] netlink: 'syz.3.353': attribute type 3 has an invalid length. [ 80.251254][ T4456] usb 3-1: config 0 descriptor?? [ 80.270633][ T5173] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 80.277243][ T5175] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 80.278165][ T5204] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.353'. [ 80.336966][ T5175] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 80.364138][ T5209] loop3: detected capacity change from 0 to 256 [ 80.420842][ T5209] exfat: Deprecated parameter 'namecase' [ 80.440248][ T5209] exfat: Deprecated parameter 'utf8' [ 80.491517][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 80.500156][ T21] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 80.500254][ T4258] usb 1-1: failed to enable PITCH for EP 0x82 [ 80.518704][ T5209] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 80.638653][ T4258] usb 1-1: USB disconnect, device number 4 [ 80.731252][ T5215] loop1: detected capacity change from 0 to 4096 [ 80.788570][ T4456] petalynx 0003:18B1:0037.0004: hidraw0: USB HID v0.03 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 80.836262][ T5215] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 80.930499][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.959873][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.985977][ T5225] loop0: detected capacity change from 0 to 1024 [ 81.022370][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.067965][ T5225] EXT4-fs (loop0): Ignoring removed nobh option [ 81.090129][ T21] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 81.130149][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.137290][ T5225] EXT4-fs (loop0): Ignoring removed bh option [ 81.173626][ T4456] usb 3-1: USB disconnect, device number 2 [ 81.175579][ T5225] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.197992][ T21] usb 5-1: config 0 descriptor?? [ 81.235272][ T5225] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 81.260207][ T4229] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.272793][ T151] ntfs3: loop1: ntfs3_write_inode r=1a failed, -22. [ 81.299256][ T4184] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 81.308498][ T4184] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 81.349008][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 81.540164][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 81.568402][ T5245] loop0: detected capacity change from 0 to 1024 [ 81.625945][ T5245] EXT4-fs (loop0): inline encryption not supported [ 81.663962][ T5245] EXT4-fs (loop0): Ignoring removed oldalloc option [ 81.686569][ T5245] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.718101][ T21] glorious 0003:258A:0036.0005: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0 [ 81.746752][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,inlinecrypt,oldalloc,data_err=ignore,nojournal_checksum,nodelalloc,grpquota,noblock_validity,min_batch_time=0x0000000000000000,nombcache,errors=remount-ro,. Quota mode: writeback. [ 81.834449][ T4229] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 81.846985][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.877090][ T4229] usb 4-1: Product: syz [ 81.899375][ T4229] usb 4-1: Manufacturer: syz [ 81.931454][ T4229] usb 4-1: SerialNumber: syz [ 81.949457][ T4229] usb 4-1: config 0 descriptor?? [ 81.956912][ T4258] usb 5-1: USB disconnect, device number 2 [ 82.009676][ T4229] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 82.244139][ T5278] loop1: detected capacity change from 0 to 512 [ 82.333486][ T5278] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.349174][ T5278] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.580429][ T5294] loop2: detected capacity change from 0 to 4096 [ 82.673143][ T4229] gspca_stk1135: reg_w 0x3 err -71 [ 82.679447][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.699569][ T4229] gspca_stk1135: Sensor write failed [ 82.723563][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.747700][ T4229] gspca_stk1135: Sensor write failed [ 82.763546][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.769935][ T4229] gspca_stk1135: Sensor read failed [ 82.813248][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.833770][ T4229] gspca_stk1135: Sensor read failed [ 82.842742][ T4229] gspca_stk1135: Detected sensor type unknown (0x0) [ 82.862472][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.911192][ T4229] gspca_stk1135: Sensor read failed [ 82.930975][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.954660][ T4229] gspca_stk1135: Sensor read failed [ 82.963908][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 82.984197][ T4229] gspca_stk1135: Sensor write failed [ 82.994351][ T4229] gspca_stk1135: serial bus timeout: status=0x00 [ 83.010234][ T4229] gspca_stk1135: Sensor write failed [ 83.021587][ T4229] stk1135: probe of 4-1:0.0 failed with error -71 [ 83.056924][ T4229] usb 4-1: USB disconnect, device number 6 [ 83.274215][ T5326] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 83.334393][ T5326] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 83.361231][ T5332] exfat: Deprecated parameter 'utf8' [ 83.410162][ T5326] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 83.418344][ T5332] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 83.497169][ T5326] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 83.567237][ T5326] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.633982][ T5326] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.697700][ T5326] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.398: bg 0: block 34: padding at end of block bitmap is not set [ 83.725738][ T5326] Quota error (device loop4): write_blk: dquota write failed [ 83.778783][ T5326] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 83.809392][ T5326] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.398: Failed to acquire dquot type 1 [ 83.897874][ T5326] EXT4-fs (loop4): 1 truncate cleaned up [ 83.905756][ T5342] set_capacity_and_notify: 3 callbacks suppressed [ 83.905770][ T5342] loop2: detected capacity change from 0 to 4096 [ 83.908712][ T5326] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x000000000000000a,nodelalloc,,errors=continue. Quota mode: writeback. [ 83.946416][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.986862][ T5342] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 84.056889][ T5342] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 84.068448][ T5355] loop0: detected capacity change from 0 to 256 [ 84.123380][ T5342] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 84.156224][ T5342] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 84.247674][ T5342] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 84.293663][ T5342] ntfs: volume version 3.1. [ 84.307529][ T5342] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 84.325367][ T5342] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 84.405137][ T5342] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 84.534182][ T5371] loop4: detected capacity change from 0 to 512 [ 84.602219][ T5373] loop0: detected capacity change from 0 to 512 [ 84.617805][ T5337] loop1: detected capacity change from 0 to 40427 [ 84.618832][ T5371] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.652658][ T5373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.707320][ T5337] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 84.767832][ T5337] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.802898][ T5373] EXT4-fs (loop0): 1 truncate cleaned up [ 84.810369][ T5337] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 84.844501][ T5373] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,bsdgroups,noload,,errors=continue. Quota mode: none. [ 84.896978][ T5337] F2FS-fs (loop1): invalid crc value [ 84.938914][ T5371] EXT4-fs (loop4): 1 orphan inode deleted [ 84.988766][ T5337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.002262][ T5371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.070509][ T5371] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.101963][ T5385] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.113460][ T5385] exFAT-fs (loop2): unable to read boot sector [ 85.119634][ T5385] exFAT-fs (loop2): failed to read boot sector [ 85.127782][ T5385] exFAT-fs (loop2): failed to recognize exfat type [ 85.233450][ T5337] F2FS-fs (loop1): Start checkpoint disabled! [ 85.275912][ T5337] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.308173][ T5337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 85.540199][ T4258] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.784590][ T4258] usb 1-1: Using ep0 maxpacket: 32 [ 85.900428][ T4258] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.917807][ T4258] usb 1-1: config 0 has no interface number 0 [ 85.943638][ T4258] usb 1-1: config 0 interface 184 has no altsetting 0 [ 86.121524][ T4258] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.135585][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 86.148029][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.167721][ T5425] IPVS: Error joining to the multicast group [ 86.180201][ T4258] usb 1-1: Product: syz [ 86.184499][ T4258] usb 1-1: Manufacturer: syz [ 86.189422][ T4258] usb 1-1: SerialNumber: syz [ 86.228987][ T4258] usb 1-1: config 0 descriptor?? [ 86.281293][ T4258] smsc75xx v1.0.0 [ 86.331053][ T5432] loop4: detected capacity change from 0 to 512 [ 86.435206][ T5432] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.445: inode has both inline data and extents flags [ 86.504689][ T5421] loop3: detected capacity change from 0 to 32768 [ 86.515292][ T5432] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.445: couldn't read orphan inode 15 (err -117) [ 86.531351][ T5432] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,prjquota,auto_da_alloc,nobarrier,noblock_validity,,errors=continue. Quota mode: writeback. [ 86.651595][ T5421] XFS (loop3): Mounting V5 Filesystem [ 86.675208][ T5453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 86.759077][ T5421] XFS (loop3): Ending clean mount [ 86.924465][ T4258] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.970435][ T4258] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 87.007503][ T4258] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 87.038723][ T4258] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 87.087760][ T4258] usb 1-1: USB disconnect, device number 5 [ 87.217070][ T4193] XFS (loop3): Unmounting Filesystem [ 87.678332][ T5500] netlink: 5 bytes leftover after parsing attributes in process `syz.4.475'. [ 87.838596][ T5469] loop2: detected capacity change from 0 to 40427 [ 87.895419][ T5469] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 87.917633][ T5469] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.930357][ T4229] Bluetooth: hci0: command 0x041f tx timeout [ 87.976595][ T5469] F2FS-fs (loop2): invalid crc value [ 88.059179][ T5469] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 88.146409][ T5530] loop3: detected capacity change from 0 to 256 [ 88.154755][ T5528] binder: 5527:5528 unknown command 0 [ 88.185090][ T5528] binder: 5527:5528 ioctl c0306201 2000000002c0 returned -22 [ 88.250683][ T5530] exfat: Deprecated parameter 'utf8' [ 88.296066][ T5469] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 88.299645][ T5536] delete_channel: no stack [ 88.308269][ T5469] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.330696][ T5530] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 88.449907][ T5534] loop4: detected capacity change from 0 to 4096 [ 88.566710][ T5534] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 88.596043][ T5540] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.632641][ T5534] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 88.657426][ T5540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 88.665245][ T5540] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.491: bad orphan inode 15 [ 88.678421][ T5540] ext4_test_bit(bit=14, block=18) = 1 [ 88.684743][ T5540] is_bad_inode(inode)=0 [ 88.689116][ T5540] NEXT_ORPHAN(inode)=1023 [ 88.693528][ T5540] max_ino=32 [ 88.696818][ T5540] i_nlink=0 [ 88.705865][ T5540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.491: bg 0: block 440: padding at end of block bitmap is not set [ 88.743459][ T5540] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 88.752851][ T5540] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.902779][ T5521] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.013948][ T5556] set_capacity_and_notify: 2 callbacks suppressed [ 89.013962][ T5556] loop4: detected capacity change from 0 to 512 [ 89.092571][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 89.261319][ T5556] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.497: Invalid block bitmap block 0 in block_group 0 [ 89.370218][ T5556] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 89.462708][ T5556] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.497: attempt to clear invalid blocks 983261 len 1 [ 89.537289][ T5556] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.497: invalid indirect mapped block 2683928664 (level 0) [ 89.580964][ T5556] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.497: Invalid inode table block 0 in block_group 0 [ 89.599356][ T5552] loop3: detected capacity change from 0 to 32768 [ 89.636039][ T5556] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 89.651391][ T5576] loop1: detected capacity change from 0 to 512 [ 89.657806][ T5556] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 89.705318][ T5556] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.497: Invalid inode table block 0 in block_group 0 [ 89.730237][ T5576] EXT4-fs (loop1): Ignoring removed orlov option [ 89.735985][ T5556] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 89.746401][ T5576] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 89.748831][ T5556] EXT4-fs error (device loop4): ext4_truncate:4279: inode #13: comm syz.4.497: mark_inode_dirty error [ 89.760284][ T5556] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 89.777793][ T5556] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.497: Invalid inode table block 0 in block_group 0 [ 89.802228][ T5556] EXT4-fs (loop4): 1 truncate cleaned up [ 89.809405][ T5552] XFS (loop3): Mounting V5 Filesystem [ 89.848403][ T5556] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 89.904006][ T5576] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.505: corrupted in-inode xattr [ 90.018811][ T5593] loop2: detected capacity change from 0 to 1024 [ 90.020206][ T5552] XFS (loop3): Ending clean mount [ 90.068195][ T5576] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.505: couldn't read orphan inode 15 (err -117) [ 90.136949][ T5552] XFS (loop3): Quotacheck needed: Please wait. [ 90.178588][ T5576] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,max_batch_time=0x0000000000000428,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 90.279385][ T5552] XFS (loop3): Quotacheck: Done. [ 90.471299][ T5607] loop4: detected capacity change from 0 to 1024 [ 90.579294][ T4193] XFS (loop3): Unmounting Filesystem [ 90.665380][ T615] hfsplus: b-tree write err: -5, ino 4 [ 90.858752][ T5622] loop4: detected capacity change from 0 to 512 [ 90.910612][ T5622] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.946348][ T5622] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.989112][ T5622] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.516: bad orphan inode 131083 [ 91.166336][ T5622] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,journal_dev=0x0000000000000002,,errors=continue. Quota mode: none. [ 91.332172][ T5612] loop1: detected capacity change from 0 to 32768 [ 91.337376][ T5634] loop3: detected capacity change from 0 to 256 [ 91.392737][ T5600] loop0: detected capacity change from 0 to 40427 [ 91.402210][ T5636] loop4: detected capacity change from 0 to 1024 [ 91.450265][ T5634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 91.471253][ T5612] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.512 (5612) [ 91.502657][ T5600] F2FS-fs (loop0): invalid crc value [ 91.531447][ T5644] exfat: Deprecated parameter 'namecase' [ 91.544343][ T5600] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.570534][ T5612] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.593124][ T4803] hfsplus: b-tree write err: -5, ino 4 [ 91.629357][ T5644] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 91.630175][ T5612] BTRFS info (device loop1): setting nodatacow, compression disabled [ 91.681874][ T5612] BTRFS info (device loop1): force clearing of disk cache [ 91.689040][ T5612] BTRFS info (device loop1): enabling ssd optimizations [ 91.800750][ T5612] BTRFS info (device loop1): using spread ssd allocation scheme [ 91.808772][ T5600] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.826972][ T5612] BTRFS info (device loop1): turning off barriers [ 91.849189][ T5612] BTRFS info (device loop1): disabling free space tree [ 91.942290][ T5612] BTRFS info (device loop1): not using ssd optimizations [ 91.949692][ T5612] BTRFS info (device loop1): not using spread ssd allocation scheme [ 92.013420][ T5612] BTRFS info (device loop1): has skinny extents [ 92.057845][ T4188] attempt to access beyond end of device [ 92.057845][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 92.325869][ T5657] ntfs3: loop2: failed to convert "0000" to cp949 [ 92.351293][ T5612] BTRFS info (device loop1): clearing free space tree [ 92.358232][ T5612] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 92.371113][ T5612] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 92.408068][ T5657] ntfs3: loop2: failed to convert name for inode 1e. [ 92.527482][ T26] audit: type=1800 audit(1770915506.935:7): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 92.932209][ T5660] XFS (loop3): Mounting V5 Filesystem [ 93.080427][ T5655] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 93.089928][ T5655] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2 [ 93.120590][ T5706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.530'. [ 93.124269][ T5660] XFS (loop3): Ending clean mount [ 93.143220][ T5655] F2FS-fs (loop4): invalid crc value [ 93.158566][ T5660] XFS (loop3): Quotacheck needed: Please wait. [ 93.181221][ T5709] tipc: Started in network mode [ 93.187491][ T5709] tipc: Node identity 0000000000002d5f0000000000000001, cluster identity 4711 [ 93.229904][ T5655] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.269471][ T5709] tipc: Enabling of bearer rejected, failed to enable media [ 93.297201][ T5660] XFS (loop3): Quotacheck: Done. [ 93.417901][ T4193] XFS (loop3): Unmounting Filesystem [ 93.418837][ T5655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.591893][ T4190] attempt to access beyond end of device [ 93.591893][ T4190] loop4: rw=2049, want=45104, limit=40427 [ 93.698925][ T5723] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 93.728040][ T5723] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.854174][ T5723] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 93.854259][ T5723] System zones: 0-1, 3-36 [ 93.924934][ T5723] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,delalloc,auto_da_alloc=0x0000000000000006,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 94.070862][ T26] audit: type=1800 audit(1770915508.485:8): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.537" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 94.443950][ T5765] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 94.472815][ T5765] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 94.479350][ T5765] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 94.511153][ T5764] set_capacity_and_notify: 6 callbacks suppressed [ 94.511168][ T5764] loop0: detected capacity change from 0 to 2048 [ 94.559726][ T5765] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 94.568221][ T5771] loop1: detected capacity change from 0 to 8 [ 94.580342][ T5765] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 94.611925][ T5765] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 94.613408][ T5764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.648029][ T5765] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 94.697723][ T5765] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 94.715962][ T5765] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 94.749784][ T5765] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 94.766225][ T5765] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 94.785650][ T5765] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 94.808505][ T5765] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 94.830130][ T5765] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 94.839825][ T5785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.564'. [ 94.854722][ T5765] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 94.869073][ T5765] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 94.894339][ T5765] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 94.929598][ T5765] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 94.953293][ T5765] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 95.070554][ T5794] loop2: detected capacity change from 0 to 1024 [ 95.149403][ T5794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.331840][ T5808] loop4: detected capacity change from 0 to 8 [ 95.483468][ T5808] SQUASHFS error: Failed to read block 0x2d7: -5 [ 95.489836][ T5808] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 95.618772][ T5822] loop1: detected capacity change from 0 to 4096 [ 95.670263][ T4456] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 95.679466][ T5822] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 95.838691][ T5822] ntfs: (device loop1): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 95.876754][ T5822] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 95.907287][ T5822] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 96.011140][ T5822] ntfs: volume version 3.1. [ 96.030741][ T5822] ntfs: (device loop1): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 96.039636][ T5822] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 96.070719][ T5822] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 96.120576][ T4456] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 96.150105][ T4456] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.164498][ T5848] loop4: detected capacity change from 0 to 16 [ 96.195279][ T4456] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 96.201708][ T5844] loop2: detected capacity change from 0 to 8192 [ 96.212638][ T4456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.239242][ T4456] usb 1-1: config 0 descriptor?? [ 96.256002][ T5844] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 96.266295][ T5844] REISERFS (device loop2): using ordered data mode [ 96.272917][ T5844] reiserfs: using flush barriers [ 96.289181][ T5815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.305516][ T5844] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.322319][ T5848] erofs: (device loop4): mounted with root inode @ nid 36. [ 96.336576][ T5839] loop3: detected capacity change from 0 to 32768 [ 96.380506][ T5844] REISERFS (device loop2): checking transaction log (loop2) [ 96.391975][ T5848] erofs: (device loop4): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 10 of nid 36 [ 96.426306][ T5844] REISERFS (device loop2): Using r5 hash to sort names [ 96.437252][ T5844] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 96.707173][ T5863] loop1: detected capacity change from 0 to 256 [ 96.819003][ T4456] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 96.841688][ T5870] loop2: detected capacity change from 0 to 1024 [ 96.860444][ T4456] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 96.877450][ T4456] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 96.878883][ T5863] FAT-fs (loop1): Directory bread(block 64) failed [ 96.885519][ T4456] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 96.899270][ T4456] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 96.909306][ T5863] FAT-fs (loop1): Directory bread(block 65) failed [ 96.934808][ T5863] FAT-fs (loop1): Directory bread(block 66) failed [ 96.948418][ T4456] elecom 0003:056E:00E6.0006: hidraw0: USB HID v0.06 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 96.953254][ T5863] FAT-fs (loop1): Directory bread(block 67) failed [ 96.984139][ T5870] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.010105][ T5863] FAT-fs (loop1): Directory bread(block 68) failed [ 97.016661][ T5863] FAT-fs (loop1): Directory bread(block 69) failed [ 97.023690][ T5863] FAT-fs (loop1): Directory bread(block 70) failed [ 97.030347][ T5863] FAT-fs (loop1): Directory bread(block 71) failed [ 97.045732][ T21] usb 1-1: USB disconnect, device number 6 [ 97.057852][ T5863] FAT-fs (loop1): Directory bread(block 72) failed [ 97.065360][ T5863] FAT-fs (loop1): Directory bread(block 73) failed [ 97.175707][ T5880] fido_id[5880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 97.343742][ T5882] autofs4:pid:5882:autofs_fill_super: called with bogus options [ 97.908220][ T5918] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 98.177145][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 98.194323][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 98.211154][ T5938] netlink: 'syz.1.631': attribute type 14 has an invalid length. [ 98.220907][ T5938] netlink: 'syz.1.631': attribute type 11 has an invalid length. [ 98.364102][ T5703] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.621490][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 98.652520][ T5968] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.740429][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.765086][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.790021][ T5703] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 98.799348][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.828432][ T5703] usb 4-1: config 0 descriptor?? [ 98.889104][ T5974] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.929480][ T5974] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.159485][ T5970] XFS (loop2): Mounting V5 Filesystem [ 99.237921][ T5970] XFS (loop2): Ending clean mount [ 99.315000][ T5703] wacom 0003:056A:0000.0007: ignoring exceeding usage max [ 99.342037][ T5703] wacom 0003:056A:0000.0007: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 99.351893][ T5704] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 99.363189][ T5703] wacom 0003:056A:0000.0007: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 99.379877][ T5703] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0007/input/input9 [ 99.396664][ T4185] XFS (loop2): Unmounting Filesystem [ 99.428093][ T5980] XFS (loop1): Mounting V5 Filesystem [ 99.522725][ T5980] XFS (loop1): Ending clean mount [ 99.593240][ T4456] usb 4-1: USB disconnect, device number 7 [ 99.593835][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 99.658333][ T4184] XFS (loop1): Unmounting Filesystem [ 99.679487][ T5999] fido_id[5999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 99.754876][ T5704] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 99.766179][ T5704] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.777754][ T5704] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.789165][ T5704] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 99.802835][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.975243][ T5704] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 99.991126][ T5704] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 100.017084][ T5704] usb 1-1: Product: syz [ 100.040664][ T5704] usb 1-1: Manufacturer: syz [ 100.055532][ T5704] usb 1-1: SerialNumber: syz [ 100.065524][ T5704] usb 1-1: config 0 descriptor?? [ 100.121833][ T5704] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 100.154813][ T5704] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 100.401249][ T4456] usb 1-1: USB disconnect, device number 7 [ 100.411684][ T4456] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 100.462412][ T6031] vivid-001: disconnect [ 100.473622][ T6030] vivid-001: reconnect [ 100.638091][ T6035] set_capacity_and_notify: 7 callbacks suppressed [ 100.638105][ T6035] loop3: detected capacity change from 0 to 64 [ 100.715830][ T6024] loop2: detected capacity change from 0 to 32768 [ 100.718810][ T6027] loop4: detected capacity change from 0 to 32768 [ 100.749871][ T6035] attempt to access beyond end of device [ 100.749871][ T6035] loop3: rw=0, want=268435470, limit=64 [ 100.767884][ T6035] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 100.827439][ T6024] jfs: Unrecognized mount option "errops=remount-ro" or missing value [ 100.868137][ T6027] XFS (loop4): Mounting V5 Filesystem [ 101.053054][ T26] audit: type=1326 audit(1770915515.465:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bb3a6f79 code=0x7ffc0000 [ 101.076334][ T26] audit: type=1326 audit(1770915515.465:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bb3a6f79 code=0x7ffc0000 [ 101.081713][ T6027] XFS (loop4): Ending clean mount [ 101.128232][ T6052] loop3: detected capacity change from 0 to 1024 [ 101.134978][ T26] audit: type=1326 audit(1770915515.535:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f50bb3a6f79 code=0x7ffc0000 [ 101.166345][ T26] audit: type=1326 audit(1770915515.535:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50bb3a6ce2 code=0x7ffc0000 [ 101.240291][ T26] audit: type=1326 audit(1770915515.535:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50bb36784e code=0x7ffc0000 [ 101.301510][ T26] audit: type=1326 audit(1770915515.535:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f50bb3a6da7 code=0x7ffc0000 [ 101.350566][ T26] audit: type=1326 audit(1770915515.535:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50bb36784e code=0x7ffc0000 [ 101.387447][ T4190] XFS (loop4): Unmounting Filesystem [ 101.391850][ T6066] loop2: detected capacity change from 0 to 256 [ 101.399405][ T6052] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.437232][ T6052] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.495778][ T26] audit: type=1326 audit(1770915515.535:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50bb3a6c0b code=0x7ffc0000 [ 101.539576][ T26] audit: type=1326 audit(1770915515.645:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f50bb36784e code=0x7ffc0000 [ 101.556749][ T6066] exfat: Deprecated parameter 'namecase' [ 101.566193][ T26] audit: type=1326 audit(1770915515.645:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f50bb36784e code=0x7ffc0000 [ 101.589711][ T6052] JBD2: no valid journal superblock found [ 101.607287][ T6066] exfat: Deprecated parameter 'namecase' [ 101.625506][ T6052] EXT4-fs (loop3): error loading journal [ 101.661510][ T6066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 101.861646][ T6077] loop3: detected capacity change from 0 to 512 [ 102.016278][ T6077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.112083][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.691'. [ 102.132244][ T6077] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.310678][ T6099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.696'. [ 102.311528][ T6101] loop2: detected capacity change from 0 to 256 [ 102.325269][ T6077] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.686: directory missing '..' [ 102.417023][ T6069] loop0: detected capacity change from 0 to 32768 [ 102.460406][ T6103] loop4: detected capacity change from 0 to 4096 [ 102.523267][ T6101] FAT-fs (loop2): Directory bread(block 64) failed [ 102.529841][ T6101] FAT-fs (loop2): Directory bread(block 65) failed [ 102.544981][ T6069] JBD2: Ignoring recovery information on journal [ 102.588203][ T6103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.603279][ T6069] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 102.620995][ T6069] JBD2: bad block at offset 32 [ 102.630492][ T6101] FAT-fs (loop2): Directory bread(block 66) failed [ 102.637095][ T6101] FAT-fs (loop2): Directory bread(block 67) failed [ 102.701135][ T6103] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.697: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 102.728004][ T6122] device bridge_slave_0 left promiscuous mode [ 102.732440][ T6069] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.750681][ T6101] FAT-fs (loop2): Directory bread(block 68) failed [ 102.760323][ T6101] FAT-fs (loop2): Directory bread(block 69) failed [ 102.771683][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.783938][ T6101] FAT-fs (loop2): Directory bread(block 70) failed [ 102.796328][ T6101] FAT-fs (loop2): Directory bread(block 71) failed [ 102.804261][ T6101] FAT-fs (loop2): Directory bread(block 72) failed [ 102.811674][ T6101] FAT-fs (loop2): Directory bread(block 73) failed [ 102.829861][ T6103] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.697: directory missing '..' [ 102.854950][ T6101] attempt to access beyond end of device [ 102.854950][ T6101] loop2: rw=524288, want=1260, limit=256 [ 102.925250][ T6101] attempt to access beyond end of device [ 102.925250][ T6101] loop2: rw=0, want=1260, limit=256 [ 102.973320][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 103.146811][ T6131] loop0: detected capacity change from 0 to 2048 [ 103.206970][ T6131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.216167][ T6135] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 103.234225][ T6128] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 103.240883][ T6137] netlink: 'syz.2.710': attribute type 2 has an invalid length. [ 103.307785][ T6139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.332134][ T6128] ntfs3: loop3: ino=5, "/" directory corrupted [ 103.332217][ T6128] ntfs3: loop3: ino=5, "/" directory corrupted [ 103.503890][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 104.676125][ T6214] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 104.683227][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.694874][ T6214] vhci_hcd vhci_hcd.0: Device attached [ 104.715878][ T6185] XFS (loop1): Mounting V5 Filesystem [ 104.720280][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.743445][ T6183] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.734 (6183) [ 104.814621][ T6185] XFS (loop1): Ending clean mount [ 104.824329][ T6183] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 104.827367][ T6185] XFS (loop1): Quotacheck needed: Please wait. [ 104.844135][ T6183] BTRFS info (device loop3): force zlib compression, level 3 [ 104.851973][ T6183] BTRFS info (device loop3): force clearing of disk cache [ 104.859107][ T6183] BTRFS info (device loop3): setting nodatasum [ 104.866525][ T6183] BTRFS info (device loop3): allowing degraded mounts [ 104.873546][ T6183] BTRFS info (device loop3): enabling disk space caching [ 104.891034][ T6183] BTRFS info (device loop3): disk space caching is enabled [ 104.898273][ T6183] BTRFS info (device loop3): has skinny extents [ 104.909334][ T6185] XFS (loop1): Quotacheck: Done. [ 104.910582][ T4451] vhci_hcd: vhci_device speed not set [ 104.990285][ T4451] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 104.997924][ T4456] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 105.020428][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 105.033284][ T4184] XFS (loop1): Unmounting Filesystem [ 105.180921][ T21] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.189043][ T21] usb 5-1: config 0 has no interface number 0 [ 105.222068][ T6183] BTRFS info (device loop3): clearing free space tree [ 105.233596][ T6183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.276625][ T6244] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.317149][ T6183] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.400687][ T4456] usb 3-1: config 0 has no interfaces? [ 105.406296][ T4456] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.419139][ T6183] BTRFS info (device loop3): balance: start -s [ 105.428379][ T21] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.448982][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.461042][ T4456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.501104][ T21] usb 5-1: Product: syz [ 105.505329][ T21] usb 5-1: Manufacturer: syz [ 105.510027][ T21] usb 5-1: SerialNumber: syz [ 105.523129][ T4456] usb 3-1: config 0 descriptor?? [ 105.551484][ T21] usb 5-1: config 0 descriptor?? [ 105.580014][ T6183] BTRFS info (device loop3): relocating block group 1048576 flags system [ 105.593548][ T21] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.709306][ T6183] BTRFS info (device loop3): balance: ended with status: 0 [ 105.777783][ T6215] vhci_hcd: unknown pdu 2 [ 105.783425][ T4196] usb 3-1: USB disconnect, device number 3 [ 105.805524][ T615] vhci_hcd: stop threads [ 105.824565][ T615] vhci_hcd: release socket [ 105.843005][ T615] vhci_hcd: disconnect device [ 105.847926][ T21] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.870560][ T4451] vhci_hcd: vhci_device speed not set [ 105.925382][ T21] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 106.226228][ T4196] usb 5-1: USB disconnect, device number 3 [ 106.232538][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 106.277925][ T4196] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 106.360750][ T4196] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 106.389789][ T4196] quatech2 5-1:0.51: device disconnected [ 106.999856][ T6275] set_capacity_and_notify: 3 callbacks suppressed [ 106.999870][ T6275] loop0: detected capacity change from 0 to 32768 [ 107.059657][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.088591][ T6275] XFS (loop0): Mounting V5 Filesystem [ 107.094966][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.110408][ T6312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.116175][ T6269] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.217264][ T6275] XFS (loop0): Ending clean mount [ 107.218310][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.237073][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.247671][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.255968][ T6306] loop1: detected capacity change from 0 to 32768 [ 107.274594][ T6275] XFS (loop0): Quotacheck needed: Please wait. [ 107.317906][ T6306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.777 (6306) [ 107.367880][ T6275] XFS (loop0): Quotacheck: Done. [ 107.383427][ T6306] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 107.420263][ T6306] BTRFS info (device loop1): setting nodatacow, compression disabled [ 107.430838][ T6306] BTRFS info (device loop1): turning on flush-on-commit [ 107.437811][ T6306] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 107.486030][ T6306] BTRFS info (device loop1): use lzo compression, level 0 [ 107.496394][ T4188] XFS (loop0): Unmounting Filesystem [ 107.500632][ T6269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.510860][ T6306] BTRFS info (device loop1): setting nodatasum [ 107.530762][ T6269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.540383][ T6306] BTRFS info (device loop1): use no compression [ 107.546999][ T6306] BTRFS info (device loop1): trying to use backup root at mount time [ 107.554211][ T6269] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 107.575756][ T6269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.584091][ T6306] BTRFS info (device loop1): max_inline at 0 [ 107.584112][ T6306] BTRFS info (device loop1): using free space tree [ 107.584126][ T6306] BTRFS info (device loop1): has skinny extents [ 107.636305][ T6269] usb 3-1: config 0 descriptor?? [ 107.767469][ T6336] loop3: detected capacity change from 0 to 64 [ 107.945396][ T6323] loop4: detected capacity change from 0 to 32768 [ 107.951647][ T9] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 107.974096][ T6306] BTRFS warning (device loop1): couldn't read tree root [ 107.983089][ T4274] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 107.985537][ T6323] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.780 (6323) [ 108.017199][ T6306] BTRFS warning (device loop1): couldn't read tree root [ 108.028789][ T6306] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 108.042791][ T6323] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 108.043868][ T6306] BTRFS warning (device loop1): couldn't read tree root [ 108.052548][ T6323] BTRFS info (device loop4): using free space tree [ 108.066097][ T6323] BTRFS info (device loop4): has skinny extents [ 108.121713][ T6306] BTRFS info (device loop1): enabling ssd optimizations [ 108.156047][ T6306] BTRFS info (device loop1): clearing free space tree [ 108.177753][ T6306] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.200672][ T6306] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.236644][ T6306] BTRFS info (device loop1): creating free space tree [ 108.256028][ T6306] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.270912][ T6306] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.312504][ T6323] BTRFS info (device loop4): enabling ssd optimizations [ 108.353203][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 108.353251][ T26] audit: type=1800 audit(1770915522.765:28): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.777" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 108.353560][ T6269] hid-led: probe of 0003:0FC5:B080.0008 failed with error -71 [ 108.404987][ T6269] usb 3-1: USB disconnect, device number 4 [ 108.434248][ T6376] loop3: detected capacity change from 0 to 8 [ 108.477972][ T6378] loop0: detected capacity change from 0 to 1024 [ 108.597674][ T6378] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.617411][ T6376] SQUASHFS error: Unable to read directory block [2c0:35] [ 109.080462][ T6387] loop2: detected capacity change from 0 to 1024 [ 109.509633][ T6413] loop3: detected capacity change from 0 to 1024 [ 109.520621][ T4243] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.637504][ T6413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.763446][ T6407] loop2: detected capacity change from 0 to 32768 [ 109.770580][ T4243] usb 5-1: Using ep0 maxpacket: 8 [ 109.890551][ T4243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.924736][ T4243] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 109.942457][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.942908][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.806'. [ 109.971186][ T4243] usb 5-1: config 0 descriptor?? [ 110.181908][ T6418] loop1: detected capacity change from 0 to 32768 [ 110.254628][ T6418] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.803 (6418) [ 110.271829][ T6438] exfat: Deprecated parameter 'utf8' [ 110.288930][ T6438] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6c34595, utbl_chksum : 0xe619d30d) [ 110.328166][ T6418] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 110.366943][ T6418] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 110.430451][ T4451] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.431366][ T6418] BTRFS info (device loop1): use lzo compression, level 0 [ 110.457556][ T4243] wacom 0003:056A:032C.0009: ignoring exceeding usage max [ 110.480439][ T6418] BTRFS info (device loop1): using free space tree [ 110.483084][ T4243] wacom 0003:056A:032C.0009: unknown main item tag 0x0 [ 110.487009][ T6418] BTRFS info (device loop1): has skinny extents [ 110.547972][ T4243] wacom 0003:056A:032C.0009: hidraw0: USB HID v5.59 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 110.558779][ T6444] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.619730][ T4176] udevd[4176]: incorrect nilfs2 checksum on /dev/loop0 [ 110.653765][ T6452] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 110.671109][ T6458] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.679060][ T6385] usb 5-1: USB disconnect, device number 4 [ 110.682127][ T4451] usb 4-1: Using ep0 maxpacket: 32 [ 110.733314][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop2 [ 110.767131][ T6452] cramfs: Error -3 while decompressing! [ 110.770511][ T6418] BTRFS info (device loop1): enabling ssd optimizations [ 110.774053][ T6452] cramfs: ffffffff964010a8(26)->ffff888056e1b000(4096) [ 110.788635][ T6452] cramfs: Error -3 while decompressing! [ 110.796581][ T6452] cramfs: ffffffff964010c2(26)->ffff8880573b9000(4096) [ 110.820725][ T6452] cramfs: Error -3 while decompressing! [ 110.850263][ T6452] cramfs: ffffffff964010dc(16)->ffff888058832000(4096) [ 110.876493][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop2 [ 110.887598][ T6452] cramfs: Error -3 while decompressing! [ 110.922183][ T6452] cramfs: ffffffff964010a8(26)->ffff888056e1b000(4096) [ 110.956570][ T6472] fido_id[6472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 110.975536][ T26] audit: type=1800 audit(1770915525.385:29): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.818" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 111.020922][ T4451] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 111.022247][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop2 [ 111.039978][ T4451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.083688][ T4451] usb 4-1: Product: syz [ 111.097018][ T4496] udevd[4496]: incorrect cramfs checksum on /dev/loop2 [ 111.112496][ T4451] usb 4-1: Manufacturer: syz [ 111.133294][ T4451] usb 4-1: SerialNumber: syz [ 111.166993][ T4496] udevd[4496]: incorrect cramfs checksum on /dev/loop2 [ 111.174752][ T4451] usb 4-1: config 0 descriptor?? [ 111.183915][ T6476] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.227239][ T4496] udevd[4496]: incorrect cramfs checksum on /dev/loop2 [ 111.259963][ T4496] udevd[4496]: incorrect cramfs checksum on /dev/loop2 [ 111.272275][ T4451] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 111.289604][ T4496] udevd[4496]: incorrect cramfs checksum on /dev/loop2 [ 111.307442][ T4451] dvb-usb: bulk message failed: -22 (2/0) [ 111.347087][ T4496] udevd[4496]: incorrect cramfs checksum on /dev/loop2 [ 111.416272][ T4451] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.475840][ T6434] cxusb: i2c wr: len=78 is too big! [ 111.475840][ T6434] [ 111.485355][ T4451] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 111.502195][ T4451] usb 4-1: media controller created [ 111.526198][ T4451] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.588654][ T4451] usb 4-1: selecting invalid altsetting 7 [ 111.607156][ T4451] cxusb: set interface failed [ 111.612198][ T4451] dvb-usb: bulk message failed: -22 (1/0) [ 111.649090][ T4451] DVB: Unable to find symbol lgdt330x_attach() [ 111.655378][ T4451] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 111.670008][ T6483] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 111.713863][ T6483] REISERFS (device loop4): using ordered data mode [ 111.741855][ T6483] reiserfs: using flush barriers [ 111.752906][ T6483] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 111.771304][ T6483] REISERFS (device loop4): checking transaction log (loop4) [ 111.791594][ T6483] REISERFS (device loop4): Using r5 hash to sort names [ 111.798777][ T6483] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 111.824162][ T6483] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 111.833331][ T4451] rc_core: IR keymap rc-dvico-portable not found [ 111.839712][ T4451] Registered IR keymap rc-empty [ 111.857281][ T4451] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 111.868715][ T6483] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 111.891270][ T4451] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input15 [ 111.948989][ T6483] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 111.991184][ T4451] dvb-usb: schedule remote query interval to 100 msecs. [ 111.998170][ T4451] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 112.080258][ T4451] usb 4-1: USB disconnect, device number 8 [ 112.151667][ T6506] set_capacity_and_notify: 5 callbacks suppressed [ 112.151683][ T6506] loop0: detected capacity change from 0 to 1024 [ 112.261859][ T4451] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 112.261870][ T6506] hfsplus: invalid length 32517 has been corrected to 255 [ 112.295895][ T6510] loop1: detected capacity change from 0 to 1764 [ 112.750478][ T4243] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.814509][ T6524] loop1: detected capacity change from 0 to 32768 [ 112.874368][ T6531] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 112.937403][ T6533] loop3: detected capacity change from 0 to 256 [ 113.025102][ T6537] loop2: detected capacity change from 0 to 128 [ 113.054030][ T6533] FAT-fs (loop3): Directory bread(block 64) failed [ 113.068660][ T6533] FAT-fs (loop3): Directory bread(block 65) failed [ 113.085582][ T6533] FAT-fs (loop3): Directory bread(block 66) failed [ 113.098043][ T6533] FAT-fs (loop3): Directory bread(block 67) failed [ 113.119156][ T6537] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.136892][ T6533] FAT-fs (loop3): Directory bread(block 68) failed [ 113.150334][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.162452][ T6537] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.172877][ T6533] FAT-fs (loop3): Directory bread(block 69) failed [ 113.179446][ T6533] FAT-fs (loop3): Directory bread(block 70) failed [ 113.187275][ T4243] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 113.197329][ T6533] FAT-fs (loop3): Directory bread(block 71) failed [ 113.207624][ T6533] FAT-fs (loop3): Directory bread(block 72) failed [ 113.214367][ T6533] FAT-fs (loop3): Directory bread(block 73) failed [ 113.235166][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.278243][ T4243] usb 5-1: config 0 descriptor?? [ 113.340452][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.430534][ T6543] loop3: detected capacity change from 0 to 4096 [ 113.480426][ T6543] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 113.537869][ T6543] ntfs3: loop3: ino=5, "/" directory corrupted [ 113.580349][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 113.675692][ T6555] loop3: detected capacity change from 0 to 8 [ 113.703590][ T6558] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 113.776526][ T6555] SQUASHFS error: xz decompression failed, data probably corrupt [ 113.786718][ T6555] SQUASHFS error: Failed to read block 0x108: -5 [ 113.793752][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 113.801199][ T6555] SQUASHFS error: Unable to read metadata cache entry [106] [ 113.804528][ T4243] lenovo 0003:17EF:6062.000A: unknown main item tag 0x1 [ 113.830809][ T6555] SQUASHFS error: Unable to read inode 0x11f [ 113.859855][ T4243] lenovo 0003:17EF:6062.000A: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 113.860598][ T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.911278][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.949869][ T7] usb 2-1: Product: syz [ 113.970543][ T7] usb 2-1: Manufacturer: syz [ 114.010148][ T7] usb 2-1: SerialNumber: syz [ 114.023569][ T7] r8152-cfgselector 2-1: config 0 descriptor?? [ 114.039815][ T21] usb 5-1: USB disconnect, device number 5 [ 114.093221][ T6568] fido_id[6568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 114.163470][ T6575] nbd: must specify at least one socket [ 114.310313][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 114.530793][ T6582] loop3: detected capacity change from 0 to 32768 [ 114.570260][ T4243] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.570332][ T7] r8152-cfgselector 2-1: Unknown version 0x0000 [ 114.587458][ T6582] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.868 (6582) [ 114.601207][ T7] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 114.674708][ T6582] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 114.686021][ T6582] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 114.704459][ T6582] BTRFS info (device loop3): use zstd compression, level 3 [ 114.707635][ T6589] hub 9-0:1.0: USB hub found [ 114.714384][ T6582] BTRFS info (device loop3): using free space tree [ 114.717875][ T6589] hub 9-0:1.0: 1 port detected [ 114.726952][ T6582] BTRFS info (device loop3): has skinny extents [ 114.778767][ T6582] BTRFS info (device loop3): enabling ssd optimizations [ 114.841506][ T6609] loop4: detected capacity change from 0 to 2048 [ 114.869426][ T6609] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 114.965004][ T6609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.000314][ T4243] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.021816][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.062990][ T4243] usb 1-1: config 0 descriptor?? [ 115.117664][ T4243] cp210x 1-1:0.0: cp210x converter detected [ 115.156563][ T6613] netlink: 'syz.4.874': attribute type 4 has an invalid length. [ 115.197546][ T4496] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4496) [ 115.534604][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 115.550689][ T6632] loop3: detected capacity change from 0 to 64 [ 115.553754][ T4243] usb 1-1: cp210x converter now attached to ttyUSB0 [ 115.557588][ T6631] trusted_key: encrypted_key: key user:syz not found [ 115.607055][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 115.721445][ T6636] exfat: Deprecated parameter 'utf8' [ 115.739598][ T6636] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 115.766715][ T6619] usb 1-1: USB disconnect, device number 8 [ 115.787773][ T6619] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.815123][ T6619] cp210x 1-1:0.0: device disconnected [ 115.828803][ T6639] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 115.866250][ T6639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.875830][ T6643] FAT-fs (loop1): Directory bread(block 64) failed [ 115.883796][ T6643] FAT-fs (loop1): Directory bread(block 65) failed [ 115.925178][ T6643] FAT-fs (loop1): Directory bread(block 66) failed [ 115.951609][ T6643] FAT-fs (loop1): Directory bread(block 67) failed [ 115.972689][ T6643] FAT-fs (loop1): Directory bread(block 68) failed [ 115.981305][ T6643] FAT-fs (loop1): Directory bread(block 69) failed [ 115.987999][ T6643] FAT-fs (loop1): Directory bread(block 70) failed [ 116.020553][ T6643] FAT-fs (loop1): Directory bread(block 71) failed [ 116.042043][ T6643] FAT-fs (loop1): Directory bread(block 72) failed [ 116.058935][ T6643] FAT-fs (loop1): Directory bread(block 73) failed [ 116.270168][ T6650] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.563339][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.627723][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.664652][ T6663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.782207][ T6644] XFS (loop3): Mounting V5 Filesystem [ 116.921365][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.932686][ T6644] XFS (loop3): Ending clean mount [ 116.992681][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.009328][ T6667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.056313][ T4193] XFS (loop3): Unmounting Filesystem [ 117.170274][ T6682] set_capacity_and_notify: 5 callbacks suppressed [ 117.170289][ T6682] loop0: detected capacity change from 0 to 32768 [ 117.178565][ T6691] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 117.360656][ T6682] XFS (loop0): Mounting V5 Filesystem [ 117.500007][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.915'. [ 117.598244][ T6682] XFS (loop0): Ending clean mount [ 117.638640][ T6682] attempt to access beyond end of device [ 117.638640][ T6682] loop0: rw=4096, want=3546894484, limit=32768 [ 117.668455][ T4188] XFS (loop0): Unmounting Filesystem [ 117.700361][ T6269] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.704310][ T6720] loop3: detected capacity change from 0 to 256 [ 117.751758][ T6722] loop2: detected capacity change from 0 to 8 [ 117.811365][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.836782][ T6722] unable to read id index table [ 118.047681][ T4202] Bluetooth: hci2: link tx timeout [ 118.054142][ T4202] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.065511][ T4202] Bluetooth: hci2: link tx timeout [ 118.072226][ T4202] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.087184][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.921'. [ 118.100605][ T6269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.120333][ T6269] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 118.129406][ T6269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.143300][ T6269] usb 5-1: config 0 descriptor?? [ 118.149795][ T6728] netem: invalid attributes len -17 [ 118.156036][ T6728] netem: change failed [ 118.180308][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.200568][ T7] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 118.220155][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.231347][ T7] usb 2-1: config 0 descriptor?? [ 118.238709][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.262559][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.288764][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.337375][ T6722] loop2: detected capacity change from 0 to 32768 [ 118.386836][ T6739] loop3: detected capacity change from 0 to 2048 [ 118.387369][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.412225][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.420026][ T6733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.430348][ T6722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.919 (6722) [ 118.480749][ T6739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.499260][ T6722] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 118.526966][ T6722] BTRFS info (device loop2): setting nodatasum [ 118.543926][ T6722] BTRFS info (device loop2): force zlib compression, level 3 [ 118.567873][ T6722] BTRFS info (device loop2): ignoring bad roots [ 118.579224][ T6722] BTRFS info (device loop2): unrecognized rescue option 'ignoremetacsums' [ 118.598832][ T6722] BTRFS error (device loop2): unrecognized rescue value ignoremetacsums [ 118.624171][ T6722] BTRFS error (device loop2): open_ctree failed: -22 [ 118.638719][ T6269] isku 0003:1E7D:3264.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.4-1/input0 [ 118.743089][ T7] waltop 0003:172F:0034.000C: unknown main item tag 0xe [ 118.769010][ T7] waltop 0003:172F:0034.000C: hidraw1: USB HID vff.fc Device [HID 172f:0034] on usb-dummy_hcd.1-1/input0 [ 118.847404][ T7] usb 5-1: USB disconnect, device number 6 [ 118.887111][ T26] audit: type=1326 audit(1770915533.305:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.0.930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f468fccff79 code=0x0 [ 118.935087][ T4243] usb 2-1: USB disconnect, device number 6 [ 119.011113][ T6619] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.023798][ T6750] fido_id[6750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 119.234147][ T6755] loop3: detected capacity change from 0 to 40427 [ 119.300990][ T6755] F2FS-fs (loop3): invalid crc value [ 119.314746][ T6755] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.410606][ T6619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.422312][ T6755] F2FS-fs (loop3): Start checkpoint disabled! [ 119.429172][ T6758] loop4: detected capacity change from 0 to 2048 [ 119.435815][ T6619] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 119.448928][ T6755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 119.460163][ T6619] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 119.474175][ T6619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.499926][ T6619] usb 3-1: config 0 descriptor?? [ 119.533702][ T6758] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.565527][ T4496] udevd[4496]: incorrect nilfs2 checksum on /dev/loop4 [ 119.575884][ T6764] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.595034][ T6758] NILFS (loop4): corrupt root inode [ 119.766546][ T6768] loop4: detected capacity change from 0 to 64 [ 119.898155][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.939893][ T6778] loop0: detected capacity change from 0 to 256 [ 119.948027][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.967355][ T6773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.090402][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 120.119745][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.138436][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.147720][ T6776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.201542][ T6619] Bluetooth: Can't get version to change to load ram patch err [ 120.217326][ T6619] Bluetooth: Loading sysconfig file failed [ 120.235004][ T6619] ath3k: probe of 3-1:0.0 failed with error -71 [ 120.260040][ T6619] usb 3-1: USB disconnect, device number 5 [ 120.282329][ T6775] loop3: detected capacity change from 0 to 32768 [ 120.320535][ T5691] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.335981][ T6775] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.935 (6775) [ 120.405297][ T6775] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 120.430475][ T6775] BTRFS info (device loop3): turning off barriers [ 120.437002][ T6775] BTRFS info (device loop3): enabling all of the rescue options [ 120.460373][ T6775] BTRFS info (device loop3): ignoring data csums [ 120.466771][ T6775] BTRFS info (device loop3): ignoring bad roots [ 120.496388][ T6775] BTRFS info (device loop3): disabling log replay at mount time [ 120.525629][ T6775] BTRFS info (device loop3): enabling disk space caching [ 120.534007][ T6775] BTRFS info (device loop3): disabling tree log [ 120.550409][ T6775] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 120.570341][ T6775] BTRFS info (device loop3): trying to use backup root at mount time [ 120.580686][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 120.593824][ T6775] BTRFS error (device loop3): cannot disable free space tree [ 120.606337][ T6775] BTRFS error (device loop3): open_ctree failed: -22 [ 120.630174][ T4243] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.727642][ T5691] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.750437][ T5691] usb 1-1: config 179 has no interface number 0 [ 120.757466][ T5691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.793445][ T5691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.834932][ T5691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.890482][ T5691] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.893192][ T4243] usb 5-1: Using ep0 maxpacket: 8 [ 120.918948][ T5691] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.943783][ T5691] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.953545][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.981040][ T6778] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.012259][ T615] ------------[ cut here ]------------ [ 121.018820][ T615] kernel BUG at fs/hfs/inode.c:447! [ 121.026880][ T26] audit: type=1326 audit(1770915535.445:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.049833][ T4243] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 121.079881][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.094037][ T615] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 121.100137][ T615] CPU: 1 PID: 615 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 121.107590][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 121.117652][ T615] Workqueue: writeback wb_workfn (flush-7:3) [ 121.123698][ T615] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 121.129253][ T615] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 50 9c 8d ff e9 47 fe ff ff e8 76 90 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 121.136112][ T26] audit: type=1326 audit(1770915535.475:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.148862][ T615] RSP: 0018:ffffc9000394f3c0 EFLAGS: 00010293 [ 121.148883][ T615] RAX: ffffffff823091ca RBX: ffff888059119518 RCX: ffff88801f740000 [ 121.148894][ T615] RDX: 0000000000000000 RSI: ffffffff8c4e2b40 RDI: 0000000000000000 [ 121.148903][ T615] RBP: ffffc9000394f550 R08: ffff88801f740000 R09: 0000000000000003 [ 121.148913][ T615] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 121.148923][ T615] R13: 1ffff92000729e7c R14: 0000000000000000 R15: ffff8880591194d8 [ 121.148932][ T615] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 121.148944][ T615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.148954][ T615] CR2: 00007f8d6e9636c0 CR3: 000000006523c000 CR4: 00000000003506e0 [ 121.148968][ T615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.148976][ T615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.148986][ T615] Call Trace: [ 121.148993][ T615] [ 121.149000][ T615] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 121.149024][ T615] ? __writeback_single_inode+0x471/0xda0 [ 121.149044][ T615] ? __rwlock_init+0x140/0x140 [ 121.149063][ T615] __writeback_single_inode+0x6c3/0xda0 [ 121.149081][ T615] writeback_sb_inodes+0xa4e/0x1680 [ 121.149104][ T615] ? queue_io+0x550/0x550 [ 121.149124][ T615] ? rcu_is_watching+0x11/0xa0 [ 121.149141][ T615] wb_writeback+0x45d/0xbe0 [ 121.149160][ T615] ? rcu_lock_release+0x20/0x20 [ 121.149175][ T615] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.149197][ T615] ? _raw_spin_unlock_irq+0x1f/0x40 [ 121.149213][ T615] wb_workfn+0x43a/0xf20 [ 121.149236][ T615] ? inode_wait_for_writeback+0x220/0x220 [ 121.149256][ T615] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 121.149275][ T615] ? read_lock_is_recursive+0x10/0x10 [ 121.149292][ T615] ? try_to_wake_up+0x6cf/0x1050 [ 121.149310][ T615] ? _raw_spin_unlock_irq+0x1f/0x40 [ 121.149326][ T615] process_one_work+0x85f/0x1010 [ 121.149349][ T615] ? worker_detach_from_pool+0x240/0x240 [ 121.149364][ T615] ? lockdep_hardirqs_off+0x70/0x100 [ 121.149382][ T615] ? _raw_spin_lock_irq+0xb7/0xf0 [ 121.149396][ T615] ? _raw_spin_lock_irqsave+0x100/0x100 [ 121.173156][ T26] audit: type=1326 audit(1770915535.475:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.177390][ T615] ? wq_worker_running+0x97/0x170 [ 121.185480][ T26] audit: type=1326 audit(1770915535.475:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.193310][ T615] worker_thread+0xaa6/0x1290 [ 121.193337][ T615] ? lockdep_hardirqs_on+0x94/0x140 [ 121.201394][ T26] audit: type=1326 audit(1770915535.475:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.209230][ T615] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.209254][ T615] kthread+0x436/0x520 [ 121.221901][ T26] audit: type=1326 audit(1770915535.475:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.226110][ T615] ? rcu_lock_release+0x20/0x20 [ 121.226132][ T615] ? kthread_blkcg+0xd0/0xd0 [ 121.226146][ T615] ret_from_fork+0x1f/0x30 [ 121.226165][ T615] [ 121.226176][ T615] Modules linked in: [ 121.234258][ T615] ---[ end trace da76b90f21533474 ]--- [ 121.276210][ T26] audit: type=1326 audit(1770915535.475:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.280124][ T4243] usb 5-1: config 0 descriptor?? [ 121.290129][ T26] audit: type=1326 audit(1770915535.475:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.307551][ T615] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 121.309211][ T26] audit: type=1326 audit(1770915535.475:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6806 comm="syz.1.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6e915f79 code=0x7fc00000 [ 121.315318][ T615] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 50 9c 8d ff e9 47 fe ff ff e8 76 90 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 121.424052][ T5691] usb 1-1: USB disconnect, device number 9 [ 121.431067][ T615] RSP: 0018:ffffc9000394f3c0 EFLAGS: 00010293 [ 121.432130][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 121.437245][ T615] [ 121.437252][ T615] RAX: ffffffff823091ca RBX: ffff888059119518 RCX: ffff88801f740000 [ 121.459639][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.459670][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.659737][ T615] RDX: 0000000000000000 RSI: ffffffff8c4e2b40 RDI: 0000000000000000 [ 121.659753][ T615] RBP: ffffc9000394f550 R08: ffff88801f740000 R09: 0000000000000003 [ 121.659763][ T615] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 121.685345][ T615] R13: 1ffff92000729e7c R14: 0000000000000000 R15: ffff8880591194d8 [ 121.693349][ T615] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 121.702830][ T615] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.709402][ T615] CR2: 0000001b32723ff8 CR3: 0000000029c71000 CR4: 00000000003506f0 [ 121.717424][ T615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.725660][ T615] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.733738][ T615] Kernel panic - not syncing: Fatal exception [ 121.740138][ T615] Kernel Offset: disabled [ 121.744489][ T615] Rebooting in 86400 seconds..