last executing test programs: 2.777753568s ago: executing program 3 (id=2052): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) 2.632597741s ago: executing program 3 (id=2054): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 2.184150731s ago: executing program 0 (id=2057): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0xffffffffffffffff, 0x1c}) 1.770813341s ago: executing program 0 (id=2060): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.765640111s ago: executing program 3 (id=2061): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) 1.645491533s ago: executing program 3 (id=2062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5f5e0ff}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x5}]}, 0x5c}}, 0x0) 1.436294728s ago: executing program 0 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x2c}}, 0x0) 1.3735523s ago: executing program 3 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.215675353s ago: executing program 3 (id=2068): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)={[{@inline_dentry}, {}, {@fault_type={'fault_type', 0x3d, 0x40039}}, {@alloc_mode_reuse}, {@discard_unit_segment}, {@gc_merge}, {@background_gc_on}, {@discard_unit_section}, {@checkpoint_diasble}, {@noextent_cache}, {@fsync_mode_strict}, {@noflush_merge}, {@grpquota={'grpquota', 0x3d, '\\'}}, {@errors_remount}, {@data_flush}], [{@obj_role={'obj_role', 0x3d, '!\xa9'}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'gc_merge'}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.211802543s ago: executing program 0 (id=2076): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', '', [], 0xa, "3cff6841abaf761c2754bc54328cb340ee67e3bd9973c0f4dbf13b6ee21451ddbeddd8bc6e99a2b1aba4b4e0564cba72e5510656b722ab5097"}, 0x3d) 1.211373573s ago: executing program 2 (id=2069): ioctl$sock_netdev_private(0xffffffffffffffff, 0x8991, &(0x7f0000000000)="58a34d3a") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x891e, &(0x7f0000000000)) 942.284719ms ago: executing program 1 (id=2072): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 837.434621ms ago: executing program 2 (id=2073): unshare(0x24060400) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r0, r0, 0x6) 800.490782ms ago: executing program 1 (id=2074): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 793.497483ms ago: executing program 0 (id=2075): unshare(0x2000400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0xd0) 675.451516ms ago: executing program 2 (id=2077): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 637.893226ms ago: executing program 1 (id=2078): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 542.945328ms ago: executing program 2 (id=2079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 470.19641ms ago: executing program 0 (id=2080): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0xffffffffffffffc5, 0x8, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) 469.64999ms ago: executing program 1 (id=2081): io_setup(0xe70, &(0x7f0000000500)=0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x80402, 0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x2000}]) 321.663963ms ago: executing program 2 (id=2082): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c00000016002109000000000000000d00000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 222.903066ms ago: executing program 1 (id=2083): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd27, 0x25ffdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x48040) 124.719868ms ago: executing program 2 (id=2084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006b80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000006f00)={0x0, 0x0, &(0x7f0000006ec0)={&(0x7f0000006e40)={0x14, r1, 0x3, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x48810) 0s ago: executing program 1 (id=2085): r0 = socket$inet(0x2, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000b"], 0x48) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) kernel console output (not intermixed with test programs): e type 49 has an invalid length. [ 176.653372][ T8322] netlink: 'syz.3.1035': attribute type 8 has an invalid length. [ 176.674868][ T2179] usb 1-1: USB disconnect, device number 7 [ 176.865526][ T8331] siw: device registration error -23 [ 177.352375][ T8327] loop1: detected capacity change from 0 to 32768 [ 177.434616][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 177.558274][ T8348] loop0: detected capacity change from 0 to 4096 [ 177.599967][ T8348] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 177.634424][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 177.656663][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 177.694633][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.744742][ T5813] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 177.776271][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.835161][ T5813] usb 3-1: config 0 descriptor?? [ 177.863177][ T8348] ntfs3: loop0: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 177.901828][ T8348] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 177.995096][ T8357] ntfs3: loop0: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 178.187297][ T12] ntfs3: loop0: ino=1e, ntfs3_write_inode failed, -22. [ 178.311028][ T5813] konepure 0003:1E7D:2DBE.000E: unknown main item tag 0x2 [ 178.364647][ T5813] konepure 0003:1E7D:2DBE.000E: bogus close delimiter [ 178.371477][ T5813] konepure 0003:1E7D:2DBE.000E: item 0 0 2 10 parsing failed [ 178.426696][ T5813] konepure 0003:1E7D:2DBE.000E: parse failed [ 178.453688][ T5813] konepure: probe of 0003:1E7D:2DBE.000E failed with error -22 [ 178.478365][ T8370] loop0: detected capacity change from 0 to 1024 [ 178.515053][ T8370] EXT4-fs: Ignoring removed bh option [ 178.566332][ T8370] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 178.582125][ T5813] usb 3-1: USB disconnect, device number 5 [ 178.629439][ T8370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.818965][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.996771][ T8387] mkiss: ax0: crc mode is auto. [ 179.038971][ T8366] loop1: detected capacity change from 0 to 32768 [ 179.061045][ T8366] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 179.206198][ T8366] XFS (loop1): Ending clean mount [ 179.339715][ T5767] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 180.095620][ T8424] loop1: detected capacity change from 0 to 128 [ 180.109161][ T8424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 180.132641][ T8407] loop2: detected capacity change from 0 to 32768 [ 180.140422][ T8424] System zones: 1-3, 19-19, 35-36 [ 180.154956][ T8407] [ 180.154956][ T8407] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.154956][ T8407] [ 180.177172][ T8407] JFS: metapage_get_blocks failed [ 180.185671][ T8407] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 180.185671][ T8407] [ 180.200130][ T8407] ERROR: (device loop2): remounting filesystem as read-only [ 180.202301][ T8424] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 180.207923][ T8407] ERROR: (device loop2): diWrite: ixpxd invalid [ 180.207923][ T8407] [ 180.231749][ T8407] ERROR: (device loop2): txCommit: [ 180.231749][ T8407] [ 180.274610][ T8424] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.306554][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.381878][ T8424] EXT4-fs warning (device loop1): ext4_group_extend:1892: will only finish group (8193 blocks, 8129 new) [ 180.452086][ T8424] EXT4-fs warning (device loop1): ext4_group_extend:1897: can't read last block, resize aborted [ 180.571011][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.650141][ T8439] loop0: detected capacity change from 0 to 512 [ 180.750922][ T8439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 180.797149][ T8439] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 180.903594][ T8447] loop1: detected capacity change from 0 to 256 [ 180.971207][ T8447] FAT-fs (loop1): Directory bread(block 64) failed [ 180.979666][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.992409][ T8447] FAT-fs (loop1): Directory bread(block 65) failed [ 181.005782][ T8447] FAT-fs (loop1): Directory bread(block 66) failed [ 181.012383][ T8447] FAT-fs (loop1): Directory bread(block 67) failed [ 181.025961][ T8447] FAT-fs (loop1): Directory bread(block 68) failed [ 181.032539][ T8447] FAT-fs (loop1): Directory bread(block 69) failed [ 181.046031][ T8447] FAT-fs (loop1): Directory bread(block 70) failed [ 181.064919][ T8447] FAT-fs (loop1): Directory bread(block 71) failed [ 181.071573][ T8447] FAT-fs (loop1): Directory bread(block 72) failed [ 181.100137][ T8447] FAT-fs (loop1): Directory bread(block 73) failed [ 181.336431][ T8455] netlink: 'syz.3.1077': attribute type 3 has an invalid length. [ 181.370584][ T8456] loop2: detected capacity change from 0 to 2048 [ 181.400235][ T8456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.409884][ T8458] hsr0: entered promiscuous mode [ 181.420487][ T8458] macvtap1: entered promiscuous mode [ 182.076808][ T8452] loop0: detected capacity change from 0 to 32768 [ 182.184519][ T8452] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.257498][ T8491] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 182.326443][ T8452] XFS (loop0): Ending clean mount [ 182.329701][ T8494] loop2: detected capacity change from 0 to 4096 [ 182.342403][ T8491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.365012][ T8494] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 182.429324][ T8494] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 182.533329][ T8497] loop3: detected capacity change from 0 to 64 [ 182.601900][ T8497] syz.3.1093: attempt to access beyond end of device [ 182.601900][ T8497] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 182.636216][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.653746][ T8497] Buffer I/O error on dev loop3, logical block 512, async page read [ 182.679459][ T8497] syz.3.1093: attempt to access beyond end of device [ 182.679459][ T8497] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 182.679743][ T8499] loop1: detected capacity change from 0 to 256 [ 182.697580][ T8497] Buffer I/O error on dev loop3, logical block 56576, async page read [ 182.861841][ T8499] FAT-fs (loop1): Directory bread(block 64) failed [ 182.898956][ T8499] FAT-fs (loop1): Directory bread(block 65) failed [ 182.918217][ T8499] FAT-fs (loop1): Directory bread(block 66) failed [ 182.944321][ T8499] FAT-fs (loop1): Directory bread(block 67) failed [ 182.973055][ T8499] FAT-fs (loop1): Directory bread(block 68) failed [ 182.980520][ T8499] FAT-fs (loop1): Directory bread(block 69) failed [ 183.014392][ T8499] FAT-fs (loop1): Directory bread(block 70) failed [ 183.031168][ T8499] FAT-fs (loop1): Directory bread(block 71) failed [ 183.044293][ T8499] FAT-fs (loop1): Directory bread(block 72) failed [ 183.051461][ T8499] FAT-fs (loop1): Directory bread(block 73) failed [ 183.238897][ T8510] FAT-fs (loop3): Directory bread(block 64) failed [ 183.261744][ T8510] FAT-fs (loop3): Directory bread(block 65) failed [ 183.280250][ T8510] FAT-fs (loop3): Directory bread(block 66) failed [ 183.290621][ T8510] FAT-fs (loop3): Directory bread(block 67) failed [ 183.314334][ T8510] FAT-fs (loop3): Directory bread(block 68) failed [ 183.320959][ T8510] FAT-fs (loop3): Directory bread(block 69) failed [ 183.342324][ T8510] FAT-fs (loop3): Directory bread(block 70) failed [ 183.387225][ T8510] FAT-fs (loop3): Directory bread(block 71) failed [ 183.394345][ T8510] FAT-fs (loop3): Directory bread(block 72) failed [ 183.400962][ T8510] FAT-fs (loop3): Directory bread(block 73) failed [ 183.407747][ T8512] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.466051][ T8512] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.668790][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.044793][ T23] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 184.256206][ T23] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 184.268362][ T23] usb 4-1: config 0 has no interface number 0 [ 184.284152][ T23] usb 4-1: config 0 interface 231 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.331424][ T23] usb 4-1: config 0 interface 231 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.361586][ T23] usb 4-1: config 0 interface 231 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 184.387115][ T23] usb 4-1: config 0 interface 231 has no altsetting 0 [ 184.404445][ T23] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 184.423826][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.449227][ T8526] set_capacity_and_notify: 2 callbacks suppressed [ 184.449242][ T8526] loop2: detected capacity change from 0 to 32768 [ 184.456935][ T23] usb 4-1: config 0 descriptor?? [ 184.537134][ T8526] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 184.612731][ T8526] (syz.2.1106,8526,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 184.645213][ T8526] (syz.2.1106,8526,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 124554051584 failed -12 [ 184.696188][ T8526] (syz.2.1106,8526,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12 [ 184.791856][ T8526] (syz.2.1106,8526,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12 [ 184.841609][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 184.841623][ T28] audit: type=1800 audit(1784306538.624:50): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1106" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 184.844455][ T8526] (syz.2.1106,8526,0):ocfs2_test_inode_bit:2896 ERROR: status = -12 [ 184.890020][ T8526] (syz.2.1106,8526,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 184.911144][ T23] uclogic 0003:28BD:1903.000F: interface is invalid, ignoring [ 184.987366][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 185.126012][ T23] usb 4-1: USB disconnect, device number 7 [ 185.524842][ T8574] loop2: detected capacity change from 0 to 1024 [ 185.550463][ T8574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.653106][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.774435][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.995823][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 186.016693][ T23] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.040770][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 186.058049][ T23] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 186.078611][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.101128][ T23] usb 1-1: config 0 descriptor?? [ 186.230840][ T8594] loop3: detected capacity change from 0 to 4096 [ 186.255071][ T8594] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 186.405012][ T8594] ntfs3: loop3: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 186.435231][ T8594] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 186.483411][ T8605] ntfs3: loop3: ino=1e, "file1" ntfs_sync_inode failed, -22. [ 186.541288][ T23] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 186.572978][ T23] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 186.593345][ T23] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 186.605870][ T23] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 186.613885][ T1099] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 186.621358][ T23] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0 [ 186.651664][ T23] corsair-psu 0003:1B1C:1C09.0010: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 186.737812][ T23] corsair-psu 0003:1B1C:1C09.0010: unable to initialize device (-38) [ 186.753302][ T23] corsair-psu: probe of 0003:1B1C:1C09.0010 failed with error -38 [ 186.780712][ T23] usb 1-1: USB disconnect, device number 8 [ 186.872367][ T8614] fido_id[8614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 186.883094][ T8617] loop3: detected capacity change from 0 to 256 [ 187.021002][ T8621] loop2: detected capacity change from 0 to 4096 [ 187.050492][ T8621] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.104220][ T8621] NILFS (loop2): mounting unchecked fs [ 187.109746][ T8621] NILFS (loop2): recovery required for readonly filesystem [ 187.138185][ T8621] NILFS (loop2): write access will be enabled during recovery [ 187.172518][ T5758] udevd[5758]: incorrect nilfs2 checksum on /dev/loop2 [ 187.196687][ T8621] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 187.293548][ T5954] udevd[5954]: incorrect nilfs2 checksum on /dev/loop2 [ 187.498384][ T8636] loop0: detected capacity change from 0 to 256 [ 187.520427][ T8639] loop2: detected capacity change from 0 to 256 [ 187.581888][ T8636] FAT-fs (loop0): Directory bread(block 64) failed [ 187.605716][ T8636] FAT-fs (loop0): Directory bread(block 65) failed [ 187.632743][ T8636] FAT-fs (loop0): Directory bread(block 66) failed [ 187.644276][ T8636] FAT-fs (loop0): Directory bread(block 67) failed [ 187.650930][ T8636] FAT-fs (loop0): Directory bread(block 68) failed [ 187.684261][ T8636] FAT-fs (loop0): Directory bread(block 69) failed [ 187.690946][ T8636] FAT-fs (loop0): Directory bread(block 70) failed [ 187.753803][ T8636] FAT-fs (loop0): Directory bread(block 71) failed [ 187.786580][ T8636] FAT-fs (loop0): Directory bread(block 72) failed [ 187.789695][ T8644] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 187.793147][ T8636] FAT-fs (loop0): Directory bread(block 73) failed [ 187.822467][ T8644] macvtap1: entered allmulticast mode [ 187.840590][ T8644] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 187.849331][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'. [ 187.872768][ T8644] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 187.884910][ T8644] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 188.319002][ T8665] loop0: detected capacity change from 0 to 1024 [ 188.326659][ T8665] EXT4-fs: inline encryption not supported [ 188.351840][ T8665] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.430358][ T8665] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.1167: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.465808][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 188.468141][ T8665] EXT4-fs (loop0): Remounting filesystem read-only [ 188.514594][ T8665] EXT4-fs (loop0): 1 orphan inode deleted [ 188.550329][ T8665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.565685][ T1090] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 188.592040][ T1090] Quota error (device loop0): write_blk: dquota write failed [ 188.609825][ T1090] Quota error (device loop0): remove_free_dqentry: Can't write block (2) with free entries [ 188.634659][ T1090] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 188.678360][ T1090] Quota error (device loop0): write_blk: dquota write failed [ 188.702754][ T1090] Quota error (device loop0): free_dqentry: Can't move quota data block (2) to free list [ 188.718917][ T1090] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 188.739402][ T1090] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 188.753584][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.775688][ T8675] loop2: detected capacity change from 0 to 256 [ 188.953211][ T8660] loop3: detected capacity change from 0 to 32768 [ 188.970457][ T8660] XFS: ikeep mount option is deprecated. [ 189.023226][ T8660] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 189.128715][ T8660] XFS (loop3): Ending clean mount [ 189.228458][ T28] audit: type=1326 audit(1784306543.014:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.2.1175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddb639de99 code=0x0 [ 189.252797][ T5771] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 189.664334][ T56] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 189.824523][ T27] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 189.854268][ T56] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.875358][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.887100][ T56] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.896567][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.904767][ T56] usb 2-1: SerialNumber: syz [ 190.037798][ T27] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 190.061799][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.094698][ T27] usb 1-1: config 0 descriptor?? [ 190.107232][ T27] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 190.135945][ T56] usb 2-1: 0:2 : does not exist [ 190.168392][ T56] usb 2-1: USB disconnect, device number 10 [ 190.241871][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.324191][ T5807] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 190.494502][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 190.509108][ T27] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 190.519561][ T27] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 190.520286][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.546323][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.557345][ T5807] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 190.566498][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.577059][ T5807] usb 4-1: config 0 descriptor?? [ 190.686829][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 190.694793][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.704531][ T23] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 190.722610][ T56] usb 1-1: USB disconnect, device number 9 [ 190.725166][ T23] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 190.750109][ T23] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 190.762004][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.773998][ T23] usb 3-1: Product: syz [ 190.781896][ T23] usb 3-1: Manufacturer: syz [ 190.789030][ T23] usb 3-1: SerialNumber: syz [ 190.817114][ T8726] loop1: detected capacity change from 0 to 256 [ 191.029615][ T5807] aquacomputer_d5next 0003:0C70:F0B6.0011: unknown main item tag 0x7 [ 191.031944][ T23] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 191.054049][ T5807] aquacomputer_d5next 0003:0C70:F0B6.0011: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 191.170350][ T8731] loop1: detected capacity change from 0 to 4096 [ 191.232190][ T8732] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.310672][ T27] usb 4-1: USB disconnect, device number 8 [ 191.340574][ T8731] NILFS (loop1): cannot delete checkpoints: invalid range [0, 2147483649) [ 191.367517][ T8731] NILFS (loop1): error -22 preparing GC: cannot delete checkpoints [ 191.408975][ T8734] loop0: detected capacity change from 0 to 4096 [ 191.461262][ T8734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.557442][ T23] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 191.600327][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.778246][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.814509][ T23] usb 3-1: device firmware changed [ 191.832938][ T23] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 191.847656][ T23] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 191.873224][ T23] usb 3-1: USB disconnect, device number 6 [ 191.928297][ T3065] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 191.946229][ T3065] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 191.986998][ T3065] kobject: kobject_add_internal failed for firmware (error: -2 parent: 3-1) [ 192.008998][ T3065] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed [ 192.025100][ T3065] usb 3-1: [UEAGLE-ATM] firmware is not available [ 192.104386][ T2179] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.287689][ T8761] loop1: detected capacity change from 0 to 512 [ 192.301644][ T8761] FAT-fs (loop1): bogus logical sector size 0 [ 192.304212][ T2179] usb 1-1: Using ep0 maxpacket: 8 [ 192.319896][ T2179] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 192.334477][ T8761] FAT-fs (loop1): Can't find a valid FAT filesystem [ 192.355041][ T2179] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 192.366688][ T2179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.395658][ T2179] usb 1-1: config 0 descriptor?? [ 192.402712][ T8761] ip6tnl1: entered allmulticast mode [ 192.594807][ T28] audit: type=1326 audit(1784306546.384:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8766 comm="syz.1.1209" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab6b9de99 code=0x0 [ 192.632326][ T8769] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1210'. [ 192.650061][ T8769] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1210'. [ 192.859564][ T2179] greenasia 0003:0E8F:0012.0012: item fetching failed at offset 41/44 [ 192.878710][ T2179] greenasia 0003:0E8F:0012.0012: parse failed [ 192.894583][ T2179] greenasia: probe of 0003:0E8F:0012.0012 failed with error -22 [ 193.121641][ T2179] usb 1-1: USB disconnect, device number 10 [ 193.196863][ T34] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.199220][ T8771] loop2: detected capacity change from 0 to 40427 [ 193.207236][ T34] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.221049][ T8771] F2FS-fs (loop2): invalid crc value [ 193.239533][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.253476][ T8771] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.416541][ T8771] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 193.505119][ T3065] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.154645][ T23] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 194.254265][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 194.454382][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 194.468033][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 194.484526][ T9] usb 1-1: config 0 has no interface number 0 [ 194.501479][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.510719][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.525019][ T9] usb 1-1: Product: syz [ 194.529225][ T9] usb 1-1: Manufacturer: syz [ 194.540283][ T9] usb 1-1: SerialNumber: syz [ 194.555176][ T9] usb 1-1: config 0 descriptor?? [ 194.568879][ T9] smsc95xx v2.0.0 [ 194.569285][ T8811] loop3: detected capacity change from 0 to 4096 [ 194.594611][ T5807] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 194.598172][ T8811] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 194.672914][ T8811] ntfs: volume version 3.1. [ 194.798485][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.823854][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.854871][ T5807] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 194.875247][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.895437][ T5807] usb 2-1: config 0 descriptor?? [ 194.976610][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.982988][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.185850][ T8825] loop2: detected capacity change from 0 to 512 [ 195.202171][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 195.223117][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.239409][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 195.253512][ T9] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 195.277599][ T9] usb 1-1: USB disconnect, device number 11 [ 195.293286][ T8825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.306576][ T8825] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.314762][ T5807] hid (null): unknown global tag 0xd [ 195.338129][ T5807] kye 0003:0458:5016.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 195.406741][ T5807] kye 0003:0458:5016.0013: unknown main item tag 0x0 [ 195.431285][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.441441][ T5807] kye 0003:0458:5016.0013: unknown main item tag 0x4 [ 195.456055][ T5807] kye 0003:0458:5016.0013: unexpected long global item [ 195.472399][ T5807] kye 0003:0458:5016.0013: parse failed [ 195.485012][ T5807] kye: probe of 0003:0458:5016.0013 failed with error -22 [ 195.531740][ T8836] loop3: detected capacity change from 0 to 128 [ 195.538709][ T5807] usb 2-1: USB disconnect, device number 11 [ 195.541332][ T8836] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.590439][ T8836] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 195.643982][ T8836] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 195.721923][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.208474][ T8862] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1250'. [ 196.323961][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 196.464422][ T8870] loop3: detected capacity change from 0 to 2048 [ 196.505689][ T8870] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.529826][ T8866] team0: Port device team_slave_0 removed [ 196.540388][ T8874] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.563845][ T8872] sp0: Synchronizing with TNC [ 197.093048][ T8891] loop0: detected capacity change from 0 to 1024 [ 197.120619][ T28] audit: type=1800 audit(1784306550.903:53): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1264" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 197.354327][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.529881][ T8908] loop0: detected capacity change from 0 to 512 [ 197.607238][ T8908] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1271: bg 0: block 127: padding at end of block bitmap is not set [ 197.644454][ T8908] EXT4-fs (loop0): Remounting filesystem read-only [ 197.659656][ T8908] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.0.1271: cleanup dec ref error -28 [ 197.675318][ T8908] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 197.685581][ T8908] EXT4-fs (loop0): 1 orphan inode deleted [ 197.692703][ T8908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.805565][ T8917] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 197.889439][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.222774][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 198.601628][ T8939] loop3: detected capacity change from 0 to 512 [ 198.624177][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.645861][ T8922] loop2: detected capacity change from 0 to 32768 [ 198.669152][ T8939] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1285: Unrecognised inode hash code 255 [ 198.701901][ T8939] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1285: Corrupt directory, running e2fsck is recommended [ 198.731641][ T8922] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.752317][ T8939] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 198.776712][ T8939] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1285: corrupted in-inode xattr: invalid ea_ino [ 198.798813][ T8949] loop0: detected capacity change from 0 to 2048 [ 198.808839][ T8939] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1285: couldn't read orphan inode 15 (err -117) [ 198.836021][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.845723][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.856611][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.867814][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.879345][ T8922] XFS (loop2): Ending clean mount [ 198.885130][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.891742][ T8939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.910725][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.920221][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.938769][ T9] usb 2-1: Product: syz [ 198.943424][ T9] usb 2-1: Manufacturer: syz [ 198.957668][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 198.962918][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 198.996235][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 199.025166][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 199.037393][ T8939] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1285: Unrecognised inode hash code 255 [ 199.054980][ T5776] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 199.087003][ T8939] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1285: Corrupt directory, running e2fsck is recommended [ 199.138654][ T8939] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 4: comm syz.3.1285: path /342/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 199.190191][ T8939] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 64: comm syz.3.1285: path /342/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 199.356029][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.411953][ C0] cdc_wdm 2-1:1.0: unknown notification 194 received: index 36820 len 65530 [ 199.423886][ T9] usb 2-1: USB disconnect, device number 12 [ 199.738150][ T8965] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.749574][ T8965] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 199.779575][ T8965] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.786409][ T8965] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 199.793347][ T8965] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 199.805594][ T8965] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 199.812170][ T8965] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 199.822071][ T8965] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 200.056816][ T8978] loop0: detected capacity change from 0 to 64 [ 200.418420][ T8992] loop1: detected capacity change from 0 to 764 [ 200.442655][ T8992] rock: directory entry would overflow storage [ 200.451215][ T8992] rock: sig=0x4654, size=5, remaining=4 [ 200.595109][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 200.616040][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 200.629837][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 200.815477][ T9000] loop1: detected capacity change from 0 to 4096 [ 200.837993][ T9000] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 200.914563][ T9000] ntfs: volume version 3.1. [ 201.255188][ T9010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1314'. [ 201.751552][ T9023] loop2: detected capacity change from 0 to 4096 [ 201.859706][ T9023] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 202.154414][ T9023] syz.2.1319 (9023) used greatest stack depth: 20784 bytes left [ 202.154595][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 202.166961][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 202.168675][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 202.176474][ T5775] Bluetooth: hci3: command 0x0405 tx timeout [ 202.274629][ T9038] loop3: detected capacity change from 0 to 1024 [ 202.355513][ T9038] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.439688][ T9038] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.1326: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.522582][ T9038] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 202.553548][ T9038] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.1326: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.600784][ T9038] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 202.628508][ T9038] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1326: Failed to acquire dquot type 0 [ 202.645008][ T9038] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 202.670880][ T9038] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1326: mark_inode_dirty error [ 202.699118][ T9038] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.713310][ T9038] EXT4-fs (loop3): 1 orphan inode deleted [ 202.725789][ T12] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.747505][ T9038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.764053][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 202.775369][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 202.879208][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.894465][ T12] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.940970][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 202.977397][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 203.009592][ T5771] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 203.043177][ T5771] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 203.076243][ T5771] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 203.197177][ T9059] loop0: detected capacity change from 0 to 256 [ 203.252681][ T9059] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 203.925758][ T9081] loop0: detected capacity change from 0 to 512 [ 203.995617][ T9081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.066391][ T9081] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.123889][ T9088] loop3: detected capacity change from 0 to 128 [ 204.145825][ T9088] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 204.252916][ T9088] hpfs: filesystem error: improperly stopped [ 204.263359][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.277550][ T9088] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 204.286788][ T9088] hpfs: You really don't want any checks? You are crazy... [ 204.294437][ T9088] hpfs: Code page index out of array [ 204.309177][ T9088] hpfs: code page support is disabled [ 204.315189][ T9088] hpfs: hpfs_map_4sectors(): unaligned read [ 204.321464][ T9088] hpfs: hpfs_map_4sectors(): unaligned read [ 204.328299][ T9088] hpfs: filesystem error: unable to find root dir [ 204.357698][ T9088] hpfs: hpfs_map_4sectors(): unaligned read [ 204.453530][ T9092] loop0: detected capacity change from 0 to 1024 [ 204.552577][ T9092] hfsplus: failed to extend attributes file [ 205.494238][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 205.635016][ T9128] loop0: detected capacity change from 0 to 256 [ 205.674670][ T5778] Bluetooth: hci3: command 0x0405 tx timeout [ 205.683294][ T9128] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 205.684273][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 205.756573][ T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.806008][ T9] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 205.834341][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.842252][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.849107][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 205.859690][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.908627][ T9] usb 2-1: config 0 descriptor?? [ 206.164421][ T9134] Invalid ELF header magic: != ELF [ 206.191232][ T9136] loop0: detected capacity change from 0 to 4096 [ 206.205085][ T9136] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 206.293215][ T9136] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 206.325118][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.350283][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.383713][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.411416][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.433393][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.454191][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.467316][ T9] koneplus 0003:1E7D:2E22.0014: unknown main item tag 0x0 [ 206.482569][ T9] koneplus 0003:1E7D:2E22.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 206.560346][ T9] usb 2-1: USB disconnect, device number 13 [ 206.685147][ T9143] fido_id[9143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 206.964786][ T9155] usb usb8: usbfs: process 9155 (syz.0.1381) did not claim interface 0 before use [ 207.004484][ T23] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 207.199910][ T9161] loop1: detected capacity change from 0 to 256 [ 207.216438][ T23] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 207.220214][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1383'. [ 207.231266][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.251393][ T9161] exfat: Deprecated parameter 'namecase' [ 207.257933][ T9161] exfat: Deprecated parameter 'namecase' [ 207.273230][ T23] usb 4-1: config 0 descriptor?? [ 207.297984][ T9161] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 207.707626][ T9176] loop0: detected capacity change from 0 to 512 [ 207.750930][ T9176] EXT4-fs: Ignoring removed i_version option [ 207.763103][ T9176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.821419][ T9176] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1391: invalid indirect mapped block 4294967295 (level 1) [ 207.870108][ T9176] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1391: invalid indirect mapped block 4294967295 (level 1) [ 207.924555][ T23] usb 4-1: Cannot set autoneg [ 207.929443][ T23] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 207.948268][ T23] usb 4-1: USB disconnect, device number 9 [ 207.963459][ T9176] EXT4-fs (loop0): 2 truncates cleaned up [ 207.996310][ T9176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.157038][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.261243][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1398'. [ 208.539897][ T9196] loop2: detected capacity change from 0 to 4096 [ 208.556302][ T9202] loop0: detected capacity change from 0 to 256 [ 208.575797][ T9202] exfat: Deprecated parameter 'utf8' [ 208.581319][ T9202] exfat: Deprecated parameter 'namecase' [ 208.584539][ T9196] NILFS (loop2): invalid segment: Checksum error in segment payload [ 208.602313][ T9204] syz_tun: entered promiscuous mode [ 208.631670][ T9204] syz_tun: left promiscuous mode [ 208.641161][ T9196] NILFS (loop2): trying rollback from an earlier position [ 208.691929][ T9202] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 208.703055][ T9196] NILFS (loop2): recovery complete [ 208.720877][ T9207] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.182410][ T9217] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 209.204735][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.342324][ T9224] loop3: detected capacity change from 0 to 512 [ 209.384992][ T9224] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.1413: corrupted in-inode xattr: invalid ea_ino [ 209.404439][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 209.420406][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.431117][ T9224] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1413: couldn't read orphan inode 15 (err -117) [ 209.455785][ T23] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 209.470704][ T23] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 209.481977][ T9224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.529222][ T23] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 209.555401][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.583040][ T23] usb 2-1: Product: syz [ 209.587389][ T23] usb 2-1: Manufacturer: syz [ 209.592005][ T23] usb 2-1: SerialNumber: syz [ 209.637240][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.661935][ T9235] loop2: detected capacity change from 0 to 512 [ 209.693530][ T9235] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 209.701283][ T9235] UDF-fs: Scanning with blocksize 512 failed [ 209.711619][ T9235] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 209.724962][ T9235] UDF-fs: Scanning with blocksize 1024 failed [ 209.742854][ T9235] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 209.750375][ T9235] UDF-fs: Scanning with blocksize 2048 failed [ 209.789219][ T9235] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 209.810207][ T9235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.856133][ T23] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 210.210043][ T9254] loop3: detected capacity change from 0 to 128 [ 210.232772][ T9254] EXT4-fs: Ignoring removed nobh option [ 210.278836][ T9254] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.364471][ T23] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 210.426580][ T9254] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.575709][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.596863][ T23] usb 2-1: device firmware changed [ 210.615489][ T23] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 210.625954][ T23] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 210.640668][ T3065] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 210.657437][ T3065] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 210.669602][ T23] usb 2-1: USB disconnect, device number 14 [ 210.672816][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.334305][ T9285] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1442'. [ 211.599906][ T9293] netem: change failed [ 211.719482][ T9299] loop1: detected capacity change from 0 to 256 [ 211.744408][ T9299] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.764632][ T9299] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 211.781817][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 211.822878][ T9299] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 212.922909][ T9323] loop1: detected capacity change from 0 to 512 [ 212.949979][ T9303] loop3: detected capacity change from 0 to 131072 [ 212.971995][ T9303] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 212.980234][ T9303] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 212.991576][ T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.000983][ T27] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.011529][ T9303] F2FS-fs (loop3): invalid crc value [ 213.017068][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.026581][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 213.037713][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 213.038495][ T9323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.050723][ T27] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.065020][ T9323] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.104327][ T9303] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7 [ 213.110750][ T9303] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 213.175122][ T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.210958][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.220862][ T27] usb 1-1: Product: syz [ 213.234656][ T27] usb 1-1: Manufacturer: syz [ 213.258065][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 213.263324][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 213.299050][ T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 213.326001][ T27] cdc_wdm 1-1:1.0: Unknown control protocol [ 213.412155][ T9337] loop1: detected capacity change from 0 to 256 [ 213.554010][ T9337] FAT-fs (loop1): Directory bread(block 64) failed [ 213.588565][ T9337] FAT-fs (loop1): Directory bread(block 65) failed [ 213.605321][ T9337] FAT-fs (loop1): Directory bread(block 66) failed [ 213.611943][ T9337] FAT-fs (loop1): Directory bread(block 67) failed [ 213.626039][ T27] usb 1-1: USB disconnect, device number 12 [ 213.645867][ T9337] FAT-fs (loop1): Directory bread(block 68) failed [ 213.665363][ T9337] FAT-fs (loop1): Directory bread(block 69) failed [ 213.672052][ T9337] FAT-fs (loop1): Directory bread(block 70) failed [ 213.702936][ T9337] FAT-fs (loop1): Directory bread(block 71) failed [ 213.735670][ T9337] FAT-fs (loop1): Directory bread(block 72) failed [ 213.742258][ T9337] FAT-fs (loop1): Directory bread(block 73) failed [ 213.837971][ T9349] loop2: detected capacity change from 0 to 512 [ 213.889063][ T9349] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.947683][ T9349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 213.964739][ T9349] System zones: 1-12 [ 213.969029][ T9349] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1471: bad orphan inode 131072 [ 214.030417][ T9349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.243617][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.349431][ T9357] tipc: Enabling of bearer rejected, failed to enable media [ 214.618315][ T9371] loop1: detected capacity change from 0 to 64 [ 214.629310][ T9370] netlink: 'syz.2.1481': attribute type 2 has an invalid length. [ 214.714043][ T28] audit: type=1800 audit(1784306568.493:54): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1480" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 214.788371][ T9374] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1483'. [ 214.793196][ T28] audit: type=1326 audit(1784306568.543:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.825023][ T28] audit: type=1326 audit(1784306568.553:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.849375][ T28] audit: type=1326 audit(1784306568.593:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.855131][ T9377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1484'. [ 214.873738][ T28] audit: type=1326 audit(1784306568.593:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.873785][ T28] audit: type=1326 audit(1784306568.593:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.873823][ T28] audit: type=1326 audit(1784306568.613:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.873862][ T28] audit: type=1326 audit(1784306568.613:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 214.873899][ T28] audit: type=1326 audit(1784306568.613:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9372 comm="syz.3.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a8d9de99 code=0x7ffc0000 [ 215.014218][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 215.590674][ T9401] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 215.590674][ T9401] program syz.3.1495 not setting count and/or reply_len properly [ 215.797161][ T9410] loop2: detected capacity change from 0 to 256 [ 216.009296][ T9414] loop3: detected capacity change from 0 to 4096 [ 216.240887][ T9422] loop3: detected capacity change from 0 to 512 [ 216.267127][ T9422] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.302858][ T9422] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1506: Invalid inode bitmap blk 4 in block_group 0 [ 216.354409][ T9422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.550678][ T9428] mmap: syz.0.1508 (9428) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.563950][ T9418] loop1: detected capacity change from 0 to 32768 [ 216.586941][ T9418] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1504 (9418) [ 216.601407][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.627415][ T9418] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 216.642371][ T9418] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 216.679610][ T9418] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.730024][ T9418] BTRFS info (device loop1): use zstd compression, level 3 [ 216.762339][ T9418] BTRFS info (device loop1): force clearing of disk cache [ 216.787115][ T9418] BTRFS info (device loop1): enabling disk space caching [ 216.810990][ T9418] BTRFS info (device loop1): disk space caching is enabled [ 216.973195][ T9418] BTRFS info (device loop1): enabling ssd optimizations [ 217.004282][ T9418] BTRFS info (device loop1): auto enabling async discard [ 217.079998][ T9418] BTRFS info (device loop1): rebuilding free space tree [ 217.177441][ T9418] BTRFS info (device loop1): disabling free space tree [ 217.187361][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 217.221992][ T9418] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.259551][ T9418] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.372301][ T9469] loop2: detected capacity change from 0 to 128 [ 217.399268][ T9469] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 217.428226][ T9469] hpfs: filesystem error: improperly stopped [ 217.440209][ T9469] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 217.448532][ T9469] hpfs: You really don't want any checks? You are crazy... [ 217.462243][ T9469] hpfs: Code page index out of array [ 217.470503][ T9469] hpfs: code page support is disabled [ 217.476599][ T9469] hpfs: hpfs_map_4sectors(): unaligned read [ 217.482804][ T9469] hpfs: hpfs_map_4sectors(): unaligned read [ 217.489963][ T9469] hpfs: filesystem error: unable to find root dir [ 217.536772][ T5767] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 217.554519][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.749967][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 217.765895][ T27] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.794282][ T27] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.840433][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.871686][ T27] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 217.885903][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.910435][ T27] usb 4-1: config 0 descriptor?? [ 218.258480][ T9484] netlink: 'syz.2.1527': attribute type 7 has an invalid length. [ 218.271680][ T9484] netlink: 'syz.2.1527': attribute type 8 has an invalid length. [ 218.351885][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.365630][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.382882][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.392697][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.425582][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.432609][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.474727][ T27] lenovo 0003:17EF:6009.0015: unknown main item tag 0x0 [ 218.498087][ T27] lenovo 0003:17EF:6009.0015: hidraw0: USB HID v0.05 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 218.554040][ T27] usb 4-1: USB disconnect, device number 10 [ 218.687786][ T9490] fido_id[9490]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 219.055446][ T9499] loop1: detected capacity change from 0 to 64 [ 219.245191][ T9503] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1536'. [ 219.278020][ T9488] loop2: detected capacity change from 0 to 40427 [ 219.296908][ T9488] F2FS-fs (loop2): invalid crc value [ 219.327945][ T9488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 219.453096][ T9510] loop3: detected capacity change from 0 to 256 [ 219.523739][ T9488] F2FS-fs (loop2): Start checkpoint disabled! [ 219.641922][ T9488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 219.716592][ T9515] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1541'. [ 219.840533][ T9517] loop3: detected capacity change from 0 to 4096 [ 219.873708][ T9517] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 220.089780][ T12] kworker/u4:1: attempt to access beyond end of device [ 220.089780][ T12] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.146230][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 220.151253][ T9526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1547'. [ 220.620518][ T9542] loop1: detected capacity change from 0 to 512 [ 220.742208][ T9542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.790719][ T9542] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.906267][ T9553] loop0: detected capacity change from 0 to 1024 [ 221.005628][ T5826] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.010567][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.186867][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.213508][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.268606][ T5826] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.282263][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.308687][ T5826] usb 3-1: SerialNumber: syz [ 221.532713][ T5826] usb 3-1: 0:2 : does not exist [ 221.596617][ T5826] usb 3-1: USB disconnect, device number 7 [ 221.673090][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.781176][ T9559] loop0: detected capacity change from 0 to 32768 [ 221.809471][ T9577] loop1: detected capacity change from 0 to 256 [ 221.834268][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.936693][ T9577] FAT-fs (loop1): Directory bread(block 64) failed [ 221.943277][ T9577] FAT-fs (loop1): Directory bread(block 65) failed [ 221.966752][ T9577] FAT-fs (loop1): Directory bread(block 66) failed [ 221.984221][ T9577] FAT-fs (loop1): Directory bread(block 67) failed [ 222.001521][ T9577] FAT-fs (loop1): Directory bread(block 68) failed [ 222.013422][ T9577] FAT-fs (loop1): Directory bread(block 69) failed [ 222.027431][ T9577] FAT-fs (loop1): Directory bread(block 70) failed [ 222.035864][ T9577] FAT-fs (loop1): Directory bread(block 71) failed [ 222.043058][ T9577] FAT-fs (loop1): Directory bread(block 72) failed [ 222.053223][ T9577] FAT-fs (loop1): Directory bread(block 73) failed [ 222.439514][ T9587] loop2: detected capacity change from 0 to 4096 [ 222.461847][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'. [ 222.489996][ T9587] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 223.022106][ T9603] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by ""[9603] [ 223.100007][ T9607] loop3: detected capacity change from 0 to 2048 [ 223.155383][ T9607] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 223.176632][ T9607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.295098][ T9590] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 223.363834][ T9618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.504852][ T9590] XFS (loop1): Ending clean mount [ 223.723382][ T5767] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 224.502215][ T9658] mkiss: ax0: crc mode is auto. [ 224.624389][ T9663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1607'. [ 224.640900][ T9663] tipc: Invalid UDP bearer configuration [ 224.640961][ T9663] tipc: Enabling of bearer rejected, failed to enable media [ 225.126892][ T9648] set_capacity_and_notify: 2 callbacks suppressed [ 225.126908][ T9648] loop3: detected capacity change from 0 to 40427 [ 225.155796][ T9648] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 225.171214][ T9648] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 225.189410][ T9648] F2FS-fs (loop3): Image doesn't support compression [ 225.197226][ T9648] F2FS-fs (loop3): Image doesn't support compression [ 225.210159][ T9648] F2FS-fs (loop3): invalid crc value [ 225.466695][ T9648] F2FS-fs (loop3): Start checkpoint disabled! [ 225.512967][ T9648] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 225.532779][ T9648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 225.736332][ T9695] loop1: detected capacity change from 0 to 1024 [ 225.776555][ T9695] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 225.848224][ T9695] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.1622: lblock 2 mapped to illegal pblock 2 (length 1) [ 225.894610][ T9695] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 225.902905][ T9695] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.1622: lblock 0 mapped to illegal pblock 48 (length 1) [ 225.922334][ T9695] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 225.934477][ T9695] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1622: Failed to acquire dquot type 0 [ 225.996350][ T9695] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 226.037145][ T9695] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1622: mark_inode_dirty error [ 226.114455][ T9695] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 226.131682][ T9695] EXT4-fs (loop1): 1 orphan inode deleted [ 226.147066][ T9695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.158174][ T1099] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.214467][ T9695] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.1622: Invalid inode table block 1 in block_group 0 [ 226.229744][ T1099] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 226.251070][ T1099] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 226.280160][ T9695] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 226.471218][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.505986][ T5767] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 226.526314][ T5767] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 226.565273][ T5767] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 226.668410][ T9705] loop0: detected capacity change from 0 to 32768 [ 226.699849][ T9709] loop3: detected capacity change from 0 to 1024 [ 226.751133][ T9709] EXT4-fs: Ignoring removed bh option [ 226.757952][ T9705] ERROR: (device loop0): dbAllocAG: Corrupt dmapctl page [ 226.757952][ T9705] [ 226.789881][ T9705] ERROR: (device loop0): remounting filesystem as read-only [ 226.805260][ T9705] ERROR: (device loop0): dbDiscardAG: -EIO [ 226.805260][ T9705] [ 226.821153][ T9709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.058524][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.180600][ T9716] loop2: detected capacity change from 0 to 4096 [ 227.450682][ T9711] loop1: detected capacity change from 0 to 32768 [ 227.499724][ T9724] loop0: detected capacity change from 0 to 256 [ 227.543339][ T9711] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 227.586780][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1635'. [ 227.776799][ T9711] XFS (loop1): Ending clean mount [ 227.881365][ T28] audit: type=1800 audit(1784306581.663:63): pid=9711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1628" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 227.973232][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.136627][ T9746] loop0: detected capacity change from 0 to 64 [ 228.539804][ T9754] loop2: detected capacity change from 0 to 128 [ 228.589158][ T9754] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.610504][ T9738] loop3: detected capacity change from 0 to 40427 [ 228.619716][ T9754] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.631740][ T9738] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 228.665949][ T9738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 228.686482][ T9738] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 228.720014][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.727800][ T9738] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 228.761253][ T9738] F2FS-fs (loop3): Image doesn't support compression [ 228.793626][ T9738] F2FS-fs (loop3): invalid crc value [ 228.844213][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 228.849483][ T9738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.977345][ T9738] F2FS-fs (loop3): Start checkpoint disabled! [ 228.998403][ T9768] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.015392][ T9738] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 229.025729][ T9738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 229.039891][ T9768] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 229.065691][ T9] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 229.071021][ T9768] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1650: invalid indirect mapped block 2683928664 (level 1) [ 229.089391][ T9768] EXT4-fs (loop0): Remounting filesystem read-only [ 229.096749][ T9768] EXT4-fs (loop0): 1 truncate cleaned up [ 229.099097][ T9] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 229.103665][ T9768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.192796][ T9] usb 2-1: config 160 has no interface number 0 [ 229.211014][ T9] usb 2-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.256823][ T9] usb 2-1: config 160 interface 200 has no altsetting 0 [ 229.267287][ T9] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 229.278584][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.314014][ T9] usb 2-1: Product: syz [ 229.324234][ T9] usb 2-1: Manufacturer: syz [ 229.333729][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.339067][ T9] usb 2-1: SerialNumber: syz [ 229.496281][ T9766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1648 (9766) [ 229.533844][ T9766] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.553762][ T9766] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 229.562992][ T9766] BTRFS info (device loop2): using free space tree [ 229.584823][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1647'. [ 229.618216][ T9] usb 2-1: USB disconnect, device number 15 [ 229.732203][ T9766] BTRFS info (device loop2): enabling ssd optimizations [ 229.744148][ T9766] BTRFS info (device loop2): auto enabling async discard [ 229.760277][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 229.935380][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.024928][ T9797] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1655'. [ 230.365308][ T28] audit: type=1326 audit(1784306584.133:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52b59de99 code=0x7ffc0000 [ 230.411775][ T28] audit: type=1326 audit(1784306584.133:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52b59de99 code=0x7ffc0000 [ 230.435682][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.513009][ T28] audit: type=1326 audit(1784306584.153:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52b59de99 code=0x7ffc0000 [ 230.553208][ T28] audit: type=1326 audit(1784306584.153:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52b59de99 code=0x7ffc0000 [ 230.654152][ T28] audit: type=1326 audit(1784306584.153:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff52b59de99 code=0x7ffc0000 [ 230.688207][ T9819] set_capacity_and_notify: 2 callbacks suppressed [ 230.688223][ T9819] loop1: detected capacity change from 0 to 128 [ 230.726955][ T9819] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.750351][ T28] audit: type=1326 audit(1784306584.193:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9806 comm="syz.0.1661" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff52b59de99 code=0x7ffc0000 [ 230.776099][ T9819] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.796567][ T9821] loop2: detected capacity change from 0 to 4096 [ 230.811301][ T9821] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 230.861720][ T9821] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 230.994781][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 231.136407][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 231.184218][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 231.192595][ T5813] usb 4-1: too many endpoints for config 0 interface 0 altsetting 10: 254, using maximum allowed: 30 [ 231.214453][ T5813] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 231.240661][ T9828] loop0: detected capacity change from 0 to 4096 [ 231.242564][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.265768][ T5813] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 231.314242][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.350528][ T5813] usb 4-1: config 0 descriptor?? [ 231.555419][ T9838] loop2: detected capacity change from 0 to 4096 [ 231.616368][ T9838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.799462][ T5813] uclogic 0003:5543:0522.0016: unknown main item tag 0x2 [ 231.818409][ T5813] uclogic 0003:5543:0522.0016: unknown main item tag 0x2 [ 231.841654][ T5813] uclogic 0003:5543:0522.0016: No inputs registered, leaving [ 231.872756][ T5813] uclogic 0003:5543:0522.0016: hidraw0: USB HID v0.05 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 231.952467][ T9838] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1674: corrupted inode contents [ 231.979303][ T9838] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #15: comm syz.2.1674: mark_inode_dirty error [ 232.002142][ T9838] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1674: corrupted inode contents [ 232.023640][ T2179] usb 4-1: USB disconnect, device number 11 [ 232.076064][ T9838] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1674: mark_inode_dirty error [ 232.105654][ T9838] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1674: corrupted inode contents [ 232.148979][ T9838] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1674: mark_inode_dirty error [ 232.178662][ T9838] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1674: corrupted inode contents [ 232.192755][ T9851] fido_id[9851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 232.202669][ T9838] EXT4-fs error (device loop2): ext4_truncate:4301: inode #15: comm syz.2.1674: mark_inode_dirty error [ 232.223485][ T9838] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem [ 232.256983][ T9838] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1674: corrupted inode contents [ 232.327340][ T9838] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 232.413660][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.793777][ T9857] loop1: detected capacity change from 0 to 32768 [ 232.816320][ T9857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1682 (9857) [ 232.873610][ T9857] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.902392][ T9857] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 232.936789][ T9857] BTRFS info (device loop1): setting nodatasum [ 232.985055][ T9857] BTRFS info (device loop1): force zlib compression, level 3 [ 233.019756][ T9857] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 233.062219][ T9857] BTRFS info (device loop1): use lzo compression, level 0 [ 233.084807][ T9857] BTRFS info (device loop1): turning on flush-on-commit [ 233.091828][ T9857] BTRFS info (device loop1): enabling auto defrag [ 233.135214][ T9857] BTRFS info (device loop1): max_inline at 4096 [ 233.141537][ T9857] BTRFS info (device loop1): using free space tree [ 233.264505][ T9890] loop2: detected capacity change from 0 to 1024 [ 233.292319][ T9890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.343871][ T9857] BTRFS info (device loop1): enabling ssd optimizations [ 233.355131][ T9890] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.396670][ T9890] EXT4-fs (loop2): can't mount with commit=4, fs mounted w/o journal [ 233.632602][ T5767] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.686462][ T9868] loop3: detected capacity change from 0 to 32768 [ 233.772800][ T9913] loop2: detected capacity change from 0 to 256 [ 233.804350][ T9868] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 234.196812][ T9868] XFS (loop3): Ending clean mount [ 234.338153][ T9903] loop0: detected capacity change from 0 to 32768 [ 234.388464][ T9903] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 234.402611][ T9868] XFS (loop3): syz.3.1687 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 234.438786][ T9903] JBD2: Ignoring recovery information on journal [ 234.525774][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 234.625270][ T9903] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 234.884430][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 235.310027][ T5778] Bluetooth: Wrong link type (-71) [ 235.654224][ T2179] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.806719][ T9949] loop2: detected capacity change from 0 to 32768 [ 235.834362][ T9949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1713 (9949) [ 235.863817][ T2179] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 235.888601][ T2179] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 235.900610][ T9949] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.915670][ T2179] usb 1-1: Product: syz [ 235.930649][ T2179] usb 1-1: SerialNumber: syz [ 235.942941][ T9949] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 235.972262][ T2179] usb 1-1: config 0 descriptor?? [ 235.980139][ T9949] BTRFS info (device loop2): using free space tree [ 236.083623][ T9949] BTRFS info (device loop2): enabling ssd optimizations [ 236.101184][ T9949] BTRFS info (device loop2): auto enabling async discard [ 236.127534][ T9955] loop3: detected capacity change from 0 to 40427 [ 236.166401][ T9955] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 236.179926][ T9955] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.205608][ T2179] hso 1-1:0.0: Failed to find BULK IN ep [ 236.218757][ T9955] F2FS-fs (loop3): invalid crc value [ 236.258284][ T9955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.324497][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.432946][ T2179] usb 1-1: USB disconnect, device number 13 [ 236.561693][ T9955] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 236.587845][ T9955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 236.691476][ T5954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5954) [ 237.200176][T10005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1731'. [ 237.534889][T10015] loop0: detected capacity change from 0 to 2048 [ 237.643237][T10015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.756064][T10015] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.870277][T10015] overlayfs: Failed to create volatile/dirty file. [ 237.988101][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.225128][T10019] loop1: detected capacity change from 0 to 32768 [ 238.291738][T10019] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.378652][T10019] XFS (loop1): Ending clean mount [ 238.395210][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 238.442077][T10019] XFS (loop1): Quotacheck needed: Please wait. [ 238.541590][T10025] loop3: detected capacity change from 0 to 32768 [ 238.551966][T10019] XFS (loop1): Quotacheck: Done. [ 238.614233][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 238.623141][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.643183][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.656368][T10025] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.690130][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 238.730272][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.748411][T10025] XFS (loop3): Ending clean mount [ 238.756578][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.769681][T10039] loop2: detected capacity change from 0 to 8192 [ 238.780811][ T9] usb 1-1: config 0 descriptor?? [ 238.787241][T10025] XFS (loop3): Quotacheck needed: Please wait. [ 238.819198][T10039] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.843192][T10039] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 238.862812][T10039] REISERFS (device loop2): using ordered data mode [ 238.870625][T10039] reiserfs: using flush barriers [ 238.877149][T10025] XFS (loop3): Quotacheck: Done. [ 238.896801][T10039] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.982582][T10039] REISERFS (device loop2): checking transaction log (loop2) [ 239.179912][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 239.240691][ T9] hid (null): unknown global tag 0xa3 [ 239.262346][T10039] REISERFS (device loop2): Using tea hash to sort names [ 239.263321][ T9] waltop 0003:172F:0501.0017: unexpected long global item [ 239.287198][ T9] waltop: probe of 0003:172F:0501.0017 failed with error -22 [ 239.314703][T10039] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 239.335937][T10039] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 239.451729][T10050] loop1: detected capacity change from 0 to 4096 [ 239.459440][ T9] usb 1-1: USB disconnect, device number 14 [ 239.533469][T10050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.746348][T10050] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1743: corrupted inode contents [ 239.797990][T10050] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #15: comm syz.1.1743: mark_inode_dirty error [ 239.859225][T10050] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1743: corrupted inode contents [ 239.877337][T10050] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.1743: mark_inode_dirty error [ 239.899941][T10050] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1743: corrupted inode contents [ 239.912616][T10050] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.1743: mark_inode_dirty error [ 239.928830][T10050] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1743: corrupted inode contents [ 239.941495][T10050] EXT4-fs error (device loop1): ext4_truncate:4301: inode #15: comm syz.1.1743: mark_inode_dirty error [ 239.985313][T10050] EXT4-fs error (device loop1) in ext4_setattr:5682: Corrupt filesystem [ 240.018981][T10050] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #15: comm syz.1.1743: corrupted inode contents [ 240.057745][T10050] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 240.263366][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.646840][T10079] loop3: detected capacity change from 0 to 8192 [ 240.676170][T10079] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 240.699699][T10079] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 240.723089][T10079] REISERFS (device loop3): using ordered data mode [ 240.759600][T10079] reiserfs: using flush barriers [ 240.782338][T10079] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 240.829701][T10079] REISERFS (device loop3): checking transaction log (loop3) [ 240.956562][T10069] loop2: detected capacity change from 0 to 40427 [ 240.984366][T10079] REISERFS (device loop3): Using tea hash to sort names [ 240.984720][T10069] F2FS-fs (loop2): invalid crc value [ 240.991652][T10079] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 241.015294][T10069] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.184202][T10069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.190497][T10081] loop1: detected capacity change from 0 to 32768 [ 241.227801][T10081] (syz.1.1757,10081,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 241.262424][T10081] (syz.1.1757,10081,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 241.297829][T10081] JBD2: Ignoring recovery information on journal [ 241.365470][T10081] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 241.809852][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 242.541929][T10095] loop3: detected capacity change from 0 to 32768 [ 242.724303][ T5084] Bluetooth: hci3: command 0x0405 tx timeout [ 242.855133][T10134] loop0: detected capacity change from 0 to 512 [ 242.919417][T10134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.048133][T10140] block nbd1: NBD_DISCONNECT [ 243.076919][T10140] syz.1.1779: attempt to access beyond end of device [ 243.076919][T10140] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 243.123155][T10140] exFAT-fs (nbd1): unable to read boot sector [ 243.135331][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.144426][T10140] exFAT-fs (nbd1): failed to read boot sector [ 243.150510][T10140] exFAT-fs (nbd1): failed to recognize exfat type [ 243.472896][T10146] syz.0.1780 (10146) used greatest stack depth: 20696 bytes left [ 243.693105][T10131] loop2: detected capacity change from 0 to 40427 [ 243.711462][T10131] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 243.733648][T10131] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 243.793638][T10144] loop3: detected capacity change from 0 to 32768 [ 243.808707][T10131] F2FS-fs (loop2): Found nat_bits in checkpoint [ 244.011765][T10131] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 244.024508][T10131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 245.000649][T10170] loop0: detected capacity change from 0 to 32768 [ 245.023975][T10170] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.1792 (10170) [ 245.067571][T10170] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 245.100516][T10170] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 245.131048][T10170] BTRFS info (device loop0): using free space tree [ 245.263502][T10170] BTRFS info (device loop0): enabling ssd optimizations [ 245.279026][T10170] BTRFS info (device loop0): auto enabling async discard [ 245.439707][ T5770] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 245.659696][T10217] loop2: detected capacity change from 0 to 2048 [ 245.773387][T10217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.874691][T10217] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.948482][T10217] overlayfs: Failed to create volatile/dirty file. [ 246.070160][T10230] loop1: detected capacity change from 0 to 16 [ 246.096232][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.137466][T10230] erofs: (device loop1): mounted with root inode @ nid 36. [ 246.375938][T10238] loop2: detected capacity change from 0 to 512 [ 246.395362][T10238] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 246.440271][T10238] EXT4-fs (loop2): 1 truncate cleaned up [ 246.458974][T10238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.689237][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.043251][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 247.071149][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 247.645849][T10278] loop2: detected capacity change from 0 to 512 [ 247.653184][T10278] EXT4-fs: Ignoring removed orlov option [ 247.691032][T10278] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.742649][T10278] EXT4-fs (loop2): 1 orphan inode deleted [ 247.765898][T10278] EXT4-fs (loop2): 1 truncate cleaned up [ 247.772812][T10278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.813603][T10280] loop3: detected capacity change from 0 to 8192 [ 247.836114][T10280] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 247.884621][T10280] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 247.893918][T10280] REISERFS (device loop3): using ordered data mode [ 247.937245][T10280] reiserfs: using flush barriers [ 247.949159][T10268] loop1: detected capacity change from 0 to 32768 [ 247.957056][T10280] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.977730][T10280] REISERFS (device loop3): checking transaction log (loop3) [ 247.989437][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.036555][T10280] REISERFS (device loop3): Using r5 hash to sort names [ 248.067867][T10280] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 248.181270][T10280] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "noload" [ 248.272193][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 248.488595][T10299] loop3: detected capacity change from 0 to 256 [ 248.498779][T10297] loop2: detected capacity change from 0 to 64 [ 248.532008][T10299] exfat: Deprecated parameter 'namecase' [ 248.576671][T10301] overlayfs: conflicting options: nfs_export=on,index=off [ 248.600857][T10299] exfat: Deprecated parameter 'utf8' [ 248.643000][T10299] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 248.649133][T10303] loop1: detected capacity change from 0 to 1024 [ 249.094319][ T2179] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 249.286298][ T2179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.301682][ T2179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.331768][ T2179] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.371247][ T2179] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.394828][ T2179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.397128][T10319] loop3: detected capacity change from 0 to 2048 [ 249.423241][ T2179] usb 3-1: config 0 descriptor?? [ 249.437137][T10320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 249.730827][T10324] loop3: detected capacity change from 0 to 256 [ 249.799831][T10324] FAT-fs (loop3): Directory bread(block 64) failed [ 249.811356][T10324] FAT-fs (loop3): Directory bread(block 65) failed [ 249.823856][T10324] FAT-fs (loop3): Directory bread(block 66) failed [ 249.842724][T10324] FAT-fs (loop3): Directory bread(block 67) failed [ 249.851250][ T2179] plantronics 0003:047F:FFFF.0018: unbalanced delimiter at end of report description [ 249.862636][T10324] FAT-fs (loop3): Directory bread(block 68) failed [ 249.873711][ T2179] plantronics 0003:047F:FFFF.0018: parse failed [ 249.877393][T10324] FAT-fs (loop3): Directory bread(block 69) failed [ 249.884209][ T2179] plantronics: probe of 0003:047F:FFFF.0018 failed with error -22 [ 249.896437][T10324] FAT-fs (loop3): Directory bread(block 70) failed [ 249.908788][T10324] FAT-fs (loop3): Directory bread(block 71) failed [ 249.918982][T10324] FAT-fs (loop3): Directory bread(block 72) failed [ 249.930438][T10324] FAT-fs (loop3): Directory bread(block 73) failed [ 250.093953][ T9] usb 3-1: USB disconnect, device number 8 [ 250.491717][ T5813] IPVS: starting estimator thread 0... [ 250.538826][T10347] netlink: 'syz.3.1864': attribute type 2 has an invalid length. [ 250.594498][T10345] IPVS: using max 21 ests per chain, 50400 per kthread [ 250.843734][T10353] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 250.892793][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 250.906762][T10353] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 250.977195][T10353] REISERFS (device loop2): using ordered data mode [ 251.003631][T10353] reiserfs: using flush barriers [ 251.013362][T10364] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 251.027975][T10364] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 251.034948][T10364] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 251.042165][T10364] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 251.044459][T10353] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.050292][T10364] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 251.078348][T10364] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 251.086901][T10364] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 251.124831][T10353] REISERFS (device loop2): checking transaction log (loop2) [ 251.214645][T10358] set_capacity_and_notify: 1 callbacks suppressed [ 251.214660][T10358] loop3: detected capacity change from 0 to 8192 [ 251.266264][T10358] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.347572][T10358] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 251.357889][T10358] REISERFS (device loop3): using ordered data mode [ 251.365711][T10358] reiserfs: using flush barriers [ 251.373026][T10358] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.390510][T10358] REISERFS (device loop3): checking transaction log (loop3) [ 251.406722][T10358] REISERFS (device loop3): Using r5 hash to sort names [ 251.413418][T10353] REISERFS (device loop2): Using tea hash to sort names [ 251.430327][T10358] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 251.455311][T10353] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 251.709043][T10371] loop1: detected capacity change from 0 to 2048 [ 251.807250][T10371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.904431][T10371] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.949557][T10366] loop0: detected capacity change from 0 to 40427 [ 251.969554][T10366] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 251.985050][T10366] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 252.050245][T10366] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.112797][T10381] loop3: detected capacity change from 0 to 512 [ 252.133120][T10381] EXT4-fs: Ignoring removed orlov option [ 252.172499][T10381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 252.192023][T10381] EXT4-fs (loop3): 1 orphan inode deleted [ 252.211918][T10381] EXT4-fs (loop3): 1 truncate cleaned up [ 252.219679][T10381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.234438][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 252.271816][T10366] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 252.300615][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.319798][T10366] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.437199][T10366] syz.0.1872: attempt to access beyond end of device [ 252.437199][T10366] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 252.458367][ T23] usb 2-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config [ 252.492049][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.519362][ T23] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 252.534452][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.552746][ T23] usb 2-1: Product: syz [ 252.562869][ T23] usb 2-1: Manufacturer: syz [ 252.572996][ T23] usb 2-1: SerialNumber: syz [ 252.601638][ T5770] syz-executor: attempt to access beyond end of device [ 252.601638][ T5770] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 252.625849][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 252.653308][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 252.660708][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 252.672783][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 252.801888][ T23] usb 2-1: 0:1 : does not exist [ 252.818332][ T23] usb 2-1: unit 9 not found! [ 252.828392][ T23] usb 2-1: unit 0 not found! [ 252.870204][ T23] usb 2-1: USB disconnect, device number 16 [ 252.920590][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.160641][T10392] loop2: detected capacity change from 0 to 40427 [ 253.189056][T10392] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x16481 [ 253.197494][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.270077][T10392] F2FS-fs (loop2): invalid crc value [ 253.282809][T10396] loop0: detected capacity change from 0 to 4096 [ 253.294559][T10392] F2FS-fs (loop2): Found nat_bits in checkpoint [ 253.413581][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.477433][T10392] F2FS-fs (loop2): Start checkpoint disabled! [ 253.477707][T10396] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 253.511073][T10396] ntfs3: loop0: failed to convert name for inode 1e. [ 253.515303][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 253.589919][T10392] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 253.745923][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 253.761323][T10408] loop1: detected capacity change from 0 to 128 [ 253.829076][T10392] syz.2.1882 (10392): drop_caches: 2 [ 253.829228][T10408] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.895799][T10408] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.155667][ T1099] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.700275][T10434] bond_slave_0: entered promiscuous mode [ 254.706669][T10434] bond_slave_1: entered promiscuous mode [ 254.726246][T10434] macsec2: entered allmulticast mode [ 254.731595][T10434] bond0: entered allmulticast mode [ 254.738338][T10434] bond_slave_0: entered allmulticast mode [ 254.769309][T10434] bond_slave_1: entered allmulticast mode [ 254.805740][T10434] bond0: left allmulticast mode [ 254.816032][T10434] bond_slave_0: left allmulticast mode [ 254.822132][T10434] bond_slave_1: left allmulticast mode [ 254.831455][T10434] bond_slave_0: left promiscuous mode [ 254.836989][T10434] bond_slave_1: left promiscuous mode [ 254.978503][T10420] loop1: detected capacity change from 0 to 32768 [ 255.192056][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 255.254289][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 255.456831][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.476955][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.503810][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 255.513339][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.530829][ T23] usb 3-1: config 0 descriptor?? [ 255.695304][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 255.898509][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.919141][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 255.932591][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'. [ 255.945966][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 255.958045][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.998575][ T9] usb 4-1: config 0 descriptor?? [ 256.013300][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 256.030499][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 256.042380][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 256.055120][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 256.068889][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 256.077839][ T9] usb 4-1: media controller created [ 256.085073][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.118057][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 256.125847][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 256.141093][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 256.162554][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 256.195077][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 256.252116][T10457] dvb-usb: bulk message failed: -22 (2/0) [ 256.254896][ T5813] usb 3-1: USB disconnect, device number 9 [ 256.296563][T10457] dvb-usb: bulk message failed: -22 (4/0) [ 256.326426][ T27] usb 4-1: USB disconnect, device number 12 [ 256.329145][T10478] xt_CT: No such helper "syz0" [ 256.375399][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 256.400170][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.407761][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.938763][T10488] loop2: detected capacity change from 0 to 64 [ 257.261578][T10486] loop1: detected capacity change from 0 to 32768 [ 257.340836][T10486] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 257.383827][T10486] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 257.471779][T10486] XFS (loop1): Ending clean mount [ 257.498484][T10486] XFS (loop1): Quotacheck needed: Please wait. [ 257.628842][T10486] XFS (loop1): Quotacheck: Done. [ 257.701108][T10517] loop3: detected capacity change from 0 to 512 [ 257.708933][T10517] EXT4-fs: Ignoring removed bh option [ 257.802317][T10517] EXT4-fs (loop3): 1 truncate cleaned up [ 257.815723][T10517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.826974][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 257.891401][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.972452][T10524] loop3: detected capacity change from 0 to 4096 [ 258.007131][T10524] NILFS (loop3): invalid segment: Checksum error in segment payload [ 258.019988][T10524] NILFS (loop3): trying rollback from an earlier position [ 258.046547][T10524] NILFS (loop3): recovery complete [ 258.053287][T10525] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.644173][ T5813] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 258.762624][T10547] loop0: detected capacity change from 0 to 4096 [ 258.828973][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 258.841678][T10547] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 258.858285][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.880191][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.911729][ T5813] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 258.932756][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.972510][ T5813] usb 3-1: config 0 descriptor?? [ 259.080688][T10554] loop3: detected capacity change from 0 to 512 [ 259.129475][T10554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.395153][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.416357][ T5813] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x2 [ 259.423382][ T5813] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 259.462356][ T5813] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 259.469817][ T5813] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 259.494425][ T5813] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 259.501447][ T5813] lenovo 0003:17EF:60A3.001A: unknown main item tag 0x0 [ 259.544840][ T5813] lenovo 0003:17EF:60A3.001A: hidraw0: USB HID v0.24 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 259.624733][ T2179] usb 3-1: USB disconnect, device number 10 [ 259.727773][T10566] fido_id[10566]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 260.008208][T10578] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 260.017038][T10578] ALSA: mixer_oss: invalid index 137438 [ 260.077093][ T5084] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 260.086032][ T5084] Bluetooth: hci1: Injecting HCI hardware error event [ 260.096041][ T5084] Bluetooth: hci1: hardware error 0x00 [ 260.179971][T10586] loop3: detected capacity change from 0 to 1024 [ 260.478834][T10594] loop1: detected capacity change from 0 to 512 [ 260.553921][T10594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.567251][T10594] ext4 filesystem being mounted at /485/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.783382][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.951023][T10614] (unnamed net_device) (uninitialized): (slave veth1_to_bridge): Device is not bonding slave [ 260.998585][T10614] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth1_to_bridge) [ 261.241989][T10622] loop1: detected capacity change from 0 to 1024 [ 261.296489][T10622] hfsplus: invalid length 65281 has been corrected to 255 [ 261.310280][T10622] hfsplus: invalid length 65281 has been corrected to 255 [ 261.321882][T10622] hfsplus: invalid length 65281 has been corrected to 255 [ 261.330259][T10622] hfsplus: invalid length 65281 has been corrected to 255 [ 261.338976][T10622] hfsplus: invalid length 65281 has been corrected to 255 [ 261.454458][ T5813] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 261.552216][T10612] loop0: detected capacity change from 0 to 40427 [ 261.599437][T10612] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x16481 [ 261.625857][T10612] F2FS-fs (loop0): invalid crc value [ 261.638470][T10612] F2FS-fs (loop0): Found nat_bits in checkpoint [ 261.684453][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 261.694775][ T5813] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.719392][ T5813] usb 4-1: config 0 has no interface number 0 [ 261.737292][ T5813] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 261.757316][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.775814][T10612] F2FS-fs (loop0): Start checkpoint disabled! [ 261.784155][ T5813] usb 4-1: Product: syz [ 261.797649][ T5813] usb 4-1: Manufacturer: syz [ 261.805790][ T5813] usb 4-1: SerialNumber: syz [ 261.825764][T10612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 261.833914][ T5813] usb 4-1: config 0 descriptor?? [ 261.846870][ T5813] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 261.894582][ T5813] usb 4-1: selecting invalid altsetting 1 [ 261.915769][ T5813] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 261.951026][ T5813] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 261.952992][T10626] loop2: detected capacity change from 0 to 32768 [ 261.968255][ T5813] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 261.981273][ T5813] usb 4-1: media controller created [ 262.050602][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.062981][T10612] syz.0.1976 (10612): drop_caches: 2 [ 262.068506][T10626] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 262.220693][T10626] XFS (loop2): Ending clean mount [ 262.234666][ T5084] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 262.252658][T10649] loop1: detected capacity change from 0 to 512 [ 262.302890][T10649] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.365600][T10649] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 262.411455][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 262.421500][ T5084] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 262.421589][ T5084] Bluetooth: hci0: unknown advertising packet type: 0x87 [ 262.429317][ T5084] Bluetooth: hci0: unknown advertising packet type: 0x90 [ 262.437147][ T5084] Bluetooth: hci0: unknown advertising packet type: 0x76 [ 262.444704][ T5084] Bluetooth: hci0: unknown advertising packet type: 0xa1 [ 262.451763][ T5084] Bluetooth: hci0: unknown advertising packet type: 0xa8 [ 262.458906][ T5084] Bluetooth: hci0: unknown advertising packet type: 0xf9 [ 262.975740][T10661] loop1: detected capacity change from 0 to 2048 [ 262.994264][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 263.056088][T10661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.114466][T10624] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 263.151112][T10661] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 263.177758][ T5813] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 263.194222][ T5813] zl10353_read_register: readreg error (reg=127, ret==-71) [ 263.208447][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.212702][ T5813] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 263.240988][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.254194][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.268012][ T5813] usb 4-1: USB disconnect, device number 13 [ 263.282808][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 263.298097][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.355598][ T9] usb 3-1: config 0 descriptor?? [ 263.550053][T10660] loop0: detected capacity change from 0 to 40427 [ 263.577143][T10660] F2FS-fs (loop0): invalid crc value [ 263.586067][T10667] loop1: detected capacity change from 0 to 2048 [ 263.612481][T10667] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 263.625369][T10660] F2FS-fs (loop0): Found nat_bits in checkpoint [ 263.663878][T10667] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 263.711821][T10667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.767983][T10660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 263.816531][ T9] arvo 0003:1E7D:30D4.001B: unbalanced collection at end of report description [ 263.844926][T10673] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0) [ 263.846397][ T9] arvo 0003:1E7D:30D4.001B: parse failed [ 263.913269][ T9] arvo: probe of 0003:1E7D:30D4.001B failed with error -22 [ 264.005628][T10675] loop3: detected capacity change from 0 to 512 [ 264.051508][T10675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.096220][ T5807] usb 3-1: USB disconnect, device number 11 [ 264.111412][T10675] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.289961][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.406492][T10684] loop1: detected capacity change from 0 to 16 [ 264.450225][T10684] erofs: (device loop1): mounted with root inode @ nid 36. [ 264.486585][T10684] syz.1.2004: attempt to access beyond end of device [ 264.486585][T10684] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 264.667943][T10694] loop1: detected capacity change from 0 to 256 [ 264.704930][T10694] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 264.800202][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 264.800215][ T28] audit: type=1800 audit(1784306618.583:89): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2006" name="file1" dev="loop1" ino=1048724 res=0 errno=0 [ 264.951216][T10703] loop0: detected capacity change from 0 to 256 [ 265.005583][T10703] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.565830][T10725] loop0: detected capacity change from 0 to 128 [ 265.596802][T10725] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 265.701156][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 265.710534][ T28] audit: type=1800 audit(1784306619.493:90): pid=10725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2023" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 265.758209][T10706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2013 (10706) [ 265.806093][T10706] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.855041][T10706] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 265.863799][T10706] BTRFS info (device loop3): force clearing of disk cache [ 265.898218][T10706] BTRFS info (device loop3): enabling disk space caching [ 265.917380][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 265.948280][T10706] BTRFS info (device loop3): turning on sync discard [ 265.962847][T10706] BTRFS info (device loop3): disabling tree log [ 265.981902][T10706] BTRFS info (device loop3): metadata ratio 5 [ 266.012331][T10706] BTRFS info (device loop3): disk space caching is enabled [ 266.110231][T10706] BTRFS info (device loop3): enabling ssd optimizations [ 266.161958][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 266.170824][T10706] BTRFS info (device loop3): rebuilding free space tree [ 266.203216][T10706] BTRFS info (device loop3): disabling free space tree [ 266.228311][T10706] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 266.254156][T10706] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 266.403687][ T28] audit: type=1400 audit(1784306620.183:91): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10755 comm="syz.1.2029" [ 266.591052][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.639750][T10733] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2026 (10733) [ 266.673561][T10733] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 266.711965][T10733] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 266.755889][T10733] BTRFS info (device loop0): using free space tree [ 266.968114][T10733] BTRFS info (device loop0): enabling ssd optimizations [ 267.014774][T10733] BTRFS info (device loop0): auto enabling async discard [ 267.073460][T10782] set_capacity_and_notify: 2 callbacks suppressed [ 267.073476][T10782] loop2: detected capacity change from 0 to 512 [ 267.316446][T10782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 267.349910][T10782] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.415714][ T5770] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 267.503348][T10782] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 267.535006][T10782] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 267.562703][T10782] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2032: Failed to acquire dquot type 0 [ 267.663387][T10793] loop3: detected capacity change from 0 to 128 [ 267.753692][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.765230][ T5758] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (5758) [ 267.884508][ T5826] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 267.916079][T10798] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 267.968022][T10802] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2040'. [ 267.984257][T10802] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 268.106457][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.137912][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 268.137949][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.137997][ T5826] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 268.138021][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.152681][ T5826] usb 2-1: config 0 descriptor?? [ 268.162116][T10791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.421075][T10812] 0x000000000818-0x002000000818 : "ÿÿÿÿ" [ 268.439521][T10812] mtd: partition "ÿÿÿÿ" extends beyond the end of device "mtdram test device" -- size truncated to 0x1f7e8 [ 268.512377][T10812] ftl_cs: FTL header corrupt! [ 268.613112][ T5826] elecom 0003:056E:00FB.001C: unknown main item tag 0x3 [ 268.657087][ T5826] elecom 0003:056E:00FB.001C: unknown global tag 0xe [ 268.684532][ T5826] elecom 0003:056E:00FB.001C: item 0 1 1 14 parsing failed [ 268.692579][ T5826] elecom: probe of 0003:056E:00FB.001C failed with error -22 [ 268.804711][T10819] loop3: detected capacity change from 0 to 512 [ 268.857666][T10821] ALSA: mixer_oss: invalid OSS volume '' [ 268.883493][ T5807] usb 2-1: USB disconnect, device number 17 [ 269.013966][T10808] loop0: detected capacity change from 0 to 32768 [ 269.036358][T10808] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2044 (10808) [ 269.052871][T10808] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 269.071807][T10808] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 269.099581][T10808] BTRFS info (device loop0): use zlib compression, level 3 [ 269.114143][T10808] BTRFS info (device loop0): using free space tree [ 269.222363][T10808] BTRFS info (device loop0): enabling ssd optimizations [ 269.241065][T10808] BTRFS info (device loop0): auto enabling async discard [ 269.249630][T10842] mmap: syz.3.2054 (10842): VmData 49352704 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 269.689837][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 270.504357][T10874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2066'. [ 270.514005][T10874] netlink: 'syz.1.2066': attribute type 6 has an invalid length. [ 270.553430][T10874] netlink: 'syz.1.2066': attribute type 5 has an invalid length. [ 270.584437][T10874] netlink: 'syz.1.2066': attribute type 4 has an invalid length. [ 270.639381][T10877] loop0: detected capacity change from 0 to 512 [ 270.721358][T10877] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2076: iget: bad i_size value: 38620345925642 [ 270.761407][T10877] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2076: couldn't read orphan inode 15 (err -117) [ 270.825237][T10877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.997149][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.603490][T10880] loop3: detected capacity change from 0 to 40427 [ 271.647021][T10880] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x16481 [ 271.682268][T10880] F2FS-fs (loop3): invalid crc value [ 271.703630][T10880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 271.756097][ T3065] ------------[ cut here ]------------ [ 271.761643][ T3065] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 271.814516][ T3065] WARNING: CPU: 1 PID: 3065 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 271.823918][ T3065] Modules linked in: [ 271.827923][ T3065] CPU: 1 PID: 3065 Comm: kworker/1:2 Not tainted syzkaller #0 [ 271.835709][ T3065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 271.847022][ T3065] Workqueue: events request_firmware_work_func [ 271.853408][ T3065] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 271.859282][ T3065] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 1f c9 ff 49 8b 17 48 c7 c7 40 bb da 8a 48 89 de e8 05 81 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef a7 70 ff [ 271.879511][ T3065] RSP: 0018:ffffc9000c4c7820 EFLAGS: 00010246 [ 271.885796][ T3065] RAX: f3f0784cf1a01200 RBX: ffffffff8b422ee0 RCX: ffff88802c7a8000 [ 271.893804][ T3065] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 271.902277][ T3065] RBP: ffffc9000c4c7950 R08: ffffc9000c4c7427 R09: 1ffff92001898e84 [ 271.911011][ T3065] R10: dffffc0000000000 R11: fffff52001898e85 R12: 1ffffffff16845e0 [ 271.919136][ T3065] R13: dffffc0000000000 R14: ffff8880311d91f0 R15: ffff888022109008 [ 271.927173][ T3065] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 271.936660][ T3065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.939831][T10880] F2FS-fs (loop3): Start checkpoint disabled! [ 271.943253][ T3065] CR2: 00007f0ab79556b8 CR3: 0000000063dbc000 CR4: 00000000003506e0 [ 271.958517][ T3065] Call Trace: [ 271.961813][ T3065] [ 271.965120][ T3065] ? sysfs_unmerge_group+0x10d/0x130 [ 271.970449][ T3065] device_del+0x251/0x910 [ 271.974878][ T3065] ? kill_device+0x160/0x160 [ 271.979508][ T3065] ? __fw_load_abort+0x8b/0x1a0 [ 271.984440][ T3065] firmware_fallback_sysfs+0x68c/0x950 [ 271.989941][ T3065] _request_firmware+0xf29/0x1520 [ 271.995416][ T3065] ? request_firmware+0x50/0x50 [ 272.000306][ T3065] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 272.006371][ T3065] ? __lock_acquire+0x7d80/0x7d80 [ 272.011428][ T3065] ? read_lock_is_recursive+0x20/0x20 [ 272.016924][ T3065] request_firmware_work_func+0x9e/0x1a0 [ 272.022590][ T3065] ? process_scheduled_works+0x975/0x1600 [ 272.028641][ T3065] process_scheduled_works+0xa60/0x1600 [ 272.034291][ T3065] ? worker_attach_to_pool+0x370/0x370 [ 272.039832][ T3065] ? assign_work+0x3cc/0x5d0 [ 272.042163][T10880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 272.044459][ T3065] worker_thread+0xa5e/0xfe0 [ 272.044500][ T3065] ? _raw_spin_unlock+0x40/0x40 [ 272.044522][ T3065] ? __kthread_parkme+0x71/0x1c0 [ 272.044549][ T3065] kthread+0x2fa/0x390 [ 272.071778][ T3065] ? pr_cont_work+0x550/0x550 [ 272.076619][ T3065] ? kthread_blkcg+0xd0/0xd0 [ 272.081237][ T3065] ret_from_fork+0x48/0x80 [ 272.086013][ T3065] ? kthread_blkcg+0xd0/0xd0 [ 272.090640][ T3065] ret_from_fork_asm+0x11/0x20 [ 272.095493][ T3065] [ 272.098532][ T3065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 272.105827][ T3065] CPU: 1 PID: 3065 Comm: kworker/1:2 Not tainted syzkaller #0 [ 272.113302][ T3065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 272.123373][ T3065] Workqueue: events request_firmware_work_func [ 272.129562][ T3065] Call Trace: [ 272.132859][ T3065] [ 272.135799][ T3065] dump_stack_lvl+0x18c/0x250 [ 272.140509][ T3065] ? show_regs_print_info+0x20/0x20 [ 272.145725][ T3065] ? load_image+0x420/0x420 [ 272.150250][ T3065] panic+0x2ca/0x720 [ 272.154156][ T3065] ? bpf_jit_dump+0xd0/0xd0 [ 272.158675][ T3065] ? ret_from_fork_asm+0x11/0x20 [ 272.163617][ T3065] __warn+0x2e0/0x470 [ 272.167593][ T3065] ? sysfs_remove_group+0x17b/0x290 [ 272.172785][ T3065] ? sysfs_remove_group+0x17b/0x290 [ 272.177975][ T3065] report_bug+0x2be/0x4f0 [ 272.182306][ T3065] ? sysfs_remove_group+0x17b/0x290 [ 272.187497][ T3065] ? sysfs_remove_group+0x17b/0x290 [ 272.192686][ T3065] ? sysfs_remove_group+0x17d/0x290 [ 272.197874][ T3065] handle_bug+0xcf/0x120 [ 272.202114][ T3065] exc_invalid_op+0x1a/0x50 [ 272.206606][ T3065] asm_exc_invalid_op+0x1a/0x20 [ 272.211450][ T3065] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 272.217247][ T3065] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 f7 1f c9 ff 49 8b 17 48 c7 c7 40 bb da 8a 48 89 de e8 05 81 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef a7 70 ff [ 272.236867][ T3065] RSP: 0018:ffffc9000c4c7820 EFLAGS: 00010246 [ 272.242927][ T3065] RAX: f3f0784cf1a01200 RBX: ffffffff8b422ee0 RCX: ffff88802c7a8000 [ 272.250892][ T3065] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 272.258862][ T3065] RBP: ffffc9000c4c7950 R08: ffffc9000c4c7427 R09: 1ffff92001898e84 [ 272.266826][ T3065] R10: dffffc0000000000 R11: fffff52001898e85 R12: 1ffffffff16845e0 [ 272.274786][ T3065] R13: dffffc0000000000 R14: ffff8880311d91f0 R15: ffff888022109008 [ 272.282761][ T3065] ? sysfs_unmerge_group+0x10d/0x130 [ 272.288043][ T3065] device_del+0x251/0x910 [ 272.292373][ T3065] ? kill_device+0x160/0x160 [ 272.296957][ T3065] ? __fw_load_abort+0x8b/0x1a0 [ 272.301805][ T3065] firmware_fallback_sysfs+0x68c/0x950 [ 272.307264][ T3065] _request_firmware+0xf29/0x1520 [ 272.312298][ T3065] ? request_firmware+0x50/0x50 [ 272.317143][ T3065] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 272.323113][ T3065] ? __lock_acquire+0x7d80/0x7d80 [ 272.328127][ T3065] ? read_lock_is_recursive+0x20/0x20 [ 272.333496][ T3065] request_firmware_work_func+0x9e/0x1a0 [ 272.339120][ T3065] ? process_scheduled_works+0x975/0x1600 [ 272.344836][ T3065] process_scheduled_works+0xa60/0x1600 [ 272.350406][ T3065] ? worker_attach_to_pool+0x370/0x370 [ 272.355868][ T3065] ? assign_work+0x3cc/0x5d0 [ 272.360461][ T3065] worker_thread+0xa5e/0xfe0 [ 272.365054][ T3065] ? _raw_spin_unlock+0x40/0x40 [ 272.369897][ T3065] ? __kthread_parkme+0x71/0x1c0 [ 272.374833][ T3065] kthread+0x2fa/0x390 [ 272.378894][ T3065] ? pr_cont_work+0x550/0x550 [ 272.383563][ T3065] ? kthread_blkcg+0xd0/0xd0 [ 272.388149][ T3065] ret_from_fork+0x48/0x80 [ 272.392561][ T3065] ? kthread_blkcg+0xd0/0xd0 [ 272.397142][ T3065] ret_from_fork_asm+0x11/0x20 [ 272.401913][ T3065] [ 272.405183][ T3065] Kernel Offset: disabled [ 272.409576][ T3065] Rebooting in 86400 seconds..