last executing test programs: 5m57.918702706s ago: executing program 0 (id=304): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000014c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x2, 0x1bb, 0x4}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x45}, 0x4000) 5m57.610533273s ago: executing program 0 (id=305): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}, {0x20, 0x7}}, 0x24, 0x0) 5m56.121874799s ago: executing program 0 (id=316): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) 5m54.918734867s ago: executing program 0 (id=323): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 5m54.737683312s ago: executing program 0 (id=324): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x29, 0x5586, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x80242, 0x0) lseek(r0, 0x8, 0x4) 5m54.222453774s ago: executing program 0 (id=327): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 5m53.580216749s ago: executing program 32 (id=327): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 4m36.026607389s ago: executing program 1 (id=977): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="01154e00010000112233440000fb", 0xe, 0x20008000, &(0x7f0000000040)={0x11, 0x4, r1, 0x0, 0xff, 0x0, @random="886004e82501"}, 0x14) 4m35.761204036s ago: executing program 1 (id=978): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@bsdgroups}]}, 0x1, 0x97f6, &(0x7f000001c700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x400) 4m33.918890589s ago: executing program 1 (id=994): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0x9, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2, 0x5, 0x8, 0x55, 0x8000, 0xe7, 0x1, 0x8]}}) 4m33.44307073s ago: executing program 1 (id=988): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000001c0)={[{@utf8}, {@keep_last_dots}, {@keep_last_dots}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x1}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@namecase}, {@dmask={'dmask', 0x3d, 0xf}}, {@utf8}]}, 0x3, 0x1533, &(0x7f0000006800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) 4m32.732088978s ago: executing program 1 (id=992): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 4m31.546712366s ago: executing program 1 (id=1002): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) 4m30.93376314s ago: executing program 33 (id=1002): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x3c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40850) 4.258664449s ago: executing program 4 (id=3466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x0, 0x16, 0x2, 'B&'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.124270066s ago: executing program 5 (id=3478): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 2.887834321s ago: executing program 3 (id=3483): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nodiscard}, {@norecovery}, {@mb_optimize_scan}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000d80)=ANY=[], 0x3c8, 0x0) open$dir(&(0x7f00000000c0)='./file3\x00', 0x20100, 0xe2) 2.547663939s ago: executing program 3 (id=3486): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x1, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x4}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c043}, 0x2000400c) 2.543197459s ago: executing program 5 (id=3494): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x32, 0xc, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) 1.165749732s ago: executing program 4 (id=3487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000081001e000000080006"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) 1.165320462s ago: executing program 5 (id=3488): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x10b, 0xfff, 0x4, 0x831a, 0x0, "0400000000da2f0bb4fffffdffff000800", 0x28}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 1.165245282s ago: executing program 2 (id=3489): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 1.164178132s ago: executing program 3 (id=3490): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000100)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x4, 0x533, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 973.962627ms ago: executing program 4 (id=3491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)={0x40, r1, 0x1, 0x70bd27, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44) 930.827408ms ago: executing program 2 (id=3492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008780)={0x64, r1, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x64}}, 0x0) 862.155289ms ago: executing program 5 (id=3493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 728.901722ms ago: executing program 4 (id=3495): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) 728.707272ms ago: executing program 2 (id=3496): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB=' '], 0x20}, {&(0x7f0000000b00)={0x18, 0x11, 0x8, 0x70bd2e, 0x25dfdbfd, "", [@typed={0x5, 0x57, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x2}, 0x0) 574.801646ms ago: executing program 2 (id=3497): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xd9, 0x181301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 567.915656ms ago: executing program 3 (id=3498): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x40002) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x1) close(r0) 494.770178ms ago: executing program 5 (id=3499): io_setup(0x3df, &(0x7f0000000100)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) io_submit(r0, 0x1, &(0x7f0000000d00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 367.402121ms ago: executing program 2 (id=3500): unshare(0x20000400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ppoll(&(0x7f00000019c0)=[{r0, 0x1100}], 0x1, 0x0, 0x0, 0x0) 279.045343ms ago: executing program 5 (id=3501): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 260.071663ms ago: executing program 3 (id=3502): r0 = socket(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000680)="9f", 0x2a000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5d}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x2, 0x1000}, &(0x7f0000000200)=0x90) 259.271564ms ago: executing program 4 (id=3503): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0x20, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) 110.629797ms ago: executing program 2 (id=3504): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) 86.899268ms ago: executing program 3 (id=3505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r1, 0x7, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=3506): r0 = epoll_create1(0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0x30000015}) kernel console output (not intermixed with test programs): 0000000000 r/w without journal. Quota mode: writeback. [ 357.695994][T12308] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.034081][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.253052][T12307] loop4: detected capacity change from 0 to 32768 [ 358.324817][T12307] JBD2: Ignoring recovery information on journal [ 358.379908][T12307] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 358.453559][ T27] audit: type=1800 audit(1788884135.402:213): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2419" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 358.873942][ T6680] ocfs2: Unmounting device (7,4) on (node local) [ 358.898032][T12331] loop5: detected capacity change from 0 to 128 [ 358.931704][T12331] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.405452][T12339] loop4: detected capacity change from 0 to 4096 [ 359.421873][T12339] EXT4-fs: Ignoring removed nobh option [ 359.429359][T12339] EXT4-fs: Ignoring removed bh option [ 359.457621][T12339] EXT4-fs (loop4): Test dummy encryption mode enabled [ 359.514072][T12339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.573465][T12339] EXT4-fs: Cannot change journaled quota options when quota turned on [ 359.744144][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.835352][T12351] tipc: Enabling of bearer rejected, failed to enable media [ 359.960962][ T5817] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 360.184846][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.200935][ T5817] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 360.224607][ T5817] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 360.243904][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.310475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 360.318629][ C0] lec:lec_tx_timeout: lec0 [ 360.323845][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 360.410436][ T5838] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 360.479853][ T5817] dvbdev: DVB: registering new adapter (DEC2000-t) [ 360.504270][T12365] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2444'. [ 360.512728][ T5817] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 360.632896][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 360.647912][ T5838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.658786][ T5838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.684726][ T5817] ttusb_dec_send_command: command bulk message failed: error -71 [ 360.686986][ T5838] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 360.714218][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.736064][ T5838] usb 6-1: Product: syz [ 360.740571][ T5838] usb 6-1: Manufacturer: syz [ 360.741256][ T5817] usb 3-1: USB disconnect, device number 11 [ 360.745665][ T5838] usb 6-1: SerialNumber: syz [ 360.822710][ T5838] usb 6-1: selecting invalid altsetting 1 [ 360.858914][ T5838] usb 6-1: unit 6 not found! [ 361.326160][T12378] loop3: detected capacity change from 0 to 1024 [ 361.360828][T12378] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 361.431935][ T5838] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 361.440398][T12378] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.2449: lblock 2 mapped to illegal pblock 2 (length 1) [ 361.490875][T12378] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 361.521500][T12378] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.2449: lblock 0 mapped to illegal pblock 48 (length 1) [ 361.541708][ T5838] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 361.555224][T12378] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 361.570705][ T5838] usb 6-1: USB disconnect, device number 16 [ 361.591710][T12378] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2449: Failed to acquire dquot type 0 [ 361.608038][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.629013][T12378] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 361.655573][T12378] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2449: mark_inode_dirty error [ 361.702286][T12378] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 361.727186][T12378] EXT4-fs (loop3): 1 orphan inode deleted [ 361.741462][ T1130] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.743518][T12378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.777661][ T1130] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 361.790134][ T1130] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 361.898767][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.909861][ T1130] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.932182][ T1130] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 361.948755][ T1130] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 361.991666][ T5776] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 362.014209][ T5776] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 362.038967][ T5776] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 362.428829][T12402] loop2: detected capacity change from 0 to 8 [ 362.474163][T12402] unable to read xattr id index table [ 363.307911][T12402] loop2: detected capacity change from 0 to 32768 [ 363.332063][T12402] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 363.979380][T12428] loop4: detected capacity change from 0 to 512 [ 364.045766][T12428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.125191][T12428] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.435290][T12416] loop3: detected capacity change from 0 to 32768 [ 364.533116][T12416] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 364.583961][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.726162][T12431] loop2: detected capacity change from 0 to 32768 [ 364.765616][T12431] [ 364.765616][T12431] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 364.765616][T12431] [ 364.868148][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 365.299018][T12431] blkno = 0, nblocks = 40 [ 365.319110][T12431] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 365.319110][T12431] [ 365.330382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 365.338497][ C0] lec:lec_tx_timeout: lec0 [ 365.343420][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 365.446375][ T5775] [ 365.446375][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 365.446375][ T5775] [ 365.471881][ T5775] [ 365.471881][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 365.471881][ T5775] [ 365.751574][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2478'. [ 365.905108][T12450] loop5: detected capacity change from 0 to 32768 [ 365.940957][T12450] JBD2: Ignoring recovery information on journal [ 366.079031][T12450] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 366.288868][ T27] audit: type=1800 audit(1788884143.232:214): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2475" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 366.535103][ T8647] ocfs2: Unmounting device (7,5) on (node local) [ 367.124435][T12496] loop5: detected capacity change from 0 to 512 [ 367.267938][T12496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.349647][T12496] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.623016][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.635564][T12511] loop3: detected capacity change from 0 to 1024 [ 368.291433][T12509] loop2: detected capacity change from 0 to 32768 [ 368.363124][T12509] JBD2: Ignoring recovery information on journal [ 368.446650][T12509] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 368.555728][ T27] audit: type=1800 audit(1788884145.502:215): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2495" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 368.752690][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 368.921261][T12546] loop3: detected capacity change from 0 to 256 [ 368.978068][ T5781] Bluetooth: hci3: unexpected event for opcode 0x202d [ 369.319411][T12555] loop2: detected capacity change from 0 to 512 [ 369.408434][T12555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.495553][T12555] ext4 filesystem being mounted at /657/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.552752][T12562] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2522'. [ 369.566582][T12562] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 369.861752][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.360282][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 370.368362][ C0] lec:lec_tx_timeout: lec0 [ 370.373294][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 370.438735][T12566] loop3: detected capacity change from 0 to 32768 [ 370.509181][T12566] JBD2: Ignoring recovery information on journal [ 370.625333][T12566] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 370.813081][ T27] audit: type=1800 audit(1788884147.752:216): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2520" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 371.064989][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 371.155890][T12595] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 371.177734][T12595] macsec2: entered allmulticast mode [ 371.189329][T12595] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 371.248207][T12595] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 371.266998][T12595] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 371.513086][T12602] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2540'. [ 371.646796][T12603] loop4: detected capacity change from 0 to 4096 [ 371.678806][T12603] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 371.741918][T12603] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 371.851708][T12603] ntfs3: loop4: ino=5, "/" directory corrupted [ 371.868253][T12603] ntfs3: loop4: ino=5, "/" directory corrupted [ 372.541210][T12609] loop5: detected capacity change from 0 to 32768 [ 372.564866][T12609] JBD2: Ignoring recovery information on journal [ 372.613528][T12609] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 372.702466][ T27] audit: type=1800 audit(1788884149.652:217): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2543" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 372.804877][ T8647] ocfs2: Unmounting device (7,5) on (node local) [ 373.011126][T12631] loop4: detected capacity change from 0 to 32768 [ 373.088996][T12631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 373.343204][ T6680] ocfs2: Unmounting device (7,4) on (node local) [ 373.702606][ T27] audit: type=1326 audit(1788884150.642:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 373.771256][ T27] audit: type=1326 audit(1788884150.642:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 373.896334][ T27] audit: type=1326 audit(1788884150.642:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 373.997904][ T27] audit: type=1326 audit(1788884150.642:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 374.100372][ T27] audit: type=1326 audit(1788884150.672:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 374.187553][T12665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2567'. [ 374.193916][ T27] audit: type=1326 audit(1788884150.672:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 374.253465][T12668] loop3: detected capacity change from 0 to 512 [ 374.319180][ T27] audit: type=1326 audit(1788884150.672:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 374.354671][T12668] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 374.384280][T12668] FAT-fs (loop3): Filesystem has been set read-only [ 374.424706][ T27] audit: type=1326 audit(1788884150.672:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 374.510840][ T27] audit: type=1326 audit(1788884150.672:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.2.2561" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 374.600186][T12672] loop4: detected capacity change from 0 to 128 [ 374.650011][T12672] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 374.682337][T12672] hpfs: filesystem error: improperly stopped [ 374.701794][T12672] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 374.714770][T12674] loop5: detected capacity change from 0 to 4096 [ 374.722238][T12672] hpfs: You really don't want any checks? You are crazy... [ 374.729512][T12672] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 374.761906][T12674] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 374.786823][T12672] hpfs: code page support is disabled [ 374.806347][T12672] hpfs: hpfs_map_4sectors(): unaligned read [ 374.823684][T12672] hpfs: hpfs_map_4sectors(): unaligned read [ 374.839326][T12672] hpfs: filesystem error: unable to find root dir [ 374.891416][T12674] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 375.040728][T12674] ntfs3: loop5: ino=5, "/" directory corrupted [ 375.055939][T12674] ntfs3: loop5: ino=5, "/" directory corrupted [ 375.371908][T12669] loop2: detected capacity change from 0 to 32768 [ 375.446974][T12669] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 375.663572][T12669] XFS (loop2): Ending clean mount [ 375.710652][T12669] XFS (loop2): Quotacheck needed: Please wait. [ 375.820955][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 375.835646][T12669] XFS (loop2): Quotacheck: Done. [ 376.104078][ T5775] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 376.115305][T12705] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 376.170386][T12705] macsec2: entered allmulticast mode [ 376.175824][T12705] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 376.211627][T12705] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 376.230499][T12705] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 376.304325][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.316764][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 376.324874][ C0] lec:lec_tx_timeout: lec0 [ 376.332434][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 376.457134][T12683] loop5: detected capacity change from 0 to 40427 [ 376.488696][T12683] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 376.515749][T12683] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 376.552371][T12683] F2FS-fs (loop5): invalid crc value [ 376.743804][T12683] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 376.759800][T12683] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 376.814251][T12683] F2FS-fs (loop5): Can't flush 3 in 0 for SEGS_PER_SEC 1 != 1 [ 376.978571][T12719] loop2: detected capacity change from 0 to 4096 [ 377.146395][T12723] loop3: detected capacity change from 0 to 128 [ 377.229469][T12723] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 377.255457][T12723] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.334102][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.354192][T12727] loop4: detected capacity change from 0 to 512 [ 377.506368][T12729] loop2: detected capacity change from 0 to 512 [ 377.530661][T12727] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 377.586816][T12729] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.2592: iget: bad extended attribute block 1 [ 377.615652][T12727] FAT-fs (loop4): Filesystem has been set read-only [ 377.653416][T12729] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2592: couldn't read orphan inode 15 (err -117) [ 377.692174][T12729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.962123][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.166777][T12749] loop4: detected capacity change from 0 to 512 [ 378.272591][T12749] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2600: invalid indirect mapped block 10 (level 1) [ 378.385944][T12749] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2600: invalid indirect mapped block 8 (level 1) [ 378.406648][T12749] EXT4-fs (loop4): 1 truncate cleaned up [ 378.414341][T12749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.549836][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.772379][T12761] loop4: detected capacity change from 0 to 4096 [ 379.374778][T12775] loop3: detected capacity change from 0 to 4096 [ 379.517004][T12782] loop5: detected capacity change from 0 to 512 [ 379.600738][T12782] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2614: invalid indirect mapped block 10 (level 1) [ 379.791060][T12782] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2614: invalid indirect mapped block 8 (level 1) [ 379.844432][T12782] EXT4-fs (loop5): 1 truncate cleaned up [ 379.866441][T12788] loop2: detected capacity change from 0 to 4096 [ 379.875159][T12782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.167232][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.326570][T12804] loop4: detected capacity change from 0 to 256 [ 380.371234][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 380.380189][T12803] netlink: 'syz.2.2623': attribute type 5 has an invalid length. [ 380.862272][T12817] loop2: detected capacity change from 0 to 512 [ 380.870105][T12817] EXT4-fs: Ignoring removed oldalloc option [ 380.887553][T12818] loop5: detected capacity change from 0 to 512 [ 380.948460][T12818] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.2628: iget: bad extended attribute block 1 [ 380.963636][T12817] EXT4-fs (loop2): 1 truncate cleaned up [ 380.985144][T12817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.019654][T12818] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2628: couldn't read orphan inode 15 (err -117) [ 381.076267][T12818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.218186][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.255975][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.314768][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'. [ 381.340324][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 381.348427][ C0] lec:lec_tx_timeout: lec0 [ 381.353113][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 381.381727][T12828] netlink: 'syz.4.2635': attribute type 5 has an invalid length. [ 381.444953][T12831] Bluetooth: hci0: unsupported parameter 5134 [ 381.457047][T12831] Bluetooth: hci0: unsupported parameter 8192 [ 381.463668][T12831] Bluetooth: hci0: unsupported parameter 5134 [ 381.469923][T12831] Bluetooth: hci0: unsupported parameter 8192 [ 381.651713][T12837] loop3: detected capacity change from 0 to 512 [ 381.688767][T12837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 381.767194][T12837] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2638: bg 0: block 393: padding at end of block bitmap is not set [ 381.815574][T12837] EXT4-fs (loop3): Remounting filesystem read-only [ 381.900991][T12837] EXT4-fs (loop3): 2 truncates cleaned up [ 381.915895][T12837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.071408][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.188693][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.496493][T12839] loop5: detected capacity change from 0 to 32768 [ 382.606740][T12839] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 382.740622][T12839] XFS (loop5): Ending clean mount [ 382.909112][ T8647] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 383.224164][T12878] set_capacity_and_notify: 1 callbacks suppressed [ 383.224181][T12878] loop2: detected capacity change from 0 to 4096 [ 383.899205][T12886] loop3: detected capacity change from 0 to 4096 [ 383.971947][T12876] loop4: detected capacity change from 0 to 40427 [ 384.004526][T12876] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 384.012607][T12876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 384.054546][T12876] F2FS-fs (loop4): invalid crc value [ 384.236059][T12895] loop5: detected capacity change from 0 to 512 [ 384.281802][T12895] EXT4-fs: Ignoring removed oldalloc option [ 384.375875][T12895] EXT4-fs (loop5): 1 truncate cleaned up [ 384.410422][T12876] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 384.417550][T12876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 384.431792][T12895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.498616][T12876] F2FS-fs (loop4): Can't flush 3 in 0 for SEGS_PER_SEC 1 != 1 [ 384.701645][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.148715][T12915] loop5: detected capacity change from 0 to 128 [ 385.177825][T12915] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 385.231756][T12915] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 385.783962][T12935] loop5: detected capacity change from 0 to 512 [ 385.810719][T12935] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 385.838231][T12938] ip6gre1: entered promiscuous mode [ 385.844175][T12938] ip6gre1: entered allmulticast mode [ 385.877554][T12935] EXT4-fs (loop5): 1 truncate cleaned up [ 385.912027][T12935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.014994][T12935] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.2678: Logical block already allocated [ 386.105677][T12935] EXT4-fs (loop5): Remounting filesystem read-only [ 386.172223][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.350304][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 386.358438][ C0] lec:lec_tx_timeout: lec0 [ 386.370435][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.474326][T12956] loop2: detected capacity change from 0 to 256 [ 386.499707][T12956] exfat: Deprecated parameter 'utf8' [ 386.509011][T12954] loop3: detected capacity change from 0 to 1764 [ 386.529691][T12956] exfat: Deprecated parameter 'utf8' [ 386.610681][T12956] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 387.203863][T12978] loop5: detected capacity change from 0 to 256 [ 387.244538][T12978] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.305488][T12978] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 387.358451][T12978] exFAT-fs (loop5): failed to load alloc-bitmap [ 387.390734][T12978] exFAT-fs (loop5): failed to recognize exfat type [ 387.411729][ T27] audit: type=1326 audit(1788884164.362:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12979 comm="syz.4.2699" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9f679e159 code=0x0 [ 387.837335][ T995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.871608][T12972] loop3: detected capacity change from 0 to 32768 [ 387.924722][T12976] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.010403][T12972] ea_get: invalid extended attribute [ 388.029125][T12972] ffff88805b1068f0: 04 00 00 00 .... [ 388.032103][T12976] XFS (loop2): Ending clean mount [ 388.052843][T12994] ea_get: invalid extended attribute [ 388.058229][T12994] ffff88805b1068f0: 04 00 00 00 .... [ 388.092484][T12976] XFS (loop2): Quotacheck needed: Please wait. [ 388.141454][ T5817] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 388.244235][T12976] XFS (loop2): Quotacheck: Done. [ 388.374741][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.399019][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.433072][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.480625][ T5817] usb 6-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 388.509237][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.518867][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 388.575703][ T5817] usb 6-1: config 0 descriptor?? [ 388.891545][T13000] set_capacity_and_notify: 1 callbacks suppressed [ 388.891579][T13000] loop4: detected capacity change from 0 to 4096 [ 389.036463][ T5817] input: HID 046d:c704 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C704.0014/input/input20 [ 389.206934][T13000] ntfs3: loop4: failed to convert "0080" to macinuit [ 389.207846][ T5817] logitech 0003:046D:C704.0014: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c704] on usb-dummy_hcd.5-1/input0 [ 389.221679][T13000] ntfs3: loop4: failed to convert name for inode 1e. [ 389.222318][ T5817] usb 6-1: USB disconnect, device number 17 [ 389.472432][T13009] fido_id[13009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 390.506223][T13039] loop5: detected capacity change from 0 to 256 [ 390.538405][T13039] exfat: Deprecated parameter 'utf8' [ 390.562408][T13039] exfat: Deprecated parameter 'namecase' [ 390.588562][T13039] exfat: Deprecated parameter 'namecase' [ 390.653326][T13039] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 390.993839][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2728'. [ 391.038417][T13053] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2729'. [ 391.049595][T13027] loop4: detected capacity change from 0 to 32768 [ 391.081898][T13053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2729'. [ 391.109676][T13027] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 391.336523][ T7567] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 391.467193][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'. [ 391.749461][T13069] loop3: detected capacity change from 0 to 4096 [ 391.778419][T13063] team0: Port device team_slave_0 removed [ 391.854039][T13069] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 392.190991][T13078] Bluetooth: hci0: unsupported parameter 5135 [ 392.221051][T13078] Bluetooth: hci0: unsupported parameter 65 [ 392.227188][T13078] Bluetooth: hci0: unsupported parameter 5135 [ 392.280513][T13078] Bluetooth: hci0: unsupported parameter 65 [ 392.300244][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 392.308341][ C0] lec:lec_tx_timeout: lec0 [ 392.314287][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.800524][T13098] vivid-004: ================= START STATUS ================= [ 392.829490][T13098] vivid-004: Radio HW Seek Mode: Bounded [ 392.841376][T13098] vivid-004: Radio Programmable HW Seek: false [ 392.847649][T13098] vivid-004: RDS Rx I/O Mode: Block I/O [ 392.869335][T13098] vivid-004: Generate RBDS Instead of RDS: false [ 392.886599][T13098] vivid-004: RDS Reception: true [ 392.900975][T13098] vivid-004: RDS Program Type: 0 inactive [ 392.914070][T13098] vivid-004: RDS PS Name: inactive [ 392.928381][T13098] vivid-004: RDS Radio Text: inactive [ 392.939168][T13098] vivid-004: RDS Traffic Announcement: false inactive [ 392.954228][ T1130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.970709][ T1193] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 392.991347][T13098] vivid-004: RDS Traffic Program: false inactive [ 393.010410][T13098] vivid-004: RDS Music: false inactive [ 393.030459][T13098] vivid-004: ================== END STATUS ================== [ 393.182988][ T1193] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 393.201130][ T1193] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 393.229031][ T1193] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 393.249457][ T1193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.282482][ T1193] usb 6-1: Product: syz [ 393.286775][ T1193] usb 6-1: Manufacturer: syz [ 393.310472][ T1193] usb 6-1: SerialNumber: syz [ 393.335964][ T1193] usb 6-1: config 0 descriptor?? [ 393.390123][T13114] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2760'. [ 393.796375][ T1193] mos7840 6-1:0.0: required endpoints missing [ 393.819142][ T1193] usb 6-1: USB disconnect, device number 18 [ 393.875465][T13126] loop4: detected capacity change from 0 to 2048 [ 393.944754][T13126] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.127460][T13115] loop2: detected capacity change from 0 to 32768 [ 394.193353][T13115] [ 394.193353][T13115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 394.193353][T13115] [ 394.265991][ T1130] ERROR: (device loop2): diWrite: ixpxd invalid [ 394.265991][ T1130] [ 394.320529][ T1130] ERROR: (device loop2): remounting filesystem as read-only [ 394.327914][ T1130] ERROR: (device loop2): txCommit: [ 394.327914][ T1130] [ 394.364843][ T1130] jfs_write_inode: jfs_commit_inode failed! [ 394.372023][ T5775] [ 394.372023][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 394.372023][ T5775] [ 394.405240][ T5775] [ 394.405240][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 394.405240][ T5775] [ 394.475289][T13130] loop3: detected capacity change from 0 to 4096 [ 395.261577][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'. [ 395.575198][T13156] loop5: detected capacity change from 0 to 136 [ 395.641825][T13136] loop4: detected capacity change from 0 to 32768 [ 396.238679][T13152] loop2: detected capacity change from 0 to 32768 [ 396.285049][T13152] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.318726][T13152] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 396.335766][T13152] BTRFS info (device loop2): metadata ratio 220 [ 396.342561][T13152] BTRFS info (device loop2): setting nodatasum [ 396.349481][T13152] BTRFS info (device loop2): metadata ratio 4 [ 396.379346][T13152] BTRFS info (device loop2): enabling ssd optimizations [ 396.404484][T13152] BTRFS info (device loop2): allowing degraded mounts [ 396.420323][T13152] BTRFS info (device loop2): using free space tree [ 396.558335][T13152] BTRFS info (device loop2): auto enabling async discard [ 396.763456][T13158] loop3: detected capacity change from 0 to 32768 [ 396.776798][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.810577][T13158] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 396.856388][T13158] jffs2: notice: (13158) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 397.160037][ T7567] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 397.269181][T13187] loop2: detected capacity change from 0 to 4096 [ 397.330238][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 397.338324][ C0] lec:lec_tx_timeout: lec0 [ 397.342960][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.415468][T13187] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 397.923562][T13183] loop5: detected capacity change from 0 to 32768 [ 398.070926][ T1130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.208141][T13238] loop2: detected capacity change from 0 to 16 [ 399.239232][T13238] erofs: (device loop2): mounted with root inode @ nid 36. [ 399.301287][ T27] audit: type=1800 audit(1788884176.242:228): pid=13238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2811" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 399.536308][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2813'. [ 399.743229][ T27] audit: type=1326 audit(1788884176.692:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.2815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x0 [ 399.909325][T13240] loop5: detected capacity change from 0 to 32768 [ 399.930858][T13240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2812 (13240) [ 399.968475][T13240] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.002416][T13240] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 400.040348][T13240] BTRFS info (device loop5): metadata ratio 220 [ 400.047587][T13240] BTRFS info (device loop5): setting nodatasum [ 400.074075][T13240] BTRFS info (device loop5): metadata ratio 4 [ 400.100523][T13240] BTRFS info (device loop5): enabling ssd optimizations [ 400.101444][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2817'. [ 400.107554][T13240] BTRFS info (device loop5): allowing degraded mounts [ 400.107580][T13240] BTRFS info (device loop5): using free space tree [ 400.132354][T13236] loop4: detected capacity change from 0 to 32768 [ 400.195192][T13236] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.301930][T13240] BTRFS info (device loop5): auto enabling async discard [ 400.328906][T13236] XFS (loop4): Ending clean mount [ 400.348067][T13236] XFS (loop4): Quotacheck needed: Please wait. [ 400.515686][T13236] XFS (loop4): Quotacheck: Done. [ 400.681580][ T6680] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.700641][ T8647] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.710967][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 400.814620][T13281] loop2: detected capacity change from 0 to 1764 [ 400.934407][T13283] netlink: 'syz.3.2823': attribute type 5 has an invalid length. [ 401.720465][ T8868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 401.973922][ T8868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.013047][ T8868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.053917][ T8868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.100391][ T8868] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.120562][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.147548][ T8868] usb 3-1: config 0 descriptor?? [ 402.318805][T13311] loop5: detected capacity change from 0 to 128 [ 402.350236][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 402.358316][ C0] lec:lec_tx_timeout: lec0 [ 402.362999][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 402.598281][T13300] loop3: detected capacity change from 0 to 32768 [ 402.620167][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.650615][T13300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2829 (13300) [ 402.663195][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.681209][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.707441][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.727011][T13300] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.747571][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.762296][T13300] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 402.782452][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.789957][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.809400][T13300] BTRFS info (device loop3): metadata ratio 220 [ 402.832340][T13300] BTRFS info (device loop3): setting nodatasum [ 402.851479][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.867714][T13300] BTRFS info (device loop3): metadata ratio 4 [ 402.874911][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.900755][T13300] BTRFS info (device loop3): enabling ssd optimizations [ 402.910406][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.940635][T13300] BTRFS info (device loop3): allowing degraded mounts [ 402.947547][T13300] BTRFS info (device loop3): using free space tree [ 402.954275][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.964611][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.982634][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 402.993539][T13302] loop4: detected capacity change from 0 to 32768 [ 403.001353][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 403.008826][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 403.032469][T13302] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2830 (13302) [ 403.061361][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 403.063485][T13302] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 403.069303][ T8868] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 403.111971][ T8868] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 403.122561][T13302] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 403.155018][ T8868] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 403.173005][ T8868] usb 3-1: USB disconnect, device number 12 [ 403.187554][T13302] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 403.246936][T13302] BTRFS info (device loop4): use zstd compression, level 3 [ 403.290080][T13300] BTRFS info (device loop3): auto enabling async discard [ 403.305693][T13302] BTRFS info (device loop4): using free space tree [ 403.587045][T13302] BTRFS info (device loop4): enabling ssd optimizations [ 403.597348][T13339] fido_id[13339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 403.630887][T13302] BTRFS info (device loop4): auto enabling async discard [ 403.834636][ T1130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.869054][ T5776] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.922597][T13302] jffs2: notice: (13302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 404.353879][ T7567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (7567) [ 404.697579][ T6680] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 405.191914][ T27] audit: type=1326 audit(1788884182.142:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 405.282840][ T27] audit: type=1326 audit(1788884182.142:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 405.365980][T13406] loop5: detected capacity change from 0 to 512 [ 405.421467][ T27] audit: type=1326 audit(1788884182.192:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 405.537449][ T27] audit: type=1326 audit(1788884182.192:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 405.681877][ T27] audit: type=1326 audit(1788884182.202:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 405.770568][ T27] audit: type=1326 audit(1788884182.202:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 405.794419][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.925906][ T27] audit: type=1326 audit(1788884182.202:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 406.030141][ T27] audit: type=1326 audit(1788884182.222:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 406.063878][ T27] audit: type=1326 audit(1788884182.222:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 406.079468][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.141865][ T27] audit: type=1326 audit(1788884182.222:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.3.2850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 407.429207][T13416] loop3: detected capacity change from 0 to 40427 [ 407.480344][T13416] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 407.488193][T13416] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 407.540094][T13416] F2FS-fs (loop3): invalid crc value [ 407.611975][T13416] F2FS-fs (loop3): Found nat_bits in checkpoint [ 407.723377][T13463] netlink: 'syz.4.2871': attribute type 6 has an invalid length. [ 407.883148][T13435] loop5: detected capacity change from 0 to 32768 [ 407.896690][T13435] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 407.959791][T13416] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 407.970261][T13416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 408.300244][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 408.308331][ C0] lec:lec_tx_timeout: lec0 [ 408.313254][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 408.335531][ T7567] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 408.737754][T13489] loop5: detected capacity change from 0 to 736 [ 408.814764][ T7567] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.983173][T13496] loop5: detected capacity change from 0 to 128 [ 409.037724][T13496] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.085422][T13496] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.172559][T13503] loop4: detected capacity change from 0 to 512 [ 409.239644][T13505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2886'. [ 409.267379][T13505] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2886'. [ 409.319112][T13506] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2886'. [ 409.447947][ T8647] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.481437][T13508] loop3: detected capacity change from 0 to 256 [ 409.589925][ T1130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.660308][T13508] FAT-fs (loop3): Directory bread(block 64) failed [ 409.710893][T13508] FAT-fs (loop3): Directory bread(block 65) failed [ 409.744363][T13508] FAT-fs (loop3): Directory bread(block 66) failed [ 409.774804][T13512] program syz.5.2887 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.784164][T13508] FAT-fs (loop3): Directory bread(block 67) failed [ 409.815256][T13508] FAT-fs (loop3): Directory bread(block 68) failed [ 409.870750][T13508] FAT-fs (loop3): Directory bread(block 69) failed [ 409.902389][T13508] FAT-fs (loop3): Directory bread(block 70) failed [ 409.941569][T13508] FAT-fs (loop3): Directory bread(block 71) failed [ 409.948291][T13508] FAT-fs (loop3): Directory bread(block 72) failed [ 410.016024][T13508] FAT-fs (loop3): Directory bread(block 73) failed [ 410.029103][T13516] loop4: detected capacity change from 0 to 2048 [ 410.096574][T13516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.352141][T13508] syz.3.2877: attempt to access beyond end of device [ 410.352141][T13508] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 410.367240][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.385234][T13508] syz.3.2877: attempt to access beyond end of device [ 410.385234][T13508] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 410.429886][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 410.429903][ T27] audit: type=1800 audit(1788884187.372:243): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2877" name="file1" dev="loop3" ino=1048736 res=0 errno=0 [ 410.987761][T13539] loop4: detected capacity change from 0 to 256 [ 411.128935][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2901'. [ 411.640382][ T5817] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 411.685248][T13554] loop4: detected capacity change from 0 to 2048 [ 411.731783][T13554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.805114][T13554] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 411.860792][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 411.880584][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 411.909757][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26223, setting to 1024 [ 411.930287][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.943566][ T5817] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 411.955486][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.972673][ T5817] usb 4-1: config 0 descriptor?? [ 412.011121][T13550] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.024520][ T5817] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 412.441088][ T5838] usb 4-1: USB disconnect, device number 16 [ 412.669722][T13510] syz.2.2888 (13510): drop_caches: 1 [ 412.886006][T13577] loop4: detected capacity change from 0 to 512 [ 412.898148][T13577] EXT4-fs (loop4): Test dummy encryption mode enabled [ 412.913380][T13577] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 412.925967][T13577] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 412.935161][T13577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.967724][T13577] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 413.019593][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.287525][T13587] loop4: detected capacity change from 0 to 512 [ 413.316006][T13587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 413.324476][T13587] System zones: 0-2, 18-18, 34-34 [ 413.330375][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 413.338433][ C0] lec:lec_tx_timeout: lec0 [ 413.343316][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 413.375116][T13587] EXT4-fs (loop4): 1 orphan inode deleted [ 413.382852][T13587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.413745][T13587] ext4 filesystem being mounted at /644/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.434078][ T4998] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 413.458975][ T4998] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 413.597508][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.293678][T13618] loop4: detected capacity change from 0 to 128 [ 414.470018][T13622] loop3: detected capacity change from 0 to 1024 [ 414.498269][T13622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.549702][T13622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.774422][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.844607][T13630] loop4: detected capacity change from 0 to 4096 [ 414.847296][T13634] loop2: detected capacity change from 0 to 1024 [ 414.860783][ T5764] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 414.914257][T13634] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 415.001496][T13630] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 415.042897][T13634] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.2941: lblock 2 mapped to illegal pblock 2 (length 1) [ 415.062971][ T5764] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.078224][ T5764] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.088300][ T5764] usb 6-1: config 0 interface 0 has no altsetting 0 [ 415.095034][ T5764] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 415.109217][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.137058][ T5764] usb 6-1: config 0 descriptor?? [ 415.152972][T13634] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 415.169419][T13634] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.2941: lblock 0 mapped to illegal pblock 48 (length 1) [ 415.213938][T13634] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 415.248097][T13634] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.2941: Failed to acquire dquot type 0 [ 415.277734][T13634] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 415.299082][T13634] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2941: mark_inode_dirty error [ 415.315819][T13634] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 415.339448][T13634] EXT4-fs (loop2): 1 orphan inode deleted [ 415.346859][ T4998] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.365458][ T34] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.382277][T13634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.421522][ T34] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 415.430106][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 415.531247][T13634] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.2941: Invalid inode table block 1 in block_group 0 [ 415.591263][T13634] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 415.628152][ T5764] mcp2221 0003:04D8:00DD.0016: unbalanced delimiter at end of report description [ 415.642379][T13634] EXT4-fs error (device loop2): ext4_setattr:5514: inode #2: comm syz.2.2941: mark_inode_dirty error [ 415.687100][ T5764] mcp2221 0003:04D8:00DD.0016: can't parse reports [ 415.705869][ T5764] mcp2221: probe of 0003:04D8:00DD.0016 failed with error -22 [ 415.806392][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.817448][ T1140] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.855592][ T1140] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 415.869133][ T1140] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 415.894490][ T5775] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 415.907325][ T5764] usb 6-1: USB disconnect, device number 19 [ 415.940536][ T5775] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 415.956874][ T5775] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 416.275352][T13662] tipc: Enabling of bearer rejected, failed to enable media [ 416.528429][T13667] loop2: detected capacity change from 0 to 1024 [ 416.731601][T13667] hfsplus: cannot replace xattr [ 417.057294][T13681] ip_tables: iptables: counters copy to user failed while replacing table [ 417.070428][ T5817] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 417.263557][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.289794][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.319610][ T5817] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 417.334518][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 417.354809][ T5817] usb 6-1: SerialNumber: syz [ 417.373160][T13695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.391969][ T5817] usb 6-1: 0:2 : does not exist [ 417.672984][ T1193] usb 6-1: USB disconnect, device number 20 [ 418.055048][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 418.105932][T13716] loop4: detected capacity change from 0 to 256 [ 418.151438][T13716] exfat: Deprecated parameter 'namecase' [ 418.240753][T13716] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 418.350382][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 418.358475][ C0] lec:lec_tx_timeout: lec0 [ 418.364893][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.189465][T13751] loop2: detected capacity change from 0 to 2048 [ 419.218792][T13755] ip6gre1: entered promiscuous mode [ 419.260569][T13755] ip6gre1: entered allmulticast mode [ 419.266079][T13758] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.308029][T13757] loop3: detected capacity change from 0 to 2048 [ 419.374916][T13757] NILFS (loop3): invalid segment: Magic number mismatch [ 419.427214][T13757] NILFS (loop3): trying rollback from an earlier position [ 419.492656][T13757] NILFS (loop3): recovery complete [ 419.511391][T13760] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.588684][T13757] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=36028797018963974, cno=3, offset=234, blocknr=0, vblocknr=1073741826 [ 419.649916][T13757] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 419.912818][T13774] loop3: detected capacity change from 0 to 256 [ 419.942960][T13774] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.027670][T13774] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 420.071834][T13774] exFAT-fs (loop3): failed to load alloc-bitmap [ 420.085074][T13774] exFAT-fs (loop3): failed to recognize exfat type [ 420.410422][T13784] Bluetooth: MGMT ver 1.22 [ 420.434063][T13785] loop3: detected capacity change from 0 to 512 [ 420.524052][T13785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.595862][T13792] loop5: detected capacity change from 0 to 256 [ 420.620611][T13785] ext4 filesystem being mounted at /724/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.790985][T13785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.2992: invalid size [ 420.824770][T13785] EXT4-fs (loop3): Remounting filesystem read-only [ 420.963064][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.980802][ T1140] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 421.023106][ T1140] Quota error (device loop3): write_blk: dquota write failed [ 421.054657][ T1140] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 421.071705][ T1140] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 421.092382][ T1140] Quota error (device loop3): write_blk: dquota write failed [ 421.111039][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.171966][ T1140] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 421.293238][T13804] loop2: detected capacity change from 0 to 128 [ 421.301214][T13802] loop5: detected capacity change from 0 to 1764 [ 421.318863][T13804] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 421.396950][T13808] loop3: detected capacity change from 0 to 256 [ 421.425127][T13808] exfat: Deprecated parameter 'utf8' [ 421.432771][T13808] exfat: Deprecated parameter 'utf8' [ 421.445124][T13804] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 421.481484][T13808] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 422.578193][T13845] loop3: detected capacity change from 0 to 256 [ 423.871343][T13850] loop4: detected capacity change from 0 to 32768 [ 423.916900][T13850] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.139928][T13850] XFS (loop4): Ending clean mount [ 424.308927][T13898] ip_tables: iptables: counters copy to user failed while replacing table [ 424.310314][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5930 ms [ 424.325659][ C0] lec:lec_tx_timeout: lec0 [ 424.330473][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 424.334525][T13898] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 424.392135][ T6680] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.468539][T13866] loop2: detected capacity change from 0 to 32768 [ 424.615657][T13866] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 424.754998][T13866] XFS (loop2): Ending clean mount [ 424.927855][ T5775] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 425.123763][ T5786] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 425.915726][T13941] vlan2: entered promiscuous mode [ 426.098179][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3047'. [ 426.235481][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.539223][T13968] loop5: detected capacity change from 0 to 512 [ 426.594418][T13968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.715252][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.905115][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3058'. [ 427.360990][T14000] loop5: detected capacity change from 0 to 512 [ 427.378503][T14000] EXT4-fs: Ignoring removed i_version option [ 427.381705][T14001] ip_tables: iptables: counters copy to user failed while replacing table [ 427.400433][T14000] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.422521][T14000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.516747][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.342952][T14024] loop3: detected capacity change from 0 to 2048 [ 428.392207][T14024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.582028][T14008] loop4: detected capacity change from 0 to 32768 [ 428.679831][T14008] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 428.737398][T14018] loop5: detected capacity change from 0 to 32768 [ 428.795836][T14018] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 428.796893][T14008] XFS (loop4): Ending clean mount [ 428.892023][ T6680] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 428.972419][T14020] loop2: detected capacity change from 0 to 32768 [ 429.021310][T14020] [ 429.021310][T14020] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.021310][T14020] [ 429.130982][T14018] XFS (loop5): Ending clean mount [ 429.183900][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 429.194325][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 429.204791][ T5781] Bluetooth: hci1: hardware error 0x00 [ 429.340377][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 429.348458][ C0] lec:lec_tx_timeout: lec0 [ 429.353458][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.362433][ T5775] [ 429.362433][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.362433][ T5775] [ 429.422796][ T5775] [ 429.422796][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.422796][ T5775] [ 429.444617][ T8647] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 430.371617][T14078] loop3: detected capacity change from 0 to 128 [ 430.397984][T14078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 430.406463][T14078] System zones: 1-3, 19-19, 35-36 [ 430.413870][T14078] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 430.420883][ T5764] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 430.428690][T14078] ext4 filesystem being mounted at /758/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 430.497788][T14078] EXT4-fs warning (device loop3): ext4_group_extend:1897: can't read last block, resize aborted [ 430.555045][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.654030][ T5764] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 430.665322][ T5764] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 430.686075][ T5764] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 430.706460][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.723721][ T5764] usb 6-1: Product: syz [ 430.733093][ T5764] usb 6-1: Manufacturer: syz [ 430.738956][ T27] audit: type=1326 audit(1788884207.682:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 430.770741][ T5764] usb 6-1: SerialNumber: syz [ 430.811799][ T27] audit: type=1326 audit(1788884207.682:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 430.844320][ T27] audit: type=1326 audit(1788884207.682:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 430.869618][ T27] audit: type=1326 audit(1788884207.682:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 430.947693][ T27] audit: type=1326 audit(1788884207.682:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 431.041192][ T5764] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 431.066515][ T27] audit: type=1326 audit(1788884207.682:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 431.131502][ T27] audit: type=1326 audit(1788884207.682:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 431.171760][T14089] loop3: detected capacity change from 0 to 1024 [ 431.211357][ T27] audit: type=1326 audit(1788884207.682:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.3.3090" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74b799e159 code=0x7ffc0000 [ 431.362354][T14089] hfsplus: xattr searching failed [ 431.384549][ T1193] usb 6-1: USB disconnect, device number 21 [ 431.420427][ T5781] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 431.473972][T14092] Invalid ELF header magic: != ELF [ 431.611348][ T5838] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 431.634589][T14096] loop3: detected capacity change from 0 to 2048 [ 431.687953][T14099] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.830338][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 431.842235][T14099] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 431.849413][ T5838] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 431.858445][T14099] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 431.884947][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 431.906239][ T5838] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 431.916630][T14099] Remounting filesystem read-only [ 431.925161][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.928045][ T1140] NILFS (loop3): discard dirty page: offset=98304, ino=3 [ 431.944643][ T5838] usb 3-1: config 0 descriptor?? [ 431.953086][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.977543][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 431.988691][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.009297][ T1140] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 432.017330][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.026442][ T1140] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 432.034437][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.045136][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.054843][ T1140] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 432.065153][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.074488][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 432.081610][ T1140] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 432.088896][ T1140] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 432.098759][ T1140] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 432.107490][ T1140] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 432.115513][ T1140] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 432.126846][ T1140] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 432.135848][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.141542][ T5764] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 432.154569][ T5764] ath9k_htc: Failed to initialize the device [ 432.156231][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.177825][ T1193] usb 6-1: ath9k_htc: USB layer deinitialized [ 432.196803][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.214559][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 432.224093][ T1140] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 432.232016][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.241276][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.268634][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.288998][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=19 [ 432.296765][ T1140] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 432.306093][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.327186][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.339653][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.355194][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 432.363341][ T1140] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 432.374530][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.385488][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.396984][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.408118][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 432.415516][ T1140] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 432.423383][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.432656][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.444139][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.448651][ T5838] apple 0003:05AC:026C.0017: ignoring exceeding usage max [ 432.467195][ T5838] apple 0003:05AC:026C.0017: unknown main item tag 0x3 [ 432.472066][ T5776] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 432.476625][ T5838] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 432.490003][ T5838] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 432.497264][ T5838] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 432.527025][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 432.537020][ T5838] apple 0003:05AC:026C.0017: hidraw0: USB HID v0.01 Device [HID 05ac:026c] on usb-dummy_hcd.2-1/input0 [ 432.548676][ T5776] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 432.564693][ T5776] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 432.573472][ T5776] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 432.580882][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 432.620439][ T1193] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 432.753104][ T5817] usb 3-1: USB disconnect, device number 13 [ 432.840794][ T1193] usb 6-1: Using ep0 maxpacket: 32 [ 432.852854][ T1193] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 432.874021][ T1193] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 432.898479][ T1193] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 432.912677][ T1193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.950269][ T1193] usb 6-1: Product: syz [ 432.954723][ T1193] usb 6-1: Manufacturer: syz [ 432.959375][ T1193] usb 6-1: SerialNumber: syz [ 432.995096][T14106] fido_id[14106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 433.011232][ T1193] ldusb 6-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 433.195016][T14105] loop4: detected capacity change from 0 to 32768 [ 433.212249][ T1193] usb 6-1: USB disconnect, device number 22 [ 433.261199][ T1193] ldusb 6-1:1.0: LD USB Device #0 now disconnected [ 433.267983][T14105] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.435682][T14105] XFS (loop4): Ending clean mount [ 433.483299][T14105] XFS (loop4): Quotacheck needed: Please wait. [ 433.648867][T14105] XFS (loop4): Quotacheck: Done. [ 433.706772][T14134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3109'. [ 434.033824][ T6680] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 434.386592][T14149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3117'. [ 434.587710][T14154] loop4: detected capacity change from 0 to 512 [ 434.701854][T14154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.718359][T14154] ext4 filesystem being mounted at /685/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.864603][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.180761][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 435.188867][ C0] lec:lec_tx_timeout: lec0 [ 435.193952][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.867135][T14206] erspan0: entered promiscuous mode [ 435.940512][T14206] macsec2: entered promiscuous mode [ 435.959333][T14206] erspan0: left promiscuous mode [ 436.000315][ T5764] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 436.190633][ T5764] usb 4-1: Using ep0 maxpacket: 16 [ 436.208202][ T5764] usb 4-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.260819][ T5764] usb 4-1: config 0 interface 0 has no altsetting 0 [ 436.279407][ T5764] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 436.305525][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.339664][ T5764] usb 4-1: config 0 descriptor?? [ 436.346203][T14218] loop4: detected capacity change from 0 to 128 [ 436.801902][ T5764] uclogic 0003:5543:0004.0018: ignoring exceeding usage max [ 436.827276][ T5764] uclogic 0003:5543:0004.0018: unknown main item tag 0x6 [ 436.851329][ T5764] uclogic 0003:5543:0004.0018: unknown main item tag 0x4 [ 436.886143][ T5764] uclogic 0003:5543:0004.0018: ignoring exceeding usage max [ 436.901970][ T5764] uclogic 0003:5543:0004.0018: unknown main item tag 0x7 [ 436.926056][ T5764] uclogic 0003:5543:0004.0018: No inputs registered, leaving [ 436.942514][ T5764] uclogic 0003:5543:0004.0018: hidraw0: USB HID v0.05 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 436.995040][ T5764] usb 4-1: USB disconnect, device number 17 [ 437.167292][T14235] fido_id[14235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 437.436170][T14229] loop2: detected capacity change from 0 to 32768 [ 437.470939][T14229] JBD2: Ignoring recovery information on journal [ 437.529731][T14229] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 437.698164][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 437.740763][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.985216][T14258] Bluetooth: hci0: unsupported parameter 5135 [ 438.014832][T14258] Bluetooth: hci0: unsupported parameter 8192 [ 438.030739][T14258] Bluetooth: hci0: unsupported parameter 5135 [ 438.050860][T14258] Bluetooth: hci0: unsupported parameter 8192 [ 438.370477][ T5764] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 438.501156][T14274] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3162'. [ 438.510608][T14274] netlink: 'syz.5.3162': attribute type 9 has an invalid length. [ 438.521963][T14274] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3162'. [ 438.534733][T14274] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3162'. [ 438.573083][ T5764] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.585389][ T5764] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.603805][ T5764] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 438.640285][ T5764] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 438.675869][ T5764] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.690112][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.719454][ T5764] usb 3-1: SerialNumber: syz [ 438.767763][T14280] loop3: detected capacity change from 0 to 512 [ 438.801147][T14280] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 438.866411][T14280] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.3164: Allocating blocks 41-42 which overlap fs metadata [ 438.894972][T14280] EXT4-fs (loop3): Remounting filesystem read-only [ 438.903362][T14280] Quota error (device loop3): write_blk: dquota write failed [ 438.911044][T14280] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 438.921658][T14280] Quota error (device loop3): write_blk: dquota write failed [ 438.929287][T14280] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 438.963705][ T5764] usb 3-1: 0:2 : does not exist [ 438.968726][ T5764] usb 3-1: unit 5 not found! [ 438.974159][T14280] EXT4-fs (loop3): 1 truncate cleaned up [ 438.998329][T14280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.030072][ T5764] usb 3-1: USB disconnect, device number 14 [ 439.074182][T14286] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3166'. [ 439.101152][T14286] IPVS: Unknown mcast interface: vetN1_macvtap [ 439.120842][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.154895][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.466112][T14294] loop5: detected capacity change from 0 to 256 [ 439.487201][T14294] exfat: Deprecated parameter 'namecase' [ 439.540802][T14294] exfat: Deprecated parameter 'utf8' [ 439.611801][T14294] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 439.920627][T14302] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3174'. [ 440.089184][T14290] loop3: detected capacity change from 0 to 32768 [ 440.158277][T14290] JBD2: Ignoring recovery information on journal [ 440.190057][T14308] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3176'. [ 440.200471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 440.205331][T14290] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 440.208607][ C0] lec:lec_tx_timeout: lec0 [ 440.221440][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 440.239885][T14290] JBD2: bad block at offset 32 [ 440.255622][T14310] loop2: detected capacity change from 0 to 1024 [ 440.279072][T14313] loop4: detected capacity change from 0 to 128 [ 440.355146][T14313] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 440.372868][T14290] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 440.448946][T14313] hpfs: filesystem error: improperly stopped [ 440.481114][T14313] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 440.489205][T14313] hpfs: You really don't want any checks? You are crazy... [ 440.538838][T14313] hpfs: Code page index out of array [ 440.578927][T14313] hpfs: code page support is disabled [ 440.590581][T14316] batadv0: entered promiscuous mode [ 440.597283][T14313] hpfs: hpfs_map_4sectors(): unaligned read [ 440.604762][T14315] batadv0: left promiscuous mode [ 440.636429][T14313] hpfs: hpfs_map_4sectors(): unaligned read [ 440.660736][T14313] hpfs: filesystem error: unable to find root dir [ 440.762627][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 440.840524][ T5838] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 440.912547][T14322] loop3: detected capacity change from 0 to 16 [ 440.925215][T14323] loop4: detected capacity change from 0 to 1024 [ 440.966631][T14322] erofs: (device loop3): mounted with root inode @ nid 36. [ 441.013835][T14323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.030560][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 441.042465][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.061092][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.071237][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.084524][ T5838] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.093806][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.117194][T14323] ext4 filesystem being mounted at /695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.143077][ T5838] usb 3-1: config 0 descriptor?? [ 441.363611][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 441.613888][ T5838] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 441.647813][ T5838] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0019/input/input24 [ 441.721160][ T5838] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 441.837506][ T5838] usb 3-1: USB disconnect, device number 15 [ 441.959604][T14341] fido_id[14341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 442.534224][T14355] nbd: must specify a size in bytes for the device [ 442.591322][T14357] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3198'. [ 442.610913][T14357] netlink: 'syz.5.3198': attribute type 1 has an invalid length. [ 442.730050][T14340] loop4: detected capacity change from 0 to 40427 [ 442.742811][T14340] F2FS-fs (loop4): invalid crc value [ 442.757486][T14340] F2FS-fs (loop4): Found nat_bits in checkpoint [ 442.840360][T14340] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 442.866758][T14366] tipc: Started in network mode [ 442.885440][T14366] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 442.912145][T14366] tipc: Enabling of bearer rejected, failed to enable media [ 442.953072][ T6680] syz-executor: attempt to access beyond end of device [ 442.953072][ T6680] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 443.003699][ T6680] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 443.054304][ T5838] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 443.185596][T14351] loop3: detected capacity change from 0 to 32768 [ 443.263109][T14368] loop5: detected capacity change from 0 to 4096 [ 443.285030][T14368] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 443.299682][T14368] NILFS (loop5): mounting unchecked fs [ 443.307622][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.339750][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.363546][T14368] NILFS (loop5): recovery complete [ 443.369317][ T5838] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 443.378575][T14371] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.426068][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.451454][ T5838] usb 3-1: config 0 descriptor?? [ 443.513115][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.756439][T14375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3204'. [ 443.996965][ T5838] aquacomputer_d5next 0003:0C70:F0B6.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 444.158937][ T5838] usb 3-1: USB disconnect, device number 16 [ 444.580385][T13308] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 444.614999][T14373] loop3: detected capacity change from 0 to 40427 [ 444.637485][T14373] F2FS-fs (loop3): invalid crc value [ 444.646639][T14373] F2FS-fs (loop3): Found nat_bits in checkpoint [ 444.754942][T14373] F2FS-fs (loop3): Start checkpoint disabled! [ 444.772667][T13308] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.817396][T13308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 444.839527][T13308] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 444.854771][T14373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 444.855859][T13308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.876113][T14394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.916198][T13308] usb 6-1: config 0 descriptor?? [ 444.935796][T13308] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 444.956107][T13308] dvb-usb: bulk message failed: -22 (3/0) [ 444.989915][T13308] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.029225][T13308] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.065613][T13308] usb 6-1: media controller created [ 445.106507][T13308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.141180][T14383] dvb-usb: bulk message failed: -22 (5/0) [ 445.168532][T13308] dvb-usb: bulk message failed: -22 (6/0) [ 445.194345][T13308] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 445.227869][T13308] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 445.240251][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 445.248377][ C0] lec:lec_tx_timeout: lec0 [ 445.255164][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.281289][T13308] dvb-usb: schedule remote query interval to 150 msecs. [ 445.288331][T13308] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 445.337125][ T61] kworker/u4:5: attempt to access beyond end of device [ 445.337125][ T61] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 445.380789][T13308] usb 6-1: USB disconnect, device number 23 [ 445.425297][ T61] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 445.433249][ T61] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 445.488989][T13308] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 445.579738][T14404] loop2: detected capacity change from 0 to 2048 [ 445.616142][T14404] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 445.629927][T14404] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 445.658958][T14404] UDF-fs: Scanning with blocksize 512 failed [ 445.708911][T14404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.053581][T14411] loop2: detected capacity change from 0 to 64 [ 446.183712][T14415] loop3: detected capacity change from 0 to 512 [ 446.240531][ T1193] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 446.435472][T14421] loop4: detected capacity change from 0 to 64 [ 446.462048][ T1193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.477829][T14421] hfs: filesystem is marked locked, mounting read-only. [ 446.495176][ T1193] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.517453][T14421] hfs: filesystem is marked locked, leaving read-only. [ 446.525404][ T1193] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.525464][ T1193] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.525491][ T1193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.597188][T14423] loop3: detected capacity change from 0 to 256 [ 446.628383][ T1193] usb 6-1: config 0 descriptor?? [ 446.639680][T14423] exfat: Bad value for 'time_offset' [ 446.793839][ T27] audit: type=1326 audit(1788884223.742:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14424 comm="syz.4.3224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f679e159 code=0x0 [ 447.001677][T14434] tipc: Enabling of bearer rejected, failed to enable media [ 447.079237][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.087715][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.099334][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.107066][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.115000][ T5838] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 447.123856][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.132055][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.139507][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.147135][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.155899][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.163759][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.171743][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.179236][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.186952][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.196022][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.204515][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.212198][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.219631][ T1193] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 447.228069][ T1193] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 447.245159][ T1193] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 447.304287][ T5838] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.332315][ T5838] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.345991][ T5817] usb 6-1: USB disconnect, device number 24 [ 447.380327][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 447.387083][ T5838] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 447.406241][T14435] fido_id[14435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 447.420989][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.439300][ T5838] usb 4-1: config 0 descriptor?? [ 447.873909][ T5838] hid (null): bogus close delimiter [ 447.883514][ T5838] hid-multitouch 0003:0EEF:72C4.001C: collection stack underflow [ 447.891767][ T5838] hid-multitouch 0003:0EEF:72C4.001C: item 0 4 0 12 parsing failed [ 447.900978][ T5838] hid-multitouch: probe of 0003:0EEF:72C4.001C failed with error -22 [ 448.079212][T13308] usb 4-1: USB disconnect, device number 18 [ 448.192823][T14446] loop2: detected capacity change from 0 to 512 [ 448.669533][T14460] loop2: detected capacity change from 0 to 128 [ 448.720018][T14460] EXT4-fs: Ignoring removed i_version option [ 448.750335][T14460] EXT4-fs: inline encryption not supported [ 448.756324][T14460] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.809397][T14460] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.911116][T14460] ext4 filesystem being mounted at /832/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 448.967177][T14460] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.3242: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 448.981924][T14474] Invalid ELF header magic: != ELF [ 449.108255][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.261651][ T1130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.281064][ T8868] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 449.474962][ T8868] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 449.496999][ T8868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.526389][ T8868] usb 4-1: config 0 descriptor?? [ 450.157045][ T8868] usb 4-1: Cannot set autoneg [ 450.168057][ T8868] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 450.189214][ T8868] usb 4-1: USB disconnect, device number 19 [ 450.270260][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 450.278413][ C0] lec:lec_tx_timeout: lec0 [ 450.283121][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.306537][T14492] loop2: detected capacity change from 0 to 8 [ 450.351147][T14492] SQUASHFS error: zlib decompression failed, data probably corrupt [ 450.370761][T14492] SQUASHFS error: Failed to read block 0x4de: -5 [ 450.379106][T14492] SQUASHFS error: zlib decompression failed, data probably corrupt [ 450.387997][T14492] SQUASHFS error: Failed to read block 0x4df: -5 [ 450.395190][T14492] SQUASHFS error: zlib decompression failed, data probably corrupt [ 450.404758][T14492] SQUASHFS error: Failed to read block 0x4e0: -5 [ 450.415428][T14492] SQUASHFS error: zlib decompression failed, data probably corrupt [ 450.423842][T14492] SQUASHFS error: Failed to read block 0x4de: -5 [ 450.434741][ T27] audit: type=1800 audit(1788884227.382:253): pid=14492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3256" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 450.889363][ T27] audit: type=1326 audit(1788884227.832:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 450.952767][ T27] audit: type=1326 audit(1788884227.832:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 450.987053][ T27] audit: type=1326 audit(1788884227.832:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 451.032470][ T27] audit: type=1326 audit(1788884227.832:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 451.113793][ T27] audit: type=1326 audit(1788884227.872:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 451.180674][ T27] audit: type=1326 audit(1788884227.872:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 451.213913][ T27] audit: type=1326 audit(1788884227.872:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 451.252669][ T27] audit: type=1326 audit(1788884227.872:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.2.3261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0e99e159 code=0x7ffc0000 [ 451.461454][T14523] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 451.678939][T14533] loop5: detected capacity change from 0 to 512 [ 451.695819][T14533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 451.704417][T14533] System zones: 1-12 [ 451.709570][T14533] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.3274: Directory hole found for htree index block 0 [ 451.727836][T14533] EXT4-fs (loop5): Remounting filesystem read-only [ 451.735108][T14533] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 451.744640][T14533] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 451.755314][T14533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.810345][ T5838] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 451.874132][T14537] loop4: detected capacity change from 0 to 256 [ 451.913873][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.941550][ T8868] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 452.000743][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 452.015600][ T5838] usb 3-1: config 0 interface 0 has no altsetting 0 [ 452.036779][ T5838] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 452.082257][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.103550][ T5838] usb 3-1: config 0 descriptor?? [ 452.173600][ T8868] usb 4-1: Using ep0 maxpacket: 32 [ 452.182425][ T8868] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 452.212196][ T8868] usb 4-1: config 0 has no interface number 0 [ 452.232731][ T8868] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 452.248797][ T8868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.258911][ T8868] usb 4-1: Product: syz [ 452.263861][ T8868] usb 4-1: Manufacturer: syz [ 452.268653][ T8868] usb 4-1: SerialNumber: syz [ 452.293590][ T8868] usb 4-1: config 0 descriptor?? [ 452.326625][ T8868] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 452.522518][ T8868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 452.554563][ T5838] logitech 0003:046D:C298.001D: collection stack underflow [ 452.584839][ T8868] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 452.604715][ T5838] logitech 0003:046D:C298.001D: item 0 2 0 12 parsing failed [ 452.626128][ T5838] logitech 0003:046D:C298.001D: parse failed [ 452.670784][ T5838] logitech: probe of 0003:046D:C298.001D failed with error -22 [ 452.749431][ T5819] usb 3-1: USB disconnect, device number 17 [ 452.939253][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 452.949650][ T5838] usb 4-1: USB disconnect, device number 20 [ 452.980370][ T5838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 453.010944][ T5838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 453.031104][ T5838] quatech2 4-1:0.51: device disconnected [ 453.574577][T14563] loop5: detected capacity change from 0 to 40427 [ 453.589384][T14563] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 453.610558][T14563] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 453.642751][T14563] F2FS-fs (loop5): invalid crc value [ 453.655180][T14563] F2FS-fs (loop5): Found nat_bits in checkpoint [ 453.815722][T14563] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 453.828224][T14563] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 455.022081][ T34] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.290692][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 455.298813][ C0] lec:lec_tx_timeout: lec0 [ 455.303618][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 456.072835][T14612] loop2: detected capacity change from 0 to 40427 [ 456.110979][T14612] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 456.118797][T14612] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 456.162511][T14612] F2FS-fs (loop2): invalid crc value [ 456.218893][T14612] F2FS-fs (loop2): Found nat_bits in checkpoint [ 456.437977][T14612] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 456.481720][T14612] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 457.536679][T14649] loop3: detected capacity change from 0 to 4096 [ 457.556698][T14649] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 457.576963][T14655] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3324'. [ 457.649496][T14649] ntfs3: loop3: failed to convert "c46c" to iso8859-9 [ 457.652703][T14656] loop2: detected capacity change from 0 to 1024 [ 457.688556][T14656] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 457.969449][T14660] xt_TPROXY: Can be used only with -p tcp or -p udp [ 458.256057][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 458.256074][ T27] audit: type=1326 audit(1788884235.202:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.4.3323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f679e159 code=0x7fc00000 [ 458.539456][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'. [ 459.424624][T14671] loop4: detected capacity change from 0 to 40427 [ 459.443224][T14677] loop5: detected capacity change from 0 to 40427 [ 459.464843][T14671] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 459.476964][T14677] F2FS-fs (loop5): invalid crc value [ 459.493280][T14671] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 459.525814][T14677] F2FS-fs (loop5): Found nat_bits in checkpoint [ 459.563028][T14671] F2FS-fs (loop4): invalid crc value [ 459.604354][T14671] F2FS-fs (loop4): Found nat_bits in checkpoint [ 459.717149][T14677] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 459.829594][ T27] audit: type=1800 audit(1788884236.772:268): pid=14677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3334" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 459.883084][T14671] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 459.890365][T14671] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 459.972612][T14668] loop2: detected capacity change from 0 to 65536 [ 460.006640][ T8647] syz-executor: attempt to access beyond end of device [ 460.006640][ T8647] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 460.063024][T14668] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 460.082342][ T8647] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 460.212886][T14668] XFS (loop2): Ending clean mount [ 460.278077][T14668] XFS (loop2): Quotacheck needed: Please wait. [ 460.321123][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 460.329243][ C0] lec:lec_tx_timeout: lec0 [ 460.336716][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 460.361680][T14705] ip_tables: iptables: counters copy to user failed while replacing table [ 460.425151][T14668] XFS (loop2): Quotacheck: Done. [ 460.656874][ T5775] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 460.790622][ T1140] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.986404][T13308] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 461.208249][T13308] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 461.231489][T13308] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 461.239745][T13308] usb 4-1: Product: syz [ 461.253597][T13308] usb 4-1: Manufacturer: syz [ 461.258284][T13308] usb 4-1: SerialNumber: syz [ 461.280128][T13308] usb 4-1: config 0 descriptor?? [ 461.521693][T13308] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 461.728648][T13308] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 461.737650][T13308] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 461.749622][T13308] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 461.831489][T13308] peak_usb: probe of 4-1:0.0 failed with error -8 [ 461.867993][T14715] loop4: detected capacity change from 0 to 40427 [ 461.876455][T14715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 461.884713][T14715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 461.908541][T14715] F2FS-fs (loop4): invalid crc value [ 461.921364][T14715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 461.985631][T14715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 461.994555][T14715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 462.029179][ T5764] usb 4-1: USB disconnect, device number 21 [ 462.323395][T14721] loop5: detected capacity change from 0 to 4096 [ 462.438779][T14721] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 463.095075][T14736] loop3: detected capacity change from 0 to 1024 [ 463.211446][T14736] hfsplus: cannot replace xattr [ 463.642775][T14749] loop2: detected capacity change from 0 to 4096 [ 463.686014][T14749] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 464.308081][T14760] loop2: detected capacity change from 0 to 512 [ 464.331645][T14760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 464.453876][T14760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.575511][T14747] loop3: detected capacity change from 0 to 40427 [ 464.619741][T14760] ext4 filesystem being mounted at /864/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.677578][T14747] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 464.694945][T14747] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 464.726398][T14760] EXT4-fs error (device loop2): ext4_resize_begin:62: comm syz.2.3370: resize_inode disabled but reserved GDT blocks non-zero [ 464.746465][T14747] F2FS-fs (loop3): invalid crc value [ 464.794008][T14747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 464.948127][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.057439][T14779] loop4: detected capacity change from 0 to 1024 [ 465.075764][T14779] hfsplus: invalid btree flag [ 465.076009][T14779] hfsplus: failed to load extents file [ 465.106063][T14747] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 465.106094][T14747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 465.141666][ T5792] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.360412][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 465.368489][ C0] lec:lec_tx_timeout: lec0 [ 465.373287][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 465.756993][T14795] loop5: detected capacity change from 0 to 1024 [ 465.792622][T14795] EXT4-fs: inline encryption not supported [ 465.798552][T14795] EXT4-fs: Ignoring removed bh option [ 465.870505][T14795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.905252][ T995] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.002121][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.557580][T14805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3377'. [ 466.582865][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 466.796420][T14814] loop5: detected capacity change from 0 to 256 [ 466.915439][T14814] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 202) [ 466.969801][T14814] FAT-fs (loop5): Filesystem has been set read-only [ 467.623173][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 467.650637][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3394'. [ 467.659547][T14840] netlink: 'syz.2.3394': attribute type 11 has an invalid length. [ 467.829705][T14843] loop4: detected capacity change from 0 to 1024 [ 467.863740][T14843] EXT4-fs: inline encryption not supported [ 467.915041][T14843] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 467.948927][T14843] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.3396: lblock 2 mapped to illegal pblock 2 (length 1) [ 468.002307][T14843] EXT4-fs (loop4): Remounting filesystem read-only [ 468.008909][T14843] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 468.086299][T14843] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 468.104908][T14843] EXT4-fs (loop4): 1 orphan inode deleted [ 468.131789][T14843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.282624][ T6680] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.473351][T14858] loop2: detected capacity change from 0 to 2048 [ 468.508512][T14858] NILFS (loop2): invalid segment: Magic number mismatch [ 468.526828][T14858] NILFS (loop2): trying rollback from an earlier position [ 468.566683][T14836] loop3: detected capacity change from 0 to 32768 [ 468.579759][T14858] NILFS (loop2): recovery complete [ 468.609675][T14862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.061892][T14872] loop2: detected capacity change from 0 to 64 [ 469.397554][T14879] syz.4.3409[14879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.397821][T14879] syz.4.3409[14879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.786256][T14889] loop3: detected capacity change from 0 to 512 [ 469.871235][T14889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.068960][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.068960][ T60] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 470.093021][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.121008][ T60] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 470.148457][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.148457][ T60] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 470.220660][ T60] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 470.229436][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.229436][ T60] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 470.248176][ T60] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 470.257417][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.257417][ T60] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 470.315656][ T60] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 470.352046][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.352046][ T60] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 470.386949][ T60] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 470.410623][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.410623][ T60] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 470.430098][T14905] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.3421'. [ 470.442521][ T60] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 470.461001][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.461001][ T60] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 470.474351][ T60] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 470.482979][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.482979][ T60] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 470.499710][ T60] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 470.514764][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.514764][ T60] loop2: rw=1, sector=78, nr_sectors = 2656 limit=64 [ 470.535706][ T60] kworker/u4:4: attempt to access beyond end of device [ 470.535706][ T60] loop2: rw=1, sector=2734, nr_sectors = 632 limit=64 [ 470.784877][T14910] loop3: detected capacity change from 0 to 2048 [ 470.830660][T14910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.993218][T14918] loop2: detected capacity change from 0 to 64 [ 471.165839][T14924] loop5: detected capacity change from 0 to 64 [ 471.335655][T14928] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 471.430584][T14930] loop5: detected capacity change from 0 to 64 [ 471.474335][T14932] tmpfs: Cannot change global quota limit on remount [ 471.530472][ T8868] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 471.660260][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6290 ms [ 471.668377][ C0] lec:lec_tx_timeout: lec0 [ 471.671546][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.674744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.730333][ T8868] usb 3-1: Using ep0 maxpacket: 8 [ 471.741642][ T8868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.759874][ T8868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.786432][ T8868] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 471.809553][ T8868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.822635][ T8868] usb 3-1: config 0 descriptor?? [ 472.090412][ T8] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 472.300665][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 472.309253][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.319817][ T8] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.331219][ T8] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.342377][ T8] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.356498][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.364961][ T8] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 472.374242][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.385944][ T8] usb 6-1: config 0 descriptor?? [ 472.450644][ T8868] sony 0003:1345:3008.001E: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 472.476546][ T8868] sony 0003:1345:3008.001E: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 472.496912][ T8868] sony 0003:1345:3008.001E: failed to claim input [ 472.531110][ T8868] usb 3-1: USB disconnect, device number 18 [ 472.609606][T14943] fido_id[14943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 472.828821][ T8] corsair-cpro 0003:1B1C:0C10.001F: unknown main item tag 0x0 [ 472.838342][ T8] corsair-cpro 0003:1B1C:0C10.001F: unknown main item tag 0x0 [ 472.846473][ T8] corsair-cpro 0003:1B1C:0C10.001F: unknown main item tag 0x0 [ 472.857311][ T8] corsair-cpro 0003:1B1C:0C10.001F: unknown main item tag 0x0 [ 472.865374][ T8] corsair-cpro 0003:1B1C:0C10.001F: unknown main item tag 0x0 [ 472.879201][ T8] corsair-cpro 0003:1B1C:0C10.001F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 472.965726][ T8] corsair-cpro: probe of 0003:1B1C:0C10.001F failed with error -38 [ 473.038796][T13308] usb 6-1: USB disconnect, device number 25 [ 473.474306][T14964] loop2: detected capacity change from 0 to 256 [ 473.495955][T14964] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 473.754422][T14970] raw_sendmsg: syz.2.3450 forgot to set AF_INET. Fix it! [ 474.304806][T14988] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3456'. [ 474.667207][T14991] syz.3.3459 (14991): drop_caches: 1 [ 474.778564][T15006] loop2: detected capacity change from 0 to 128 [ 474.939805][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3476'. [ 474.955856][T15009] dummy0: entered promiscuous mode [ 474.996673][T15009] dummy0: left promiscuous mode [ 475.517377][T15027] loop5: detected capacity change from 0 to 512 [ 475.553096][T15027] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 475.594627][T15027] System zones: 0-2, 18-18, 34-34 [ 475.633511][T15027] EXT4-fs (loop5): 1 orphan inode deleted [ 475.651736][T15027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.664637][ T60] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 475.681346][ T60] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1 [ 475.695282][T15027] ext4 filesystem being mounted at /625/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.803993][ T8647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.077432][T15043] loop3: detected capacity change from 0 to 1024 [ 476.102310][T15043] EXT4-fs: Ignoring removed orlov option [ 476.143433][T15043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.165982][T15037] syz.5.3478 (15037): drop_caches: 1 [ 476.237043][T15043] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.3483: unexpected EA_INODE flag [ 476.343198][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.634072][T15047] loop2: detected capacity change from 0 to 32768 [ 476.644184][T15047] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 476.739292][ T5792] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 477.420234][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 477.422369][ T1130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.428309][ C0] lec:lec_tx_timeout: lec0 [ 477.443720][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 477.806535][T15053] loop3: detected capacity change from 0 to 512 [ 477.872333][T15053] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 477.924839][T15053] System zones: 0-2, 18-18, 34-34 [ 478.046746][T15053] EXT4-fs (loop3): 1 orphan inode deleted [ 478.064046][ T1140] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 478.085142][T15053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.110973][ T1140] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 1 [ 478.128180][T15053] ext4 filesystem being mounted at /857/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.338485][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.523218][T15069] syz.4.3495 (15069): drop_caches: 1 [ 478.759728][T15083] loop5: detected capacity change from 0 to 64 [ 478.851029][T15083] hfs: hfs: Invalid key length: 94 [ 478.975561][T15087] loop2: detected capacity change from 0 to 2048 [ 478.993161][ T34] ------------[ cut here ]------------ [ 478.998933][ T34] kernel BUG at fs/hfs/inode.c:450! [ 479.023717][ T34] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 479.030015][ T34] CPU: 1 PID: 34 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 479.037431][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.047535][ T34] Workqueue: writeback wb_workfn (flush-7:5) [ 479.053589][ T34] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 479.059229][ T34] Code: c7 c1 00 93 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 93 33 97 e8 7f 11 84 ff e9 5e fe ff ff e8 15 90 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 479.078882][ T34] RSP: 0018:ffffc90000aaf340 EFLAGS: 00010293 [ 479.084998][ T34] RAX: ffffffff825bf25b RBX: ffff888026f2f028 RCX: ffff88801ce51e00 [ 479.093048][ T34] RDX: 0000000000000000 RSI: ffffffff8d339c40 RDI: 0000000000000000 [ 479.101065][ T34] RBP: ffffc90000aaf4d0 R08: ffff88801ce51e00 R09: 0000000000000003 [ 479.109084][ T34] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 479.117096][ T34] R13: 1ffff92000155e6c R14: ffff888026f2efd8 R15: 0000000000000000 [ 479.125109][ T34] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 479.134179][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.140821][ T34] CR2: 00007f74b7bec458 CR3: 00000000762a0000 CR4: 00000000003506e0 [ 479.148851][ T34] Call Trace: [ 479.152177][ T34] [ 479.155165][ T34] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 479.160609][ T34] ? __rwlock_init+0x150/0x150 [ 479.165476][ T34] __writeback_single_inode+0x720/0xee0 [ 479.171095][ T34] writeback_sb_inodes+0x813/0x1020 [ 479.176363][ T34] ? queue_io+0x530/0x530 [ 479.180745][ T34] ? move_expired_inodes+0x726/0x770 [ 479.186098][ T34] ? rcu_is_watching+0x15/0xb0 [ 479.189574][T15087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.190909][ T34] ? queue_io+0x3ba/0x530 [ 479.190947][ T34] wb_writeback+0x45e/0xbe0 [ 479.208645][ T34] ? queue_io+0x391/0x530 [ 479.213024][ T34] ? percpu_ref_tryget+0x250/0x250 [ 479.218178][ T34] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 479.224190][ T34] ? __lock_acquire+0x7d80/0x7d80 [ 479.229245][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.234494][ T34] wb_workfn+0x400/0xe60 [ 479.238789][ T34] ? inode_wait_for_writeback+0x230/0x230 [ 479.244562][ T34] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 479.250606][ T34] ? __lock_acquire+0x7d80/0x7d80 [ 479.255670][ T34] ? read_lock_is_recursive+0x20/0x20 [ 479.261095][ T34] ? _raw_spin_unlock_irq+0x23/0x50 [ 479.266525][ T34] ? process_scheduled_works+0x975/0x1600 [ 479.272284][ T34] ? process_scheduled_works+0x975/0x1600 [ 479.278046][ T34] process_scheduled_works+0xa60/0x1600 [ 479.283665][ T34] ? worker_attach_to_pool+0x370/0x370 [ 479.289176][ T34] ? assign_work+0x3cc/0x5d0 [ 479.293834][ T34] worker_thread+0xa5e/0xfe0 [ 479.298457][ T34] ? _raw_spin_unlock+0x40/0x40 [ 479.303330][ T34] ? __kthread_parkme+0x71/0x1c0 [ 479.308306][ T34] kthread+0x2fa/0x390 [ 479.312403][ T34] ? pr_cont_work+0x550/0x550 [ 479.317107][ T34] ? kthread_blkcg+0xd0/0xd0 [ 479.321729][ T34] ret_from_fork+0x48/0x80 [ 479.326203][ T34] ? kthread_blkcg+0xd0/0xd0 [ 479.330843][ T34] ret_from_fork_asm+0x11/0x20 [ 479.335663][ T34] [ 479.338704][ T34] Modules linked in: [ 479.360667][ T34] ---[ end trace 0000000000000000 ]--- [ 479.422136][ T34] RIP: 0010:hfs_write_inode+0x87b/0x880 [ 479.427792][ T34] Code: c7 c1 00 93 33 97 80 e1 07 80 c1 03 38 c1 0f 8c 6f fe ff ff 48 c7 c7 00 93 33 97 e8 7f 11 84 ff e9 5e fe ff ff e8 15 90 2b ff <0f> 0b 0f 1f 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 bf [ 479.456296][ T34] RSP: 0018:ffffc90000aaf340 EFLAGS: 00010293 [ 479.464370][ T34] RAX: ffffffff825bf25b RBX: ffff888026f2f028 RCX: ffff88801ce51e00 [ 479.474275][ T34] RDX: 0000000000000000 RSI: ffffffff8d339c40 RDI: 0000000000000000 [ 479.482731][ T34] RBP: ffffc90000aaf4d0 R08: ffff88801ce51e00 R09: 0000000000000003 [ 479.491142][ T34] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 479.499230][ T34] R13: 1ffff92000155e6c R14: ffff888026f2efd8 R15: 0000000000000000 [ 479.509020][ T34] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 479.519069][ T34] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.525850][ T34] CR2: 00007fcc0ebed158 CR3: 000000002f272000 CR4: 00000000003506e0 [ 479.535240][ T34] Kernel panic - not syncing: Fatal exception [ 479.541917][ T34] Kernel Offset: disabled [ 479.546246][ T34] Rebooting in 86400 seconds..