last executing test programs: 4.026603747s ago: executing program 2 (id=3273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x9, &(0x7f0000000780)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0xe, 0x0, &(0x7f0000000980)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.577283722s ago: executing program 1 (id=3281): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0xc, 0xe, 0x0, 0x1, [@typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 3.353223406s ago: executing program 1 (id=3283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) 3.074534354s ago: executing program 1 (id=3287): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x5) 2.927906879s ago: executing program 2 (id=3289): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 2.673864105s ago: executing program 2 (id=3293): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x800) 2.613684422s ago: executing program 4 (id=3295): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.585307045s ago: executing program 3 (id=3296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x48240, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) close(r0) 2.416315392s ago: executing program 2 (id=3297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.372740306s ago: executing program 4 (id=3299): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) unshare(0x22020400) inotify_add_watch(r0, 0x0, 0x1000084) 2.294975374s ago: executing program 3 (id=3300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1d, 0xe0, 0x4, 0xfffffffe}]}) 2.208707153s ago: executing program 4 (id=3302): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file7\x00', 0x2000c12, &(0x7f00000002c0)={[{@overriderock}, {@session={'session', 0x3d, 0x1b}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@nocompress}, {}, {@map_acorn}, {@map_off}, {@session={'session', 0x3d, 0x41}}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@mode={'mode', 0x3d, 0x1ff}}]}, 0x4, 0xa07, &(0x7f0000001f80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') read(r0, &(0x7f0000001180)=""/4083, 0xff3) 2.074516857s ago: executing program 1 (id=3303): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x20048010) 2.061207948s ago: executing program 2 (id=3304): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000380)='./file0\x00', 0x400, &(0x7f0000000600)={[{@nls={'nls', 0x3d, 'cp949'}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@part={'part', 0x3d, 0x9}}]}, 0x1, 0x5f1, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000e00), &(0x7f0000000e40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f0000000ec0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, 0x0, 0x1, 0x0, &(0x7f0000000000)) 2.029029552s ago: executing program 3 (id=3305): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x20000000000000}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x20000000000002, 0x59}) 2.028558472s ago: executing program 0 (id=3306): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r1, 0x4) 1.916056683s ago: executing program 4 (id=3307): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x3, &(0x7f0000002d00)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@noblock_validity}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000002d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x81) getdents64(r0, 0x0, 0x0) 1.797894255s ago: executing program 0 (id=3308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c060000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2513000000080001"], 0x68c}, 0x1, 0x0, 0x0, 0x1}, 0xe4b7614124ca226) 1.75371633s ago: executing program 3 (id=3309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000500)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002dc0)={r1, &(0x7f0000000580), 0x0}, 0x20) 1.717135274s ago: executing program 2 (id=3310): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x800810, &(0x7f0000000280)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000018c40)='./file1\x00', 0x143042, 0xd1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 1.691683816s ago: executing program 1 (id=3311): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x105db, &(0x7f0000010600)="$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") 1.417968544s ago: executing program 3 (id=3312): r0 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f00000000c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys\x00', 0x1ff) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000cc0)={{&(0x7f0000000d40)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0x1000000000de}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4}, {0x0, 0x0, 0x28, 0xd, 0xffffffffffffff2d}, {&(0x7f0000000d80)=[0x1], 0x1, 0x8, 0x98f}}) 1.381537268s ago: executing program 0 (id=3313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252800000008000200", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20040084}, 0x10) 892.642828ms ago: executing program 4 (id=3314): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffa}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x11e) 759.113072ms ago: executing program 0 (id=3315): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000001700)=[{0x0}, {&(0x7f0000000700)="a858d1c551ac168a128b3d", 0xb}], 0x2}, 0x4) 353.908964ms ago: executing program 0 (id=3316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000034c0)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x3c, 0x3, "2a9d8d5ffba9dc9497f28a7c926166044f1658de41c181d59174a847454b93d80d01295ab5cb8535ffd1747a780368acdf43130293b0bf54"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x2000c871}, 0x4040080) 306.884268ms ago: executing program 1 (id=3317): r0 = syz_clone(0x40080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279r02kcB/BPqiF3Orh0clIHh8NFcTSDShIVhRDtIjcoWETMFEGIXEDQQTPomUEcXUTI0h9T0wydWlroXEqHHoXCdbmjXQpdmiP06VJuaLn0QHi94MuH5/m+v8/n+fwB3+CHNhR/93q9TET0chE/HfHrkXahePtc+XrlQUSmf1j8/ufocP9NJiX6p/ZdSOvVtP729VT3/datbHvl/vbFR7PNof3rRMTriDj9vTMyiPk4XmP5uTNv3tZKH+r5Z8ulxvq7pcV745uFSuduszVxJ3vzScrNp3oy1RdRj1fxPB5HNaoxGrUB9f/SXru8e7bUnnp6bafY/ThzJeXK/3HOw/Z/ef7Tw1bjxqXJ4c9X69MLlY0Te7lq7pguAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQI3l5868eVsrfajncxGx/m5p8d74ZqHSudtsTdzJ3nyScvOpnkz1RdTjVTyPx1GNaoxGbf/AXu8wbX/+l/7PlkuN9S/ttcu7Z0vtqafXdordjzNXUq48qIEPONj/5flPD1uNG5cmhz9frU8vVDZO7OWquWO6AAAAAAAAAAAAAAAAAAAAAEREoXj7XPl65UFEJn6NiF/++m2ov99L/7tnUu5Cqqtp/9vXU933W7ey7ZX72xcfzTb/SPuv03P6e2fkfx+GI/snAAD//3r5lQA=") rt_sigqueueinfo(r0, 0x4, &(0x7f0000000100)={0x1d, 0xd9, 0xf0000000}) 101.998649ms ago: executing program 0 (id=3318): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db729598", 0xb}], 0x2}, 0x0) 53.861324ms ago: executing program 3 (id=3319): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0xff, 0xa1, 0x401}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 0s ago: executing program 4 (id=3320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) kernel console output (not intermixed with test programs): 380][ T9410] ttusb2: i2c wr len=58 too high [ 314.685437][ T2126] usb 2-1: media controller created [ 314.736813][ T2126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.801117][ T2126] usb 2-1: selecting invalid altsetting 3 [ 314.819953][ T2126] ttusb2: set interface to alts=3 failed [ 314.994020][ T2126] DVB: Unable to find symbol tda10086_attach() [ 315.002549][ T2126] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 315.032187][ T2126] dvb-usb: bulk message failed: -22 (4/0) [ 315.043774][ T2126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 315.070295][ T2126] dvb-usb: bulk message failed: -22 (5/0) [ 315.095297][ T2126] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 315.106649][ T9460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 315.113798][ T9460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 315.131892][ T2126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 315.153746][ T2126] usb 2-1: USB disconnect, device number 9 [ 315.186652][ T9460] vhci_hcd vhci_hcd.0: Device attached [ 315.267301][ T2126] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 315.344020][ T9466] loop4: detected capacity change from 0 to 1024 [ 315.401389][ T9466] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 315.422954][ T9466] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 315.492203][ T9466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 315.502016][ T22] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 315.713869][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 315.984377][ T9488] loop3: detected capacity change from 0 to 4096 [ 316.044673][ T9488] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 316.105121][ T9488] NILFS (loop3): mounting unchecked fs [ 316.117859][ T9492] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.122673][ T9488] NILFS (loop3): recovery required for readonly filesystem [ 316.155902][ T9488] NILFS (loop3): write access will be enabled during recovery [ 316.221614][ T9488] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 316.247384][ T4286] udevd[4286]: incorrect nilfs2 checksum on /dev/loop3 [ 316.446700][ T4286] udevd[4286]: incorrect nilfs2 checksum on /dev/loop3 [ 316.491671][ T9480] loop2: detected capacity change from 0 to 32768 [ 316.594215][ T9480] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 316.688804][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 317.098246][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.105258][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239567][ T9523] loop2: detected capacity change from 0 to 256 [ 317.284655][ T9523] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa6da65d0, utbl_chksum : 0xe619d30d) [ 317.375310][ T4776] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 317.578114][ T4776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.595318][ T4776] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.605163][ T4776] usb 5-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 317.635283][ T4776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.835939][ T9538] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 317.915223][ T9538] bridge0: port 3(team0) entered disabled state [ 317.922346][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.929860][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.116909][ T4776] hid-generic 0003:8086:0000.0005: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.4-1/input0 [ 318.151012][ T9461] vhci_hcd: connection reset by peer [ 318.179197][ T77] vhci_hcd: stop threads [ 318.184255][ T77] vhci_hcd: release socket [ 318.205140][ T77] vhci_hcd: disconnect device [ 318.311147][ T4776] usb 5-1: USB disconnect, device number 14 [ 318.478081][ T9542] fido_id[9542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 318.521152][ T9547] loop3: detected capacity change from 0 to 4096 [ 318.630679][ T9547] ntfs3: loop3: Failed to load $Extend. [ 318.702538][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.744823][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.808422][ T4290] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 318.815420][ T4290] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 318.889735][ T9552] netlink: 'syz.0.2052': attribute type 16 has an invalid length. [ 318.915388][ T9552] netlink: 'syz.0.2052': attribute type 17 has an invalid length. [ 319.013130][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.024236][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 319.042616][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.063465][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.079705][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.087628][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.110882][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.118150][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.129353][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.136580][ T9552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.264771][ T9564] loop4: detected capacity change from 0 to 512 [ 319.334392][ T9564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 319.366423][ T9564] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.2057: corrupted inode contents [ 319.382979][ T9564] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 319.392984][ T9564] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.2057: corrupted inode contents [ 319.406495][ T9564] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.2057: mark_inode_dirty error [ 319.424718][ T9564] EXT4-fs (loop4): 1 orphan inode deleted [ 319.430697][ T9564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 319.617644][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 319.707657][ T9573] loop2: detected capacity change from 0 to 256 [ 319.729035][ T9573] exfat: Deprecated parameter 'utf8' [ 319.734452][ T9573] exfat: Deprecated parameter 'utf8' [ 319.745938][ T4294] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 319.825691][ T9582] loop4: detected capacity change from 0 to 128 [ 319.843694][ T9582] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 319.854934][ T9573] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 319.865350][ T9582] hpfs: filesystem error: improperly stopped [ 319.919875][ T9582] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 319.941769][ T9583] loop3: detected capacity change from 0 to 4096 [ 319.955154][ T9582] hpfs: You really don't want any checks? You are crazy... [ 319.984538][ T9582] hpfs: hpfs_map_sector(): read error [ 320.000382][ T9582] hpfs: code page support is disabled [ 320.025463][ T9582] hpfs: hpfs_map_4sectors(): unaligned read [ 320.041937][ T9582] hpfs: hpfs_map_4sectors(): unaligned read [ 320.093789][ T9582] hpfs: filesystem error: unable to find root dir [ 320.150250][ T9582] hpfs: hpfs_map_4sectors(): unaligned read [ 320.187840][ T9582] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 320.370560][ T27] audit: type=1326 audit(1793186361.527:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.1.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0179f559 code=0x7ffc0000 [ 320.445272][ T27] audit: type=1326 audit(1793186361.527:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.1.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feb0179f559 code=0x7ffc0000 [ 320.551200][ T27] audit: type=1326 audit(1793186361.527:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.1.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0179f559 code=0x7ffc0000 [ 320.596516][ T8537] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 320.615691][ T22] vhci_hcd: vhci_device speed not set [ 320.623005][ T27] audit: type=1326 audit(1793186361.527:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.1.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0179f559 code=0x7ffc0000 [ 320.685017][ T27] audit: type=1326 audit(1793186361.527:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.1.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7feb0179f559 code=0x7ffc0000 [ 320.725302][ T27] audit: type=1326 audit(1793186361.527:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9594 comm="syz.1.2071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0179f559 code=0x7ffc0000 [ 320.751843][ T9598] loop4: detected capacity change from 0 to 4096 [ 320.817251][ T8537] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 320.844717][ T8537] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 320.875374][ T8537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.891273][ T8537] usb 3-1: Product: syz [ 320.903944][ T8537] usb 3-1: Manufacturer: syz [ 320.911776][ T8537] usb 3-1: SerialNumber: syz [ 320.938606][ T8537] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 320.940511][ T9598] ntfs3: loop4: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 320.962142][ T8537] dvb-usb: bulk message failed: -22 (3/0) [ 321.031490][ T8537] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.058875][ T8537] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 321.076163][ T8537] usb 3-1: media controller created [ 321.126733][ T8537] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.141833][ T9591] dvb-usb: bulk message failed: -22 (2/0) [ 321.153802][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 321.319175][ T9618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2082'. [ 321.339667][ T9616] loop4: detected capacity change from 0 to 4096 [ 321.432117][ T9620] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.450209][ T8537] DVB: Unable to find symbol mt352_attach() [ 321.456339][ T8537] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 321.471991][ T8537] dvb-usb: bulk message failed: -22 (3/0) [ 321.499326][ T9616] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 321.529730][ T8537] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 321.582981][ T9623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 321.595954][ T8537] usb 3-1: USB disconnect, device number 10 [ 321.621565][ T9623] tipc: Invalid UDP bearer configuration [ 321.621617][ T9623] tipc: Enabling of bearer rejected, failed to enable media [ 321.674179][ T8537] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 321.743160][ T9625] netlink: 'syz.3.2085': attribute type 2 has an invalid length. [ 321.919655][ T9630] loop4: detected capacity change from 0 to 512 [ 322.062015][ T9638] loop2: detected capacity change from 0 to 256 [ 322.076102][ T9638] exfat: Deprecated parameter 'utf8' [ 322.081665][ T9638] exfat: Deprecated parameter 'namecase' [ 322.110091][ T9630] EXT4-fs (loop4): 1 orphan inode deleted [ 322.116273][ T9630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 322.126764][ T9630] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.139963][ T77] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 322.155868][ T9638] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 322.179853][ T77] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1 [ 322.282372][ T9640] loop3: detected capacity change from 0 to 1024 [ 322.290834][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 322.509817][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 322.687859][ T9649] EXT4-fs (loop3): orphan cleanup on readonly fs [ 322.694750][ T9649] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.2096: bad orphan inode 15 [ 322.710875][ T9649] ext4_test_bit(bit=14, block=18) = 1 [ 322.720852][ T9649] is_bad_inode(inode)=0 [ 322.725055][ T9649] NEXT_ORPHAN(inode)=1023 [ 322.770440][ T9649] max_ino=32 [ 322.773714][ T9649] i_nlink=0 [ 322.795410][ T9649] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2921: inode #15: comm syz.3.2096: corrupted xattr block 19 [ 322.885726][ T9649] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 322.918056][ T9649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 323.061948][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 323.358882][ T9657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2100 (9657) [ 323.408285][ T9657] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.426923][ T9657] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 323.432711][ T4357] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 323.459632][ T9657] BTRFS info (device loop4): setting nodatasum [ 323.493875][ T9657] BTRFS info (device loop4): force zlib compression, level 3 [ 323.536629][ T9657] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 323.560733][ T9657] BTRFS info (device loop4): use lzo compression, level 0 [ 323.582573][ T9657] BTRFS info (device loop4): turning on flush-on-commit [ 323.598648][ T9657] BTRFS info (device loop4): enabling auto defrag [ 323.612125][ T9657] BTRFS info (device loop4): max_inline at 4096 [ 323.665296][ T9657] BTRFS info (device loop4): using free space tree [ 323.666316][ T4357] usb 3-1: Using ep0 maxpacket: 32 [ 323.724920][ T4357] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.787711][ T9691] set_capacity_and_notify: 3 callbacks suppressed [ 323.787728][ T9691] loop1: detected capacity change from 0 to 512 [ 323.832979][ T9694] lo speed is unknown, defaulting to 1000 [ 323.834267][ T4357] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.839984][ T9694] lo speed is unknown, defaulting to 1000 [ 323.865313][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.873665][ T4357] usb 3-1: Product: syz [ 323.878421][ T4357] usb 3-1: Manufacturer: syz [ 323.883057][ T4357] usb 3-1: SerialNumber: syz [ 323.898721][ T4357] usb 3-1: config 0 descriptor?? [ 323.904424][ T9665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 323.913400][ T9691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 323.922637][ T4357] hub 3-1:0.0: bad descriptor, ignoring hub [ 323.924965][ T9694] lo speed is unknown, defaulting to 1000 [ 323.929678][ T9691] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.949620][ T9694] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 323.964498][ T9657] BTRFS info (device loop4): enabling ssd optimizations [ 323.985259][ T4357] hub: probe of 3-1:0.0 failed with error -5 [ 324.045385][ T9694] lo speed is unknown, defaulting to 1000 [ 324.090715][ T4277] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.103715][ T9694] lo speed is unknown, defaulting to 1000 [ 324.126716][ T9694] lo speed is unknown, defaulting to 1000 [ 324.164196][ T9694] lo speed is unknown, defaulting to 1000 [ 324.191964][ T9694] lo speed is unknown, defaulting to 1000 [ 324.285490][ T4776] usb 3-1: USB disconnect, device number 11 [ 324.370256][ T9667] loop3: detected capacity change from 0 to 32768 [ 324.487677][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 324.762945][ T9711] netlink: 'syz.4.2114': attribute type 3 has an invalid length. [ 324.974662][ T9714] loop2: detected capacity change from 0 to 2048 [ 325.056736][ T9714] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 325.102161][ T9714] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 325.183335][ T9714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.707632][ T9740] tipc: Enabling of bearer rejected, failed to enable media [ 325.811248][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2129'. [ 325.877630][ T9744] loop0: detected capacity change from 0 to 64 [ 325.944276][ T9744] MINIX-fs: mounting file system with errors, running fsck is recommended [ 325.969768][ T9721] loop4: detected capacity change from 0 to 32768 [ 326.055631][ T9721] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2120 (9721) [ 326.120472][ T9721] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 326.149761][ T9726] loop1: detected capacity change from 0 to 32768 [ 326.160321][ T9721] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 326.222551][ T9721] BTRFS info (device loop4): use zlib compression, level 3 [ 326.245868][ T9747] rxe_eth0 speed is unknown, defaulting to 1000 [ 326.298708][ T9721] BTRFS info (device loop4): using free space tree [ 326.348039][ T9759] loop0: detected capacity change from 0 to 256 [ 326.366178][ T9759] exfat: Deprecated parameter 'utf8' [ 326.409560][ T9726] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 326.420069][ T9759] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 326.486740][ T9726] XFS (loop1): Mounting V5 Filesystem [ 326.690327][ T9780] loop3: detected capacity change from 0 to 64 [ 326.715012][ T9721] BTRFS info (device loop4): enabling ssd optimizations [ 326.735735][ T9726] XFS (loop1): Ending clean mount [ 326.825005][ T9726] XFS (loop1): Quotacheck needed: Please wait. [ 326.905128][ T9780] syz.3.2135: attempt to access beyond end of device [ 326.905128][ T9780] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 326.949818][ T9726] XFS (loop1): Quotacheck: Done. [ 326.965576][ T9780] Buffer I/O error on dev loop3, logical block 512, async page read [ 327.004501][ T4277] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 327.008868][ T9780] syz.3.2135: attempt to access beyond end of device [ 327.008868][ T9780] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 327.053412][ T9747] lo speed is unknown, defaulting to 1000 [ 327.074910][ T9780] Buffer I/O error on dev loop3, logical block 56576, async page read [ 327.328640][ T4274] XFS (loop1): Unmounting Filesystem [ 328.066961][ T9787] loop0: detected capacity change from 0 to 32768 [ 328.181694][ T9792] loop3: detected capacity change from 0 to 40427 [ 328.203252][ T9792] F2FS-fs (loop3): invalid crc value [ 328.204547][ T9787] XFS (loop0): Mounting V5 Filesystem [ 328.217723][ T9792] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.256475][ T9803] Bluetooth: MGMT ver 1.22 [ 328.370504][ T9792] F2FS-fs (loop3): Start checkpoint disabled! [ 328.401239][ T9792] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 328.421950][ T9787] XFS (loop0): Ending clean mount [ 328.655968][ T4275] XFS (loop0): Unmounting Filesystem [ 328.785267][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 328.921687][ T9] kworker/u4:0: attempt to access beyond end of device [ 328.921687][ T9] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 328.979566][ T7] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.009995][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.041128][ T9818] loop0: detected capacity change from 0 to 256 [ 329.060240][ T7] usb 3-1: Product: syz [ 329.105052][ T7] usb 3-1: Manufacturer: syz [ 329.111071][ T7] usb 3-1: SerialNumber: syz [ 329.137283][ T9818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 329.183573][ T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.208885][ T9818] FAT-fs (loop0): Filesystem has been set read-only [ 329.389948][ T9823] loop1: detected capacity change from 0 to 1024 [ 329.826347][ T9829] usb usb1: check_ctrlrecip: process 9829 (syz.1.2153) requesting ep 01 but needs 81 [ 329.920156][ T8725] usb 3-1: USB disconnect, device number 12 [ 330.042376][ T9837] siw: device registration error -23 [ 330.063720][ T9837] siw: device registration error -23 [ 330.200120][ T9843] loop0: detected capacity change from 0 to 4096 [ 330.287310][ T9843] ntfs3: loop0: Failed to load $Extend. [ 330.457600][ T4275] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 330.464141][ T4275] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 330.535685][ T7] usb 3-1: Service connection timeout for: 256 [ 330.542529][ T7] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 330.571781][ T9855] loop4: detected capacity change from 0 to 512 [ 330.579135][ T7] ath9k_htc: Failed to initialize the device [ 330.611260][ T8725] usb 3-1: ath9k_htc: USB layer deinitialized [ 330.669469][ T9855] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 330.729028][ T9855] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 330.804967][ T9855] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 330.885652][ T9855] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 330.893817][ T9855] System zones: 0-2, 18-18, 34-35 [ 330.950798][ T9872] loop0: detected capacity change from 0 to 64 [ 330.977226][ T9855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 331.111912][ T9868] loop3: detected capacity change from 0 to 4096 [ 331.135426][ T9855] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 331.192760][ T9868] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 331.281382][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 331.412249][ T9868] ntfs3: loop3: failed to convert "c46c" to iso8859-15 [ 331.431236][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2176'. [ 331.460592][ T9888] loop4: detected capacity change from 0 to 512 [ 331.557187][ T9888] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 331.635444][ T9888] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.948117][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 332.114328][ T9909] loop0: detected capacity change from 0 to 1024 [ 332.219459][ T9914] loop2: detected capacity change from 0 to 1024 [ 332.307983][ T4774] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 332.515257][ T4774] usb 4-1: Using ep0 maxpacket: 32 [ 332.524749][ T4774] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 332.535623][ T9922] loop2: detected capacity change from 0 to 8 [ 332.568088][ T4774] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 332.586390][ T4774] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 332.604254][ T4774] usb 4-1: Product: syz [ 332.622123][ T4774] usb 4-1: Manufacturer: syz [ 332.633510][ T9922] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 332.644974][ T4774] usb 4-1: SerialNumber: syz [ 332.662469][ T4774] usb 4-1: config 0 descriptor?? [ 332.670785][ T9922] SQUASHFS error: Failed to read block 0x10e0000c00090: -5 [ 332.689563][ T9904] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.707731][ T4774] hub 4-1:0.0: bad descriptor, ignoring hub [ 332.713701][ T4774] hub: probe of 4-1:0.0 failed with error -5 [ 332.725465][ T9922] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 332.752172][ T9922] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 332.794439][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'. [ 332.811068][ T9922] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 332.835481][ T9929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2197'. [ 332.847195][ T9922] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 332.867798][ T9922] SQUASHFS error: Failed to read block 0x10e000000008f: -5 [ 332.880480][ T27] audit: type=1800 audit(1793186374.037:77): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2192" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 333.031956][ T9927] ntfs3: loop4: Failed to load $Extend. [ 333.084852][ T8725] usb 4-1: USB disconnect, device number 12 [ 333.257787][ T4277] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 333.295240][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 333.474003][ T9942] ip_tables: iptables: counters copy to user failed while replacing table [ 333.777003][ T9952] tipc: Started in network mode [ 333.781944][ T9952] tipc: Node identity , cluster identity 4711 [ 333.825615][ T9952] tipc: Failed to set node id, please configure manually [ 333.839428][ T9952] tipc: Enabling of bearer rejected, failed to enable media [ 334.471331][ T9972] set_capacity_and_notify: 1 callbacks suppressed [ 334.471348][ T9972] loop3: detected capacity change from 0 to 256 [ 334.493551][ T9944] loop2: detected capacity change from 0 to 32768 [ 334.518110][ T9944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2205 (9944) [ 334.535848][ T9972] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 334.578626][ T9944] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.612273][ T9944] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 334.643512][ T9944] BTRFS info (device loop2): disabling tree log [ 334.690986][ T9944] BTRFS info (device loop2): using free space tree [ 334.825415][ T8725] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 334.870916][ T9944] BTRFS info (device loop2): enabling ssd optimizations [ 335.015487][ T8725] usb 2-1: Using ep0 maxpacket: 32 [ 335.029131][ T8725] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 335.071091][ T8725] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 335.098475][ T8725] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 335.124292][ T8725] usb 2-1: Product: syz [ 335.155424][ T8725] usb 2-1: Manufacturer: syz [ 335.160091][ T8725] usb 2-1: SerialNumber: syz [ 335.175569][T10002] loop0: detected capacity change from 0 to 64 [ 335.218809][ T8725] usb 2-1: config 0 descriptor?? [ 335.224488][ T9974] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 335.245398][ T8725] hub 2-1:0.0: bad descriptor, ignoring hub [ 335.264283][ T8725] hub: probe of 2-1:0.0 failed with error -5 [ 335.314331][ T33] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 335.477345][ T4283] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.519855][T10009] loop0: detected capacity change from 0 to 512 [ 335.572969][T10009] EXT4-fs: Ignoring removed bh option [ 335.620259][T10009] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 335.680551][T10009] EXT4-fs (loop0): 1 truncate cleaned up [ 335.688657][T10009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 335.849427][ T4377] usb 2-1: USB disconnect, device number 10 [ 335.917759][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 336.171695][T10016] loop1: detected capacity change from 0 to 65 [ 336.221612][T10016] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 336.514610][T10025] loop4: detected capacity change from 0 to 1024 [ 336.654270][T10027] loop1: detected capacity change from 0 to 4096 [ 336.699239][T10027] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 336.840129][T10027] ntfs3: loop1: failed to convert "c46c" to iso8859-15 [ 337.151968][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'. [ 337.192091][T10019] loop2: detected capacity change from 0 to 32768 [ 337.281278][T10019] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 337.332201][T10019] XFS (loop2): Mounting V5 Filesystem [ 337.355444][ T4377] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 337.393980][T10056] Bluetooth: MGMT ver 1.22 [ 337.453977][T10019] XFS (loop2): Ending clean mount [ 337.463908][T10019] XFS (loop2): Quotacheck needed: Please wait. [ 337.519503][T10019] XFS (loop2): Quotacheck: Done. [ 337.547380][ T4377] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.587544][T10058] netlink: 'syz.0.2242': attribute type 4 has an invalid length. [ 337.602574][T10058] netlink: 'syz.0.2242': attribute type 8 has an invalid length. [ 337.611444][T10058] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2242'. [ 337.615610][ T4377] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.667593][ T4377] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 337.685863][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 337.709626][ T4377] usb 2-1: Product: syz [ 337.713946][ T4377] usb 2-1: Manufacturer: syz [ 337.744441][ T4283] XFS (loop2): Unmounting Filesystem [ 337.752445][ T4377] hub 2-1:1.0: USB hub found [ 337.923053][T10066] loop0: detected capacity change from 0 to 16 [ 337.939326][T10066] erofs: (device loop0): mounted with root inode @ nid 36. [ 337.970797][ T27] audit: type=1800 audit(1793186379.127:78): pid=10066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2247" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 337.994186][ T4377] hub 2-1:1.0: 8 ports detected [ 338.005422][ T4377] hub 2-1:1.0: insufficient power available to use all downstream ports [ 338.148033][T10051] loop4: detected capacity change from 0 to 32768 [ 338.200744][ T4377] hub 2-1:1.0: hub_hub_status failed (err = 0) [ 338.217952][ T4377] hub 2-1:1.0: config failed, can't get hub status (err -5) [ 338.260558][ T4377] usbtouchscreen: probe of 2-1:1.0 failed with error -12 [ 338.289861][T10051] XFS (loop4): Mounting V5 Filesystem [ 338.383587][T10051] XFS (loop4): Starting recovery (logdev: internal) [ 338.474147][T10051] XFS (loop4): Ending recovery (logdev: internal) [ 338.570011][ T4377] usb 2-1: USB disconnect, device number 11 [ 338.734705][ T4277] XFS (loop4): Unmounting Filesystem [ 339.463364][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2259'. [ 339.652052][T10106] set_capacity_and_notify: 1 callbacks suppressed [ 339.652071][T10106] loop0: detected capacity change from 0 to 512 [ 339.709334][T10106] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 339.754237][T10106] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.2262: inode has both inline data and extents flags [ 339.787404][T10106] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2262: couldn't read orphan inode 15 (err -117) [ 339.832269][T10106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 340.081686][T10111] loop2: detected capacity change from 0 to 24 [ 340.094576][T10111] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 340.133511][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 340.171679][ T4286] udevd[4286]: incorrect romfs checksum on /dev/loop2 [ 340.206757][T10111] romfs: bad initial checksum on dev loop2. [ 340.528199][T10121] Bluetooth: hci0: unsupported parameter 5134 [ 340.534337][T10121] Bluetooth: hci0: unsupported parameter 8192 [ 340.573788][T10121] Bluetooth: hci0: unsupported parameter 5134 [ 340.589947][T10121] Bluetooth: hci0: unsupported parameter 8192 [ 340.816181][T10139] loop0: detected capacity change from 0 to 128 [ 340.861424][T10139] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 341.134619][T10142] loop3: detected capacity change from 0 to 4096 [ 341.218047][T10142] ntfs3: loop3: Failed to load $Extend. [ 341.367223][T10158] loop4: detected capacity change from 0 to 8 [ 341.465615][T10158] SQUASHFS error: lzo decompression failed, data probably corrupt [ 341.473714][T10158] SQUASHFS error: Failed to read block 0x71: -5 [ 341.568053][T10158] SQUASHFS error: lzo decompression failed, data probably corrupt [ 341.595269][T10158] SQUASHFS error: Failed to read block 0x71: -5 [ 341.618194][ T27] audit: type=1800 audit(1793186382.777:79): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2283" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 341.975343][ T4284] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 342.105324][ T4367] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 342.175351][ T4284] usb 3-1: Using ep0 maxpacket: 32 [ 342.182511][ T4284] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.202121][ T4284] usb 3-1: config 0 has no interface number 0 [ 342.214628][ T4284] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 342.231723][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.243373][ T4284] usb 3-1: Product: syz [ 342.247886][ T4284] usb 3-1: Manufacturer: syz [ 342.265384][ T4284] usb 3-1: SerialNumber: syz [ 342.272779][ T4284] usb 3-1: config 0 descriptor?? [ 342.283689][ T4284] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 342.297669][ T4367] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.315347][ T4367] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 342.324691][ T4284] usb 3-1: selecting invalid altsetting 1 [ 342.335465][ T4284] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 342.355152][ T4367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.377333][ T4284] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.396910][ T4367] usb 2-1: config 0 descriptor?? [ 342.412048][ T4284] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 342.431543][ T4284] usb 3-1: media controller created [ 342.500597][ T4284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.524423][ T27] audit: type=1326 audit(1793186383.677:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.645302][ T27] audit: type=1326 audit(1793186383.677:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.690921][ T27] audit: type=1326 audit(1793186383.677:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.725706][ T27] audit: type=1326 audit(1793186383.677:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.756063][ T27] audit: type=1326 audit(1793186383.717:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.797749][ T27] audit: type=1326 audit(1793186383.727:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.814738][ T4367] ath6kl: Unsupported hardware version: 0x0 [ 342.825483][ T27] audit: type=1326 audit(1793186383.737:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdbe555fd8e code=0x7ffc0000 [ 342.855066][ T27] audit: type=1326 audit(1793186383.737:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10196 comm="syz.4.2301" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe559f559 code=0x7ffc0000 [ 342.889250][ T4367] ath6kl: Failed to init ath6kl core: -22 [ 342.967543][ T4367] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 343.049430][ T4779] usb 2-1: USB disconnect, device number 12 [ 343.359192][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 343.368599][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2309'. [ 343.377878][T10215] netlink: 'syz.4.2309': attribute type 14 has an invalid length. [ 343.386493][T10215] netlink: 'syz.4.2309': attribute type 13 has an invalid length. [ 343.579023][T10164] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 343.629721][ T4284] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 343.637385][ T4284] zl10353_read_register: readreg error (reg=127, ret==-71) [ 343.645100][ T4284] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 343.704798][ T4284] usb 3-1: USB disconnect, device number 13 [ 344.086015][T10231] loop3: detected capacity change from 0 to 128 [ 344.124330][T10231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 344.192590][T10224] loop1: detected capacity change from 0 to 32768 [ 344.198118][T10231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 344.209868][T10231] ext4 filesystem being mounted at /468/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.275169][T10224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2313 (10224) [ 344.358427][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 344.401739][T10224] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.454131][T10224] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 344.480605][T10224] BTRFS info (device loop1): setting nodatasum [ 344.500028][T10224] BTRFS info (device loop1): force zlib compression, level 3 [ 344.525310][T10224] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 344.574762][T10224] BTRFS info (device loop1): use lzo compression, level 0 [ 344.595305][T10224] BTRFS info (device loop1): turning on flush-on-commit [ 344.597886][T10242] loop2: detected capacity change from 0 to 2048 [ 344.602319][T10224] BTRFS info (device loop1): enabling auto defrag [ 344.675349][T10224] BTRFS info (device loop1): max_inline at 4096 [ 344.681682][T10224] BTRFS info (device loop1): using free space tree [ 344.736371][T10242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.754258][T10242] ext4 filesystem being mounted at /461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.924712][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 345.062459][T10224] BTRFS info (device loop1): enabling ssd optimizations [ 345.323067][ T4274] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.025324][T10292] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 346.040657][T10290] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 346.046272][T10292] device-mapper: table: 248:8: multipath: not enough path parameters (-EINVAL) [ 346.095285][T10292] device-mapper: ioctl: error adding target to table [ 346.137769][T10295] loop2: detected capacity change from 0 to 512 [ 346.167824][T10290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.180444][T10295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2337: bg 0: block 5: invalid block bitmap [ 346.224695][T10290] device batadv0 entered promiscuous mode [ 346.236369][T10290] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 346.252838][T10271] loop0: detected capacity change from 0 to 32768 [ 346.309302][T10295] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 346.372447][T10295] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2337: invalid indirect mapped block 3 (level 2) [ 346.430747][T10295] EXT4-fs (loop2): 1 orphan inode deleted [ 346.463610][T10295] EXT4-fs (loop2): 1 truncate cleaned up [ 346.495503][T10295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 346.531667][T10295] EXT4-fs warning (device loop2): ext4_empty_dir:3149: inode #2: comm syz.2.2337: directory missing '.' [ 346.569129][ T4913] kernel write not supported for file /uhid (pid: 4913 comm: kworker/0:11) [ 346.572434][ T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 346.588059][ T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 346.680862][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 347.173533][T10330] loop0: detected capacity change from 0 to 512 [ 347.233500][T10330] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 347.300069][T10330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 347.324472][T10330] System zones: 1-12 [ 347.341587][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 347.341604][ T27] audit: type=1326 audit(1793186388.497:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 347.373111][T10330] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.2353: bad orphan inode 131072 [ 347.384283][T10330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 347.407924][ T27] audit: type=1326 audit(1793186388.507:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 347.513763][ T27] audit: type=1326 audit(1793186388.507:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 347.598784][ T27] audit: type=1326 audit(1793186388.507:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 347.624588][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 347.715314][ T27] audit: type=1326 audit(1793186388.557:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 347.785290][ T27] audit: type=1326 audit(1793186388.557:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 347.861094][ T27] audit: type=1326 audit(1793186388.557:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a0259f2c2 code=0x7ffc0000 [ 347.914682][ T27] audit: type=1326 audit(1793186388.557:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6a0259f357 code=0x7ffc0000 [ 348.015805][ T27] audit: type=1326 audit(1793186388.557:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6a0255c251 code=0x7ffc0000 [ 348.093423][ T27] audit: type=1326 audit(1793186388.557:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.2.2355" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6a025a0349 code=0x7ffc0000 [ 348.495264][ T4363] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 348.549079][T10376] loop1: detected capacity change from 0 to 512 [ 348.580081][T10376] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.2375: inode has both inline data and extents flags [ 348.610389][T10376] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.2375: couldn't read orphan inode 15 (err -117) [ 348.625015][T10376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 348.653241][T10381] loop2: detected capacity change from 0 to 512 [ 348.696644][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 348.712359][ T4363] usb 5-1: config 0 interface 0 altsetting 111 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 348.785271][ T4363] usb 5-1: config 0 interface 0 has no altsetting 0 [ 348.822564][ T4363] usb 5-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.00 [ 348.852938][ T4363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.891325][ T4363] usb 5-1: config 0 descriptor?? [ 348.901494][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 349.049472][T10368] loop3: detected capacity change from 0 to 32768 [ 349.085317][T10368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2371 (10368) [ 349.160691][T10368] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 349.186680][T10368] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 349.230851][T10368] BTRFS info (device loop3): disabling tree log [ 349.250449][T10368] BTRFS info (device loop3): using free space tree [ 349.312779][T10396] loop1: detected capacity change from 0 to 512 [ 349.335093][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.346628][T10396] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.358668][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.366940][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.373857][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.381011][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.388026][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.395042][ T4363] wacom 0003:056A:FFFF.0006: unknown main item tag 0x0 [ 349.402980][ T4363] wacom 0003:056A:FFFF.0006: Unknown device_type for 'HID 056a:ffff'. Ignoring. [ 349.506283][T10396] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 349.537365][ T4779] usb 5-1: USB disconnect, device number 15 [ 349.708567][T10368] BTRFS info (device loop3): enabling ssd optimizations [ 349.969554][ T77] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 350.080765][T10428] loop0: detected capacity change from 0 to 4096 [ 350.092755][ T4290] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 350.170826][ T4913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 350.186796][T10429] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.407046][ T4913] usb 3-1: Using ep0 maxpacket: 32 [ 350.414288][ T4913] usb 3-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.416010][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 350.471947][ T4913] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.517768][T10434] device veth0_macvtap left promiscuous mode [ 350.528540][ T4913] usb 3-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 350.578465][ T4913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.623431][ T4913] usb 3-1: config 0 descriptor?? [ 350.662308][T10441] usb usb8: check_ctrlrecip: process 10441 (syz.3.2392) requesting ep 01 but needs 81 [ 350.662383][T10441] usb usb8: usbfs: process 10441 (syz.3.2392) did not claim interface 0 before use [ 351.036073][ T4913] wacom 0003:056A:00B2.0007: unknown main item tag 0x1 [ 351.063456][ T4913] wacom 0003:056A:00B2.0007: unknown main item tag 0x3 [ 351.090963][ T4913] wacom 0003:056A:00B2.0007: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 351.122089][ T4913] wacom 0003:056A:00B2.0007: hidraw0: USB HID v11.06 Device [HID 056a:00b2] on usb-dummy_hcd.2-1/input0 [ 351.156544][ T4913] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B2.0007/input/input20 [ 351.277777][T10452] loop0: detected capacity change from 0 to 1024 [ 351.290594][ T4913] usb 3-1: USB disconnect, device number 14 [ 351.332860][T10452] hfsplus: request for non-existent node 3 in B*Tree [ 351.378594][T10452] hfsplus: request for non-existent node 3 in B*Tree [ 351.405359][T10452] hfsplus: invalid length 28418 has been corrected to 255 [ 351.443301][T10452] hfsplus: invalid length 28418 has been corrected to 255 [ 351.704980][T10459] fido_id[10459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 351.898903][T10463] loop0: detected capacity change from 0 to 1024 [ 351.993501][T10463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 352.268117][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 352.502792][T10479] support for cryptoloop has been removed. Use dm-crypt instead. [ 352.517435][T10458] loop1: detected capacity change from 0 to 32768 [ 352.554139][T10458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2403 (10458) [ 352.622385][T10458] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 352.654092][T10458] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 352.701656][T10458] BTRFS info (device loop1): disabling tree log [ 352.729633][T10483] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 352.737746][T10458] BTRFS info (device loop1): using free space tree [ 352.864316][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.929713][T10483] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 352.941686][T10492] loop4: detected capacity change from 0 to 2048 [ 353.009356][T10492] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 353.036501][T10458] BTRFS info (device loop1): enabling ssd optimizations [ 353.059934][T10492] NILFS (loop4): mounting unchecked fs [ 353.082753][T10492] NILFS (loop4): recovery complete [ 353.118461][T10511] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.251008][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 353.344377][T10516] loop2: detected capacity change from 0 to 2048 [ 353.419338][T10516] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 353.441999][T10518] loop0: detected capacity change from 0 to 2048 [ 353.480472][T10516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.530050][T10518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.568924][ T4274] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.890733][T10524] loop3: detected capacity change from 0 to 1024 [ 354.021010][T10524] hfsplus: invalid length 1280 has been corrected to 255 [ 354.088821][T10524] hfsplus: invalid length 1280 has been corrected to 255 [ 354.186591][T10527] hfsplus: invalid length 1280 has been corrected to 255 [ 354.383514][T10534] loop1: detected capacity change from 0 to 4096 [ 354.402763][ T4384] hfsplus: invalid length 1280 has been corrected to 255 [ 355.442954][T10580] loop2: detected capacity change from 0 to 1024 [ 355.508968][T10580] hfsplus: invalid xattr key length: 0 [ 355.632028][ T33] hfsplus: b-tree write err: -5, ino 8 [ 356.050001][T10605] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2461'. [ 356.129699][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 356.129716][ T27] audit: type=1326 audit(1793186397.287:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 356.199395][ T27] audit: type=1326 audit(1793186397.317:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 356.241646][T10609] loop2: detected capacity change from 0 to 764 [ 356.305524][ T27] audit: type=1326 audit(1793186397.317:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 356.388362][T10609] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 356.392706][ T27] audit: type=1326 audit(1793186397.317:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 356.510223][ T27] audit: type=1326 audit(1793186397.337:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a0259f559 code=0x7ffc0000 [ 356.610804][ T27] audit: type=1326 audit(1793186397.337:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a0259f2c2 code=0x7ffc0000 [ 356.718150][ T27] audit: type=1326 audit(1793186397.337:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a0255fd8e code=0x7ffc0000 [ 356.751546][T10624] loop3: detected capacity change from 0 to 2048 [ 356.809575][T10624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 356.845268][ T27] audit: type=1326 audit(1793186397.397:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6a0259f387 code=0x7ffc0000 [ 356.945228][ T27] audit: type=1326 audit(1793186397.397:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a0255fd8e code=0x7ffc0000 [ 357.043731][ T27] audit: type=1326 audit(1793186397.397:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10608 comm="syz.2.2465" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a0259f1eb code=0x7ffc0000 [ 357.502711][T10642] loop0: detected capacity change from 0 to 8192 [ 357.543165][T10642] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 357.577389][T10642] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 357.587815][T10642] REISERFS (device loop0): using ordered data mode [ 357.594359][T10642] reiserfs: using flush barriers [ 357.610827][T10642] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 357.623429][T10646] loop3: detected capacity change from 0 to 4096 [ 357.629388][T10642] REISERFS (device loop0): checking transaction log (loop0) [ 357.642456][T10642] REISERFS (device loop0): Using r5 hash to sort names [ 357.651755][T10642] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 357.667443][T10642] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 357.738037][T10650] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.784780][T10646] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 358.126858][T10632] loop4: detected capacity change from 0 to 40427 [ 358.167715][T10632] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 358.203981][T10632] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 358.245829][T10632] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 358.294808][T10632] F2FS-fs (loop4): invalid crc value [ 358.354332][T10632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 358.522332][T10632] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 358.542103][T10672] loop3: detected capacity change from 0 to 128 [ 358.552310][T10632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 358.614433][T10672] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 358.675239][T10672] hpfs: filesystem error: improperly stopped [ 358.692773][T10672] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 358.709582][T10672] hpfs: You really don't want any checks? You are crazy... [ 358.726023][T10672] hpfs: Code page index out of array [ 358.742883][T10672] hpfs: code page support is disabled [ 358.760956][T10672] hpfs: hpfs_map_4sectors(): unaligned read [ 358.773428][T10672] hpfs: hpfs_map_4sectors(): unaligned read [ 358.802003][T10672] hpfs: filesystem error: unable to find root dir [ 359.060397][T10687] loop1: detected capacity change from 0 to 512 [ 359.137792][T10687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0022] [ 359.192217][T10687] System zones: 1-12 [ 359.250165][T10687] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2498: missing EA_INODE flag [ 359.276162][T10687] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2498: error while reading EA inode 12 err=-117 [ 359.290004][T10687] EXT4-fs (loop1): 1 orphan inode deleted [ 359.295812][ T4776] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 359.304290][T10687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 359.375428][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 359.500496][ T4776] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.534304][ T4776] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.544451][ T4776] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 359.574825][ T4776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.589678][T10703] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2505'. [ 359.608151][ T4776] usb 5-1: config 0 descriptor?? [ 359.623089][T10703] tipc: Enabling of bearer rejected, media not registered [ 360.030770][ T4776] waltop 0003:172F:0500.0008: unbalanced collection at end of report description [ 360.053076][ T4776] waltop: probe of 0003:172F:0500.0008 failed with error -22 [ 360.202454][T10722] loop1: detected capacity change from 0 to 4096 [ 360.262848][ T4776] usb 5-1: USB disconnect, device number 16 [ 360.321615][T10722] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 360.353099][T10722] ntfs3: loop1: failed to convert "0080" to macroman [ 360.369136][T10722] ntfs3: loop1: failed to convert name for inode 1e. [ 360.691240][T10739] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 2499 [ 360.740829][T10740] loop2: detected capacity change from 0 to 1024 [ 360.845319][T10740] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.2522: Failed to acquire dquot type 0 [ 360.977739][T10740] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 360.999843][T10740] EXT4-fs (loop2): 1 truncate cleaned up [ 361.006192][T10740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 361.107442][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 361.260482][T10755] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2530'. [ 361.269933][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2530'. [ 361.279511][T10755] netlink: 'syz.4.2530': attribute type 2 has an invalid length. [ 361.390795][T10734] loop0: detected capacity change from 0 to 32768 [ 361.513658][T10734] XFS (loop0): Mounting V5 Filesystem [ 361.619125][T10734] XFS (loop0): Ending clean mount [ 361.865872][ T4275] XFS (loop0): Unmounting Filesystem [ 362.091714][T10787] loop1: detected capacity change from 0 to 1024 [ 362.142768][T10790] loop2: detected capacity change from 0 to 256 [ 362.240427][T10787] hfsplus: invalid length 1280 has been corrected to 255 [ 362.313038][T10787] hfsplus: invalid length 1280 has been corrected to 255 [ 362.356550][T10791] hfsplus: invalid length 1280 has been corrected to 255 [ 362.602397][T10782] loop3: detected capacity change from 0 to 32768 [ 362.630525][ T77] hfsplus: invalid length 1280 has been corrected to 255 [ 362.798737][T10782] XFS (loop3): Mounting V5 Filesystem [ 362.872226][T10782] XFS (loop3): Ending clean mount [ 362.916540][T10806] loop2: detected capacity change from 0 to 1024 [ 363.025289][T10806] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 363.229753][ T4290] XFS (loop3): Unmounting Filesystem [ 363.259279][T10811] loop1: detected capacity change from 0 to 1024 [ 363.403645][T10811] hfsplus: invalid length 1280 has been corrected to 255 [ 363.748273][T10817] loop4: detected capacity change from 0 to 8192 [ 363.799845][T10817] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 363.810915][T10825] tipc: Started in network mode [ 363.817314][T10825] tipc: Node identity _, cluster identity 4711 [ 363.823684][T10825] tipc: Enabling of bearer rejected, failed to enable media [ 363.985329][T10528] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 364.175269][T10528] usb 3-1: Using ep0 maxpacket: 32 [ 364.185100][T10528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.225331][T10528] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 364.246122][T10528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.282093][T10528] usb 3-1: config 0 descriptor?? [ 364.499127][T10847] netlink: 'syz.4.2567': attribute type 3 has an invalid length. [ 364.557569][T10851] loop1: detected capacity change from 0 to 64 [ 364.728142][T10528] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0009/input/input23 [ 364.828230][T10528] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0009/input/input24 [ 364.903699][T10528] uclogic 0003:5543:0042.0009: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 365.003352][T10528] usb 3-1: USB disconnect, device number 15 [ 365.289372][T10867] fido_id[10867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 365.297592][T10875] loop4: detected capacity change from 0 to 1024 [ 365.402353][T10875] hfsplus: invalid length 1280 has been corrected to 255 [ 365.437053][T10875] hfsplus: invalid length 1280 has been corrected to 255 [ 365.459256][T10880] hfsplus: invalid length 1280 has been corrected to 255 [ 365.611867][ T77] hfsplus: invalid length 1280 has been corrected to 255 [ 366.261242][ T4776] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 366.405262][T10918] loop4: detected capacity change from 0 to 2048 [ 366.449145][ T4776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.487759][ T4776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.504073][T10922] loop3: detected capacity change from 0 to 2048 [ 366.519480][T10923] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.523647][ T4776] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 366.592601][T10922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.607534][ T4776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.641216][ T4776] usb 2-1: config 0 descriptor?? [ 366.711603][T10920] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.113814][T10933] set_capacity_and_notify: 1 callbacks suppressed [ 367.113830][T10933] loop2: detected capacity change from 0 to 1024 [ 367.144298][ T4776] wacom 0003:056A:0331.000A: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 367.220279][T10933] hfsplus: keylen 65060 too large [ 367.236466][T10933] hfsplus: xattr searching failed [ 367.273871][ T4779] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 367.331936][ T4776] usb 2-1: USB disconnect, device number 13 [ 367.475335][ T4779] usb 4-1: Using ep0 maxpacket: 16 [ 367.482821][ T4779] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 367.518205][ T4779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.542382][T10943] loop2: detected capacity change from 0 to 1024 [ 367.552327][ T4779] usb 4-1: config 0 has no interface number 0 [ 367.574212][ T4779] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 367.597000][ T4779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.623518][T10939] fido_id[10939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 367.633747][ T4779] usb 4-1: Product: syz [ 367.652734][ T4779] usb 4-1: Manufacturer: syz [ 367.673671][ T4779] usb 4-1: SerialNumber: syz [ 367.678111][T10943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 367.694385][ T4779] usb 4-1: config 0 descriptor?? [ 367.758646][T10948] loop0: detected capacity change from 0 to 128 [ 367.792863][T10948] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 367.884020][T10948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 367.901500][T10950] loop4: detected capacity change from 0 to 2048 [ 367.917474][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 367.937991][T10950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.959432][ T4779] usb 4-1: USB disconnect, device number 13 [ 368.136504][T10956] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 368.167819][T10528] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 368.186254][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 368.186269][ T27] audit: type=1800 audit(1793186409.347:162): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2614" name="dbroot" dev="configfs" ino=52462 res=0 errno=0 [ 368.240592][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 368.500770][T10968] loop1: detected capacity change from 0 to 16 [ 368.562636][T10968] erofs: (device loop1): mounted with root inode @ nid 36. [ 368.598936][T10970] loop4: detected capacity change from 0 to 2048 [ 368.678443][T10968] overlayfs: failed to get metacopy (-117) [ 368.700047][T10974] loop0: detected capacity change from 0 to 512 [ 368.720061][T10976] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.775615][T10974] EXT4-fs: Ignoring removed oldalloc option [ 368.830080][T10974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 368.897100][T10974] EXT4-fs: Ignoring removed nobh option [ 368.902827][T10974] EXT4-fs: Ignoring sb option on remount [ 368.909071][T10974] EXT4-fs: Cannot change journaled quota options when quota turned on [ 368.973551][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 369.095518][T10528] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 369.120941][T10988] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2627'. [ 369.183974][T10984] loop3: detected capacity change from 0 to 4096 [ 369.296738][T10992] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 369.610683][T11000] loop0: detected capacity change from 0 to 64 [ 369.703942][T11000] minix_free_block (loop0:21): bit already cleared [ 370.391912][T11002] loop4: detected capacity change from 0 to 32768 [ 370.421473][T11002] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2633 (11002) [ 370.455581][ T1184] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 370.482613][T11002] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 370.511264][T11002] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 370.539711][T11016] device-mapper: table: 248:9: verity: Data device lookup failed (-ENODEV) [ 370.552251][T11002] BTRFS info (device loop4): force zlib compression, level 3 [ 370.560848][T11016] device-mapper: ioctl: error adding target to table [ 370.604043][T11002] BTRFS info (device loop4): allowing degraded mounts [ 370.645248][ T1184] usb 4-1: Using ep0 maxpacket: 16 [ 370.655739][T11002] BTRFS info (device loop4): setting nodatasum [ 370.661272][ T1184] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 370.680171][ T1184] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 370.689754][ T1184] usb 4-1: Product: syz [ 370.699023][T11002] BTRFS info (device loop4): allowing degraded mounts [ 370.700764][ T1184] usb 4-1: Manufacturer: syz [ 370.721008][ T1184] usb 4-1: SerialNumber: syz [ 370.736497][T11002] BTRFS info (device loop4): using free space tree [ 370.747111][ T1184] usb 4-1: config 0 descriptor?? [ 371.013640][ T4776] usb 4-1: USB disconnect, device number 14 [ 371.333290][ T4277] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 371.994617][T11055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.882258][T11079] 8021q: VLANs not supported on gre0 [ 373.169302][T11087] set_capacity_and_notify: 2 callbacks suppressed [ 373.169319][T11087] loop3: detected capacity change from 0 to 4096 [ 373.270842][T11090] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.339002][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'. [ 373.837568][T11108] loop2: detected capacity change from 0 to 2048 [ 373.882837][T11108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.918891][T11110] device-mapper: table: 248:10: thin: Error opening pool device (-ENODEV) [ 373.942018][T11110] device-mapper: ioctl: error adding target to table [ 374.025421][ T4779] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 374.217270][ T4779] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 374.235967][ T4779] usb 4-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.256942][ T4779] usb 4-1: config 0 interface 0 has no altsetting 0 [ 374.276196][ T4779] usb 4-1: New USB device found, idVendor=056a, idProduct=da2f, bcdDevice=76.4b [ 374.295359][ T4779] usb 4-1: New USB device strings: Mfr=81, Product=0, SerialNumber=0 [ 374.303522][ T4779] usb 4-1: Manufacturer: syz [ 374.316239][ T4779] usb 4-1: config 0 descriptor?? [ 374.723984][T11123] loop2: detected capacity change from 0 to 1024 [ 374.736904][ T4779] wacom 0003:056A:DA2F.000B: unknown main item tag 0x2 [ 374.758596][T11123] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 374.781703][ T4779] wacom 0003:056A:DA2F.000B: unknown main item tag 0x1 [ 374.800823][ T4779] wacom 0003:056A:DA2F.000B: ignoring exceeding usage max [ 374.825960][ T4779] wacom 0003:056A:DA2F.000B: Unknown device_type for 'syz'. Ignoring. [ 374.972026][ T4779] usb 4-1: USB disconnect, device number 15 [ 375.329200][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2681'. [ 375.365349][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2681'. [ 375.375088][T11131] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 375.405469][T11131] iwpm_hello_cb: Unable to parse nlmsg [ 375.587960][T11133] loop0: detected capacity change from 0 to 256 [ 375.826914][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 375.873960][T11127] loop2: detected capacity change from 0 to 32768 [ 375.903696][T11127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2679 (11127) [ 375.951946][T11127] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 375.965288][ T4360] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 376.003719][T11127] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 376.024326][T11127] BTRFS info (device loop2): setting nodatacow, compression disabled [ 376.070674][T11127] BTRFS info (device loop2): metadata ratio 1 [ 376.082340][T11127] BTRFS info (device loop2): disabling tree log [ 376.105418][T11127] BTRFS info (device loop2): turning on async discard [ 376.135554][T11127] BTRFS info (device loop2): max_inline at 0 [ 376.141625][T11127] BTRFS info (device loop2): using free space tree [ 376.182975][ T4360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.214286][ T4360] usb 4-1: config 1 interface 1 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 376.289205][ T4360] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 376.319232][ T4360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.327766][ T4360] usb 4-1: Product: syz [ 376.337621][ T4360] usb 4-1: Manufacturer: syz [ 376.345414][ T4360] usb 4-1: SerialNumber: syz [ 376.381176][T11166] loop0: detected capacity change from 0 to 1024 [ 376.412110][T11166] hfsplus: invalid length 1033 has been corrected to 255 [ 376.433525][T11166] hfsplus: invalid length 1033 has been corrected to 255 [ 376.484951][T11166] hfsplus: invalid length 1033 has been corrected to 255 [ 376.494590][T11165] loop4: detected capacity change from 0 to 4096 [ 376.559244][ T4283] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 376.613136][ T4360] usb 4-1: 1:2 : no or invalid class specific endpoint descriptor [ 376.640793][T11167] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.871714][ T4360] usb 4-1: USB disconnect, device number 16 [ 377.030522][ T4511] udevd[4511]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.061255][ T33] hfsplus: b-tree write err: -5, ino 25 [ 377.110570][ T33] hfsplus: b-tree write err: -5, ino 4 [ 377.127412][ T33] hfsplus: b-tree write err: -5, ino 2 [ 377.144085][ T33] hfsplus: b-tree write err: -5, ino 26 [ 377.496709][ T4286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4286) [ 378.158156][T11205] loop0: detected capacity change from 0 to 64 [ 378.363646][T11203] loop4: detected capacity change from 0 to 8192 [ 378.426517][ T4275] hfs: node 4:3 still has 1 user(s)! [ 378.443294][T11203] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 378.475868][T11203] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 378.492862][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 378.537716][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.544576][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.553074][T11203] REISERFS (device loop4): using ordered data mode [ 378.559867][T11203] reiserfs: using flush barriers [ 378.568417][T11203] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 378.585046][T11203] REISERFS (device loop4): checking transaction log (loop4) [ 378.693635][T11215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2711'. [ 378.792157][T11203] REISERFS (device loop4): Using tea hash to sort names [ 378.810045][T11203] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 378.870336][T11203] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 379.031691][ T27] audit: type=1800 audit(1793186420.187:163): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2706" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 379.341005][T11236] loop1: detected capacity change from 0 to 16 [ 379.388396][T11236] erofs: (device loop1): mounted with root inode @ nid 36. [ 379.449474][T11237] loop0: detected capacity change from 0 to 2048 [ 379.583562][T11237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 379.676065][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 379.846578][T11253] netlink: 'syz.0.2728': attribute type 2 has an invalid length. [ 380.286936][T11241] loop3: detected capacity change from 0 to 32768 [ 380.328892][T11272] loop1: detected capacity change from 0 to 256 [ 380.342446][T11241] [ 380.342446][T11241] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 380.342446][T11241] [ 380.398427][T11241] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem [ 380.398427][T11241] [ 380.418177][T11272] exfat: Deprecated parameter 'utf8' [ 380.480018][T11241] ERROR: (device loop3): remounting filesystem as read-only [ 380.493785][T11272] exfat: Deprecated parameter 'utf8' [ 380.516177][T11241] jfs_mkdir: dtInsert returned -EIO [ 380.521737][T11241] ERROR: (device loop3): jfs_mkdir: [ 380.521737][T11241] [ 380.540651][T11272] exfat: Deprecated parameter 'utf8' [ 380.743365][T11272] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 381.267675][T11268] loop0: detected capacity change from 0 to 32768 [ 381.476130][T11268] XFS (loop0): Mounting V5 Filesystem [ 381.535162][ C0] sched: RT throttling activated [ 381.579738][T11276] loop2: detected capacity change from 0 to 131072 [ 381.591291][T11276] F2FS-fs (loop2): Invalid log sectorsize (0) [ 381.597493][T11276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 381.609366][T11268] XFS (loop0): Ending clean mount [ 381.625682][T11276] F2FS-fs (loop2): invalid crc value [ 381.699230][T11276] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1 [ 381.726630][T11276] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 381.929419][ T4275] XFS (loop0): Unmounting Filesystem [ 382.163209][T11278] loop3: detected capacity change from 0 to 32768 [ 382.220919][T11278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2740 (11278) [ 382.287240][T11278] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 382.308406][T11278] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 382.343487][T11278] BTRFS info (device loop3): allowing degraded mounts [ 382.355571][T11278] BTRFS info (device loop3): metadata ratio 4 [ 382.361713][T11278] BTRFS info (device loop3): turning on sync discard [ 382.400193][T11280] loop1: detected capacity change from 0 to 32768 [ 382.419271][T11278] BTRFS info (device loop3): turning off discard [ 382.449120][T11278] BTRFS info (device loop3): turning on sync discard [ 382.515293][T11278] BTRFS info (device loop3): disabling tree log [ 382.532063][T11280] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 382.532063][T11280] [ 382.546345][T11278] BTRFS info (device loop3): using free space tree [ 382.579801][T11280] ERROR: (device loop1): remounting filesystem as read-only [ 382.805426][T11278] BTRFS info (device loop3): enabling ssd optimizations [ 383.090550][ T4290] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.833897][T11341] loop2: detected capacity change from 0 to 64 [ 384.115288][ T4377] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 384.175565][T11345] loop2: detected capacity change from 0 to 64 [ 384.307936][ T4377] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 384.330236][ T4377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 384.361636][ T4377] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 384.393499][T11347] loop0: detected capacity change from 0 to 8192 [ 384.403403][ T4377] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 384.424570][ T4377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.486398][ T4377] usb 4-1: config 0 descriptor?? [ 384.492016][T11339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 384.571517][T11337] loop4: detected capacity change from 0 to 32768 [ 384.614278][T11332] loop1: detected capacity change from 0 to 40427 [ 384.649354][T11337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2754 (11337) [ 384.674317][T11332] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 384.695561][T11332] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.751358][T11337] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.762492][T11332] F2FS-fs (loop1): invalid crc value [ 384.802772][T11337] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 384.830501][T11332] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 384.855376][T11337] BTRFS info (device loop4): using free space tree [ 384.935067][ T4377] petalynx 0003:18B1:0037.000C: ignoring exceeding usage max [ 384.959572][ T4377] petalynx 0003:18B1:0037.000C: hidraw0: USB HID v0.81 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 385.027972][T11337] BTRFS info (device loop4): enabling ssd optimizations [ 385.164541][ T4377] usb 4-1: USB disconnect, device number 17 [ 385.237038][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.248860][T11332] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 385.267444][T11332] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 385.415962][T11332] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 385.433035][T11375] fido_id[11375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 386.061312][T11386] loop2: detected capacity change from 0 to 8192 [ 386.119984][T11386] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 386.250660][T11386] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 386.295497][T11386] REISERFS (device loop2): using ordered data mode [ 386.325868][T11386] reiserfs: using flush barriers [ 386.351234][T11386] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 386.415820][T11386] REISERFS (device loop2): checking transaction log (loop2) [ 386.664058][T11386] REISERFS (device loop2): Using tea hash to sort names [ 386.696277][T11386] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 386.715880][T11392] loop3: detected capacity change from 0 to 40427 [ 386.736837][T11386] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 386.752845][T11392] F2FS-fs (loop3): invalid crc value [ 386.832401][T11392] F2FS-fs (loop3): Found nat_bits in checkpoint [ 386.890724][ T27] audit: type=1800 audit(1793186428.047:164): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2768" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 387.049782][T11392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 387.323399][ T4290] syz-executor: attempt to access beyond end of device [ 387.323399][ T4290] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.367266][T11401] loop0: detected capacity change from 0 to 32768 [ 387.473445][T11401] XFS (loop0): Mounting V5 Filesystem [ 387.575236][T11333] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 387.638343][T11401] XFS (loop0): Ending clean mount [ 387.692005][T11407] loop1: detected capacity change from 0 to 32768 [ 387.780229][T11333] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 387.797813][T11333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 387.827442][T11439] loop4: detected capacity change from 0 to 64 [ 387.845242][T11333] usb 3-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 387.921580][T11333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.972197][T11333] usb 3-1: config 0 descriptor?? [ 388.023154][T11407] XFS (loop1): Mounting V5 Filesystem [ 388.034144][ T4275] XFS (loop0): Unmounting Filesystem [ 388.245017][T11407] XFS (loop1): Ending clean mount [ 388.270020][T11407] XFS (loop1): Quotacheck needed: Please wait. [ 388.409684][T11333] hid (null): unknown global tag 0xd [ 388.440614][T11333] wacom 0003:056A:037A.000D: unknown main item tag 0x0 [ 388.463067][T11333] wacom 0003:056A:037A.000D: unknown global tag 0xd [ 388.477792][T11333] wacom 0003:056A:037A.000D: item 0 2 1 13 parsing failed [ 388.494533][T11333] wacom 0003:056A:037A.000D: parse failed [ 388.498043][T11407] XFS (loop1): Quotacheck: Done. [ 388.511380][T11333] wacom: probe of 0003:056A:037A.000D failed with error -22 [ 388.612494][T11333] usb 3-1: USB disconnect, device number 16 [ 388.731191][ T4274] XFS (loop1): Unmounting Filesystem [ 388.802104][T11450] ntfs3: loop3: Failed to load $Extend. [ 388.970255][T11454] program syz.0.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.415408][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2796'. [ 389.453424][T11472] set_capacity_and_notify: 3 callbacks suppressed [ 389.453441][T11472] loop2: detected capacity change from 0 to 16 [ 389.483374][T11472] erofs: (device loop2): mounted with root inode @ nid 36. [ 390.586578][T11487] loop0: detected capacity change from 0 to 32768 [ 390.694511][T11487] XFS (loop0): Mounting V5 Filesystem [ 390.794449][T11487] XFS (loop0): Ending clean mount [ 390.929871][ T4275] XFS (loop0): Unmounting Filesystem [ 390.996915][T11492] loop2: detected capacity change from 0 to 32768 [ 391.052651][T11492] (syz.2.2808,11492,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 391.093689][T11492] (syz.2.2808,11492,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 391.115427][ T8535] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 391.173105][T11492] JBD2: Ignoring recovery information on journal [ 391.268887][T11513] loop1: detected capacity change from 0 to 128 [ 391.288520][T11492] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 391.333830][ T8535] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 391.367032][ T8535] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 391.394355][T11513] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 391.413929][ T8535] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 391.454622][T11513] hpfs: filesystem error: improperly stopped [ 391.461114][ T8535] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.479553][T11513] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 391.488188][ T8535] usb 4-1: Product: syz [ 391.506927][ T8535] usb 4-1: Manufacturer: syz [ 391.511944][ T8535] usb 4-1: SerialNumber: syz [ 391.525368][T11513] hpfs: You really don't want any checks? You are crazy... [ 391.546811][ T8535] usb 4-1: config 0 descriptor?? [ 391.555898][T11513] hpfs: hpfs_map_sector(): read error [ 391.561321][T11513] hpfs: code page support is disabled [ 391.610577][T11513] hpfs: hpfs_map_4sectors(): unaligned read [ 391.645537][T11513] hpfs: hpfs_map_4sectors(): unaligned read [ 391.652265][T11513] hpfs: filesystem error: unable to find root dir [ 391.676580][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 391.722598][T11513] hpfs: hpfs_map_4sectors(): unaligned read [ 391.964000][ T8535] mos7840 4-1:0.0: required endpoints missing [ 392.005374][ T8535] usb 4-1: USB disconnect, device number 18 [ 392.184421][T11530] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 392.200572][T11532] loop1: detected capacity change from 0 to 8 [ 392.212917][T11530] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 392.245533][T11530] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 392.257261][T11532] unable to read id index table [ 392.321515][T11530] One or more global auth toks could not properly register; rc = [-22] [ 392.363203][T11530] Error parsing options; rc = [-22] [ 392.612609][T11543] loop3: detected capacity change from 0 to 512 [ 392.623964][T11545] loop4: detected capacity change from 0 to 256 [ 392.717392][T11547] tipc: Enabling of bearer rejected, failed to enable media [ 392.739154][T11545] FAT-fs (loop4): Directory bread(block 64) failed [ 392.756448][T11545] FAT-fs (loop4): Directory bread(block 65) failed [ 392.769791][T11545] FAT-fs (loop4): Directory bread(block 66) failed [ 392.804684][T11545] FAT-fs (loop4): Directory bread(block 67) failed [ 392.824383][T11545] FAT-fs (loop4): Directory bread(block 68) failed [ 392.880588][T11545] FAT-fs (loop4): Directory bread(block 69) failed [ 392.913960][T11545] FAT-fs (loop4): Directory bread(block 70) failed [ 392.933465][T11545] FAT-fs (loop4): Directory bread(block 71) failed [ 392.959087][T11545] FAT-fs (loop4): Directory bread(block 72) failed [ 392.975456][T11545] FAT-fs (loop4): Directory bread(block 73) failed [ 393.245306][ T4774] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 393.446974][ T4774] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.458346][ T4774] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.468449][ T4774] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.481579][ T4774] usb 3-1: config 0 interface 0 has no altsetting 0 [ 393.491397][ T4774] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 393.512291][ T4774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.536389][ T4774] usb 3-1: config 0 descriptor?? [ 393.710468][T11586] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2845'. [ 393.727985][T11584] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2845'. [ 393.771342][T11588] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2847'. [ 393.795402][T11557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.806413][T11557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.813819][T11557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 393.814130][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2847'. [ 393.873159][T11557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.881837][T11557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 393.894009][T11557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.904278][T11557] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 393.951025][T11557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.957301][T11557] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 393.966109][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 393.973021][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.006715][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.021281][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.033886][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.055319][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.062432][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.069863][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.090178][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.111963][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.130800][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.140315][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.172543][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.194667][ T4774] ntrig 0003:1B96:0011.000E: unknown main item tag 0x0 [ 394.217799][ T4774] ntrig 0003:1B96:0011.000E: unbalanced collection at end of report description [ 394.249349][ T4774] ntrig 0003:1B96:0011.000E: parse failed [ 394.280304][ T4774] ntrig: probe of 0003:1B96:0011.000E failed with error -22 [ 394.308865][ T4774] usb 3-1: USB disconnect, device number 17 [ 394.683674][T11612] loop0: detected capacity change from 0 to 24 [ 394.710919][T11612] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 394.731853][T11614] loop1: detected capacity change from 0 to 64 [ 394.759557][T11612] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 394.825107][T11614] overlayfs: upper fs needs to support d_type. [ 394.877639][T11614] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 394.906936][T11614] overlayfs: failed to set xattr on upper [ 394.912720][T11614] overlayfs: ...falling back to index=off,metacopy=off. [ 395.112781][T11621] loop0: detected capacity change from 0 to 256 [ 395.168795][T11621] exfat: Deprecated parameter 'utf8' [ 395.174227][T11621] exfat: Deprecated parameter 'namecase' [ 395.194034][T11621] exfat: Deprecated parameter 'namecase' [ 395.204087][T11621] exfat: Deprecated parameter 'utf8' [ 395.221503][ T4274] Trying to free block not in datazone [ 395.242638][T11621] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 395.637845][T11631] tipc: Enabled bearer , priority 10 [ 395.815523][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.905482][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.911599][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.975418][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 396.026666][T11626] loop1: detected capacity change from 0 to 32768 [ 396.075531][T11626] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 396.092877][T11626] JBD2: Ignoring recovery information on journal [ 396.170292][T11626] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 397.789426][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2887'. [ 397.808749][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 397.895591][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 397.985522][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 397.991660][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 398.055322][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 398.189113][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 398.239273][T11678] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2889'. [ 398.263531][T11678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2889'. [ 398.745323][T11333] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 398.947104][T11333] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 398.980520][T11333] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.994116][T11333] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.024077][T11333] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 399.046667][T11333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.067506][T11333] usb 4-1: config 0 descriptor?? [ 399.488220][T11333] chicony 0003:04F2:0418.000F: ignoring exceeding usage max [ 399.531666][T11333] chicony 0003:04F2:0418.000F: No inputs registered, leaving [ 399.563082][T11333] chicony 0003:04F2:0418.000F: hidraw0: USB HID v0.10 Joystick [HID 04f2:0418] on usb-dummy_hcd.3-1/input0 [ 399.692452][T11333] usb 4-1: USB disconnect, device number 19 [ 399.799564][T11717] fido_id[11717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 399.960058][T11725] loop2: detected capacity change from 0 to 4096 [ 400.003489][T11725] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 400.066067][T11725] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 400.092416][T11725] ntfs3: loop2: Failed to load $Extend. [ 400.432483][T11746] tipc: Started in network mode [ 400.441983][T11746] tipc: Node identity c24d69d04f1d, cluster identity 4711 [ 400.483673][T11746] tipc: Enabled bearer , priority 10 [ 400.739607][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 401.067551][T11764] loop3: detected capacity change from 0 to 4096 [ 401.095249][ T4294] Bluetooth: hci4: command 0x0405 tx timeout [ 401.116512][T11764] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 401.180116][T11764] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 401.209727][T11764] ntfs3: loop3: Failed to load $Extend. [ 401.348523][T11779] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2936'. [ 401.595387][ T4774] tipc: Node number set to 2370857424 [ 401.753799][T11793] loop2: detected capacity change from 0 to 1024 [ 401.772193][T11791] loop0: detected capacity change from 0 to 2048 [ 401.802355][T11793] EXT4-fs: inline encryption not supported [ 401.915967][T11791] loop0: p2 < > p4 [ 401.925124][T11793] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 401.970748][T11791] loop0: p4 size 262144 extends beyond EOD, truncated [ 401.978524][T11793] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.087977][T11793] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 2: comm syz.2.2943: lblock 2 mapped to illegal pblock 2 (length 4) [ 402.270325][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 402.336105][T11806] loop3: detected capacity change from 0 to 2048 [ 402.443492][T11806] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.509277][T11820] loop2: detected capacity change from 0 to 64 [ 402.652473][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 402.714324][T11822] ip_tables: iptables: counters copy to user failed while replacing table [ 403.349084][T11846] loop1: detected capacity change from 0 to 256 [ 403.714532][T11827] loop4: detected capacity change from 0 to 32768 [ 403.955420][T11827] XFS (loop4): Mounting V5 Filesystem [ 404.066534][T11827] XFS (loop4): Ending clean mount [ 404.148982][T11827] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 404.488207][ T4277] XFS (loop4): Unmounting Filesystem [ 404.547565][T11884] loop3: detected capacity change from 0 to 256 [ 404.943870][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 404.971073][T11890] xt_cgroup: path and classid specified [ 405.195721][T11876] loop0: detected capacity change from 0 to 32768 [ 405.211054][T11876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2978 (11876) [ 405.275534][T11876] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.315410][T11876] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 405.324141][T11876] BTRFS info (device loop0): using free space tree [ 405.462853][T11900] loop2: detected capacity change from 0 to 8192 [ 405.542743][T11900] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 405.567914][T11900] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 405.579001][T11900] REISERFS (device loop2): using ordered data mode [ 405.585936][T11900] reiserfs: using flush barriers [ 405.598233][T11900] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 405.635670][T11900] REISERFS (device loop2): checking transaction log (loop2) [ 405.660678][T11900] REISERFS (device loop2): Using r5 hash to sort names [ 405.671427][T11900] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 405.770871][T11876] BTRFS info (device loop0): enabling ssd optimizations [ 405.796779][T11900] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 406.575328][ T4774] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 406.789795][ T4774] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 406.806047][ T4774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.834537][ T4774] usb 2-1: Product: syz [ 406.844674][ T4774] usb 2-1: Manufacturer: syz [ 406.864986][ T4774] usb 2-1: SerialNumber: syz [ 406.880696][ T4774] usb 2-1: config 0 descriptor?? [ 406.899948][ T4774] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 406.947705][ T4774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 406.975856][ T4774] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 406.999780][ T4774] usb 2-1: media controller created [ 407.040663][ T4774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 407.101338][T11946] dvb-usb: bulk message failed: -22 (7/0) [ 407.200365][ T4774] DVB: Unable to find symbol mt352_attach() [ 407.314410][ T4774] DVB: Unable to find symbol nxt6000_attach() [ 407.325360][ T4774] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 407.343499][ T4774] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 407.380644][ T4774] dvb-usb: schedule remote query interval to 1000 msecs. [ 407.395747][ T4774] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 407.414920][ T4774] dvb-usb: bulk message failed: -22 (7/0) [ 407.428366][ T4774] dvb-usb: bulk message failed: -22 (7/0) [ 407.447594][ T4774] usb 2-1: USB disconnect, device number 14 [ 407.507294][ T4774] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 407.563458][ T27] audit: type=1326 audit(1793186448.717:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 407.615320][ T27] audit: type=1326 audit(1793186448.717:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 407.680942][ T27] audit: type=1326 audit(1793186448.717:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 407.709051][T11992] netlink: 'syz.2.3024': attribute type 29 has an invalid length. [ 407.717987][T11992] netlink: 'syz.2.3024': attribute type 29 has an invalid length. [ 407.726072][ T27] audit: type=1326 audit(1793186448.717:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 407.762828][T11993] netlink: 'syz.2.3024': attribute type 29 has an invalid length. [ 407.800552][ T27] audit: type=1326 audit(1793186448.717:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 407.874433][ T27] audit: type=1326 audit(1793186448.717:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 407.941788][ T27] audit: type=1326 audit(1793186448.717:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 408.015357][ T27] audit: type=1326 audit(1793186448.717:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 408.016005][T12001] loop2: detected capacity change from 0 to 164 [ 408.075288][ T27] audit: type=1326 audit(1793186448.717:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 408.123746][ T27] audit: type=1326 audit(1793186448.717:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11989 comm="syz.0.3023" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9cd9f559 code=0x7ffc0000 [ 408.229565][T12005] loop3: detected capacity change from 0 to 2048 [ 408.306409][T12006] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.395234][T11333] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 408.599193][T11333] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 408.624542][T11333] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 408.659314][T11333] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid wMaxPacketSize 0 [ 408.679742][T11333] usb 2-1: config 0 interface 0 has no altsetting 0 [ 408.701678][T11333] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 408.725736][T11333] usb 2-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 408.747399][T11333] usb 2-1: Manufacturer: syz [ 408.765977][T11333] usb 2-1: config 0 descriptor?? [ 408.782808][T12003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.222554][T11333] wacom 0003:056A:0315.0010: ignoring exceeding usage max [ 409.241514][T11333] wacom 0003:056A:0315.0010: Unknown device_type for 'syz'. Assuming pen. [ 409.254866][T11333] wacom 0003:056A:0315.0010: hidraw0: USB HID v0.10 Joystick [syz] on usb-dummy_hcd.1-1/input0 [ 409.276453][T11333] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0315.0010/input/input33 [ 409.317332][T12016] loop3: detected capacity change from 0 to 32768 [ 409.353997][T12010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.364773][T12010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.402647][T12016] XFS (loop3): Mounting V5 Filesystem [ 409.432282][T12010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.442424][T12010] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.461047][T12010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.493876][ T4774] usb 2-1: USB disconnect, device number 15 [ 409.525549][T12016] XFS (loop3): Ending clean mount [ 409.651019][T12024] fido_id[12024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 409.703378][ T4290] XFS (loop3): Unmounting Filesystem [ 410.174368][T12043] netlink: 'syz.2.3044': attribute type 3 has an invalid length. [ 410.316608][T12050] netlink: 'syz.3.3040': attribute type 49 has an invalid length. [ 411.077404][T12078] loop2: detected capacity change from 0 to 256 [ 411.110258][T12078] exfat: Deprecated parameter 'namecase' [ 411.145368][T12078] exfat: Deprecated parameter 'utf8' [ 411.183169][T12078] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 411.425431][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.495336][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 411.501434][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 411.508322][ T4291] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.823376][T12076] loop3: detected capacity change from 0 to 40427 [ 411.869053][T12076] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 411.893869][T12076] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 411.934408][T12076] F2FS-fs (loop3): invalid crc value [ 411.974638][T12076] F2FS-fs (loop3): Found nat_bits in checkpoint [ 412.082086][T12076] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00 [ 412.174479][T12076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 412.276351][T12076] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x84f/0x1c20 [ 412.327970][T12101] F2FS-fs (loop3) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x136/0xc60 [ 413.375291][ T4774] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 413.575391][T12081] Bluetooth: hci4: command 0x0405 tx timeout [ 413.587155][ T4774] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 413.605286][ T4774] usb 4-1: config 127 has no interface number 0 [ 413.626731][ T4774] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 413.657747][ T4774] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 413.671497][ T4774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.679718][ T4774] usb 4-1: Product: syz [ 413.683937][ T4774] usb 4-1: Manufacturer: syz [ 413.689662][ T4774] usb 4-1: SerialNumber: syz [ 413.729788][T12126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 413.907182][T12142] loop4: detected capacity change from 0 to 8192 [ 413.983850][T12142] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 414.004310][T12142] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 414.014418][T12142] REISERFS (device loop4): using ordered data mode [ 414.021508][T12142] reiserfs: using flush barriers [ 414.028795][T12142] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 414.056735][T12142] REISERFS (device loop4): checking transaction log (loop4) [ 414.068972][T12142] REISERFS (device loop4): Using r5 hash to sort names [ 414.086221][T12142] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 414.169069][T12126] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 414.389527][ T4774] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 414.416356][ T4774] asix: probe of 4-1:127.57 failed with error -71 [ 414.458830][ T4774] usb 4-1: USB disconnect, device number 20 [ 414.640872][T12154] ip_tables: iptables: counters copy to user failed while replacing table [ 414.652690][T12137] loop1: detected capacity change from 0 to 32768 [ 414.742031][T12137] XFS (loop1): Mounting V5 Filesystem [ 414.819003][T12137] XFS (loop1): Ending clean mount [ 414.839150][T12137] XFS (loop1): Quotacheck needed: Please wait. [ 414.881303][T12170] device-mapper: table: 248:0: ram9 too small for target: start=0, len=8216, dev_size=8192 [ 414.904321][T12170] device-mapper: core: Cannot calculate initial queue limits [ 414.915929][T12170] device-mapper: ioctl: unable to set up device queue for new table. [ 414.944453][T12137] XFS (loop1): Quotacheck: Done. [ 415.146921][ T4274] XFS (loop1): Unmounting Filesystem [ 415.288149][T12180] loop4: detected capacity change from 0 to 512 [ 415.380073][T12180] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 415.425703][T12180] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 415.436365][T12180] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.3099: Corrupt directory, running e2fsck is recommended [ 415.459229][T12180] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 415.468659][T12180] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.3099: corrupted in-inode xattr [ 415.481895][T12180] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3099: couldn't read orphan inode 15 (err -117) [ 415.513126][T12180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 415.801486][T12180] EXT4-fs: Cannot specify journal on remount [ 415.930018][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 416.008527][T12178] loop3: detected capacity change from 0 to 32768 [ 416.040361][T12178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.3098 (12178) [ 416.090528][T12178] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 416.137197][T12178] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 416.163436][T12178] BTRFS info (device loop3): use zlib compression, level 3 [ 416.186460][T12178] BTRFS info (device loop3): using free space tree [ 416.331503][T12186] loop2: detected capacity change from 0 to 32768 [ 416.402184][T12186] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 416.431489][T12178] BTRFS info (device loop3): enabling ssd optimizations [ 416.599834][ T4283] ocfs2: Unmounting device (7,2) on (node local) [ 416.667858][ T4290] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 418.017140][T12246] tipc: Invalid UDP bearer configuration [ 418.017178][T12246] tipc: Enabling of bearer rejected, failed to enable media [ 418.218351][T12253] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3123'. [ 418.359143][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 418.505329][T12265] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3128'. [ 418.662958][T12272] loop1: detected capacity change from 0 to 736 [ 418.984718][T12283] usb usb7: usbfs: process 12283 (syz.0.3137) did not claim interface 0 before use [ 419.086376][T12290] loop3: detected capacity change from 0 to 1024 [ 419.154285][T12290] hfsplus: invalid length 1280 has been corrected to 255 [ 419.338483][T12081] Bluetooth: hci4: command 0x0405 tx timeout [ 419.412669][T12296] Invalid ELF header magic: != ELF [ 419.438692][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3144'. [ 419.983944][T12320] ip_tables: iptables: counters copy to user failed while replacing table [ 420.393840][T12336] loop1: detected capacity change from 0 to 2048 [ 420.459612][T12336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.089684][T12363] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3175'. [ 421.438748][T12373] loop4: detected capacity change from 0 to 1024 [ 421.517502][T12373] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 421.562040][T12373] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 421.576930][T12373] EXT4-fs (loop4): orphan cleanup on readonly fs [ 421.605360][T12373] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.3180: Inode bitmap for bg 0 marked uninitialized [ 421.647314][T12373] EXT4-fs (loop4): Remounting filesystem read-only [ 421.692063][T12373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 421.902003][T12389] loop3: detected capacity change from 0 to 256 [ 421.912122][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 422.093518][T12391] loop2: detected capacity change from 0 to 64 [ 422.299460][T12395] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3189'. [ 423.216400][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3204'. [ 423.391926][T12430] loop2: detected capacity change from 0 to 2048 [ 423.454871][T12434] loop3: detected capacity change from 0 to 64 [ 423.483968][T12434] hfs: uid requires an argument [ 423.525095][T12434] hfs: unable to parse mount options [ 423.586614][T12430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.640101][T12430] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.3207: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 423.725576][T12442] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 423.854344][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 424.348965][T12470] loop2: detected capacity change from 0 to 512 [ 424.371385][T12470] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.3223: inode has both inline data and extents flags [ 424.395722][T12470] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.3223: couldn't read orphan inode 15 (err -117) [ 424.413864][T12470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 424.425366][ T4916] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 424.472569][ T4283] EXT4-fs (loop2): unmounting filesystem. [ 424.619045][ T4916] usb 4-1: Using ep0 maxpacket: 8 [ 424.626766][ T4916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.665240][ T4916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.707854][ T4916] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 424.730832][ T4916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.765008][ T4916] usb 4-1: Product: syz [ 424.785323][ T4916] usb 4-1: Manufacturer: syz [ 424.790059][ T4916] usb 4-1: SerialNumber: syz [ 424.870006][T12486] loop4: detected capacity change from 0 to 524287964 [ 424.894342][ C1] I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 424.905057][ C0] I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.915031][ C0] Buffer I/O error on dev loop4, logical block 65535968, async page read [ 425.067593][T12484] Invalid ELF header magic: != ELF [ 425.104911][ T4916] usb 4-1: unit 0 not found! [ 425.151612][ T4916] usb 4-1: USB disconnect, device number 21 [ 425.363657][T12497] loop4: detected capacity change from 0 to 256 [ 425.407907][T12496] loop2: detected capacity change from 0 to 2048 [ 425.416870][ T4286] udevd[4286]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.480341][T12496] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 425.531293][T12496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.094660][T12514] program syz.4.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.682345][T12503] loop1: detected capacity change from 0 to 32768 [ 426.775905][T12503] XFS (loop1): Mounting V5 Filesystem [ 426.931464][T12503] XFS (loop1): Ending clean mount [ 427.218379][ T4274] XFS (loop1): Unmounting Filesystem [ 427.768220][T12557] loop4: detected capacity change from 0 to 16 [ 427.821673][T12557] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 428.639299][T12592] loop4: detected capacity change from 0 to 16 [ 428.678913][T12592] erofs: (device loop4): mounted with root inode @ nid 36. [ 429.556411][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3288'. [ 429.620314][T12621] loop4: detected capacity change from 0 to 2048 [ 429.649472][T12621] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 429.674834][T12621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.864307][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3293'. [ 429.971975][ T4774] kernel write not supported for file /1390/attr/exec (pid: 4774 comm: kworker/1:11) [ 430.263556][T12645] netlink: 'syz.0.3301': attribute type 3 has an invalid length. [ 430.298015][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 430.337681][T12647] loop4: detected capacity change from 0 to 1764 [ 430.491885][T12649] device bridge1 entered promiscuous mode [ 430.512347][T12654] loop2: detected capacity change from 0 to 1024 [ 430.740378][T12659] loop4: detected capacity change from 0 to 1024 [ 430.759373][T12661] netlink: 1648 bytes leftover after parsing attributes in process `syz.0.3308'. [ 430.798346][T12659] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 430.853358][T12659] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #32: comm syz.4.3307: iget: special inode unallocated [ 430.942721][T12659] EXT4-fs (loop4): no journal found [ 430.949741][T12659] EXT4-fs (loop4): can't get journal size [ 431.130460][T12659] EXT4-fs (loop4): filesystem is read-only [ 431.136568][T12659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.261950][T12670] loop3: detected capacity change from 0 to 2048 [ 431.328348][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3313'. [ 431.351429][T12670] NILFS (loop3): invalid segment: Magic number mismatch [ 431.407661][T12670] NILFS (loop3): trying rollback from an earlier position [ 431.537817][T12670] NILFS (loop3): recovery complete [ 431.559300][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 431.628230][T12674] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.959820][T12666] loop1: detected capacity change from 0 to 131072 [ 431.995375][T12666] F2FS-fs (loop1): Zoned block device path is missing [ 432.002225][T12666] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 432.013403][T12666] F2FS-fs (loop1): Invalid log sectorsize (0) [ 432.019592][T12666] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 432.033230][T12676] NILFS (loop3): nilfs_dat_move: invalid vblocknr = 9, [0, 0) [ 432.075418][T12676] NILFS error (device loop3): nilfs_bmap_assign: broken bmap (inode number=3) [ 432.147748][T12682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.166784][T12676] Remounting filesystem read-only [ 432.171918][T12676] NILFS (loop3): error -5 cleaning segments [ 432.217982][T12676] NILFS (loop3): error -30 cleaning segments [ 432.355529][ T4290] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 432.400177][ T4290] VFS: Busy inodes after unmount of loop3 (nilfs2) [ 432.400417][ T4290] ------------[ cut here ]------------ [ 432.413340][ T4290] kernel BUG at fs/super.c:505! [ 432.452723][T12667] loop2: detected capacity change from 0 to 32768 [ 432.463224][ T4290] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 432.469365][ T4290] CPU: 1 PID: 4290 Comm: syz-executor Not tainted syzkaller #0 [ 432.476948][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 432.487152][ T4290] RIP: 0010:generic_shutdown_super+0x334/0x340 [ 432.493424][ T4290] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 a5 66 f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 a0 5d b9 8a 48 89 de e8 8c 6a 4d 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49 [ 432.513073][ T4290] RSP: 0018:ffffc90004157d28 EFLAGS: 00010246 [ 432.519182][ T4290] RAX: 0000000000000030 RBX: ffff88802a8ce6a8 RCX: e12a7c50b4e9bc00 [ 432.527203][ T4290] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 432.535217][ T4290] RBP: 1ffff11005519cfb R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 432.543228][ T4290] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: 0000000000000000 [ 432.551449][ T4290] R13: dffffc0000000000 R14: ffffffff8dfdb760 R15: ffff88802a8ce7d8 [ 432.559464][ T4290] FS: 0000555561b48500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 432.568435][ T4290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.575048][ T4290] CR2: 00007fdbe57f84b8 CR3: 000000005c165000 CR4: 00000000003506e0 [ 432.583129][ T4290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 432.591146][ T4290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 432.599155][ T4290] Call Trace: [ 432.602496][ T4290] [ 432.605467][ T4290] kill_block_super+0x7c/0xe0 [ 432.610193][ T4290] deactivate_locked_super+0x93/0xf0 [ 432.615521][ T4290] cleanup_mnt+0x471/0x4f0 [ 432.620083][ T4290] task_work_run+0x1d0/0x260 [ 432.624805][ T4290] ? task_work_cancel+0x220/0x220 [ 432.629896][ T4290] ? exit_to_user_mode_loop+0x3b/0x110 [ 432.635502][ T4290] exit_to_user_mode_loop+0xe6/0x110 [ 432.640841][ T4290] exit_to_user_mode_prepare+0xee/0x180 [ 432.646435][ T4290] syscall_exit_to_user_mode+0x16/0x40 [ 432.651935][ T4290] do_syscall_64+0x58/0xa0 [ 432.656398][ T4290] ? clear_bhb_loop+0x60/0xb0 [ 432.661117][ T4290] ? clear_bhb_loop+0x60/0xb0 [ 432.665857][ T4290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.671799][ T4290] RIP: 0033:0x7fcffcfa0797 [ 432.676266][ T4290] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 432.695908][ T4290] RSP: 002b:00007ffe55121b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 432.704387][ T4290] RAX: 0000000000000000 RBX: 00007fcffd035f63 RCX: 00007fcffcfa0797 [ 432.712394][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe55121c20 [ 432.720401][ T4290] RBP: 00007ffe55121c20 R08: 00007ffe55122c20 R09: 00000000ffffffff [ 432.728409][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe55122cb0 [ 432.736413][ T4290] R13: 00007fcffd035f63 R14: 0000000000069754 R15: 00007ffe55122cf0 [ 432.744434][ T4290] [ 432.747513][ T4290] Modules linked in: [ 432.803929][T12667] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 432.830513][T12667] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 432.850989][T12667] BTRFS info (device loop2): setting nodatasum [ 432.861818][T12667] BTRFS info (device loop2): force zlib compression, level 3 [ 432.872172][T12667] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 432.883479][T12667] BTRFS info (device loop2): use lzo compression, level 0 [ 432.891333][T12667] BTRFS info (device loop2): turning on flush-on-commit [ 432.900136][T12667] BTRFS info (device loop2): max_inline at 4096 [ 432.906502][T12667] BTRFS info (device loop2): using free space tree [ 432.913374][ T4290] ---[ end trace 0000000000000000 ]--- [ 432.922197][ T4290] RIP: 0010:generic_shutdown_super+0x334/0x340 [ 432.928793][ T4290] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 a5 66 f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 a0 5d b9 8a 48 89 de e8 8c 6a 4d 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49 [ 432.950866][ T4290] RSP: 0018:ffffc90004157d28 EFLAGS: 00010246 [ 432.957239][ T4290] RAX: 0000000000000030 RBX: ffff88802a8ce6a8 RCX: e12a7c50b4e9bc00 [ 432.966168][ T4290] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 432.974404][ T4290] RBP: 1ffff11005519cfb R08: ffff8880b8d279db R09: 1ffff110171a4f3b [ 432.984224][ T4290] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: 0000000000000000 [ 432.992568][ T4290] R13: dffffc0000000000 R14: ffffffff8dfdb760 R15: ffff88802a8ce7d8 [ 433.007322][ T4290] FS: 0000555561b48500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 433.018827][ T4290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.027152][ T4290] CR2: 00007f8c5efc6000 CR3: 000000005c165000 CR4: 00000000003506f0 [ 433.037695][ T4290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 433.045997][ T4290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 433.054133][ T4290] Kernel panic - not syncing: Fatal exception [ 433.060832][ T4290] Kernel Offset: disabled [ 433.065181][ T4290] Rebooting in 86400 seconds..