last executing test programs: 8.386593859s ago: executing program 0 (id=7249): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x82802, 0xf) write$tcp_mem(r0, &(0x7f00000000c0)={0xfffffffffffffffb, 0x20, 0x0, 0x20, 0x5}, 0x48) 8.339828578s ago: executing program 0 (id=7251): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) 8.219216029s ago: executing program 0 (id=7253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 7.992342144s ago: executing program 0 (id=7257): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x259, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7.602600667s ago: executing program 0 (id=7261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x22, 0x2}]}, 0x140}}, 0x844) 7.066173538s ago: executing program 0 (id=7265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800110101000000000000000afc"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 6.413282238s ago: executing program 32 (id=7265): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800110101000000000000000afc"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 4.526717894s ago: executing program 3 (id=7293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072003303000000000000000007000000c1"], 0x18}}, 0x0) 3.804953363s ago: executing program 5 (id=7300): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) 3.576977998s ago: executing program 3 (id=7303): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x61d, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x44) 3.570099409s ago: executing program 5 (id=7304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000080000000200000000000000000a98000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c38000980340002"], 0xc0}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 3.379084757s ago: executing program 3 (id=7305): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000004c0)={0xfffffffffffffff9, 0x0, '\x00', 0x0, 0x0}) 3.247640508s ago: executing program 5 (id=7308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.950770966s ago: executing program 5 (id=7312): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x8, 0x20000000, 0x7, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) 2.618660863s ago: executing program 2 (id=7316): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1002, 0x4) 2.467595952s ago: executing program 5 (id=7318): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4080, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x2, 0x6246, &(0x7f0000000280)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x1) 2.297939446s ago: executing program 2 (id=7320): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 2.252035088s ago: executing program 1 (id=7321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 2.042687613s ago: executing program 2 (id=7323): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) 1.742109445s ago: executing program 2 (id=7325): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0xa2, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x2, 0x80814) 1.565753435s ago: executing program 4 (id=7326): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, 0x0, 0x0) 1.497284505s ago: executing program 1 (id=7327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0xfffffff0}, 0xa0, 0x2, 0xfffe, 0x1400, 0x6, 'syz0\x00', "8a101cde87c4e2d1722669d35ef109b4dcc1fd6c62c60613f78729f032922eb6", "fd03a0e00782a4228bbe4f40dcda70cfc1b6a749b13e0ae3e3cf08903e09203e", [{0x2, 0x1, {0x2, 0x1}}, {0x0, 0x800, {0x3, 0x1}}, {0x401, 0xfffa, {0x0, 0x3}}, {0x3, 0x400, {0x2, 0x7}}, {0x53, 0x8, {0x3, 0x1}}, {0x6, 0xfff7, {0x1, 0x1000}}, {0x400, 0x6, {0x2, 0x6}}, {0xfff1, 0x6, {0x3, 0x4}}, {0x0, 0x10, {0x1, 0x8}}, {0x2, 0x9, {0x0, 0x5}}, {0xe, 0x9, {0x1, 0x7f}}, {0x7f, 0x9, {0x1, 0x7}}, {0xe, 0x6, {0x0, 0x2}}, {0x7, 0x8, {0x1, 0x1}}, {0x1, 0x800, {0x1, 0x3ff}}, {0x6, 0x6, {0x1, 0x6}}, {0x6, 0x6ce, {0x1, 0x97}}, {0x9, 0xa74, {0x1, 0xd}}, {0x9541, 0x1, {0x1, 0x8}}, {0x1ff, 0x0, {0x0, 0x1}}, {0x5, 0xdd40, {0x1}}, {0x8, 0x6, {0x3, 0x8}}, {0x81, 0x7, {0x2, 0x7}}, {0x8, 0xfff, {0x2, 0x9}}, {0xb7c2, 0x1, {0x2, 0xfffffff5}}, {0x9, 0x0, {0x3, 0x8}}, {0xb1, 0xfff, {0x1, 0x8}}, {0x6, 0x2, {0x0, 0x3}}, {0xfff7, 0x2, {0x0, 0x4}}, {0x9, 0x5, {0x2, 0x80}}, {0xff81, 0x1, {0x2, 0x3}}, {0x80, 0x7d6e, {0x1, 0x5}}, {0x4, 0x40, {0x1, 0xf2ef}}, {0x7, 0x3, {0x2, 0x6}}, {0x1ff, 0xfffc, {0x3, 0x8}}, {0x3, 0x2, {0x1, 0x8001}}, {0xf19, 0xfff, {0x2, 0xffffffff}}, {0x7, 0xfbb, {0x3, 0x13}}, {0xc, 0x8, {0x0, 0x9}}, {0xfff5, 0x7, {0x0, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20008880}, 0x24008010) 1.401001921s ago: executing program 2 (id=7328): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 1.25325851s ago: executing program 3 (id=7329): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @private=0xa010100, 0x19, 0x18}}) 1.24271781s ago: executing program 4 (id=7330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 1.184046987s ago: executing program 1 (id=7331): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) 978.626647ms ago: executing program 4 (id=7332): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f5ffffff00000000000000008500000036000000940000005000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 791.365385ms ago: executing program 1 (id=7333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 590.76966ms ago: executing program 4 (id=7334): r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000880), 0x4) 538.396909ms ago: executing program 1 (id=7335): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0xa, 0xb, 0x9}, 0x20) 279.142911ms ago: executing program 1 (id=7336): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="08001efbb009006e", 0x8}], 0x1, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @rr={0x7, 0x3, 0xcb}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x7, 0x4, "82ea"}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x1, [0x7]}]}}}], 0x50}, 0x804) 261.405517ms ago: executing program 4 (id=7337): r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)={0x1}) 257.935769ms ago: executing program 3 (id=7338): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000140), &(0x7f0000000180)=0xffdb) 198.841156ms ago: executing program 5 (id=7339): r0 = syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 159.643008ms ago: executing program 2 (id=7340): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') setns(r0, 0x0) 74.796075ms ago: executing program 3 (id=7341): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) 0s ago: executing program 4 (id=7342): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0x31c8) kernel console output (not intermixed with test programs): ? preempt_schedule_common+0x82/0xd0 [ 637.291021][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.291049][ T5620] ? preempt_schedule_thunk+0x16/0x40 [ 637.291089][ T5620] f2fs_sync_dirty_inodes+0x30e/0x830 [ 637.291147][ T5620] f2fs_write_checkpoint+0xa3d/0x2710 [ 637.291225][ T5620] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 637.291310][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.291339][ T5620] ? kfree+0x1c5/0x640 [ 637.291367][ T5620] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 637.291404][ T5620] kill_f2fs_super+0x2f6/0x700 [ 637.291449][ T5620] ? __pfx_kill_f2fs_super+0x10/0x10 [ 637.291502][ T5620] ? call_rcu+0x64b/0x8b0 [ 637.291526][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.291554][ T5620] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.291587][ T5620] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.291641][ T5620] deactivate_locked_super+0xbc/0x130 [ 637.291688][ T5620] cleanup_mnt+0x3d3/0x460 [ 637.291719][ T5620] task_work_run+0x1d9/0x270 [ 637.291748][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 637.291791][ T5620] exit_to_user_mode_loop+0x1fa/0x730 [ 637.291826][ T5620] ? rcu_is_watching+0x15/0xb0 [ 637.291852][ T5620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.291881][ T5620] do_syscall_64+0x353/0x580 [ 637.291907][ T5620] ? trace_irq_disable+0x3b/0x140 [ 637.291948][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.291974][ T5620] RIP: 0033:0x7fa53139f0d7 [ 637.291997][ T5620] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 637.292018][ T5620] RSP: 002b:00007ffc75dd45f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 637.292044][ T5620] RAX: 0000000000000000 RBX: 00007fa53143330a RCX: 00007fa53139f0d7 [ 637.292061][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc75dd46b0 [ 637.292077][ T5620] RBP: 00007ffc75dd46b0 R08: 00007ffc75dd56b0 R09: 00000000ffffffff [ 637.292095][ T5620] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc75dd5740 [ 637.292111][ T5620] R13: 00007fa53143330a R14: 0000000000097cc6 R15: 00007ffc75dd5780 [ 637.292150][ T5620] [ 637.743114][ T5620] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 637.847526][T22128] netlink: 'syz.3.6020': attribute type 7 has an invalid length. [ 637.954459][ T5786] usb 5-1: USB disconnect, device number 104 [ 637.994346][ T5786] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 638.005103][ T5786] f81232 5-1:0.0: device disconnected [ 638.133102][T22150] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6027'. [ 638.537742][T22174] loop5: detected capacity change from 0 to 2048 [ 638.581506][T22174] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 638.611110][T22174] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 638.637196][T22174] UDF-fs: Scanning with blocksize 512 failed [ 638.677007][T22174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 638.984850][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.252887][T22214] netlink: 'syz.2.6044': attribute type 1 has an invalid length. [ 639.281687][T22216] No control pipe specified [ 639.296012][T22219] loop1: detected capacity change from 0 to 256 [ 639.325335][T22214] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6044'. [ 639.629784][T22228] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 639.716913][T22228] bond1 (unregistering): Released all slaves [ 639.921733][ T5755] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 640.003204][T22331] loop4: detected capacity change from 0 to 512 [ 640.118326][T22331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.130801][ T5755] usb 1-1: Using ep0 maxpacket: 16 [ 640.132694][ T5755] usb 1-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 640.148908][T22336] loop3: detected capacity change from 0 to 4096 [ 640.160455][ T5755] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 640.187789][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 29, changing to 8 [ 640.215402][T22331] ext4 filesystem being mounted at /1048/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.233643][T22336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.267313][T22329] loop2: detected capacity change from 0 to 4096 [ 640.273694][ T5755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1974, setting to 1024 [ 640.355027][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.369238][ T5755] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.401987][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.471553][ T5755] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 640.497122][ T5755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.539989][ T5755] usb 1-1: Product: syz [ 640.570742][ T5755] usb 1-1: Manufacturer: syz [ 640.608443][ T5755] usb 1-1: SerialNumber: syz [ 640.649440][T22348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 640.671934][ T5755] usb 1-1: config 0 descriptor?? [ 640.700429][T22272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 640.818017][T22404] loop2: detected capacity change from 0 to 64 [ 640.916547][ T5755] rc_core: IR keymap rc-xbox-dvd not found [ 640.947102][ T5755] Registered IR keymap rc-empty [ 640.974781][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 640.974801][ T30] audit: type=1800 audit(2000000445.721:120): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6066" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 641.016778][ T5755] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 641.064551][ T5755] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input46 [ 641.159245][ T5755] usb 1-1: USB disconnect, device number 108 [ 641.165439][ C0] xbox_remote 1-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 641.343441][ T5747] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 641.514954][ T5747] usb 6-1: Using ep0 maxpacket: 32 [ 641.533626][ T5747] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 641.576739][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.613820][ T5747] usb 6-1: Product: syz [ 641.630318][ T5747] usb 6-1: Manufacturer: syz [ 641.657832][ T5747] usb 6-1: SerialNumber: syz [ 641.753456][ T5747] usb 6-1: config 0 descriptor?? [ 641.801629][ T5747] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 642.258515][ T5747] gspca_ov534_9: reg_w failed -71 [ 642.652413][T22522] loop3: detected capacity change from 0 to 2048 [ 642.700780][ T5747] gspca_ov534_9: Unknown sensor 0000 [ 642.700874][ T5747] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 642.741070][T22534] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.789839][ T5747] usb 6-1: USB disconnect, device number 106 [ 642.826658][T22522] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 642.894557][T22522] Remounting filesystem read-only [ 643.274938][T22563] loop1: detected capacity change from 0 to 8 [ 643.372029][T22569] netlink: 'syz.0.6108': attribute type 19 has an invalid length. [ 643.459618][T22573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6109'. [ 643.481384][T22510] loop4: detected capacity change from 0 to 32768 [ 643.536497][T22510] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 643.629091][T22510] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 643.897654][T22602] IPv6: NLM_F_REPLACE set, but no existing node found! [ 644.036887][T22607] loop0: detected capacity change from 0 to 512 [ 644.152526][T22607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.566863][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.014303][T22676] bond0: option miimon: invalid value (18446744072118702920) [ 645.031591][T22676] bond0: option miimon: allowed values 0 - 2147483647 [ 645.417593][ T5747] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 645.549201][T22717] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6147'. [ 645.563726][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6148'. [ 645.581327][T22717] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6147'. [ 645.600485][ T5747] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 645.607769][T22717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6147'. [ 645.627355][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.649997][T22721] openvswitch: netlink: Message has 1 unknown bytes. [ 645.678670][ T5747] usb 1-1: config 0 descriptor?? [ 645.934246][ T5747] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 646.143474][ T803] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 646.159588][ T5747] [drm:udl_init] *ERROR* Selecting channel failed [ 646.265197][ T5747] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 646.301609][ T5747] [drm] Initialized udl on minor 2 [ 646.303169][T22771] loop3: detected capacity change from 0 to 64 [ 646.353069][ T5747] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 646.359805][T22771] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 646.368374][ T803] usb 3-1: Using ep0 maxpacket: 16 [ 646.390481][ T803] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 646.395793][ T5747] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 646.419163][ T803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.465613][ T803] usb 3-1: config 0 has no interface number 0 [ 646.467045][T13623] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 646.481690][ T5747] usb 1-1: USB disconnect, device number 109 [ 646.488324][ T803] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 646.488356][ T803] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 646.488381][ T803] usb 3-1: Product: syz [ 646.488400][ T803] usb 3-1: Manufacturer: syz [ 646.488419][ T803] usb 3-1: SerialNumber: syz [ 646.520616][ T803] usb 3-1: config 0 descriptor?? [ 646.535626][T13623] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 646.563482][T22782] IPv6: sit1: Disabled Multicast RS [ 646.571990][T22782] sit1: entered allmulticast mode [ 646.824591][ T803] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 646.838082][ T803] uvcvideo 3-1:0.105: No valid video chain found. [ 646.968688][ T803] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.046838][ T5747] usb 3-1: USB disconnect, device number 110 [ 647.047379][T22823] loop0: detected capacity change from 0 to 128 [ 647.113380][T22823] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 647.159928][T22823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.265400][T22774] loop5: detected capacity change from 0 to 32768 [ 647.320085][T22774] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 647.402438][T22774] XFS (loop5): Ending clean mount [ 647.613662][ T5629] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 647.789652][ T5627] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 647.961151][ T5817] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 648.167632][T22879] loop2: detected capacity change from 0 to 512 [ 648.244908][T22886] loop0: detected capacity change from 0 to 8 [ 648.321291][T22886] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 648.415859][T22833] loop1: detected capacity change from 0 to 40427 [ 648.450392][T22833] F2FS-fs: heap/no_heap options were deprecated [ 648.493133][T22833] F2FS-fs (loop1): invalid crc value [ 648.503778][T22898] netlink: 'syz.3.6187': attribute type 3 has an invalid length. [ 648.558259][T22909] openvswitch: netlink: IP tunnel TTL not specified. [ 648.848657][T22833] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 648.917438][T22833] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 649.075882][ T5817] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 649.088866][T22932] loop5: detected capacity change from 0 to 1024 [ 649.115945][ T5817] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 649.157070][ T5621] syz-executor: attempt to access beyond end of device [ 649.157070][ T5621] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 649.187886][T22936] loop3: detected capacity change from 0 to 1024 [ 649.218349][T22936] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 649.238330][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 649.238361][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 649.238377][ T5621] Call Trace: [ 649.238387][ T5621] [ 649.238398][ T5621] dump_stack_lvl+0xe8/0x150 [ 649.238441][ T5621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 649.238481][ T5621] f2fs_write_end_io+0x124b/0x1710 [ 649.238544][ T5621] __submit_merged_bio+0x258/0x6a0 [ 649.238576][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.238606][ T5621] ? rcu_is_watching+0x15/0xb0 [ 649.238639][ T5621] __submit_merged_write_cond+0x3c9/0x4e0 [ 649.238683][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 649.238732][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.238772][ T5621] f2fs_write_data_pages+0x2a27/0x36f0 [ 649.238808][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.238837][ T5621] ? __lock_acquire+0x683/0x2cf0 [ 649.238914][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 649.238950][ T5621] ? is_bpf_text_address+0x26/0x2b0 [ 649.239003][ T5621] ? arch_stack_walk+0xfb/0x150 [ 649.239063][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239092][ T5621] ? add_lock_to_list+0xc7/0x100 [ 649.239120][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239149][ T5621] ? __lock_acquire+0x13e8/0x2cf0 [ 649.239217][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239246][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 649.239287][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239321][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239350][ T5621] ? do_raw_spin_unlock+0xf5/0x210 [ 649.239381][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 649.239423][ T5621] do_writepages+0x338/0x560 [ 649.239463][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239495][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239529][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239559][ T5621] ? do_raw_spin_unlock+0xf5/0x210 [ 649.239594][ T5621] filemap_fdatawrite+0x1e9/0x2f0 [ 649.239637][ T5621] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 649.239718][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239750][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.239785][ T5621] ? do_raw_spin_unlock+0xf5/0x210 [ 649.239821][ T5621] f2fs_sync_dirty_inodes+0x30e/0x830 [ 649.239879][ T5621] f2fs_write_checkpoint+0xa3d/0x2710 [ 649.239958][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 649.240044][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.240073][ T5621] ? kfree+0x1c5/0x640 [ 649.240102][ T5621] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 649.240139][ T5621] kill_f2fs_super+0x2f6/0x700 [ 649.240185][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 649.240239][ T5621] ? call_rcu+0x64b/0x8b0 [ 649.240264][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.240300][ T5621] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.240328][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.240373][ T5621] deactivate_locked_super+0xbc/0x130 [ 649.240414][ T5621] cleanup_mnt+0x3d3/0x460 [ 649.240446][ T5621] task_work_run+0x1d9/0x270 [ 649.240475][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 649.240513][ T5621] exit_to_user_mode_loop+0x1fa/0x730 [ 649.240548][ T5621] ? rcu_is_watching+0x15/0xb0 [ 649.240575][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.240604][ T5621] do_syscall_64+0x353/0x580 [ 649.240631][ T5621] ? trace_irq_disable+0x3b/0x140 [ 649.240672][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.240698][ T5621] RIP: 0033:0x7f20c399f0d7 [ 649.240722][ T5621] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 649.240743][ T5621] RSP: 002b:00007ffc7f439f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 649.240769][ T5621] RAX: 0000000000000000 RBX: 00007f20c3a3330a RCX: 00007f20c399f0d7 [ 649.240787][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7f43a030 [ 649.240803][ T5621] RBP: 00007ffc7f43a030 R08: 00007ffc7f43b030 R09: 00000000ffffffff [ 649.240822][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7f43b0c0 [ 649.240838][ T5621] R13: 00007f20c3a3330a R14: 000000000009a88b R15: 00007ffc7f43b100 [ 649.240878][ T5621] [ 649.684115][T22950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6202'. [ 649.700586][ T5627] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 649.735439][ T5621] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 649.798291][T22936] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.6197: lblock 2 mapped to illegal pblock 2 (length 1) [ 649.834566][T22936] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 649.838032][T22936] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 649.847179][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 649.847203][ C0] EXT4-fs (loop3): initial error at time 2000000454: ext4_map_blocks:791: inode 3: block 2 [ 649.847252][ C0] EXT4-fs (loop3): last error at time 2000000454: ext4_map_blocks:791: inode 3: block 2 [ 650.098675][T22936] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.6197: lblock 0 mapped to illegal pblock 48 (length 1) [ 650.133097][T22936] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 650.136260][T22936] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 650.191125][T22936] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.6197: Failed to acquire dquot type 0 [ 650.216347][T22936] loop3: lost filesystem error report for type 5 error -117 [ 650.216677][T22936] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 650.329917][T22936] loop3: lost filesystem error report for type 5 error -117 [ 650.330818][T22936] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.6197: mark_inode_dirty error [ 650.408969][T22936] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 650.409272][T22936] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 650.491914][T22936] EXT4-fs (loop3): 1 orphan inode deleted [ 650.505028][ T5817] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 650.538144][T22936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.566827][ T5817] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 650.567147][ T5817] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 650.669982][ T5817] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 650.749254][T22986] loop2: detected capacity change from 0 to 1024 [ 650.876667][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.894735][ T5817] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 650.945977][T22992] loop4: detected capacity change from 0 to 1024 [ 650.962066][ T5817] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 650.962328][ T5817] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 651.015060][ T5817] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 651.056905][ T5817] loop3: lost filesystem error report for type 5 error -117 [ 651.059123][ T5622] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 651.145815][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 651.146131][ T5622] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 651.224526][ T5622] loop3: lost filesystem error report for type 5 error -117 [ 651.227234][ T5622] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 651.254033][ T5622] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 651.392487][T22960] loop5: detected capacity change from 0 to 32768 [ 651.394218][T23016] loop2: detected capacity change from 0 to 256 [ 651.451099][T22960] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 651.684145][T23040] loop1: detected capacity change from 0 to 4096 [ 651.698820][T23040] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 651.747559][T23040] ntfs3(loop1): It is recommended to use chkdsk. [ 651.790714][T22960] XFS (loop5): Ending clean mount [ 651.878894][T22960] XFS (loop5): Quotacheck needed: Please wait. [ 651.889449][ T30] audit: type=1326 audit(2000000455.917:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.3.6225" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaec19de99 code=0x7ffc0000 [ 652.021496][ T30] audit: type=1326 audit(2000000455.926:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.3.6225" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaec19de99 code=0x7ffc0000 [ 652.054177][T23059] loop0: detected capacity change from 0 to 1024 [ 652.094329][ T30] audit: type=1326 audit(2000000455.926:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.3.6225" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaec19de99 code=0x7ffc0000 [ 652.124833][ T30] audit: type=1326 audit(2000000455.926:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.3.6225" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaec19de99 code=0x7ffc0000 [ 652.154843][T22960] XFS (loop5): Quotacheck: Done. [ 652.167690][ T30] audit: type=1326 audit(2000000455.926:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.3.6225" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fbaec19de99 code=0x7ffc0000 [ 652.306243][T23059] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 652.317399][ T30] audit: type=1326 audit(2000000455.926:126): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23047 comm="syz.3.6225" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaec19de99 code=0x7ffc0000 [ 652.391491][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6231'. [ 652.391709][T23054] loop2: detected capacity change from 0 to 4096 [ 652.429470][ T5629] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 652.450021][T23054] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 652.618021][T23054] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 652.732583][T23054] ntfs3(loop2): ino=1e, mi_enum_attr [ 653.018706][T13623] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 653.185236][T23112] netlink: 'syz.5.6232': attribute type 1 has an invalid length. [ 653.195158][T23112] netlink: 'syz.5.6232': attribute type 1 has an invalid length. [ 653.212650][T13623] usb 5-1: Using ep0 maxpacket: 32 [ 653.240221][T13623] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 653.282600][T23116] comedi comedi1: 8255: I/O port conflict (0x140,4) [ 653.291171][T13623] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.319078][T13623] usb 5-1: config 0 has no interface number 0 [ 653.327260][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 653.346291][T13623] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.396966][T13623] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 653.417314][T13623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.434258][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 653.448065][T13623] usb 5-1: Product: syz [ 653.462181][T13623] usb 5-1: Manufacturer: syz [ 653.478171][T13623] usb 5-1: SerialNumber: syz [ 653.510199][T13623] usb 5-1: config 0 descriptor?? [ 653.530698][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 653.545663][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.567156][T13623] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 653.583525][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 653.595069][T13623] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 653.611819][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.637207][ T10] usb 3-1: Product: syz [ 653.643270][ T10] usb 3-1: Manufacturer: syz [ 653.652636][ T10] usb 3-1: SerialNumber: syz [ 653.708097][ T10] usb 3-1: config 0 descriptor?? [ 653.757358][T13623] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 653.764767][ T10] cdc_ether 3-1:0.0: missing cdc header descriptor [ 653.784736][T13623] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 653.794824][ T10] usb 3-1: unsupported MDLM descriptors [ 653.827943][T23145] loop3: detected capacity change from 0 to 1024 [ 653.855194][T23145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 653.888376][T23145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 653.910421][T23145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 653.962836][T13623] usb 3-1: USB disconnect, device number 111 [ 653.975701][T23145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.043319][ T5627] usb 5-1: USB disconnect, device number 105 [ 654.065580][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.259443][T23179] netlink: 'syz.3.6255': attribute type 26 has an invalid length. [ 654.377597][T23129] loop5: detected capacity change from 0 to 32768 [ 654.430651][T23129] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 654.430651][T23129] [ 654.479514][T23129] ERROR: (device loop5): remounting filesystem as read-only [ 654.497147][T23129] ialloc: diAlloc returned -5! [ 655.233810][T23232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6271'. [ 655.321708][T23232] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 655.581302][T23239] loop4: detected capacity change from 0 to 512 [ 655.617386][T23239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.638238][T23239] ext4 filesystem being mounted at /1086/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.669468][T23239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 655.822204][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.839836][ T5627] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 656.031971][ T5627] usb 1-1: Using ep0 maxpacket: 16 [ 656.055595][ T5627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 656.095363][ T5627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.139349][ T5627] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 656.174288][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.208060][ T5627] usb 1-1: Product: syz [ 656.217349][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6288'. [ 656.221547][ T5627] usb 1-1: Manufacturer: syz [ 656.251212][T23291] loop4: detected capacity change from 0 to 2048 [ 656.259674][ T5627] usb 1-1: SerialNumber: syz [ 656.301810][T23291] loop4: p1 p3 p4 [ 656.301810][T23291] p1: [ 656.334997][T23291] loop4: p4 size 589824 extends beyond EOD, truncated [ 656.448964][ T803] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 656.493231][T23313] loop3: detected capacity change from 0 to 256 [ 656.565876][ T5627] snd-ua101 1-1:1.1: sample format descriptor not found [ 656.617424][ T5627] snd-ua101 1-1:1.0: invalid num_altsetting [ 656.666915][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.722483][ T803] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 656.737484][ T5627] usb 1-1: USB disconnect, device number 110 [ 656.790208][ T803] usb 3-1: config 1 interface 0 has no altsetting 0 [ 656.832031][ T803] usb 3-1: string descriptor 0 read error: -22 [ 656.850726][ T803] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 656.883314][ T803] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 656.944029][ T803] usb 3-1: 0:2 : does not exist [ 657.078540][ T803] usb-storage 3-1:1.1: USB Mass Storage device detected [ 657.164803][T23380] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6303'. [ 657.192451][T23381] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6301'. [ 657.232758][T23380] 0·: renamed from hsr0 (while UP) [ 657.307311][ T5993] udevd[5993]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 657.314352][T10373] udevd[10373]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 657.332792][T23380] 0·: entered allmulticast mode [ 657.352192][ T5899] udevd[5899]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 657.352553][ T6011] udevd[6011]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 657.374374][T23380] hsr_slave_0: entered allmulticast mode [ 657.406122][T23380] hsr_slave_1: entered allmulticast mode [ 657.415927][ T803] usb 3-1: us122l: couldn't allocate write buffer [ 657.434457][T23380] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 657.443451][ T803] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 657.496206][ T803] usb 3-1: USB disconnect, device number 112 [ 657.848167][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 657.848188][ T30] audit: type=1326 audit(2000000461.501:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 657.888660][ T30] audit: type=1326 audit(2000000461.501:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 657.988749][ T30] audit: type=1326 audit(2000000461.520:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 658.020155][T23430] loop3: detected capacity change from 0 to 256 [ 658.073690][ T30] audit: type=1326 audit(2000000461.520:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 658.179851][ T30] audit: type=1326 audit(2000000461.520:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 658.275820][ T30] audit: type=1326 audit(2000000461.520:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 658.389882][ T30] audit: type=1326 audit(2000000461.520:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 658.451355][T23463] loop1: detected capacity change from 0 to 8 [ 658.489629][ T30] audit: type=1326 audit(2000000461.520:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23422 comm="syz.0.6311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa53139de99 code=0x7ffc0000 [ 658.530656][T23463] SQUASHFS error: Unable to read inode 0xa7 [ 658.602177][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6325'. [ 658.651601][ T5627] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 658.830560][ T5627] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 658.851403][ T5627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.918052][T23500] loop1: detected capacity change from 0 to 4096 [ 658.936754][ T5627] usb 5-1: config 0 descriptor?? [ 658.979048][T23500] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 659.004276][T23487] bond1: option xmit_hash_policy: invalid value (6) [ 659.005178][T23537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6335'. [ 659.035397][T23487] bond1 (unregistering): Released all slaves [ 659.152659][T23500] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 659.446948][ T5627] ath6kl: Failed to submit usb control message: -71 [ 659.483701][ T5627] ath6kl: unable to send the bmi data to the device: -71 [ 659.535417][ T5627] ath6kl: Unable to send get target info: -71 [ 659.606218][ T5627] ath6kl: Failed to init ath6kl core: -71 [ 659.631149][ T5627] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 659.688487][ T5627] usb 5-1: USB disconnect, device number 106 [ 659.832276][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6345'. [ 660.198746][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6351'. [ 660.348115][T23636] loop3: detected capacity change from 0 to 64 [ 660.398380][T23638] loop0: detected capacity change from 0 to 256 [ 660.483923][T23647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6358'. [ 660.501701][T23638] exFAT-fs (loop0): error, no upcase table entry. Please run fsck [ 660.533068][T23638] exFAT-fs (loop0): Filesystem has been set read-only [ 660.559522][T23638] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 660.646405][T23653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6360'. [ 661.325766][T23703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.333067][T23703] IPv6: NLM_F_CREATE should be set when creating new route [ 661.340359][T23703] IPv6: NLM_F_CREATE should be set when creating new route [ 661.468780][T23712] netlink: 'syz.1.6380': attribute type 2 has an invalid length. [ 661.494846][T23712] netlink: 'syz.1.6380': attribute type 2 has an invalid length. [ 661.569956][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 661.643468][ T30] audit: type=1326 audit(2000000465.047:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23721 comm="syz.4.6382" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff494d9de99 code=0x7ffc0000 [ 661.738543][T23728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6384'. [ 661.770512][ T30] audit: type=1326 audit(2000000465.075:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23721 comm="syz.4.6382" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff494d9de99 code=0x7ffc0000 [ 662.326765][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6394'. [ 662.605143][T23776] loop0: detected capacity change from 0 to 16 [ 662.639557][T23779] loop5: detected capacity change from 0 to 8 [ 662.648475][T23776] erofs: Unknown parameter '5‚ser_xattr' [ 662.678831][T23776] cifs: Unknown parameter '5‚ser_xattr' [ 663.235699][T23817] loop4: detected capacity change from 0 to 256 [ 663.268099][T23819] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 663.289089][T23817] exfat: Deprecated parameter 'namecase' [ 663.331237][T23817] exfat: Deprecated parameter 'namecase' [ 663.434347][T23817] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf24e9af, utbl_chksum : 0xe619d30d) [ 663.857905][ T5747] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 663.928483][T23865] openvswitch: netlink: Actions may not be safe on all matching packets [ 664.029555][ T5747] usb 3-1: Using ep0 maxpacket: 32 [ 664.049749][ T5747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 664.056739][T23866] can: request_module (can-proto-3) failed. [ 664.086967][ T5747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.120103][ T5747] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 664.151601][ T5747] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 664.182685][ T5747] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 664.192726][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.221043][ T5747] usb 3-1: Product: syz [ 664.229173][ T5747] usb 3-1: Manufacturer: syz [ 664.242302][ T5747] usb 3-1: SerialNumber: syz [ 664.323971][T23889] loop3: detected capacity change from 0 to 64 [ 664.384334][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 664.384355][ T30] audit: type=1800 audit(2000000467.610:150): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6434" name="file2" dev="loop3" ino=6 res=0 errno=0 [ 664.447340][T23888] loop4: detected capacity change from 0 to 2048 [ 664.535316][T23888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.656501][T23888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 664.694999][T23888] EXT4-fs (loop4): Remounting filesystem read-only [ 664.743212][T23921] sock: sock_timestamping_bind_phc: sock not bind to device [ 664.838615][ T5747] usb 3-1: USB disconnect, device number 113 [ 664.915174][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.016726][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.194455][ T5788] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 665.418271][ T5627] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 665.469105][ T5788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.582871][ T5788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.639995][ T5788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.667816][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.699077][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 665.715952][ T5788] usb 2-1: Product: syz [ 665.732169][ T5788] usb 2-1: Manufacturer: syz [ 665.741767][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 665.754213][ T5788] usb 2-1: SerialNumber: syz [ 665.775584][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 665.788756][ T5788] usb 2-1: 0:2 : does not exist [ 665.805188][ T5627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 665.830120][ T5627] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 665.843278][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.871437][ T5627] usb 1-1: Product: syz [ 665.886555][ T5627] usb 1-1: Manufacturer: syz [ 665.913055][ T5627] usb 1-1: SerialNumber: syz [ 665.951114][ T5627] usb 1-1: config 0 descriptor?? [ 665.964838][T24010] ip6gre1: entered allmulticast mode [ 666.163254][ T5788] usb 2-1: USB disconnect, device number 114 [ 666.194763][ T5627] adutux 1-1:0.0: Could not retrieve serial number [ 666.240114][ T5627] adutux 1-1:0.0: probe with driver adutux failed with error -5 [ 666.418228][ T5747] usb 1-1: USB disconnect, device number 111 [ 666.695641][T24073] ieee802154 phy1 wpan1: encryption failed: -22 [ 666.893692][T24082] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6459'. [ 666.942087][T24009] loop4: detected capacity change from 0 to 32768 [ 666.943119][T24087] loop5: detected capacity change from 0 to 1024 [ 666.982024][T24009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6447 (24009) [ 666.982276][T24082] gretap0: entered promiscuous mode [ 667.077945][T24009] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 667.095770][T24087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.160375][T24009] BTRFS info (device loop4): using sha256 checksum algorithm [ 667.205089][ T30] audit: type=1326 audit(2000000470.257:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9de99 code=0x7ffc0000 [ 667.273587][ T30] audit: type=1326 audit(2000000470.276:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9de99 code=0x7ffc0000 [ 667.324054][T24111] loop0: detected capacity change from 0 to 1024 [ 667.339267][T24087] EXT4-fs error (device loop5): __ext4_remount:6844: comm syz.5.6460: Abort forced by user [ 667.350569][ T30] audit: type=1326 audit(2000000470.276:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9de99 code=0x7ffc0000 [ 667.376209][T24087] EXT4-fs (loop5): Remounting filesystem read-only [ 667.383052][T24087] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 667.430434][ T30] audit: type=1326 audit(2000000470.276:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9de99 code=0x7ffc0000 [ 667.456917][ T30] audit: type=1326 audit(2000000470.276:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fa7cbb9de99 code=0x7ffc0000 [ 667.482738][ T30] audit: type=1326 audit(2000000470.378:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7cbb5e6ce code=0x7ffc0000 [ 667.508899][ T30] audit: type=1326 audit(2000000470.378:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7cbb5e6ce code=0x7ffc0000 [ 667.534009][ T30] audit: type=1326 audit(2000000470.378:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7cbb5e6ce code=0x7ffc0000 [ 667.561696][ T30] audit: type=1326 audit(2000000470.378:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.2.6466" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7cbb5e6ce code=0x7ffc0000 [ 667.566150][T24009] BTRFS info (device loop4): enabling ssd optimizations [ 667.699017][T24009] BTRFS info (device loop4): turning on async discard [ 667.734783][T24009] BTRFS info (device loop4): enabling free space tree [ 667.737413][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.021148][T24145] loop3: detected capacity change from 0 to 512 [ 668.072486][ T5618] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 668.096692][T24145] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 668.179469][T24145] UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264 [ 668.736118][T24183] loop2: detected capacity change from 0 to 256 [ 668.819638][T24190] netlink: 'syz.0.6484': attribute type 1 has an invalid length. [ 668.888698][T24183] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 668.960620][T24183] FAT-fs (loop2): Filesystem has been set read-only [ 669.129260][T24191] loop3: detected capacity change from 0 to 4096 [ 669.163697][T24191] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 669.344568][T24191] ntfs3(loop3): ino=19, mi_enum_attr [ 669.375053][T24191] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 669.477208][T24223] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6492'. [ 669.521612][T24222] loop0: detected capacity change from 0 to 1024 [ 669.558536][T24223] gretap0: entered promiscuous mode [ 669.616766][T24222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.701241][T24222] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.6491: missing EA_INODE flag [ 669.711708][T24234] loop1: detected capacity change from 0 to 24 [ 669.797133][T24222] EXT4-fs (loop0): Remounting filesystem read-only [ 669.872879][T24172] loop4: detected capacity change from 0 to 32768 [ 669.905309][T24172] btrfs: Deprecated parameter 'usebackuproot' [ 669.936694][T24172] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 669.955051][T24172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6475 (24172) [ 669.992218][T24172] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 670.006879][T24172] BTRFS info (device loop4): using crc32c checksum algorithm [ 670.022875][T24172] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 670.046053][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.086328][T23964] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 670.111658][T24172] BTRFS error (device loop4): failed to load root extent [ 670.133602][T24172] BTRFS warning (device loop4): try to load backup roots slot 1 [ 670.147722][T23964] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 670.323981][T24172] BTRFS warning (device loop4): couldn't read tree root [ 670.355235][T24286] loop0: detected capacity change from 0 to 512 [ 670.356854][T24172] BTRFS warning (device loop4): try to load backup roots slot 2 [ 670.388883][T23967] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 670.427619][T24172] BTRFS warning (device loop4): couldn't read tree root [ 670.440916][T24172] BTRFS warning (device loop4): try to load backup roots slot 3 [ 670.454347][T24286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 670.467753][T24286] ext4 filesystem being mounted at /1003/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.519094][T24172] BTRFS info (device loop4): enabling ssd optimizations [ 670.561241][T24172] BTRFS info (device loop4): turning on async discard [ 670.604252][T24172] BTRFS info (device loop4): enabling disk space caching [ 670.630040][T24172] BTRFS info (device loop4): force clearing of disk cache [ 670.651323][T24286] __quota_error: 81 callbacks suppressed [ 670.651344][T24286] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 670.676361][T24172] BTRFS info (device loop4): enabling auto defrag [ 670.700681][T24172] BTRFS info (device loop4): trying to use backup root at mount time [ 670.728487][T24286] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 670.743426][T24172] BTRFS info (device loop4): use zstd compression, level 3 [ 670.777380][T24286] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.6500: Failed to acquire dquot type 0 [ 671.079752][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 671.092794][ T5618] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 671.784184][T23973] bond0: (slave bond_slave_0): interface is now down [ 671.834645][T23973] bond0: (slave bond_slave_1): interface is now down [ 671.937812][T23973] bond0: now running without any active interface! [ 671.994939][T24366] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.042028][T24366] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6527'. [ 672.167114][T24369] loop1: detected capacity change from 0 to 1764 [ 672.780801][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6541'. [ 672.795847][T24412] SET target dimension over the limit! [ 672.836582][T24416] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6542'. [ 672.984010][ T30] audit: type=1326 audit(2000000475.654:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.088955][ T30] audit: type=1326 audit(2000000475.691:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.204879][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.219771][ T30] audit: type=1326 audit(2000000475.691:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.234642][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.268528][T24440] loop1: detected capacity change from 0 to 8 [ 673.274706][T24435] loop5: detected capacity change from 0 to 1764 [ 673.310018][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.337416][T24435] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 673.347083][ T30] audit: type=1326 audit(2000000475.691:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.348793][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.468104][ T30] audit: type=1326 audit(2000000475.701:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.492932][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.492963][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.561261][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.585330][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.589897][ T30] audit: type=1326 audit(2000000475.701:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.611875][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.657437][ T5747] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 673.710058][ T30] audit: type=1326 audit(2000000475.701:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.794256][ T30] audit: type=1326 audit(2000000475.691:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.6545" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 673.878906][ T5747] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz1] on syz0 [ 674.208174][T24471] fido_id[24471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 674.350314][T24504] lo: entered promiscuous mode [ 674.355455][T24504] lo: entered allmulticast mode [ 674.362475][T24504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6568'. [ 674.387430][T24505] loop1: detected capacity change from 0 to 512 [ 674.418825][T24505] EXT4-fs: inline encryption not supported [ 674.456192][T24505] EXT4-fs (loop1): Test dummy encryption mode enabled [ 674.476915][T24505] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 674.518229][T24505] EXT4-fs (loop1): 1 truncate cleaned up [ 674.550193][ T5627] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 674.563500][T24505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.716318][T24505] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 674.737844][ T5627] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 674.756011][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.781120][ T5627] usb 5-1: Product: syz [ 674.794485][ T5627] usb 5-1: Manufacturer: syz [ 674.810367][ T5627] usb 5-1: SerialNumber: syz [ 674.880978][ T803] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 674.942448][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.327162][T24558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6583'. [ 675.364746][T24558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.440080][ T10] usb 5-1: USB disconnect, device number 107 [ 675.500851][T24560] loop0: detected capacity change from 0 to 2048 [ 675.512859][T24567] loop3: detected capacity change from 0 to 512 [ 675.541290][T24567] EXT4-fs: Ignoring removed orlov option [ 675.551599][T24567] EXT4-fs: Ignoring removed oldalloc option [ 675.612458][T24560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.634263][T24567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 675.662727][T24568] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 675.665704][T24560] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #12: block 2: comm syz.0.6584: lblock 0 mapped to illegal pblock 2 (length 1) [ 675.691105][T24608] loop5: detected capacity change from 0 to 512 [ 675.700396][T24608] EXT4-fs: Ignoring removed i_version option [ 675.715320][T24568] bond2 (unregistering): Released all slaves [ 675.733485][T24608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 675.746506][T24567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.785649][T24567] ext4 filesystem being mounted at /1121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.809042][T24608] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6587: invalid indirect mapped block 4294967295 (level 1) [ 675.869593][T24608] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 675.871569][T24608] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.6587: invalid indirect mapped block 4294967295 (level 1) [ 675.880811][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 675.880834][ C1] EXT4-fs (loop5): initial error at time 2000000478: ext4_free_branches:1023: inode 11 [ 675.880874][ C1] EXT4-fs (loop5): last error at time 2000000478: ext4_free_branches:1023: inode 11 [ 675.909938][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.944419][T24608] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 675.948050][T24608] EXT4-fs (loop5): 2 truncates cleaned up [ 675.984885][T24608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.133415][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.302104][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.382821][ T803] usb 5-1: Service connection timeout for: 256 [ 676.404636][ T803] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 676.461505][ T803] ath9k_htc: Failed to initialize the device [ 676.486620][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 676.557509][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6598'. [ 676.889358][T24709] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 677.100980][T24723] loop5: detected capacity change from 0 to 256 [ 677.175467][T24732] netlink: 'syz.4.6612': attribute type 8 has an invalid length. [ 677.210535][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 677.295990][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 677.392802][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 677.436404][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 677.476005][ T10] usb 1-1: config 179 has no interface number 0 [ 677.504348][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 677.538144][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 677.550080][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 677.562454][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 677.592843][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 677.656064][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 677.691814][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.752237][T24711] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 678.356870][ T5788] usb 1-1: USB disconnect, device number 112 [ 678.356896][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 678.371564][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 679.064715][T24767] loop3: detected capacity change from 0 to 32768 [ 679.146762][T24767] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 679.156062][T24846] xt_l2tp: wrong L2TP version: 0 [ 679.399748][T24767] XFS (loop3): Ending clean mount [ 679.427950][T24767] XFS (loop3): Quotacheck needed: Please wait. [ 679.466378][T24875] netlink: 'syz.0.6653': attribute type 1 has an invalid length. [ 679.495617][T24875] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6653'. [ 679.608545][T24767] XFS (loop3): Quotacheck: Done. [ 679.962416][T24900] tmpfs: Bad value for 'mpol' [ 679.978272][ T5622] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 680.000228][T24901] netlink: 'syz.2.6659': attribute type 1 has an invalid length. [ 680.046994][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6659'. [ 680.137429][T24906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 681.024583][T24946] loop5: detected capacity change from 0 to 1764 [ 681.073102][T24955] cifs: Unknown parameter '”Û›¡Qƒé [ 681.073102][T24955] @ö"2a×ch}#úä [ 681.073102][T24955] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï/—„嶎4,Zz-#FÇ<æõ]%gCžÊ [ 681.073102][T24955] SÃȘØÔ7ãÈ@$8 Ÿýá!YJ€ï9Tw8âó…Õ}¥·Õ|' [ 681.326464][T24977] loop5: detected capacity change from 0 to 256 [ 681.379437][ T5755] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 681.465144][T24990] futex_wake_op: syz.0.6684 tries to shift op by 36; fix this program [ 681.561228][ T803] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 681.573168][ T5755] usb 2-1: Using ep0 maxpacket: 16 [ 681.598709][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 681.628238][ T5755] usb 2-1: config 251 has an invalid interface number: 33 but max is 0 [ 681.659205][ T5755] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 681.697633][ T5755] usb 2-1: config 251 has no interface number 0 [ 681.716122][ T5755] usb 2-1: config 251 interface 33 has no altsetting 0 [ 681.733624][ T5755] usb 2-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 681.744208][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.755808][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 681.765988][ T5755] usb 2-1: Product: syz [ 681.770220][ T5755] usb 2-1: Manufacturer: syz [ 681.778455][ T5755] usb 2-1: SerialNumber: syz [ 681.794001][ T803] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 681.822966][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 681.847727][ T803] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 681.877471][ T803] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 681.913473][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.920011][T25008] netlink: 2452 bytes leftover after parsing attributes in process `syz.0.6691'. [ 681.976166][ T803] usb 4-1: config 0 descriptor?? [ 682.036223][ T5755] qmi_wwan 2-1:251.33: probe with driver qmi_wwan failed with error -22 [ 682.055639][ T5755] usb 2-1: USB disconnect, device number 115 [ 682.215282][ T803] hdpvr 4-1:0.0: firmware version 0xd9 dated ÚL–W@ô‚Ôõ'^£ñR"Î5ËçèÝD¤ÙBUN§Æ=rp]’ÑEÈ/ [ 682.235362][ T5627] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 682.243322][ T803] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 682.374067][T25039] loop2: detected capacity change from 0 to 256 [ 682.412233][ T5627] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 682.447077][ T803] hdpvr 4-1:0.0: device init failed [ 682.458878][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.478795][ T803] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 682.493960][ T5627] usb 6-1: Product: syz [ 682.507173][ T5627] usb 6-1: Manufacturer: syz [ 682.517183][ T803] usb 4-1: USB disconnect, device number 94 [ 682.524707][ T5627] usb 6-1: SerialNumber: syz [ 682.545174][ T5627] usb 6-1: config 0 descriptor?? [ 682.564059][ T5627] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 682.828025][T25066] loop1: detected capacity change from 0 to 64 [ 682.915094][T25066] syz.1.6702: attempt to access beyond end of device [ 682.915094][T25066] loop1: rw=2049, sector=16777216, nr_sectors = 2 limit=64 [ 682.994264][ T5627] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 683.019476][ T5627] sq905c 6-1:0.0: Reading version command failed [ 683.044587][ T5627] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 683.118111][ T5627] usb 6-1: USB disconnect, device number 107 [ 683.279545][T25095] netlink: 'syz.3.6708': attribute type 2 has an invalid length. [ 683.396596][T25100] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6710'. [ 683.725653][T25116] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 683.725653][T25116] SÃȘØÈžZ§6ŸÂ' [ 683.837292][T25058] loop2: detected capacity change from 0 to 40427 [ 683.858011][T25058] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 683.878527][T25058] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 683.922174][T25058] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 684.147587][T25141] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 684.174710][T25141] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 684.205356][T25141] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 684.229214][T25058] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 684.267990][T25058] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 684.287665][T25058] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 684.420288][T25058] syz.2.6699: attempt to access beyond end of device [ 684.420288][T25058] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 684.497663][T25163] x_tables: duplicate underflow at hook 3 [ 684.787132][T25175] netlink: 'syz.3.6733': attribute type 5 has an invalid length. [ 684.849526][T25175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6733'. [ 684.896964][T25182] netlink: 'syz.4.6736': attribute type 13 has an invalid length. [ 685.195200][T25195] loop4: detected capacity change from 0 to 1024 [ 685.232095][T25195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 685.308296][T25195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.444586][T25205] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 685.476842][T25205] bond1: entered allmulticast mode [ 685.497706][T25205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.531364][ T5618] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.545836][T25244] team0: entered promiscuous mode [ 685.562527][T25244] team_slave_0: entered promiscuous mode [ 685.609404][T25244] team_slave_1: entered promiscuous mode [ 685.636656][T25244] dummy0: entered promiscuous mode [ 685.688652][ T5747] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 685.887464][ T5747] usb 4-1: unable to get BOS descriptor or descriptor too short [ 685.918245][ T5747] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 685.952234][ T5747] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 685.994481][ T5747] usb 4-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 686.036550][ T5747] usb 4-1: config 66 interface 0 has no altsetting 0 [ 686.064595][ T5747] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 686.096332][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.120740][ T5747] usb 4-1: Product: syz [ 686.137035][ T5747] usb 4-1: Manufacturer: syz [ 686.154393][ T5747] usb 4-1: SerialNumber: syz [ 686.348928][T25301] openvswitch: netlink: IP tunnel dst address not specified [ 686.435153][ T5747] ati_remote2 4-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 686.488173][ T5747] usb 4-1: USB disconnect, device number 95 [ 686.593913][T25320] loop2: detected capacity change from 0 to 64 [ 686.764909][T25270] loop4: detected capacity change from 0 to 32768 [ 686.777122][T25334] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.797582][T25270] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6752 (25270) [ 686.808710][T25338] netlink: 'syz.0.6767': attribute type 4 has an invalid length. [ 686.847438][T25270] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 686.865921][T25270] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 686.875104][ T5755] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 686.953230][T25270] BTRFS info (device loop4): enabling ssd optimizations [ 686.960366][T25270] BTRFS info (device loop4): turning on flush-on-commit [ 686.967448][T25270] BTRFS info (device loop4): turning on async discard [ 686.975508][T25270] BTRFS info (device loop4): enabling free space tree [ 686.982790][T25270] BTRFS info (device loop4): force zlib compression, level 3 [ 686.990815][T25270] BTRFS info (device loop4): max_inline set to 0 [ 687.068680][ T5755] usb 2-1: Using ep0 maxpacket: 32 [ 687.103355][ T5755] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 687.155116][ T5755] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.170311][ T5618] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 687.213722][ T5755] usb 2-1: config 0 has no interface number 0 [ 687.242032][ T5755] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 687.303847][ T5755] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 687.320904][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.368205][ T5755] usb 2-1: Product: syz [ 687.385437][ T5755] usb 2-1: Manufacturer: syz [ 687.404672][ T5755] usb 2-1: SerialNumber: syz [ 687.460159][ T5755] usb 2-1: config 0 descriptor?? [ 687.524374][ T5755] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 687.542841][ T5755] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 687.713975][ T5755] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 687.951082][ T5755] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 688.006268][ T5755] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 688.060024][ T5755] usb 2-1: USB disconnect, device number 116 [ 688.099366][ T5755] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 688.859295][T25508] tmpfs: Bad value for 'nr_blocks' [ 688.869959][T25464] bond2: Removing last arp target with arp_interval on [ 688.913847][T25464] bond2: entered promiscuous mode [ 688.951093][T25464] bond2: entered allmulticast mode [ 688.993814][T25464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.760645][T25571] loop0: detected capacity change from 0 to 256 [ 689.815758][T25578] loop2: detected capacity change from 0 to 512 [ 689.871206][T25578] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 689.928885][T25578] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 689.996301][T25578] System zones: 1-12 [ 690.000503][T25578] EXT4-fs (loop2): orphan cleanup on readonly fs [ 690.008898][T25578] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6825: invalid indirect mapped block 12 (level 1) [ 690.024042][T25578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 690.038714][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 690.050721][T25578] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6825: invalid indirect mapped block 2 (level 2) [ 690.054354][ C1] EXT4-fs (loop2): initial error at time 2000000491: ext4_free_branches:1023: inode 11 [ 690.054408][ C1] EXT4-fs (loop2): last error at time 2000000491: ext4_free_branches:1023: inode 11 [ 690.116840][T25578] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 690.119078][T25578] EXT4-fs (loop2): 1 truncate cleaned up [ 690.186622][T25578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 690.283036][T25578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 690.504894][T25605] loop5: detected capacity change from 0 to 4096 [ 690.567811][T25605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.857802][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.168676][T25653] xt_TCPMSS: Only works on TCP SYN packets [ 691.356997][T25663] netlink: 'syz.4.6849': attribute type 3 has an invalid length. [ 691.390820][T25663] netlink: 'syz.4.6849': attribute type 1 has an invalid length. [ 691.431011][T25663] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6849'. [ 691.565558][T25674] loop2: detected capacity change from 0 to 512 [ 691.600025][T25678] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 691.608401][T25674] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 691.737758][T25674] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 692.015672][T25696] loop3: detected capacity change from 0 to 2048 [ 692.120101][T25696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.135470][T25704] loop0: detected capacity change from 0 to 512 [ 692.254732][T25704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 692.276710][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6868'. [ 692.277533][T25646] loop1: detected capacity change from 0 to 32768 [ 692.331393][T25726] netlink: 'syz.2.6866': attribute type 5 has an invalid length. [ 692.351764][T25726] ip6erspan0: entered promiscuous mode [ 692.365916][T25704] ext4 filesystem being mounted at /1068/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.385703][T25646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6845 (25646) [ 692.430622][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.473354][T25704] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 692.496146][T25646] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.538036][T25704] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 692.550540][T25646] BTRFS info (device loop1): using sha256 checksum algorithm [ 692.577839][T25704] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.6862: Failed to acquire dquot type 0 [ 692.708977][T25646] BTRFS info (device loop1): enabling ssd optimizations [ 692.780720][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 692.789802][T25646] BTRFS info (device loop1): turning on async discard [ 692.834805][T25646] BTRFS info (device loop1): enabling free space tree [ 692.873381][T25646] BTRFS info (device loop1): force clearing of disk cache [ 692.909783][T25646] BTRFS info (device loop1): force zlib compression, level 3 [ 692.955715][T25646] BTRFS info (device loop1): max_inline set to 0 [ 693.050923][T25777] loop5: detected capacity change from 0 to 1024 [ 693.145058][T25777] hfsplus: can't free extent: start 2889, count 1 [ 693.277593][T25780] loop0: detected capacity change from 0 to 4096 [ 693.291411][ T5621] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.306895][T25780] ntfs3(loop0): ino=3, mi_enum_attr [ 693.359421][T25797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6882'. [ 694.004326][T25824] nfs: Unknown parameter 'ntext' [ 694.600151][T25865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6903'. [ 695.621913][T25858] loop4: detected capacity change from 0 to 32768 [ 695.645866][T25858] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6901 (25858) [ 695.690807][T25858] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 695.717588][T25858] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 695.740630][T25858] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 695.755751][ T5627] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 695.941588][ T5627] usb 1-1: Using ep0 maxpacket: 8 [ 695.957854][ T5788] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 695.982508][ T5627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 696.011220][T25858] BTRFS info (device loop4): rebuilding free space tree [ 696.016336][ T5627] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 696.065159][ T5627] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 696.085601][T25858] BTRFS info (device loop4): disabling free space tree [ 696.111111][T25858] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 696.118067][ T5627] usb 1-1: config 4 has no interface number 0 [ 696.159041][ T5627] usb 1-1: string descriptor 0 read error: -22 [ 696.165414][T25858] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 696.178322][ T5788] usb 3-1: Using ep0 maxpacket: 32 [ 696.198167][T25858] BTRFS info (device loop4): allowing degraded mounts [ 696.213006][ T5788] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 696.230416][T25858] BTRFS info (device loop4): enabling ssd optimizations [ 696.232642][ T5788] usb 3-1: config 0 has no interface number 0 [ 696.248282][T25956] team0: entered promiscuous mode [ 696.249275][ T5627] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 696.264437][T25956] team_slave_0: entered promiscuous mode [ 696.270145][T25858] BTRFS info (device loop4): turning on async discard [ 696.277255][ T5788] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 696.281278][ T5788] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 696.303422][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.311730][T25956] team_slave_1: entered promiscuous mode [ 696.324014][ T5788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.332366][T25956] bond0: entered promiscuous mode [ 696.344723][T25858] BTRFS info (device loop4): enabling disk space caching [ 696.350169][ T5627] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 696.355941][T25956] bond_slave_0: entered promiscuous mode [ 696.362495][ T5788] usb 3-1: Product: syz [ 696.372403][T25858] BTRFS info (device loop4): force clearing of disk cache [ 696.382233][ T5788] usb 3-1: Manufacturer: syz [ 696.384921][T25956] bond_slave_1: entered promiscuous mode [ 696.386895][ T5627] uvcvideo 1-1:4.147: Found UVC 0.02 device (04f2:b746) [ 696.399058][T25858] BTRFS info (device loop4): use zlib compression, level 3 [ 696.411128][ T5788] usb 3-1: SerialNumber: syz [ 696.420379][ T5788] usb 3-1: config 0 descriptor?? [ 696.437902][ T5627] uvcvideo 1-1:4.147: No streaming interface found for terminal 32774. [ 696.447217][T25925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 696.683525][T25925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 696.691824][T25976] netlink: 358 bytes leftover after parsing attributes in process `syz.5.6930'. [ 696.718892][ T5627] usb 1-1: USB disconnect, device number 113 [ 696.824800][T25858] BTRFS info (device loop4): balance: start -f -slimit=60915521159177,limit=9..14183,stripes=1..0 [ 696.861675][ T30] audit: type=1326 audit(2000000497.991:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.6932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 696.877515][T25858] BTRFS info (device loop4): balance: ended with status: 0 [ 696.951411][ T30] audit: type=1326 audit(2000000497.991:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.6932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 696.986086][ T5788] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 697.013875][ T5788] asix 3-1:0.188: probe with driver asix failed with error -71 [ 697.057963][ T30] audit: type=1326 audit(2000000498.048:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.6932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 697.095688][ T5788] usb 3-1: USB disconnect, device number 114 [ 697.138377][ T30] audit: type=1326 audit(2000000498.048:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.6932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 697.150526][ T5618] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 697.222861][ T30] audit: type=1326 audit(2000000498.048:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25987 comm="syz.1.6932" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c399de99 code=0x7ffc0000 [ 697.950119][ T5627] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 697.974836][T26047] netlink: 'syz.5.6948': attribute type 16 has an invalid length. [ 698.034906][T26047] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.6948'. [ 698.147800][ T5627] usb 2-1: Using ep0 maxpacket: 8 [ 698.172722][ T5627] usb 2-1: config index 0 descriptor too short (expected 30482, got 18) [ 698.186723][ T5627] usb 2-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 698.222713][ T5627] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 698.256728][ T5627] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 698.281951][ T5627] usb 2-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 698.317200][ T5627] usb 2-1: Product: syz [ 698.330243][ T5627] usb 2-1: Manufacturer: syz [ 698.370226][ T5627] usb 2-1: config 0 descriptor?? [ 698.409314][ T5627] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 698.446078][ T5627] usb 2-1: Detected FT2232C/D [ 698.567051][T26021] loop0: detected capacity change from 0 to 32768 [ 698.576762][T26021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6941 (26021) [ 698.623741][ T5627] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 698.656548][ T5627] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 698.669481][T26021] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 698.701334][ T5627] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 698.713475][T26021] BTRFS info (device loop0): using sha256 checksum algorithm [ 698.756042][ T5627] usb 2-1: USB disconnect, device number 117 [ 698.814264][ T5627] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 698.840586][ T5627] ftdi_sio 2-1:0.0: device disconnected [ 698.858997][T26116] netlink: 'syz.2.6962': attribute type 21 has an invalid length. [ 698.896938][T26121] loop4: detected capacity change from 0 to 256 [ 698.908593][T26116] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6962'. [ 698.922194][T26021] BTRFS info (device loop0): enabling ssd optimizations [ 698.944412][T26021] BTRFS info (device loop0): turning on async discard [ 698.950518][T26121] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 698.965434][T26021] BTRFS info (device loop0): enabling free space tree [ 698.989981][T26120] batadv2: entered promiscuous mode [ 699.005047][T26120] batadv2: entered allmulticast mode [ 699.091202][T26121] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 699.110054][T26116] netlink: 'syz.2.6962': attribute type 5 has an invalid length. [ 699.126944][T26116] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6962'. [ 699.228214][ T5620] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 699.512289][T26145] loop2: detected capacity change from 0 to 2048 [ 699.621208][T26145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.942363][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.211551][T26191] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 700.848633][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6992'. [ 701.360904][T26257] loop0: detected capacity change from 0 to 2048 [ 701.389063][T26257] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 701.439232][T26257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 701.451405][T26266] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 701.573474][T26259] loop3: detected capacity change from 0 to 4096 [ 701.612391][T26259] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 701.782778][T26259] ntfs3(loop3): ino=19, mi_enum_attr [ 701.805156][T26259] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 702.080449][T26230] loop1: detected capacity change from 0 to 32768 [ 702.141972][T26230] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 702.182978][T26240] loop4: detected capacity change from 0 to 32768 [ 702.216678][T26230] XFS (loop1): Ending clean mount [ 702.229707][T26240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6997 (26240) [ 702.285855][T26302] loop3: detected capacity change from 0 to 2048 [ 702.296467][T26240] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 702.327039][T26302] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 702.340239][T26240] BTRFS info (device loop4): using sha256 checksum algorithm [ 702.428571][T26240] BTRFS info (device loop4): enabling ssd optimizations [ 702.489233][T26320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.497066][T26240] BTRFS info (device loop4): turning on async discard [ 702.590713][T26240] BTRFS info (device loop4): enabling free space tree [ 702.635429][T13623] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 702.667755][T26273] loop2: detected capacity change from 0 to 40427 [ 702.706279][T26273] F2FS-fs (loop2): build fault injection rate: 771 [ 702.762142][T26273] F2FS-fs (loop2): invalid crc value [ 702.788323][ T5621] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 702.844583][ T5618] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 703.361049][T26273] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 703.419409][T26279] loop0: detected capacity change from 0 to 32768 [ 703.455251][T26279] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7008 (26279) [ 703.460870][T26273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 703.560169][T26279] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 703.631596][T26279] BTRFS info (device loop0): using sha256 checksum algorithm [ 703.869091][T26279] BTRFS info (device loop0): turning off barriers [ 703.941535][T26279] BTRFS info (device loop0): enabling free space tree [ 703.999135][T26384] loop1: detected capacity change from 0 to 256 [ 704.030708][T26384] exfat: Deprecated parameter 'utf8' [ 704.048165][ T5619] syz-executor: attempt to access beyond end of device [ 704.048165][ T5619] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 704.074791][T26384] exfat: Deprecated parameter 'namecase' [ 704.101669][T26384] exfat: Deprecated parameter 'namecase' [ 704.132896][T26384] exfat: Deprecated parameter 'namecase' [ 704.147467][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 704.147498][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 704.147514][ T5619] Call Trace: [ 704.147524][ T5619] [ 704.147535][ T5619] dump_stack_lvl+0xe8/0x150 [ 704.147578][ T5619] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 704.147619][ T5619] f2fs_write_end_io+0x124b/0x1710 [ 704.147681][ T5619] __submit_merged_bio+0x258/0x6a0 [ 704.147712][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.147739][ T5619] ? rcu_is_watching+0x15/0xb0 [ 704.147767][ T5619] __submit_merged_write_cond+0x3c9/0x4e0 [ 704.147806][ T5619] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 704.147849][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.147883][ T5619] f2fs_write_data_pages+0x2a27/0x36f0 [ 704.147915][ T5619] ? is_bpf_text_address+0x26/0x2b0 [ 704.147985][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 704.148062][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148088][ T5619] ? is_bpf_text_address+0x292/0x2b0 [ 704.148120][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148146][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148171][ T5619] ? __bfs+0x153/0x290 [ 704.148202][ T5619] ? __pfx_hlock_conflict+0x10/0x10 [ 704.148230][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148267][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148297][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148322][ T5619] ? __lock_acquire+0x13e8/0x2cf0 [ 704.148382][ T5619] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 704.148416][ T5619] do_writepages+0x338/0x560 [ 704.148450][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148478][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148508][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148533][ T5619] ? do_raw_spin_unlock+0xf5/0x210 [ 704.148564][ T5619] filemap_fdatawrite+0x1e9/0x2f0 [ 704.148603][ T5619] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 704.148673][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148701][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148731][ T5619] ? do_raw_spin_unlock+0xf5/0x210 [ 704.148762][ T5619] f2fs_sync_dirty_inodes+0x30e/0x830 [ 704.148813][ T5619] f2fs_write_checkpoint+0xa3d/0x2710 [ 704.148882][ T5619] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 704.148958][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.148984][ T5619] ? kfree+0x1c5/0x640 [ 704.149009][ T5619] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 704.149041][ T5619] kill_f2fs_super+0x2f6/0x700 [ 704.149084][ T5619] ? __pfx_kill_f2fs_super+0x10/0x10 [ 704.149131][ T5619] ? call_rcu+0x64b/0x8b0 [ 704.149151][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.149177][ T5619] ? lockdep_hardirqs_on+0x7a/0x110 [ 704.149201][ T5619] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.149240][ T5619] deactivate_locked_super+0xbc/0x130 [ 704.149280][ T5619] cleanup_mnt+0x3d3/0x460 [ 704.149308][ T5619] task_work_run+0x1d9/0x270 [ 704.149333][ T5619] ? __pfx_task_work_run+0x10/0x10 [ 704.149365][ T5619] exit_to_user_mode_loop+0x1fa/0x730 [ 704.149396][ T5619] ? rcu_is_watching+0x15/0xb0 [ 704.149419][ T5619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.149443][ T5619] do_syscall_64+0x353/0x580 [ 704.149468][ T5619] ? trace_irq_disable+0x3b/0x140 [ 704.149504][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.149526][ T5619] RIP: 0033:0x7fa7cbb9f0d7 [ 704.149546][ T5619] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 704.149565][ T5619] RSP: 002b:00007ffdde835928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 704.149587][ T5619] RAX: 0000000000000000 RBX: 00007fa7cbc3330a RCX: 00007fa7cbb9f0d7 [ 704.149602][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdde8359e0 [ 704.149616][ T5619] RBP: 00007ffdde8359e0 R08: 00007ffdde8369e0 R09: 00000000ffffffff [ 704.149632][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdde836a70 [ 704.149646][ T5619] R13: 00007fa7cbc3330a R14: 00000000000a70c9 R15: 00007ffdde836ab0 [ 704.149680][ T5619] [ 704.648461][ T5619] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 704.742816][ T5620] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 704.766700][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.954871][T26384] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 705.171735][T26411] netlink: 'syz.5.7035': attribute type 4 has an invalid length. [ 705.551017][ T803] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 705.660982][T26430] ubi31: attaching mtd0 [ 705.735955][T26430] ubi31: scanning is finished [ 705.740758][T26430] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 705.785201][ T803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.812547][T26403] loop4: detected capacity change from 0 to 32768 [ 705.838041][ T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 705.858622][T26403] xfs: Deprecated parameter 'ikeep' [ 705.866130][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.883360][T26403] XFS: ikeep mount option is deprecated. [ 705.890720][ T803] usb 1-1: Product: syz [ 705.899671][ T803] usb 1-1: Manufacturer: syz [ 705.918996][ T803] usb 1-1: SerialNumber: syz [ 705.974700][T26403] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 706.111344][T26430] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 706.120621][T26403] XFS (loop4): Ending clean mount [ 706.143472][T26454] netlink: 'syz.2.7028': attribute type 1 has an invalid length. [ 706.184745][ T803] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 706.192989][T26454] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7028'. [ 706.222415][ T803] cdc_ncm 1-1:1.0: bind() failure [ 706.292122][T26466] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 706.333820][ T803] usb 1-1: USB disconnect, device number 114 [ 706.566040][ T5618] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 706.959380][T26489] lo speed is unknown, defaulting to 1000 [ 707.067276][T26489] lo speed is unknown, defaulting to 1000 [ 707.082885][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7051'. [ 707.113641][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7051'. [ 707.129695][T26489] lo speed is unknown, defaulting to 1000 [ 707.209806][ T5630] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 707.291395][T26508] netlink: 'syz.4.7045': attribute type 3 has an invalid length. [ 707.330491][T26508] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7045'. [ 707.413057][ T5630] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 707.437760][ T5630] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 707.472402][ T5630] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 707.514749][ T5630] usb 1-1: config 220 interface 0 has no altsetting 0 [ 707.537354][ T5630] usb 1-1: config 220 interface 1 has no altsetting 0 [ 707.565871][ T5630] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 707.602824][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.631251][ T5630] usb 1-1: Product: syz [ 707.645635][ T5630] usb 1-1: Manufacturer: syz [ 707.661557][ T5630] usb 1-1: SerialNumber: syz [ 707.872139][T26523] bond1 (unregistering): Released all slaves [ 707.940573][ T5630] usb 1-1: selecting invalid altsetting 0 [ 707.959827][ T5630] uvcvideo 1-1:220.0: probe with driver uvcvideo failed with error -22 [ 708.016346][ T5630] usb 1-1: selecting invalid altsetting 0 [ 708.033992][ T5630] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 708.070226][ T5630] usb 1-1: USB disconnect, device number 115 [ 708.095304][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 708.504215][T13623] lo speed is unknown, defaulting to 1000 [ 708.513647][T26489] infiniband syz1: set down [ 708.513879][T26637] loop1: detected capacity change from 0 to 1024 [ 708.520656][ T5747] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 708.537419][T26489] infiniband syz1: added lo [ 708.582566][T26489] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 708.599356][T26489] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 708.616826][T26489] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 708.706631][ T5747] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.719646][ T5747] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 708.730008][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.761835][ T5747] usb 5-1: Product: syz [ 708.779699][ T5747] usb 5-1: Manufacturer: syz [ 708.789380][ T5747] usb 5-1: SerialNumber: syz [ 708.839800][ T5747] usb 5-1: config 0 descriptor?? [ 708.865051][T26489] RDS/IB: syz1: added [ 708.870281][T26489] smc: adding ib device syz1 with port count 1 [ 708.876949][T26489] smc: ib device syz1 port 1 has no pnetid [ 708.920563][ T5747] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 708.985725][ T5747] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 709.078239][T26653] bond2: entered promiscuous mode [ 709.091511][T26653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.145971][ T5630] lo speed is unknown, defaulting to 1000 [ 709.190444][T26622] loop4: detected capacity change from 0 to 24 [ 709.204876][T26489] lo speed is unknown, defaulting to 1000 [ 709.259723][ T5747] usb 5-1: USB disconnect, device number 108 [ 709.575042][T26733] [U] [ 709.802035][T26749] loop1: detected capacity change from 0 to 16 [ 709.899956][T26749] erofs (device loop1): mounted with root inode @ nid 36. [ 710.226100][T26763] Process accounting resumed [ 710.280740][T26776] netlink: 'syz.1.7096': attribute type 28 has an invalid length. [ 710.292505][T26776] netlink: 'syz.1.7096': attribute type 3 has an invalid length. [ 710.335562][T26776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7096'. [ 710.618665][T26489] lo speed is unknown, defaulting to 1000 [ 711.175331][T26820] x_tables: unsorted entry at hook 1 [ 711.210876][T26826] netlink: 'syz.4.7113': attribute type 10 has an invalid length. [ 711.238231][T26826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7113'. [ 711.267150][T26826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 711.413144][T26832] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 711.588487][T26787] loop0: detected capacity change from 0 to 32768 [ 711.667594][T26842] netlink: 'syz.3.7118': attribute type 10 has an invalid length. [ 711.708474][T26787] ialloc: diAlloc returned -5! [ 711.744963][T26489] lo speed is unknown, defaulting to 1000 [ 712.473919][T26887] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 712.770667][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7136'. [ 712.833525][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7136'. [ 712.866076][T26489] lo speed is unknown, defaulting to 1000 [ 713.362811][T26923] netlink: 'syz.4.7146': attribute type 2 has an invalid length. [ 713.693613][T26886] loop0: detected capacity change from 0 to 32768 [ 713.760790][T26886] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 713.897323][T26886] XFS (loop0): Ending clean mount [ 713.952565][T26489] lo speed is unknown, defaulting to 1000 [ 714.148835][ T5620] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 714.471484][T26921] loop5: detected capacity change from 0 to 32768 [ 714.510579][T26921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7144 (26921) [ 714.632912][T26921] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 714.685020][T26921] BTRFS info (device loop5): using sha256 checksum algorithm [ 714.708726][T26951] loop4: detected capacity change from 0 to 32768 [ 714.719373][T26926] loop1: detected capacity change from 0 to 32768 [ 714.743647][T26926] BTRFS info: device /dev/loop1 (7:1) using temp-fsid d1d917f7-46cc-4cf5-b9a7-9d93d76813a2 [ 714.769463][T26971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7154'. [ 714.786124][T26926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7145 (26926) [ 714.819400][T26951] diRead: diIAGRead returned -5 [ 714.868881][T26951] jfs_lookup: iget failed on inum 1048352 [ 714.921021][T26921] BTRFS info (device loop5): enabling ssd optimizations [ 714.937487][T26921] BTRFS info (device loop5): turning on async discard [ 714.944720][T26921] BTRFS info (device loop5): enabling free space tree [ 714.964609][T26926] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 715.011631][T26926] BTRFS info (device loop1): using sha256 checksum algorithm [ 715.074533][ T5629] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 715.236620][ T5627] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 715.246839][T26926] BTRFS info (device loop1): enabling ssd optimizations [ 715.277016][T26926] BTRFS info (device loop1): turning on async discard [ 715.297932][T26926] BTRFS info (device loop1): enabling free space tree [ 715.317139][T26926] BTRFS info (device loop1): force clearing of disk cache [ 715.363340][T26926] BTRFS info (device loop1): force zlib compression, level 3 [ 715.400216][T26926] BTRFS info (device loop1): max_inline set to 0 [ 715.465783][ T5627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 715.494464][ T5627] usb 4-1: not running at top speed; connect to a high speed hub [ 715.556190][ T5627] usb 4-1: string descriptor 0 read error: -22 [ 715.574933][ T5627] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 715.616357][T26489] lo speed is unknown, defaulting to 1000 [ 715.634770][ T5621] BTRFS info (device loop1): last unmount of filesystem d1d917f7-46cc-4cf5-b9a7-9d93d76813a2 [ 715.646518][ T5627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.899357][ T5755] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 716.093297][ T5755] usb 6-1: Using ep0 maxpacket: 16 [ 716.138779][ T5755] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 716.189906][ T5755] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 716.239160][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.254810][ T803] usb 4-1: USB disconnect, device number 96 [ 716.290550][ T5755] usb 6-1: Product: syz [ 716.316771][ T5755] usb 6-1: Manufacturer: syz [ 716.334117][ T5755] usb 6-1: SerialNumber: syz [ 716.433752][ T5755] r8152-cfgselector 6-1: Unknown version 0x0000 [ 716.475185][ T5755] r8152-cfgselector 6-1: config 0 descriptor?? [ 717.000700][ T5755] r8152-cfgselector 6-1: USB disconnect, device number 108 [ 717.063559][T27073] loop1: detected capacity change from 0 to 4096 [ 717.211962][T27073] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 717.334907][T27073] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 718.007269][T27139] loop2: detected capacity change from 0 to 256 [ 718.047149][T27142] loop5: detected capacity change from 0 to 512 [ 718.062568][T27139] exfat: Deprecated parameter 'utf8' [ 718.132095][T27139] exfat: Deprecated parameter 'utf8' [ 718.158204][T27139] exfat: Deprecated parameter 'namecase' [ 718.207835][T27142] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7190: invalid block [ 718.276352][T27139] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 718.296833][T27142] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 718.308316][T27142] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7190: invalid indirect mapped block 4294967295 (level 1) [ 718.317542][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 718.317566][ C1] EXT4-fs (loop5): initial error at time 2000000518: ext4_get_branch:178: inode 11: block 4294967295 [ 718.317615][ C1] EXT4-fs (loop5): last error at time 2000000518: ext4_get_branch:178: inode 11: block 4294967295 [ 718.365210][ T5630] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 718.416541][T27142] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 718.418052][T27142] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7190: invalid indirect mapped block 4294967295 (level 1) [ 718.434254][ T803] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 718.489773][T27142] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 718.523497][T27142] EXT4-fs (loop5): 2 truncates cleaned up [ 718.565567][ T5630] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 718.578481][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.600993][T27142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.628185][ T5630] usb 4-1: config 0 descriptor?? [ 718.843868][T27181] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 718.858696][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.079502][ T5630] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 719.106556][ T5630] hackrf 4-1:0.0: Could not detect board [ 719.128765][ T5630] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 719.168171][ T5630] usb 4-1: USB disconnect, device number 97 [ 719.299759][ T5788] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 719.355154][T27213] loop1: detected capacity change from 0 to 512 [ 719.382664][T27213] EXT4-fs: Ignoring removed i_version option [ 719.406396][ T5747] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 719.458443][T27213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.510096][T27213] ext4 filesystem being mounted at /1208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.597238][ T5747] usb 1-1: unable to get BOS descriptor or descriptor too short [ 719.628716][ T5747] usb 1-1: not running at top speed; connect to a high speed hub [ 719.639146][T27228] loop2: detected capacity change from 0 to 1024 [ 719.655825][T27228] EXT4-fs: Ignoring removed nobh option [ 719.675123][ T5747] usb 1-1: string descriptor 0 read error: -22 [ 719.690761][ T5747] usb 1-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 719.722657][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.730545][T27228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.733147][T27237] loop4: detected capacity change from 0 to 64 [ 719.756737][T27197] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 719.766987][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.775480][ T5747] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.784125][ T5747] usb 1-1: MIDIStreaming interface descriptor not found [ 719.841951][T27228] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.7210: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 719.873756][T27228] EXT4-fs (loop2): Remounting filesystem read-only [ 720.044658][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.048752][ T5747] usb 1-1: USB disconnect, device number 116 [ 720.225423][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.325705][T13623] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 720.508536][T13623] usb 5-1: Using ep0 maxpacket: 8 [ 720.531800][T13623] usb 5-1: config 53 has an invalid interface number: 101 but max is 0 [ 720.560006][T13623] usb 5-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 720.586818][T13623] usb 5-1: config 53 has no interface number 0 [ 720.606588][T13623] usb 5-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 720.621227][T13623] usb 5-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 720.644376][T13623] usb 5-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 720.678364][T13623] usb 5-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.709211][T13623] usb 5-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.744845][T13623] usb 5-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 720.764842][T13623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.772952][T13623] usb 5-1: Product: syz [ 720.778668][T13623] usb 5-1: Manufacturer: syz [ 720.783286][T13623] usb 5-1: SerialNumber: syz [ 720.804137][T27270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 720.859988][ T5630] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 720.959090][T27269] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 721.074092][ T5630] usb 3-1: Using ep0 maxpacket: 16 [ 721.090545][T13623] kvaser_usb 5-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 721.119419][ T5630] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 721.122321][T13623] kvaser_usb 5-1:53.101: error -EMSGSIZE: Failed to initialize card [ 721.165184][ T5630] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 721.186884][T13623] kvaser_usb 5-1:53.101: probe with driver kvaser_usb failed with error -90 [ 721.199736][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 721.217550][T27343] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7231'. [ 721.237124][ T5630] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 721.250249][T13623] usb 5-1: USB disconnect, device number 109 [ 721.251315][T27343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.275646][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 721.295712][ T5630] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 721.326528][ T5630] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 721.381875][T27344] loop3: detected capacity change from 0 to 4096 [ 721.396654][ T5630] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 721.407057][T27344] EXT4-fs: Ignoring removed orlov option [ 721.422217][T27344] EXT4-fs (loop3): Test dummy encryption mode enabled [ 721.430008][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.473911][T27344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.474645][ T5630] usb 3-1: Product: syz [ 721.490834][ T5630] usb 3-1: Manufacturer: syz [ 721.495930][ T5630] usb 3-1: SerialNumber: syz [ 721.513858][ T5630] usb 3-1: config 0 descriptor?? [ 721.519790][T27309] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 721.536429][ T5630] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected [ 721.548040][ T5630] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 721.781299][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.826018][T27379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7239'. [ 721.913354][ T5630] usb 3-1: USB disconnect, device number 115 [ 721.965088][ T5630] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 722.002213][ T5630] iuu_phoenix 3-1:0.0: device disconnected [ 722.015300][T27395] vivid-000: ================= START STATUS ================= [ 722.035241][T27395] vivid-000: Generate PTS: true [ 722.055213][T27395] vivid-000: Generate SCR: true [ 722.071395][T27395] tpg source WxH: 1920x1080 (R'G'B) [ 722.084727][T27395] tpg field: 1 [ 722.092195][T27395] tpg crop: (0,0)/1920x1080 [ 722.110334][T27395] tpg compose: (0,0)/1920x1080 [ 722.121175][T27395] tpg colorspace: 9 [ 722.138553][T27395] tpg transfer function: 7/7 [ 722.155720][T27395] tpg quantization: 0/2 [ 722.168000][T27395] tpg RGB range: 0/2 [ 722.185463][T27395] vivid-000: ================== END STATUS ================== [ 722.262818][T13623] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 722.432949][ T5747] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 722.446485][T13623] usb 2-1: Using ep0 maxpacket: 32 [ 722.466873][T13623] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.495261][T13623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 722.499095][T27435] netlink: 'syz.5.7252': attribute type 1 has an invalid length. [ 722.531504][T13623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 722.577010][T13623] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 722.592656][T13623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.620480][T13623] usb 2-1: config 0 descriptor?? [ 722.632748][T27392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 722.643962][ T5747] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.669017][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.689285][T13623] hub 2-1:0.0: USB hub found [ 722.705383][ T5747] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 722.727609][ T5747] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 722.778816][ T5747] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 722.795112][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 722.828972][ T5747] usb 4-1: SerialNumber: syz [ 722.867940][T27454] loop0: detected capacity change from 0 to 16 [ 722.884003][T13623] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 722.933857][T27454] erofs (device loop0): mounted with root inode @ nid 36. [ 722.991373][T27454] erofs (device loop0): invalid h_shared_count 83 @ nid 46 [ 723.084929][ T5747] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 723.105068][T13623] usbhid 2-1:0.0: can't add hid device: -71 [ 723.117849][T27469] bond0: (slave sit0): refused to change device type [ 723.118186][ T5747] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 723.138264][T13623] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 723.166330][ T5620] erofs (device loop0): invalid h_shared_count 83 @ nid 46 [ 723.176137][ T5747] usb 4-1: USB disconnect, device number 98 [ 723.183362][T13623] usb 2-1: USB disconnect, device number 118 [ 723.639657][T27447] loop2: detected capacity change from 0 to 32768 [ 723.661526][T27447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7254 (27447) [ 723.728689][T27447] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 723.772134][T27447] BTRFS info (device loop2): using sha256 checksum algorithm [ 723.865312][T23971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.958336][T27447] BTRFS info (device loop2): enabling ssd optimizations [ 723.983245][T27447] BTRFS info (device loop2): turning on async discard [ 724.022051][T27447] BTRFS info (device loop2): enabling free space tree [ 724.044650][T27463] loop5: detected capacity change from 0 to 40427 [ 724.061735][T27463] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 724.118379][T27463] F2FS-fs (loop5): invalid crc value [ 724.199589][T23971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.213154][ T5619] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 724.402577][T27463] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 724.483642][T27463] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 724.690429][T23971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.985946][T16754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.002103][T16754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.004716][T27547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.020645][T16754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.038774][T16754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.052459][T16754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.229818][T27561] loop1: detected capacity change from 0 to 128 [ 725.292017][T27561] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 725.305961][T23971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.345977][T27561] ext4 filesystem being mounted at /1222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 725.367888][T27569] x_tables: duplicate underflow at hook 3 [ 725.470367][T27576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.567321][ T5621] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.663071][T27588] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7284'. [ 725.753175][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7286'. [ 726.036756][T27610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7288'. [ 726.157463][T23971] bridge_slave_1: left allmulticast mode [ 726.199534][T23971] bridge_slave_1: left promiscuous mode [ 726.253590][T23971] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.301533][T23971] bridge_slave_0: left allmulticast mode [ 726.324666][T23971] bridge_slave_0: left promiscuous mode [ 726.340124][T23971] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.804846][T27646] loop5: detected capacity change from 0 to 1024 [ 726.856813][T27646] hfsplus: invalid file type 0177755 for inode 17 [ 726.871539][T23971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.912701][T23971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.929440][T23971] bond0 (unregistering): Released all slaves [ 726.950460][T23971] bond1 (unregistering): Released all slaves [ 726.985206][T23971] bond2 (unregistering): Released all slaves [ 727.034189][T27640] team0: entered allmulticast mode [ 727.053840][T27640] team_slave_0: entered allmulticast mode [ 727.083452][T27640] team_slave_1: entered allmulticast mode [ 727.116070][T27640] dummy0: entered allmulticast mode [ 727.151088][T27640] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.252771][T16754] Bluetooth: hci1: command tx timeout [ 727.273171][T23971] : left promiscuous mode [ 727.325568][T27663] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7304'. [ 727.666706][T27541] lo speed is unknown, defaulting to 1000 [ 727.717263][T23971] IPVS: stopping backup sync thread 17783 ... [ 728.678876][T27671] loop3: detected capacity change from 0 to 32768 [ 728.723295][T27671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7305 (27671) [ 728.870375][T27671] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 728.931282][T27671] BTRFS info (device loop3): using sha256 checksum algorithm [ 729.102894][T27671] BTRFS info (device loop3): enabling ssd optimizations [ 729.173206][T27671] BTRFS info (device loop3): turning on async discard [ 729.222875][T27671] BTRFS info (device loop3): enabling free space tree [ 729.465901][T16754] Bluetooth: hci1: command tx timeout [ 729.492611][ T5622] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 729.591323][T27792] loop2: detected capacity change from 0 to 1024 [ 729.598341][T27794] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 729.611520][T27792] EXT4-fs: inline encryption not supported [ 729.672437][T27792] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 729.717821][T27792] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 729.777455][T27792] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7328: Failed to acquire dquot type 0 [ 729.821757][T27792] loop2: lost filesystem error report for type 5 error -117 [ 729.822654][T27792] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, [ 729.830108][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 729.830133][ C0] EXT4-fs (loop2): initial error at time 2000000528: ext4_acquire_dquot:7041 [ 729.830163][ C0] EXT4-fs (loop2): last error at time 2000000528: ext4_acquire_dquot:7041 [ 729.862352][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 729.864522][T27792] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 729.948954][T27792] EXT4-fs (loop2): 1 truncate cleaned up [ 730.037034][T27792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.078145][T27720] loop5: detected capacity change from 0 to 32768 [ 730.123527][T27792] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 730.186506][T27720] [ 730.186506][T27720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 730.186506][T27720] [ 730.200429][T27792] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 730.283797][T27720] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 730.283797][T27720] [ 730.303574][T27792] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.7328: Failed to acquire dquot type 0 [ 730.544669][T23962] [ 730.544669][T23962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 730.544669][T23962] [ 730.620898][T23962] [ 730.620898][T23962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 730.620898][T23962] [ 730.633692][ T5629] [ 730.633692][ T5629] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 730.633692][ T5629] [ 730.646731][ T5629] [ 730.646731][ T5629] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 730.646731][ T5629] [ 730.719079][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.750619][ T117] ================================================================== [ 730.758816][ T117] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7d4/0x1550 [ 730.766410][ T117] Read of size 8 at addr ffff8880299a2108 by task jfsCommit/117 [ 730.774039][ T117] [ 730.776388][ T117] CPU: 0 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 730.776414][ T117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 730.776428][ T117] Call Trace: [ 730.776437][ T117] [ 730.776446][ T117] dump_stack_lvl+0xe8/0x150 [ 730.776482][ T117] print_address_description+0x55/0x1e0 [ 730.776514][ T117] ? __mutex_lock+0x7d4/0x1550 [ 730.776539][ T117] print_report+0x58/0x70 [ 730.776567][ T117] kasan_report+0x117/0x150 [ 730.776603][ T117] ? __mutex_lock+0x7d4/0x1550 [ 730.776633][ T117] __mutex_lock+0x7d4/0x1550 [ 730.776657][ T117] ? lock_acquire+0x106/0x350 [ 730.776690][ T117] ? __mutex_lock+0x5d4/0x1550 [ 730.776718][ T117] ? jfs_syncpt+0x25/0x90 [ 730.776746][ T117] ? __pfx___mutex_lock+0x10/0x10 [ 730.776774][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.776801][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.776831][ T117] jfs_syncpt+0x25/0x90 [ 730.776856][ T117] txEnd+0x2e5/0x530 [ 730.776886][ T117] jfs_lazycommit+0x5d6/0xac0 [ 730.776919][ T117] ? __pfx_jfs_lazycommit+0x10/0x10 [ 730.776947][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.776973][ T117] ? __pfx_default_wake_function+0x10/0x10 [ 730.777001][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.777026][ T117] ? __kthread_parkme+0x71/0x1f0 [ 730.777056][ T117] ? __kthread_parkme+0x196/0x1f0 [ 730.777087][ T117] kthread+0x388/0x470 [ 730.777119][ T117] ? __pfx_jfs_lazycommit+0x10/0x10 [ 730.777147][ T117] ? __pfx_kthread+0x10/0x10 [ 730.777179][ T117] ret_from_fork+0x514/0xb70 [ 730.777214][ T117] ? __pfx_ret_from_fork+0x10/0x10 [ 730.777246][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 730.777271][ T117] ? __switch_to+0xc89/0x1420 [ 730.777305][ T117] ? __pfx_kthread+0x10/0x10 [ 730.777337][ T117] ret_from_fork_asm+0x1a/0x30 [ 730.777367][ T117] [ 730.777376][ T117] [ 730.960005][ T117] Allocated by task 27720: [ 730.964408][ T117] kasan_save_track+0x3e/0x80 [ 730.969365][ T117] __kasan_kmalloc+0x93/0xb0 [ 730.973951][ T117] __kmalloc_cache_noprof+0x32d/0x660 [ 730.979320][ T117] lmLogOpen+0x2d1/0xf90 [ 730.983552][ T117] jfs_mount_rw+0xf3/0x670 [ 730.987971][ T117] jfs_fill_super+0x769/0xda0 [ 730.992734][ T117] get_tree_bdev_flags+0x430/0x4f0 [ 730.997834][ T117] vfs_get_tree+0x92/0x2a0 [ 731.002235][ T117] do_new_mount+0x319/0xdc0 [ 731.006736][ T117] __se_sys_mount+0x31d/0x420 [ 731.011406][ T117] do_syscall_64+0x174/0x580 [ 731.015985][ T117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.021870][ T117] [ 731.024179][ T117] Freed by task 5629: [ 731.028157][ T117] kasan_save_track+0x3e/0x80 [ 731.032834][ T117] kasan_save_free_info+0x40/0x50 [ 731.037846][ T117] __kasan_slab_free+0x5c/0x80 [ 731.042692][ T117] kfree+0x1c5/0x640 [ 731.046586][ T117] lmLogClose+0x296/0x530 [ 731.051429][ T117] jfs_umount+0x2da/0x3b0 [ 731.055765][ T117] jfs_put_super+0x8c/0x190 [ 731.060293][ T117] generic_shutdown_super+0x13d/0x2d0 [ 731.065670][ T117] kill_block_super+0x44/0x90 [ 731.070364][ T117] deactivate_locked_super+0xbc/0x130 [ 731.075735][ T117] cleanup_mnt+0x3d3/0x460 [ 731.080137][ T117] task_work_run+0x1d9/0x270 [ 731.084717][ T117] exit_to_user_mode_loop+0x1fa/0x730 [ 731.090085][ T117] do_syscall_64+0x353/0x580 [ 731.094667][ T117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.100548][ T117] [ 731.102854][ T117] The buggy address belongs to the object at ffff8880299a2000 [ 731.102854][ T117] which belongs to the cache kmalloc-1k of size 1024 [ 731.116894][ T117] The buggy address is located 264 bytes inside of [ 731.116894][ T117] freed 1024-byte region [ffff8880299a2000, ffff8880299a2400) [ 731.130786][ T117] [ 731.133097][ T117] The buggy address belongs to the physical page: [ 731.139487][ T117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880299a2800 pfn:0x299a0 [ 731.149547][ T117] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 731.158031][ T117] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 731.166520][ T117] page_type: f5(slab) [ 731.170498][ T117] raw: 00fff00000000240 ffff88801b004dc0 ffffea0000ad5610 ffffea00013b6810 [ 731.179067][ T117] raw: ffff8880299a2800 000000080010000f 00000000f5000000 0000000000000000 [ 731.187644][ T117] head: 00fff00000000240 ffff88801b004dc0 ffffea0000ad5610 ffffea00013b6810 [ 731.196336][ T117] head: ffff8880299a2800 000000080010000f 00000000f5000000 0000000000000000 [ 731.204992][ T117] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 731.213908][ T117] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 731.222559][ T117] page dumped because: kasan: bad access detected [ 731.228954][ T117] page_owner tracks the page as allocated [ 731.234676][ T117] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5367, tgid 5367 (dhcpcd), ts 50725425883, free_ts 50678842073 [ 731.255528][ T117] post_alloc_hook+0x1f9/0x250 [ 731.260291][ T117] get_page_from_freelist+0x21fa/0x2270 [ 731.265923][ T117] __alloc_frozen_pages_noprof+0x18d/0x380 [ 731.271730][ T117] allocate_slab+0x79/0x5e0 [ 731.276221][ T117] refill_objects+0x2d5/0x350 [ 731.280891][ T117] __pcs_replace_empty_main+0x2bf/0x6b0 [ 731.286421][ T117] __kmalloc_noprof+0x485/0x720 [ 731.291697][ T117] load_elf_binary+0x2c3/0x2950 [ 731.296546][ T117] bprm_execve+0x9c7/0x1630 [ 731.301510][ T117] do_execveat_common+0x4f4/0x670 [ 731.306539][ T117] __x64_sys_execve+0x97/0xc0 [ 731.311198][ T117] do_syscall_64+0x174/0x580 [ 731.315785][ T117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.321670][ T117] page last free pid 5366 tgid 5366 stack trace: [ 731.327978][ T117] __free_frozen_pages+0xc1e/0xd10 [ 731.333116][ T117] __slab_free+0x274/0x2c0 [ 731.337543][ T117] qlist_free_all+0x99/0x100 [ 731.342125][ T117] kasan_quarantine_reduce+0x148/0x160 [ 731.347586][ T117] __kasan_slab_alloc+0x22/0x80 [ 731.352444][ T117] __kmalloc_noprof+0x311/0x720 [ 731.357290][ T117] tomoyo_supervisor+0xc53/0x1560 [ 731.362311][ T117] tomoyo_env_perm+0x151/0x1f0 [ 731.367070][ T117] tomoyo_find_next_domain+0x1332/0x1a90 [ 731.372701][ T117] tomoyo_bprm_check_security+0x11b/0x180 [ 731.378412][ T117] security_bprm_check+0x85/0x240 [ 731.383421][ T117] bprm_execve+0x918/0x1630 [ 731.387947][ T117] do_execveat_common+0x4f4/0x670 [ 731.392977][ T117] __x64_sys_execve+0x97/0xc0 [ 731.397660][ T117] do_syscall_64+0x174/0x580 [ 731.402241][ T117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.408132][ T117] [ 731.410437][ T117] Memory state around the buggy address: [ 731.416048][ T117] ffff8880299a2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 731.424091][ T117] ffff8880299a2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 731.432132][ T117] >ffff8880299a2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 731.440173][ T117] ^ [ 731.444483][ T117] ffff8880299a2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 731.452564][ T117] ffff8880299a2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 731.460610][ T117] ================================================================== [ 731.470037][ T117] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 731.477270][ T117] CPU: 0 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 731.486366][ T117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 731.496408][ T117] Call Trace: [ 731.499697][ T117] [ 731.502613][ T117] vpanic+0x56c/0xa60 [ 731.506625][ T117] ? __pfx_vpanic+0x10/0x10 [ 731.511153][ T117] panic+0xc5/0xd0 [ 731.514876][ T117] ? __pfx_panic+0x10/0x10 [ 731.519290][ T117] ? __mutex_lock+0x7d4/0x1550 [ 731.524055][ T117] ? __mutex_lock+0x7d4/0x1550 [ 731.528808][ T117] check_panic_on_warn+0x89/0xb0 [ 731.533760][ T117] ? __mutex_lock+0x7d4/0x1550 [ 731.538513][ T117] end_report+0x73/0x170 [ 731.542762][ T117] ? __mutex_lock+0x7d4/0x1550 [ 731.547523][ T117] kasan_report+0x128/0x150 [ 731.552033][ T117] ? __mutex_lock+0x7d4/0x1550 [ 731.556837][ T117] __mutex_lock+0x7d4/0x1550 [ 731.561423][ T117] ? lock_acquire+0x106/0x350 [ 731.566104][ T117] ? __mutex_lock+0x5d4/0x1550 [ 731.570864][ T117] ? jfs_syncpt+0x25/0x90 [ 731.575190][ T117] ? __pfx___mutex_lock+0x10/0x10 [ 731.580225][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.585976][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.591616][ T117] jfs_syncpt+0x25/0x90 [ 731.595774][ T117] txEnd+0x2e5/0x530 [ 731.599676][ T117] jfs_lazycommit+0x5d6/0xac0 [ 731.604381][ T117] ? __pfx_jfs_lazycommit+0x10/0x10 [ 731.609575][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.615232][ T117] ? __pfx_default_wake_function+0x10/0x10 [ 731.621148][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.626774][ T117] ? __kthread_parkme+0x71/0x1f0 [ 731.631739][ T117] ? __kthread_parkme+0x196/0x1f0 [ 731.636763][ T117] kthread+0x388/0x470 [ 731.640834][ T117] ? __pfx_jfs_lazycommit+0x10/0x10 [ 731.646026][ T117] ? __pfx_kthread+0x10/0x10 [ 731.650619][ T117] ret_from_fork+0x514/0xb70 [ 731.655211][ T117] ? __pfx_ret_from_fork+0x10/0x10 [ 731.660327][ T117] ? srso_alias_return_thunk+0x5/0xfbef5 [ 731.665953][ T117] ? __switch_to+0xc89/0x1420 [ 731.670627][ T117] ? __pfx_kthread+0x10/0x10 [ 731.675224][ T117] ret_from_fork_asm+0x1a/0x30 [ 731.679986][ T117] [ 731.683192][ T117] Kernel Offset: disabled [ 731.687505][ T117] Rebooting in 86400 seconds..