last executing test programs: 5m35.486341798s ago: executing program 0 (id=550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000200000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m35.216685245s ago: executing program 0 (id=552): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2800091, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="ca7b2da526224f497b", @ANYRESDEC, @ANYRES64=0x0, @ANYRES32], 0x15, 0x1bc, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) geteuid() read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 5m34.486387593s ago: executing program 0 (id=554): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8103"], 0x8) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 5m34.025346233s ago: executing program 0 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="3330a074", 0x4) 5m33.691389542s ago: executing program 0 (id=559): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5m33.442750088s ago: executing program 0 (id=560): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/self/root/dev/kmsg\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4af0d6b6939cbacb11c14558e299df0687745dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/977, 0x3d1) 5m18.264626407s ago: executing program 32 (id=560): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/self/root/dev/kmsg\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4af0d6b6939cbacb11c14558e299df0687745dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/977, 0x3d1) 2m56.003603783s ago: executing program 4 (id=1698): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) socket$inet6(0xa, 0x2, 0x3a) 2m55.710023129s ago: executing program 4 (id=1700): setresuid(0x0, 0xee01, 0x0) r0 = msgget$private(0x0, 0x100) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10002, 0x51, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) 2m55.304635959s ago: executing program 4 (id=1704): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2m55.033220016s ago: executing program 4 (id=1706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780), 0x3, 0x440, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m54.244063445s ago: executing program 4 (id=1711): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) 2m51.391602125s ago: executing program 4 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x6, 0x2, 0x1, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x1, 0x1, 0x7, 0x0, 0x7, 0x81, 0x8]}}]}]}]}, 0x54}}, 0x0) 2m50.647844833s ago: executing program 33 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x6, 0x2, 0x1, 0x7, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x1, 0x1, 0x7, 0x0, 0x7, 0x81, 0x8]}}]}]}]}, 0x54}}, 0x0) 10.286641519s ago: executing program 5 (id=2665): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r0, &(0x7f00000003c0)="1e8f194d159d122deda87e732f5230186340f285c3bc819ae828b3a3e683e1271659246bb75cec9618213a820802b2c6666d9ff2b6e361e2d167bb814e76ba24ccfb7c93be2adaab2b210259d38c86825b67fb4a3167519ad8326318d37d154f88462b3b5be83232f6d5b2770430894f388b969241e2d21c296fe3846061e2bdb1", 0x81) 9.977086706s ago: executing program 5 (id=2667): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x2, 0x14010, 0x5, &(0x7f0000002000)="07000000cb"}], 0x1}) 7.485439907s ago: executing program 5 (id=2682): mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/9, 0x9) 6.897569821s ago: executing program 5 (id=2686): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.72325426s ago: executing program 1 (id=2690): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 5.187589433s ago: executing program 1 (id=2694): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000c40)="cb791134a5503abd936b", 0xa) 5.038862867s ago: executing program 5 (id=2697): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 3.985994762s ago: executing program 6 (id=2705): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41e27af3a3a924308cb010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d572ed87cf12b9ce4e527266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f327b3669c159abfa125ee992a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b450c894a3e95d26e14259fdb65aa49761847cc1c13f18742072e80cbed0d5622618817583d0365f807882e539ff07c9205d3ee72efb8dd6853a02f49abd1b38d4571666a4d7d98c4f34f082eea5a5ac7b9e9fd030791df5d98a03ed76cdbb3241f96f22b6dd0da2bd8105c3408eeb8543ebc5de0849c1f31bd94033655fd11430fd18e55f5361750c7a2a7"], 0x4, 0x272, &(0x7f0000001f40)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c362023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 3.636772291s ago: executing program 3 (id=2707): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r0, 0x0, 0x0) rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') 3.223803531s ago: executing program 2 (id=2708): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr msr/re', 0x14) 3.077533094s ago: executing program 6 (id=2709): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x10, 0x0) 2.85436237s ago: executing program 2 (id=2710): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() sigaltstack(&(0x7f0000000080)={&(0x7f00000000c0)=""/4094, 0x0, 0xffe}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)) 2.790612581s ago: executing program 3 (id=2711): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000005e40)="17000000020001000003d68c", 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, 0x140f, 0x1, 0xc, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008014) 2.769158422s ago: executing program 1 (id=2712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) 2.700347813s ago: executing program 6 (id=2713): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @private2, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) 2.490735488s ago: executing program 2 (id=2714): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\trrr'], 0xa) 2.40852429s ago: executing program 6 (id=2715): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='[', 0x1}], 0x1) 2.256027504s ago: executing program 1 (id=2716): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)="fbd52e302e5c5c6e796d6f75730a", 0xe) 2.254371694s ago: executing program 3 (id=2717): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9f500", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, '\x00\x00'}, @mss={0x2, 0x4, 0x9}]}}}}}}}}, 0x0) 2.208170835s ago: executing program 2 (id=2718): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) 2.058854049s ago: executing program 3 (id=2719): r0 = syz_io_uring_setup(0x53a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x5}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, {0x0, r4}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0xc9e, 0x2ea, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) 2.0012967s ago: executing program 2 (id=2720): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4005, 0x4) 1.801571705s ago: executing program 3 (id=2721): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) sendmmsg$inet6(r0, &(0x7f0000008480)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x80000000, @private1, 0x44b}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)="bdd7", 0x2}], 0x1}}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.778898216s ago: executing program 1 (id=2722): recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000700)=@x25, 0x80, 0x0}, 0x6}, {{&(0x7f00000009c0)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x3}], 0x2, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.251532869s ago: executing program 5 (id=2723): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x20) write(r0, &(0x7f00000001c0)='0fc5:1227:>og', 0xd) 778.86096ms ago: executing program 3 (id=2724): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101402, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 616.217954ms ago: executing program 1 (id=2725): r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f00000002c0)=[{0x2, 0x7, 0x1800}, {0x0, 0xffff, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6]) 350.08744ms ago: executing program 6 (id=2726): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 95.982307ms ago: executing program 2 (id=2727): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x77, @time={0x65757100, 0xfffffffe}}) 0s ago: executing program 6 (id=2728): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/tracing/trace_pipe\x00', 0x8000, 0x0) read(r0, 0x0, 0xf0) kernel console output (not intermixed with test programs): 784945][ T8583] loop2: detected capacity change from 0 to 256 [ 291.338477][ T8590] loop3: detected capacity change from 0 to 512 [ 291.411065][ T8590] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.464607][ T8590] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 292.075170][ T8601] loop3: detected capacity change from 0 to 64 [ 292.410699][ T8605] loop4: detected capacity change from 0 to 2048 [ 292.479568][ T8607] loop3: detected capacity change from 0 to 256 [ 292.525596][ T8605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.557795][ T8607] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 292.679084][ T8594] loop2: detected capacity change from 0 to 32768 [ 292.700213][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 292.700225][ T26] audit: type=1800 audit(1786504973.619:165): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1588" name="file2" dev="loop3" ino=1048672 res=0 errno=0 [ 292.783123][ T8607] exFAT-fs (loop3): hint_cluster is invalid (17) [ 292.790577][ T8607] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 292.846919][ T8594] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 292.895913][ T8607] exFAT-fs (loop3): Filesystem has been set read-only [ 292.981051][ T8607] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 293.258347][ T8594] syz.2.1582 (8594) used greatest stack depth: 18688 bytes left [ 293.531774][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 294.069901][ T8613] loop4: detected capacity change from 0 to 32768 [ 294.183866][ T8613] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 294.418851][ T8633] loop2: detected capacity change from 0 to 512 [ 294.457904][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 294.509375][ T8633] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 294.587592][ T8633] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 294.683026][ T8633] EXT4-fs (loop2): 1 truncate cleaned up [ 294.688715][ T8633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 294.880336][ T8633] EXT4-fs (loop2): shut down requested (1) [ 295.004751][ T8642] netem: unknown loss type 0 [ 295.121672][ T8642] netem: change failed [ 295.157591][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 295.398868][ T8650] device batadv_slave_0 entered promiscuous mode [ 295.439867][ T8650] batman_adv: batadv0: Adding interface: macvtap1 [ 295.465348][ T8650] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.524174][ T8650] batman_adv: batadv0: Interface activated: macvtap1 [ 296.039282][ T8670] loop4: detected capacity change from 0 to 256 [ 296.086114][ T8670] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.187422][ T8670] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 296.257390][ T8670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 296.397666][ T8673] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 297.060134][ T8685] loop4: detected capacity change from 0 to 256 [ 297.149235][ T8685] exFAT-fs (loop4): failed to load upcase table (idx : 0x000103c2, chksum : 0xe64499b9, utbl_chksum : 0xe619d30d) [ 297.760348][ T8700] base or size exceeds the MTRR width [ 299.207389][ T8724] loop5: detected capacity change from 0 to 2048 [ 299.399871][ T8724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.460997][ T8731] loop2: detected capacity change from 0 to 512 [ 299.475936][ T8714] loop3: detected capacity change from 0 to 32768 [ 299.579662][ T8731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 299.595230][ T26] audit: type=1800 audit(1786504980.519:166): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1631" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 299.701998][ T8731] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.1639: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 299.930074][ T8731] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.1639: Bad quota inode: 4, type: 1 [ 300.016202][ T8731] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 300.149867][ T8731] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 300.243945][ T8731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 300.709504][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 301.608418][ T8744] loop4: detected capacity change from 0 to 32768 [ 301.755588][ T8744] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 301.801406][ T8773] loop1: detected capacity change from 0 to 164 [ 301.857869][ T8774] loop2: detected capacity change from 0 to 128 [ 301.889371][ T8744] (syz.4.1645,8744,0):ocfs2_double_lock:1188 ERROR: status = -2 [ 301.947031][ T8774] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 301.976586][ T8773] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 302.103154][ T8774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.586039][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 303.045523][ T8787] loop1: detected capacity change from 0 to 2048 [ 303.194874][ T8787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.442398][ T8794] loop2: detected capacity change from 0 to 1024 [ 303.455470][ T8793] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 303.613881][ T8793] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 304.416652][ T8812] loop3: detected capacity change from 0 to 1024 [ 304.544717][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 304.761916][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 304.780824][ T7] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 304.790518][ T8815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 304.820341][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.849246][ T7] usb 3-1: config 0 descriptor?? [ 305.120343][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 305.176272][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 305.255634][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 305.316637][ T7] usb 3-1: media controller created [ 305.412552][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.516981][ T7] az6027: usb out operation failed. (-71) [ 305.577176][ T7] az6027: usb out operation failed. (-71) [ 305.597430][ T7] stb0899_attach: Driver disabled by Kconfig [ 305.617826][ T8831] loop3: detected capacity change from 0 to 64 [ 305.626292][ T7] az6027: no front-end attached [ 305.626292][ T7] [ 305.684225][ T7] az6027: usb out operation failed. (-71) [ 305.728698][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 305.776266][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 305.818588][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 305.843881][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 305.894188][ T7] usb 3-1: USB disconnect, device number 12 [ 306.071723][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 307.270679][ T8837] loop3: detected capacity change from 0 to 32768 [ 307.391108][ T8837] XFS (loop3): Mounting V5 Filesystem [ 307.474533][ T8837] XFS (loop3): Ending clean mount [ 307.758818][ T4288] XFS (loop3): Unmounting Filesystem [ 308.311711][ T8885] loop2: detected capacity change from 0 to 512 [ 308.474146][ T8885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 308.499585][ T8890] loop4: detected capacity change from 0 to 512 [ 308.532283][ T8885] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.561761][ T8890] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.653757][ T8890] EXT4-fs (loop4): 1 truncate cleaned up [ 308.722272][ T8890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 308.910888][ T8890] overlayfs: invalid origin (0000) [ 309.022905][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 309.142119][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /366/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 309.316663][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 309.440454][ T8905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.479479][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /366/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 309.510111][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.533183][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 309.558983][ T8909] loop1: detected capacity change from 0 to 256 [ 309.700795][ T8909] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 309.728786][ T8911] loop2: detected capacity change from 0 to 128 [ 309.772431][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 309.792029][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.848102][ T8911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 309.896407][ T8911] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.911332][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /366/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.119067][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.226222][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /366/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.395843][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.470894][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 310.501606][ T4274] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /366/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 310.522968][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.682537][ T4274] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 310.738146][ T8922] loop1: detected capacity change from 0 to 4096 [ 310.878939][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1719'. [ 311.011132][ T8915] loop3: detected capacity change from 0 to 32768 [ 311.132352][ T26] audit: type=1800 audit(1786504992.059:167): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1716" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 311.155949][ T4324] kernel write not supported for file /342/clear_refs (pid: 4324 comm: kworker/0:6) [ 311.200526][ T8915] read_mapping_page failed! [ 311.246248][ T8915] ERROR: (device loop3): txCommit: [ 311.246248][ T8915] [ 311.307414][ T26] audit: type=1800 audit(1786504992.169:168): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1717" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 311.838117][ T8934] loop3: detected capacity change from 0 to 1764 [ 311.908656][ T8934] ISOFS: Unable to identify CD-ROM format. [ 311.915819][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 312.447863][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.828191][ T8944] binder: BC_ACQUIRE_RESULT not supported [ 312.846851][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.866871][ T8944] binder: 8943:8944 ioctl c0306201 2000000001c0 returned -22 [ 313.085328][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.176758][ T4324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 313.354507][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.462750][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 313.495674][ T4324] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 313.536179][ T8957] netlink: 'syz.3.1734': attribute type 2 has an invalid length. [ 313.552050][ T4324] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 313.560713][ T4324] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 313.623784][ T8957] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 313.661929][ T4324] usb 3-1: config 1 has no interface number 0 [ 313.668147][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1734'. [ 313.711778][ T4324] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.726396][ T8957] netlink: 'syz.3.1734': attribute type 2 has an invalid length. [ 313.757669][ T8959] loop5: detected capacity change from 0 to 2048 [ 313.775873][ T4324] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 313.792054][ T8957] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 313.825443][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1734'. [ 313.858761][ T4324] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 313.895773][ T8957] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 313.910556][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.920654][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.929284][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.936914][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.945897][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.953339][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.022552][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.032156][ T8962] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.134137][ T4324] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 314.286633][ T8962] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 314.358095][ T8962] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 314.457926][ T4324] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 314.546157][ T8962] Remounting filesystem read-only [ 314.924039][ T6096] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 315.051992][ T4323] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 315.163771][ T7] usb 3-1: USB disconnect, device number 13 [ 315.182793][ T7] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 315.315469][ T4323] usb 2-1: Using ep0 maxpacket: 32 [ 315.349437][ T4323] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.387478][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.431440][ T4323] usb 2-1: config 0 descriptor?? [ 315.501621][ T8960] chnl_net:caif_netlink_parms(): no params data found [ 315.696124][ T4323] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 315.721731][ T8979] loop5: detected capacity change from 0 to 1024 [ 315.764264][ T4323] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 315.849921][ T4323] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 315.877763][ T4323] usb 2-1: media controller created [ 315.924833][ T8979] EXT4-fs (loop5): Test dummy encryption mode enabled [ 315.978802][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.992067][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 316.081112][ T8979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 316.098920][ T4323] az6027: usb out operation failed. (-71) [ 316.158631][ T4323] az6027: usb out operation failed. (-71) [ 316.190552][ T4323] stb0899_attach: Driver disabled by Kconfig [ 316.214025][ T4323] az6027: no front-end attached [ 316.214025][ T4323] [ 316.278284][ T4323] az6027: usb out operation failed. (-71) [ 316.299763][ T8979] EXT4-fs (loop5): shut down requested (2) [ 316.317859][ T4323] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 316.373640][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 316.395396][ T8979] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 316.439760][ T4323] dvb-usb: schedule remote query interval to 400 msecs. [ 316.477608][ T4323] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 316.545958][ T4323] usb 2-1: USB disconnect, device number 10 [ 316.702551][ T4323] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 316.960017][ T6096] EXT4-fs (loop5): unmounting filesystem. [ 317.198938][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.205320][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.361227][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.401947][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.440317][ T8960] device bridge_slave_0 entered promiscuous mode [ 317.620706][ T8960] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.644269][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.712071][ T8960] device bridge_slave_1 entered promiscuous mode [ 318.062289][ T8960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.072094][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 318.307466][ T8960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.665169][ T8992] loop2: detected capacity change from 0 to 32768 [ 318.687972][ T9009] loop3: detected capacity change from 0 to 32768 [ 318.795587][ T9009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1747 (9009) [ 318.972927][ T9009] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 319.012251][ T8992] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1741 (8992) [ 319.077228][ T9009] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 319.152064][ T9009] BTRFS info (device loop3): force clearing of disk cache [ 319.159277][ T9009] BTRFS info (device loop3): metadata ratio 13 [ 319.271002][ T9009] BTRFS info (device loop3): enabling ssd optimizations [ 319.319213][ T8960] team0: Port device team_slave_0 added [ 319.350464][ T9009] BTRFS info (device loop3): using spread ssd allocation scheme [ 319.396849][ T8960] team0: Port device team_slave_1 added [ 319.411074][ T9009] BTRFS info (device loop3): using free space tree [ 319.457971][ T4351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4351) [ 319.470245][ T8992] BTRFS error (device loop2): open_ctree failed: -4 [ 319.670467][ T9009] BTRFS info (device loop3): rebuilding free space tree [ 319.758932][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.834876][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.910730][ T9007] loop5: detected capacity change from 0 to 32768 [ 320.082084][ T8960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.139700][ T4288] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 320.152165][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 320.197018][ T9007] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 320.478884][ T9007] JBD2: Ignoring recovery information on journal [ 320.868033][ T9007] JBD2: recovery failed [ 320.952420][ T9007] (syz.5.1744,9007,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 321.095261][ T9007] (syz.5.1744,9007,0):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 321.177790][ T4382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (4382) [ 321.222551][ T9007] (syz.5.1744,9007,0):ocfs2_check_volume:2487 ERROR: status = -5 [ 321.248554][ T9049] program syz.1.1750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.336424][ T9007] (syz.5.1744,9007,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 321.552094][ T9007] (syz.5.1744,9007,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 321.587809][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.651423][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.806883][ T8960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.085127][ T11] device hsr_slave_0 left promiscuous mode [ 322.237381][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 322.266520][ T11] device hsr_slave_1 left promiscuous mode [ 322.437119][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.457550][ T9068] loop1: detected capacity change from 0 to 256 [ 322.491094][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.574506][ T9068] exfat: Deprecated parameter 'namecase' [ 322.598355][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.639866][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.658641][ T9068] exfat: Deprecated parameter 'namecase' [ 322.706835][ T11] device bridge_slave_1 left promiscuous mode [ 322.730685][ T9068] exfat: Deprecated parameter 'utf8' [ 322.737498][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.854191][ T9068] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 322.870769][ T11] device bridge_slave_0 left promiscuous mode [ 322.900850][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.071258][ T9068] overlayfs: filesystem on './file0' not supported [ 323.269933][ T11] device veth1_macvtap left promiscuous mode [ 323.321990][ T11] device veth0_macvtap left promiscuous mode [ 323.328109][ T11] device veth1_vlan left promiscuous mode [ 323.421926][ T11] device veth0_vlan left promiscuous mode [ 323.499205][ T9079] gadgetfs: bound to dummy_udc driver [ 323.539412][ T9084] loop2: detected capacity change from 0 to 256 [ 323.872603][ T9087] loop3: detected capacity change from 0 to 256 [ 324.926577][ T9105] kAFS: bad VL server IP address [ 325.780628][ T9116] loop5: detected capacity change from 0 to 512 [ 325.831687][ T9116] EXT4-fs: Ignoring removed bh option [ 325.910472][ T9116] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 325.998242][ T9116] EXT4-fs (loop5): 1 truncate cleaned up [ 326.031190][ T9116] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 326.177909][ T9116] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1779: bg 0: block 465: padding at end of block bitmap is not set [ 326.320538][ T9116] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 326.408546][ T9116] EXT4-fs (loop5): This should not happen!! Data will be lost [ 326.408546][ T9116] [ 326.458182][ T9116] EXT4-fs (loop5): Total free blocks count 0 [ 326.502094][ T9116] EXT4-fs (loop5): Free/Dirty block details [ 326.536882][ T9116] EXT4-fs (loop5): free_blocks=0 [ 326.556027][ T9116] EXT4-fs (loop5): dirty_blocks=2 [ 326.596983][ T9116] EXT4-fs (loop5): Block reservation details [ 326.628498][ T9116] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 326.812122][ T57] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 326.841323][ T11] team0 (unregistering): Port device team_slave_1 removed [ 327.091732][ T11] team0 (unregistering): Port device team_slave_0 removed [ 327.309543][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.559741][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.617496][ T9134] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in; [ 327.617496][ T9134] program syz.2.1786 not setting count and/or reply_len properly [ 328.375996][ T11] bond0 (unregistering): Released all slaves [ 328.516428][ T8960] device hsr_slave_0 entered promiscuous mode [ 328.538278][ T8960] device hsr_slave_1 entered promiscuous mode [ 328.549836][ T8960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.572812][ T8960] Cannot create hsr debugfs directory [ 329.061237][ T9144] loop3: detected capacity change from 0 to 2048 [ 329.197130][ T9144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 329.470388][ T9] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 329.647178][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 329.672037][ T8960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.740133][ T8960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.811913][ T9] EXT4-fs (loop3): This should not happen!! Data will be lost [ 329.811913][ T9] [ 329.821619][ T9] EXT4-fs (loop3): Total free blocks count 0 [ 329.856324][ T8960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 329.906898][ T8960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 329.928606][ T9] EXT4-fs (loop3): Free/Dirty block details [ 329.957044][ T9] EXT4-fs (loop3): free_blocks=2415919504 [ 330.015432][ T9] EXT4-fs (loop3): dirty_blocks=64 [ 330.020641][ T9] EXT4-fs (loop3): Block reservation details [ 330.084477][ T9] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 330.136632][ T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 330.318318][ T8960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.440584][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.496908][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.565851][ T8960] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.663061][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.701776][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.722814][ T9181] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 330.768684][ T9184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'. [ 330.780112][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.787251][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.840912][ T9184] block nbd0: Unsupported socket: should be TCP or UNIX. [ 330.895591][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.951038][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.986186][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.082282][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.089407][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.195416][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.285587][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.356443][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.411355][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.476565][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.577631][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.629855][ T8960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.750391][ T8960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.827636][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.865355][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.932918][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.973123][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.996723][ T26] audit: type=1326 audit(1786505012.919:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 332.040721][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.094838][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1808'. [ 332.170397][ T26] audit: type=1326 audit(1786505012.959:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 332.236540][ T9201] tipc: Started in network mode [ 332.248155][ T9179] loop3: detected capacity change from 0 to 40427 [ 332.282417][ T9201] tipc: Node identity 7, cluster identity 4711 [ 332.381004][ T9201] tipc: Node number set to 7 [ 332.398923][ T26] audit: type=1326 audit(1786505012.959:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 332.464255][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.656287][ T26] audit: type=1326 audit(1786505012.959:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 332.909411][ T26] audit: type=1326 audit(1786505012.959:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 333.148475][ T26] audit: type=1326 audit(1786505012.959:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 333.335862][ T9220] loop5: detected capacity change from 0 to 16 [ 333.389154][ T26] audit: type=1326 audit(1786505012.959:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 333.508176][ T9220] erofs: (device loop5): mounted with root inode @ nid 36. [ 333.662809][ T26] audit: type=1326 audit(1786505012.959:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 333.738445][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.812109][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.833593][ T9220] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 333.887616][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.943018][ T26] audit: type=1326 audit(1786505012.959:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 334.011887][ T9220] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851] [ 334.169763][ T26] audit: type=1326 audit(1786505012.959:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.2.1809" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 334.212092][ T9232] program syz.1.1814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.229153][ T9220] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 335.452588][ T9256] IPVS: fo: FWM 3 0x00000003 - no destination available [ 335.982340][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.022535][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.106491][ T8960] device veth0_vlan entered promiscuous mode [ 336.187467][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.210696][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.272921][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.305741][ T5936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.356563][ T8960] device veth1_vlan entered promiscuous mode [ 336.380778][ T9277] loop5: detected capacity change from 0 to 256 [ 336.442025][ T5216] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 336.479856][ T8960] device veth0_macvtap entered promiscuous mode [ 336.544074][ T9277] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 336.567888][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.600392][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.653430][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.672045][ T5216] usb 3-1: Using ep0 maxpacket: 8 [ 336.696205][ T5216] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 336.735507][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.772235][ T5216] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 336.793872][ T8960] device veth1_macvtap entered promiscuous mode [ 336.822014][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.866177][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.884633][ T5216] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.935286][ T5216] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.956770][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.023662][ T5216] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.041883][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.085800][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.097437][ T5216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.175337][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.217502][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.309774][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.351670][ T5216] usb 3-1: GET_CAPABILITIES returned 0 [ 337.376795][ T5216] usbtmc 3-1:16.0: can't read capabilities [ 337.383167][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.448554][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.509224][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.602332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.611063][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.629453][ T4324] usb 3-1: USB disconnect, device number 14 [ 337.727356][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.777501][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.861881][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.901970][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.920863][ T9298] loop1: detected capacity change from 0 to 128 [ 337.958893][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.028927][ T9298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 338.053245][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.114351][ T8960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.143747][ T9298] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.186969][ T8960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.252958][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.261403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.316363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.399804][ T8960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.426077][ T9298] EXT4-fs warning (device loop1): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new) [ 338.492196][ T8960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.533218][ T9313] loop2: detected capacity change from 0 to 16 [ 338.559812][ T8960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.594774][ T9313] erofs: (device loop2): mounted with root inode @ nid 36. [ 338.616188][ T9298] EXT4-fs warning (device loop1): ext4_group_extend:1899: can't read last block, resize aborted [ 338.672151][ T8960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.732791][ T9313] syz.2.1838: attempt to access beyond end of device [ 338.732791][ T9313] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 338.911507][ T9313] syz.2.1838: attempt to access beyond end of device [ 338.911507][ T9313] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 339.073564][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.133316][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 339.145879][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.219561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.260071][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.334681][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.445037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.527357][ T9325] loop5: detected capacity change from 0 to 128 [ 339.654295][ T9325] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 339.878522][ T9325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.327137][ T9318] loop3: detected capacity change from 0 to 32768 [ 340.363779][ T9337] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 340.370982][ T9337] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 340.470549][ T9318] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 340.504190][ T9337] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 340.572388][ T9337] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 340.624701][ T9337] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 340.674133][ T9337] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 340.684852][ T4323] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 340.735051][ T9337] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 340.776484][ T9337] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 340.809032][ T4288] ocfs2: Unmounting device (7,3) on (node local) [ 340.835112][ T9337] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 340.906871][ T9337] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 340.915235][ T4323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.946522][ T9337] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 340.976763][ T4323] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 341.005448][ T9337] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 341.050536][ T9350] loop3: detected capacity change from 0 to 128 [ 341.057593][ T9337] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 341.064531][ T4323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 341.098188][ T9337] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 341.125963][ T4323] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.181213][ T9337] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 341.227656][ T4323] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 341.245887][ T9337] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 341.286709][ T9337] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 341.298727][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.329973][ T9337] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 341.431764][ T9337] comedi comedi3: 8255: I/O port conflict (0x10002,4) [ 341.484905][ T9337] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 341.795305][ T4323] gud 3-1:1.0: Unexpected status OK for failed transfer [ 341.841304][ T4323] gud: probe of 3-1:1.0 failed with error -32 [ 341.969124][ T9364] device gretap0 entered promiscuous mode [ 342.030649][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 342.041172][ T4323] usb 3-1: USB disconnect, device number 15 [ 342.123324][ T9366] device gretap0 left promiscuous mode [ 345.676334][ T9421] loop2: detected capacity change from 0 to 32768 [ 345.817785][ T9421] XFS (loop2): Mounting V5 Filesystem [ 345.943329][ T9421] XFS (loop2): Ending clean mount [ 346.010634][ T9421] XFS (loop2): Quotacheck needed: Please wait. [ 346.291935][ T9421] XFS (loop2): Quotacheck: Done. [ 346.668089][ T4277] XFS (loop2): Unmounting Filesystem [ 347.292124][ T9487] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1894'. [ 347.319776][ T9432] loop5: detected capacity change from 0 to 32768 [ 347.329803][ T5215] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 347.436332][ T9432] XFS (loop5): Mounting V5 Filesystem [ 347.545355][ T5215] usb 4-1: Using ep0 maxpacket: 32 [ 347.561726][ T5215] usb 4-1: config 32 has an invalid interface number: 85 but max is 0 [ 347.601542][ T9432] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 347.626936][ T5215] usb 4-1: config 32 has no interface number 0 [ 347.660161][ T5215] usb 4-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.721509][ T5215] usb 4-1: config 32 interface 85 has no altsetting 0 [ 347.777177][ T5215] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 347.810289][ T9432] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30 [ 347.844019][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.874087][ T5215] usb 4-1: Product: syz [ 347.897077][ T5215] usb 4-1: Manufacturer: syz [ 347.945737][ T5215] usb 4-1: SerialNumber: syz [ 347.951228][ T9432] XFS (loop5): Ending clean mount [ 348.221963][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 348.221977][ T26] audit: type=1326 audit(1786505029.139:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 348.299275][ T6096] XFS (loop5): Unmounting Filesystem [ 348.415437][ T26] audit: type=1326 audit(1786505029.139:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 348.593012][ T5215] appletouch 4-1:32.85: Geyser mode initialized. [ 348.599601][ T26] audit: type=1326 audit(1786505029.139:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 348.656871][ T5215] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.85/input/input14 [ 348.681123][ T9501] loop6: detected capacity change from 0 to 32768 [ 348.776998][ T9501] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1896 (9501) [ 348.816149][ T5216] usb 4-1: USB disconnect, device number 8 [ 348.832160][ T26] audit: type=1326 audit(1786505029.139:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 348.930938][ T9501] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 348.956142][ T5216] appletouch 4-1:32.85: input: appletouch disconnected [ 349.047366][ T9501] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 349.082066][ T26] audit: type=1326 audit(1786505029.139:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 349.135537][ T9501] BTRFS info (device loop6): setting nodatasum [ 349.182726][ T9501] BTRFS info (device loop6): force zlib compression, level 3 [ 349.248791][ T9501] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 349.288735][ T26] audit: type=1326 audit(1786505029.139:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 349.343714][ T9501] BTRFS info (device loop6): use lzo compression, level 0 [ 349.376863][ T9501] BTRFS info (device loop6): turning on flush-on-commit [ 349.433430][ T9501] BTRFS info (device loop6): enabling auto defrag [ 349.473431][ T26] audit: type=1326 audit(1786505029.139:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 349.512063][ T9501] BTRFS info (device loop6): max_inline at 4096 [ 349.518374][ T9501] BTRFS info (device loop6): using free space tree [ 349.692413][ T26] audit: type=1326 audit(1786505029.139:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 349.763372][ T9530] loop2: detected capacity change from 0 to 512 [ 349.800234][ T9501] BTRFS info (device loop6): enabling ssd optimizations [ 349.826607][ T9530] EXT4-fs: Ignoring removed bh option [ 349.887286][ T9530] EXT4-fs: inline encryption not supported [ 349.936914][ T26] audit: type=1326 audit(1786505029.139:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 350.023482][ T9530] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 350.176809][ T9530] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 350.221889][ T26] audit: type=1326 audit(1786505029.139:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.1895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f2f9e0d9 code=0x7fc00000 [ 350.285173][ T8960] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 350.391379][ T9530] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1898: bg 0: block 248: padding at end of block bitmap is not set [ 350.565790][ T9530] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.1898: Failed to acquire dquot type 1 [ 350.693840][ T9530] EXT4-fs (loop2): 1 truncate cleaned up [ 350.725961][ T9530] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 351.417605][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 351.452146][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1 [ 351.521589][ T9561] loop3: detected capacity change from 0 to 1024 [ 351.804946][ T9561] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 352.940100][ T9550] loop1: detected capacity change from 0 to 32768 [ 353.147833][ T9550] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 353.298901][ T9550] JBD2: Ignoring recovery information on journal [ 353.579549][ T9550] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 353.638077][ T9589] loop6: detected capacity change from 0 to 2048 [ 353.714073][ T9589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 354.104021][ T9595] i2c i2c-0: delete_device: Extra parameters [ 354.331146][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 355.020249][ T9616] loop2: detected capacity change from 0 to 256 [ 355.090096][ T9616] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.246573][ T9616] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.853652][ T9628] loop2: detected capacity change from 0 to 512 [ 355.922043][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 356.008029][ T9628] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 356.078717][ T9628] ext4 filesystem being mounted at /445/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.142184][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 356.206829][ T14] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 356.271922][ T14] usb 7-1: can't read configurations, error -71 [ 356.607582][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 357.116134][ T9651] loop5: detected capacity change from 0 to 512 [ 357.297454][ T9651] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.1928: missing EA_INODE flag [ 357.587565][ T9651] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1928: error while reading EA inode 12 err=-117 [ 357.738746][ T9651] EXT4-fs (loop5): 1 orphan inode deleted [ 357.773032][ T9651] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 357.887025][ T14] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 358.119100][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 358.150862][ T14] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 358.255140][ T14] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 358.294727][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.337580][ T14] usb 7-1: Product: syz [ 358.375555][ T14] usb 7-1: Manufacturer: syz [ 358.380307][ T14] usb 7-1: SerialNumber: syz [ 358.453448][ T6096] EXT4-fs (loop5): unmounting filesystem. [ 358.633737][ T14] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 358.866286][ T14] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 358.905604][ T14] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 359.268355][ T14] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 359.409005][ T14] usb 7-1: USB disconnect, device number 4 [ 359.530390][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.051004][ T9697] loop5: detected capacity change from 0 to 2048 [ 360.222618][ T9697] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 360.515312][ T9711] loop2: detected capacity change from 0 to 512 [ 360.565905][ T9697] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 360.598974][ T9711] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 360.783435][ T9697] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2 with error 28 [ 361.008030][ T9697] EXT4-fs (loop5): This should not happen!! Data will be lost [ 361.008030][ T9697] [ 361.111439][ T9697] EXT4-fs (loop5): Total free blocks count 0 [ 361.198736][ T9697] EXT4-fs (loop5): Free/Dirty block details [ 361.311978][ T9697] EXT4-fs (loop5): free_blocks=2415919104 [ 361.317771][ T9697] EXT4-fs (loop5): dirty_blocks=32 [ 361.444969][ T9727] program syz.2.1959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.497591][ T9697] EXT4-fs (loop5): Block reservation details [ 361.601330][ T9697] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 361.869577][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'. [ 362.033094][ T5936] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 362.353636][ T9743] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.795262][ T9755] loop2: detected capacity change from 0 to 164 [ 362.839296][ T9758] program syz.3.1970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.896751][ T9766] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 363.981955][ T9780] input: syz0 as /devices/virtual/input/input15 [ 365.558824][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1989'. [ 365.717375][ T9822] loop1: detected capacity change from 0 to 256 [ 365.839555][ T9822] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 366.079680][ T9822] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.512409][ T9838] program syz.5.1996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.633196][ T9808] loop2: detected capacity change from 0 to 32768 [ 366.776597][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 366.776610][ T26] audit: type=1800 audit(1786505047.699:308): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1987" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 367.352824][ T9854] netlink: 'syz.5.2001': attribute type 18 has an invalid length. [ 367.720050][ T9860] loop2: detected capacity change from 0 to 512 [ 367.777195][ T9836] loop6: detected capacity change from 0 to 32768 [ 367.844952][ T9860] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 367.954912][ T9836] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 368.046109][ T9836] JBD2: Ignoring recovery information on journal [ 368.135330][ T9860] EXT4-fs (loop2): 1 truncate cleaned up [ 368.141046][ T9860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 368.248566][ T9836] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 368.689830][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 368.700874][ T8960] ocfs2: Unmounting device (7,6) on (node local) [ 368.957234][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 368.982032][ T9557] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 369.213336][ T9557] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 369.298512][ T9557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 369.372571][ T9557] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 369.454045][ T9557] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 369.506755][ T9557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.569867][ T9557] usb 2-1: config 0 descriptor?? [ 369.622310][ T9880] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.921564][ T9896] loop3: detected capacity change from 0 to 4096 [ 370.057032][ T9896] NILFS (loop3): invalid segment: Checksum error in segment payload [ 370.111949][ T9896] NILFS (loop3): trying rollback from an earlier position [ 370.146328][ T9901] vivid-000: disconnect [ 370.207600][ T9898] vivid-000: reconnect [ 370.227773][ T9896] NILFS (loop3): recovery complete [ 370.259841][ T9902] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.273740][ T9557] hid-multitouch 0003:1FD2:6007.0007: ignoring exceeding usage max [ 370.337945][ T9557] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x2 [ 370.457595][ T9557] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 370.606816][ T9557] usb 2-1: USB disconnect, device number 11 [ 371.110456][ T9911] fido_id[9911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 372.174719][ T9927] loop6: detected capacity change from 0 to 131072 [ 372.214046][ T9927] F2FS-fs (loop6): invalid crc value [ 372.267482][ T9927] F2FS-fs (loop6): Found nat_bits in checkpoint [ 372.298487][ T9927] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 372.323799][ T9927] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 372.985164][ T9944] loop2: detected capacity change from 0 to 1024 [ 373.202673][ T9944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 373.705839][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 373.779471][ T9958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 373.786665][ T9958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.975815][ T9961] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 373.982393][ T9961] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 374.029765][ T9973] MTRR 1 not used [ 374.125624][ T9969] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 374.132356][ T9969] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 374.198863][ T9978] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2035'. [ 374.232255][ T5206] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 374.269006][ T9958] vhci_hcd vhci_hcd.0: Device attached [ 374.358222][ T9969] vhci_hcd vhci_hcd.0: Device attached [ 374.433950][ T9976] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 374.440599][ T9976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.552996][ T9961] vhci_hcd vhci_hcd.0: Device attached [ 374.619483][ T9972] vhci_hcd: connection closed [ 374.628449][ T4340] vhci_hcd: stop threads [ 374.650614][ T9962] vhci_hcd: connection closed [ 374.650933][ T9959] vhci_hcd: connection reset by peer [ 374.666233][ T9980] vhci_hcd: connection closed [ 374.668020][ T9976] vhci_hcd vhci_hcd.0: Device attached [ 374.754003][ T4340] vhci_hcd: release socket [ 374.809640][ T4340] vhci_hcd: disconnect device [ 374.838508][ T4340] vhci_hcd: stop threads [ 374.891942][ T4340] vhci_hcd: release socket [ 374.912582][ T4340] vhci_hcd: disconnect device [ 374.966275][ T4340] vhci_hcd: stop threads [ 375.035840][ T4340] vhci_hcd: release socket [ 375.075758][ T4340] vhci_hcd: disconnect device [ 375.117693][ T4340] vhci_hcd: stop threads [ 375.152231][ T4340] vhci_hcd: release socket [ 375.181647][ T4340] vhci_hcd: disconnect device [ 376.330336][T10020] loop1: detected capacity change from 0 to 4096 [ 376.794026][T10035] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 377.981293][T10028] loop2: detected capacity change from 0 to 40427 [ 378.120593][T10028] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 378.196851][T10028] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 378.302189][T10028] F2FS-fs (loop2): invalid crc value [ 378.379402][T10028] F2FS-fs (loop2): Found nat_bits in checkpoint [ 378.636244][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.648332][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.764558][T10028] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 378.818433][T10028] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 379.319001][ T4277] syz-executor: attempt to access beyond end of device [ 379.319001][ T4277] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.401952][ T9557] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 379.435473][ T5206] vhci_hcd: vhci_device speed not set [ 379.722011][ T9557] usb 6-1: Using ep0 maxpacket: 16 [ 379.782434][ T9557] usb 6-1: config 0 has no interfaces? [ 379.813294][ T9557] usb 6-1: New USB device found, idVendor=05a9, idProduct=4519, bcdDevice= 0.09 [ 379.883163][ T9557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 379.925583][ T9557] usb 6-1: SerialNumber: syz [ 379.986924][ T9557] usb 6-1: config 0 descriptor?? [ 380.455897][ T5216] usb 6-1: USB disconnect, device number 4 [ 380.822960][ T7] usb usb40-port1: attempt power cycle [ 381.507075][ T7] usb usb40-port1: unable to enumerate USB device [ 381.873253][T10133] loop6: detected capacity change from 0 to 4096 [ 381.947485][T10133] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 382.140092][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 382.225285][T10142] device macvlan0 left promiscuous mode [ 382.241370][ T26] audit: type=1800 audit(1786505063.159:309): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2082" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 382.314299][T10142] netlink: 'syz.3.2087': attribute type 2 has an invalid length. [ 382.390527][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 382.898893][T10151] loop5: detected capacity change from 0 to 2048 [ 383.041277][T10151] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 383.084548][T10151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.088539][T10156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'. [ 383.750743][T10175] loop6: detected capacity change from 0 to 512 [ 383.919194][T10175] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 383.963452][T10175] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.069895][T10185] netlink: 'syz.3.2102': attribute type 3 has an invalid length. [ 384.151382][T10188] loop5: detected capacity change from 0 to 256 [ 384.378391][ T8960] EXT4-fs (loop6): unmounting filesystem. [ 384.394668][T10188] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 384.469322][T10190] loop1: detected capacity change from 0 to 512 [ 384.505636][T10196] program syz.3.2104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.624697][T10190] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.747633][T10199] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 384.754194][T10199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.904726][T10199] vhci_hcd vhci_hcd.0: Device attached [ 385.161877][ T5206] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 385.169385][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 385.412053][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 385.448476][ T14] usb 7-1: unable to get BOS descriptor or descriptor too short [ 385.464288][T10200] vhci_hcd: connection closed [ 385.468766][ T32] vhci_hcd: stop threads [ 385.515718][ T14] usb 7-1: no configurations [ 385.520413][ T14] usb 7-1: can't read configurations, error -22 [ 385.527195][ T32] vhci_hcd: release socket [ 385.555072][ T32] vhci_hcd: disconnect device [ 385.586577][ T5206] usb 45-1: device descriptor read/64, error -71 [ 385.745577][T10218] loop5: detected capacity change from 0 to 1024 [ 385.767714][T10220] loop3: detected capacity change from 0 to 512 [ 385.801958][ T5206] vhci_hcd: vhci_device speed not set [ 385.878260][T10220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 386.011725][T10218] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.2111: lblock 2 mapped to illegal pblock 2 (length 1) [ 386.050188][T10220] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.2113: bg 0: bad block bitmap checksum [ 386.089825][T10224] loop1: detected capacity change from 0 to 512 [ 386.177481][T10224] EXT4-fs: Ignoring removed orlov option [ 386.256843][T10218] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 386.271929][T10224] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.323603][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 386.361964][T10218] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.2111: lblock 0 mapped to illegal pblock 48 (length 1) [ 386.388869][T10224] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.2114: corrupted in-inode xattr [ 386.550138][T10210] loop2: detected capacity change from 0 to 32768 [ 386.579645][T10218] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 386.616367][T10224] EXT4-fs (loop1): Remounting filesystem read-only [ 386.664697][T10210] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 386.723456][T10224] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2114: couldn't read orphan inode 15 (err -117) [ 386.741079][T10218] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.2111: Failed to acquire dquot type 0 [ 386.902765][T10224] EXT4-fs (loop1): Remounting filesystem read-only [ 386.909333][T10224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 386.918942][T10218] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 387.069201][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 387.077488][T10218] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.2111: mark_inode_dirty error [ 387.268628][T10218] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 387.397525][T10218] EXT4-fs (loop5): 1 orphan inode deleted [ 387.433884][ T9] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 387.515300][T10218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 387.577731][ T9] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 387.644541][ T9] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 387.857579][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 388.105209][T10218] EXT4-fs: Ignoring removed bh option [ 388.228789][T10218] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.2111: lblock 0 mapped to illegal pblock 48 (length 1) [ 388.372380][T10218] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 388.576531][T10218] EXT4-fs: Ignoring removed bh option [ 388.807184][ T6096] EXT4-fs (loop5): unmounting filesystem. [ 389.151893][ T7] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 389.347932][T10261] loop3: detected capacity change from 0 to 32768 [ 389.361667][ T7] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 389.408434][ T7] usb 7-1: can't read configurations, error -71 [ 389.461987][T10261] XFS (loop3): Mounting V5 Filesystem [ 389.542500][T10261] XFS (loop3): Ending clean mount [ 389.714617][ T4288] XFS (loop3): Unmounting Filesystem [ 389.940740][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 390.821212][T10294] loop1: detected capacity change from 0 to 256 [ 390.920940][T10294] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.050582][T10294] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 391.173347][T10294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 391.936822][T10307] loop2: detected capacity change from 0 to 16 [ 392.014359][T10307] erofs: (device loop2): mounted with root inode @ nid 36. [ 392.482744][T10317] device veth0_virt_wifi entered promiscuous mode [ 392.503548][T10319] loop6: detected capacity change from 0 to 128 [ 392.619057][T10319] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 392.661738][T10319] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.935018][T10328] loop2: detected capacity change from 0 to 1024 [ 392.956024][ T8960] EXT4-fs (loop6): unmounting filesystem. [ 393.012827][T10328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.664646][T10343] loop6: detected capacity change from 0 to 128 [ 394.059868][T10349] loop6: detected capacity change from 0 to 136 [ 394.136433][T10352] loop3: detected capacity change from 0 to 128 [ 394.255472][T10352] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 394.333857][T10352] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.783687][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 395.204961][T10357] loop1: detected capacity change from 0 to 8192 [ 395.324597][T10357] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.766367][T10386] Falling back ldisc for ttyS3. [ 397.049704][T10394] loop3: detected capacity change from 0 to 256 [ 397.275756][T10396] loop2: detected capacity change from 0 to 4096 [ 397.339090][T10396] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 397.467985][T10396] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 397.621432][T10396] ntfs: volume version 3.1. [ 397.660991][T10403] loop3: detected capacity change from 0 to 4096 [ 397.824368][T10404] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.081486][T10433] loop6: detected capacity change from 0 to 256 [ 399.537149][T10439] loop1: detected capacity change from 0 to 1024 [ 399.866007][T10439] hfsplus: catalog searching failed [ 400.235181][ T57] hfsplus: bad catalog file entry [ 400.280331][ T57] hfsplus: b-tree write err: -5, ino 3 [ 401.320808][T10471] loop5: detected capacity change from 0 to 4096 [ 401.489711][T10471] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 401.551849][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 401.761918][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 401.787759][ T14] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 401.801929][T10463] loop2: detected capacity change from 0 to 32768 [ 401.842090][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.906042][T10463] XFS (loop2): Mounting V5 Filesystem [ 401.918876][ T14] usb 4-1: config 0 descriptor?? [ 402.004708][ T14] as10x_usb: device has been detected [ 402.047496][ T14] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 402.137348][ T14] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 402.276488][ T6096] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 402.300393][T10463] XFS (loop2): Ending clean mount [ 402.399121][ T14] as10x_usb: error during firmware upload part1 [ 402.455870][ T14] Registered device nBox DVB-T Dongle [ 402.506065][ T14] usb 4-1: USB disconnect, device number 9 [ 402.601504][T10466] loop1: detected capacity change from 0 to 32768 [ 402.700078][ T14] Unregistered device nBox DVB-T Dongle [ 402.707944][ T14] as10x_usb: device has been disconnected [ 402.799634][ T4277] XFS (loop2): Unmounting Filesystem [ 402.880852][T10466] JBD2: Ignoring recovery information on journal [ 403.176676][T10466] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 403.271602][T10496] loop6: detected capacity change from 0 to 128 [ 403.380898][T10499] device gretap0 entered promiscuous mode [ 403.397402][T10496] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 403.472286][T10496] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.813973][ T8960] EXT4-fs (loop6): unmounting filesystem. [ 403.959696][ T4276] ocfs2: Unmounting device (7,1) on (node local) [ 404.553979][T10518] loop2: detected capacity change from 0 to 2048 [ 404.627961][T10518] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 404.701325][T10518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.148309][T10526] loop3: detected capacity change from 0 to 512 [ 405.217709][T10526] EXT4-fs: inline encryption not supported [ 405.278604][T10526] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 405.351336][T10526] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 405.376386][T10531] 9pnet: p9_errstr2errno: server reported unknown error [ 405.435283][T10526] EXT4-fs (loop3): 1 truncate cleaned up [ 405.468491][T10526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 405.606551][T10526] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 405.929805][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 406.235853][T10535] infiniband syz2: set down [ 406.344537][T10535] infiniband syz2: added syzkaller0 [ 406.755573][T10535] RDS/IB: syz2: added [ 406.760999][T10535] smc: adding ib device syz2 with port count 1 [ 406.853062][T10535] smc: ib device syz2 port 1 has pnetid [ 406.898709][ T46] smc: removing ib device syz2 [ 407.312577][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 407.501330][T10535] rdma_rxe: rxe_register_device failed with error -19 [ 407.557543][T10535] rdma_rxe: failed to add syzkaller0 [ 407.817474][T10574] loop6: detected capacity change from 0 to 256 [ 407.987995][T10576] loop3: detected capacity change from 0 to 4096 [ 408.167135][T10582] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 408.871098][T10581] loop5: detected capacity change from 0 to 131072 [ 408.901944][T10581] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 408.910121][T10581] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 408.921109][T10581] F2FS-fs (loop5): invalid crc value [ 408.960472][T10581] F2FS-fs (loop5): Found nat_bits in checkpoint [ 409.052952][T10581] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 409.060068][T10581] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 409.329269][T10581] F2FS-fs (loop5): access invalid blkaddr:81410 [ 409.336643][T10581] CPU: 0 PID: 10581 Comm: syz.5.2259 Not tainted syzkaller #0 [ 409.344118][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.354182][T10581] Call Trace: [ 409.357465][T10581] [ 409.360400][T10581] dump_stack_lvl+0x188/0x24e [ 409.365154][T10581] ? show_regs_print_info+0x12/0x12 [ 409.370368][T10581] ? f2fs_get_meta_page+0x20/0x20 [ 409.375495][T10581] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 409.380907][T10581] f2fs_get_node_info+0x6d0/0x1220 [ 409.386098][T10581] read_node_page+0x153/0x780 [ 409.390797][T10581] ? __filemap_get_folio+0x10f/0xde0 [ 409.396192][T10581] ? f2fs_ra_node_page+0x230/0x230 [ 409.401334][T10581] ? PageHeadHuge+0x8e/0x1c0 [ 409.405988][T10581] __get_node_page+0x1e6/0xf40 [ 409.410776][T10581] ? read_node_page+0x780/0x780 [ 409.415656][T10581] ? security_inode_alloc+0xbd/0x110 [ 409.420995][T10581] ? do_raw_spin_unlock+0x11d/0x230 [ 409.426213][T10581] ? iget_locked+0x7a5/0x8c0 [ 409.430831][T10581] f2fs_iget+0x752/0x4b20 [ 409.435243][T10581] ? f2fs_free_filename+0x3b/0xd0 [ 409.440297][T10581] ? rcu_is_watching+0x11/0xa0 [ 409.445140][T10581] f2fs_lookup+0x394/0x800 [ 409.449572][T10581] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 409.455652][T10581] ? d_hash_and_lookup+0x1b0/0x1b0 [ 409.460801][T10581] ? __init_waitqueue_head+0xa4/0x140 [ 409.466263][T10581] __lookup_slow+0x29d/0x3f0 [ 409.470919][T10581] ? lookup_one_len+0x2d0/0x2d0 [ 409.475798][T10581] ? down_read+0x1a8/0x2d0 [ 409.480262][T10581] lookup_slow+0x53/0x70 [ 409.484532][T10581] link_path_walk+0x976/0xea0 [ 409.489230][T10581] ? handle_lookup_down+0x130/0x130 [ 409.494467][T10581] __filename_parentat+0x22d/0x650 [ 409.499604][T10581] ? __stack_depot_save+0x35/0x480 [ 409.504781][T10581] ? vfs_path_parent_lookup+0x50/0x50 [ 409.510174][T10581] ? kasan_save_free_info+0x27/0x40 [ 409.515445][T10581] do_renameat2+0x21a/0xc80 [ 409.519970][T10581] ? fsnotify_move+0x4e0/0x4e0 [ 409.524748][T10581] ? kmem_cache_free+0xf7/0x2a0 [ 409.529635][T10581] ? getname_flags+0x273/0x500 [ 409.534409][T10581] __x64_sys_rename+0x82/0x90 [ 409.539097][T10581] do_syscall_64+0x4c/0xa0 [ 409.543533][T10581] ? clear_bhb_loop+0x60/0xb0 [ 409.548296][T10581] ? clear_bhb_loop+0x60/0xb0 [ 409.552987][T10581] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.558979][T10581] RIP: 0033:0x7fd15419e0d9 [ 409.563405][T10581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.583109][T10581] RSP: 002b:00007fd15511b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 409.591531][T10581] RAX: ffffffffffffffda RBX: 00007fd154425fa0 RCX: 00007fd15419e0d9 [ 409.599629][T10581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 409.607610][T10581] RBP: 00007fd154235024 R08: 0000000000000000 R09: 0000000000000000 [ 409.615587][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.623584][T10581] R13: 00007fd154426038 R14: 00007fd154425fa0 R15: 00007ffe7bf4f838 [ 409.631594][T10581] [ 410.710195][ T14] kernel write not supported for file /1135/attr/prev (pid: 14 comm: kworker/0:1) [ 410.725445][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 410.961880][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 410.984800][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.046622][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.091287][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 411.195503][ T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 411.238615][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.291235][ T7] usb 4-1: config 0 descriptor?? [ 411.622713][T10629] program syz.1.2280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.740661][ T7] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0008/input/input16 [ 411.880414][T10623] loop6: detected capacity change from 0 to 32768 [ 411.930339][ T7] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 411.969585][T10623] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 412.027422][ T7] usb 4-1: USB disconnect, device number 10 [ 412.328372][T10627] loop2: detected capacity change from 0 to 32768 [ 412.568024][ T8960] ocfs2: Unmounting device (7,6) on (node local) [ 412.604100][T10635] fido_id[10635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 413.167285][T10646] loop6: detected capacity change from 0 to 128 [ 414.850349][T10641] loop1: detected capacity change from 0 to 32768 [ 415.044724][T10641] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2282 (10641) [ 415.305692][T10641] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 415.498839][T10641] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 415.642653][T10641] BTRFS info (device loop1): using free space tree [ 415.785171][T10698] loop3: detected capacity change from 0 to 128 [ 415.833559][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 416.579165][T10724] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 416.648213][T10641] BTRFS error (device loop1): open_ctree failed: -12 [ 416.957971][T10731] loop5: detected capacity change from 0 to 256 [ 417.125988][T10732] loop2: detected capacity change from 0 to 1024 [ 417.302473][T10732] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.371985][T10732] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.638523][T10738] loop3: detected capacity change from 0 to 8192 [ 417.727312][T10738] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 417.814895][T10738] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 417.890814][T10738] REISERFS (device loop3): using ordered data mode [ 417.952341][T10738] reiserfs: using flush barriers [ 417.976966][T10738] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 418.082150][T10738] REISERFS (device loop3): checking transaction log (loop3) [ 418.162266][T10738] REISERFS (device loop3): Using r5 hash to sort names [ 418.169457][T10738] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 418.310232][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 420.183932][T10763] loop3: detected capacity change from 0 to 512 [ 420.458564][T10764] loop6: detected capacity change from 0 to 262144 [ 420.536589][T10763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 420.598850][T10764] F2FS-fs (loop6): Found nat_bits in checkpoint [ 420.655504][T10764] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 420.695212][T10763] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.2329: bad orphan inode 131083 [ 420.789116][T10763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 420.930021][T10763] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #2: block 13: comm syz.3.2329: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 421.159501][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 421.284140][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 422.080692][T10795] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2341'. [ 422.226598][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.439093][T10795] device bridge_slave_1 left promiscuous mode [ 422.531015][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.767042][T10831] loop2: detected capacity change from 0 to 512 [ 423.922641][T10831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 423.998832][T10831] ext4 filesystem being mounted at /544/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.286575][T10831] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.2357: directory missing '.' [ 424.560884][T10845] sctp: [Deprecated]: syz.3.2363 (pid 10845) Use of int in maxseg socket option. [ 424.560884][T10845] Use struct sctp_assoc_value instead [ 424.704540][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 425.565898][ T26] audit: type=1326 audit(1786505106.489:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 425.739543][ T26] audit: type=1326 audit(1786505106.519:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 425.968770][ T26] audit: type=1326 audit(1786505106.519:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 426.146594][T10871] loop1: detected capacity change from 0 to 512 [ 426.161983][ T26] audit: type=1326 audit(1786505106.529:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 426.334036][ T26] audit: type=1326 audit(1786505106.529:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 426.539878][ T26] audit: type=1326 audit(1786505106.529:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 426.615280][T10879] loop2: detected capacity change from 0 to 512 [ 426.735892][ T26] audit: type=1326 audit(1786505106.529:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 426.785299][T10879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 426.854669][T10879] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.941088][ T26] audit: type=1326 audit(1786505106.529:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 427.168453][ T26] audit: type=1326 audit(1786505106.529:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 427.217851][T10890] device veth0_to_team entered promiscuous mode [ 427.276780][T10890] device veth0_to_team left promiscuous mode [ 427.283616][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 427.299672][ T26] audit: type=1326 audit(1786505106.529:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10863 comm="syz.2.2372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05179e0d9 code=0x7ffc0000 [ 427.940935][T10908] loop3: detected capacity change from 0 to 512 [ 427.977274][T10908] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 428.008886][T10908] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2388: inode #15: comm syz.3.2388: iget: illegal inode # [ 428.049092][T10908] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2388: couldn't read orphan inode 15 (err -117) [ 428.072185][T10908] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 428.317854][T10912] loop6: detected capacity change from 0 to 512 [ 428.398585][T10912] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 428.507527][T10912] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 428.530168][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 428.557328][T10912] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 428.725644][ T8960] EXT4-fs (loop6): unmounting filesystem. [ 428.758211][T10920] loop3: detected capacity change from 0 to 512 [ 428.862911][T10920] EXT4-fs: Ignoring removed nobh option [ 428.966308][T10920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 428.996664][T10924] loop2: detected capacity change from 0 to 8 [ 429.022229][T10920] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.075288][T10924] syz.2.2394: attempt to access beyond end of device [ 429.075288][T10924] loop2: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 429.210317][T10924] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 429.258901][T10924] unable to read xattr id index table [ 429.265686][T10920] EXT4-fs: Ignoring sb option on remount [ 429.288907][T10920] EXT4-fs: Cannot change quota options when quota turned on [ 430.092680][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 430.896966][T10962] loop5: detected capacity change from 0 to 8 [ 431.028134][T10962] SQUASHFS error: Failed to read block 0x260685: -5 [ 431.097005][T10962] SQUASHFS error: Unable to read metadata cache entry [260685] [ 431.111612][ T5211] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 431.190741][T10962] SQUASHFS error: Unable to read directory block [260685:0] [ 431.315078][ T5211] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 431.361858][ T5211] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.409752][ T5211] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 431.444843][ T5211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.480922][ T5211] usb 7-1: config 0 descriptor?? [ 431.907981][ T5211] hid (null): bogus close delimiter [ 431.931946][ T5211] hid (null): report_id 0 is invalid [ 431.975822][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x0 [ 432.024146][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x0 [ 432.053616][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x0 [ 432.078296][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x0 [ 432.106723][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x0 [ 432.124426][T10975] loop5: detected capacity change from 0 to 4096 [ 432.151122][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x0 [ 432.193233][ T5211] megaworld 0003:07B5:0312.0009: unknown main item tag 0x3 [ 432.200500][ T5211] megaworld 0003:07B5:0312.0009: bogus close delimiter [ 432.227382][T10975] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 432.286764][ T5211] megaworld 0003:07B5:0312.0009: item 0 0 2 10 parsing failed [ 432.320192][T10980] loop2: detected capacity change from 0 to 64 [ 432.346402][ T5211] megaworld 0003:07B5:0312.0009: parse failed [ 432.398327][ T5211] megaworld: probe of 0003:07B5:0312.0009 failed with error -22 [ 432.462030][ T5211] usb 7-1: USB disconnect, device number 9 [ 432.711679][T10975] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 433.000979][T10975] ntfs3: loop5: ino=5, "/" directory corrupted [ 433.129797][T10984] loop2: detected capacity change from 0 to 8192 [ 433.187481][T10984] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 433.285916][T10984] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 433.329045][ T6096] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 433.369587][T10984] REISERFS (device loop2): using ordered data mode [ 433.417086][T10984] reiserfs: using flush barriers [ 433.445167][ T6096] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 433.458793][T10984] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 433.538317][T10984] REISERFS (device loop2): checking transaction log (loop2) [ 433.907599][T10984] REISERFS (device loop2): Using tea hash to sort names [ 433.941699][T10984] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 434.147423][T10998] loop6: detected capacity change from 0 to 4096 [ 434.174661][T10986] loop3: detected capacity change from 0 to 40427 [ 434.280242][T10986] F2FS-fs (loop3): invalid crc value [ 434.318744][T10998] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 434.365114][T10986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 434.401742][T10998] NILFS (loop6): error -5 reading inode: ino=2 [ 434.464181][T10998] NILFS (loop6): error -5 getting root inode [ 434.734263][T10986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 435.786110][T11023] loop3: detected capacity change from 0 to 512 [ 435.868232][T11023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 435.909104][T11023] ext4 filesystem being mounted at /559/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.181452][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 436.550871][T11034] loop3: detected capacity change from 0 to 512 [ 436.607949][T11034] EXT4-fs: Ignoring removed nobh option [ 436.654148][T11034] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 436.755195][ T5211] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 436.777102][T11034] EXT4-fs (loop3): mount failed [ 436.846514][T11009] loop5: detected capacity change from 0 to 32768 [ 436.962504][ T5211] usb 2-1: Using ep0 maxpacket: 16 [ 436.991028][ T5211] usb 2-1: config 0 has no interfaces? [ 437.045462][ T5211] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 437.100368][ T5211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.157857][ T5211] usb 2-1: Product: syz [ 437.192869][ T5211] usb 2-1: Manufacturer: syz [ 437.227960][ T5211] usb 2-1: SerialNumber: syz [ 437.264605][ T5211] r8152-cfgselector 2-1: config 0 descriptor?? [ 437.465672][ T5215] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 437.473560][T11045] tun0: tun_chr_ioctl cmd 1074025681 [ 437.542075][ T5211] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 437.675160][ T5215] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 437.726768][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.755606][ T5215] usb 4-1: Product: syz [ 437.788057][ T5215] usb 4-1: Manufacturer: syz [ 437.817145][ T5215] usb 4-1: SerialNumber: syz [ 437.854866][ T5211] usb 2-1: USB disconnect, device number 12 [ 437.976759][T11053] loop2: detected capacity change from 0 to 256 [ 438.066897][ T5215] usb 4-1: 1:1: All rates were zero [ 438.092195][ T5215] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 438.191497][ T5215] usb 4-1: USB disconnect, device number 11 [ 438.853704][T11064] loop1: detected capacity change from 0 to 1024 [ 438.861015][T11064] hfsplus: unable to parse mount options [ 439.876093][T11086] loop1: detected capacity change from 0 to 256 [ 440.063339][T11086] FAT-fs (loop1): Directory bread(block 1285) failed [ 440.075362][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081683][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.236204][T11086] FAT-fs (loop1): Directory bread(block 1286) failed [ 440.367131][T11086] FAT-fs (loop1): Directory bread(block 1287) failed [ 440.472113][T11086] FAT-fs (loop1): Directory bread(block 1288) failed [ 440.742215][T11086] FAT-fs (loop1): Directory bread(block 1285) failed [ 440.748974][T11086] FAT-fs (loop1): Directory bread(block 1286) failed [ 440.922111][T11086] FAT-fs (loop1): Directory bread(block 1287) failed [ 440.929751][T11103] device erspan0 entered promiscuous mode [ 440.984259][T11086] FAT-fs (loop1): Directory bread(block 1288) failed [ 441.697553][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.705115][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.249937][T11128] loop2: detected capacity change from 0 to 512 [ 442.376433][T11128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 442.486219][T11128] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2471: bad orphan inode 11 [ 442.503914][T11130] loop5: detected capacity change from 0 to 1024 [ 442.517749][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2473'. [ 442.572353][T11128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 442.688119][T11128] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.2471: reserved inode found cleared - inode=18 [ 442.847050][T11130] hfsplus: walked past end of dir [ 442.887525][T11128] CacheFiles: mkdir cache failed with error -28 [ 442.956151][T11128] CacheFiles: Failed to register: -28 [ 443.176057][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 443.201927][ T32] hfsplus: bad catalog file entry [ 443.865690][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2481'. [ 443.910053][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2481'. [ 443.980435][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2481'. [ 444.076160][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2481'. [ 444.181482][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2481'. [ 444.227733][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2481'. [ 444.266074][T11170] loop3: detected capacity change from 0 to 512 [ 444.393945][T11170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 444.480644][T11170] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.612791][T11178] loop1: detected capacity change from 0 to 256 [ 444.773266][T11178] exfat: Bad value for 'uid' [ 444.812669][T11181] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2486'. [ 444.974079][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 445.018945][T11154] loop2: detected capacity change from 0 to 32768 [ 445.467544][T11154] ERROR: (device loop2): duplicateIXtree: [ 445.467544][T11154] [ 445.606846][T11154] ERROR: (device loop2): remounting filesystem as read-only [ 445.779940][T11194] loop3: detected capacity change from 0 to 2048 [ 445.885308][T11197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.963729][T11197] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 446.047601][T11197] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 446.156311][T11197] Remounting filesystem read-only [ 446.330736][ T4288] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 446.903036][T11213] loop3: detected capacity change from 0 to 8 [ 446.993742][T11213] SQUASHFS error: Unable to read inode 0x2000 [ 447.008911][T11215] loop5: detected capacity change from 0 to 64 [ 447.066026][ T4351] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 447.143759][T11213] loop3: detected capacity change from 0 to 1024 [ 447.161927][ T4351] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.245271][ T4351] Buffer I/O error on dev loop3, logical block 0, async page read [ 449.129227][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 449.129239][ T26] audit: type=1326 audit(1786505130.049:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11266 comm="syz.3.2514" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66dd9e0d9 code=0x0 [ 449.549582][T11274] loop1: detected capacity change from 0 to 4096 [ 449.618752][T11274] ntfs: (device loop1): parse_options(): The disable_sparse option requires a boolean argument. [ 450.211358][T11265] loop6: detected capacity change from 0 to 40427 [ 450.320775][T11265] F2FS-fs (loop6): invalid crc value [ 450.370764][T11265] F2FS-fs (loop6): Found nat_bits in checkpoint [ 450.661306][T11265] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 450.867241][T11302] input: syz0 as /devices/virtual/input/input17 [ 450.927695][T11299] tap0: tun_chr_ioctl cmd 35108 [ 450.995078][ T8960] syz-executor: attempt to access beyond end of device [ 450.995078][ T8960] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 451.082033][T11308] netlink: 'syz.5.2523': attribute type 3 has an invalid length. [ 452.055301][ T5208] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 452.281944][ T5208] usb 2-1: Using ep0 maxpacket: 32 [ 452.313972][ T5208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.405541][ T5208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.464628][ T5208] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 452.535252][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.597993][ T5208] usb 2-1: config 0 descriptor?? [ 453.115576][ T5208] ft260 0003:0403:6030.000A: item fetching failed at offset 0/2 [ 453.172326][ T5208] ft260 0003:0403:6030.000A: failed to parse HID [ 453.178726][ T5208] ft260: probe of 0003:0403:6030.000A failed with error -22 [ 453.418447][ T5208] usb 2-1: USB disconnect, device number 13 [ 453.870742][T11371] loop6: detected capacity change from 0 to 64 [ 453.982455][T11371] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop6:00000002 [ 454.282746][T11375] loop2: detected capacity change from 0 to 4096 [ 454.431735][T11384] loop6: detected capacity change from 0 to 1024 [ 454.545570][T11384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.621200][T11384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.718140][T11384] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 454.816824][T11384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 454.830195][T11389] loop1: detected capacity change from 0 to 1764 [ 454.837679][ T4277] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 454.880295][ T4277] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 454.904172][T11384] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 455.313071][ T8960] EXT4-fs (loop6): unmounting filesystem. [ 456.471720][T11422] loop5: detected capacity change from 0 to 1024 [ 456.525715][T11417] loop1: detected capacity change from 0 to 8192 [ 456.638400][T11417] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 456.878475][T11417] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 457.022758][T11417] REISERFS (device loop1): using ordered data mode [ 457.111842][T11417] reiserfs: using flush barriers [ 457.183281][T11417] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 457.298972][T11416] loop6: detected capacity change from 0 to 32768 [ 457.410241][T11416] XFS (loop6): Mounting V5 Filesystem [ 457.420078][T11417] REISERFS (device loop1): checking transaction log (loop1) [ 457.491461][T11416] XFS (loop6): Ending clean mount [ 457.824915][ T8960] XFS (loop6): Unmounting Filesystem [ 458.040212][T11417] REISERFS (device loop1): Using tea hash to sort names [ 458.134615][T11417] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 458.869674][T11455] loop5: detected capacity change from 0 to 512 [ 459.039681][T11455] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 459.169938][T11455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 459.277111][T11455] System zones: 0-1, 15-15, 18-18, 34-34 [ 459.332625][T11455] EXT4-fs (loop5): orphan cleanup on readonly fs [ 459.339057][T11455] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 459.520126][T11455] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 459.731873][T11455] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 459.873361][T11455] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2575: bg 0: block 40: padding at end of block bitmap is not set [ 460.053537][T11455] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 460.168365][T11455] EXT4-fs (loop5): 1 truncate cleaned up [ 460.216951][T11455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 460.239510][T11462] loop2: detected capacity change from 0 to 32768 [ 460.274380][T11462] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2577 (11462) [ 460.419088][T11462] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 460.461540][T11455] EXT4-fs (loop5): shut down requested (2) [ 460.517544][T11462] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 460.585524][T11462] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 460.663152][T11462] BTRFS info (device loop2): use zstd compression, level 3 [ 460.713942][T11462] BTRFS info (device loop2): use no compression [ 460.774327][T11462] BTRFS info (device loop2): using free space tree [ 460.831497][T11482] loop1: detected capacity change from 0 to 1024 [ 460.868095][ T6096] EXT4-fs (loop5): unmounting filesystem. [ 460.969024][T11499] loop6: detected capacity change from 0 to 256 [ 460.984945][T11462] BTRFS info (device loop2): enabling ssd optimizations [ 461.088876][T11499] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x0ab85e4d, utbl_chksum : 0xe619d30d) [ 461.643872][ T4277] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 461.881911][ T5208] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 462.122093][ T5208] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.147930][ T5208] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.175348][ T5208] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.195383][ T5208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.242036][T11513] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 462.583232][ T5215] usb 4-1: USB disconnect, device number 12 [ 463.613258][T11534] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2601'. [ 463.675867][T11534] sch_fq: defrate 678942120 ignored. [ 463.687527][T11538] loop6: detected capacity change from 0 to 512 [ 463.745414][T11536] loop5: detected capacity change from 0 to 512 [ 463.783527][T11538] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 463.817529][T11540] loop2: detected capacity change from 0 to 512 [ 463.853433][T11538] EXT4-fs (loop6): invalid journal inode [ 463.878594][T11536] EXT4-fs (loop5): 1 truncate cleaned up [ 463.917411][T11540] EXT4-fs: Ignoring removed nobh option [ 463.924489][T11538] EXT4-fs (loop6): can't get journal size [ 463.983832][T11540] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 464.029927][T11536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 464.057773][T11538] EXT4-fs (loop6): 1 truncate cleaned up [ 464.096611][T11538] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 464.144514][T11540] EXT4-fs (loop2): 1 truncate cleaned up [ 464.150204][T11540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 464.310198][T11536] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2600: bg 0: block 465: padding at end of block bitmap is not set [ 464.530011][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 464.853565][ T8960] EXT4-fs (loop6): unmounting filesystem. [ 465.096848][ T6096] EXT4-fs (loop5): unmounting filesystem. [ 465.150519][T11560] loop1: detected capacity change from 0 to 2048 [ 465.425047][T11569] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.190879][T11564] loop3: detected capacity change from 0 to 32768 [ 466.250606][T11564] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2613 (11564) [ 466.354504][T11564] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 466.421317][ T4323] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 466.439223][T11564] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 466.513191][T11564] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 466.577852][T11564] BTRFS info (device loop3): use zstd compression, level 3 [ 466.622084][T11564] BTRFS info (device loop3): using free space tree [ 466.657279][ T4323] usb 2-1: unable to get BOS descriptor or descriptor too short [ 466.686302][ T4323] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 466.748988][ T4323] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 466.775211][T11598] loop6: detected capacity change from 0 to 1024 [ 466.847872][T11564] BTRFS info (device loop3): enabling ssd optimizations [ 466.857138][ T4323] usb 2-1: string descriptor 0 read error: -22 [ 466.897456][ T4323] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 466.970726][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.165464][ T4333] hfsplus: bad catalog file entry [ 467.170630][ T4333] hfsplus: b-tree write err: -5, ino 3 [ 467.388055][ T4288] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 467.414350][T11613] loop6: detected capacity change from 0 to 256 [ 467.504193][ T4323] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 467.916761][ T4323] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 467.999944][ T4323] snd-usb-audio: probe of 2-1:1.2 failed with error -2 [ 468.041607][ T4323] usb 2-1: USB disconnect, device number 14 [ 468.050181][T11616] loop2: detected capacity change from 0 to 128 [ 468.060243][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.460498][T11618] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 469.126993][T11630] loop1: detected capacity change from 0 to 1024 [ 469.585565][T11643] loop3: detected capacity change from 0 to 512 [ 469.657118][T11643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 469.707250][T11643] System zones: 1-12 [ 469.750563][T11643] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2638: Directory hole found for htree index block 0 [ 469.838923][T11643] EXT4-fs (loop3): Remounting filesystem read-only [ 469.854582][T11647] loop2: detected capacity change from 0 to 1024 [ 469.885326][T11643] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 469.941949][T11643] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2638: Directory hole found for htree index block 0 [ 470.020600][T11643] EXT4-fs (loop3): Remounting filesystem read-only [ 470.049415][T11643] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 470.107769][T11643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 470.169197][T11643] EXT4-fs (loop3): unmounting filesystem. [ 470.320798][T11643] loop3: detected capacity change from 0 to 512 [ 470.418885][T11643] EXT4-fs: Ignoring removed oldalloc option [ 470.466688][T11643] EXT4-fs (loop3): 1 truncate cleaned up [ 470.521863][T11643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 470.531412][T11657] netlink: 'syz.2.2642': attribute type 1 has an invalid length. [ 470.617255][T11643] EXT4-fs: can't change dax mount option while remounting [ 470.861421][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 471.828276][T11690] loop6: detected capacity change from 0 to 256 [ 472.102080][T11692] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.627983][T11706] loop1: detected capacity change from 0 to 4096 [ 472.781436][T11708] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 473.335441][T11714] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 473.801850][ T5216] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 473.935964][T11727] loop1: detected capacity change from 0 to 512 [ 473.987415][T11727] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.2671: bad orphan inode 11862016 [ 474.002072][ T5216] usb 6-1: Using ep0 maxpacket: 8 [ 474.020123][ T5216] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 474.056675][ T5216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.098458][ T5216] pvrusb2: Hardware description: Terratec Grabster AV400 [ 474.107240][T11727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 474.134825][ T5216] pvrusb2: ********** [ 474.144085][ T5216] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 474.163761][T11727] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.183860][ T5216] pvrusb2: Important functionality might not be entirely working. [ 474.203746][ T5216] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 474.277900][ T5216] pvrusb2: ********** [ 474.309595][ T2313] pvrusb2: Invalid write control endpoint [ 474.539419][ T4276] EXT4-fs (loop1): unmounting filesystem. [ 474.588621][ T2313] pvrusb2: Invalid write control endpoint [ 474.635391][ T2313] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 474.714023][ T2313] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 474.738647][T11737] loop2: detected capacity change from 0 to 256 [ 474.763212][ T2313] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 474.824175][T11738] loop3: detected capacity change from 0 to 1024 [ 474.850950][ T2313] pvrusb2: Device being rendered inoperable [ 474.881247][T11737] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 474.927249][T11720] pvrusb2: Attempted to execute control transfer when device not ok [ 474.952456][T11738] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.2675: lblock 2 mapped to illegal pblock 2 (length 1) [ 475.040568][T11738] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 475.073300][ T2313] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 475.084169][ T5212] usb 6-1: USB disconnect, device number 5 [ 475.101970][ T2313] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 475.111031][T11738] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.2675: lblock 0 mapped to illegal pblock 48 (length 1) [ 475.178119][ T2313] pvrusb2: Attached sub-driver cx25840 [ 475.217896][T11738] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 475.247106][ T2313] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 475.291854][T11738] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2675: Failed to acquire dquot type 0 [ 475.313542][ T2313] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 475.341308][T11738] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 475.399583][T11738] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.2675: mark_inode_dirty error [ 475.455749][T11738] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 475.511528][T11738] EXT4-fs (loop3): 1 orphan inode deleted [ 475.522216][ T46] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 475.548459][T11738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 475.577132][ T46] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 475.608346][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 475.645894][ T46] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 475.664476][T11738] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm syz.3.2675: lblock 1 mapped to illegal pblock 1 (length 1) [ 475.739484][T11738] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1 [ 475.795861][T11738] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 60928 [ 475.844530][T11738] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.2675: Failed to acquire dquot type 0 [ 475.990243][T11752] loop1: detected capacity change from 0 to 4096 [ 476.004932][ T4288] EXT4-fs (loop3): unmounting filesystem. [ 476.015969][ T4340] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 476.071137][ T4340] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 476.131189][ T4340] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0 [ 476.179783][T11758] loop2: detected capacity change from 0 to 8 [ 476.193417][T11752] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 476.219763][ T4288] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 476.298091][T11758] SQUASHFS error: Failed to read block 0x1000629: -5 [ 476.348269][ T4288] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 476.378972][T11758] SQUASHFS error: Unable to read metadata cache entry [1000629] [ 476.411658][ T4288] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 476.432233][T11758] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 477.080291][ T4276] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 477.916368][T11776] loop3: detected capacity change from 0 to 4096 [ 477.959385][T11776] EXT4-fs: Ignoring removed orlov option [ 478.011539][T11776] ext4: Unknown parameter 'euid>00000000000000000000' [ 478.287115][T11782] loop2: detected capacity change from 0 to 128 [ 478.455004][T11787] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2696'. [ 478.527568][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'. [ 478.610476][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2696'. [ 478.796542][ T5212] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 479.048127][ T5212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.069284][T11802] ieee802154 phy0 wpan0: encryption failed: -22 [ 479.088704][ T5212] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.128556][ T5212] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.172069][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.238229][T11805] loop3: detected capacity change from 0 to 4096 [ 479.335190][T11805] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 479.476777][ T5212] usb 2-1: GET_CAPABILITIES returned 0 [ 479.505289][ T5212] usbtmc 2-1:16.0: can't read capabilities [ 479.540322][T11809] loop6: detected capacity change from 0 to 256 [ 479.635448][T11809] FAT-fs (loop6): Directory bread(block 1285) failed [ 479.704796][T11809] FAT-fs (loop6): Directory bread(block 1286) failed [ 479.745473][T11809] FAT-fs (loop6): Directory bread(block 1287) failed [ 479.793401][ T5212] usb 2-1: USB disconnect, device number 15 [ 479.823069][T11809] FAT-fs (loop6): Directory bread(block 1288) failed [ 479.898388][T11811] nvme_fcloop: unknown parameter or missing value 'wwpn' [ 479.918984][T11809] FAT-fs (loop6): Directory bread(block 1285) failed [ 479.969099][T11813] loop3: detected capacity change from 0 to 128 [ 479.978468][T11809] FAT-fs (loop6): Directory bread(block 1286) failed [ 480.026840][T11809] FAT-fs (loop6): Directory bread(block 1287) failed [ 480.041571][T11813] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 480.088417][T11809] FAT-fs (loop6): Directory bread(block 1288) failed [ 480.116346][T11813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.331843][ T5212] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 481.374156][T11790] loop5: detected capacity change from 0 to 40427 [ 481.486309][T11790] F2FS-fs (loop5): invalid crc value [ 481.531789][ T5212] usb 7-1: Using ep0 maxpacket: 32 [ 481.554338][T11790] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 481.566603][ T5212] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 481.619398][ T5212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 481.686965][ T5212] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 481.727592][ T5212] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 481.780947][ T5212] usb 7-1: Product: syz [ 481.799586][ T5212] usb 7-1: Manufacturer: syz [ 481.819729][ T5212] usb 7-1: SerialNumber: syz [ 481.849304][ T5212] usb 7-1: config 0 descriptor?? [ 481.883485][ T5212] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.930150][ T5212] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 482.148657][ T7] usb 7-1: USB disconnect, device number 10 [ 482.155030][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 482.209776][ T7] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 482.347105][T11830] ldusb: No device or device unplugged -19 [ 482.670958][T11851] loop3: detected capacity change from 0 to 1024 [ 482.743920][T11851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 482.823697][T11851] ext4 filesystem being mounted at /638/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.928902][T11851] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.2724: lblock 0 mapped to illegal pblock 0 (length 6) [ 483.051939][T11854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 483.140224][T11860] loop6: detected capacity change from 0 to 128 [ 483.152384][T11851] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 483.208017][T11851] EXT4-fs (loop3): This should not happen!! Data will be lost [ 483.208017][T11851] [ 483.317842][T11858] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 483.386765][T11858] EXT4-fs (loop3): This should not happen!! Data will be lost [ 483.386765][T11858] [ 483.452057][T11858] EXT4-fs (loop3): Total free blocks count 0 [ 483.477669][T11858] EXT4-fs (loop3): Free/Dirty block details [ 483.512816][T11868] ------------[ cut here ]------------ [ 483.518831][T11868] WARNING: CPU: 0 PID: 11868 at kernel/trace/ring_buffer.c:4571 rb_get_reader_page+0xabf/0xcd0 [ 483.529266][T11868] Modules linked in: [ 483.533178][T11868] CPU: 0 PID: 11868 Comm: syz.6.2728 Not tainted syzkaller #0 [ 483.541124][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.551203][T11868] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 483.557044][T11868] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 78 37 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 06 39 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 483.576837][T11868] RSP: 0018:ffffc900047af820 EFLAGS: 00010002 [ 483.582935][T11868] RAX: 1ffff11002e8f101 RBX: 1ffff11002e8e876 RCX: ffffffff8185237a [ 483.590913][T11868] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017470408 [ 483.598890][T11868] RBP: ffffc900047af9b0 R08: ffff88801747040b R09: 1ffff11002e8e081 [ 483.606868][T11868] R10: dffffc0000000000 R11: ffffed1002e8e082 R12: ffff888017478810 [ 483.614861][T11868] R13: 0000000000000ff0 R14: 1ffff11002e8e873 R15: ffff888017470400 [ 483.622847][T11868] FS: 00007f02d26ef6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 483.631808][T11868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.638481][T11868] CR2: 0000001b30216ff8 CR3: 0000000040f32000 CR4: 00000000003506f0 [ 483.646550][T11868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.654528][T11868] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.662503][T11868] Call Trace: [ 483.665782][T11868] [ 483.668735][T11868] ? ring_buffer_read_page+0x1370/0x1370 [ 483.674386][T11868] ? mark_lock+0x94/0x320 [ 483.678727][T11868] ? do_raw_spin_lock+0x128/0x2f0 [ 483.683766][T11868] rb_buffer_peek+0x5e/0x940 [ 483.688398][T11868] ring_buffer_peek+0x1f8/0x440 [ 483.693271][T11868] ? ring_buffer_iter_empty+0x340/0x340 [ 483.698817][T11868] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 483.704815][T11868] ? lock_chain_count+0x20/0x20 [ 483.709677][T11868] ? _find_next_bit+0x87/0x130 [ 483.714535][T11868] __find_next_entry+0x33f/0x6c0 [ 483.719505][T11868] ? trace_find_next_entry+0x3a0/0x3a0 [ 483.725767][T11868] tracing_read_pipe+0x3bd/0xb10 [ 483.730764][T11868] ? s_show+0x300/0x300 [ 483.734944][T11868] vfs_read+0x2db/0x960 [ 483.739170][T11868] ? kernel_read+0x1e0/0x1e0 [ 483.743779][T11868] ? __fget_files+0x28/0x460 [ 483.748385][T11868] ? __fget_files+0x3fc/0x460 [ 483.753086][T11868] ? __fdget_pos+0x2ae/0x360 [ 483.757690][T11868] ? ksys_read+0x70/0x260 [ 483.762054][T11868] ksys_read+0x14d/0x260 [ 483.766314][T11868] ? vfs_write+0x9a0/0x9a0 [ 483.770748][T11868] ? lockdep_hardirqs_on+0x94/0x140 [ 483.775958][T11868] do_syscall_64+0x4c/0xa0 [ 483.780400][T11868] ? clear_bhb_loop+0x60/0xb0 [ 483.785105][T11868] ? clear_bhb_loop+0x60/0xb0 [ 483.789794][T11868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.795785][T11868] RIP: 0033:0x7f02d179e0d9 [ 483.800209][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.819909][T11868] RSP: 002b:00007f02d26ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.828329][T11868] RAX: ffffffffffffffda RBX: 00007f02d1a25fa0 RCX: 00007f02d179e0d9 [ 483.836308][T11868] RDX: 00000000000000f0 RSI: 0000000000000000 RDI: 0000000000000003 [ 483.844288][T11868] RBP: 00007f02d1835024 R08: 0000000000000000 R09: 0000000000000000 [ 483.852282][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.860258][T11868] R13: 00007f02d1a26038 R14: 00007f02d1a25fa0 R15: 00007ffe2a23bc48 [ 483.868272][T11868] [ 483.871323][T11868] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 483.878623][T11868] CPU: 0 PID: 11868 Comm: syz.6.2728 Not tainted syzkaller #0 [ 483.886089][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.896235][T11868] Call Trace: [ 483.899520][T11868] [ 483.902575][T11868] dump_stack_lvl+0x188/0x24e [ 483.907270][T11868] ? memcpy+0x3c/0x60 [ 483.911261][T11868] ? show_regs_print_info+0x12/0x12 [ 483.916474][T11868] ? load_image+0x410/0x410 [ 483.921026][T11868] panic+0x2d3/0x710 [ 483.924949][T11868] ? bpf_jit_dump+0xd0/0xd0 [ 483.929469][T11868] __warn+0x2f8/0x4f0 [ 483.933471][T11868] ? rb_get_reader_page+0xabf/0xcd0 [ 483.938683][T11868] ? rb_get_reader_page+0xabf/0xcd0 [ 483.943892][T11868] report_bug+0x2ba/0x4f0 [ 483.948252][T11868] ? rb_get_reader_page+0xabf/0xcd0 [ 483.953463][T11868] handle_bug+0x3a/0x70 [ 483.957635][T11868] exc_invalid_op+0x16/0x40 [ 483.962196][T11868] asm_exc_invalid_op+0x16/0x20 [ 483.967063][T11868] RIP: 0010:rb_get_reader_page+0xabf/0xcd0 [ 483.972876][T11868] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 78 37 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 06 39 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 483.992509][T11868] RSP: 0018:ffffc900047af820 EFLAGS: 00010002 [ 483.998588][T11868] RAX: 1ffff11002e8f101 RBX: 1ffff11002e8e876 RCX: ffffffff8185237a [ 484.006583][T11868] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017470408 [ 484.014565][T11868] RBP: ffffc900047af9b0 R08: ffff88801747040b R09: 1ffff11002e8e081 [ 484.022650][T11868] R10: dffffc0000000000 R11: ffffed1002e8e082 R12: ffff888017478810 [ 484.030653][T11868] R13: 0000000000000ff0 R14: 1ffff11002e8e873 R15: ffff888017470400 [ 484.038729][T11868] ? rb_get_reader_page+0xaba/0xcd0 [ 484.043976][T11868] ? ring_buffer_read_page+0x1370/0x1370 [ 484.049720][T11868] ? mark_lock+0x94/0x320 [ 484.054064][T11868] ? do_raw_spin_lock+0x128/0x2f0 [ 484.059119][T11868] rb_buffer_peek+0x5e/0x940 [ 484.063721][T11868] ring_buffer_peek+0x1f8/0x440 [ 484.068588][T11868] ? ring_buffer_iter_empty+0x340/0x340 [ 484.074137][T11868] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.080143][T11868] ? lock_chain_count+0x20/0x20 [ 484.085004][T11868] ? _find_next_bit+0x87/0x130 [ 484.089799][T11868] __find_next_entry+0x33f/0x6c0 [ 484.094759][T11868] ? trace_find_next_entry+0x3a0/0x3a0 [ 484.100235][T11868] tracing_read_pipe+0x3bd/0xb10 [ 484.105197][T11868] ? s_show+0x300/0x300 [ 484.109393][T11868] vfs_read+0x2db/0x960 [ 484.113759][T11868] ? kernel_read+0x1e0/0x1e0 [ 484.118381][T11868] ? __fget_files+0x28/0x460 [ 484.123001][T11868] ? __fget_files+0x3fc/0x460 [ 484.127877][T11868] ? __fdget_pos+0x2ae/0x360 [ 484.132483][T11868] ? ksys_read+0x70/0x260 [ 484.136830][T11868] ksys_read+0x14d/0x260 [ 484.141105][T11868] ? vfs_write+0x9a0/0x9a0 [ 484.145554][T11868] ? lockdep_hardirqs_on+0x94/0x140 [ 484.150761][T11868] do_syscall_64+0x4c/0xa0 [ 484.155194][T11868] ? clear_bhb_loop+0x60/0xb0 [ 484.159984][T11868] ? clear_bhb_loop+0x60/0xb0 [ 484.164671][T11868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.170570][T11868] RIP: 0033:0x7f02d179e0d9 [ 484.174996][T11868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.194887][T11868] RSP: 002b:00007f02d26ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.203317][T11868] RAX: ffffffffffffffda RBX: 00007f02d1a25fa0 RCX: 00007f02d179e0d9 [ 484.211317][T11868] RDX: 00000000000000f0 RSI: 0000000000000000 RDI: 0000000000000003 [ 484.219306][T11868] RBP: 00007f02d1835024 R08: 0000000000000000 R09: 0000000000000000 [ 484.227328][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.235327][T11868] R13: 00007f02d1a26038 R14: 00007f02d1a25fa0 R15: 00007ffe2a23bc48 [ 484.243338][T11868] [ 484.246451][T11868] Kernel Offset: disabled [ 484.250981][T11868] Rebooting in 86400 seconds..