last executing test programs: 20.279258728s ago: executing program 2 (id=700): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1004001, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@commit={'commit', 0x3d, 0x6}}, {@barrier={'barrier', 0x3d, 0x6}}, {@coherency_full}, {@localflocks}, {@acl}, {@intr}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") sendfile(r0, r0, 0x0, 0x2000007ff) 18.438669272s ago: executing program 2 (id=714): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) 18.09036907s ago: executing program 2 (id=719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x4, 0x8000) poll(&(0x7f0000004140)=[{r1}, {r0, 0x109}], 0x2, 0xffff) 17.830892417s ago: executing program 2 (id=731): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@fat=@gid}, {@rodir}, {@shortname_lower}, {@fat=@usefree}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_mixed}, {@numtail}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000001100)="$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") chroot(&(0x7f0000000100)='./file0\x00') 17.468490665s ago: executing program 2 (id=726): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000180)={[{@nointegrity}, {@uid}, {@grpquota}, {@errors_continue}, {@gid}, {@errors_remount}, {}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@errors_continue}, {@grpquota}]}, 0x23, 0x6305, &(0x7f0000008580)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 15.832024154s ago: executing program 2 (id=744): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 6.000044887s ago: executing program 3 (id=824): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0xd, 0x4, "bd6a01dd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.285768375s ago: executing program 4 (id=835): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/90, 0x5a}], 0x1, 0x0, 0xd) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 5.095275819s ago: executing program 4 (id=838): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000080)) 4.853700225s ago: executing program 4 (id=843): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000000100)={[{@barrier}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x6}}, {@noacl}, {@noinode_cache}, {@noenospc_debug}, {@noacl}, {@discard_async}, {@barrier}, {@commit={'commit', 0x3d, 0x364a4c1e}}]}, 0x1, 0x55bb, &(0x7f0000010200)="$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") lseek(r0, 0xfff, 0x1) 4.079325043s ago: executing program 3 (id=845): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x8, "19cd5f6c", {0x1, 0x7ff, 0x1, 0x81, 0xd}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.918885767s ago: executing program 4 (id=848): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 3.259490043s ago: executing program 0 (id=849): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xff, "340b7832c1efd131b8e6498c25f54a2700", 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) 3.013985529s ago: executing program 0 (id=851): syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000100000100c280000800050058a3cacc08000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) 2.721221565s ago: executing program 0 (id=852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0x64008000) 2.617558028s ago: executing program 4 (id=854): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)={0x40, 0xa, 0x2e, {0x2e, 0xb, "e75bcf47a88a34d27f000000000000000300000069bde6cf2fa3d3d4832d0e95ce301ffca51ba9727cb05508"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.375533464s ago: executing program 0 (id=856): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0xd, 0x4, "bd6a01dd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.001801233s ago: executing program 1 (id=859): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="12d03717a316", 'batadv0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth0_to_bond\x00'}}) 1.186671812s ago: executing program 3 (id=860): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x8) 1.185565432s ago: executing program 1 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 982.854107ms ago: executing program 1 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000005000000fd0900008400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 857.45396ms ago: executing program 1 (id=862): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) 802.863261ms ago: executing program 32 (id=744): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 695.279004ms ago: executing program 3 (id=864): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES64=r0], 0x58}}, 0x0) 690.984804ms ago: executing program 1 (id=874): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000005c00)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x166, &(0x7f0000000380)="$eJzs2j9Lw0AYBvA3KCgdHZ0KlSpokzTRuuoobu4Opeba4MWWRJB20U2cBIVz8EsIfgI/gWR006WDXyJyzaFpVAj+aRp4fksfeNvrm7v2prfmd706C2pEa72rveGC3/XKDXuzxeqsSbEdIirLEEbRjU6fPL/Xw4j0L96Qr6XX+LWy0ha7F8zljpV3SwAAAAAAAAAAAAAAAAAAAAAAkFG1pEKpI7xz5nKnnqgG/cFhk3PHD4jmc+owX9WymuEiJvit3B97bCtWZd6SyRXbvqyb45+/VmG5I/hLen+NY69nBP1BzfWabaftHFmW3TDXTXPDMkZrGekVq3eqJwqjezMxTqY/7tuynpg3e8oyb6bOf3bRFZcn6W/7OP+ihtPpaOOPgkb/sLJGdCYPe+KPo03JrhYvaES/+yVEM/Ef/MdtZLs9C2B0/w2JaM6uPMj7T291+YEqTuIw8318APjOWwAAAP//14QzQA==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x40) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 544.649757ms ago: executing program 3 (id=865): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x6c, 0x2, {0xc, 0x8fd344c1}}, 0x0) 483.132389ms ago: executing program 0 (id=866): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 213.966415ms ago: executing program 1 (id=867): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x18, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x201}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 213.806745ms ago: executing program 4 (id=868): mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x2010002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 69.133288ms ago: executing program 0 (id=869): r0 = socket$inet6(0xa, 0x3, 0x89) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e1f, 0x0, 0x7ffc, 0x5, 0x2}, {0xfffe, 0x200000004, 0x80040000000009, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x10005, 0xfffffffffffffffd, 0x7}, 0x4, 0x0, 0x1, 0x0, 0x6}, {{@in=@remote, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x34fe, 0x1, 0x0, 0x0, 0x1, 0xb, 0x400}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb}, 0x1c) 0s ago: executing program 3 (id=871): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0xa8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0x40}, {0x78, 0x2, [@TCA_BASIC_EMATCHES={0x74, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4005, 0xe, 0x1}, {0x5, 0xc0, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x4, 0x8, 0x4}, {0x3, 0x3, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0xa00}, {0x7, 0x81, 0x1, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xca, 0x8, 0x1000}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xd31, 0x2, 0x4}, {0x400, 0x2, 0x0, "93b9"}}}]}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): - 0 [ 88.544189][ T4278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.554103][ T4278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.565487][ T4278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.614833][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.637692][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.687584][ T4277] device veth0_vlan entered promiscuous mode [ 88.712143][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.722026][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.748514][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.757133][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.766529][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.775112][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.812043][ T4277] device veth1_vlan entered promiscuous mode [ 88.852561][ T4273] device veth0_vlan entered promiscuous mode [ 88.910564][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.919946][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.929910][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.944119][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.967152][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.976230][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.016085][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.039661][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.047776][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.056556][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.069574][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.080378][ T4273] device veth1_vlan entered promiscuous mode [ 89.105971][ T4277] device veth0_macvtap entered promiscuous mode [ 89.164673][ T4277] device veth1_macvtap entered promiscuous mode [ 89.177673][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.199042][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.232880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.245387][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.254895][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.264530][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.273154][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.286506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.296287][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.319500][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.331305][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.342356][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.354291][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.366941][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.377872][ T4273] device veth0_macvtap entered promiscuous mode [ 89.398227][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.406469][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.422030][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.433526][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.441826][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.451031][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.463516][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.475776][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.487900][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.498847][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.511161][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.529782][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.539480][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.549709][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.559238][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.571671][ T4273] device veth1_macvtap entered promiscuous mode [ 89.580720][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.590920][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.599805][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.609680][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.628597][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.636487][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.680011][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.691246][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.702928][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.714254][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.724373][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.735085][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.747660][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.759111][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.767039][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.787068][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.800075][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.809717][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.819670][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.827762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.860010][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.873411][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.886208][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.897467][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.908949][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.919737][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.932241][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.953303][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.004398][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.015994][ T4285] device veth0_vlan entered promiscuous mode [ 90.031173][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.040816][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.051373][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.060488][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.086904][ T4285] device veth1_vlan entered promiscuous mode [ 90.191540][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.198761][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 90.200484][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 90.205529][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 90.211565][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 90.217967][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 90.268687][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.283927][ T4285] device veth0_macvtap entered promiscuous mode [ 90.319867][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.330179][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.349450][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.361552][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.371139][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.396887][ T4285] device veth1_macvtap entered promiscuous mode [ 90.409113][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.420391][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.518959][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.525759][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.527594][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.557714][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.572941][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.611724][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.627949][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.647013][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.660332][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.675830][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.691068][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.711148][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.719866][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.738823][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.747679][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.759991][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.775403][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.795871][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.817725][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.843171][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.859537][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.872717][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.885436][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.899203][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.912010][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.919302][ T128] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.954501][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.992739][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.006089][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.020585][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.037881][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.047041][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066411][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.115595][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.130996][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.158290][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.181455][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.201573][ T128] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 91.222641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.234722][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.315335][ T128] usb 2-1: config 0 descriptor?? [ 91.341172][ T4378] loop2: detected capacity change from 0 to 512 [ 91.377974][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.408009][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.443456][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.453315][ T4378] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 91.467354][ T4378] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 91.477673][ T4378] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.3: iget: bad i_size value: 12154757448730 [ 91.492456][ T4378] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3: couldn't read orphan inode 13 (err -117) [ 91.506032][ T4378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.614233][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.631581][ T4378] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 91.653625][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.682989][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.762131][ T128] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 91.791899][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 91.798752][ T128] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 91.879818][ T7] cfg80211: failed to load regulatory.db [ 92.045004][ T27] usb 2-1: USB disconnect, device number 2 [ 92.251248][ T4398] [U] ø [ 92.354187][ T4396] fido_id[4396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 92.473104][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 92.724595][ T4413] netlink: 'syz.0.21': attribute type 6 has an invalid length. [ 92.771972][ T4416] loop2: detected capacity change from 0 to 512 [ 92.807435][ T4416] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.862493][ T4415] loop4: detected capacity change from 0 to 4096 [ 92.876191][ T4416] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.23: invalid indirect mapped block 256 (level 2) [ 92.912889][ T4416] EXT4-fs (loop2): 2 truncates cleaned up [ 92.961084][ T4416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.131001][ T4415] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 93.272042][ T4415] ntfs3: loop4: failed to convert "0000" to iso8859-2 [ 93.309574][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 93.330662][ T4415] ntfs3: loop4: failed to convert name for inode 1e. [ 93.572445][ T4431] loop2: detected capacity change from 0 to 512 [ 93.682688][ T4429] loop0: detected capacity change from 0 to 4096 [ 93.772880][ T4429] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 93.829771][ T4429] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 93.871584][ T4429] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 93.907096][ T4429] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 93.953980][ T4429] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 94.023650][ T4429] ntfs: volume version 3.1. [ 94.066115][ T4429] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 94.174413][ T4429] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 94.237603][ T4429] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 94.306105][ T4429] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 94.337273][ T4429] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 94.576914][ T4446] loop3: detected capacity change from 0 to 512 [ 94.606367][ T4446] EXT4-fs: Ignoring removed i_version option [ 94.706036][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.745888][ T4446] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.910758][ T4435] loop1: detected capacity change from 0 to 32768 [ 94.972723][ T4435] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.32 (4435) [ 95.004423][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 95.125449][ T4435] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.183519][ T4435] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 95.210279][ T4435] BTRFS info (device loop1): setting nodatacow, compression disabled [ 95.249983][ T4435] BTRFS info (device loop1): turning on flush-on-commit [ 95.257275][ T4435] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.299980][ T4435] BTRFS info (device loop1): use lzo compression, level 0 [ 95.320087][ T4435] BTRFS info (device loop1): setting nodatasum [ 95.326380][ T4435] BTRFS info (device loop1): use no compression [ 95.347121][ T4435] BTRFS info (device loop1): trying to use backup root at mount time [ 95.383482][ T4435] BTRFS info (device loop1): max_inline at 0 [ 95.393790][ T4435] BTRFS info (device loop1): using free space tree [ 95.497946][ T7] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 95.586476][ T46] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 95.635245][ T4435] BTRFS warning (device loop1): couldn't read tree root [ 95.663148][ T4435] BTRFS warning (device loop1): try to load backup roots slot 1 [ 95.678297][ T46] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 95.730369][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 251: 255, using maximum allowed: 30 [ 95.742673][ T4435] BTRFS warning (device loop1): couldn't read tree root [ 95.756400][ T4435] BTRFS warning (device loop1): try to load backup roots slot 2 [ 95.773642][ T7] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 95.802480][ T4435] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 95.808031][ T7] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 95.838767][ T4435] BTRFS warning (device loop1): couldn't read tree root [ 95.846225][ T4435] BTRFS warning (device loop1): try to load backup roots slot 3 [ 95.875065][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.889569][ T7] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 95.918433][ T4435] BTRFS info (device loop1): enabling ssd optimizations [ 95.926890][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.936955][ T4435] BTRFS info (device loop1): rebuilding free space tree [ 95.950539][ T7] usb 4-1: config 0 descriptor?? [ 95.968641][ T4459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.987179][ T4452] loop0: detected capacity change from 0 to 32768 [ 96.112475][ T4435] BTRFS info (device loop1): checking UUID tree [ 96.126512][ T4452] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 96.151735][ T4454] loop4: detected capacity change from 0 to 40427 [ 96.173740][ T4454] F2FS-fs (loop4): invalid crc value [ 96.182980][ T4452] XFS (loop0): Mounting V5 Filesystem [ 96.206105][ T4454] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.364981][ T4452] XFS (loop0): Ending clean mount [ 96.406945][ T7] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 96.424416][ T7] acrux 0003:1A34:0802.0002: unexpected long global item [ 96.439739][ T7] acrux 0003:1A34:0802.0002: parse failed [ 96.470584][ T7] acrux: probe of 0003:1A34:0802.0002 failed with error -22 [ 96.524496][ T4452] XFS (loop0): Quotacheck needed: Please wait. [ 96.539450][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.600252][ T4454] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 96.653097][ T4351] usb 4-1: USB disconnect, device number 2 [ 96.706443][ T4452] XFS (loop0): Quotacheck: Done. [ 96.938984][ T4397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (4397) [ 97.039553][ T4285] syz-executor: attempt to access beyond end of device [ 97.039553][ T4285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.073023][ T4273] XFS (loop0): Unmounting Filesystem [ 97.239585][ T4512] ======================================================= [ 97.239585][ T4512] WARNING: The mand mount option has been deprecated and [ 97.239585][ T4512] and is ignored by this kernel. Remove the mand [ 97.239585][ T4512] option from the mount to silence this warning. [ 97.239585][ T4512] ======================================================= [ 97.249389][ T4504] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.539692][ T4504] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.568093][ T4504] usb 3-1: config 0 has no interfaces? [ 97.573659][ T4504] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 97.608702][ T4504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.625788][ T4516] loop1: detected capacity change from 0 to 1024 [ 97.652293][ T4504] usb 3-1: config 0 descriptor?? [ 97.664979][ T4516] EXT4-fs: Ignoring removed bh option [ 97.744821][ T4516] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.782638][ T4516] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.826084][ T4521] netlink: 194188 bytes leftover after parsing attributes in process `syz.0.50'. [ 97.898259][ T4504] usb 3-1: USB disconnect, device number 2 [ 97.922311][ T4521] netlink: zone id is out of range [ 97.927620][ T4521] netlink: zone id is out of range [ 97.958067][ T4521] netlink: zone id is out of range [ 97.966901][ T4521] netlink: zone id is out of range [ 97.983474][ T4521] netlink: zone id is out of range [ 98.010534][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 98.020922][ T4521] netlink: zone id is out of range [ 98.044478][ T4521] netlink: zone id is out of range [ 98.059076][ T4521] netlink: zone id is out of range [ 98.073852][ T4521] netlink: zone id is out of range [ 98.090699][ T4521] netlink: zone id is out of range [ 98.110066][ T4525] loop4: detected capacity change from 0 to 8 [ 98.182446][ T4527] option changes via remount are deprecated (pid=4526 comm=syz.1.55) [ 98.194010][ T4525] unable to read id index table [ 98.711081][ T4538] loop2: detected capacity change from 0 to 4096 [ 98.748047][ T4351] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.824338][ T4541] loop3: detected capacity change from 0 to 4096 [ 98.833983][ T4538] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.926447][ T4538] ntfs3: loop2: failed to convert "0000" to iso8859-2 [ 98.949795][ T4351] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.959520][ T4543] loop4: detected capacity change from 0 to 4096 [ 98.966014][ T4544] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.978705][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.992983][ T4538] ntfs3: loop2: failed to convert name for inode 1e. [ 99.024731][ T4543] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 99.040201][ T4351] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.069946][ T4351] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.107920][ T4351] usb 2-1: Manufacturer: syz [ 99.144019][ T4351] usb 2-1: config 0 descriptor?? [ 99.198695][ T4543] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 99.518006][ T4351] rc_core: IR keymap rc-hauppauge not found [ 99.524185][ T4351] Registered IR keymap rc-empty [ 99.554750][ T4529] loop0: detected capacity change from 0 to 32768 [ 99.577556][ T4351] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 99.605759][ T4351] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 99.736637][ T4529] XFS (loop0): Mounting V5 Filesystem [ 99.788164][ T4554] rc rc0: two consecutive events of type space [ 99.912350][ T4529] XFS (loop0): Ending clean mount [ 99.927666][ T4567] devpts: called with bogus options [ 99.954503][ T4566] loop2: detected capacity change from 0 to 64 [ 99.980791][ T4529] XFS (loop0): Quotacheck needed: Please wait. [ 100.025195][ T4504] usb 2-1: USB disconnect, device number 3 [ 100.068667][ T4529] XFS (loop0): Quotacheck: Done. [ 100.147582][ T4572] netlink: 'syz.3.70': attribute type 29 has an invalid length. [ 100.193622][ T4572] netlink: 'syz.3.70': attribute type 29 has an invalid length. [ 100.225898][ T4573] netlink: 'syz.3.70': attribute type 29 has an invalid length. [ 100.301119][ T4273] XFS (loop0): Unmounting Filesystem [ 100.794083][ T4587] option changes via remount are deprecated (pid=4585 comm=syz.1.75) [ 100.835098][ T4587] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 101.171440][ T4591] loop1: detected capacity change from 0 to 4096 [ 101.186529][ T4570] loop4: detected capacity change from 0 to 32768 [ 101.348824][ T4570] XFS (loop4): Mounting V5 Filesystem [ 101.356116][ T4598] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.517641][ T4589] loop2: detected capacity change from 0 to 32768 [ 101.603141][ T4570] XFS (loop4): Ending clean mount [ 101.708877][ T4605] read_mapping_page failed! [ 101.749234][ T4605] ERROR: (device loop2): txCommit: [ 101.749234][ T4605] [ 101.825638][ T4285] XFS (loop4): Unmounting Filesystem [ 101.894516][ T4570] syz.4.71 (4570) used greatest stack depth: 20528 bytes left [ 101.937425][ T4579] XFS (loop0): Mounting V5 Filesystem [ 102.173276][ T4579] XFS (loop0): Ending clean mount [ 102.230247][ T4579] XFS (loop0): Quotacheck needed: Please wait. [ 102.356246][ T4579] XFS (loop0): Quotacheck: Done. [ 102.655866][ T4273] XFS (loop0): Unmounting Filesystem [ 103.005295][ T4641] set_capacity_and_notify: 1 callbacks suppressed [ 103.005311][ T4641] loop1: detected capacity change from 0 to 64 [ 103.319014][ T4633] loop3: detected capacity change from 0 to 32768 [ 103.329697][ T4646] loop1: detected capacity change from 0 to 4096 [ 103.353148][ T4352] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.423236][ T4633] JBD2: Ignoring recovery information on journal [ 103.443937][ T4646] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 103.531005][ T4646] ntfs3: loop1: failed to convert "0000" to iso8859-2 [ 103.545659][ T4633] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.560255][ T4352] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 103.588366][ T4352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.600003][ T4646] ntfs3: loop1: failed to convert name for inode 1e. [ 103.618043][ T4352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 103.677907][ T4352] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 103.687026][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.760515][ T4352] usb 3-1: config 0 descriptor?? [ 103.850756][ T4656] loop1: detected capacity change from 0 to 512 [ 103.937706][ T4655] loop4: detected capacity change from 0 to 4096 [ 103.965929][ T4656] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.986295][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 103.998159][ T4655] __ntfs_error: 3 callbacks suppressed [ 103.998180][ T4655] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 104.037934][ T4656] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.128002][ T4656] System zones: 0-1, 15-15, 18-18, 34-34 [ 104.156466][ T4656] EXT4-fs (loop1): orphan cleanup on readonly fs [ 104.186960][ T4352] ntrig 0003:1B96:000F.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.2-1/input0 [ 104.195411][ T4656] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 104.238080][ T4656] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.267934][ T4655] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 104.311609][ T4656] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 104.341252][ T4655] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 104.365319][ T4656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.98: bg 0: block 40: padding at end of block bitmap is not set [ 104.394572][ T4352] usb 3-1: USB disconnect, device number 3 [ 104.401219][ T4655] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 104.463516][ T4656] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 104.475604][ T4655] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 104.509457][ T4655] ntfs: volume version 3.1. [ 104.540781][ T4656] EXT4-fs (loop1): 1 truncate cleaned up [ 104.546521][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.584128][ T4660] loop3: detected capacity change from 0 to 2048 [ 104.590044][ T4655] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 104.629197][ T4656] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.645629][ T4656] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 104.647966][ T4655] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 104.704614][ T4660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.720396][ T4655] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 104.765282][ T4661] fido_id[4661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 104.803221][ T4655] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 104.875437][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 105.432843][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 105.482949][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 105.528594][ T4502] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.727898][ T4502] usb 5-1: Using ep0 maxpacket: 8 [ 105.737239][ T4502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 105.773540][ T4502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.801551][ T4502] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.822883][ T4502] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 105.853359][ T4502] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 105.878107][ T4502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.909147][ T4502] usb 5-1: config 0 descriptor?? [ 105.921697][ T4673] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.072201][ T4670] loop1: detected capacity change from 0 to 32768 [ 106.154452][ T4670] XFS (loop1): Mounting V5 Filesystem [ 106.251902][ T4286] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 106.353277][ T4670] XFS (loop1): Ending clean mount [ 106.391059][ T4670] XFS (loop1): Quotacheck needed: Please wait. [ 106.457787][ T4288] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 106.458025][ T4352] usb 5-1: USB disconnect, device number 2 [ 106.480067][ T4684] loop0: detected capacity change from 0 to 32768 [ 106.528697][ T4684] JBD2: Ignoring recovery information on journal [ 106.545983][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'. [ 106.613184][ T4670] XFS (loop1): Quotacheck: Done. [ 106.686821][ T4684] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.710843][ T4279] XFS (loop1): Unmounting Filesystem [ 107.081481][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 107.218319][ T4712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.234862][ T4713] loop2: detected capacity change from 0 to 256 [ 107.293910][ T4713] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.311028][ T4712] overlayfs: maximum fs stacking depth exceeded [ 107.695596][ T4721] loop0: detected capacity change from 0 to 64 [ 107.749532][ T4725] Bluetooth: MGMT ver 1.22 [ 108.057398][ T4731] loop1: detected capacity change from 0 to 256 [ 108.141520][ T4731] FAT-fs (loop1): Directory bread(block 64) failed [ 108.178377][ T4731] FAT-fs (loop1): Directory bread(block 65) failed [ 108.208722][ T4731] FAT-fs (loop1): Directory bread(block 66) failed [ 108.215328][ T4731] FAT-fs (loop1): Directory bread(block 67) failed [ 108.248080][ T4731] FAT-fs (loop1): Directory bread(block 68) failed [ 108.265604][ T4731] FAT-fs (loop1): Directory bread(block 69) failed [ 108.283179][ T4731] FAT-fs (loop1): Directory bread(block 70) failed [ 108.310397][ T4731] FAT-fs (loop1): Directory bread(block 71) failed [ 108.317096][ T4731] FAT-fs (loop1): Directory bread(block 72) failed [ 108.364632][ T4731] FAT-fs (loop1): Directory bread(block 73) failed [ 108.371574][ T4503] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.567997][ T4503] usb 5-1: Using ep0 maxpacket: 16 [ 108.576686][ T4503] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.618298][ T4503] usb 5-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 108.627415][ T4503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.683645][ T4751] raw_sendmsg: syz.2.138 forgot to set AF_INET. Fix it! [ 108.709368][ T4503] usb 5-1: config 0 descriptor?? [ 108.955293][ T4758] loop3: detected capacity change from 0 to 512 [ 109.093703][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 109.140167][ T4503] wacom 0003:056A:033C.0004: unknown main item tag 0x2 [ 109.150582][ T4503] wacom 0003:056A:033C.0004: unknown main item tag 0x6 [ 109.158427][ T4503] wacom 0003:056A:033C.0004: ignoring exceeding usage max [ 109.158506][ T4758] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.174082][ T4503] wacom 0003:056A:033C.0004: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 109.188804][ T4503] wacom 0003:056A:033C.0004: hidraw0: USB HID v0.91 Device [HID 056a:033c] on usb-dummy_hcd.4-1/input0 [ 109.203581][ T4503] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033C.0004/input/input6 [ 109.263250][ T4758] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 109.295141][ T4768] loop1: detected capacity change from 0 to 164 [ 109.445229][ T4351] usb 5-1: USB disconnect, device number 3 [ 109.524131][ T4768] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 109.553536][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 109.713246][ T4769] fido_id[4769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 110.134728][ T4784] loop3: detected capacity change from 0 to 4096 [ 110.177203][ T4784] __ntfs_error: 4 callbacks suppressed [ 110.177219][ T4784] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 110.235081][ T4784] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 110.256073][ T4784] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 110.330768][ T4784] ntfs: volume version 3.1. [ 110.542778][ T4278] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 111.002248][ T4807] loop1: detected capacity change from 0 to 2048 [ 111.015635][ T4780] loop2: detected capacity change from 0 to 32768 [ 111.102713][ T4807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.125209][ T4807] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.177054][ T4807] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.163: bg 0: block 345: padding at end of block bitmap is not set [ 111.299884][ T4807] EXT4-fs (loop1): Remounting filesystem read-only [ 111.444385][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 111.505910][ T4796] loop4: detected capacity change from 0 to 32768 [ 111.527112][ T4815] loop0: detected capacity change from 0 to 2048 [ 111.542092][ T4796] XFS: ikeep mount option is deprecated. [ 111.636487][ T4796] XFS (loop4): Mounting V5 Filesystem [ 111.657362][ T4823] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.865849][ T4796] XFS (loop4): Ending clean mount [ 111.881060][ T4796] XFS (loop4): Quotacheck needed: Please wait. [ 112.003406][ T4796] XFS (loop4): Quotacheck: Done. [ 112.229795][ T4285] XFS (loop4): Unmounting Filesystem [ 112.372415][ T4806] loop3: detected capacity change from 0 to 32768 [ 112.485336][ T4806] XFS (loop3): Mounting V5 Filesystem [ 112.496414][ T4838] loop2: detected capacity change from 0 to 8192 [ 112.576828][ T4838] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 112.619976][ T4838] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 112.629631][ T4838] REISERFS (device loop2): using ordered data mode [ 112.636386][ T4838] reiserfs: using flush barriers [ 112.644781][ T4838] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.662151][ T4838] REISERFS (device loop2): checking transaction log (loop2) [ 112.759613][ T4806] XFS (loop3): Ending clean mount [ 112.865070][ T4853] program syz.0.178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.925531][ T4838] REISERFS (device loop2): Using tea hash to sort names [ 112.981005][ T4838] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 113.088696][ T4278] XFS (loop3): Unmounting Filesystem [ 113.111381][ T4806] syz.3.164 (4806) used greatest stack depth: 19600 bytes left [ 113.454740][ T4863] tipc: Enabling of bearer rejected, failed to enable media [ 113.946406][ T4875] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 114.784814][ T4876] loop0: detected capacity change from 0 to 32768 [ 114.842567][ T4906] loop4: detected capacity change from 0 to 1024 [ 114.856010][ T4876] JBD2: Ignoring recovery information on journal [ 114.903624][ T4909] Zero length message leads to an empty skb [ 115.033344][ T4876] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.073523][ T4916] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 115.325324][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 115.422634][ T4921] netlink: 'syz.4.207': attribute type 9 has an invalid length. [ 115.457557][ T4921] netlink: 379 bytes leftover after parsing attributes in process `syz.4.207'. [ 115.579327][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.797465][ T4322] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 115.824359][ T4322] usb 3-1: config 0 has no interface number 0 [ 115.844430][ T4322] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.890908][ T4322] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 115.918072][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.924860][ T4938] loop3: detected capacity change from 0 to 1024 [ 115.926150][ T4322] usb 3-1: Product: syz [ 115.926171][ T4322] usb 3-1: Manufacturer: syz [ 115.926186][ T4322] usb 3-1: SerialNumber: syz [ 115.949499][ T4322] usb 3-1: config 0 descriptor?? [ 115.959119][ T4938] EXT4-fs: Ignoring removed orlov option [ 116.004136][ T4322] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 116.018269][ T4504] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.041556][ T4938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.209170][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 116.228431][ T4504] usb 1-1: Using ep0 maxpacket: 16 [ 116.236727][ T4504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.295565][ T4351] usb 3-1: USB disconnect, device number 4 [ 116.298320][ T4504] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.334342][ T4351] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 116.352525][ T4946] loop4: detected capacity change from 0 to 256 [ 116.359501][ T4504] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.379491][ T4946] exfat: Deprecated parameter 'namecase' [ 116.414437][ T4504] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.437148][ T4946] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 116.460224][ T4504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.492958][ T4504] usb 1-1: config 0 descriptor?? [ 116.935261][ T4504] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 116.966438][ T4504] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 116.980243][ T4937] loop1: detected capacity change from 0 to 32768 [ 117.004389][ T4504] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 117.045477][ T4504] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 117.125380][ T4504] microsoft 0003:045E:07DA.0005: no inputs found [ 117.141385][ T4504] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 117.155013][ T4504] usb 1-1: USB disconnect, device number 2 [ 117.164958][ T4937] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 117.178329][ T4937] XFS (loop1): Mounting V5 Filesystem [ 117.277076][ T4937] XFS (loop1): Ending clean mount [ 117.289838][ T4937] XFS (loop1): Quotacheck needed: Please wait. [ 117.400921][ T4937] XFS (loop1): Quotacheck: Done. [ 117.521768][ T4967] fido_id[4967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 117.594579][ T4279] XFS (loop1): Unmounting Filesystem [ 117.873391][ T4982] loop2: detected capacity change from 0 to 256 [ 117.900546][ T4978] loop3: detected capacity change from 0 to 1024 [ 117.951634][ T4978] EXT4-fs: Ignoring removed oldalloc option [ 117.997425][ T4978] EXT4-fs: Ignoring removed bh option [ 118.096252][ T4978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=4000e018, mo2=0000] [ 118.156319][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 118.201302][ T4960] loop4: detected capacity change from 0 to 40427 [ 118.220176][ T4960] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.229546][ T4960] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.251879][ T4960] F2FS-fs (loop4): invalid crc value [ 118.282486][ T4978] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.228: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.285929][ T4960] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.383369][ T4978] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 118.430193][ T4978] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.228: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.483572][ T4978] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 118.525233][ T4978] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.228: Failed to acquire dquot type 0 [ 118.558418][ T4978] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 118.591578][ T4960] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.610047][ T4960] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.628755][ T4978] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.228: mark_inode_dirty error [ 118.655451][ T4978] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 118.683241][ T4978] EXT4-fs (loop3): 1 orphan inode deleted [ 118.704470][ T4326] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.708359][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 118.786853][ T4326] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 118.818880][ T4326] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 118.935946][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 118.959547][ T4278] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 119.027380][ T4278] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 119.077222][ T4278] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 119.445608][ T5016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'. [ 119.548204][ T5019] loop3: detected capacity change from 0 to 64 [ 119.608126][ T4503] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.743697][ T5026] loop0: detected capacity change from 0 to 2048 [ 119.810253][ T4503] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.824935][ T5026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.844933][ T4503] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.906035][ T4503] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.946379][ T4503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.990172][ T5014] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.360358][ T4352] usb 2-1: USB disconnect, device number 4 [ 121.126280][ T5056] loop3: detected capacity change from 0 to 1024 [ 121.166736][ T5029] loop4: detected capacity change from 0 to 40427 [ 121.187179][ T5029] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 121.199739][ T5056] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 121.228207][ T5029] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 121.241216][ T5029] F2FS-fs (loop4): invalid crc value [ 121.253841][ T5056] System zones: 0-1, 3-36 [ 121.317265][ T5056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.330740][ T5067] capability: warning: `syz.0.265' uses deprecated v2 capabilities in a way that may be insecure [ 121.333875][ T5029] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 121.569384][ T5073] loop0: detected capacity change from 0 to 256 [ 121.696682][ T5029] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 121.714428][ T5029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 121.753999][ T5073] FAT-fs (loop0): Directory bread(block 64) failed [ 121.763755][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 121.785706][ T5073] FAT-fs (loop0): Directory bread(block 65) failed [ 121.836248][ T5073] FAT-fs (loop0): Directory bread(block 66) failed [ 121.879939][ T5073] FAT-fs (loop0): Directory bread(block 67) failed [ 121.886612][ T5073] FAT-fs (loop0): Directory bread(block 68) failed [ 121.944201][ T5073] FAT-fs (loop0): Directory bread(block 69) failed [ 121.966399][ T5073] FAT-fs (loop0): Directory bread(block 70) failed [ 121.994824][ T5073] FAT-fs (loop0): Directory bread(block 71) failed [ 122.005966][ T5073] FAT-fs (loop0): Directory bread(block 72) failed [ 122.020646][ T5073] FAT-fs (loop0): Directory bread(block 73) failed [ 122.533638][ T5087] loop3: detected capacity change from 0 to 64 [ 122.888313][ T5093] loop3: detected capacity change from 0 to 1024 [ 123.045805][ T5074] loop1: detected capacity change from 0 to 40427 [ 123.071278][ T5096] loop4: detected capacity change from 0 to 512 [ 123.110026][ T5074] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.145321][ T5096] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.166275][ T5074] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.205046][ T5074] F2FS-fs (loop1): invalid crc value [ 123.233989][ T5096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.281282][ T5096] EXT4-fs (loop4): 1 truncate cleaned up [ 123.292290][ T5074] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.302071][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 123.389383][ T5096] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.278: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 123.426333][ T5096] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 123.440476][ T5081] loop2: detected capacity change from 0 to 32768 [ 123.474354][ T5104] netlink: 277 bytes leftover after parsing attributes in process `syz.3.280'. [ 123.518765][ T5074] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.546665][ T5074] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.568632][ T5081] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 123.622521][ T5081] XFS (loop2): Mounting V5 Filesystem [ 123.656381][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 123.789327][ T5081] XFS (loop2): Ending clean mount [ 123.830032][ T5081] XFS (loop2): Quotacheck needed: Please wait. [ 123.936284][ T5081] XFS (loop2): Quotacheck: Done. [ 124.040673][ T26] audit: type=1400 audit(1785418240.677:2): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D85 pid=5122 comm="syz.0.285" [ 124.108056][ T4352] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.150799][ T4277] XFS (loop2): Unmounting Filesystem [ 124.302648][ T4352] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 124.324323][ T4352] usb 4-1: config 0 has no interface number 0 [ 124.337623][ T4352] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.409926][ T4352] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.437990][ T4352] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 124.478238][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.567434][ T4352] usb 4-1: config 0 descriptor?? [ 124.847945][ T4504] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 124.991652][ T4352] elo 0003:04E7:0030.0006: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input22 [ 125.049186][ T4504] usb 3-1: not running at top speed; connect to a high speed hub [ 125.061560][ T4504] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 125.106226][ T4504] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 125.136471][ T4504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.182815][ T4504] usb 3-1: Product: syz [ 125.187054][ T4504] usb 3-1: Manufacturer: syz [ 125.227510][ T4352] usb 4-1: USB disconnect, device number 3 [ 125.228249][ T4504] usb 3-1: SerialNumber: syz [ 125.305442][ T5146] fido_id[5146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 125.480001][ T5133] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 125.543241][ T4504] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 125.574326][ T4504] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 125.644970][ T4504] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 125.701744][ T4504] usb 3-1: USB disconnect, device number 5 [ 125.820309][ T5164] loop0: detected capacity change from 0 to 256 [ 125.876993][ T5164] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 125.941175][ T26] audit: type=1400 audit(1785418242.577:3): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.589936][ T5187] loop2: detected capacity change from 0 to 256 [ 126.670945][ T5187] FAT-fs (loop2): Directory bread(block 64) failed [ 126.691047][ T5187] FAT-fs (loop2): Directory bread(block 65) failed [ 126.718876][ T5187] FAT-fs (loop2): Directory bread(block 66) failed [ 126.745829][ T5187] FAT-fs (loop2): Directory bread(block 67) failed [ 126.773858][ T5187] FAT-fs (loop2): Directory bread(block 68) failed [ 126.801916][ T5187] FAT-fs (loop2): Directory bread(block 69) failed [ 126.824423][ T5187] FAT-fs (loop2): Directory bread(block 70) failed [ 126.863150][ T5187] FAT-fs (loop2): Directory bread(block 71) failed [ 126.896745][ T5187] FAT-fs (loop2): Directory bread(block 72) failed [ 126.917000][ T5187] FAT-fs (loop2): Directory bread(block 73) failed [ 127.481790][ T5217] loop1: detected capacity change from 0 to 1764 [ 127.567900][ T14] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 127.592508][ T5219] loop0: detected capacity change from 0 to 128 [ 127.610421][ T5219] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.662542][ T5213] loop3: detected capacity change from 0 to 8192 [ 127.674514][ T5219] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.771401][ T14] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 127.807923][ T14] usb 5-1: config 0 has no interface number 0 [ 127.865620][ T14] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 127.902195][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.934639][ T14] usb 5-1: Product: syz [ 127.948263][ T14] usb 5-1: Manufacturer: syz [ 127.970130][ T14] usb 5-1: SerialNumber: syz [ 127.987718][ T14] usb 5-1: config 0 descriptor?? [ 128.001369][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.208547][ T14] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 128.602164][ T5241] loop3: detected capacity change from 0 to 256 [ 128.614364][ T14] gspca_m5602: Failed to find a sensor [ 128.628415][ T14] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 128.655075][ T14] usb 5-1: USB disconnect, device number 4 [ 129.076566][ T5233] loop1: detected capacity change from 0 to 32768 [ 129.177403][ T5233] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 129.220202][ T5256] capability: warning: `syz.0.347' uses 32-bit capabilities (legacy support in use) [ 129.275177][ T5233] JBD2: Ignoring recovery information on journal [ 129.352648][ T5233] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.402477][ T26] audit: type=1326 audit(1785418246.037:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.2.348" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f720119df99 code=0x0 [ 129.613151][ T5233] syz.1.335 (5233) used greatest stack depth: 17872 bytes left [ 129.742918][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 130.585684][ T5302] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 130.820376][ T5311] netlink: 'syz.4.372': attribute type 41 has an invalid length. [ 131.251834][ T5300] loop1: detected capacity change from 0 to 32768 [ 131.292778][ T5300] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.367 (5300) [ 131.337464][ T5300] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 131.378131][ T5300] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 131.396582][ T5300] BTRFS info (device loop1): using free space tree [ 131.554482][ T5337] loop0: detected capacity change from 0 to 256 [ 131.621043][ T5337] FAT-fs (loop0): Directory bread(block 64) failed [ 131.638122][ T5337] FAT-fs (loop0): Directory bread(block 65) failed [ 131.644861][ T5337] FAT-fs (loop0): Directory bread(block 66) failed [ 131.668048][ T5337] FAT-fs (loop0): Directory bread(block 67) failed [ 131.686460][ T5337] FAT-fs (loop0): Directory bread(block 68) failed [ 131.737732][ T5349] netlink: 'syz.3.385': attribute type 41 has an invalid length. [ 131.795357][ T5337] FAT-fs (loop0): Directory bread(block 69) failed [ 131.802770][ T5337] FAT-fs (loop0): Directory bread(block 70) failed [ 131.848598][ T5337] FAT-fs (loop0): Directory bread(block 71) failed [ 131.857453][ T5337] FAT-fs (loop0): Directory bread(block 72) failed [ 131.862512][ T5354] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 131.897966][ T5337] FAT-fs (loop0): Directory bread(block 73) failed [ 131.924080][ T5300] BTRFS info (device loop1): enabling ssd optimizations [ 131.982893][ T5360] loop3: detected capacity change from 0 to 256 [ 132.076725][ T5360] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 132.204031][ T4279] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.324237][ T5362] loop2: detected capacity change from 0 to 1764 [ 132.568188][ T4504] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.744786][ T5379] loop1: detected capacity change from 0 to 1024 [ 132.762697][ T4504] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.789731][ T4504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.843260][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850660][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.871274][ T4504] usb 5-1: config 0 descriptor?? [ 132.892611][ T4504] cp210x 5-1:0.0: cp210x converter detected [ 132.947596][ T5386] loop0: detected capacity change from 0 to 1024 [ 133.024794][ T5386] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 133.092724][ T5386] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 133.308341][ T4504] usb 5-1: cp210x converter now attached to ttyUSB0 [ 133.343593][ T5379] EXT4-fs: Ignoring removed i_version option [ 133.359947][ T5379] EXT4-fs: inline encryption not supported [ 133.421496][ T5379] EXT4-fs (loop1): Test dummy encryption mode enabled [ 133.463557][ T5379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0102] [ 133.493771][ T4504] usb 5-1: USB disconnect, device number 5 [ 133.509518][ T5379] System zones: 0-1, 3-36 [ 133.526031][ T4504] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.546397][ T4504] cp210x 5-1:0.0: device disconnected [ 133.593025][ T5379] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.785299][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 133.845419][ T5406] loop3: detected capacity change from 0 to 256 [ 133.953137][ T5406] FAT-fs (loop3): Directory bread(block 64) failed [ 133.972667][ T5406] FAT-fs (loop3): Directory bread(block 65) failed [ 134.000155][ T5406] FAT-fs (loop3): Directory bread(block 66) failed [ 134.006869][ T5406] FAT-fs (loop3): Directory bread(block 67) failed [ 134.044470][ T5406] FAT-fs (loop3): Directory bread(block 68) failed [ 134.058574][ T5406] FAT-fs (loop3): Directory bread(block 69) failed [ 134.081954][ T5406] FAT-fs (loop3): Directory bread(block 70) failed [ 134.097899][ T3599] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.115697][ T5406] FAT-fs (loop3): Directory bread(block 71) failed [ 134.132628][ T5406] FAT-fs (loop3): Directory bread(block 72) failed [ 134.152096][ T5406] FAT-fs (loop3): Directory bread(block 73) failed [ 134.222655][ T5374] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.310765][ T3599] usb 1-1: Using ep0 maxpacket: 8 [ 134.327735][ T3599] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 134.347368][ T3599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 134.359376][ T3599] usb 1-1: Product: syz [ 134.364000][ T3599] usb 1-1: Manufacturer: syz [ 134.374825][ T3599] usb 1-1: SerialNumber: syz [ 134.384755][ T3599] usb 1-1: config 0 descriptor?? [ 134.439715][ T5374] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 134.450300][ T3599] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 134.458334][ T5374] usb 2-1: config 0 has no interface number 0 [ 134.464519][ T5374] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.498397][ T5374] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.539245][ T5374] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 134.557986][ T5374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.579183][ T5374] usb 2-1: config 0 descriptor?? [ 134.641347][ T3599] gspca_sn9c2028: read1 error -32 [ 134.847609][ T3599] gspca_sn9c2028: read1 error -71 [ 134.857876][ T5377] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 134.872088][ T3599] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 134.885420][ T3599] usb 1-1: USB disconnect, device number 3 [ 135.016974][ T5374] elo 0003:04E7:0030.0007: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input22 [ 135.072372][ T5377] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 135.094715][ T5377] usb 4-1: config 0 has no interface number 0 [ 135.113986][ T5377] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 135.133669][ T5377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.153626][ T5377] usb 4-1: Product: syz [ 135.164871][ T5377] usb 4-1: Manufacturer: syz [ 135.171734][ T5377] usb 4-1: SerialNumber: syz [ 135.179072][ T5377] usb 4-1: config 0 descriptor?? [ 135.216660][ T4504] usb 2-1: USB disconnect, device number 5 [ 135.283395][ T5438] fido_id[5438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 135.397594][ T5377] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 135.843312][ T5377] gspca_m5602: Failed to find a sensor [ 135.864372][ T5377] ALi m5602 4-1:0.88: ALi m5602 webcam failed [ 135.896761][ T5377] usb 4-1: USB disconnect, device number 4 [ 135.989520][ T26] audit: type=1326 audit(1785418252.627:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5465 comm="syz.1.428" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd84eb9df99 code=0x0 [ 136.455512][ T5461] loop4: detected capacity change from 0 to 32768 [ 136.795588][ T5485] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 137.344486][ T5479] loop3: detected capacity change from 0 to 32768 [ 137.446096][ T5479] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 137.517417][ T5479] JBD2: Ignoring recovery information on journal [ 137.729152][ T5479] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.914294][ T5497] loop4: detected capacity change from 0 to 32768 [ 137.949987][ T5511] loop2: detected capacity change from 0 to 128 [ 138.111693][ T5489] loop1: detected capacity change from 0 to 40427 [ 138.124669][ T5497] XFS (loop4): Mounting V5 Filesystem [ 138.136525][ T5489] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 138.187564][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 138.313011][ T5489] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.392957][ T5497] XFS (loop4): Ending clean mount [ 138.398290][ T5489] F2FS-fs (loop1): invalid crc value [ 138.457243][ T5489] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.620898][ T4285] XFS (loop4): Unmounting Filesystem [ 138.702807][ T5533] netlink: 194188 bytes leftover after parsing attributes in process `syz.2.453'. [ 138.717006][ T5489] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.757066][ T5489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.835476][ T5533] net_ratelimit: 12 callbacks suppressed [ 138.835493][ T5533] netlink: zone id is out of range [ 138.870477][ T5533] netlink: zone id is out of range [ 138.875705][ T5533] netlink: zone id is out of range [ 138.933872][ T5533] netlink: zone id is out of range [ 138.953065][ T5489] syz.1.441: attempt to access beyond end of device [ 138.953065][ T5489] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.977993][ T5533] netlink: zone id is out of range [ 138.992189][ T5533] netlink: zone id is out of range [ 139.008904][ T5533] netlink: zone id is out of range [ 139.045825][ T5533] netlink: zone id is out of range [ 139.098376][ T5533] netlink: zone id is out of range [ 139.115693][ T5533] netlink: zone id is out of range [ 139.180397][ T4279] syz-executor: attempt to access beyond end of device [ 139.180397][ T4279] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 139.243021][ T5542] loop4: detected capacity change from 0 to 128 [ 140.007649][ T5557] loop4: detected capacity change from 0 to 4096 [ 140.091309][ T5563] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.318087][ T5377] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 140.339720][ T5569] netlink: 194188 bytes leftover after parsing attributes in process `syz.1.470'. [ 140.539681][ T5377] usb 4-1: not running at top speed; connect to a high speed hub [ 140.566930][ T5377] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4 [ 140.612576][ T5377] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 140.625483][ T5575] loop4: detected capacity change from 0 to 1024 [ 140.632061][ T5377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.632120][ T5377] usb 4-1: Product: syz [ 140.632138][ T5377] usb 4-1: Manufacturer: syz [ 140.632156][ T5377] usb 4-1: SerialNumber: syz [ 140.718098][ T5575] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 140.753123][ T5552] loop2: detected capacity change from 0 to 32768 [ 140.860913][ T5561] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 140.888664][ T5575] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 140.911116][ T5377] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 140.955091][ T5377] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.984931][ T5552] XFS (loop2): Mounting V5 Filesystem [ 141.049686][ T5377] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 141.092991][ T5377] usb 4-1: USB disconnect, device number 5 [ 141.173919][ T5552] XFS (loop2): Ending clean mount [ 141.359445][ T4277] XFS (loop2): Unmounting Filesystem [ 141.370153][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.578003][ T3599] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 141.790970][ T3599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.828818][ T3599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.868018][ T3599] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 141.877172][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.928852][ T3599] usb 5-1: config 0 descriptor?? [ 142.351657][ T3599] elan 0003:04F3:0755.0008: failed to start in urb: -90 [ 142.395825][ T3599] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 142.458629][ T5623] loop2: detected capacity change from 0 to 64 [ 142.579047][ T3599] usb 5-1: USB disconnect, device number 6 [ 142.741539][ T5629] loop2: detected capacity change from 0 to 512 [ 142.755998][ T5625] fido_id[5625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 142.803718][ T5629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 142.842925][ T5629] System zones: 1-12 [ 142.893749][ T5629] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.494: error while reading EA inode 32 err=-116 [ 142.917936][ T5629] EXT4-fs (loop2): Remounting filesystem read-only [ 142.925153][ T5629] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 142.939408][ T5629] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.494: error while reading EA inode 32 err=-116 [ 142.956568][ T5629] EXT4-fs (loop2): Remounting filesystem read-only [ 142.963654][ T5629] EXT4-fs (loop2): 1 orphan inode deleted [ 142.977868][ T5629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.036917][ T5611] loop3: detected capacity change from 0 to 40427 [ 143.045197][ T5611] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 143.053921][ T5629] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.494: deleted inode referenced: 15 [ 143.066200][ T5611] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.081084][ T5629] EXT4-fs (loop2): Remounting filesystem read-only [ 143.120606][ T5611] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.226154][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 143.333790][ T5611] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 143.353125][ T5611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.422550][ T5640] loop1: detected capacity change from 0 to 2048 [ 143.452444][ T5636] loop4: detected capacity change from 0 to 1024 [ 143.499262][ T5636] EXT4-fs: Ignoring removed i_version option [ 143.515629][ T5636] EXT4-fs: inline encryption not supported [ 143.551787][ T5640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.553272][ T5620] loop0: detected capacity change from 0 to 32768 [ 143.579672][ T5636] EXT4-fs (loop4): Test dummy encryption mode enabled [ 143.644636][ T5636] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0102] [ 143.719175][ T5636] System zones: 0-1, 3-36 [ 143.796150][ T5636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.913122][ T5620] XFS (loop0): Mounting V5 Filesystem [ 144.006444][ T5620] XFS (loop0): Ending clean mount [ 144.089972][ T4273] XFS (loop0): Unmounting Filesystem [ 144.108753][ T3599] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.157756][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 144.292738][ T5662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.503'. [ 144.318227][ T3599] usb 2-1: Using ep0 maxpacket: 8 [ 144.334827][ T3599] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 144.368074][ T3599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 144.379864][ T3599] usb 2-1: Product: syz [ 144.384125][ T3599] usb 2-1: Manufacturer: syz [ 144.396434][ T3599] usb 2-1: SerialNumber: syz [ 144.423717][ T3599] usb 2-1: config 0 descriptor?? [ 144.470179][ T3599] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 144.674726][ T3599] gspca_sn9c2028: read1 error -32 [ 144.890597][ T3599] gspca_sn9c2028: read1 error -71 [ 144.895785][ T3599] sn9c2028: probe of 2-1:0.0 failed with error -71 [ 144.940028][ T3599] usb 2-1: USB disconnect, device number 6 [ 145.041256][ T5680] loop4: detected capacity change from 0 to 2048 [ 145.080073][ T5680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.133467][ T5684] loop3: detected capacity change from 0 to 164 [ 145.158928][ T5684] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 146.401869][ T5724] loop4: detected capacity change from 0 to 256 [ 146.424865][ T5724] exfat: Deprecated parameter 'utf8' [ 146.442484][ T5727] loop0: detected capacity change from 0 to 8 [ 146.469626][ T5724] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d) [ 146.497933][ T5377] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 146.601020][ T5727] SQUASHFS error: Unable to read directory block [2c0:35] [ 146.626900][ T5730] device syz_tun entered promiscuous mode [ 146.686020][ T5730] device macsec1 entered promiscuous mode [ 146.722392][ T5377] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 146.751831][ T5377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.777614][ T5377] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 146.799559][ T5377] usb 2-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 146.809115][ T5377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.846133][ T5377] usb 2-1: config 0 descriptor?? [ 146.855163][ T5734] FAT-fs (loop4): Directory bread(block 64) failed [ 146.879411][ T5734] FAT-fs (loop4): Directory bread(block 65) failed [ 146.887726][ T5730] device syz_tun left promiscuous mode [ 146.890462][ T5734] FAT-fs (loop4): Directory bread(block 66) failed [ 146.939098][ T5734] FAT-fs (loop4): Directory bread(block 67) failed [ 146.961071][ T5734] FAT-fs (loop4): Directory bread(block 68) failed [ 146.968290][ T5734] FAT-fs (loop4): Directory bread(block 69) failed [ 146.974978][ T5734] FAT-fs (loop4): Directory bread(block 70) failed [ 146.983648][ T5734] FAT-fs (loop4): Directory bread(block 71) failed [ 147.028140][ T5734] FAT-fs (loop4): Directory bread(block 72) failed [ 147.045142][ T5734] FAT-fs (loop4): Directory bread(block 73) failed [ 147.311788][ T5377] ntrig 0003:1B96:000F.0009: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.1-1/input0 [ 147.488420][ T4322] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.515140][ T5377] usb 2-1: USB disconnect, device number 7 [ 147.688535][ T4322] usb 1-1: Using ep0 maxpacket: 8 [ 147.699295][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 147.757885][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.790863][ T4322] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.818526][ T5747] fido_id[5747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 147.833276][ T4322] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 147.864615][ T4322] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 147.888215][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.927131][ T4322] usb 1-1: config 0 descriptor?? [ 147.957583][ T5736] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 148.143105][ T5759] set_capacity_and_notify: 1 callbacks suppressed [ 148.143123][ T5759] loop4: detected capacity change from 0 to 1024 [ 148.254326][ T4286] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 148.405669][ T5759] hfsplus: xattr searching failed [ 148.456374][ T4288] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 148.467581][ T4322] usb 1-1: USB disconnect, device number 4 [ 148.739267][ T5769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.780435][ T5769] overlayfs: maximum fs stacking depth exceeded [ 148.837007][ T5773] loop2: detected capacity change from 0 to 256 [ 148.930461][ T5773] FAT-fs (loop2): Directory bread(block 64) failed [ 148.969611][ T5773] FAT-fs (loop2): Directory bread(block 65) failed [ 148.976352][ T5773] FAT-fs (loop2): Directory bread(block 66) failed [ 149.028088][ T5773] FAT-fs (loop2): Directory bread(block 67) failed [ 149.040673][ T5773] FAT-fs (loop2): Directory bread(block 68) failed [ 149.057576][ T5773] FAT-fs (loop2): Directory bread(block 69) failed [ 149.089333][ T5777] loop1: detected capacity change from 0 to 512 [ 149.101475][ T5773] FAT-fs (loop2): Directory bread(block 70) failed [ 149.136045][ T5773] FAT-fs (loop2): Directory bread(block 71) failed [ 149.189727][ T5773] FAT-fs (loop2): Directory bread(block 72) failed [ 149.196340][ T5773] FAT-fs (loop2): Directory bread(block 73) failed [ 149.216769][ T5777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.289633][ T5777] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.372584][ T5777] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 149.620304][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 150.457710][ T5817] usb usb8: check_ctrlrecip: process 5817 (syz.4.576) requesting ep 01 but needs 81 [ 150.504677][ T5817] usb usb8: usbfs: process 5817 (syz.4.576) did not claim interface 0 before use [ 150.516273][ T5819] loop0: detected capacity change from 0 to 512 [ 150.593222][ T5819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 150.667983][ T5819] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.814769][ T5827] loop1: detected capacity change from 0 to 2048 [ 150.910579][ T5828] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.934875][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 151.001756][ T5802] loop3: detected capacity change from 0 to 32768 [ 151.099250][ T5802] XFS: ikeep mount option is deprecated. [ 151.255551][ T5802] XFS (loop3): Mounting V5 Filesystem [ 151.381431][ T5802] XFS (loop3): Ending clean mount [ 151.383858][ T5802] XFS (loop3): Quotacheck needed: Please wait. [ 151.436468][ T5802] XFS (loop3): Quotacheck: Done. [ 151.584993][ T4278] XFS (loop3): Unmounting Filesystem [ 152.198060][ T5834] loop0: detected capacity change from 0 to 40427 [ 152.217511][ T5834] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 152.242866][ T5834] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.330607][ T5834] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.424402][ T5848] loop1: detected capacity change from 0 to 32768 [ 152.530734][ T5848] JBD2: Ignoring recovery information on journal [ 152.557559][ T5840] loop4: detected capacity change from 0 to 40427 [ 152.562069][ T5834] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 152.607304][ T5840] F2FS-fs (loop4): invalid crc value [ 152.608429][ T5834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 152.695294][ T5840] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.861925][ T5848] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 152.903037][ T5840] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 152.970505][ T5840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 153.055356][ T5874] loop3: detected capacity change from 0 to 256 [ 153.164991][ T5874] FAT-fs (loop3): Directory bread(block 64) failed [ 153.202354][ T5874] FAT-fs (loop3): Directory bread(block 65) failed [ 153.221067][ T4279] ocfs2: Unmounting device (7,1) on (node local) [ 153.241480][ T4285] syz-executor: attempt to access beyond end of device [ 153.241480][ T4285] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 153.258715][ T5874] FAT-fs (loop3): Directory bread(block 66) failed [ 153.280036][ T5874] FAT-fs (loop3): Directory bread(block 67) failed [ 153.287062][ T5874] FAT-fs (loop3): Directory bread(block 68) failed [ 153.341001][ T5874] FAT-fs (loop3): Directory bread(block 69) failed [ 153.378321][ T5874] FAT-fs (loop3): Directory bread(block 70) failed [ 153.384939][ T5874] FAT-fs (loop3): Directory bread(block 71) failed [ 153.448637][ T5874] FAT-fs (loop3): Directory bread(block 72) failed [ 153.457550][ T5874] FAT-fs (loop3): Directory bread(block 73) failed [ 153.905805][ T5881] netlink: 'syz.1.595': attribute type 9 has an invalid length. [ 153.951078][ T5881] netlink: 379 bytes leftover after parsing attributes in process `syz.1.595'. [ 154.198125][ T4504] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 154.392780][ T5896] loop3: detected capacity change from 0 to 512 [ 154.417941][ T4504] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 154.440299][ T4504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.454312][ T5898] loop2: detected capacity change from 0 to 1024 [ 154.472143][ T4504] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 154.524840][ T5896] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 154.545479][ T5896] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 154.564077][ T4504] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 154.571247][ T5896] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 154.603370][ T4504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.631101][ T5898] hfsplus: xattr searching failed [ 154.636475][ T5896] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 154.653933][ T4504] usb 5-1: config 0 descriptor?? [ 154.670029][ T5896] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 154.712490][ T5896] EXT4-fs (loop3): failed to initialize system zone (-117) [ 154.734431][ T5896] EXT4-fs (loop3): mount failed [ 155.097370][ T4504] ntrig 0003:1B96:000F.000A: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.4-1/input0 [ 155.172181][ T5908] loop3: detected capacity change from 0 to 512 [ 155.222739][ T5908] EXT4-fs (loop3): orphan cleanup on readonly fs [ 155.272773][ T5908] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 155.286937][ T5908] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.307072][ T4504] usb 5-1: USB disconnect, device number 7 [ 155.314536][ T5908] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 155.339453][ T5908] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.609: couldn't read orphan inode 26 (err -116) [ 155.428167][ T5908] EXT4-fs (loop3): Remounting filesystem read-only [ 155.448504][ T5908] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.618994][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 155.677076][ T5917] loop2: detected capacity change from 0 to 1024 [ 155.689999][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.723656][ T5917] EXT4-fs: Ignoring removed orlov option [ 155.859006][ T5917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.939474][ T5904] loop1: detected capacity change from 0 to 40427 [ 155.951356][ T5904] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 155.972533][ T5926] device syz_tun entered promiscuous mode [ 155.980711][ T5926] device macsec1 entered promiscuous mode [ 156.013285][ T5904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.023741][ T5926] device syz_tun left promiscuous mode [ 156.110585][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 156.117997][ T5904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.287243][ T26] audit: type=1326 audit(1785418272.917:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 156.311121][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.398293][ T26] audit: type=1326 audit(1785418272.917:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 156.422089][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.452212][ T5904] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.478025][ T5904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.534498][ T26] audit: type=1326 audit(1785418272.957:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 156.558340][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.572754][ T5940] loop0: detected capacity change from 0 to 512 [ 156.626505][ T5940] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 156.659379][ T5940] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 156.683778][ T26] audit: type=1326 audit(1785418272.957:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 156.707977][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.715281][ T5940] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 156.775175][ T5940] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 156.813804][ T26] audit: type=1326 audit(1785418272.957:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 156.846212][ T5940] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 156.894896][ T5940] EXT4-fs (loop0): failed to initialize system zone (-117) [ 156.916175][ T26] audit: type=1326 audit(1785418272.957:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 156.946872][ T5940] EXT4-fs (loop0): mount failed [ 157.006182][ T26] audit: type=1326 audit(1785418272.957:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 157.127891][ T26] audit: type=1326 audit(1785418272.957:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 157.280059][ T26] audit: type=1326 audit(1785418272.957:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.618" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f720119df99 code=0x7ffc0000 [ 157.366855][ T5957] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 157.551006][ T5963] loop2: detected capacity change from 0 to 256 [ 157.631645][ T5963] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.657927][ T5377] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 157.708125][ T5963] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.810555][ T5969] loop4: detected capacity change from 0 to 512 [ 157.864451][ T5969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.883373][ T5377] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 157.981532][ T5377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.992933][ T5969] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.053392][ T5377] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 158.069824][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 158.116801][ T5377] usb 1-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 158.157053][ T5377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.214593][ T5377] usb 1-1: config 0 descriptor?? [ 158.396727][ T5983] loop3: detected capacity change from 0 to 64 [ 158.522422][ T5986] loop4: detected capacity change from 0 to 512 [ 158.540819][ T5986] EXT4-fs: Ignoring removed i_version option [ 158.599898][ T5986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.649759][ T5377] ntrig 0003:1B96:000F.000B: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.0-1/input0 [ 158.665168][ T5986] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.794298][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 158.808048][ T4502] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.858659][ T5377] usb 1-1: USB disconnect, device number 5 [ 159.008518][ T4502] usb 3-1: Using ep0 maxpacket: 16 [ 159.029768][ T4502] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.036469][ T4502] usb 3-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 159.087077][ T4502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.126797][ T4502] usb 3-1: config 0 descriptor?? [ 159.152776][ T5996] fido_id[5996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 159.222032][ T6001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.265210][ T6001] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.555019][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 159.591568][ T4502] wacom 0003:056A:033C.000C: unknown main item tag 0x2 [ 159.618344][ T4502] wacom 0003:056A:033C.000C: unknown main item tag 0x6 [ 159.635664][ T4502] wacom 0003:056A:033C.000C: ignoring exceeding usage max [ 159.657990][ T4502] wacom 0003:056A:033C.000C: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 159.688596][ T4502] wacom 0003:056A:033C.000C: hidraw0: USB HID v0.91 Device [HID 056a:033c] on usb-dummy_hcd.2-1/input0 [ 159.703736][ T6013] set_capacity_and_notify: 2 callbacks suppressed [ 159.703752][ T6013] loop4: detected capacity change from 0 to 1024 [ 159.730022][ T4502] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033C.000C/input/input13 [ 159.756878][ T6013] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 159.866496][ T4502] usb 3-1: USB disconnect, device number 6 [ 160.231457][ T6020] fido_id[6020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 160.813800][ T4502] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.835038][ T6045] loop4: detected capacity change from 0 to 512 [ 160.865073][ T6047] loop1: detected capacity change from 0 to 256 [ 160.890433][ T6047] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.924701][ T6045] EXT4-fs (loop4): orphan cleanup on readonly fs [ 160.944524][ T6045] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 160.975959][ T6047] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.987378][ T6045] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.027984][ T4502] usb 3-1: Using ep0 maxpacket: 16 [ 161.035430][ T4502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.048408][ T4502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.058672][ T4502] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.086387][ T4502] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.091798][ T6045] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 161.116806][ T4502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.127247][ T6045] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.668: couldn't read orphan inode 26 (err -116) [ 161.148376][ T4502] usb 3-1: config 0 descriptor?? [ 161.194173][ T6045] EXT4-fs (loop4): Remounting filesystem read-only [ 161.239594][ T6045] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.365408][ T6054] loop1: detected capacity change from 0 to 512 [ 161.432165][ T6054] EXT4-fs: Ignoring removed i_version option [ 161.524283][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 161.550304][ T6054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.569076][ T4502] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 161.577239][ T6054] ext4 filesystem being mounted at /112/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.655674][ T4502] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 161.725049][ T4502] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 161.733555][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 161.786563][ T4502] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 161.808883][ T5377] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.826570][ T4502] microsoft 0003:045E:07DA.000D: no inputs found [ 161.854498][ T4502] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 161.908253][ T4502] usb 3-1: USB disconnect, device number 7 [ 161.966484][ T6071] netlink: 277 bytes leftover after parsing attributes in process `syz.4.676'. [ 162.008157][ T5377] usb 1-1: Using ep0 maxpacket: 16 [ 162.015426][ T5377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.049190][ T5377] usb 1-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 162.049224][ T5377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.058458][ T5377] usb 1-1: config 0 descriptor?? [ 162.207378][ T6072] fido_id[6072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 162.480652][ T5377] wacom 0003:056A:033C.000E: unknown main item tag 0x2 [ 162.487673][ T5377] wacom 0003:056A:033C.000E: unknown main item tag 0x6 [ 162.545430][ T5377] wacom 0003:056A:033C.000E: ignoring exceeding usage max [ 162.575445][ T5377] wacom 0003:056A:033C.000E: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 162.607138][ T5377] wacom 0003:056A:033C.000E: hidraw0: USB HID v0.91 Device [HID 056a:033c] on usb-dummy_hcd.0-1/input0 [ 162.650005][ T5377] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033C.000E/input/input17 [ 162.777543][ T5377] usb 1-1: USB disconnect, device number 6 [ 162.807475][ T6087] loop3: detected capacity change from 0 to 256 [ 162.883048][ T6087] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 162.971641][ T6069] loop1: detected capacity change from 0 to 32768 [ 162.996784][ T26] audit: type=1400 audit(1785418279.627:15): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FD [ 163.080271][ T6092] fido_id[6092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 163.132824][ T6069] XFS (loop1): Mounting V5 Filesystem [ 163.167355][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.323846][ T6101] loop2: detected capacity change from 0 to 1024 [ 163.377069][ T6101] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 163.393833][ T6069] XFS (loop1): Ending clean mount [ 163.662031][ T4279] XFS (loop1): Unmounting Filesystem [ 163.933037][ T6119] loop3: detected capacity change from 0 to 512 [ 164.004433][ T6119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.091133][ T6119] EXT4-fs (loop3): 1 truncate cleaned up [ 164.098029][ T6119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 164.184575][ T6119] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.697: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 164.245282][ T6119] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 164.420023][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 164.538108][ T4322] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.558985][ T6135] sg_write: data in/out 2011/14 bytes for SCSI command 0x0-- guessing data in; [ 164.558985][ T6135] program syz.0.704 not setting count and/or reply_len properly [ 164.613148][ T6138] loop3: detected capacity change from 0 to 1024 [ 164.626588][ T6138] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 164.769566][ T4322] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.807299][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.836262][ T4322] usb 2-1: Product: syz [ 164.840888][ T4322] usb 2-1: Manufacturer: syz [ 164.845526][ T4322] usb 2-1: SerialNumber: syz [ 164.894790][ T4322] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.101777][ T6142] loop3: detected capacity change from 0 to 128 [ 165.129747][ T6142] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.167183][ T4322] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.185428][ T6142] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.323346][ T6144] loop4: detected capacity change from 0 to 8192 [ 165.426026][ T4326] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.580928][ T6130] loop2: detected capacity change from 0 to 32768 [ 165.641914][ T6130] JBD2: Ignoring recovery information on journal [ 165.782804][ T6130] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 166.085886][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 166.428080][ T4322] usb 2-1: Service connection timeout for: 256 [ 166.435000][ T4322] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 166.495734][ T4322] ath9k_htc: Failed to initialize the device [ 166.521046][ T4322] usb 2-1: ath9k_htc: USB layer deinitialized [ 166.746926][ T6179] loop2: detected capacity change from 0 to 128 [ 166.774448][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 166.792763][ T5377] usb 2-1: USB disconnect, device number 8 [ 167.729437][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.736'. [ 168.118292][ T6189] loop2: detected capacity change from 0 to 32768 [ 168.143400][ T6220] loop3: detected capacity change from 0 to 1024 [ 168.180031][ T6220] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.203066][ T6189] read_mapping_page failed! [ 168.243195][ T6220] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 168.255363][ T6189] ERROR: (device loop2): txCommit: [ 168.255363][ T6189] [ 168.267352][ T6220] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.291870][ T6220] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.740: Invalid inode table block 0 in block_group 0 [ 168.306702][ T6220] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 168.318588][ T6220] EXT4-fs error (device loop3): ext4_quota_write:7253: inode #3: comm syz.3.740: mark_inode_dirty error [ 168.340119][ T6223] jfs_unlink: dtDelete returned -116 [ 168.346157][ T6223] jfs_unlink: dtDelete returned -116 [ 168.352120][ T6220] Quota error (device loop3): write_blk: dquota write failed [ 168.452096][ T6220] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 168.492063][ T6220] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.740: Failed to acquire dquot type 0 [ 168.539600][ T6220] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.740: Invalid inode table block 0 in block_group 0 [ 168.557941][ T5377] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 168.602605][ T6220] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 168.635834][ T6220] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.740: mark_inode_dirty error [ 168.694442][ T6220] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.740: Invalid inode table block 0 in block_group 0 [ 168.732121][ T6220] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 168.766016][ T6220] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 168.786567][ T6220] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz.3.740: Invalid inode table block 0 in block_group 0 [ 168.791637][ T5377] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 168.818171][ T6220] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 168.841814][ T5377] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 168.853619][ T6220] EXT4-fs error (device loop3): ext4_truncate:4325: inode #15: comm syz.3.740: mark_inode_dirty error [ 168.860736][ T5377] usb 5-1: Product: syz [ 168.877886][ T5377] usb 5-1: Manufacturer: syz [ 168.888078][ T5377] usb 5-1: SerialNumber: syz [ 168.901416][ T5377] usb 5-1: config 0 descriptor?? [ 168.933758][ T6220] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 168.944238][ T6220] EXT4-fs (loop3): 1 truncate cleaned up [ 168.954983][ T6220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.989259][ T6236] [U]  [ 169.091601][ T6220] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 169.145633][ T5377] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 169.194838][ T6240] loop1: detected capacity change from 0 to 64 [ 169.218638][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 169.346309][ T5377] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 169.358806][ T5377] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 169.374471][ T5377] peak_usb 5-1:0.0 can0: sending command failure: -8 [ 169.408201][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 169.534987][ T5377] peak_usb: probe of 5-1:0.0 failed with error -8 [ 169.580813][ T5377] usb 5-1: USB disconnect, device number 8 [ 169.627455][ T6251] loop0: detected capacity change from 0 to 64 [ 169.709461][ T6251] MINIX-fs: mounting file system with errors, running fsck is recommended [ 169.775638][ T6251] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 170.291518][ T4504] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.364317][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.764'. [ 170.488706][ T4504] usb 1-1: Using ep0 maxpacket: 16 [ 170.495372][ T4504] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.543604][ T4504] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.553732][ T4504] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 170.574107][ T4504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.597255][ T4504] usb 1-1: config 0 descriptor?? [ 170.839546][ T6286] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6287] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6286] [ 170.953569][ T5374] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 171.026090][ T4504] wacom 0003:056A:5000.000F: unknown main item tag 0x0 [ 171.058268][ T4504] wacom 0003:056A:5000.000F: unknown main item tag 0x6 [ 171.079317][ T4504] wacom 0003:056A:5000.000F: ignoring exceeding usage max [ 171.138889][ T4504] wacom 0003:056A:5000.000F: hidraw0: USB HID v0.05 Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0 [ 171.169226][ T5374] usb 2-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.196040][ T5374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.206886][ T5374] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 171.233919][ T5374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.266497][ T5374] usb 2-1: config 0 descriptor?? [ 171.276996][ T5377] kernel write not supported for file /307/net/sockstat (pid: 5377 comm: kworker/0:17) [ 171.308153][ T5377] usb 1-1: USB disconnect, device number 7 [ 171.442836][ T6292] fido_id[6292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 171.710513][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0xd [ 171.717552][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.745389][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.754186][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.768534][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.775765][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.798632][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.805688][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x0 [ 171.853785][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x3 [ 171.877943][ T5374] lg-g15 0003:046D:C22E.0010: unknown main item tag 0x7 [ 171.916862][ T5374] lg-g15 0003:046D:C22E.0010: hidraw0: USB HID v0.09 Device [HID 046d:c22e] on usb-dummy_hcd.1-1/input0 [ 171.975316][ T5374] usb 2-1: USB disconnect, device number 9 [ 172.190165][ T6301] device bridge1 entered promiscuous mode [ 172.216785][ T6301] team0: Port device bridge1 added [ 172.241045][ T6299] fido_id[6299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.713215][ T6314] loop0: detected capacity change from 0 to 1024 [ 172.773217][ T6314] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.855184][ T6314] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 172.889264][ T6314] EXT4-fs (loop0): orphan cleanup on readonly fs [ 173.013168][ T6314] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.782: Invalid inode table block 0 in block_group 0 [ 173.088788][ T6314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 173.106131][ T6314] EXT4-fs error (device loop0): ext4_quota_write:7253: inode #3: comm syz.0.782: mark_inode_dirty error [ 173.138227][ T6314] Quota error (device loop0): write_blk: dquota write failed [ 173.148955][ T6314] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 173.172976][ T6314] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.782: Failed to acquire dquot type 0 [ 173.189385][ T6319] loop1: detected capacity change from 0 to 4096 [ 173.222857][ T6319] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 173.248047][ T6319] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 173.283182][ T6314] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.782: Invalid inode table block 0 in block_group 0 [ 173.330939][ T6314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 173.382097][ T6319] ntfs: volume version 3.1. [ 173.386980][ T6314] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.782: mark_inode_dirty error [ 173.400964][ T6319] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 173.435212][ T6319] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 173.464065][ T6319] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 173.500905][ T6314] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.782: Invalid inode table block 0 in block_group 0 [ 173.558178][ T6314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 173.587899][ T6314] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 173.618251][ T6314] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.782: Invalid inode table block 0 in block_group 0 [ 173.649129][ T6314] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 173.675913][ T6314] EXT4-fs error (device loop0): ext4_truncate:4325: inode #15: comm syz.0.782: mark_inode_dirty error [ 173.699675][ T6314] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 173.788734][ T6314] EXT4-fs (loop0): 1 truncate cleaned up [ 173.811942][ T6314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 173.851557][ T4288] Bluetooth: hci4: unknown advertising packet type: 0x6e [ 173.851632][ T4288] Bluetooth: hci4: unknown advertising packet type: 0x7f [ 173.859880][ T4288] Bluetooth: hci4: Malformed LE Event: 0x02 [ 173.951257][ T6314] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 174.099566][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 174.741084][ T6346] loop0: detected capacity change from 0 to 64 [ 174.794544][ T6333] loop3: detected capacity change from 0 to 32768 [ 174.823934][ T6346] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 174.858466][ T6333] [ 174.858466][ T6333] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.858466][ T6333] [ 175.128591][ T6351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.801'. [ 175.193632][ T6353] loop0: detected capacity change from 0 to 512 [ 175.336681][ T6353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.345740][ T6333] blkno = 0, nblocks = 40 [ 175.345857][ T6333] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 175.345857][ T6333] [ 175.364051][ T6353] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.507441][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 175.517010][ T4278] [ 175.517010][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.517010][ T4278] [ 175.572363][ T4278] [ 175.572363][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.572363][ T4278] [ 176.364309][ T6381] device bridge1 entered promiscuous mode [ 176.389932][ T6381] team0: Port device bridge1 added [ 176.398817][ T5374] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.441682][ T6382] process 'syz.3.815' launched './file0' with NULL argv: empty string added [ 176.636326][ T5374] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.659606][ T5374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.684360][ T5374] usb 1-1: Product: syz [ 176.699394][ T5374] usb 1-1: Manufacturer: syz [ 176.704101][ T5374] usb 1-1: SerialNumber: syz [ 176.747087][ T5374] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.800115][ T5374] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.987823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 177.152374][ T6389] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 177.258735][ T6391] loop3: detected capacity change from 0 to 16 [ 177.344863][ T6391] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.444885][ T6391] syz.3.818: attempt to access beyond end of device [ 177.444885][ T6391] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 177.475529][ T6391] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 177.498448][ T26] audit: type=1800 audit(1785418294.127:16): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.818" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 177.700074][ T6378] loop4: detected capacity change from 0 to 40427 [ 177.710077][ T6378] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 177.719957][ T6378] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.730613][ T6378] F2FS-fs (loop4): invalid crc value [ 177.763877][ T6378] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.858683][ T6378] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.865864][ T6378] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.118122][ T5374] usb 1-1: Service connection timeout for: 256 [ 178.124714][ T5374] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 178.187725][ T5374] ath9k_htc: Failed to initialize the device [ 178.198785][ T5374] usb 1-1: ath9k_htc: USB layer deinitialized [ 178.424319][ T5374] usb 1-1: USB disconnect, device number 8 [ 178.793304][ T4504] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 178.944426][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.4.831'. [ 178.995817][ T4504] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 179.033537][ T4504] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 179.059771][ T4504] usb 4-1: Product: syz [ 179.064862][ T4504] usb 4-1: Manufacturer: syz [ 179.071399][ T4504] usb 4-1: SerialNumber: syz [ 179.110590][ T4504] usb 4-1: config 0 descriptor?? [ 179.250646][ T6428] device bridge1 entered promiscuous mode [ 179.273274][ T6428] team0: Port device bridge1 added [ 179.322783][ T4504] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 179.528835][ T4504] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 179.539108][ T4504] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 179.546694][ T4504] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 179.618255][ T4504] peak_usb: probe of 4-1:0.0 failed with error -8 [ 179.747491][ T4504] usb 4-1: USB disconnect, device number 6 [ 179.800879][ T6449] loop0: detected capacity change from 0 to 1024 [ 180.168343][ T6446] loop4: detected capacity change from 0 to 32768 [ 180.197386][ T6446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.843 (6446) [ 180.217280][ T6446] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.228049][ T6446] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 180.238633][ T6446] BTRFS info (device loop4): metadata ratio 6 [ 180.245054][ T6446] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 180.257688][ T6446] BTRFS info (device loop4): turning on async discard [ 180.264875][ T6446] BTRFS warning (device loop4): excessive commit interval 910838814 [ 180.273922][ T6446] BTRFS info (device loop4): using free space tree [ 180.348014][ T6446] BTRFS info (device loop4): enabling ssd optimizations [ 180.534013][ T4285] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.617178][ T4288] Bluetooth: hci0: unknown advertising packet type: 0x6e [ 180.617259][ T4288] Bluetooth: hci0: unknown advertising packet type: 0x7f [ 180.643128][ T4288] Bluetooth: hci0: Malformed LE Event: 0x02 [ 180.798119][ T4504] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.991599][ T4504] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.008118][ T4504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.028402][ T4504] usb 4-1: Product: syz [ 181.032649][ T4504] usb 4-1: Manufacturer: syz [ 181.037298][ T4504] usb 4-1: SerialNumber: syz [ 181.063128][ T4504] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.101638][ T4504] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.224329][ T6481] loop4: detected capacity change from 0 to 32768 [ 181.279128][ T6481] [ 181.279128][ T6481] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.279128][ T6481] [ 181.495264][ T6486] loop1: detected capacity change from 0 to 8 [ 181.644330][ T6488] device gretap0 entered promiscuous mode [ 181.668068][ T6486] SQUASHFS error: Unable to read directory block [247:0] [ 181.703166][ T6481] blkno = 0, nblocks = 40 [ 181.708736][ T6481] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 181.708736][ T6481] [ 181.858346][ T4285] [ 181.858346][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.858346][ T4285] [ 181.947175][ T4285] [ 181.947175][ T4285] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.947175][ T4285] [ 182.398056][ T4503] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 182.427976][ T4504] usb 4-1: Service connection timeout for: 256 [ 182.428229][ T4328] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 182.441130][ T4504] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 182.491305][ T4504] ath9k_htc: Failed to initialize the device [ 182.502305][ T4504] usb 4-1: ath9k_htc: USB layer deinitialized [ 182.590920][ T4503] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.604359][ T4503] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.611399][ T4503] usb 5-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 182.621285][ T4503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.635231][ T4328] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 182.635266][ T4503] usb 5-1: config 0 descriptor?? [ 182.649449][ T4328] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 182.649495][ T4328] usb 1-1: Product: syz [ 182.649511][ T4328] usb 1-1: Manufacturer: syz [ 182.649535][ T4328] usb 1-1: SerialNumber: syz [ 182.674069][ T4328] usb 1-1: config 0 descriptor?? [ 182.716148][ T4504] usb 4-1: USB disconnect, device number 7 [ 182.895943][ T4328] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 183.088610][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0xd [ 183.095758][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.104225][ T4328] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 183.105024][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.118692][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.119756][ T4328] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 183.125701][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.125738][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.148996][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.153739][ T4328] peak_usb 1-1:0.0 can0: sending command failure: -8 [ 183.156042][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x0 [ 183.175241][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x3 [ 183.182692][ T4503] lg-g15 0003:046D:C22E.0011: unknown main item tag 0x7 [ 183.193675][ T4503] lg-g15 0003:046D:C22E.0011: hidraw0: USB HID v0.09 Device [HID 046d:c22e] on usb-dummy_hcd.4-1/input0 [ 183.258257][ T4328] peak_usb: probe of 1-1:0.0 failed with error -8 [ 183.352390][ T4328] usb 5-1: USB disconnect, device number 9 [ 183.370290][ T4503] usb 1-1: USB disconnect, device number 9 [ 183.516077][ T6505] fido_id[6505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.835529][ T6520] loop1: detected capacity change from 0 to 24 [ 183.848213][ T6518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 183.857255][ T6520] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 183.953847][ T6520] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 184.056772][ T6522] loop3: detected capacity change from 0 to 512 [ 184.138215][ T6524] loop0: detected capacity change from 0 to 512 [ 184.166397][ T6522] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 184.213906][ T6524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.224002][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.228434][ T6522] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.250937][ T6524] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.262604][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.272349][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.280463][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.289946][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 184.299417][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.410973][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 184.432306][ T6528] ------------[ cut here ]------------ [ 184.438000][ T6528] kernel BUG at fs/buffer.c:2666! [ 184.466195][ T6528] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 184.472356][ T6528] CPU: 1 PID: 6528 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 184.479851][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.488584][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 184.489939][ T6528] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 184.501074][ T6528] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 e5 ff e1 ff e9 b3 fe ff ff e8 2b d3 90 ff 0f 0b e8 24 d3 90 ff <0f> 0b e8 1d d3 90 ff 0f 0b e8 16 d3 90 ff 0f 0b e8 0f d3 90 ff 0f [ 184.520732][ T6528] RSP: 0018:ffffc9000e8efce8 EFLAGS: 00010293 [ 184.526857][ T6528] RAX: ffffffff81f15afc RBX: 0000000000000000 RCX: ffff888076bc1e00 [ 184.534879][ T6528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.542909][ T6528] RBP: 0000000000003801 R08: ffff8880724580ef R09: 1ffff1100e48b01d [ 184.550950][ T6528] R10: dffffc0000000000 R11: ffffed100e48b01e R12: 1ffff1100e48b01d [ 184.558976][ T6528] R13: 0000000000000000 R14: ffff8880724580e8 R15: ffff8880557b8000 [ 184.566998][ T6528] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 184.576003][ T6528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.582623][ T6528] CR2: 00007fd84f9dfff8 CR3: 000000005c7b6000 CR4: 00000000003506e0 [ 184.590632][ T6528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.598637][ T6528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.606639][ T6528] Call Trace: [ 184.609943][ T6528] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 184.612892][ T6528] write_mmp_block_thawed+0x3ad/0x540 [ 184.618304][ T6528] ? read_mmp_block+0x720/0x720 [ 184.623199][ T6528] ? kmmpd+0x705/0x990 [ 184.627295][ T6528] write_mmp_block+0x129/0x390 [ 184.632086][ T6528] kmmpd+0x705/0x990 [ 184.636021][ T6528] kthread+0x29d/0x330 [ 184.640111][ T6528] ? write_mmp_block_thawed+0x540/0x540 [ 184.645689][ T6528] ? kthread_blkcg+0xd0/0xd0 [ 184.650309][ T6528] ret_from_fork+0x1f/0x30 [ 184.654755][ T6528] [ 184.657833][ T6528] Modules linked in: [ 184.684150][ T6528] ---[ end trace 0000000000000000 ]--- [ 184.741838][ T6528] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 184.747655][ T6528] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 e5 ff e1 ff e9 b3 fe ff ff e8 2b d3 90 ff 0f 0b e8 24 d3 90 ff <0f> 0b e8 1d d3 90 ff 0f 0b e8 16 d3 90 ff 0f 0b e8 0f d3 90 ff 0f [ 184.830312][ T6538] netlink: 68 bytes leftover after parsing attributes in process `syz.3.871'. [ 184.839887][ T6528] RSP: 0018:ffffc9000e8efce8 EFLAGS: 00010293 [ 184.846024][ T6528] RAX: ffffffff81f15afc RBX: 0000000000000000 RCX: ffff888076bc1e00 [ 184.886827][ T6528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.921121][ T6528] RBP: 0000000000003801 R08: ffff8880724580ef R09: 1ffff1100e48b01d [ 184.957897][ T6528] R10: dffffc0000000000 R11: ffffed100e48b01e R12: 1ffff1100e48b01d [ 184.965970][ T6528] R13: 0000000000000000 R14: ffff8880724580e8 R15: ffff8880557b8000 [ 184.987831][ T6528] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 184.996875][ T6528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.059171][ T6528] CR2: 000000110c35acc7 CR3: 000000002e351000 CR4: 00000000003506f0 [ 185.067228][ T6528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.098044][ T6528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.106225][ T6528] Kernel panic - not syncing: Fatal exception [ 185.112813][ T6528] Kernel Offset: disabled [ 185.117153][ T6528] Rebooting in 86400 seconds..