last executing test programs: 4.327985284s ago: executing program 2 (id=1822): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020706500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000069fc0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 4.06177375s ago: executing program 2 (id=1825): recvmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/212, 0xd4}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/231, 0xe7}], 0x1}, 0x9}], 0x2, 0x100, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 3.750191495s ago: executing program 2 (id=1828): io_uring_setup(0x4b90, &(0x7f0000000040)={0x0, 0x100f8c7, 0x0, 0xfffffffd, 0x124e}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x181801, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) close(0x3) 3.508606277s ago: executing program 0 (id=1831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020) 3.222181967s ago: executing program 0 (id=1842): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x7, 0x2, r0, 0x0, 0x0, 0x3, 0x0, 0x4}]) 2.995084836s ago: executing program 0 (id=1836): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x200d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x3, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd287100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220606"], 0x0}, 0x0) 2.716092905s ago: executing program 2 (id=1839): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x4000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) 2.51720825s ago: executing program 2 (id=1841): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f0000006d00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.805286324s ago: executing program 3 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) 1.510882446s ago: executing program 3 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b20a0500234802001c00128009000100626f6e64000000000c00028008001e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.341348465s ago: executing program 1 (id=1848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffd9, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.056753415s ago: executing program 1 (id=1849): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 849.599951ms ago: executing program 3 (id=1850): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x10) 844.509552ms ago: executing program 0 (id=1851): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1f0, &(0x7f00000004c0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 812.725768ms ago: executing program 1 (id=1852): r0 = fsopen(&(0x7f0000000340)='devpts\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 704.950787ms ago: executing program 2 (id=1853): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f0000000200)) 641.393827ms ago: executing program 3 (id=1854): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x1b8, 0x30, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{0x1a4, 0x1, [@m_connmark={0x64, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x10000000, 0x51c86cc0, 0x8}, 0x4}}]}, {0x15, 0x6, "2e0effe2dc3401cf98dcd68e067373e3a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_tunnel_key={0x60, 0x0, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x4, 0x100}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0xdc, 0x20, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0x0, 0xffff, 0x8}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x10000008, 0xfff}, 0xfffc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x8, 0x9, 0x2}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd51, 0xf6ec, 0x20000000, 0x8, 0x2}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0x2, 0x8, 0xd}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffff2b7, 0x1, 0x8, 0x8}, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0xd0}, 0x40804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 564.334621ms ago: executing program 1 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x53d}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 526.016978ms ago: executing program 0 (id=1856): pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 424.371086ms ago: executing program 3 (id=1857): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 257.425195ms ago: executing program 1 (id=1858): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x81, 0x0, 0x8, 0x9a, 0x81, 0x4, 0x0, 0xedf3}, &(0x7f0000000080)=0x20) 209.935303ms ago: executing program 3 (id=1859): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000008700)=[{{&(0x7f0000000280)=@can={0x1d, 0x0, 0xc8}, 0x80, &(0x7f0000002700)=[{&(0x7f00000003c0)="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", 0x6fa}], 0x1}}], 0x1, 0xf5) 188.353767ms ago: executing program 0 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000440)={0x2, 'vlan1\x00', {0x100007f}, 0xf}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) 0s ago: executing program 1 (id=1861): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000c00)) kernel console output (not intermixed with test programs): out journal. Quota mode: writeback. [ 142.818824][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.079810][ T787] usb 3-1: USB disconnect, device number 9 [ 143.079847][ C1] usb 3-1: comm data receiver aborted. [ 143.726667][ T7515] ip_tables: iptables: counters copy to user failed while replacing table [ 144.044304][ T7509] loop3: detected capacity change from 0 to 40427 [ 144.085123][ T7509] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 144.094098][ T7509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 144.127360][ T7509] F2FS-fs (loop3): invalid crc value [ 144.329665][ T7509] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 144.354999][ T7509] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.573194][ T5771] syz-executor: attempt to access beyond end of device [ 144.573194][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.612055][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 145.118026][ T7560] loop1: detected capacity change from 0 to 4096 [ 145.142015][ T7560] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 145.819888][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 145.819902][ T28] audit: type=1326 audit(1790910498.201:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 145.896795][ T28] audit: type=1326 audit(1790910498.201:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 145.978899][ T28] audit: type=1326 audit(1790910498.201:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.004013][ T28] audit: type=1326 audit(1790910498.201:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.028622][ T28] audit: type=1326 audit(1790910498.201:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.053463][ T28] audit: type=1326 audit(1790910498.201:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.077876][ T28] audit: type=1326 audit(1790910498.201:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.102464][ T28] audit: type=1326 audit(1790910498.201:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.139249][ T28] audit: type=1326 audit(1790910498.211:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.199591][ T28] audit: type=1326 audit(1790910498.211:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.3.733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 146.250829][ T7584] loop3: detected capacity change from 0 to 8 [ 146.655410][ T7574] loop0: detected capacity change from 0 to 40427 [ 146.671559][ T7574] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 146.681429][ T7574] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 146.694537][ T7574] F2FS-fs (loop0): invalid crc value [ 146.929072][ T7574] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 146.942131][ T7574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.962807][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 147.158543][ T5772] syz-executor: attempt to access beyond end of device [ 147.158543][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.196648][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 147.494725][ T7617] loop2: detected capacity change from 0 to 8 [ 147.944949][ T2134] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.033274][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.759'. [ 148.148151][ T2134] usb 4-1: Using ep0 maxpacket: 32 [ 148.172264][ T2134] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 148.175702][ T7636] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 148.192676][ T2134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.201170][ T7636] block nbd0: shutting down sockets [ 148.219502][ T2134] usb 4-1: config 0 descriptor?? [ 148.339592][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 148.443407][ T2134] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 148.468060][ T2134] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.508430][ T2134] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 148.525235][ T2134] usb 4-1: media controller created [ 148.629402][ T2134] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.661301][ T7632] loop1: detected capacity change from 0 to 40427 [ 148.703619][ T7632] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 148.722495][ T2134] az6027: usb out operation failed. (-71) [ 148.734512][ T7632] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 148.753639][ T2134] az6027: usb out operation failed. (-71) [ 148.763692][ T2134] stb0899_attach: Driver disabled by Kconfig [ 148.774485][ T7646] loop2: detected capacity change from 0 to 2048 [ 148.781689][ T2134] az6027: no front-end attached [ 148.781689][ T2134] [ 148.789937][ T7632] F2FS-fs (loop1): invalid crc value [ 148.810752][ T2134] az6027: usb out operation failed. (-71) [ 148.821747][ T2134] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 148.834420][ T2134] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 148.850823][ T7632] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.904184][ T7646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.939290][ T2134] dvb-usb: schedule remote query interval to 400 msecs. [ 148.970485][ T2134] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 149.069512][ T7632] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 149.089280][ T2134] usb 4-1: USB disconnect, device number 4 [ 149.209279][ T7632] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.271287][ T2134] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 149.366310][ T7632] syz.1.758: attempt to access beyond end of device [ 149.366310][ T7632] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 149.410756][ T7632] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 149.443437][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.775131][ T7670] loop2: detected capacity change from 0 to 512 [ 149.796208][ T7670] EXT4-fs: Ignoring removed orlov option [ 149.849769][ T7670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.892193][ T7670] EXT4-fs (loop2): 1 truncate cleaned up [ 149.899994][ T7670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.933606][ T7670] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 149.985788][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 150.008167][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.070276][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.776'. [ 150.148452][ T7676] loop2: detected capacity change from 0 to 8 [ 150.163655][ T7676] squashfs image failed sanity check [ 150.328568][ T7680] loop1: detected capacity change from 0 to 256 [ 150.348028][ T7682] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 150.369987][ T7682] flags: 0x17ff00000004000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 150.391457][ T7682] page_type: 0xffffffff() [ 150.414912][ T7682] raw: 017ff00000004000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 150.435010][ T6669] blk_print_req_error: 9 callbacks suppressed [ 150.435026][ T6669] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.436838][ T7682] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 150.492158][ T7682] page dumped because: unmovable page [ 150.502275][ T7682] page_owner info is not present (never set?) [ 150.869383][ T7704] loop1: detected capacity change from 0 to 4096 [ 150.919543][ T7704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.967332][ T7709] kAFS: Invalid Command on /proc/fs/afs/cells file [ 150.984856][ T2134] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.187360][ T2134] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.210115][ T2134] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.240206][ T2134] usb 4-1: string descriptor 0 read error: -22 [ 151.255501][ T2134] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 151.283621][ T2134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.284234][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.310445][ T2134] etas_es58x 4-1:1.0: Starting (null) (null) (Serial Number (null)) [ 151.313931][ T7721] loop0: detected capacity change from 0 to 128 [ 151.319092][ T2134] etas_es58x 4-1:1.0: could not retrieve the product info string [ 151.425676][ T7721] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 151.552339][ T7696] etas_es58x 4-1:1.0 can0: es58x_submit_urb: USB send urb failure: -EMSGSIZE [ 151.569527][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 151.569541][ T28] audit: type=1800 audit(1790910503.951:49): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.795" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 151.605700][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 151.613696][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 151.632959][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 151.643079][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 151.659862][ C1] etas_es58x 4-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 151.686809][ T7721] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 151.689409][ T7696] etas_es58x 4-1:1.0 can0: es58x_open: Could not open the network device: -EMSGSIZE [ 151.724607][ T5817] usb 4-1: USB disconnect, device number 5 [ 151.734050][ T5817] etas_es58x 4-1:1.0: Disconnecting (null) (null) [ 152.099437][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 152.312758][ T7731] loop2: detected capacity change from 0 to 40427 [ 152.355275][ T7731] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 152.362318][ T7731] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.401201][ T7731] F2FS-fs (loop2): invalid crc value [ 152.415909][ T7731] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 152.464509][ T7731] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.499993][ T7756] loop1: detected capacity change from 0 to 1024 [ 152.668870][ T7731] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 152.693398][ T7731] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.948400][ T5774] syz-executor: attempt to access beyond end of device [ 152.948400][ T5774] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 152.992913][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 153.015716][ T5774] syz-executor: attempt to access beyond end of device [ 153.015716][ T5774] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 153.048231][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 153.184241][ T7783] db_root: cannot open: û [ 153.877718][ T7808] MTRR 1 not used [ 153.909640][ T7785] loop0: detected capacity change from 0 to 32768 [ 154.009577][ T7785] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 154.162135][ T7785] (syz.0.816,7785,1):ocfs2_double_lock:1197 ERROR: status = -2 [ 154.206899][ T7785] (syz.0.816,7785,1):ocfs2_rename:1306 ERROR: status = -2 [ 154.214505][ T7785] (syz.0.816,7785,1):ocfs2_rename:1697 ERROR: status = -2 [ 154.388174][ T5772] ocfs2: Unmounting device (7,0) on (node local) [ 154.680128][ T7834] loop3: detected capacity change from 0 to 512 [ 154.900715][ T7834] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.929094][ T7834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 154.944963][ T7834] System zones: 1-12 [ 154.953397][ T7834] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.989793][ T7847] loop0: detected capacity change from 0 to 512 [ 155.010961][ T7847] EXT4-fs: Ignoring removed oldalloc option [ 155.033893][ T7847] EXT4-fs (loop0): Test dummy encryption mode enabled [ 155.088937][ T7847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.272598][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.342720][ T7834] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 155.393202][ T7834] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.833: Directory hole found for htree leaf block 0 [ 155.418827][ T7834] EXT4-fs (loop3): Remounting filesystem read-only [ 155.561886][ T7852] loop1: detected capacity change from 0 to 32768 [ 155.564238][ T5771] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 155.663057][ T7852] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.790544][ T7866] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 155.804212][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 155.810275][ T7852] (syz.1.837,7852,1):ocfs2_double_lock:1197 ERROR: status = -2 [ 155.821466][ T7866] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 155.827640][ T7852] (syz.1.837,7852,1):ocfs2_rename:1306 ERROR: status = -2 [ 155.836050][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 155.863561][ T7852] (syz.1.837,7852,1):ocfs2_rename:1697 ERROR: status = -2 [ 156.068731][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 156.524311][ T7891] loop3: detected capacity change from 0 to 2048 [ 156.575988][ T7891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.636683][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.928417][ T7912] tun0: tun_chr_ioctl cmd 1074812118 [ 157.110073][ T7921] loop3: detected capacity change from 0 to 512 [ 157.148161][ T7921] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.866: iget: bad i_size value: 38620345925642 [ 157.236705][ T7921] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.866: couldn't read orphan inode 15 (err -117) [ 157.250870][ T7921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.281342][ T7921] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.866: bg 0: block 5: invalid block bitmap [ 157.299844][ T7921] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 157.312878][ T7921] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.312878][ T7921] [ 157.323124][ T7921] EXT4-fs (loop3): Total free blocks count 0 [ 157.332878][ T7921] EXT4-fs (loop3): Free/Dirty block details [ 157.345269][ T7921] EXT4-fs (loop3): free_blocks=0 [ 157.350266][ T7921] EXT4-fs (loop3): dirty_blocks=1 [ 157.375530][ T7921] EXT4-fs (loop3): Block reservation details [ 157.388267][ T7921] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 157.510395][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.909000][ T7958] < [ 158.030548][ T7963] loop0: detected capacity change from 0 to 128 [ 158.333812][ T7951] loop2: detected capacity change from 0 to 32768 [ 158.352439][ T7951] XFS: noikeep mount option is deprecated. [ 158.363357][ T7974] loop3: detected capacity change from 0 to 256 [ 158.438382][ T7951] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.500610][ T7970] netdevsim netdevsim12 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.521257][ T7970] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.659753][ T7986] netlink: 14 bytes leftover after parsing attributes in process `syz.0.891'. [ 158.787214][ T7951] XFS (loop2): Ending clean mount [ 158.793710][ T7988] bonding: bond0 is being deleted... [ 158.825515][ T7951] XFS (loop2): Quotacheck needed: Please wait. [ 158.912548][ T7988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.951240][ T7951] XFS (loop2): Quotacheck: Done. [ 158.967435][ T7988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.988284][ T7988] bond0 (unregistering): Released all slaves [ 159.315412][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.551034][ T8007] loop1: detected capacity change from 0 to 64 [ 159.605741][ T8007] hfs: request for non-existent node 131072 in B*Tree [ 159.614390][ T8007] hfs: request for non-existent node 131072 in B*Tree [ 159.707834][ T8004] loop3: detected capacity change from 0 to 32768 [ 159.764712][ T8004] ERROR: (device loop3): diAllocAG: numfree > numinos [ 159.764712][ T8004] [ 159.783913][ T8004] ERROR: (device loop3): remounting filesystem as read-only [ 159.797269][ T8004] ialloc: diAlloc returned -5! [ 159.811180][ T8004] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 159.811180][ T8004] [ 160.178957][ T8025] loop1: detected capacity change from 0 to 256 [ 160.213108][ T8025] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 160.348812][ T8028] loop1: detected capacity change from 0 to 1024 [ 160.571514][ T28] audit: type=1400 audit(1790910512.931:50): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8031 comm="syz.1.913" name="p" offset=48 [ 161.258356][ T8049] loop2: detected capacity change from 0 to 40427 [ 161.290421][ T8049] F2FS-fs (loop2): invalid crc value [ 161.305235][ T8049] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.381163][ T8049] F2FS-fs (loop2): Start checkpoint disabled! [ 161.406142][ T8049] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 161.426605][ T8061] binder: 8060:8061 ioctl c0306201 200000000300 returned -14 [ 161.541091][ T2963] kworker/u4:8: attempt to access beyond end of device [ 161.541091][ T2963] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 161.556144][ T2963] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.563295][ T2963] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 162.027781][ T8078] loop3: detected capacity change from 0 to 512 [ 162.067132][ T8078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.090630][ T8078] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.932: bad orphan inode 131083 [ 162.110586][ T8078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.264955][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.460487][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.484970][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.511508][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.522611][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.536129][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 162.546812][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.568016][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.705390][ T8098] loop3: detected capacity change from 0 to 4096 [ 162.750263][ T8101] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.887318][ T5771] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 162.902203][ T5771] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 162.924899][ T5771] Remounting filesystem read-only [ 162.930035][ T5771] NILFS (loop3): error -5 truncating bmap (ino=12) [ 162.935446][ T8103] loop1: detected capacity change from 0 to 8192 [ 162.949609][ T5771] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 162.961846][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 162.968773][ T5771] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 162.976953][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 162.983670][ T5771] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 162.993759][ T8103] loop1: p1 p2 p4[EZD] [ 162.998836][ T5771] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 163.004131][ T8103] loop1: p4 start 201326592 is beyond EOD, [ 163.007986][ T5771] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 163.010278][ T8103] truncated [ 163.016337][ T5771] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 163.044864][ T5771] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 163.187990][ T9] gud 3-1:1.0: Failed to get properties (error=-71) [ 163.205337][ T9] gud: probe of 3-1:1.0 failed with error -71 [ 163.260081][ T9] usb 3-1: USB disconnect, device number 10 [ 163.352803][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 163.355839][ T6669] udevd[6669]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 163.726153][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 163.911347][ T8132] netlink: 'syz.1.956': attribute type 12 has an invalid length. [ 163.919745][ T8132] netlink: 'syz.1.956': attribute type 29 has an invalid length. [ 163.927658][ T8132] netlink: 148 bytes leftover after parsing attributes in process `syz.1.956'. [ 164.100632][ T8140] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 164.107517][ T8140] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.124594][ T8140] vhci_hcd vhci_hcd.0: Device attached [ 164.143173][ T8145] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 164.149698][ T8145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.173230][ T8145] vhci_hcd vhci_hcd.0: Device attached [ 164.203083][ T8140] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 164.209641][ T8140] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.231085][ T8140] vhci_hcd vhci_hcd.0: Device attached [ 164.258754][ T8140] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 164.265326][ T8140] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.275261][ T8140] vhci_hcd vhci_hcd.0: Device attached [ 164.284021][ T8148] vhci_hcd: connection closed [ 164.284111][ T8146] vhci_hcd: connection closed [ 164.289353][ T1075] vhci_hcd: stop threads [ 164.289376][ T8143] vhci_hcd: connection closed [ 164.299468][ T1075] vhci_hcd: release socket [ 164.325095][ T1075] vhci_hcd: disconnect device [ 164.335056][ T1075] vhci_hcd: stop threads [ 164.345887][ T1075] vhci_hcd: release socket [ 164.354932][ T1075] vhci_hcd: disconnect device [ 164.362277][ T8152] vhci_hcd: connection closed [ 164.362629][ T1075] vhci_hcd: stop threads [ 164.372405][ T1075] vhci_hcd: release socket [ 164.377153][ T1075] vhci_hcd: disconnect device [ 164.381978][ T1075] vhci_hcd: stop threads [ 164.385963][ T8] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 164.386676][ T1075] vhci_hcd: release socket [ 164.398273][ T8] usb 37-1: enqueue for inactive port 0 [ 164.405930][ T1075] vhci_hcd: disconnect device [ 164.484892][ T8] vhci_hcd: vhci_device speed not set [ 164.602949][ T8155] loop1: detected capacity change from 0 to 32768 [ 164.615538][ T8155] XFS: noikeep mount option is deprecated. [ 164.642531][ T8155] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.784666][ T8155] XFS (loop1): Ending clean mount [ 164.835957][ T8155] XFS (loop1): Quotacheck needed: Please wait. [ 164.914456][ T8155] XFS (loop1): Quotacheck: Done. [ 164.962852][ T8167] loop0: detected capacity change from 0 to 4096 [ 164.995919][ T8167] EXT4-fs: Ignoring removed i_version option [ 165.002013][ T8167] EXT4-fs: Ignoring removed oldalloc option [ 165.040741][ T8167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 165.059978][ T8167] EXT4-fs (loop0): Test dummy encryption mode enabled [ 165.075248][ T8167] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 165.090252][ T8173] :syz3:E:00000000000000000257::*]:./dev/kmsg: [ 165.350527][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.455693][ T8185] loop0: detected capacity change from 0 to 64 [ 165.728014][ T8188] loop3: detected capacity change from 0 to 4096 [ 165.744036][ T8188] EXT4-fs: Ignoring removed nobh option [ 165.758961][ T8188] EXT4-fs: Ignoring removed bh option [ 165.766894][ T8188] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.811660][ T8188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.007032][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.129435][ T8208] loop2: detected capacity change from 0 to 128 [ 166.257936][ T8208] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 166.347009][ T8208] hpfs: filesystem error: improperly stopped [ 166.404948][ T8208] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 166.429744][ T8208] hpfs: You really don't want any checks? You are crazy... [ 166.481789][ T8208] hpfs: Code page index out of array [ 166.494958][ T8208] hpfs: code page support is disabled [ 166.532535][ T8208] hpfs: hpfs_map_4sectors(): unaligned read [ 166.566104][ T8208] hpfs: hpfs_map_4sectors(): unaligned read [ 166.572108][ T8208] hpfs: filesystem error: unable to find root dir [ 167.153504][ T8207] loop0: detected capacity change from 0 to 131072 [ 167.183501][ T8207] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 167.193009][ T8207] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.203449][ T8207] F2FS-fs (loop0): invalid crc value [ 167.239024][ T8207] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.292757][ T8207] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.300062][ T8207] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 167.388029][ T8207] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 167.845172][ T2134] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.098599][ T2134] usb 2-1: Using ep0 maxpacket: 16 [ 168.113058][ T2134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.124676][ T2134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.135767][ T2134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.151793][ T2134] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.161344][ T2134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.215944][ T2134] usb 2-1: config 0 descriptor?? [ 168.723339][ T2134] microsoft 0003:045E:07DA.0003: bogus close delimiter [ 168.765916][ T2134] microsoft 0003:045E:07DA.0003: item 0 4 2 10 parsing failed [ 168.799518][ T2134] microsoft 0003:045E:07DA.0003: parse failed [ 168.828544][ T2134] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 168.946233][ T8262] bonding: mM% is being created... [ 168.981933][ T8262] bonding: mM% creation failed [ 169.043180][ T2134] usb 2-1: USB disconnect, device number 6 [ 169.145771][ T8253] loop3: detected capacity change from 0 to 32768 [ 169.154117][ T8253] XFS: noikeep mount option is deprecated. [ 169.215656][ T8253] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.348010][ T8253] XFS (loop3): Ending clean mount [ 169.366566][ T8253] XFS (loop3): Quotacheck needed: Please wait. [ 169.456614][ T8253] XFS (loop3): Quotacheck: Done. [ 169.796563][ T8271] loop0: detected capacity change from 0 to 32768 [ 169.835306][ T8271] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 169.876060][ T8271] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.943828][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.026993][ T8271] XFS (loop0): Ending clean mount [ 170.038008][ T8271] XFS (loop0): Quotacheck needed: Please wait. [ 170.104271][ T8271] XFS (loop0): Quotacheck: Done. [ 170.135183][ T8306] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 170.230428][ T5772] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.280094][ T8311] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1023'. [ 170.355692][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 171.284549][ T8348] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1040'. [ 171.432387][ T8353] loop1: detected capacity change from 0 to 512 [ 171.468612][ T28] audit: type=1326 audit(1790910779.847:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 171.531161][ T8353] EXT4-fs error (device loop1): __ext4_iget:5091: inode #11: block 1: comm syz.1.1043: invalid block [ 171.531869][ T28] audit: type=1326 audit(1790910779.867:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 171.568228][ T28] audit: type=1326 audit(1790910779.877:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 171.592391][ T28] audit: type=1326 audit(1790910779.877:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 171.616987][ T28] audit: type=1326 audit(1790910779.887:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 171.637344][ T8353] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1043: couldn't read orphan inode 11 (err -117) [ 171.644847][ T28] audit: type=1326 audit(1790910779.947:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ddd9e159 code=0x7ffc0000 [ 171.694443][ T28] audit: type=1326 audit(1790910779.947:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4ddd9dec2 code=0x7ffc0000 [ 171.704444][ T8353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.761725][ T28] audit: type=1326 audit(1790910779.947:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd4ddd9df57 code=0x7ffc0000 [ 171.814573][ T28] audit: type=1326 audit(1790910779.947:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd4ddd5ae51 code=0x7ffc0000 [ 171.847829][ T28] audit: type=1326 audit(1790910779.947:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8355 comm="syz.3.1018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd4ddd9ef49 code=0x7ffc0000 [ 171.936818][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.450461][ T8385] sctp: [Deprecated]: syz.0.1054 (pid 8385) Use of int in maxseg socket option. [ 172.450461][ T8385] Use struct sctp_assoc_value instead [ 172.661304][ T8391] loop2: detected capacity change from 0 to 1024 [ 172.745186][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 172.877034][ T4595] hfsplus: bad catalog file entry [ 172.955016][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 172.975234][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.997517][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.020723][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.040355][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.065603][ T9] usb 4-1: config 0 descriptor?? [ 173.179421][ T8389] loop0: detected capacity change from 0 to 32768 [ 173.258048][ T8395] loop2: detected capacity change from 0 to 32768 [ 173.300548][ T8395] JBD2: Ignoring recovery information on journal [ 173.352618][ T8395] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 173.376227][ T8395] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74) [ 173.397337][ T8395] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 173.407334][ T8395] OCFS2: File system is now read-only. [ 173.412906][ T8395] (syz.2.1059,8395,1):ocfs2_search_chain:1783 ERROR: status = -30 [ 173.423527][ T8395] (syz.2.1059,8395,1):ocfs2_search_chain:1893 ERROR: status = -30 [ 173.431481][ T8395] (syz.2.1059,8395,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 173.440748][ T8395] (syz.2.1059,8395,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 173.449348][ T8395] (syz.2.1059,8395,1):ocfs2_claim_new_inode:2248 ERROR: status = -30 [ 173.457561][ T8395] (syz.2.1059,8395,1):ocfs2_claim_new_inode:2263 ERROR: status = -30 [ 173.466712][ T8395] (syz.2.1059,8395,1):ocfs2_mknod_locked:646 ERROR: status = -30 [ 173.474497][ T8395] (syz.2.1059,8395,1):ocfs2_symlink:1951 ERROR: status = -30 [ 173.482519][ T8395] (syz.2.1059,8395,1):ocfs2_symlink:2075 ERROR: status = -30 [ 173.529349][ T9] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 173.582042][ T9] plantronics 0003:047F:FFFF.0004: parse failed [ 173.600553][ T9] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 173.627659][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 173.735574][ T9] usb 4-1: USB disconnect, device number 6 [ 174.943567][ T8439] bonding: no command found in bonding_masters - use +ifname or -ifname [ 175.124583][ T8446] loop1: detected capacity change from 0 to 128 [ 175.192008][ T8446] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.256965][ T8446] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.315635][ T8446] fscrypt (loop1, inode 12): Unsupported encryption flags (0x08) [ 175.398129][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.660507][ T8460] loop2: detected capacity change from 0 to 8192 [ 175.703340][ T8460] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.853853][ T8508] loop0: detected capacity change from 0 to 1756 [ 176.880397][ T8508] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 176.888607][ T8508] UDF-fs: Scanning with blocksize 512 failed [ 176.912299][ T8508] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 176.921417][ T8508] UDF-fs: Scanning with blocksize 1024 failed [ 176.948568][ T8508] UDF-fs: warning (device loop0): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount. [ 177.388232][ T8502] loop3: detected capacity change from 0 to 32768 [ 177.398442][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 177.430622][ T8502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1103 (8502) [ 177.550226][ T8502] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.572786][ T8502] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 177.587381][ T8502] BTRFS info (device loop3): setting nodatasum [ 177.593697][ T8502] BTRFS info (device loop3): force zlib compression, level 3 [ 177.612620][ T8502] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 177.622966][ T8502] BTRFS info (device loop3): use lzo compression, level 0 [ 177.634697][ T8502] BTRFS info (device loop3): enabling auto defrag [ 177.641769][ T8502] BTRFS info (device loop3): max_inline at 4096 [ 177.666228][ T8502] BTRFS info (device loop3): using free space tree [ 177.700440][ T8506] loop2: detected capacity change from 0 to 40427 [ 177.747710][ T8506] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 177.819156][ T8506] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 177.877524][ T8506] F2FS-fs (loop2): invalid crc value [ 177.941689][ T8506] F2FS-fs (loop2): Found nat_bits in checkpoint [ 177.992017][ T8502] BTRFS info (device loop3): enabling ssd optimizations [ 178.086623][ T8506] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 178.191131][ T8506] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 178.284248][ T8506] F2FS-fs (loop2): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 178.325893][ T8506] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x100b/0x1a00 [ 178.361394][ T8506] syz.2.1105: attempt to access beyond end of device [ 178.361394][ T8506] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.391590][ T8506] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 178.622612][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.626105][ T8574] loop3: detected capacity change from 0 to 512 [ 179.653013][ T8574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.672156][ T8574] EXT4-fs (loop3): 1 truncate cleaned up [ 179.684148][ T8574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.824850][ T5761] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.842229][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.872239][ T8586] loop0: detected capacity change from 0 to 512 [ 179.883066][ T8584] loop1: detected capacity change from 0 to 4096 [ 179.889379][ T8586] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 179.916154][ T8586] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.1132: inode #15: comm syz.0.1132: iget: illegal inode # [ 179.953459][ T8586] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1132: couldn't read orphan inode 15 (err -117) [ 179.965901][ T8584] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 179.994599][ T8586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.022314][ T5761] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 180.047703][ T8584] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 180.051524][ T8586] EXT4-fs (loop0): shut down requested (2) [ 180.059945][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.090748][ T5761] usb 3-1: Product: syz [ 180.106329][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.117800][ T5761] usb 3-1: Manufacturer: syz [ 180.147754][ T5761] usb 3-1: SerialNumber: syz [ 180.161791][ T5761] usb 3-1: config 0 descriptor?? [ 180.179586][ T5761] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 180.202938][ T5761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.234316][ T5761] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 180.262890][ T5761] usb 3-1: media controller created [ 180.337945][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.389275][ T8572] dvb-usb: bulk message failed: -22 (7/0) [ 180.482255][ T5761] DVB: Unable to find symbol mt352_attach() [ 180.578350][ T5761] DVB: Unable to find symbol nxt6000_attach() [ 180.584700][ T5761] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 180.623964][ T5761] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 180.650268][ T5761] dvb-usb: schedule remote query interval to 1000 msecs. [ 180.657972][ T5761] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 180.666558][ T8605] loop3: detected capacity change from 0 to 256 [ 180.668808][ T5761] dvb-usb: bulk message failed: -22 (7/0) [ 180.680919][ T5761] dvb-usb: bulk message failed: -22 (7/0) [ 180.692381][ T5761] usb 3-1: USB disconnect, device number 11 [ 180.780560][ T8605] FAT-fs (loop3): Directory bread(block 64) failed [ 180.802265][ T8603] kvm_intel: kvm [8600]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 180.855151][ T8605] FAT-fs (loop3): Directory bread(block 65) failed [ 180.872644][ T8605] FAT-fs (loop3): Directory bread(block 66) failed [ 180.880536][ T5761] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 180.912185][ T8605] FAT-fs (loop3): Directory bread(block 67) failed [ 180.928666][ T8605] FAT-fs (loop3): Directory bread(block 68) failed [ 180.967125][ T8605] FAT-fs (loop3): Directory bread(block 69) failed [ 180.979306][ T8605] FAT-fs (loop3): Directory bread(block 70) failed [ 180.986010][ T8605] FAT-fs (loop3): Directory bread(block 71) failed [ 180.992723][ T8605] FAT-fs (loop3): Directory bread(block 72) failed [ 181.002454][ T8605] FAT-fs (loop3): Directory bread(block 73) failed [ 181.171205][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 181.171217][ T28] audit: type=1326 audit(1790910789.547:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.178329][ T8616] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.261681][ T8616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.269810][ T8616] IPv6: NLM_F_CREATE should be set when creating new route [ 181.271269][ T28] audit: type=1326 audit(1790910789.587:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.277252][ T8616] IPv6: NLM_F_CREATE should be set when creating new route [ 181.277326][ T8616] IPv6: NLM_F_CREATE should be set when creating new route [ 181.305167][ T8616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.311077][ T28] audit: type=1326 audit(1790910789.587:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.337206][ T8622] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1146'. [ 181.349016][ T28] audit: type=1326 audit(1790910789.587:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.439675][ T28] audit: type=1326 audit(1790910789.587:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.512269][ T28] audit: type=1326 audit(1790910789.587:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.562548][ T28] audit: type=1326 audit(1790910789.587:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.635221][ T28] audit: type=1326 audit(1790910789.587:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.675409][ T8636] program syz.1.1154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.711229][ T28] audit: type=1326 audit(1790910789.587:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 181.751710][ T28] audit: type=1326 audit(1790910789.587:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8617 comm="syz.0.1145" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f378e15e98e code=0x7ffc0000 [ 182.037371][ T8649] program syz.1.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.698456][ T8643] loop0: detected capacity change from 0 to 40427 [ 182.728510][ T8643] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 182.744908][ T8643] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.754150][ T8643] F2FS-fs (loop0): Image doesn't support compression [ 182.781536][ T8643] F2FS-fs (loop0): Image doesn't support compression [ 182.792921][ T8661] program syz.1.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.824119][ T8643] F2FS-fs (loop0): invalid crc value [ 182.943562][ T8647] loop2: detected capacity change from 0 to 40427 [ 183.001086][ T8647] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 183.029282][ T8647] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 183.058090][ T8647] F2FS-fs (loop2): invalid crc value [ 183.115466][ T8647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 183.167049][ T8643] F2FS-fs (loop0): Start checkpoint disabled! [ 183.251674][ T8643] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 183.265624][ T8643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 183.303982][ T8647] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 183.335966][ T8647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 183.414046][ T2963] kworker/u4:8: attempt to access beyond end of device [ 183.414046][ T2963] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.447313][ T2963] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 184.332236][ T8699] loop1: detected capacity change from 0 to 512 [ 184.369921][ T8699] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 184.401139][ T8699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 184.419960][ T8699] EXT4-fs (loop1): orphan cleanup on readonly fs [ 184.427793][ T8699] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1179: bad orphan inode 3 [ 184.444837][ T8699] EXT4-fs (loop1): Remounting filesystem read-only [ 184.451789][ T8704] ip_tables: iptables: counters copy to user failed while replacing table [ 184.456070][ T8699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 184.491044][ T8699] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1179: dx entry: limit 0 != root limit 125 [ 184.503652][ T8699] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1179: Corrupt directory, running e2fsck is recommended [ 184.565872][ T8706] loop3: detected capacity change from 0 to 512 [ 184.596256][ T8706] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.644433][ T8706] EXT4-fs (loop3): 1 truncate cleaned up [ 184.653350][ T8690] loop2: detected capacity change from 0 to 32768 [ 184.665868][ T8706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.700963][ T8690] JBD2: Ignoring recovery information on journal [ 184.724626][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 184.784413][ T8690] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 184.891546][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.096478][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 185.219963][ T8717] loop0: detected capacity change from 0 to 8192 [ 185.292891][ T8717] loop0: p1 p2 p4 [ 185.297271][ T8717] loop0: partition table partially beyond EOD, truncated [ 185.332221][ T8717] loop0: p4 start 131072 is beyond EOD, truncated [ 185.506014][ T8723] netlink: 'syz.2.1187': attribute type 11 has an invalid length. [ 185.696202][ T8716] loop1: detected capacity change from 0 to 32768 [ 185.791518][ T8716] JBD2: Ignoring recovery information on journal [ 185.879270][ T8735] loop2: detected capacity change from 0 to 2048 [ 185.972413][ T8735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.977490][ T8716] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 186.001878][ T8735] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 186.012299][ T8735] EXT4-fs: journaled quota format not specified [ 186.052525][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.321376][ T8751] loop3: detected capacity change from 0 to 256 [ 186.351580][ T8751] exfat: Deprecated parameter 'utf8' [ 186.375594][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 186.429321][ T8751] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 186.625249][ T8757] loop2: detected capacity change from 0 to 512 [ 186.634315][ T8757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.707964][ T8757] EXT4-fs (loop2): 1 truncate cleaned up [ 186.740341][ T8757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.796389][ T8766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.065201][ T8776] bonding: bond0 is being created... [ 187.101253][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.352708][ T8781] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1208: inode has both inline data and extents flags [ 187.422520][ T8781] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1208: couldn't read orphan inode 15 (err -117) [ 187.436998][ T8786] exfat: Deprecated parameter 'utf8' [ 187.442337][ T8786] exfat: Deprecated parameter 'utf8' [ 187.499507][ T8781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.535012][ T8786] exfat: Deprecated parameter 'namecase' [ 187.541247][ T8786] exfat: Deprecated parameter 'namecase' [ 187.556335][ T8786] exfat: Deprecated parameter 'namecase' [ 187.607114][ T8786] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0xa30f3a9b, utbl_chksum : 0xe619d30d) [ 187.645453][ T8781] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 187.738182][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.869259][ T8796] set_capacity_and_notify: 3 callbacks suppressed [ 187.869275][ T8796] loop2: detected capacity change from 0 to 1024 [ 187.888397][ T8796] EXT4-fs: Ignoring removed orlov option [ 187.944104][ T8796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.088192][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.183822][ T8807] netlink: 'syz.1.1222': attribute type 8 has an invalid length. [ 188.199895][ T8807] sch_fq: defrate 0 ignored. [ 188.276601][ T8813] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 188.292472][ T8813] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 188.926061][ T8817] loop2: detected capacity change from 0 to 32768 [ 188.954244][ T8817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1225 (8817) [ 189.015049][ T8817] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.049697][ T8817] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 189.076138][ T8817] BTRFS info (device loop2): using free space tree [ 189.120482][ T8826] loop3: detected capacity change from 0 to 32768 [ 189.173439][ T8826] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.225979][ T8817] BTRFS info (device loop2): enabling ssd optimizations [ 189.277522][ T8817] BTRFS info (device loop2): auto enabling async discard [ 189.431281][ T8826] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 189.492937][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.527867][ T8826] XFS (loop3): Starting recovery (logdev: internal) [ 189.641018][ T8826] XFS (loop3): Ending recovery (logdev: internal) [ 189.713174][ T8866] [ 190.111445][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.992182][ T8905] kvm: kvm [8904]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x1 [ 191.313404][ T8915] nbd0: detected capacity change from 0 to 127 [ 191.337714][ T5778] block nbd0: Receive control failed (result -104) [ 191.340288][ T55] block nbd0: Dead connection, failed to find a fallback [ 191.340405][ T55] block nbd0: shutting down sockets [ 191.341073][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.341660][ T55] buffer_io_error: 9 callbacks suppressed [ 191.341669][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 191.342053][ T55] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.342075][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 191.342191][ T55] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.342210][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 191.599190][ T8933] loop3: detected capacity change from 0 to 128 [ 191.641743][ T8933] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 191.695056][ T8933] hpfs: filesystem error: improperly stopped [ 191.701161][ T8933] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 191.713663][ T8933] hpfs: You really don't want any checks? You are crazy... [ 191.724695][ T8933] hpfs: Code page index out of array [ 191.731535][ T8933] hpfs: code page support is disabled [ 191.742382][ T8933] hpfs: hpfs_map_4sectors(): unaligned read [ 191.752423][ T8933] hpfs: hpfs_map_4sectors(): unaligned read [ 191.758749][ T8933] hpfs: filesystem error: unable to find root dir [ 191.836790][ T8933] hpfs: hpfs_map_sector(): read error [ 191.852937][ T8933] hpfs: hpfs_map_sector(): read error [ 192.016474][ T8925] loop1: detected capacity change from 0 to 32768 [ 192.024503][ T8925] XFS: noikeep mount option is deprecated. [ 192.072442][ T8925] XFS: noikeep mount option is deprecated. [ 192.149226][ T8925] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.336866][ T8959] netlink: 'syz.2.1268': attribute type 8 has an invalid length. [ 192.345772][ T8959] sch_fq: defrate 0 ignored. [ 192.429721][ T8925] XFS (loop1): Ending clean mount [ 192.448861][ T8925] XFS (loop1): Quotacheck needed: Please wait. [ 192.518144][ T8925] XFS (loop1): Quotacheck: Done. [ 192.661146][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.930139][ T8975] loop2: detected capacity change from 0 to 32768 [ 192.965686][ T8975] JBD2: Ignoring recovery information on journal [ 193.005012][ T5824] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.017972][ T8975] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 193.185284][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 193.206626][ T5824] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 193.216712][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.237926][ T5824] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 193.265821][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 193.545443][ T5761] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.626568][ T8992] scsi_dev_info_list_add_str: bad dev info string 'Q' '(null)' '(null)' [ 193.696057][ T8994] loop2: detected capacity change from 0 to 2048 [ 193.734974][ T8995] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.742921][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 193.755353][ T5761] usb 1-1: config 139 has an invalid interface number: 104 but max is 0 [ 193.778811][ T5761] usb 1-1: config 139 has no interface number 0 [ 193.813688][ T5761] usb 1-1: config 139 interface 104 has no altsetting 0 [ 193.880702][ T5761] usb 1-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 193.915179][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.923402][ T5761] usb 1-1: Product: syz [ 193.956743][ T5761] usb 1-1: Manufacturer: syz [ 193.961474][ T5761] usb 1-1: SerialNumber: syz [ 194.052698][ T5824] gspca_nw80x: reg_r err -71 [ 194.067862][ T5824] nw80x: probe of 4-1:3.0 failed with error -71 [ 194.093241][ T5824] usb 4-1: USB disconnect, device number 7 [ 194.441338][ T5761] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 194.560257][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.567616][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.576744][ T1292] clip:clip_start_xmit: skb_dst(skb) == NULL [ 194.639667][ T55] block nbd0: Connection timed out, retrying (0/1 alive) [ 194.649716][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.661629][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.672671][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 194.683240][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.691230][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 194.699145][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 194.707078][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 194.718544][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 194.725505][ T9013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.728895][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 194.746482][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 194.754626][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.765271][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 194.774692][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 194.784363][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 194.794445][ T6669] ldm_validate_partition_table(): Disk read failed. [ 194.805397][ T6669] Dev nbd0: unable to read RDB block 0 [ 194.815354][ T6669] nbd0: unable to read partition table [ 194.830212][ T6669] ldm_validate_partition_table(): Disk read failed. [ 194.838889][ T6669] Dev nbd0: unable to read RDB block 0 [ 194.841218][ T5761] gspca_sn9c20x: Write register 1001 failed -71 [ 194.846227][ T6669] nbd0: unable to read partition table [ 194.875888][ T9018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.883658][ T5761] gspca_sn9c20x: Device initialization failed [ 194.920445][ T5761] gspca_sn9c20x: probe of 1-1:139.104 failed with error -71 [ 194.975338][ T5761] usb 1-1: USB disconnect, device number 8 [ 195.031951][ T9021] loop2: detected capacity change from 0 to 512 [ 195.037813][ T9023] loop3: detected capacity change from 0 to 512 [ 195.086881][ T9021] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1294: iget: bad extended attribute block 134217728 [ 195.091903][ T9023] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1296: corrupted inode contents [ 195.135234][ T9021] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1294: couldn't read orphan inode 15 (err -117) [ 195.180330][ T9021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.191020][ T9023] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 195.233563][ T9023] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1296: corrupted inode contents [ 195.255981][ T9023] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.1296: mark_inode_dirty error [ 195.273364][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 195.273379][ T28] audit: type=1800 audit(1790910803.647:157): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1294" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 195.277254][ T9021] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1294: invalid indirect mapped block 768 (level 1) [ 195.282899][ T9023] EXT4-fs (loop3): 1 orphan inode deleted [ 195.331384][ T9023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.387662][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.400306][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.926440][ T9046] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1303'. [ 196.156296][ T9052] loop2: detected capacity change from 0 to 512 [ 196.163922][ T9052] EXT4-fs: Ignoring removed orlov option [ 196.211622][ T9033] loop3: detected capacity change from 0 to 32768 [ 196.258417][ T9033] JBD2: Ignoring recovery information on journal [ 196.262060][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.285144][ T9052] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.436805][ T9033] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 196.511428][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.755404][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 196.905569][ T9065] input: syz1 as /devices/virtual/input/input20 [ 196.953250][ T9067] netlink: 'syz.2.1311': attribute type 21 has an invalid length. [ 197.005059][ T9067] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1311'. [ 197.172988][ T9069] loop2: detected capacity change from 0 to 256 [ 197.655536][ T9089] pi3usb30532 0-0005: Error reading config register -5 [ 197.676600][ T9089] pi3usb30532: probe of 0-0005 failed with error -5 [ 197.687098][ T9089] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 197.727538][ T5817] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.737804][ T9093] loop1: detected capacity change from 0 to 128 [ 197.793430][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 197.827076][ T9093] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 197.855237][ T9093] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 197.896567][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 197.922130][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 197.948002][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 197.968524][ T5817] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.981864][ T5817] usb 3-1: config 0 has no interface number 0 [ 197.989531][ T5817] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.022307][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 198.032114][ T5817] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.055132][ T5817] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 198.064228][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.087080][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 198.097958][ T5817] usb 3-1: config 0 descriptor?? [ 198.116893][ T28] audit: type=1326 audit(1790910806.497:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.154148][ T28] audit: type=1326 audit(1790910806.497:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.185933][ T28] audit: type=1326 audit(1790910806.497:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.197876][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 198.250043][ T28] audit: type=1326 audit(1790910806.497:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.275797][ T28] audit: type=1326 audit(1790910806.497:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.310455][ T28] audit: type=1326 audit(1790910806.497:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.310930][ T9093] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 198.364036][ T28] audit: type=1326 audit(1790910806.497:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.391836][ T28] audit: type=1326 audit(1790910806.497:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.417148][ T28] audit: type=1326 audit(1790910806.507:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9103 comm="syz.0.1329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f378e19e159 code=0x7ffc0000 [ 198.450903][ T9093] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 198.695737][ T9119] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 198.798275][ T5817] uclogic 0003:28BD:0094.0005: pen parameters not found [ 198.810922][ T5817] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 198.844838][ T5817] usb 3-1: USB disconnect, device number 12 [ 199.479785][ T9127] loop0: detected capacity change from 0 to 40427 [ 199.515528][ T9127] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 199.522597][ T9127] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 199.568547][ T9127] F2FS-fs (loop0): invalid crc value [ 199.574361][ T9127] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 199.648204][ T9127] F2FS-fs (loop0): Found nat_bits in checkpoint [ 199.718502][ T9146] loop3: detected capacity change from 0 to 256 [ 199.799525][ T9127] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 199.814843][ T9127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.842487][ T9146] FAT-fs (loop3): Directory bread(block 64) failed [ 199.869750][ T9146] FAT-fs (loop3): Directory bread(block 65) failed [ 199.885516][ T9146] FAT-fs (loop3): Directory bread(block 66) failed [ 199.902350][ T9146] FAT-fs (loop3): Directory bread(block 67) failed [ 199.919488][ T9146] FAT-fs (loop3): Directory bread(block 68) failed [ 199.945546][ T9146] FAT-fs (loop3): Directory bread(block 69) failed [ 199.952301][ T9146] FAT-fs (loop3): Directory bread(block 70) failed [ 199.981233][ T9146] FAT-fs (loop3): Directory bread(block 71) failed [ 199.998384][ T9146] FAT-fs (loop3): Directory bread(block 72) failed [ 200.014024][ T5772] syz-executor: attempt to access beyond end of device [ 200.014024][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.024952][ T9146] FAT-fs (loop3): Directory bread(block 73) failed [ 200.053116][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 200.072050][ T5772] syz-executor: attempt to access beyond end of device [ 200.072050][ T5772] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 200.101492][ T9137] loop1: detected capacity change from 0 to 32768 [ 200.108268][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 200.158149][ T9146] syz.3.1347: attempt to access beyond end of device [ 200.158149][ T9146] loop3: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 200.197593][ T9137] find_entry called with index >= next_index [ 200.235049][ T9137] find_entry called with index >= next_index [ 200.241083][ T9137] find_entry called with index >= next_index [ 200.267290][ T9137] find_entry called with index >= next_index [ 200.292703][ T9137] find_entry called with index >= next_index [ 200.311664][ T9137] add_index: next_index = 0. Resetting! [ 200.325756][ T9137] find_entry called with index >= next_index [ 200.341594][ T9137] find_entry called with index >= next_index [ 200.352162][ T9137] find_entry called with index >= next_index [ 200.385738][ T9137] non-latin1 character 0x3ff found in JFS file name [ 200.392738][ T9137] mount with iocharset=utf8 to access [ 200.884151][ T9162] loop3: detected capacity change from 0 to 128 [ 200.912385][ T9162] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 200.951226][ T9162] hpfs: filesystem error: improperly stopped [ 200.984791][ T9162] hpfs: You really don't want any checks? You are crazy... [ 200.992524][ T9162] hpfs: hpfs_map_sector(): read error [ 201.008909][ T9162] hpfs: code page support is disabled [ 201.014545][ T9162] hpfs: hpfs_map_4sectors(): unaligned read [ 201.020691][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 201.033468][ T9162] hpfs: hpfs_map_4sectors(): unaligned read [ 201.040919][ T9162] hpfs: filesystem error: unable to find root dir [ 201.217234][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 201.228261][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.254669][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.271964][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.300330][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.314832][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 201.332723][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.358741][ T8] usb 3-1: config 0 descriptor?? [ 201.504973][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 201.527732][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.544867][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.567094][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'. [ 201.580810][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 201.585009][ T9184] block nbd2: Unsupported socket: should be TCP or UNIX. [ 201.615043][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.651820][ T9] usb 1-1: config 0 descriptor?? [ 201.757658][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 201.763945][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 201.836898][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.844283][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.859032][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.869601][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.877474][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.886004][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.894490][ T8] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 201.903128][ T8] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 201.924630][ T8] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 201.938207][ T8] microsoft 0003:045E:07DA.0006: no inputs found [ 201.944649][ T8] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 202.093019][ T8] usb 3-1: USB disconnect, device number 13 [ 202.129989][ T9] wacom 0003:056A:00FA.0007: unknown main item tag 0x7 [ 202.147385][ T9] wacom 0003:056A:00FA.0007: unbalanced collection at end of report description [ 202.162929][ T9] wacom 0003:056A:00FA.0007: parse failed [ 202.170504][ T9] wacom: probe of 0003:056A:00FA.0007 failed with error -22 [ 202.208347][ T9194] loop3: detected capacity change from 0 to 256 [ 202.301116][ T9181] loop1: detected capacity change from 0 to 32768 [ 202.379353][ T8] usb 1-1: USB disconnect, device number 9 [ 202.411909][ T9181] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.491735][ T9206] loop3: detected capacity change from 0 to 256 [ 202.519492][ T9206] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.577578][ T9181] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 202.615753][ T9181] XFS (loop1): Starting recovery (logdev: internal) [ 202.667509][ T9181] XFS (loop1): Ending recovery (logdev: internal) [ 202.786051][ T9211] program syz.2.1366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.837173][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.045220][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 203.103578][ T9219] program syz.2.1370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.254879][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 203.268491][ T8] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 203.290361][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.305051][ T8] usb 4-1: Product: syz [ 203.315004][ T8] usb 4-1: Manufacturer: syz [ 203.325016][ T8] usb 4-1: SerialNumber: syz [ 203.560166][ T8] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 203.594672][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.615105][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 203.633855][ T8] usb 4-1: media controller created [ 203.678181][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.816402][ T9221] loop1: detected capacity change from 0 to 40427 [ 203.838400][ T9221] F2FS-fs (loop1): invalid crc value [ 203.847357][ T9241] loop2: detected capacity change from 0 to 256 [ 203.863894][ T9221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 203.964809][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 204.077348][ T9221] F2FS-fs (loop1): Start checkpoint disabled! [ 204.090133][ T8] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 204.108140][ T8] usb 4-1: USB disconnect, device number 8 [ 204.129923][ T9221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 204.344660][ T9253] pimreg: tun_chr_ioctl cmd 1074025677 [ 204.351016][ T1075] kworker/u4:5: attempt to access beyond end of device [ 204.351016][ T1075] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 204.365605][ T9253] pimreg: linktype set to 776 [ 204.377252][ T1075] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 204.384870][ T1075] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 204.753201][ T9251] loop2: detected capacity change from 0 to 32768 [ 204.775744][ T9251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1383 (9251) [ 204.848488][ T9251] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.886877][ T9251] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 204.916269][ T9251] BTRFS info (device loop2): setting nodatasum [ 204.922541][ T9251] BTRFS info (device loop2): disabling tree log [ 204.961700][ T9251] BTRFS info (device loop2): max_inline at 0 [ 204.968791][ T9251] BTRFS info (device loop2): using free space tree [ 205.088268][ T9251] BTRFS info (device loop2): enabling ssd optimizations [ 205.114902][ T9251] BTRFS info (device loop2): auto enabling async discard [ 205.359920][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 205.359935][ T28] audit: type=1804 audit(1790910813.737:178): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1383" name="/newroot/318/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 205.397055][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'. [ 205.447294][ T28] audit: type=1804 audit(1790910813.807:179): pid=9251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1383" name="/newroot/318/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 205.599150][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.683551][ T5781] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 206.069299][ T9293] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24 [ 206.475005][ T5761] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.676738][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.694821][ T5761] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 206.703912][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.175853][ T5761] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 207.266914][ T5761] lg-g15 0003:046D:C222.0008: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 207.388835][ T9327] loop2: detected capacity change from 0 to 256 [ 207.400151][ T9325] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)' [ 207.436479][ T9] usb 2-1: USB disconnect, device number 7 [ 207.467823][ T9327] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1eaabb1a, utbl_chksum : 0xe619d30d) [ 207.653244][ T9334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.682685][ T9337] loop3: detected capacity change from 0 to 128 [ 207.812531][ T9341] program syz.2.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.239978][ T9359] input: syz1 as /devices/virtual/input/input26 [ 208.444854][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.478787][ T9368] CIFS: bad ip= option (127®0.0.1) [ 208.500659][ T9368] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 208.529321][ T9368] CIFS: Attempting to mount (null) [ 208.544463][ T9368] CIFS: VFS: Error connecting to socket. Aborting operation. [ 208.553058][ T9368] CIFS: VFS: cifs_mount failed w/return code = -111 [ 208.639437][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.652612][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.663227][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.677808][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.689291][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.707885][ T9] usb 1-1: config 0 descriptor?? [ 209.022071][ T9389] loop3: detected capacity change from 0 to 16 [ 209.040703][ T9389] erofs: (device loop3): mounted with root inode @ nid 36. [ 209.137111][ T9] plantronics 0003:047F:FFFF.0009: unbalanced delimiter at end of report description [ 209.166866][ T9] plantronics 0003:047F:FFFF.0009: parse failed [ 209.173311][ T9] plantronics: probe of 0003:047F:FFFF.0009 failed with error -22 [ 209.317146][ T9400] loop2: detected capacity change from 0 to 128 [ 209.355288][ T9400] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 209.382771][ T9400] hpfs: filesystem error: improperly stopped [ 209.382939][ T23] usb 1-1: USB disconnect, device number 10 [ 209.392892][ T9400] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 209.422741][ T9400] hpfs: You really don't want any checks? You are crazy... [ 209.440827][ T9400] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 209.465357][ T9400] hpfs: code page support is disabled [ 209.476490][ T9400] hpfs: hpfs_map_4sectors(): unaligned read [ 209.482663][ T9400] hpfs: hpfs_map_4sectors(): unaligned read [ 209.490272][ T9400] hpfs: filesystem error: unable to find root dir [ 209.641391][ T9407] loop2: detected capacity change from 0 to 512 [ 209.717903][ T9407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.735887][ T9407] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.041448][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.838438][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 211.044217][ T9457] loop0: detected capacity change from 0 to 1024 [ 211.189751][ T1075] hfsplus: b-tree write err: -5, ino 25 [ 211.202956][ T1075] hfsplus: b-tree write err: -5, ino 4 [ 211.214176][ T1075] hfsplus: b-tree write err: -5, ino 2 [ 211.367256][ T9468] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1476'. [ 211.453660][ T9451] loop1: detected capacity change from 0 to 32768 [ 211.485123][ T9451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1466 (9451) [ 211.528016][ T9451] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.548645][ T9451] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 211.562735][ T9451] BTRFS info (device loop1): setting nodatasum [ 211.570961][ T9451] BTRFS info (device loop1): disabling tree log [ 211.599756][ T9451] BTRFS info (device loop1): max_inline at 0 [ 211.614862][ T9451] BTRFS info (device loop1): using free space tree [ 211.751948][ T9451] BTRFS info (device loop1): enabling ssd optimizations [ 211.785132][ T9451] BTRFS info (device loop1): auto enabling async discard [ 211.944840][ T28] audit: type=1804 audit(1790910820.307:180): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1466" name="/newroot/351/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 211.966445][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.034441][ T5780] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.575826][ T9495] loop3: detected capacity change from 0 to 8192 [ 212.600952][ T9500] loop0: detected capacity change from 0 to 512 [ 212.632734][ T9495] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.635665][ T9500] EXT4-fs: inline encryption not supported [ 212.663210][ T9500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.702751][ T9500] EXT4-fs (loop0): 1 truncate cleaned up [ 212.739132][ T9495] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 212.762870][ T9500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.805292][ T9495] REISERFS (device loop3): using ordered data mode [ 212.817186][ T9495] reiserfs: using flush barriers [ 212.824123][ T9506] netlink: 'syz.2.1483': attribute type 8 has an invalid length. [ 212.859073][ T9495] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.895908][ T28] audit: type=1800 audit(1790910821.267:181): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1482" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 212.906946][ T9506] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1483'. [ 212.931746][ T9500] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #15: comm syz.0.1482: bad extra_isize 62 (inode size 256) [ 212.939991][ T9495] REISERFS (device loop3): checking transaction log (loop3) [ 212.966910][ T9500] EXT4-fs (loop0): Remounting filesystem read-only [ 212.980183][ T9506] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1483'. [ 213.006406][ T9495] REISERFS (device loop3): Using r5 hash to sort names [ 213.030016][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.035198][ T9495] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 213.300423][ T9518] loop0: detected capacity change from 0 to 64 [ 214.394205][ T9550] loop3: detected capacity change from 0 to 32768 [ 214.425668][ T9550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1503 (9550) [ 214.442631][ T9550] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.466244][ T9550] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 214.476602][ T9550] BTRFS info (device loop3): setting nodatasum [ 214.483652][ T9550] BTRFS info (device loop3): disabling tree log [ 214.490162][ T9550] BTRFS info (device loop3): max_inline at 0 [ 214.496465][ T9550] BTRFS info (device loop3): using free space tree [ 214.504899][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 214.596790][ T9550] BTRFS info (device loop3): enabling ssd optimizations [ 214.604281][ T9550] BTRFS info (device loop3): auto enabling async discard [ 214.671251][ T28] audit: type=1804 audit(1790910823.047:182): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1503" name="/newroot/399/file1/bus" dev="loop3" ino=263 res=1 errno=0 [ 214.695173][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 214.715702][ T23] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 214.738332][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.750691][ T23] usb 1-1: Product: syz [ 214.771815][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.785051][ T23] usb 1-1: Manufacturer: syz [ 214.789709][ T23] usb 1-1: SerialNumber: syz [ 214.806445][ T23] usb 1-1: config 0 descriptor?? [ 214.824136][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 215.063907][ T9591] loop2: detected capacity change from 0 to 128 [ 215.191209][ T9591] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.248811][ T23] gspca_se401: Bayer format not supported! [ 215.265494][ T9591] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.367438][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.466122][ T23] usb 1-1: USB disconnect, device number 11 [ 215.552335][ T9604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.682754][ T9604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.754101][ T9611] loop1: detected capacity change from 0 to 8192 [ 215.780766][ T9611] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.801634][ T9611] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 215.811400][ T9611] REISERFS (device loop1): using ordered data mode [ 215.818874][ T9611] reiserfs: using flush barriers [ 215.825898][ T9611] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.842912][ T9611] REISERFS (device loop1): checking transaction log (loop1) [ 216.003736][ T9611] REISERFS (device loop1): Using tea hash to sort names [ 216.018705][ T9611] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 216.204680][ T9620] loop0: detected capacity change from 0 to 64 [ 216.359086][ T9624] loop1: detected capacity change from 0 to 1024 [ 217.148749][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1541'. [ 217.190017][ T9634] loop3: detected capacity change from 0 to 32768 [ 217.202894][ T9634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1531 (9634) [ 217.263792][ T9634] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.284652][ T9634] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 217.315021][ T9634] BTRFS info (device loop3): using free space tree [ 217.494431][ T9634] BTRFS info (device loop3): enabling ssd optimizations [ 217.536239][ T9634] BTRFS info (device loop3): auto enabling async discard [ 217.796679][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.148403][ T5824] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 218.276293][ T9694] loop1: detected capacity change from 0 to 256 [ 218.339314][ T5824] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 218.371234][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.372997][ T9694] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 218.383557][ T5824] usb 3-1: Product: syz [ 218.404375][ T5824] usb 3-1: Manufacturer: syz [ 218.435274][ T5824] usb 3-1: SerialNumber: syz [ 218.441237][ T9694] FAT-fs (loop1): Filesystem has been set read-only [ 218.462479][ T5824] usb 3-1: config 0 descriptor?? [ 218.468823][ T9694] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 218.492920][ T5824] hub 3-1:0.0: bad descriptor, ignoring hub [ 218.504963][ T5824] hub: probe of 3-1:0.0 failed with error -5 [ 218.535440][ T9694] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 218.632675][ T9705] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 218.638802][ T9705] pim6reg1: group set to 0 [ 218.728428][ T5824] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 218.762687][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.786360][ T5824] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 218.805733][ T5824] usb 3-1: media controller created [ 218.858698][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.933453][ T9713] loop3: detected capacity change from 0 to 4096 [ 218.938796][ T9688] dib0700: tx buffer length is larger than 4. Not supported. [ 218.970654][ T9713] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 219.003092][ T5824] DVB: Unable to find symbol dib7000p_attach() [ 219.023724][ T5824] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 219.028473][ T9713] ntfs3: loop3: ino=19, mi_enum_attr [ 219.055896][ T9713] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 219.087074][ T9713] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 219.143526][ T5761] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 219.204951][ T5824] rc_core: IR keymap rc-dib0700-rc5 not found [ 219.211127][ T5824] Registered IR keymap rc-empty [ 219.229738][ T5824] dvb-usb: could not initialize remote control. [ 219.243945][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 219.279620][ T5824] usb 3-1: USB disconnect, device number 14 [ 219.365518][ T5761] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.394778][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.410566][ T5824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 219.417756][ T5761] usb 2-1: config 0 descriptor?? [ 219.459931][ T5761] cp210x 2-1:0.0: cp210x converter detected [ 219.929822][ T9751] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)' [ 220.057822][ T5761] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 220.084878][ T5761] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 220.118465][ T5761] usb 2-1: cp210x converter now attached to ttyUSB0 [ 220.141836][ T5761] usb 2-1: USB disconnect, device number 8 [ 220.185501][ T5761] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 220.193853][ T5761] cp210x 2-1:0.0: device disconnected [ 220.901268][ T9760] loop3: detected capacity change from 0 to 40427 [ 220.950075][ T9760] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 220.984877][ T9760] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 221.024908][ T9760] F2FS-fs (loop3): invalid crc value [ 221.067703][ T9760] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.272226][ T9760] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 221.304975][ T9760] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.388143][ T9760] syz.3.1579: attempt to access beyond end of device [ 221.388143][ T9760] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.415131][ T9768] loop0: detected capacity change from 0 to 32768 [ 221.448206][ T9760] F2FS-fs (loop3): Remounting filesystem read-only [ 222.622370][ T9801] tipc: Started in network mode [ 222.646029][ T9801] tipc: Node identity ac14142f, cluster identity 4711 [ 222.663854][ T9801] tipc: New replicast peer: 127.0.0.1 [ 222.685733][ T9801] tipc: Enabled bearer , priority 10 [ 222.713315][ T9801] tipc: New replicast peer: 255.255.255.255 [ 222.842732][ T9789] loop2: detected capacity change from 0 to 40427 [ 222.864320][ T9789] F2FS-fs (loop2): invalid crc value [ 222.895151][ T9789] F2FS-fs (loop2): Found nat_bits in checkpoint [ 223.013451][ T9789] F2FS-fs (loop2): Start checkpoint disabled! [ 223.082057][ T9789] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 223.273556][ T9806] loop3: detected capacity change from 0 to 8192 [ 223.322876][ T9806] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 223.425343][ T9806] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 223.485039][ T9806] REISERFS (device loop3): using ordered data mode [ 223.513312][ T9806] reiserfs: using flush barriers [ 223.575081][ T9806] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.616543][ T1075] kworker/u4:5: attempt to access beyond end of device [ 223.616543][ T1075] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 223.636756][ T9806] REISERFS (device loop3): checking transaction log (loop3) [ 223.675696][ T1075] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 223.689869][ T9806] REISERFS (device loop3): Using rupasov hash to sort names [ 223.695905][ T1075] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 223.715081][ T9806] REISERFS (device loop3): using 3.5.x disk format [ 223.732385][ T9806] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 223.805028][ T9806] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 223.818372][ T2134] tipc: Node number set to 2886997039 [ 223.834982][ T9806] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 223.854980][ T9806] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 223.901610][ T9806] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 224.000493][ T9806] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 224.022087][ T9806] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 224.314541][ T9819] loop0: detected capacity change from 0 to 4096 [ 224.364606][ T9819] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 224.438877][ T9819] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 225.088914][ T2134] IPVS: starting estimator thread 0... [ 225.098238][ T9829] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 225.215129][ T9830] IPVS: using max 11 ests per chain, 26400 per kthread [ 225.372683][ T9836] loop0: detected capacity change from 0 to 256 [ 225.475718][ T9836] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 225.494979][ T9836] FAT-fs (loop0): Filesystem has been set read-only [ 225.506556][ T9836] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 225.515272][ T9842] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 225.515272][ T9842] The task syz.1.1614 (9842) triggered the difference, watch for misbehavior. [ 225.527345][ T9836] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 225.615703][ T9845] veth1_macvtap: left promiscuous mode [ 225.623293][ T9845] macsec0: entered allmulticast mode [ 225.678999][ T9845] veth1_macvtap: entered promiscuous mode [ 225.687900][ T9845] veth1_macvtap: entered allmulticast mode [ 225.693998][ T9845] macsec0: left allmulticast mode [ 225.699360][ T9845] veth1_macvtap: left allmulticast mode [ 225.932819][ T9853] tipc: Started in network mode [ 225.938488][ T9853] tipc: Node identity ac14142f, cluster identity 4711 [ 225.951189][ T9853] tipc: New replicast peer: 127.0.0.1 [ 225.957924][ T9853] tipc: Enabled bearer , priority 10 [ 225.969013][ T9853] tipc: New replicast peer: 255.255.255.255 [ 226.074357][ T9857] loop0: detected capacity change from 0 to 8 [ 226.095764][ T5824] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 226.138599][ T9857] SQUASHFS error: Failed to read block 0x8f: -5 [ 226.162465][ T28] audit: type=1800 audit(1790910834.537:183): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1621" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 226.305609][ T5824] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 226.332759][ T5824] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 226.354312][ T5824] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.385914][ T5824] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 226.396286][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 226.416123][ T5824] usb 3-1: Product: syz [ 226.420453][ T5824] usb 3-1: Manufacturer: syz [ 226.689318][ T9850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.721253][ T9850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.753582][ T5824] dvb_ttusb_budget: ttusb_init_controller: error [ 226.792673][ T5824] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 226.899877][ T5824] DVB: Unable to find symbol cx22700_attach() [ 226.975262][ T9850] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 227.011885][ T5824] DVB: Unable to find symbol tda10046_attach() [ 227.035586][ T5824] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 227.061878][ T5824] usb 3-1: USB disconnect, device number 15 [ 227.084105][ T8] tipc: Node number set to 2886997039 [ 227.172687][ T9878] tipc: Started in network mode [ 227.202450][ T9878] tipc: Node identity ac14142f, cluster identity 4711 [ 227.240156][ T9878] tipc: New replicast peer: 127.0.0.1 [ 227.272764][ T9878] tipc: Enabled bearer , priority 10 [ 227.296151][ T9879] tipc: New replicast peer: 255.255.255.255 [ 227.595159][ T5824] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.794985][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 227.813043][ T5824] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 227.833358][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.842407][ T5824] usb 4-1: Product: syz [ 227.852566][ T5824] usb 4-1: Manufacturer: syz [ 227.862691][ T5824] usb 4-1: SerialNumber: syz [ 227.883495][ T5824] usb 4-1: config 0 descriptor?? [ 227.901809][ T5824] gspca_main: se401-2.14.0 probing 047d:5003 [ 228.340234][ T5824] gspca_se401: Bayer format not supported! [ 228.385170][ T5824] tipc: Node number set to 2886997039 [ 228.590809][ T8] usb 4-1: USB disconnect, device number 9 [ 228.755141][ T5824] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 228.912959][ T9911] loop0: detected capacity change from 0 to 40427 [ 228.925104][ T9911] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 228.931601][ T9911] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 228.954233][ T5824] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.967501][ T5824] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.982454][ T9911] F2FS-fs (loop0): invalid crc value [ 228.989668][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 229.007347][ T5824] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 229.037253][ T5824] usb 3-1: Product: syz [ 229.042140][ T5824] usb 3-1: Manufacturer: syz [ 229.068234][ T5824] hub 3-1:4.0: USB hub found [ 229.177157][ T9911] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 229.193962][ T9911] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 229.300785][ T5824] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 229.363162][ T9911] syz.0.1646: attempt to access beyond end of device [ 229.363162][ T9911] loop0: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 229.401775][ T9911] syz.0.1646: attempt to access beyond end of device [ 229.401775][ T9911] loop0: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 229.478930][ T5772] syz-executor: attempt to access beyond end of device [ 229.478930][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.514863][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 229.733626][ T5761] usb 3-1: USB disconnect, device number 16 [ 230.407460][ T9950] loop3: detected capacity change from 0 to 64 [ 230.490306][ T9952] loop0: detected capacity change from 0 to 2048 [ 230.524062][ T9950] Trying to free block not in datazone [ 230.562295][ T9952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.902066][ T9960] loop3: detected capacity change from 0 to 512 [ 230.949770][ T9960] EXT4-fs (loop3): 1 truncate cleaned up [ 230.971731][ T9960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.101550][ T28] audit: type=1800 audit(1790910839.477:184): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1667" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 231.111544][ T9960] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1667: bg 0: block 465: padding at end of block bitmap is not set [ 231.174512][ T9960] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 231.195458][ T9960] EXT4-fs (loop3): This should not happen!! Data will be lost [ 231.195458][ T9960] [ 231.215373][ T9960] EXT4-fs (loop3): Total free blocks count 0 [ 231.221430][ T9960] EXT4-fs (loop3): Free/Dirty block details [ 231.252239][ T9960] EXT4-fs (loop3): free_blocks=0 [ 231.258152][ T9960] EXT4-fs (loop3): dirty_blocks=9 [ 231.270365][ T9960] EXT4-fs (loop3): Block reservation details [ 231.283168][ T9960] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 231.293446][ T9968] »»»»»»: renamed from vlan0 (while UP) [ 231.446698][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.624874][ T5824] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 231.832612][ T5824] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 231.864014][ T5824] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 231.890934][ T5824] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.926257][ T5824] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 231.944809][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 231.953262][ T5824] usb 1-1: Product: syz [ 231.963430][ T5824] usb 1-1: Manufacturer: syz [ 232.039139][ T9983] ip6gre1: entered promiscuous mode [ 232.044650][ T9983] ip6gre1: entered allmulticast mode [ 232.243783][ T9972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.263940][ T9972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 232.288180][ T5824] dvb_ttusb_budget: ttusb_init_controller: error [ 232.294668][ T5824] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 232.318743][ T9974] loop2: detected capacity change from 0 to 32768 [ 232.340354][ T9974] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1673 (9974) [ 232.389545][ T9974] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.416771][ T9974] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 232.444872][ T9974] BTRFS info (device loop2): setting nodatacow, compression disabled [ 232.453107][ T9974] BTRFS info (device loop2): setting datasum, datacow enabled [ 232.496809][ T9974] BTRFS info (device loop2): force clearing of disk cache [ 232.502317][ T9972] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 232.504094][ T9974] BTRFS info (device loop2): turning on sync discard [ 232.523153][ T9974] BTRFS warning (device loop2): excessive commit interval 43283 [ 232.552796][ T5824] DVB: Unable to find symbol cx22700_attach() [ 232.565028][ T9974] BTRFS info (device loop2): enabling ssd optimizations [ 232.594926][ T9974] BTRFS info (device loop2): using spread ssd allocation scheme [ 232.621435][ T9974] BTRFS info (device loop2): not using ssd optimizations [ 232.635140][ T9974] BTRFS info (device loop2): not using spread ssd allocation scheme [ 232.655129][ T5824] DVB: Unable to find symbol tda10046_attach() [ 232.662748][ T5824] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 232.685165][ T9974] BTRFS info (device loop2): using free space tree [ 232.729239][ T5824] usb 1-1: USB disconnect, device number 12 [ 232.842458][ T9974] BTRFS info (device loop2): rebuilding free space tree [ 233.163364][ T9974] BTRFS info (device loop2): disk added /dev/nullb0 [ 233.446216][ T5774] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 233.635011][ T5817] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.654645][T10020] netlink: 'syz.1.1685': attribute type 11 has an invalid length. [ 233.866856][ T5817] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 233.894841][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.905614][T10024] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1686'. [ 233.933512][ T5817] usb 4-1: config 0 descriptor?? [ 233.974313][ T5817] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 234.061094][T10026] rnbd_client L213: map_device: Parameters missing [ 234.485401][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 234.600883][T10036] loop2: detected capacity change from 0 to 4096 [ 234.616885][T10036] EXT4-fs: Ignoring removed nobh option [ 234.633185][T10036] EXT4-fs: Ignoring removed bh option [ 234.655732][T10036] EXT4-fs (loop2): Test dummy encryption mode enabled [ 234.703822][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.720731][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.729526][T10036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.744942][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.754012][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.768261][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.777529][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.786388][ T23] usb 1-1: Product: syz [ 234.790678][ T23] usb 1-1: Manufacturer: syz [ 234.801152][ T5817] gspca_sunplus: reg_w_riv err -71 [ 234.808373][ T5817] sunplus: probe of 4-1:0.0 failed with error -71 [ 234.835443][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 234.840719][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 234.846526][ T5817] usb 4-1: USB disconnect, device number 10 [ 234.859366][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 234.865401][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 235.090378][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.117567][T10062] binder: 10061:10062 ioctl c018620c 200000000240 returned -1 [ 236.255176][T10066] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 236.335209][T10064] syz.3.1705 (10064) used greatest stack depth: 19808 bytes left [ 236.772906][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 236.789341][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 236.846937][T10083] loop3: detected capacity change from 0 to 512 [ 236.863119][T10083] EXT4-fs: Ignoring removed orlov option [ 236.885053][T10083] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.936078][T10083] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.1714: corrupted in-inode xattr: e_value size too large [ 236.962557][T10083] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1714: couldn't read orphan inode 15 (err -117) [ 236.993834][T10083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.031940][ T28] audit: type=1800 audit(1790910845.407:185): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1714" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 237.060752][T10083] Invalid ELF header magic: != ELF [ 237.106547][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.165431][ T9] usb 1-1: USB disconnect, device number 13 [ 238.341659][T10099] loop3: detected capacity change from 0 to 40427 [ 238.366590][T10099] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 238.383890][T10099] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 238.414948][T10099] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 238.434079][T10099] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 238.450136][T10099] F2FS-fs (loop3): invalid crc value [ 238.480468][T10099] F2FS-fs (loop3): Found nat_bits in checkpoint [ 238.603064][T10099] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 238.624670][T10099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 238.703435][T10126] loop2: detected capacity change from 0 to 2048 [ 238.735516][T10099] syz.3.1722: attempt to access beyond end of device [ 238.735516][T10099] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 238.752760][T10126] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.796523][T10129] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.802061][T10099] syz.3.1722: attempt to access beyond end of device [ 238.802061][T10099] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 238.923031][ T5771] syz-executor: attempt to access beyond end of device [ 238.923031][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.958982][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 239.015089][ T5817] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 239.205333][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 239.227201][ T5817] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.251672][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 239.268211][ T5817] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 239.281574][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.300023][ T5817] usb 1-1: Product: syz [ 239.307561][ T5817] usb 1-1: Manufacturer: syz [ 239.323020][ T5817] usb 1-1: SerialNumber: syz [ 239.346244][ T5817] usb 1-1: config 0 descriptor?? [ 239.445982][T10137] block2mtd: illegal erase size [ 239.642581][ T5817] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 239.858344][T10144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1740'. [ 239.999654][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 240.008016][ T5817] imon:send_packet: packet tx failed (-71) [ 240.025106][ T5817] imon 1-1:0.0: panel buttons/knobs setup failed [ 240.184922][ T5817] rc_core: IR keymap rc-imon-pad not found [ 240.190805][ T5817] Registered IR keymap rc-empty [ 240.217811][ T5817] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 240.250777][ T5817] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 240.285159][ T5817] imon:send_packet: packet tx failed (-71) [ 240.331803][ T5817] imon 1-1:0.0: remote input dev register failed [ 240.349109][ T5817] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 240.402619][T10161] block nbd2: Unsupported socket: should be TCP or UNIX. [ 240.410007][ T5817] imon 1-1:0.0: unable to initialize intf0, err 0 [ 240.427400][ T5817] imon:imon_probe: failed to initialize context! [ 240.443205][ T5817] imon 1-1:0.0: unable to register, err -19 [ 240.472958][ T5817] usb 1-1: USB disconnect, device number 14 [ 241.004907][ T28] audit: type=1400 audit(1790910849.367:186): apparmor="STATUS" operation="profile_load" profile="unconfined" name=223A6F pid=10172 comm="syz.1.1751" [ 242.261504][T10216] block2mtd: error: cannot open device /dev [ 242.627916][T10224] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 243.359945][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 244.115026][T10256] loop3: detected capacity change from 0 to 1024 [ 244.264070][T10258] Invalid ELF header magic: != ELF [ 244.309215][T10256] hfsplus: xattr search failed [ 244.396434][T10254] loop0: detected capacity change from 0 to 32768 [ 244.445433][T10254] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1788 (10254) [ 244.508495][T10254] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 244.565187][T10254] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 244.605103][T10254] BTRFS info (device loop0): using free space tree [ 244.774972][T10254] BTRFS info (device loop0): enabling ssd optimizations [ 244.782409][T10254] BTRFS info (device loop0): auto enabling async discard [ 245.027950][ T5772] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 245.550229][T10292] loop3: detected capacity change from 0 to 1024 [ 245.930916][ T4595] hfsplus: b-tree write err: -5, ino 3 [ 246.088011][T10298] erspan0: entered promiscuous mode [ 246.411948][ T28] audit: type=1807 audit(1790910854.787:187): action=measure func=F res=0 [ 246.414837][T10305] ima: policy update failed [ 246.435457][ T28] audit: type=1802 audit(1790910854.787:188): pid=10306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1805" res=0 errno=0 [ 246.459514][ T28] audit: type=1802 audit(1790910854.807:189): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1805" res=0 errno=0 [ 246.555154][ T5781] Bluetooth: hci3: command tx timeout [ 246.604095][ T28] audit: type=1326 audit(1790910854.977:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433899e159 code=0x7ffc0000 [ 246.688940][ T28] audit: type=1326 audit(1790910854.977:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433899e159 code=0x7ffc0000 [ 246.741719][ T28] audit: type=1326 audit(1790910854.977:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433899e159 code=0x7ffc0000 [ 246.802789][ T28] audit: type=1326 audit(1790910854.977:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433899e159 code=0x7ffc0000 [ 246.855949][ T28] audit: type=1326 audit(1790910854.977:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433899e159 code=0x7ffc0000 [ 246.906224][T10318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1811'. [ 246.908187][ T28] audit: type=1326 audit(1790910854.977:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f433895e98e code=0x7ffc0000 [ 246.919289][ T23] kernel read not supported for file /dsp1 (pid: 23 comm: kworker/1:0) [ 246.977429][ T28] audit: type=1326 audit(1790910854.977:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.1.1808" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f433899f457 code=0x7ffc0000 [ 247.501625][ T23] IPVS: starting estimator thread 0... [ 247.569824][T10316] loop3: detected capacity change from 0 to 32768 [ 247.625223][T10333] IPVS: using max 10 ests per chain, 24000 per kthread [ 247.664873][T10316] JBD2: Ignoring recovery information on journal [ 247.674502][T10316] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 247.687360][T10316] JBD2: bad block at offset 32 [ 247.735443][T10316] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 248.118432][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 248.293631][T10351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 249.636510][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.794996][T10376] loop3: detected capacity change from 0 to 32768 [ 249.848766][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 249.883423][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 254, using maximum allowed: 30 [ 249.925332][ T23] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 249.963320][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 249.978719][ T23] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 250.010337][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.045611][ T23] usb 1-1: config 0 descriptor?? syzkaller syzkaller login: [ 250.490106][ T23] uclogic 0003:28BD:0071.000A: interface is invalid, ignoring [ 250.773413][ T23] usb 1-1: USB disconnect, device number 15 [ 250.846864][T10399] netlink: 'syz.3.1847': attribute type 30 has an invalid length. [ 250.927131][T10399] bond0: option arp_missed_max: invalid value (0) [ 250.933774][T10399] bond0: option arp_missed_max: allowed values 1 - 255 [ 250.977991][T10399] bond0 (unregistering): Released all slaves [ 251.000322][T10388] loop2: detected capacity change from 0 to 40427 [ 251.015062][T10388] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 251.022844][T10388] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 251.056070][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1848'. [ 251.080551][T10388] F2FS-fs (loop2): Found nat_bits in checkpoint [ 251.231339][T10388] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 251.238760][T10388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 251.504643][T10414] loop0: detected capacity change from 0 to 16 [ 251.555624][T10414] erofs: (device loop0): mounted with root inode @ nid 36. [ 252.159847][ T49] wlan1: Trigger new scan to find an IBSS to join [ 252.168109][T10431] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 252.237594][ T49] ------------[ cut here ]------------ [ 252.243999][ T49] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 252.255350][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/rate.c:385 __rate_control_send_low+0x632/0x880 [ 252.265366][ T49] Modules linked in: [ 252.269377][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 252.276907][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.287120][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 252.293609][ T49] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 252.300041][ T49] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 c0 22 e0 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 8e 86 4a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 252.320505][ T49] RSP: 0018:ffffc90000b9f400 EFLAGS: 00010246 [ 252.326851][ T49] RAX: c948917794b17100 RBX: 000000000000000c RCX: ffff88801aae8000 [ 252.334982][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 252.343080][ T49] RBP: 0000000000000084 R08: ffffc90000b9f007 R09: 1ffff92000173e00 [ 252.351235][ T49] R10: dffffc0000000000 R11: fffff52000173e01 R12: 0000000000000020 [ 252.359382][ T49] R13: dffffc0000000000 R14: ffff88801bf133b8 R15: ffff8880248e6028 [ 252.367528][ T49] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 252.376643][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.383345][ T49] CR2: 000055558c4e74e8 CR3: 0000000062764000 CR4: 00000000003506f0 [ 252.391497][ T49] Call Trace: [ 252.394899][ T49] [ 252.397933][ T49] rate_control_send_low+0x194/0x790 [ 252.403425][ T49] rate_control_get_rate+0x20b/0x5c0 [ 252.408883][ T49] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 252.414643][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 252.420776][ T49] ? __lock_acquire+0x1262/0x7d80 [ 252.425997][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 252.432195][ T49] invoke_tx_handlers_late+0xb1/0x17c0 [ 252.437855][ T49] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 252.443885][ T49] ieee80211_tx+0x2d8/0x460 [ 252.448543][ T49] ? ieee80211_skb_resize+0x610/0x610 [ 252.454058][ T49] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 252.459688][ T49] ? ieee80211_xmit+0x2e0/0x3c0 [ 252.464663][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 252.470796][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 252.476775][ T49] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 252.483243][ T49] ieee80211_scan_state_send_probe+0x57f/0x930 [ 252.489611][ T49] ieee80211_scan_work+0x42e/0x1b30 [ 252.494972][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.500292][ T49] cfg80211_wiphy_work+0x228/0x260 [ 252.505558][ T49] ? process_scheduled_works+0x975/0x1600 [ 252.511382][ T49] process_scheduled_works+0xa60/0x1600 [ 252.517165][ T49] ? worker_attach_to_pool+0x370/0x370 [ 252.522804][ T49] ? assign_work+0x3cc/0x5d0 [ 252.527569][ T49] worker_thread+0xa5e/0xfe0 [ 252.532318][ T49] kthread+0x2fa/0x390 [ 252.536505][ T49] ? pr_cont_work+0x550/0x550 [ 252.541313][ T49] ? kthread_blkcg+0xd0/0xd0 [ 252.546051][ T49] ret_from_fork+0x48/0x80 [ 252.550639][ T49] ? kthread_blkcg+0xd0/0xd0 [ 252.555360][ T49] ret_from_fork_asm+0x11/0x20 [ 252.560421][ T49] [ 252.563504][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.570897][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 252.579680][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.589752][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 252.596029][ T49] Call Trace: [ 252.599322][ T49] [ 252.602265][ T49] dump_stack_lvl+0x18c/0x250 [ 252.606968][ T49] ? show_regs_print_info+0x20/0x20 [ 252.612187][ T49] ? load_image+0x420/0x420 [ 252.616760][ T49] panic+0x2ca/0x720 [ 252.620685][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 252.626726][ T49] ? ret_from_fork_asm+0x11/0x20 [ 252.631691][ T49] __warn+0x2e0/0x470 [ 252.635688][ T49] ? __rate_control_send_low+0x632/0x880 [ 252.641342][ T49] ? __rate_control_send_low+0x632/0x880 [ 252.647473][ T49] report_bug+0x2be/0x4f0 [ 252.651843][ T49] ? __rate_control_send_low+0x632/0x880 [ 252.657928][ T49] ? __rate_control_send_low+0x632/0x880 [ 252.664751][ T49] ? __rate_control_send_low+0x634/0x880 [ 252.670431][ T49] handle_bug+0xcf/0x120 [ 252.674798][ T49] exc_invalid_op+0x1a/0x50 [ 252.680242][ T49] asm_exc_invalid_op+0x1a/0x20 [ 252.685218][ T49] RIP: 0010:__rate_control_send_low+0x632/0x880 [ 252.692103][ T49] Code: 30 42 0f b6 04 28 84 c0 0f 85 e5 01 00 00 41 8b 0e 48 c7 c7 c0 22 e0 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 8e 86 4a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 04 fa ff [ 252.711831][ T49] RSP: 0018:ffffc90000b9f400 EFLAGS: 00010246 [ 252.717935][ T49] RAX: c948917794b17100 RBX: 000000000000000c RCX: ffff88801aae8000 [ 252.726013][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 252.734263][ T49] RBP: 0000000000000084 R08: ffffc90000b9f007 R09: 1ffff92000173e00 [ 252.742257][ T49] R10: dffffc0000000000 R11: fffff52000173e01 R12: 0000000000000020 [ 252.750247][ T49] R13: dffffc0000000000 R14: ffff88801bf133b8 R15: ffff8880248e6028 [ 252.758293][ T49] rate_control_send_low+0x194/0x790 [ 252.763614][ T49] rate_control_get_rate+0x20b/0x5c0 [ 252.768940][ T49] ieee80211_tx_h_rate_ctrl+0xb21/0x1740 [ 252.774634][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 252.780626][ T49] ? __lock_acquire+0x1262/0x7d80 [ 252.785771][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 252.791868][ T49] invoke_tx_handlers_late+0xb1/0x17c0 [ 252.797377][ T49] ? invoke_tx_handlers_early+0xa30/0x1c80 [ 252.803217][ T49] ieee80211_tx+0x2d8/0x460 [ 252.807749][ T49] ? ieee80211_skb_resize+0x610/0x610 [ 252.813270][ T49] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 252.818773][ T49] ? ieee80211_xmit+0x2e0/0x3c0 [ 252.824176][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 252.830434][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 252.836273][ T49] ? ieee80211_scan_state_send_probe+0x4b2/0x930 [ 252.842712][ T49] ieee80211_scan_state_send_probe+0x57f/0x930 [ 252.849018][ T49] ieee80211_scan_work+0x42e/0x1b30 [ 252.854341][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.859660][ T49] cfg80211_wiphy_work+0x228/0x260 [ 252.864792][ T49] ? process_scheduled_works+0x975/0x1600 [ 252.870550][ T49] process_scheduled_works+0xa60/0x1600 [ 252.876405][ T49] ? worker_attach_to_pool+0x370/0x370 [ 252.881946][ T49] ? assign_work+0x3cc/0x5d0 [ 252.886575][ T49] worker_thread+0xa5e/0xfe0 [ 252.891239][ T49] kthread+0x2fa/0x390 [ 252.895329][ T49] ? pr_cont_work+0x550/0x550 [ 252.900119][ T49] ? kthread_blkcg+0xd0/0xd0 [ 252.904770][ T49] ret_from_fork+0x48/0x80 [ 252.909204][ T49] ? kthread_blkcg+0xd0/0xd0 [ 252.913813][ T49] ret_from_fork_asm+0x11/0x20 [ 252.918637][ T49] [ 252.921954][ T49] Kernel Offset: disabled [ 252.926387][ T49] Rebooting in 86400 seconds..