last executing test programs: 2.82942381s ago: executing program 3 (id=1059): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x80100) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) 2.706472004s ago: executing program 3 (id=1062): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') read$FUSE(r0, &(0x7f0000006640)={0x2020}, 0x2020) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x80000000, 0x0) 2.50352892s ago: executing program 3 (id=1069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) 2.386536754s ago: executing program 4 (id=1072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r1, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) 2.374908175s ago: executing program 3 (id=1073): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}}, 0x4c840) 2.225388469s ago: executing program 3 (id=1077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 2.225015839s ago: executing program 4 (id=1078): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdd6, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 2.120213613s ago: executing program 3 (id=1081): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000069dd3440cd0c93005a230102030109021b00010000000009040000016ce08d00090502"], 0x0) 2.082954674s ago: executing program 4 (id=1082): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x4, 0x0, 0x2000000000000003, 0x1, 0x2, 0xfffffffffffffffd}, {0x0, 0x7, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.959122918s ago: executing program 4 (id=1086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 1.791690213s ago: executing program 4 (id=1088): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x2000) 1.781160314s ago: executing program 0 (id=1089): unshare(0x24020400) r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r0, 0xff, 0x22, 0x0, &(0x7f00000002c0)) 1.665901247s ago: executing program 0 (id=1091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 1.665353207s ago: executing program 2 (id=1093): unshare(0x6020400) r0 = fanotify_init(0x1b, 0x40000) fanotify_mark(r0, 0x219, 0x183b, 0xffffffffffffffff, 0x0) 1.606399999s ago: executing program 0 (id=1094): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000ac0)=0x48000) 1.535498931s ago: executing program 2 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20004084) 1.317626149s ago: executing program 2 (id=1097): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x13020210) keyctl$read(0xb, r0, 0x0, 0x0) 1.317065089s ago: executing program 2 (id=1098): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000002580)={[{@utf8no}, {@uni_xlateno}, {@uni_xlateno}, {@utf8no}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@numtail}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}, {@shortname_mixed}]}, 0x25, 0x365, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000034c0)=""/4112, 0x1010) 1.246792181s ago: executing program 1 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000ff"], 0x2c}}, 0x4000) 965.4531ms ago: executing program 1 (id=1100): mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x33, &(0x7f0000abaff9)={0x77359400}, 0x10) 793.363826ms ago: executing program 0 (id=1101): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0xfffc, @private=0x300, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010103}, {@private, 0x800}, {@empty, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@empty}]}]}}}}}}}, 0x0) 732.062517ms ago: executing program 4 (id=1102): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x31d, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) fchown(r0, 0x0, 0xee01) 728.238728ms ago: executing program 1 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 622.649071ms ago: executing program 0 (id=1104): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xb88}) r0 = io_uring_setup(0x2d08, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000400)={0x4, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/121, 0x79}, {0x0}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/236, 0xec}], &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff]}, 0x20) 474.111436ms ago: executing program 0 (id=1105): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 431.018077ms ago: executing program 2 (id=1106): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="a51d484eabf96b2fc08bc0ed7ca8debfca43db0e8f21d5bc27bd80d85e44751170000000000000000000", 0x2a}], 0x2) 296.848191ms ago: executing program 1 (id=1107): r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x6, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000e00)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000b80)="f30e3944ffb0d88742", 0x9, 0xd}]) 161.528485ms ago: executing program 2 (id=1108): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x38c, &(0x7f00000015c0)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) 120.028677ms ago: executing program 1 (id=1109): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x1, 0x0, 0xfffff00c}, {0x6, 0x10, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="643c87cf", 0x4}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x0) 0s ago: executing program 1 (id=1110): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) kernel console output (not intermixed with test programs): 3] device veth0_vlan entered promiscuous mode [ 69.135252][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.144839][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.156525][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.167257][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.183689][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.195415][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.207436][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.218784][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.229996][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.240046][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.251633][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.268503][ T4193] device veth1_vlan entered promiscuous mode [ 69.280683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.290171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.302956][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.312532][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.322628][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.331507][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.342398][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.353827][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.369727][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.383758][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.397047][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.430166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.442716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.459072][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.472165][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.482843][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.496394][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.508498][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.521135][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.530374][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.539642][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.548531][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.576490][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.585458][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.597141][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.607035][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.645029][ T4196] device veth0_vlan entered promiscuous mode [ 69.681226][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.690255][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.701522][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.711236][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.716005][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 69.737635][ T4193] device veth0_macvtap entered promiscuous mode [ 69.748795][ T4193] device veth1_macvtap entered promiscuous mode [ 69.772794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.781931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.792436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.796280][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 69.808801][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 69.818204][ T4196] device veth1_vlan entered promiscuous mode [ 69.844870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.856095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.865393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.877181][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 69.877547][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 69.904684][ T4196] device veth0_macvtap entered promiscuous mode [ 69.929700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.940489][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.947241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.949577][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.964006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.974443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.002421][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.018920][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.029729][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.041099][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.051263][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.063000][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.075321][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.084645][ T4196] device veth1_macvtap entered promiscuous mode [ 70.094412][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.103052][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.114382][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.124661][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.134468][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.143726][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.159481][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.170619][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.180859][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.192698][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.203412][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.214256][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.226447][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.252744][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.262758][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.292731][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.304736][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.315440][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.327272][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.337195][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.349065][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.360892][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.371968][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.384096][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.399896][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.404519][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.408157][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.425473][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.437007][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.446453][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.465398][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.482690][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.492844][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.504053][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.517587][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.527850][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.538689][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.548933][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.560313][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.570962][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.582630][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.598513][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.625477][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.635145][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.650070][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.661874][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.670857][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.681787][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.705820][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.713876][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.772855][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.791419][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.800210][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.870668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.896077][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.904225][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.914165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.928223][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.952786][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.983026][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.071580][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.073202][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.101878][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.121852][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.142180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.177935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.201565][ T424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.221716][ T424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.250336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.480310][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.487385][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.796807][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 71.876916][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 71.897040][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 71.965743][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 71.981669][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 72.251126][ T4306] loop2: detected capacity change from 0 to 8192 [ 72.331814][ T4306] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 72.378820][ T4306] REISERFS (device loop2): using ordered data mode [ 72.387507][ T4306] reiserfs: using flush barriers [ 72.438573][ T4306] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.461308][ T4306] REISERFS (device loop2): checking transaction log (loop2) [ 72.485640][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.520114][ T4306] REISERFS (device loop2): Using r5 hash to sort names [ 72.538779][ T4306] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 72.624581][ T4321] loop0: detected capacity change from 0 to 2048 [ 72.713507][ T4328] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 72.736326][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 72.772752][ T4328] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 72.799707][ T4330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.819699][ T4328] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.25'. [ 72.855864][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.891188][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 72.939938][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 72.978892][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.034667][ T7] usb 5-1: config 0 descriptor?? [ 73.173534][ T4234] kernel write not supported for file /media6 (pid: 4234 comm: kworker/0:5) [ 73.304527][ T4344] loop1: detected capacity change from 0 to 4096 [ 73.344516][ T4353] loop0: detected capacity change from 0 to 256 [ 73.387310][ T4353] exfat: Deprecated parameter 'utf8' [ 73.392727][ T4353] exfat: Deprecated parameter 'utf8' [ 73.399184][ T4344] EXT4-fs (loop1): inline encryption not supported [ 73.417210][ T4344] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 73.430730][ T4353] exfat: Deprecated parameter 'utf8' [ 73.469368][ T4353] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 73.523116][ T4357] mkiss: ax0: crc mode is auto. [ 73.537865][ T7] apple 0003:05AC:0219.0001: unknown main item tag 0x5 [ 73.571991][ T7] apple 0003:05AC:0219.0001: unknown global tag 0xc [ 73.608093][ T7] apple 0003:05AC:0219.0001: item 0 1 1 12 parsing failed [ 73.648602][ T7] apple 0003:05AC:0219.0001: parse failed [ 73.675214][ T7] apple: probe of 0003:05AC:0219.0001 failed with error -22 [ 73.738236][ T7] usb 5-1: USB disconnect, device number 2 [ 73.779859][ T4363] loop0: detected capacity change from 0 to 256 [ 73.893772][ T4363] FAT-fs (loop0): Directory bread(block 64) failed [ 73.911146][ T4363] FAT-fs (loop0): Directory bread(block 65) failed [ 73.919656][ T4363] FAT-fs (loop0): Directory bread(block 66) failed [ 73.935413][ T4363] FAT-fs (loop0): Directory bread(block 67) failed [ 73.936696][ T4234] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 73.950575][ T4363] FAT-fs (loop0): Directory bread(block 68) failed [ 73.969357][ T4363] FAT-fs (loop0): Directory bread(block 69) failed [ 73.983632][ T4364] exfat: Deprecated parameter 'debug' [ 73.990096][ T4363] FAT-fs (loop0): Directory bread(block 70) failed [ 73.998407][ T4364] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 73.998848][ T4366] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 74.010721][ T4363] FAT-fs (loop0): Directory bread(block 71) failed [ 74.032778][ T4364] exFAT-fs (loop1): unable to read boot sector [ 74.039415][ T4363] FAT-fs (loop0): Directory bread(block 72) failed [ 74.039460][ T4363] FAT-fs (loop0): Directory bread(block 73) failed [ 74.105833][ T4364] exFAT-fs (loop1): failed to read boot sector [ 74.139569][ T4364] exFAT-fs (loop1): failed to recognize exfat type [ 74.346084][ T4234] usb 3-1: config 0 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.369202][ T4234] usb 3-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 74.393085][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 74.403150][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.413327][ T4234] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 74.461862][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.504438][ T4234] usb 3-1: config 0 descriptor?? [ 74.551754][ T4378] loop3: detected capacity change from 0 to 512 [ 74.640372][ T4384] loop1: detected capacity change from 0 to 256 [ 74.706019][ T4378] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.46: inode has both inline data and extents flags [ 74.757093][ T4378] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 74.771172][ T4378] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.849046][ T4389] loop0: detected capacity change from 0 to 8192 [ 74.936755][ T4389] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 74.961985][ T4389] REISERFS (device loop0): using ordered data mode [ 74.969677][ T4389] reiserfs: using flush barriers [ 74.976670][ T4389] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.995870][ T4234] hid (null): usage index exceeded [ 75.001504][ T4234] hid (null): usage index exceeded [ 75.008295][ T4389] REISERFS (device loop0): checking transaction log (loop0) [ 75.021281][ T4234] thrustmaster 0003:044F:B320.0002: ignoring exceeding usage max [ 75.030777][ T4389] REISERFS (device loop0): Using r5 hash to sort names [ 75.038460][ T4234] thrustmaster 0003:044F:B320.0002: usage index exceeded [ 75.047646][ T4234] thrustmaster 0003:044F:B320.0002: item 0 1 2 0 parsing failed [ 75.049461][ T4389] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 75.055920][ T4234] thrustmaster 0003:044F:B320.0002: parse failed [ 75.074031][ T4234] thrustmaster: probe of 0003:044F:B320.0002 failed with error -22 [ 75.449631][ T4200] usb 3-1: USB disconnect, device number 2 [ 76.394425][ T4451] capability: warning: `syz.0.72' uses deprecated v2 capabilities in a way that may be insecure [ 76.550135][ T4399] loop1: detected capacity change from 0 to 40427 [ 76.573961][ T4457] loop3: detected capacity change from 0 to 512 [ 76.642847][ T4457] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.672502][ T4399] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 76.707360][ T4399] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 76.792599][ T4457] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 76.810057][ T4399] F2FS-fs (loop1): invalid crc value [ 76.856514][ T4457] FAT-fs (loop3): Filesystem has been set read-only [ 76.882533][ T4399] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.896020][ T4465] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 77.163205][ T4399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.246209][ T4470] SQUASHFS error: xz decompression failed, data probably corrupt [ 77.265758][ T4470] SQUASHFS error: Failed to read block 0x108: -5 [ 77.293483][ T4422] set_capacity_and_notify: 1 callbacks suppressed [ 77.293499][ T4422] loop4: detected capacity change from 0 to 32768 [ 77.324757][ T4470] SQUASHFS error: Unable to read metadata cache entry [106] [ 77.345010][ T4470] SQUASHFS error: Unable to read inode 0x11f [ 78.082390][ T4456] loop2: detected capacity change from 0 to 32768 [ 78.138197][ T4456] ======================================================= [ 78.138197][ T4456] WARNING: The mand mount option has been deprecated and [ 78.138197][ T4456] and is ignored by this kernel. Remove the mand [ 78.138197][ T4456] option from the mount to silence this warning. [ 78.138197][ T4456] ======================================================= [ 78.258864][ T4463] loop0: detected capacity change from 0 to 32768 [ 78.292767][ T4492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.302033][ T4492] IPv6: NLM_F_CREATE should be set when creating new route [ 78.311273][ T4492] IPv6: NLM_F_CREATE should be set when creating new route [ 78.385201][ T4463] XFS (loop0): Mounting V5 Filesystem [ 78.484644][ T4456] JBD2: Ignoring recovery information on journal [ 78.605735][ T4463] XFS (loop0): Ending clean mount [ 78.637909][ T4456] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 78.651869][ T4463] XFS (loop0): Quotacheck needed: Please wait. [ 78.659206][ T4508] loop1: detected capacity change from 0 to 8192 [ 78.761292][ T4463] XFS (loop0): Quotacheck: Done. [ 78.785210][ T4508] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 78.831916][ T4508] REISERFS (device loop1): using ordered data mode [ 78.840964][ T4508] reiserfs: using flush barriers [ 78.850289][ T4508] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 78.869072][ T4508] REISERFS (device loop1): checking transaction log (loop1) [ 79.057789][ T4508] REISERFS (device loop1): Using r5 hash to sort names [ 79.071239][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 79.081781][ T4508] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 79.181658][ T4189] XFS (loop0): Unmounting Filesystem [ 79.892611][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 79.940626][ T4543] device gretap0 entered promiscuous mode [ 80.026428][ T4543] syz.1.101 (4543) used greatest stack depth: 21136 bytes left [ 80.051848][ T4178] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.096141][ T4200] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.193771][ T4559] loop3: detected capacity change from 0 to 256 [ 80.225888][ T4559] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.252942][ T4559] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 80.284749][ T4559] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 80.366490][ T4178] usb 1-1: Using ep0 maxpacket: 16 [ 80.376752][ T4200] usb 3-1: Using ep0 maxpacket: 16 [ 80.495852][ T4200] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.511842][ T4234] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.515854][ T4178] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 80.540011][ T4200] usb 3-1: config 0 has no interface number 0 [ 80.546313][ T4178] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.556861][ T4200] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.572501][ T4178] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.582218][ T4200] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.599878][ T4178] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.681831][ T4563] loop3: detected capacity change from 0 to 2048 [ 80.738542][ T4200] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 80.759112][ T4200] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 80.787769][ T4200] usb 3-1: Product: syz [ 80.796402][ T4178] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.815720][ T4200] usb 3-1: SerialNumber: syz [ 80.824114][ T4563] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 80.845363][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.864511][ T4563] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.874430][ T4200] usb 3-1: config 0 descriptor?? [ 80.896756][ T4178] usb 1-1: Product: syz [ 80.918924][ T4178] usb 1-1: Manufacturer: syz [ 80.936215][ T4563] EXT4-fs (loop3): resizing filesystem from 256 to 0 blocks [ 80.936249][ T4178] usb 1-1: SerialNumber: syz [ 80.949829][ T4234] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.960607][ T4234] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.967561][ T4200] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 80.972974][ T4234] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.979661][ T4563] EXT4-fs warning (device loop3): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 80.989624][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.008359][ T4234] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 81.018249][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.031407][ T4234] usb 5-1: config 0 descriptor?? [ 81.050474][ T4200] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 81.233809][ T7] usb 3-1: USB disconnect, device number 3 [ 81.245971][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.253879][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 81.283399][ T7] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 81.302694][ T4178] cdc_ncm 1-1:1.0: skipping garbage [ 81.316990][ T4178] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 81.330555][ T4178] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 81.345963][ T4178] cdc_ncm 1-1:1.0: bind() failure [ 81.365308][ T4178] usb 1-1: USB disconnect, device number 2 [ 81.372899][ T4573] loop1: detected capacity change from 0 to 64 [ 81.538284][ T4234] kye 0003:0458:5015.0003: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 81.558436][ T4234] kye 0003:0458:5015.0003: tablet-enabling feature report not found [ 81.568852][ T4234] kye 0003:0458:5015.0003: tablet enabling failed [ 81.882717][ T4234] usb 5-1: USB disconnect, device number 3 [ 82.069093][ T4585] loop2: detected capacity change from 0 to 64 [ 82.099136][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 82.374791][ T4589] loop0: detected capacity change from 0 to 64 [ 82.447370][ T4576] loop3: detected capacity change from 0 to 32768 [ 82.586735][ T4576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.115 (4576) [ 82.708928][ T4578] loop1: detected capacity change from 0 to 32768 [ 82.721981][ T4576] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 82.785227][ T4576] BTRFS info (device loop3): using free space tree [ 82.835544][ T4576] BTRFS info (device loop3): has skinny extents [ 82.884424][ T4578] XFS (loop1): Mounting V5 Filesystem [ 83.156061][ T4637] netlink: 'syz.0.132': attribute type 2 has an invalid length. [ 83.201752][ T4576] BTRFS info (device loop3): enabling ssd optimizations [ 83.262694][ T4578] XFS (loop1): Ending clean mount [ 83.298234][ T4578] XFS (loop1): Quotacheck needed: Please wait. [ 83.412214][ T4578] XFS (loop1): Quotacheck: Done. [ 83.667448][ T4193] XFS (loop1): Unmounting Filesystem [ 83.866342][ T4645] loop4: detected capacity change from 0 to 4096 [ 83.921026][ T4651] loop2: detected capacity change from 0 to 4096 [ 83.952838][ T4645] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.016622][ T4641] loop0: detected capacity change from 0 to 40427 [ 84.026598][ T4645] NILFS (loop4): mounting unchecked fs [ 84.032471][ T4645] NILFS (loop4): recovery required for readonly filesystem [ 84.064170][ T4641] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 84.081893][ T4641] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 84.109091][ T4360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4360) [ 84.119153][ T4658] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.129769][ T4359] udevd[4359]: incorrect nilfs2 checksum on /dev/loop4 [ 84.146580][ T4645] NILFS (loop4): write access will be enabled during recovery [ 84.165211][ T4641] F2FS-fs (loop0): invalid crc value [ 84.256850][ T4641] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 84.305327][ T4645] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 84.392124][ T4359] udevd[4359]: incorrect nilfs2 checksum on /dev/loop4 [ 84.467446][ T4667] sock: sock_set_timeout: `syz.3.140' (pid 4667) tries to set negative timeout [ 84.471545][ T4641] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 84.492100][ T4641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.673789][ T4673] netlink: 56 bytes leftover after parsing attributes in process `syz.4.141'. [ 84.994299][ T4189] attempt to access beyond end of device [ 84.994299][ T4189] loop0: rw=2049, want=45104, limit=40427 [ 85.175072][ T4692] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.178464][ T4694] loop3: detected capacity change from 0 to 164 [ 85.496544][ T4700] loop3: detected capacity change from 0 to 64 [ 85.776552][ T26] audit: type=1800 audit(1779456832.256:2): pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.148" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 85.938470][ T4716] loop4: detected capacity change from 0 to 256 [ 85.965034][ T4712] loop2: detected capacity change from 0 to 4096 [ 85.979198][ T4716] exfat: Deprecated parameter 'namecase' [ 85.995931][ T4716] exfat: Deprecated parameter 'namecase' [ 86.053546][ T4716] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 86.095917][ T4712] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 86.334976][ T4690] [ 86.334976][ T4690] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.334976][ T4690] [ 86.401848][ T4690] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 86.401848][ T4690] [ 86.500185][ T4690] ERROR: (device loop1): jfs_unlink: [ 86.500185][ T4690] [ 86.512487][ T4241] ntfs3: loop2: ino=1b, Internal error [ 86.527736][ T4724] jfs_unlink: dtDelete returned -2 [ 86.556840][ T4241] ntfs3: loop2: ntfs3_write_inode r=1b failed, -22. [ 86.598571][ T1440] ERROR: (device loop1): diWrite: ixpxd invalid [ 86.598571][ T1440] [ 86.631804][ T1440] ERROR: (device loop1): txCommit: [ 86.631804][ T1440] [ 86.665691][ T1440] jfs_write_inode: jfs_commit_inode failed! [ 86.693621][ T4193] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 86.693621][ T4193] [ 86.728983][ T4193] [ 86.728983][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.728983][ T4193] [ 86.771070][ T4193] [ 86.771070][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.771070][ T4193] [ 86.849284][ T1108] cfg80211: failed to load regulatory.db [ 86.915825][ T4738] netlink: 'syz.4.172': attribute type 3 has an invalid length. [ 86.973652][ T4744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 87.053361][ T4748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 87.483169][ T4766] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 87.514743][ T4766] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 87.536887][ T4768] netlink: 'syz.0.186': attribute type 62 has an invalid length. [ 87.563742][ T4766] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 87.595743][ T4766] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 87.602499][ T4766] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 87.695821][ T4766] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 87.703225][ T4766] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 87.771647][ T4766] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 87.779178][ T4772] set_capacity_and_notify: 1 callbacks suppressed [ 87.779193][ T4772] loop4: detected capacity change from 0 to 4096 [ 87.942193][ T4785] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.006042][ T4772] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 88.125892][ T4654] Bluetooth: hci3: command 0x0405 tx timeout [ 88.296729][ T4801] loop4: detected capacity change from 0 to 8 [ 88.393556][ T4761] loop2: detected capacity change from 0 to 32768 [ 88.509738][ T4761] XFS: attr2 mount option is deprecated. [ 88.535208][ T4761] XFS: attr2 mount option is deprecated. [ 88.603190][ T4797] loop3: detected capacity change from 0 to 4096 [ 88.819775][ T4761] XFS (loop2): Mounting V5 Filesystem [ 88.945995][ T4825] loop4: detected capacity change from 0 to 4096 [ 88.999156][ T4797] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 89.155816][ T4835] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.164663][ T4761] XFS (loop2): Ending clean mount [ 89.209952][ T4825] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 89.232769][ T4761] XFS (loop2): Quotacheck needed: Please wait. [ 89.348285][ T4761] XFS (loop2): Quotacheck: Done. [ 89.368864][ T4244] ntfs3: loop3: ino=1b, Internal error [ 89.374406][ T4244] ntfs3: loop3: ntfs3_write_inode r=1b failed, -22. [ 89.391281][ T26] audit: type=1326 audit(1779456835.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.1.215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11fb46ee59 code=0x0 [ 89.648496][ T4195] XFS (loop2): Unmounting Filesystem [ 89.765604][ T4848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 89.792486][ T4849] ucma_write: process 102 (syz.0.222) changed security contexts after opening file descriptor, this is not allowed. [ 89.805774][ T1108] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 90.169906][ T4857] IPVS: Unknown mcast interface: pimreg0 [ 90.313341][ T4863] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.229'. [ 90.345855][ T4863] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 90.396187][ T1108] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 90.406993][ T4867] loop0: detected capacity change from 0 to 1024 [ 90.418746][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 90.446458][ T1108] usb 5-1: Product: syz [ 90.452932][ T1108] usb 5-1: Manufacturer: syz [ 90.458017][ T1108] usb 5-1: SerialNumber: syz [ 90.519236][ T1108] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 90.702480][ T4867] hfsplus: small dir entry [ 90.779447][ T4881] loop1: detected capacity change from 0 to 512 [ 90.833416][ T4881] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.859144][ T4889] loop3: detected capacity change from 0 to 512 [ 90.890356][ T4881] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 90.905996][ T4881] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.237: Corrupt directory, running e2fsck is recommended [ 90.921842][ T4881] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 90.936242][ T4881] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.237: corrupted in-inode xattr [ 90.967125][ T1108] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 90.989436][ T4881] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.237: couldn't read orphan inode 15 (err -117) [ 91.004073][ T4892] loop0: detected capacity change from 0 to 256 [ 91.007588][ T4889] EXT4-fs error (device loop3): ext4_quota_enable:6444: comm syz.3.238: inode #196608: comm syz.3.238: iget: illegal inode # [ 91.024588][ T4889] EXT4-fs error (device loop3): ext4_quota_enable:6447: comm syz.3.238: Bad quota inode: 196608, type: 2 [ 91.039103][ T1108] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 91.074777][ T4881] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 91.138193][ T4889] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=196608). Please run e2fsck to fix. [ 91.218841][ T1108] usb 5-1: USB disconnect, device number 4 [ 91.264439][ T4889] EXT4-fs (loop3): mount failed [ 91.325240][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 91.350696][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 91.956303][ T1108] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 91.965882][ T4906] loop1: detected capacity change from 0 to 1024 [ 92.048966][ T4906] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 92.099817][ T4914] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.132214][ T4914] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.147399][ T4917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.174427][ T4914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 92.385894][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.409552][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.521903][ T1108] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 92.545813][ T1108] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 92.560742][ T1108] usb 3-1: Manufacturer: syz [ 92.572204][ T1108] usb 3-1: config 0 descriptor?? [ 92.586350][ T4936] exfat: Deprecated parameter 'utf8' [ 92.664914][ T4936] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 92.735605][ T4654] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.745662][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.005879][ T4654] usb 1-1: Using ep0 maxpacket: 8 [ 93.024922][ T4952] set_capacity_and_notify: 4 callbacks suppressed [ 93.024936][ T4952] loop1: detected capacity change from 0 to 512 [ 93.054020][ T4952] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 93.069216][ T1108] cougar 0003:060B:700A.0004: item fetching failed at offset 3/5 [ 93.084698][ T4952] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 93.087391][ T1108] cougar 0003:060B:700A.0004: parse failed [ 93.099025][ T1108] cougar: probe of 0003:060B:700A.0004 failed with error -22 [ 93.155942][ T1111] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.165878][ T4952] EXT4-fs (loop1): 1 truncate cleaned up [ 93.174136][ T4952] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 93.196423][ T4654] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.275824][ T4654] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 93.275824][ T1111] usb 4-1: config 43 has an invalid interface number: 181 but max is 0 [ 93.275853][ T4654] usb 1-1: config 0 has no interface number 0 [ 93.290839][ T1111] usb 4-1: config 43 has no interface number 0 [ 93.335927][ T1111] usb 4-1: config 43 interface 181 has no altsetting 0 [ 93.345608][ T4654] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 93.364233][ T4654] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 93.377890][ T4654] usb 1-1: config 0 interface 88 has no altsetting 0 [ 93.388179][ T23] usb 3-1: USB disconnect, device number 4 [ 93.414039][ T4952] EXT4-fs (loop1): old and new quota format mixing [ 93.535460][ T1111] usb 4-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=b0.cd [ 93.544711][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.559790][ T1111] usb 4-1: Product: syz [ 93.565053][ T1111] usb 4-1: Manufacturer: syz [ 93.572348][ T1111] usb 4-1: SerialNumber: syz [ 93.655385][ T4957] loop4: detected capacity change from 0 to 32768 [ 93.675862][ T4654] usb 1-1: string descriptor 0 read error: -22 [ 93.675965][ T4654] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 93.675991][ T4654] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 93.678080][ T4654] usb 1-1: config 0 descriptor?? [ 93.728473][ T4957] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 93.732469][ T4654] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input7 [ 93.744600][ T4957] JBD2: Ignoring recovery information on journal [ 93.860150][ T4339] udevd[4339]: Error opening device "/dev/input/event4": Input/output error [ 93.877754][ T4957] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.877954][ T1111] quatech2 4-1:43.181: Quatech 2nd gen USB to Serial Driver converter detected [ 93.909632][ T4339] udevd[4339]: Unable to EVIOCGABS device "/dev/input/event4" [ 93.925779][ T1111] usb 4-1: qt2_attach - failed to power on unit: -71 [ 93.932841][ T1111] quatech2: probe of 4-1:43.181 failed with error -71 [ 93.962456][ T4339] udevd[4339]: Unable to EVIOCGABS device "/dev/input/event4" [ 94.005921][ T1111] usb 4-1: USB disconnect, device number 2 [ 94.257219][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 94.419158][ T4980] loop2: detected capacity change from 0 to 64 [ 94.595626][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.624199][ T4234] usb 1-1: USB disconnect, device number 3 [ 94.706962][ T4989] loop2: detected capacity change from 0 to 1024 [ 94.758667][ T4992] loop4: detected capacity change from 0 to 256 [ 94.829331][ T4657] hfsplus: b-tree write err: -5, ino 25 [ 94.835451][ T4657] hfsplus: b-tree write err: -5, ino 4 [ 94.842070][ T4657] hfsplus: b-tree write err: -5, ino 2 [ 94.847918][ T4233] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.873298][ T4992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 94.886143][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 95.022071][ T5002] loop0: detected capacity change from 0 to 256 [ 95.029239][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 95.051119][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.075178][ T23] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 95.094776][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.116130][ T23] usb 2-1: config 0 descriptor?? [ 95.135728][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 95.142878][ T5002] exfat: Deprecated parameter 'utf8' [ 95.150827][ T5002] exfat: Deprecated parameter 'utf8' [ 95.172635][ T5002] exfat: Deprecated parameter 'namecase' [ 95.243700][ T5002] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 95.297266][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.323086][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.375353][ T4233] usb 4-1: config 1 has no interface number 0 [ 95.403814][ T4233] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 95.580628][ T23] itetech 0003:06CB:73F5.0005: unknown main item tag 0xd [ 95.604944][ T23] itetech 0003:06CB:73F5.0005: unknown main item tag 0x1 [ 95.752441][ T23] itetech 0003:06CB:73F5.0005: unknown main item tag 0x1 [ 95.766738][ T4233] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 95.775996][ T5008] device bridge1 entered promiscuous mode [ 95.782592][ T23] itetech 0003:06CB:73F5.0005: unknown main item tag 0x0 [ 95.790956][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.806452][ T23] itetech 0003:06CB:73F5.0005: item fetching failed at offset 41/44 [ 95.815177][ T23] itetech: probe of 0003:06CB:73F5.0005 failed with error -22 [ 95.823623][ T4233] usb 4-1: Product: syz [ 95.831264][ T4233] usb 4-1: Manufacturer: syz [ 95.836102][ T4233] usb 4-1: SerialNumber: syz [ 95.962074][ T23] usb 2-1: USB disconnect, device number 2 [ 96.016547][ T5000] loop4: detected capacity change from 0 to 32768 [ 96.051044][ T5011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 96.104249][ T5017] loop2: detected capacity change from 0 to 8 [ 96.120837][ T5000] XFS (loop4): Mounting V5 Filesystem [ 96.177309][ T5023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.297'. [ 96.272329][ T5017] SQUASHFS error: Unable to read directory block [629:ff26] [ 96.315246][ T5000] XFS (loop4): Ending clean mount [ 96.355357][ T5000] XFS (loop4): Quotacheck needed: Please wait. [ 96.477205][ T5029] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.504761][ T5000] XFS (loop4): Quotacheck: Done. [ 96.714236][ T4196] XFS (loop4): Unmounting Filesystem [ 96.757725][ T4234] usb 4-1: USB disconnect, device number 3 [ 97.188669][ T5040] loop4: detected capacity change from 0 to 256 [ 97.201555][ T5037] loop1: detected capacity change from 0 to 32768 [ 97.237260][ T5037] XFS: attr2 mount option is deprecated. [ 97.251249][ T5037] XFS: attr2 mount option is deprecated. [ 97.403549][ T5037] XFS (loop1): Mounting V5 Filesystem [ 97.572007][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 97.596849][ T4234] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.647721][ T5037] XFS (loop1): Ending clean mount [ 97.668952][ T5037] XFS (loop1): Quotacheck needed: Please wait. [ 97.851015][ T4234] usb 1-1: Using ep0 maxpacket: 16 [ 97.877366][ T5037] XFS (loop1): Quotacheck: Done. [ 97.977299][ T4234] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 98.006048][ T4234] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 98.016254][ T4193] XFS (loop1): Unmounting Filesystem [ 98.045717][ T4234] usb 1-1: config 1 has no interface number 1 [ 98.076674][ T5064] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.096111][ T4234] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 98.151861][ T5066] set_capacity_and_notify: 2 callbacks suppressed [ 98.151877][ T5066] loop2: detected capacity change from 0 to 1764 [ 98.152381][ T4234] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.288148][ T4234] usb 1-1: config 1 interface 105 has no altsetting 0 [ 98.486018][ T4234] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 98.504063][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.534082][ T4234] usb 1-1: Product: syz [ 98.544219][ T4234] usb 1-1: Manufacturer: syz [ 98.559485][ T4234] usb 1-1: SerialNumber: syz [ 98.622426][ T5044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 98.871179][ T5094] loop4: detected capacity change from 0 to 24 [ 98.876276][ T4234] aqc111: probe of 1-1:1.105 failed with error -22 [ 98.911502][ T5096] loop2: detected capacity change from 0 to 1024 [ 98.976859][ T5096] hfsplus: bad catalog entry type [ 99.048228][ T4244] hfsplus: b-tree write err: -5, ino 25 [ 99.065322][ T4244] hfsplus: b-tree write err: -5, ino 4 [ 99.114287][ T4244] hfsplus: b-tree write err: -5, ino 2 [ 99.165050][ T2301] usb 1-1: USB disconnect, device number 4 [ 99.460615][ T5113] loop4: detected capacity change from 0 to 1024 [ 99.705671][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.806486][ T5117] tipc: Enabling of bearer rejected, failed to enable media [ 100.097823][ T23] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 100.113774][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.279339][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.305979][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 100.325943][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.335959][ T23] usb 3-1: Product: syz [ 100.346077][ T23] usb 3-1: Manufacturer: syz [ 100.351636][ T23] usb 3-1: SerialNumber: syz [ 100.372840][ T23] usb 3-1: config 0 descriptor?? [ 100.429992][ T23] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 100.449985][ T23] ims_pcu: probe of 3-1:0.0 failed with error -22 [ 100.592524][ T5150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.352'. [ 100.674578][ T23] usb 3-1: USB disconnect, device number 5 [ 100.694474][ T5138] loop3: detected capacity change from 0 to 32768 [ 100.725831][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.743949][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.774096][ T5138] XFS (loop3): Mounting V5 Filesystem [ 100.779519][ T4233] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 100.779552][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.803617][ T4233] usb 1-1: config 0 descriptor?? [ 100.929703][ T5138] XFS (loop3): Ending clean mount [ 100.938382][ T5138] XFS (loop3): Quotacheck needed: Please wait. [ 100.971618][ T5166] loop1: detected capacity change from 0 to 256 [ 101.017785][ T5138] XFS (loop3): Quotacheck: Done. [ 101.072943][ T5166] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 101.146794][ T5166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 101.185255][ T4194] XFS (loop3): Unmounting Filesystem [ 101.251278][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 101.260574][ T5171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'. [ 101.309096][ T4233] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x3 [ 101.345616][ T4233] arvo 0003:1E7D:30D4.0006: item fetching failed at offset 5/7 [ 101.363955][ T4233] arvo 0003:1E7D:30D4.0006: parse failed [ 101.382338][ T4233] arvo: probe of 0003:1E7D:30D4.0006 failed with error -22 [ 101.528274][ T4233] usb 1-1: USB disconnect, device number 5 [ 101.613429][ T5187] loop4: detected capacity change from 0 to 8 [ 101.807865][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 101.865807][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.952874][ T5199] loop2: detected capacity change from 0 to 64 [ 102.115892][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 102.237203][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.261658][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.289353][ T5213] loop3: detected capacity change from 0 to 256 [ 102.310858][ T7] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 102.355679][ T7] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 102.546931][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 102.556469][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.586961][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.615613][ T7] usb 2-1: Product: syz [ 102.620033][ T7] usb 2-1: Manufacturer: syz [ 102.625029][ T7] usb 2-1: SerialNumber: syz [ 102.794813][ T5234] loop2: detected capacity change from 0 to 256 [ 103.051240][ T7] usb 2-1: USB disconnect, device number 3 [ 103.294286][ T5258] loop4: detected capacity change from 0 to 256 [ 103.356456][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.691201][ T5284] loop1: detected capacity change from 0 to 512 [ 103.731420][ T5289] tmpfs: Bad value for 'mpol' [ 103.791704][ T5284] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.807775][ T5284] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.942265][ T5284] EXT4-fs (loop1): 1 truncate cleaned up [ 103.975623][ T5284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.642289][ T5337] loop3: detected capacity change from 0 to 2048 [ 104.712665][ T5337] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 104.797134][ T5337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.105600][ T1111] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 105.132143][ T5365] loop3: detected capacity change from 0 to 8 [ 105.475796][ T1111] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 105.522572][ T1111] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.615553][ T1111] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.650066][ T1111] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 105.708997][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.775699][ T1111] usb 2-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 105.811645][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.862940][ T1111] usb 2-1: config 0 descriptor?? [ 106.364272][ T1111] wacom 0003:056A:0725.0007: unknown main item tag 0x0 [ 106.399719][ T1111] wacom 0003:056A:0725.0007: Unknown device_type for 'HID 056a:0725'. Ignoring. [ 106.541684][ T5384] loop4: detected capacity change from 0 to 32768 [ 106.593642][ T4654] usb 2-1: USB disconnect, device number 4 [ 106.603198][ T5430] loop2: detected capacity change from 0 to 64 [ 106.701995][ T5384] XFS (loop4): Mounting V5 Filesystem [ 106.883173][ T5384] XFS (loop4): Ending clean mount [ 106.987498][ T5384] XFS (loop4): Quotacheck needed: Please wait. [ 107.054275][ T5384] XFS (loop4): Quotacheck: Done. [ 107.252373][ T5419] loop0: detected capacity change from 0 to 32768 [ 107.253543][ T5454] loop2: detected capacity change from 0 to 1024 [ 107.281737][ T4196] XFS (loop4): Unmounting Filesystem [ 107.284914][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 107.405963][ T5454] hfsplus: bad catalog entry type [ 107.484250][ T5419] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 107.531553][ T4657] hfsplus: b-tree write err: -5, ino 25 [ 107.539561][ T5468] netlink: 2 bytes leftover after parsing attributes in process `syz.3.458'. [ 107.583572][ T4657] hfsplus: b-tree write err: -5, ino 4 [ 107.627997][ T4657] hfsplus: b-tree write err: -5, ino 2 [ 108.093314][ T5493] loop3: detected capacity change from 0 to 512 [ 108.131673][ T5497] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 108.165923][ T4189] XFS (loop0): Unmounting Filesystem [ 108.222960][ T5502] loop2: detected capacity change from 0 to 64 [ 108.253024][ T5493] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 108.253142][ T5493] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.061518][ T5539] loop3: detected capacity change from 0 to 64 [ 109.223361][ T5549] netlink: 144 bytes leftover after parsing attributes in process `syz.2.487'. [ 109.533038][ T5555] loop3: detected capacity change from 0 to 4096 [ 109.736415][ T5555] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 109.767102][ T5561] loop2: detected capacity change from 0 to 4096 [ 109.804839][ T5555] ntfs3: loop3: failed to convert name for inode 1e. [ 109.859268][ T5566] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.005126][ T5561] overlayfs: upper fs does not support tmpfile. [ 110.017180][ T5531] loop4: detected capacity change from 0 to 32768 [ 110.057379][ T5561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 110.100567][ T5561] overlayfs: failed to set xattr on upper [ 110.157944][ T5561] overlayfs: ...falling back to index=off,metacopy=off. [ 110.179778][ T5575] loop1: detected capacity change from 0 to 64 [ 110.187837][ T5561] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 110.199721][ T5531] JBD2: Ignoring recovery information on journal [ 110.396754][ T5531] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 110.589587][ T4195] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 110.655554][ T4195] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 110.680539][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 110.713500][ T5584] loop3: detected capacity change from 0 to 4096 [ 110.742824][ T4195] Remounting filesystem read-only [ 110.757953][ T4195] NILFS (loop2): error -5 truncating bmap (ino=12) [ 110.784257][ T4195] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 110.826229][ T5584] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 110.932887][ T5584] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 110.954596][ T5591] mmap: syz.1.509 (5591) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 110.961683][ T5592] loop2: detected capacity change from 0 to 1024 [ 111.001648][ T5584] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 111.060818][ T5584] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 111.083709][ T5592] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 111.133622][ T5584] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 111.198196][ T5592] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.505: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.252725][ T5584] ntfs: volume version 3.1. [ 111.263067][ T5599] loop1: detected capacity change from 0 to 1024 [ 111.271037][ T5592] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 111.287944][ T5584] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 111.321847][ T5592] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.505: lblock 0 mapped to illegal pblock 48 (length 1) [ 111.346036][ T5584] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 111.376576][ T5592] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 111.386148][ T5584] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 111.397660][ T5592] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.505: Failed to acquire dquot type 0 [ 111.422687][ T5592] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 111.459949][ T5599] hfsplus: bad catalog entry type [ 111.500997][ T5592] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.505: mark_inode_dirty error [ 111.527563][ T5592] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 111.538133][ T144] hfsplus: b-tree write err: -5, ino 25 [ 111.541312][ T5579] loop0: detected capacity change from 0 to 32768 [ 111.543962][ T144] hfsplus: b-tree write err: -5, ino 4 [ 111.565786][ T5592] EXT4-fs (loop2): 1 orphan inode deleted [ 111.578829][ T144] hfsplus: b-tree write err: -5, ino 2 [ 111.586068][ T5592] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,jqfmt=vfsv1,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 111.586422][ T4244] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.633612][ T5597] loop4: detected capacity change from 0 to 32768 [ 111.686954][ T4244] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 111.727050][ T5597] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.506 (5597) [ 111.779672][ T5579] JBD2: Ignoring recovery information on journal [ 111.857049][ T5597] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 111.915881][ T5597] BTRFS info (device loop4): force zlib compression, level 3 [ 111.928963][ T5597] BTRFS info (device loop4): turning on flush-on-commit [ 111.936713][ T5597] BTRFS info (device loop4): max_inline at 4096 [ 111.943127][ T5597] BTRFS info (device loop4): using free space tree [ 111.951650][ T5597] BTRFS info (device loop4): has skinny extents [ 111.953658][ T4244] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.012794][ T5579] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.026712][ T4244] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 112.085715][ T1111] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 112.086590][ T4195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 112.148859][ T4195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 112.169903][ T4195] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 112.188169][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 112.321910][ T5597] BTRFS info (device loop4): enabling ssd optimizations [ 112.425803][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.476015][ T1111] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 112.525160][ T1111] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.567504][ T1111] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.590799][ T1111] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 112.662815][ T1111] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.683408][ T1111] usb 4-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 112.692761][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 112.706476][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.757270][ T1111] usb 4-1: config 0 descriptor?? [ 112.812877][ T5643] Symlink component flag not implemented [ 112.825795][ T4234] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 112.834518][ T5643] Symlink component flag not implemented [ 112.840954][ T4234] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 112.862809][ T5643] Symlink component flag not implemented (128) [ 112.883025][ T4234] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 112.894997][ T5643] Symlink component flag not implemented (122) [ 112.914107][ T4234] usb 2-1: config 1 has no interface number 0 [ 112.929696][ T4234] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.954829][ T4234] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 112.983214][ T4234] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 113.026028][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.098536][ T4234] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 113.234653][ T1111] wacom 0003:056A:0725.0008: unknown main item tag 0x0 [ 113.238366][ T5664] batman_adv: batadv0: Adding interface: gretap1 [ 113.257781][ T1111] wacom 0003:056A:0725.0008: Unknown device_type for 'HID 056a:0725'. Ignoring. [ 113.296888][ T4234] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 113.305741][ T5664] batman_adv: batadv0: Interface activated: gretap1 [ 113.464726][ T4234] usb 4-1: USB disconnect, device number 4 [ 113.517116][ T5628] udc-core: couldn't find an available UDC or it's busy [ 113.532215][ T5628] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.547907][ T1111] usb 2-1: USB disconnect, device number 5 [ 113.584996][ T1111] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 113.605948][ T5677] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.741259][ T5679] ALSA: seq fatal error: cannot create timer (-19) [ 114.235669][ T5698] mkiss: ax0: crc mode is auto. [ 114.254895][ T5703] set_capacity_and_notify: 3 callbacks suppressed [ 114.254913][ T5703] loop2: detected capacity change from 0 to 256 [ 114.298814][ T5706] netlink: 'syz.3.547': attribute type 13 has an invalid length. [ 114.312128][ T5706] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.547'. [ 114.403519][ T5703] FAT-fs (loop2): Directory bread(block 64) failed [ 114.435938][ T5703] FAT-fs (loop2): Directory bread(block 65) failed [ 114.442714][ T5703] FAT-fs (loop2): Directory bread(block 66) failed [ 114.472197][ T5703] FAT-fs (loop2): Directory bread(block 67) failed [ 114.525332][ T5703] FAT-fs (loop2): Directory bread(block 68) failed [ 114.546942][ T5703] FAT-fs (loop2): Directory bread(block 69) failed [ 114.559259][ T5703] FAT-fs (loop2): Directory bread(block 70) failed [ 114.601574][ T5703] FAT-fs (loop2): Directory bread(block 71) failed [ 114.635378][ T5703] FAT-fs (loop2): Directory bread(block 72) failed [ 114.666742][ T5703] FAT-fs (loop2): Directory bread(block 73) failed [ 115.019307][ T5731] loop4: detected capacity change from 0 to 64 [ 115.314692][ T5714] loop0: detected capacity change from 0 to 32768 [ 115.432971][ T5714] read_mapping_page failed! [ 115.439322][ T5745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 115.468584][ T5714] ERROR: (device loop0): txCommit: [ 115.468584][ T5714] [ 115.537090][ T5748] read_mapping_page failed! [ 115.541671][ T5748] ERROR: (device loop0): txCommit: [ 115.541671][ T5748] [ 115.671932][ T4241] read_mapping_page failed! [ 115.677084][ T5722] loop1: detected capacity change from 0 to 32768 [ 115.689018][ T5754] loop3: detected capacity change from 0 to 1024 [ 115.702348][ T4241] ERROR: (device loop0): txCommit: [ 115.702348][ T4241] [ 115.730384][ T4241] jfs_write_inode: jfs_commit_inode failed! [ 115.795776][ T5754] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.833481][ T4241] read_mapping_page failed! [ 115.839951][ T5754] EXT4-fs (loop3): group descriptors corrupted! [ 115.859443][ T4241] ERROR: (device loop1): txCommit: [ 115.859443][ T4241] [ 115.915941][ T4241] jfs_write_inode: jfs_commit_inode failed! [ 116.510130][ T5784] loop4: detected capacity change from 0 to 24 [ 116.789134][ T5747] loop2: detected capacity change from 0 to 40427 [ 116.854268][ T5747] F2FS-fs (loop2): invalid crc value [ 116.923280][ T5747] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.034039][ T5799] loop4: detected capacity change from 0 to 2048 [ 117.074941][ T5799] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 117.090619][ T5799] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.192977][ T5747] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.279736][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 117.279756][ T26] audit: type=1800 audit(1779456863.766:5): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.566" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 117.389424][ T4195] attempt to access beyond end of device [ 117.389424][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 117.627212][ T5814] loop4: detected capacity change from 0 to 2048 [ 117.723835][ T5824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.115720][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.230946][ T5838] loop1: detected capacity change from 0 to 128 [ 118.331598][ T5838] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 118.424281][ T4193] sysv_free_block: trying to free block not in datazone [ 118.432880][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 118.453906][ T5843] nfs4: Unexpected value for 'rdma' [ 118.507567][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 118.575823][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.604565][ T5849] netlink: 'syz.4.611': attribute type 13 has an invalid length. [ 118.634640][ T4233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.648279][ T5849] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.611'. [ 118.669143][ T4233] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 118.709560][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.770333][ T4233] usb 1-1: config 0 descriptor?? [ 118.948264][ T5859] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.015725][ T5859] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.092825][ T5859] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 119.256116][ T4233] hid (null): unknown global tag 0xe [ 119.264155][ T4233] hid-u2fzero 0003:10C4:8ACF.0009: unknown global tag 0xe [ 119.306800][ T4233] hid-u2fzero 0003:10C4:8ACF.0009: item 0 2 1 14 parsing failed [ 119.352382][ T4233] hid-u2fzero: probe of 0003:10C4:8ACF.0009 failed with error -22 [ 119.407884][ T5878] set_capacity_and_notify: 3 callbacks suppressed [ 119.407899][ T5878] loop1: detected capacity change from 0 to 512 [ 119.466984][ T5656] usb 1-1: USB disconnect, device number 6 [ 119.658670][ T5878] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,bsddf,dioread_lock,,errors=continue. Quota mode: writeback. [ 119.752264][ T5878] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.030365][ T5903] capability: warning: `syz.1.634' uses 32-bit capabilities (legacy support in use) [ 120.046516][ T5901] loop2: detected capacity change from 0 to 2048 [ 120.154597][ T5909] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.205302][ T5881] loop4: detected capacity change from 0 to 32768 [ 120.261664][ T5912] loop3: detected capacity change from 0 to 128 [ 120.300966][ T5881] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 120.435945][ T5912] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 120.472689][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 120.522718][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 120.720073][ T5931] loop2: detected capacity change from 0 to 256 [ 120.726067][ T5929] loop3: detected capacity change from 0 to 1024 [ 120.751370][ T5931] exfat: Deprecated parameter 'utf8' [ 120.765765][ T5931] exfat: Deprecated parameter 'namecase' [ 120.786954][ T5931] exfat: Deprecated parameter 'namecase' [ 120.836098][ T5931] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 121.036266][ T5939] loop4: detected capacity change from 0 to 512 [ 121.214350][ T5939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.355675][ T5939] EXT4-fs warning (device loop4): ext4_group_extend:1823: can't shrink FS - resize aborted [ 121.377921][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 121.598720][ T5913] loop1: detected capacity change from 0 to 32768 [ 121.765335][ T5913] XFS (loop1): Mounting V5 Filesystem [ 121.941970][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 121.945295][ T5988] loop2: detected capacity change from 0 to 64 [ 121.993626][ T5913] XFS (loop1): Ending clean mount [ 122.001121][ T2301] kernel write not supported for file /dsp (pid: 2301 comm: kworker/0:3) [ 122.150506][ T4193] XFS (loop1): Unmounting Filesystem [ 122.163445][ T2301] kernel write not supported for file /media0 (pid: 2301 comm: kworker/0:3) [ 122.175625][ T5997] loop3: detected capacity change from 0 to 512 [ 122.301642][ T5997] EXT4-fs (loop3): Ignoring removed nobh option [ 122.355827][ T5997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.390016][ T6004] netlink: 56 bytes leftover after parsing attributes in process `syz.0.679'. [ 122.429142][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 122.448824][ T5997] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.490815][ T5997] EXT4-fs (loop3): 1 truncate cleaned up [ 122.500383][ T6008] autofs4:pid:6008:autofs_fill_super: called with bogus options [ 122.505528][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 122.559820][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.835840][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 122.967109][ T23] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 122.989002][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.030946][ T23] usb 3-1: config 0 has no interface number 0 [ 123.086593][ T6028] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.121290][ T6028] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.169259][ T6031] NILFS (loop3): invalid segment: Checksum error in segment payload [ 123.207925][ T6031] NILFS (loop3): trying rollback from an earlier position [ 123.243307][ T6031] NILFS (loop3): recovery complete [ 123.278034][ T6028] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 123.286592][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 123.302273][ T6040] FAT-fs (loop4): Directory bread(block 64) failed [ 123.316889][ T6042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.326928][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.363109][ T6040] FAT-fs (loop4): Directory bread(block 65) failed [ 123.372668][ T23] usb 3-1: Product: syz [ 123.385540][ T23] usb 3-1: Manufacturer: syz [ 123.394465][ T6040] FAT-fs (loop4): Directory bread(block 66) failed [ 123.408487][ T23] usb 3-1: SerialNumber: syz [ 123.445954][ T23] usb 3-1: config 0 descriptor?? [ 123.451146][ T6040] FAT-fs (loop4): Directory bread(block 67) failed [ 123.475985][ T6040] FAT-fs (loop4): Directory bread(block 68) failed [ 123.494037][ T6040] FAT-fs (loop4): Directory bread(block 69) failed [ 123.534115][ T6040] FAT-fs (loop4): Directory bread(block 70) failed [ 123.552198][ T6040] FAT-fs (loop4): Directory bread(block 71) failed [ 123.578561][ T6040] FAT-fs (loop4): Directory bread(block 72) failed [ 123.608758][ T6040] FAT-fs (loop4): Directory bread(block 73) failed [ 123.766356][ T4654] usb 3-1: USB disconnect, device number 6 [ 123.898778][ T6036] JBD2: Ignoring recovery information on journal [ 124.002845][ T6036] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.164526][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 124.213887][ T6056] tipc: Started in network mode [ 124.226671][ T6056] tipc: Node identity , cluster identity 4711 [ 124.246799][ T6056] tipc: Failed to set node id, please configure manually [ 124.274942][ T6056] tipc: Enabling of bearer rejected, failed to enable media [ 124.614687][ T6072] set_capacity_and_notify: 4 callbacks suppressed [ 124.614703][ T6072] loop0: detected capacity change from 0 to 2048 [ 124.636691][ T6044] loop3: detected capacity change from 0 to 32768 [ 124.693078][ T6044] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.695 (6044) [ 124.729425][ T6079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.783085][ T6072] NILFS error (device loop0): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 124.785386][ T6044] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.835157][ T6044] BTRFS info (device loop3): force zlib compression, level 3 [ 124.839311][ T6072] Remounting filesystem read-only [ 124.847647][ T6044] BTRFS info (device loop3): turning on flush-on-commit [ 124.854877][ T6044] BTRFS info (device loop3): max_inline at 4096 [ 124.881671][ T6044] BTRFS info (device loop3): using free space tree [ 124.895586][ T6044] BTRFS info (device loop3): has skinny extents [ 124.927530][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.965712][ T4654] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.981447][ T6044] BTRFS info (device loop3): enabling ssd optimizations [ 125.244276][ T4654] usb 2-1: Using ep0 maxpacket: 32 [ 125.297047][ T4231] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.315766][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.327725][ T4231] usb 3-1: config 0 descriptor?? [ 125.367245][ T4231] cp210x 3-1:0.0: cp210x converter detected [ 125.390453][ T4654] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 125.406648][ T4654] usb 2-1: config 0 has no interface number 0 [ 125.412956][ T4654] usb 2-1: config 0 interface 184 has no altsetting 0 [ 125.559499][ T6100] loop0: detected capacity change from 0 to 32768 [ 125.573616][ T4654] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 125.603279][ T4654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.614554][ T4654] usb 2-1: Product: syz [ 125.619325][ T4654] usb 2-1: Manufacturer: syz [ 125.624165][ T4654] usb 2-1: SerialNumber: syz [ 125.631631][ T4654] usb 2-1: config 0 descriptor?? [ 125.667417][ T6100] XFS (loop0): Mounting V5 Filesystem [ 125.686742][ T4654] smsc75xx v1.0.0 [ 125.726639][ T6100] XFS (loop0): Ending clean mount [ 125.734231][ T6100] XFS (loop0): Quotacheck needed: Please wait. [ 125.788091][ T6100] XFS (loop0): Quotacheck: Done. [ 125.871607][ T4189] XFS (loop0): Unmounting Filesystem [ 125.896807][ T6116] loop3: detected capacity change from 0 to 32768 [ 125.959129][ T6116] JBD2: Ignoring recovery information on journal [ 126.033840][ T4231] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 126.045947][ T4231] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 126.081068][ T4231] usb 3-1: cp210x converter now attached to ttyUSB0 [ 126.088306][ T6116] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.093573][ T4231] usb 3-1: USB disconnect, device number 7 [ 126.118060][ T4231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.137437][ T4231] cp210x 3-1:0.0: device disconnected [ 126.248851][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 126.304572][ T6128] device macsec1 entered promiscuous mode [ 126.357374][ T4654] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 126.378067][ T4654] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 126.414439][ T4654] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 126.426430][ T4654] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 126.451447][ T4654] usb 2-1: USB disconnect, device number 6 [ 126.466119][ T5636] udevd[5636]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=0 failed: No such file or directory [ 126.571707][ T6134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.673304][ T6141] loop2: detected capacity change from 0 to 1024 [ 126.722601][ T6141] EXT4-fs (loop2): Ignoring removed orlov option [ 126.793607][ T6141] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 126.955057][ T6157] loop3: detected capacity change from 0 to 8 [ 127.084627][ T6157] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.103308][ T6157] SQUASHFS error: Failed to read block 0x71: -5 [ 127.118538][ T6157] SQUASHFS error: lzo decompression failed, data probably corrupt [ 127.151105][ T6157] SQUASHFS error: Failed to read block 0x71: -5 [ 127.178468][ T26] audit: type=1800 audit(1779456873.666:6): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.727" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 127.525328][ T6150] loop0: detected capacity change from 0 to 32768 [ 127.553486][ T6166] loop2: detected capacity change from 0 to 4096 [ 127.659854][ T6180] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.664753][ T6150] XFS (loop0): Mounting V5 Filesystem [ 127.791869][ T6150] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 127.952073][ T6150] XFS (loop0): Starting recovery (logdev: internal) [ 128.023213][ T6150] XFS (loop0): Ending recovery (logdev: internal) [ 128.254587][ T6150] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 128.300651][ T6150] XFS (loop0): Unmount and run xfs_repair [ 128.335803][ T6150] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 128.373093][ T6150] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 128.409874][ T6150] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 128.468085][ T6150] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 128.509727][ T6150] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 128.575867][ T6150] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 128.606740][ T6150] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.611364][ T6213] loop4: detected capacity change from 0 to 128 [ 128.617119][ T5656] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.639551][ T6150] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.653983][ T6215] loop3: detected capacity change from 0 to 512 [ 128.662090][ T6150] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.672769][ T6150] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 128.742881][ T6213] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 128.771428][ T6215] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.3.749: corrupted xattr block 95 [ 128.815650][ T6213] FAT-fs (loop4): Filesystem has been set read-only [ 128.824801][ T4189] XFS (loop0): Unmounting Filesystem [ 128.889502][ T6213] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 128.909556][ T6215] EXT4-fs (loop3): Remounting filesystem read-only [ 128.942131][ T6215] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.749: bg 0: block 7: invalid block bitmap [ 128.972153][ T6215] EXT4-fs (loop3): Remounting filesystem read-only [ 128.981815][ T6215] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 128.999042][ T6204] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 129.007548][ T6215] EXT4-fs (loop3): Remounting filesystem read-only [ 129.007865][ T6215] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2923: inode #11: comm syz.3.749: corrupted xattr block 95 [ 129.021522][ T6204] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 129.036804][ T6215] EXT4-fs (loop3): Remounting filesystem read-only [ 129.044760][ T6215] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 129.055221][ T6215] EXT4-fs (loop3): 1 orphan inode deleted [ 129.062676][ T6215] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,errors=remount-ro,init_itable,block_validity,noquota,lazytime,. Quota mode: none. [ 129.106127][ T6204] F2FS-fs (loop2): invalid crc value [ 129.171158][ T6204] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 129.247018][ T5656] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 129.288416][ T5656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.306514][ T26] audit: type=1800 audit(1779456875.796:7): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.751" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 129.319356][ T6215] EXT4-fs warning (device loop3): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 129.335601][ T5656] usb 2-1: Product: syz [ 129.407545][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.462715][ T5656] usb 2-1: Manufacturer: syz [ 129.467637][ T5656] usb 2-1: SerialNumber: syz [ 129.483884][ T6204] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 129.495151][ T5656] usb 2-1: config 0 descriptor?? [ 129.503376][ T6204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 129.547588][ T5656] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 129.591511][ T5656] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.640661][ T6226] set_capacity_and_notify: 2 callbacks suppressed [ 129.640678][ T6226] loop0: detected capacity change from 0 to 128 [ 129.685296][ T4195] attempt to access beyond end of device [ 129.685296][ T4195] loop2: rw=2049, want=45104, limit=40427 [ 129.715237][ T5656] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 129.739864][ T6230] loop4: detected capacity change from 0 to 512 [ 129.756183][ T5656] usb 2-1: media controller created [ 129.796178][ T6226] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 129.850608][ T6226] hpfs: filesystem error: improperly stopped [ 129.858236][ T6230] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 129.876185][ T6226] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 129.884058][ T6226] hpfs: You really don't want any checks? You are crazy... [ 129.907307][ T5656] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.915944][ T6230] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 129.940423][ T6226] hpfs: Code page index out of array [ 129.942680][ T6230] EXT4-fs (loop4): 1 truncate cleaned up [ 129.950610][ T6226] hpfs: code page support is disabled [ 129.958901][ T6226] hpfs: hpfs_map_4sectors(): unaligned read [ 129.976182][ T6226] hpfs: hpfs_map_4sectors(): unaligned read [ 129.982346][ T6226] hpfs: filesystem error: unable to find root dir [ 129.983352][ T6230] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 130.137441][ T6230] EXT4-fs (loop4): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000002,block_validity,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 130.189140][ T5656] DVB: Unable to find symbol mt352_attach() [ 130.249457][ T6239] loop3: detected capacity change from 0 to 1024 [ 130.322612][ T5656] DVB: Unable to find symbol nxt6000_attach() [ 130.340163][ T6239] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 130.346613][ T5656] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 130.390744][ T6241] loop1: detected capacity change from 0 to 2048 [ 130.392691][ T6239] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 130.484660][ T6244] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.560809][ T5656] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 130.605942][ T5656] dvb-usb: schedule remote query interval to 1000 msecs. [ 130.625001][ T6241] NILFS error (device loop1): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 130.661889][ T5656] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 130.678543][ T6241] Remounting filesystem read-only [ 130.725586][ T5656] dvb-usb: bulk message failed: -22 (7/0) [ 130.750821][ T5656] dvb-usb: bulk message failed: -22 (7/0) [ 130.820528][ T5656] usb 2-1: USB disconnect, device number 7 [ 130.952605][ T5656] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 131.167206][ T4654] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.425620][ T4654] usb 1-1: Using ep0 maxpacket: 8 [ 131.548723][ T6248] loop3: detected capacity change from 0 to 32768 [ 131.570965][ T4654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.594401][ T4654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.661353][ T4654] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.709110][ T4654] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 131.722869][ T4654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.742208][ T6248] XFS (loop3): Mounting V5 Filesystem [ 131.776797][ T4654] usb 1-1: config 0 descriptor?? [ 131.884388][ T6306] loop4: detected capacity change from 0 to 2048 [ 131.937742][ T6248] XFS (loop3): Ending clean mount [ 131.941568][ T6309] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.968435][ T6248] XFS (loop3): Quotacheck needed: Please wait. [ 132.055941][ T6306] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 132.073530][ T6311] loop1: detected capacity change from 0 to 64 [ 132.077599][ T6248] XFS (loop3): Quotacheck: Done. [ 132.119178][ T6306] Remounting filesystem read-only [ 132.288311][ T4654] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 132.303499][ T4654] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 132.322815][ T4654] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 132.344744][ T6286] loop2: detected capacity change from 0 to 32768 [ 132.354323][ T4654] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 132.382358][ T4654] kye 0003:0458:4018.000A: unknown main item tag 0x0 [ 132.465782][ T4654] kye 0003:0458:4018.000A: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.0-1/input0 [ 132.484575][ T4194] XFS (loop3): Unmounting Filesystem [ 132.494778][ T6286] JBD2: Ignoring recovery information on journal [ 132.608112][ T4654] usb 1-1: USB disconnect, device number 7 [ 132.751416][ T6286] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.785439][ T6325] fido_id[6325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 132.803684][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.794'. [ 132.839693][ T6331] tipc: Started in network mode [ 132.858520][ T6331] tipc: Node identity -, cluster identity 4711 [ 132.925800][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932148][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982920][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 132.995684][ T6113] Bluetooth: hci3: command 0x0405 tx timeout [ 133.963964][ T6350] loop2: detected capacity change from 0 to 32768 [ 134.113332][ T6350] XFS (loop2): Mounting V5 Filesystem [ 134.270595][ T6350] XFS (loop2): Ending clean mount [ 134.350793][ T6387] loop3: detected capacity change from 0 to 1024 [ 134.411855][ T6387] EXT4-fs (loop3): Ignoring removed bh option [ 134.448274][ T4195] XFS (loop2): Unmounting Filesystem [ 134.524884][ T6387] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 134.604674][ T6393] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.719649][ T6394] overlayfs: upper fs does not support tmpfile. [ 134.750614][ T6387] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz.3.819: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 134.753658][ T6394] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.805710][ T6387] EXT4-fs (loop3): Remounting filesystem read-only [ 134.810142][ T6394] overlayfs: failed to set xattr on upper [ 134.821655][ T6394] overlayfs: ...falling back to index=off,metacopy=off. [ 134.833821][ T6394] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 134.837524][ T6387] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 134.872368][ T6380] set_capacity_and_notify: 1 callbacks suppressed [ 134.872385][ T6380] loop0: detected capacity change from 0 to 32768 [ 135.119067][ T6380] XFS (loop0): Mounting V5 Filesystem [ 135.137653][ T4193] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 135.176357][ T4193] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 135.236820][ T4193] Remounting filesystem read-only [ 135.242135][ T4193] NILFS (loop1): error -5 truncating bmap (ino=12) [ 135.264752][ T4193] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 135.304655][ T6380] XFS (loop0): Ending clean mount [ 135.321887][ T6380] XFS (loop0): Quotacheck needed: Please wait. [ 135.433985][ T6380] XFS (loop0): Quotacheck: Done. [ 135.458507][ T26] audit: type=1326 audit(1779456881.946:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.1.822" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11fb46ee59 code=0x0 [ 135.570499][ T6410] loop3: detected capacity change from 0 to 4096 [ 135.600741][ T4189] XFS (loop0): Unmounting Filesystem [ 136.252361][ T6414] loop2: detected capacity change from 0 to 40427 [ 136.273709][ T6419] loop3: detected capacity change from 0 to 32768 [ 136.362394][ T6428] loop1: detected capacity change from 0 to 128 [ 136.412067][ T6414] F2FS-fs (loop2): invalid crc value [ 136.456370][ T6436] loop4: detected capacity change from 0 to 512 [ 136.457192][ T6419] XFS (loop3): Mounting V5 Filesystem [ 136.478523][ T6428] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.496317][ T6428] hpfs: filesystem error: improperly stopped [ 136.504759][ T6428] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.513455][ T6428] hpfs: You really don't want any checks? You are crazy... [ 136.514654][ T6436] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.525124][ T6428] hpfs: hpfs_map_sector(): read error [ 136.538576][ T6428] hpfs: code page support is disabled [ 136.540263][ T6414] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.592903][ T6428] hpfs: hpfs_map_4sectors(): unaligned read [ 136.600849][ T6419] XFS (loop3): Ending clean mount [ 136.675910][ T6428] hpfs: hpfs_map_4sectors(): unaligned read [ 136.701119][ T6436] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.833: bg 0: block 384: padding at end of block bitmap is not set [ 136.710978][ T6428] hpfs: filesystem error: unable to find root dir [ 136.799212][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 136.806832][ T6436] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 136.819262][ T4194] XFS (loop3): Unmounting Filesystem [ 136.838634][ T6414] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 136.861889][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 136.922688][ T6414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.926175][ T6436] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.833: attempt to clear invalid blocks 983260 len 1 [ 137.021242][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.030304][ T6436] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.833: Invalid inode table block 0 in block_group 0 [ 137.070479][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.095622][ T6436] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 137.113492][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.120791][ T6436] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 137.147682][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.164625][ T6436] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.833: Invalid inode table block 0 in block_group 0 [ 137.194670][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.234424][ T6421] loop0: detected capacity change from 0 to 40427 [ 137.235817][ T6436] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 137.312574][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.332272][ T6436] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.833: mark_inode_dirty error [ 137.388022][ T6421] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.415849][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.434401][ T6436] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 137.444537][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.491817][ T6436] EXT4-fs (loop4): 1 truncate cleaned up [ 137.523164][ T6436] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 137.597363][ T6421] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 137.601727][ T6458] loop3: detected capacity change from 0 to 736 [ 137.615821][ T6421] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.740973][ T6436] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.833: Invalid inode table block 0 in block_group 0 [ 137.795671][ T6421] attempt to access beyond end of device [ 137.795671][ T6421] loop0: rw=2049, want=45104, limit=40427 [ 137.842786][ T6458] rock: directory entry would overflow storage [ 137.874037][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 137.884213][ T6458] rock: sig=0x3b10, size=4, remaining=3 [ 137.916805][ T6436] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 137.961725][ T6436] EXT4-fs (loop4): Remounting filesystem read-only [ 138.101021][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.842'. [ 138.123366][ T6467] device vlan2 entered promiscuous mode [ 138.133321][ T6467] device geneve1 entered promiscuous mode [ 138.299721][ T6474] loop3: detected capacity change from 0 to 512 [ 138.394232][ T6474] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 138.405776][ T6474] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 138.438683][ T6474] EXT4-fs (loop3): 1 truncate cleaned up [ 138.489666][ T6474] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 138.494068][ T6456] loop1: detected capacity change from 0 to 32768 [ 138.582808][ T6474] EXT4-fs (loop3): re-mounted. Opts: auto_da_alloc=0x00000000000000a3,journal_ioprio=0x0000000000000002,block_validity,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback. [ 138.625213][ T6456] XFS (loop1): Mounting V5 Filesystem [ 138.699966][ T6486] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 138.731577][ T6456] XFS (loop1): Ending clean mount [ 138.738156][ T6486] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 138.877260][ T4193] XFS (loop1): Unmounting Filesystem [ 138.958366][ T6496] netlink: 'syz.4.853': attribute type 2 has an invalid length. [ 139.065819][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.853'. [ 139.673678][ T6518] EXT4-fs (loop2): Ignoring removed oldalloc option [ 139.738178][ T6518] EXT4-fs (loop2): 1 truncate cleaned up [ 139.764459][ T6518] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 139.849975][ T6529] tipc: Started in network mode [ 139.865898][ T6529] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 139.873963][ T6529] tipc: Enabled bearer , priority 4 [ 139.950364][ T6494] diRead: diIAGRead returned -5 [ 140.102983][ T4233] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.135189][ T6533] set_capacity_and_notify: 4 callbacks suppressed [ 140.135207][ T6533] loop4: detected capacity change from 0 to 4096 [ 140.245644][ T6533] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 140.334947][ T6533] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 140.372486][ T6537] loop3: detected capacity change from 0 to 4096 [ 140.515805][ T4233] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.536228][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.561076][ T4657] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 140.572989][ T4196] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 140.587406][ T4196] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 140.618685][ T4196] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 140.630632][ T154] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 140.645881][ T4233] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.655680][ T4196] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 140.674186][ T4233] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.683362][ T4233] usb 1-1: Manufacturer: syz [ 140.713981][ T4233] usb 1-1: config 0 descriptor?? [ 140.735941][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 140.743776][ T4654] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.871524][ T4233] rc_core: IR keymap rc-hauppauge not found [ 140.889010][ T4233] Registered IR keymap rc-empty [ 140.899993][ T6563] netlink: 104 bytes leftover after parsing attributes in process `syz.3.881'. [ 140.905874][ T4233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 140.937606][ T4233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 140.978220][ T4650] tipc: Node number set to 8432298 [ 141.015781][ T4654] usb 3-1: Using ep0 maxpacket: 32 [ 141.035635][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 141.085743][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 141.122290][ T4233] usb 1-1: USB disconnect, device number 8 [ 141.163121][ T6573] loop3: detected capacity change from 0 to 1024 [ 141.170482][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.179778][ T4654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.201870][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.210868][ T4654] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.225960][ T23] usb 2-1: config 0 descriptor?? [ 141.231224][ T4654] usb 3-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 141.251708][ T4654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.278984][ T23] cp210x 2-1:0.0: cp210x converter detected [ 141.286250][ T4654] usb 3-1: config 0 descriptor?? [ 141.384167][ T6573] EXT4-fs (loop3): Test dummy encryption mode enabled [ 141.412065][ T6573] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 141.765127][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x3 [ 141.782578][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.800457][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.810644][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.845532][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.865677][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.900804][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.915792][ T23] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 141.931118][ T4654] wacom 0003:056A:00F0.000B: unknown main item tag 0x0 [ 141.938883][ T23] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 141.964620][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 141.974763][ T4654] wacom 0003:056A:00F0.000B: hidraw0: USB HID v1.01 Device [HID 056a:00f0] on usb-dummy_hcd.2-1/input0 [ 142.011917][ T6579] loop4: detected capacity change from 0 to 40427 [ 142.016949][ T23] usb 2-1: USB disconnect, device number 8 [ 142.058306][ T4654] usb 3-1: USB disconnect, device number 8 [ 142.086108][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.124884][ T6579] F2FS-fs (loop4): invalid crc value [ 142.137236][ T23] cp210x 2-1:0.0: device disconnected [ 142.200233][ T6579] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.223490][ T6589] loop3: detected capacity change from 0 to 32768 [ 142.259131][ T6603] fido_id[6603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.299110][ T6605] loop0: detected capacity change from 0 to 512 [ 142.313390][ T6579] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.352748][ T6589] ERROR: (device loop3): diAllocAG: numfree > numinos [ 142.352748][ T6589] [ 142.399270][ T6605] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 142.439693][ T6589] ialloc: diAlloc returned -5! [ 142.446074][ T6605] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.516470][ T6579] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 142.778394][ T6617] loop2: detected capacity change from 0 to 1024 [ 142.840083][ T6617] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.946852][ T6617] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 143.145664][ T4654] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.239140][ T6627] loop1: detected capacity change from 0 to 128 [ 143.303367][ T6627] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.353527][ T6627] hpfs: filesystem error: improperly stopped [ 143.369988][ T6627] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.406036][ T6627] hpfs: You really don't want any checks? You are crazy... [ 143.448367][ T6627] hpfs: Code page index out of array [ 143.453944][ T6627] hpfs: code page support is disabled [ 143.467521][ T6627] hpfs: hpfs_map_4sectors(): unaligned read [ 143.476813][ T6627] hpfs: hpfs_map_4sectors(): unaligned read [ 143.502604][ T6627] hpfs: filesystem error: unable to find root dir [ 143.601587][ T4654] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.622333][ T4654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.671095][ T6639] loop2: detected capacity change from 0 to 128 [ 143.746000][ T4654] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.757244][ T6639] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.785632][ T4654] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 143.793686][ T4654] usb 4-1: Manufacturer: syz [ 143.856335][ T4654] usb 4-1: config 0 descriptor?? [ 143.879467][ T6639] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.012296][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.047296][ T6639] syz.2.909 (6639) used greatest stack depth: 21104 bytes left [ 144.055888][ T4654] rc_core: IR keymap rc-hauppauge not found [ 144.062039][ T4654] Registered IR keymap rc-empty [ 144.095271][ T4654] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 144.119900][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.146597][ T4654] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 144.165044][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.205023][ T6646] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 144.236858][ C1] Illegal XDP return value 16128, expect packet loss! [ 144.275543][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 144.301000][ T4654] usb 4-1: USB disconnect, device number 5 [ 144.521193][ T6635] loop4: detected capacity change from 0 to 32768 [ 144.818395][ T6635] XFS (loop4): Mounting V5 Filesystem [ 145.139092][ T6661] loop1: detected capacity change from 0 to 32768 [ 145.174520][ T6635] XFS (loop4): Ending clean mount [ 145.184821][ T6635] XFS (loop4): Quotacheck needed: Please wait. [ 145.310501][ T6635] XFS (loop4): Quotacheck: Done. [ 145.384297][ T6661] XFS (loop1): Mounting V5 Filesystem [ 145.585133][ T4196] XFS (loop4): Unmounting Filesystem [ 145.585188][ T6661] XFS (loop1): Ending clean mount [ 145.748918][ T4193] XFS (loop1): Unmounting Filesystem [ 145.807700][ T6720] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.841711][ T6720] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 145.897267][ T6720] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.718863][ T6718] loop3: detected capacity change from 0 to 32768 [ 146.821619][ T6718] ERROR: (device loop3): diRead: i_ino != di_number [ 146.821619][ T6718] [ 146.882317][ T6751] loop1: detected capacity change from 0 to 1024 [ 146.909868][ T6753] loop0: detected capacity change from 0 to 64 [ 147.015150][ T6751] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.597687][ T6770] Zero length message leads to an empty skb [ 147.624094][ T6743] loop2: detected capacity change from 0 to 32768 [ 147.721532][ T6743] XFS (loop2): Mounting V5 Filesystem [ 147.829283][ T6743] XFS (loop2): Ending clean mount [ 147.901143][ T6790] hfs: can't find a HFS filesystem on dev nullb0 [ 147.935015][ T4195] XFS (loop2): Unmounting Filesystem [ 148.001409][ T6776] loop3: detected capacity change from 0 to 32768 [ 148.112232][ T6776] add_index: next_index = 0. Resetting! [ 148.338503][ T6802] loop0: detected capacity change from 0 to 64 [ 148.909202][ T6819] loop1: detected capacity change from 0 to 256 [ 148.932031][ T6822] device veth0_to_team entered promiscuous mode [ 148.958686][ T6821] device veth0_to_team left promiscuous mode [ 149.419216][ T6830] loop2: detected capacity change from 0 to 4096 [ 149.486088][ T6830] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 149.550673][ T6830] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 149.595901][ T6847] loop4: detected capacity change from 0 to 128 [ 149.628315][ T6847] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.636982][ T6830] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 149.701712][ T6830] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 149.709182][ T6847] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.753816][ T6853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.787775][ T6830] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 149.843514][ T6830] ntfs: volume version 3.1. [ 149.850125][ T6830] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 149.862813][ T6830] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 149.882351][ T6830] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 149.893870][ T6830] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 149.908216][ T6830] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 150.232792][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.261034][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 150.313830][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.354278][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.393310][ T6875] set_capacity_and_notify: 1 callbacks suppressed [ 150.393328][ T6875] loop4: detected capacity change from 0 to 64 [ 150.399701][ T6866] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.594960][ T6880] loop1: detected capacity change from 0 to 2048 [ 150.632449][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'. [ 150.728196][ T6880] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.775688][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'. [ 150.885091][ T6892] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1018'. [ 150.894581][ T6892] netlink: 'syz.2.1018': attribute type 9 has an invalid length. [ 150.915012][ T6892] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1018'. [ 150.938727][ T6850] loop3: detected capacity change from 0 to 40427 [ 150.946447][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1018'. [ 150.973478][ T6894] loop4: detected capacity change from 0 to 256 [ 151.053670][ T6850] F2FS-fs (loop3): invalid crc value [ 151.119182][ T6894] FAT-fs (loop4): Directory bread(block 64) failed [ 151.134489][ T6850] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.161650][ T6894] FAT-fs (loop4): Directory bread(block 65) failed [ 151.195775][ T6894] FAT-fs (loop4): Directory bread(block 66) failed [ 151.202462][ T6894] FAT-fs (loop4): Directory bread(block 67) failed [ 151.276643][ T6894] FAT-fs (loop4): Directory bread(block 68) failed [ 151.283270][ T6894] FAT-fs (loop4): Directory bread(block 69) failed [ 151.355891][ T6894] FAT-fs (loop4): Directory bread(block 70) failed [ 151.375932][ T6850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.418383][ T6894] FAT-fs (loop4): Directory bread(block 71) failed [ 151.425143][ T6894] FAT-fs (loop4): Directory bread(block 72) failed [ 151.512351][ T6894] FAT-fs (loop4): Directory bread(block 73) failed [ 151.971989][ T6928] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lW»=¸Ý•¹µ«= [ 151.979277][ T6928] [U] J"—e:ÀÆ" [ 152.023667][ T6927] [U] ­Ý‘M [ 152.174174][ T6932] loop3: detected capacity change from 0 to 2048 [ 152.324348][ T6932] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.384891][ T6904] loop1: detected capacity change from 0 to 40427 [ 152.465080][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 152.588749][ T6904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.657819][ T6950] loop3: detected capacity change from 0 to 128 [ 152.727722][ T6904] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 152.744404][ T6950] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000020000fff,bsddf,,errors=continue. Quota mode: none. [ 152.810872][ T6936] loop2: detected capacity change from 0 to 32768 [ 152.819485][ T6904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.823662][ T6950] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.875321][ T6926] loop0: detected capacity change from 0 to 32768 [ 153.127594][ T6904] attempt to access beyond end of device [ 153.127594][ T6904] loop1: rw=2049, want=45104, limit=40427 [ 153.366317][ T6965] loop4: detected capacity change from 0 to 2048 [ 153.557641][ T6965] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 153.585718][ T6965] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.730750][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 153.742618][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 153.775665][ T6981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1046'. [ 153.810414][ T6982] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.305607][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'. [ 154.736812][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1078'. [ 154.770347][ T7033] device vlan2 entered promiscuous mode [ 154.782826][ T7033] device bridge0 entered promiscuous mode [ 154.791980][ T7035] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 155.073867][ T7049] netlink: 'syz.2.1085': attribute type 2 has an invalid length. [ 155.082415][ T7049] netlink: 'syz.2.1085': attribute type 8 has an invalid length. [ 155.215585][ T5656] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.425169][ T7066] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 155.454338][ T7069] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 155.463806][ T7066] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1095: corrupted in-inode xattr [ 155.484983][ T7066] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1095: couldn't read orphan inode 15 (err -117) [ 155.505028][ T7066] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,nogrpid,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000008,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 155.607768][ T7067] set_capacity_and_notify: 5 callbacks suppressed [ 155.607784][ T7067] loop0: detected capacity change from 0 to 4096 [ 155.677625][ T7074] loop2: detected capacity change from 0 to 256 [ 155.697032][ T5656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.799759][ T7067] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 155.826224][ T7074] FAT-fs (loop2): Directory bread(block 64) failed [ 155.833020][ T7074] FAT-fs (loop2): Directory bread(block 65) failed [ 155.906149][ T5656] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 155.915390][ T5656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.951532][ T7074] FAT-fs (loop2): Directory bread(block 66) failed [ 155.974715][ T7053] loop4: detected capacity change from 0 to 32768 [ 155.977224][ T7067] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 155.997184][ T7074] FAT-fs (loop2): Directory bread(block 67) failed [ 156.007699][ T5656] usb 4-1: Product: syz [ 156.012020][ T5656] usb 4-1: Manufacturer: syz [ 156.046336][ T7074] FAT-fs (loop2): Directory bread(block 68) failed [ 156.054230][ T7074] FAT-fs (loop2): Directory bread(block 69) failed [ 156.075570][ T5656] usb 4-1: SerialNumber: syz [ 156.089333][ T7074] FAT-fs (loop2): Directory bread(block 70) failed [ 156.117690][ T5656] usb 4-1: config 0 descriptor?? [ 156.135380][ T7074] FAT-fs (loop2): Directory bread(block 71) failed [ 156.184547][ T7074] FAT-fs (loop2): Directory bread(block 72) failed [ 156.215395][ T7074] FAT-fs (loop2): Directory bread(block 73) failed [ 156.406587][ T5656] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 156.413456][ T5656] dvb_usb_af9035: probe of 4-1:0.0 failed with error -8 [ 156.469880][ T5656] usb 4-1: USB disconnect, device number 6 [ 156.669668][ T7088] netlink: 'syz.0.1105': attribute type 10 has an invalid length. [ 156.760733][ T7094] loop2: detected capacity change from 0 to 256 [ 156.795282][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.881127][ T276] ------------[ cut here ]------------ [ 156.906056][ T276] WARNING: CPU: 0 PID: 276 at fs/jfs/jfs_dmap.c:2943 dbAdjTree+0x448/0x4d0 [ 156.917431][ T7094] FAT-fs (loop2): Directory bread(block 64) failed [ 156.939018][ T276] Modules linked in: [ 156.944938][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 156.952552][ T7094] FAT-fs (loop2): Directory bread(block 65) failed [ 156.980217][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.005639][ T7094] FAT-fs (loop2): Directory bread(block 66) failed [ 157.012418][ T7094] FAT-fs (loop2): Directory bread(block 67) failed [ 157.035792][ T7088] syz.0.1105 (7088) used greatest stack depth: 19440 bytes left [ 157.048144][ T276] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 157.052091][ T7094] FAT-fs (loop2): Directory bread(block 68) failed [ 157.071037][ T276] Code: e8 5d f9 ee fe e9 5a ff ff ff e8 b3 da a9 fe eb 05 e8 ac da a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 da a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 157.079276][ T7094] FAT-fs (loop2): Directory bread(block 69) failed [ 157.094313][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.148982][ T276] RSP: 0018:ffffc90002c7f668 EFLAGS: 00010293 [ 157.149848][ T7094] FAT-fs (loop2): Directory bread(block 70) failed [ 157.158961][ T276] RAX: ffffffff82cf5b78 RBX: ffff8880556dd010 RCX: ffff88801ded9dc0 [ 157.171816][ T7094] FAT-fs (loop2): Directory bread(block 71) failed [ 157.172627][ T276] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 157.179530][ T7094] FAT-fs (loop2): Directory bread(block 72) failed [ 157.179572][ T7094] FAT-fs (loop2): Directory bread(block 73) failed [ 157.203134][ T276] RBP: 0000000000020056 R08: ffffea000155b747 R09: 1ffffd40002ab6e8 [ 157.221733][ T276] R10: dffffc0000000000 R11: fffff940002ab6e9 R12: ffff8880556dd018 [ 157.232563][ T276] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 157.251581][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 157.274804][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.294771][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.311654][ T276] CR2: 00007f851e096158 CR3: 0000000062e6c000 CR4: 00000000003506f0 [ 157.332445][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.341549][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.353618][ T276] Call Trace: [ 157.358561][ T276] [ 157.361602][ T276] ? __might_sleep+0xf0/0xf0 [ 157.369868][ T276] ? mark_page_accessed+0xce5/0x12b0 [ 157.375200][ T276] dbJoin+0x238/0x300 [ 157.379627][ T276] dbFreeBits+0x4e1/0xd80 [ 157.404041][ T276] dbFree+0x32e/0x640 [ 157.408359][ T276] txFreeMap+0x9e2/0xde0 [ 157.412957][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 157.425326][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.426582][ T276] xtTruncate+0xcc0/0x2d10 [ 157.443249][ T276] ? xtInitRoot+0x160/0x160 [ 157.448509][ T276] ? invalidate_inode_page+0x360/0x360 [ 157.454087][ T276] ? __lock_acquire+0x7d10/0x7d10 [ 157.462146][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 157.469297][ T276] ? memset+0x1e/0x40 [ 157.473405][ T276] ? __dquot_initialize+0x213/0xcd0 [ 157.483654][ T276] jfs_free_zero_link+0x358/0x4b0 [ 157.492057][ T276] ? inode_wait_for_writeback+0x1df/0x220 [ 157.503190][ T276] ? jfs_write_failed+0x190/0x190 [ 157.504920][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.508505][ T276] ? sb_clear_inode_writeback+0x360/0x360 [ 157.525091][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 157.530262][ T276] ? bit_waitqueue+0x30/0x30 [ 157.534952][ T276] jfs_evict_inode+0x359/0x430 [ 157.539848][ T276] ? evict+0x4c3/0x8d0 [ 157.544088][ T276] ? jfs_write_inode+0x220/0x220 [ 157.549356][ T276] evict+0x4c9/0x8d0 [ 157.553441][ T276] ? proc_nr_inodes+0x320/0x320 [ 157.558397][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 157.563710][ T276] ? _raw_spin_unlock+0x24/0x40 [ 157.569085][ T276] ? iput+0x706/0x8a0 [ 157.573284][ T276] jfs_lazycommit+0x435/0xb40 [ 157.588691][ T276] ? txFreelock+0x5a0/0x5a0 [ 157.594044][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 157.616832][ T276] ? sched_dynamic_update+0x210/0x210 [ 157.622454][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 157.636255][ T276] ? __kthread_parkme+0x157/0x1b0 [ 157.641644][ T276] kthread+0x436/0x520 [ 157.658203][ T276] ? txFreelock+0x5a0/0x5a0 [ 157.662881][ T276] ? kthread_blkcg+0xd0/0xd0 [ 157.672102][ T276] ret_from_fork+0x1f/0x30 [ 157.681564][ T276] [ 157.685042][ T276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.693800][ T276] CPU: 1 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 157.701135][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.711482][ T276] Call Trace: [ 157.714789][ T276] [ 157.717756][ T276] dump_stack_lvl+0x188/0x250 [ 157.723802][ T276] ? show_regs_print_info+0x20/0x20 [ 157.729081][ T276] ? load_image+0x400/0x400 [ 157.733725][ T276] panic+0x2e5/0x810 [ 157.737666][ T276] ? bpf_jit_dump+0xd0/0xd0 [ 157.742302][ T276] ? ret_from_fork+0x1f/0x30 [ 157.746943][ T276] ? dbAdjTree+0x448/0x4d0 [ 157.751402][ T276] __warn+0x248/0x2b0 [ 157.755507][ T276] ? dbAdjTree+0x448/0x4d0 [ 157.759968][ T276] report_bug+0x1b7/0x2e0 [ 157.764505][ T276] handle_bug+0x3a/0x70 [ 157.768775][ T276] exc_invalid_op+0x16/0x40 [ 157.773312][ T276] asm_exc_invalid_op+0x16/0x20 [ 157.778542][ T276] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 157.783596][ T276] Code: e8 5d f9 ee fe e9 5a ff ff ff e8 b3 da a9 fe eb 05 e8 ac da a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 da a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 157.803442][ T276] RSP: 0018:ffffc90002c7f668 EFLAGS: 00010293 [ 157.809637][ T276] RAX: ffffffff82cf5b78 RBX: ffff8880556dd010 RCX: ffff88801ded9dc0 [ 157.817844][ T276] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 157.825935][ T276] RBP: 0000000000020056 R08: ffffea000155b747 R09: 1ffffd40002ab6e8 [ 157.834446][ T276] R10: dffffc0000000000 R11: fffff940002ab6e9 R12: ffff8880556dd018 [ 157.842466][ T276] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 157.850572][ T276] ? dbAdjTree+0x448/0x4d0 [ 157.855039][ T276] ? dbAdjTree+0x448/0x4d0 [ 157.859661][ T276] ? __might_sleep+0xf0/0xf0 [ 157.864332][ T276] ? mark_page_accessed+0xce5/0x12b0 [ 157.869800][ T276] dbJoin+0x238/0x300 [ 157.874045][ T276] dbFreeBits+0x4e1/0xd80 [ 157.878427][ T276] dbFree+0x32e/0x640 [ 157.882457][ T276] txFreeMap+0x9e2/0xde0 [ 157.886906][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 157.892162][ T276] xtTruncate+0xcc0/0x2d10 [ 157.896840][ T276] ? xtInitRoot+0x160/0x160 [ 157.901408][ T276] ? invalidate_inode_page+0x360/0x360 [ 157.906933][ T276] ? __lock_acquire+0x7d10/0x7d10 [ 157.912013][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 157.917165][ T276] ? memset+0x1e/0x40 [ 157.921180][ T276] ? __dquot_initialize+0x213/0xcd0 [ 157.926428][ T276] jfs_free_zero_link+0x358/0x4b0 [ 157.931482][ T276] ? inode_wait_for_writeback+0x1df/0x220 [ 157.937246][ T276] ? jfs_write_failed+0x190/0x190 [ 157.942310][ T276] ? sb_clear_inode_writeback+0x360/0x360 [ 157.948067][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 157.953128][ T276] ? bit_waitqueue+0x30/0x30 [ 157.957868][ T276] jfs_evict_inode+0x359/0x430 [ 157.962670][ T276] ? evict+0x4c3/0x8d0 [ 157.966767][ T276] ? jfs_write_inode+0x220/0x220 [ 157.971822][ T276] evict+0x4c9/0x8d0 [ 157.975756][ T276] ? proc_nr_inodes+0x320/0x320 [ 157.980636][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 157.985972][ T276] ? _raw_spin_unlock+0x24/0x40 [ 157.990950][ T276] ? iput+0x706/0x8a0 [ 157.995492][ T276] jfs_lazycommit+0x435/0xb40 [ 158.000653][ T276] ? txFreelock+0x5a0/0x5a0 [ 158.005307][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 158.011338][ T276] ? sched_dynamic_update+0x210/0x210 [ 158.016761][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 158.022695][ T276] ? __kthread_parkme+0x157/0x1b0 [ 158.027939][ T276] kthread+0x436/0x520 [ 158.032151][ T276] ? txFreelock+0x5a0/0x5a0 [ 158.036773][ T276] ? kthread_blkcg+0xd0/0xd0 [ 158.041769][ T276] ret_from_fork+0x1f/0x30 [ 158.046432][ T276] [ 158.049881][ T276] Kernel Offset: disabled [ 158.054606][ T276] Rebooting in 86400 seconds..