last executing test programs: 3.103050894s ago: executing program 1 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x52, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xdd, 0x5}}]}, 0x3c}}, 0x20000000) 2.927001169s ago: executing program 1 (id=1998): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 1.995238028s ago: executing program 3 (id=2008): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) 1.963083239s ago: executing program 3 (id=2009): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) 1.93089545s ago: executing program 1 (id=2010): unshare(0x22020400) r0 = open(&(0x7f0000000080)='.\x00', 0x798202, 0x78e22799f4a46e8e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)={0xb0000000}) 1.876346732s ago: executing program 3 (id=2011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)=[0x0, 0x7], 0x0, 0x0, 0x2, 0x0, r1}}, 0x40) 1.763151225s ago: executing program 1 (id=2013): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x20000490) 1.721237487s ago: executing program 3 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.594873971s ago: executing program 1 (id=2016): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r0, 0x0, r1, 0x0, 0x2000, 0x0) 1.527725083s ago: executing program 3 (id=2017): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r0, &(0x7f0000000180)=""/174, 0xae) 1.381726497s ago: executing program 1 (id=2020): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) fchown(r0, 0x0, 0x0) 1.30335017s ago: executing program 3 (id=2021): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 1.247611361s ago: executing program 0 (id=2023): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x7, 0x7b, 0x20f}) 1.044785288s ago: executing program 0 (id=2025): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 843.491884ms ago: executing program 0 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 823.903915ms ago: executing program 2 (id=2027): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=0x0, @ANYBLOB=',longad,adinicb,uid=ignore\x00nos,lastblock=00000000000000001313,partitqon=00000000000000000004,mode=01777777777777777777771,fileset=00000000000000004,defcontext=root,\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfd, 0xc2f, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/48, 0x63) 684.549949ms ago: executing program 0 (id=2028): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f00000013c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000050, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 447.462427ms ago: executing program 2 (id=2029): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 403.100028ms ago: executing program 0 (id=2030): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) recvfrom(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) 294.064762ms ago: executing program 2 (id=2031): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0xff, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="5d000000c424b1", 0x7}, {&(0x7f0000000380)="4a3d056a", 0x4}], 0x2}}], 0x1, 0x0) 143.456496ms ago: executing program 2 (id=2032): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 122.662097ms ago: executing program 2 (id=2033): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000005000)=[{0xfffffffffffffffe}], 0x1}, 0x4}], 0x2, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 73.907508ms ago: executing program 0 (id=2034): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x20, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=2035): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = getpid() ptrace$setopts(0x4206, r0, 0x0, 0x300010) kernel console output (not intermixed with test programs): trans age 30 [ 196.976998][ T8290] REISERFS (device loop3): checking transaction log (loop3) [ 196.991834][ T8290] REISERFS (device loop3): Using tea hash to sort names [ 196.993349][ T8277] dvb-usb: bulk message failed: -22 (2/0) [ 196.999690][ T8290] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 197.025805][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 197.083659][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 197.117004][ T23] usb 2-1: USB disconnect, device number 9 [ 197.200128][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.270149][ T8300] loop0: detected capacity change from 0 to 2048 [ 197.312816][ T8300] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.343313][ T8300] NILFS (loop0): mounting unchecked fs [ 197.396758][ T8300] NILFS (loop0): recovery complete [ 197.435311][ T8301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.504442][ T8303] loop3: detected capacity change from 0 to 64 [ 198.126214][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 198.238969][ T8320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.269207][ T8320] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.430373][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.522204][ T8333] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.559414][ T8333] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.691511][ T8337] netlink: 260 bytes leftover after parsing attributes in process `syz.1.979'. [ 198.694589][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.743298][ T8337] netlink: 64 bytes leftover after parsing attributes in process `syz.1.979'. [ 199.175552][ T8355] set_capacity_and_notify: 2 callbacks suppressed [ 199.175571][ T8355] loop0: detected capacity change from 0 to 512 [ 199.246933][ T8355] EXT4-fs: Ignoring removed nobh option [ 199.293950][ T8355] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.361955][ T8355] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.436811][ T8355] EXT4-fs (loop0): 1 truncate cleaned up [ 199.476912][ T8355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.606637][ T8347] loop2: detected capacity change from 0 to 32768 [ 199.668375][ T8347] non-latin1 character 0x200 found in JFS file name [ 199.678326][ T8347] mount with iocharset=utf8 to access [ 199.703383][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.866121][ T8367] loop0: detected capacity change from 0 to 128 [ 199.935394][ T8367] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 199.955922][ T8367] FAT-fs (loop0): Filesystem has been set read-only [ 200.185601][ T8374] loop3: detected capacity change from 0 to 256 [ 200.333570][ T8374] FAT-fs (loop3): Directory bread(block 64) failed [ 200.368313][ T8374] FAT-fs (loop3): Directory bread(block 65) failed [ 200.375024][ T8374] FAT-fs (loop3): Directory bread(block 66) failed [ 200.418011][ T8374] FAT-fs (loop3): Directory bread(block 67) failed [ 200.438780][ T8374] FAT-fs (loop3): Directory bread(block 68) failed [ 200.445383][ T8374] FAT-fs (loop3): Directory bread(block 69) failed [ 200.465352][ T8374] FAT-fs (loop3): Directory bread(block 70) failed [ 200.472879][ T8374] FAT-fs (loop3): Directory bread(block 71) failed [ 200.479885][ T8374] FAT-fs (loop3): Directory bread(block 72) failed [ 200.486459][ T8374] FAT-fs (loop3): Directory bread(block 73) failed [ 201.101714][ T8378] loop2: detected capacity change from 0 to 32768 [ 201.173488][ T8378] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 201.211955][ T8378] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.369288][ T8378] XFS (loop2): Ending clean mount [ 201.409201][ T8378] XFS (loop2): Quotacheck needed: Please wait. [ 201.491979][ T8378] XFS (loop2): Quotacheck: Done. [ 201.669649][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.856723][ T8408] netlink: 'syz.3.1007': attribute type 2 has an invalid length. [ 201.907361][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1007'. [ 201.922763][ T8408] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 202.240952][ T8414] loop3: detected capacity change from 0 to 256 [ 202.765273][ T8426] loop3: detected capacity change from 0 to 2048 [ 202.828803][ T8431] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.885480][ T8434] netlink: 'syz.0.1017': attribute type 3 has an invalid length. [ 203.697999][ T5813] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.899904][ T5813] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 203.917098][ T5813] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 203.938391][ T5813] usb 4-1: config 220 has no interface number 2 [ 203.944779][ T5813] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 203.968193][ T5813] usb 4-1: config 220 interface 0 has no altsetting 0 [ 203.975044][ T5813] usb 4-1: config 220 interface 76 has no altsetting 0 [ 203.985808][ T5813] usb 4-1: config 220 interface 1 has no altsetting 0 [ 203.995605][ T5813] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.005221][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.015083][ T5813] usb 4-1: Product: syz [ 204.019605][ T8464] loop1: detected capacity change from 0 to 512 [ 204.033048][ T5813] usb 4-1: Manufacturer: syz [ 204.037708][ T5813] usb 4-1: SerialNumber: syz [ 204.038544][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 204.053479][ T8464] EXT4-fs: Ignoring removed nobh option [ 204.070357][ T8464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.107351][ T8464] EXT4-fs (loop1): 1 truncate cleaned up [ 204.124930][ T8464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.168030][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.242293][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.274475][ T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 204.284235][ T5813] usb 4-1: selecting invalid altsetting 0 [ 204.294643][ T9] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 204.298896][ T5813] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 204.318273][ T5813] usb 4-1: No valid video chain found. [ 204.324886][ T9] usb 3-1: Product: syz [ 204.330754][ T9] usb 3-1: Manufacturer: syz [ 204.334696][ T5813] usb 4-1: selecting invalid altsetting 0 [ 204.335377][ T9] usb 3-1: SerialNumber: syz [ 204.355335][ T5813] usbtest: probe of 4-1:220.1 failed with error -22 [ 204.378819][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 204.389656][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 204.395866][ T5813] usb 4-1: USB disconnect, device number 11 [ 204.415330][ T8] usb 1-1: config 157 has too many interfaces: 246, using maximum allowed: 32 [ 204.435575][ T8] usb 1-1: config 157 has 1 interface, different from the descriptor's value: 246 [ 204.462674][ T8] usb 1-1: config 157 has no interface number 0 [ 204.486827][ T8] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 204.496610][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.521819][ T8] usb 1-1: Product: syz [ 204.528994][ T8] usb 1-1: Manufacturer: syz [ 204.533693][ T8] usb 1-1: SerialNumber: syz [ 204.774794][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 204.786620][ T8] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 204.803188][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 205.049603][ T9] usb 3-1: USB disconnect, device number 6 [ 205.300177][ T8] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 205.545204][ T8486] loop3: detected capacity change from 0 to 1024 [ 205.654519][ T8488] usb usb5: selecting invalid altsetting 1 [ 205.679922][ T27] audit: type=1800 audit(1779143562.457:69): pid=8486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1042" name="file2" dev="loop3" ino=21 res=0 errno=0 [ 205.756697][ T8] ueagle-atm 1-1:157.224: usbatm_usb_probe: bind failed: -19! [ 205.794855][ T8] usb 1-1: USB disconnect, device number 7 [ 205.976657][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 205.997252][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 206.265086][ T8504] loop2: detected capacity change from 0 to 256 [ 206.432836][ T8504] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 206.674932][ T8514] loop3: detected capacity change from 0 to 512 [ 206.740301][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.828583][ T8514] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.955717][ T27] audit: type=1800 audit(1779143563.717:70): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1056" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 206.982692][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.987856][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 206.989933][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 207.054911][ T8521] loop0: detected capacity change from 0 to 256 [ 207.092245][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.098770][ T8523] loop2: detected capacity change from 0 to 512 [ 207.126756][ T8523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.190198][ T8523] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1059: bad orphan inode 11 [ 207.252471][ T8523] ext4_test_bit(bit=10, block=4) = 1 [ 207.266218][ T8523] is_bad_inode(inode)=0 [ 207.278288][ T8523] NEXT_ORPHAN(inode)=2080374784 [ 207.289786][ T8523] max_ino=32 [ 207.299039][ T8523] i_nlink=0 [ 207.304555][ T8523] EXT4-fs (loop2): 1 truncate cleaned up [ 207.322157][ T8523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.549862][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.598843][ T8502] loop1: detected capacity change from 0 to 32768 [ 207.619204][ T8502] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 207.832608][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'. [ 207.928739][ T6257] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 208.694588][ T8535] loop2: detected capacity change from 0 to 32768 [ 208.750932][ T8535] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 208.819325][ T8535] XFS (loop2): Ending clean mount [ 208.852242][ T8535] XFS (loop2): Quotacheck needed: Please wait. [ 208.978286][ T8535] XFS (loop2): Quotacheck: Done. [ 209.243855][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.441438][ T8548] loop3: detected capacity change from 0 to 32768 [ 209.452858][ T8576] loop0: detected capacity change from 0 to 128 [ 209.495753][ T8548] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 209.519313][ T8548] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.627616][ T8548] XFS (loop3): Ending clean mount [ 209.637154][ T8548] XFS (loop3): Quotacheck needed: Please wait. [ 209.773391][ T8548] XFS (loop3): Quotacheck: Done. [ 209.991859][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.608501][ T1204] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.652139][ T8589] loop0: detected capacity change from 0 to 32768 [ 210.812704][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.853539][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.888211][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 210.946818][ T1204] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 210.972754][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.013444][ T1204] usb 2-1: config 0 descriptor?? [ 211.177916][ T28] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 211.390254][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 211.410772][ T28] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.427880][ T28] usb 3-1: config 0 has no interface number 0 [ 211.454593][ T28] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 211.477883][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.481846][ T1204] uclogic 0003:28BD:0055.000C: interface is invalid, ignoring [ 211.513891][ T28] usb 3-1: Product: syz [ 211.529243][ T28] usb 3-1: Manufacturer: syz [ 211.546143][ T28] usb 3-1: SerialNumber: syz [ 211.570471][ T28] usb 3-1: config 0 descriptor?? [ 211.590052][ T28] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 211.608123][ T28] usb 3-1: selecting invalid altsetting 1 [ 211.628044][ T28] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 211.651958][ T28] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.688283][ T28] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 211.708186][ T28] usb 3-1: media controller created [ 211.725515][ T23] usb 2-1: USB disconnect, device number 10 [ 211.764717][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.878183][ T27] audit: type=1326 audit(1779143568.657:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 211.897881][ T8602] loop0: detected capacity change from 0 to 32768 [ 211.913968][ T8611] loop3: detected capacity change from 0 to 512 [ 211.922018][ T8611] journal_path: Lookup failure for './file0' [ 211.923836][ T27] audit: type=1326 audit(1779143568.667:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 211.937268][ T8611] EXT4-fs: error: could not find journal device path [ 211.952958][ T27] audit: type=1326 audit(1779143568.687:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 212.008854][ T27] audit: type=1326 audit(1779143568.687:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fedf9cbc2 code=0x7ffc0000 [ 212.033474][ T27] audit: type=1326 audit(1779143568.697:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 212.084599][ T8602] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.094633][ T27] audit: type=1326 audit(1779143568.697:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9fedf9cc87 code=0x7ffc0000 [ 212.120185][ T27] audit: type=1326 audit(1779143568.697:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 212.144894][ T27] audit: type=1326 audit(1779143568.697:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fedf9caeb code=0x7ffc0000 [ 212.169971][ T27] audit: type=1326 audit(1779143568.707:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 212.194356][ T27] audit: type=1326 audit(1779143568.707:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.1093" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 212.254737][ T8602] XFS (loop0): Ending clean mount [ 212.300301][ T8602] XFS (loop0): Quotacheck needed: Please wait. [ 212.416115][ T8602] XFS (loop0): Quotacheck: Done. [ 212.613341][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.924280][ T28] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 212.939230][ T28] zl10353_read_register: readreg error (reg=127, ret==-110) [ 212.972723][ T8598] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 213.103086][ T28] usb 3-1: USB disconnect, device number 7 [ 213.407623][ T8640] loop3: detected capacity change from 0 to 2048 [ 213.440711][ T8640] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 213.472111][ T8640] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 213.508297][ T8640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.136820][ T8654] loop2: detected capacity change from 0 to 2048 [ 214.153999][ T8638] loop0: detected capacity change from 0 to 32768 [ 214.196684][ T8654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.496509][ T8658] autofs4:pid:8658:autofs_fill_super: called with bogus options [ 214.684623][ T8664] sp0: Synchronizing with TNC [ 215.265014][ T8662] loop1: detected capacity change from 0 to 32768 [ 215.278262][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 215.293298][ T8662] (syz.1.1114,8662,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.314777][ T8662] (syz.1.1114,8662,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 215.346215][ T8662] JBD2: Ignoring recovery information on journal [ 215.388031][ T1204] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 215.410971][ T8662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 215.475834][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 215.505008][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.523198][ T8682] program syz.0.1122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.541243][ T9] usb 4-1: Product: syz [ 215.551688][ T9] usb 4-1: Manufacturer: syz [ 215.566919][ T9] usb 4-1: SerialNumber: syz [ 215.586341][ T9] usb 4-1: config 0 descriptor?? [ 215.598777][ T1204] usb 3-1: Using ep0 maxpacket: 32 [ 215.616019][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 215.624403][ T1204] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 215.649972][ T1204] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.666750][ T1204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.674397][ T1204] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 215.690286][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.751299][ T1204] usb 3-1: config 0 descriptor?? [ 215.895915][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 216.224920][ T8694] loop0: detected capacity change from 0 to 64 [ 216.269724][ T9] gspca_sunplus: reg_w_riv err -71 [ 216.278408][ T9] sunplus: probe of 4-1:0.0 failed with error -71 [ 216.329402][ T9] usb 4-1: USB disconnect, device number 12 [ 216.408202][ T1204] usb 3-1: string descriptor 0 read error: -71 [ 216.421806][ T1204] uclogic 0003:5543:004D.000D: failed retrieving string descriptor #200: -71 [ 216.436061][ T1204] uclogic 0003:5543:004D.000D: failed retrieving pen parameters: -71 [ 216.446306][ T1204] uclogic 0003:5543:004D.000D: failed probing pen v2 parameters: -71 [ 216.478579][ T1204] uclogic 0003:5543:004D.000D: failed probing parameters: -71 [ 216.499135][ T8698] loop0: detected capacity change from 0 to 16 [ 216.506886][ T1204] uclogic: probe of 0003:5543:004D.000D failed with error -71 [ 216.533680][ T8698] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 216.539651][ T1204] usb 3-1: USB disconnect, device number 8 [ 216.569162][ T6257] udevd[6257]: incorrect cramfs checksum on /dev/loop0 [ 216.645406][ T6257] udevd[6257]: incorrect cramfs checksum on /dev/loop0 [ 217.231665][ T8700] loop1: detected capacity change from 0 to 32768 [ 217.318416][ T8700] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 217.462983][ T8700] XFS (loop1): Ending clean mount [ 217.552842][ T9] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 217.626328][ T9] XFS (loop1): Unmount and run xfs_repair [ 217.646073][ T9] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 217.665211][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 217.683707][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 217.707079][ T9] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 217.731873][ T9] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 217.763528][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 217.771382][ T8706] loop3: detected capacity change from 0 to 32768 [ 217.790912][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 217.808489][ T9] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 217.815666][ T8730] usb usb8: usbfs: process 8730 (syz.2.1142) did not claim interface 14 before use [ 217.858437][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 217.888800][ T8700] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 217.904471][ T8706] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 217.908232][ T8700] XFS (loop1): Failed to initialize disk quotas. [ 217.945064][ T8706] JBD2: Ignoring recovery information on journal [ 218.143267][ T8706] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 218.341653][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.595556][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 218.770125][ T8747] loop2: detected capacity change from 0 to 8192 [ 218.811430][ T8747] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.858966][ T8747] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 218.933610][ T8747] REISERFS (device loop2): using ordered data mode [ 218.957364][ T8747] reiserfs: using flush barriers [ 219.007538][ T8747] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.040119][ T8753] sctp: [Deprecated]: syz.1.1152 (pid 8753) Use of int in max_burst socket option. [ 219.040119][ T8753] Use struct sctp_assoc_value instead [ 219.089307][ T8747] REISERFS (device loop2): checking transaction log (loop2) [ 219.109026][ T8747] REISERFS (device loop2): Using r5 hash to sort names [ 219.116386][ T8747] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 219.547953][ T5813] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 219.737960][ T5813] usb 2-1: Using ep0 maxpacket: 16 [ 219.747632][ T5813] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 219.789236][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.797311][ T5813] usb 2-1: Product: syz [ 219.828043][ T5813] usb 2-1: Manufacturer: syz [ 219.832773][ T5813] usb 2-1: SerialNumber: syz [ 219.902578][ T8771] loop0: detected capacity change from 0 to 256 [ 220.034489][ T5814] IPVS: starting estimator thread 0... [ 220.035689][ T8771] FAT-fs (loop0): Directory bread(block 64) failed [ 220.055807][ T8771] FAT-fs (loop0): Directory bread(block 65) failed [ 220.063261][ T8771] FAT-fs (loop0): Directory bread(block 66) failed [ 220.075123][ T8771] FAT-fs (loop0): Directory bread(block 67) failed [ 220.082783][ T8771] FAT-fs (loop0): Directory bread(block 68) failed [ 220.099598][ T8771] FAT-fs (loop0): Directory bread(block 69) failed [ 220.106472][ T8771] FAT-fs (loop0): Directory bread(block 70) failed [ 220.116506][ T8771] FAT-fs (loop0): Directory bread(block 71) failed [ 220.126666][ T8771] FAT-fs (loop0): Directory bread(block 72) failed [ 220.136060][ T8771] FAT-fs (loop0): Directory bread(block 73) failed [ 220.148021][ T8774] IPVS: using max 18 ests per chain, 43200 per kthread [ 220.285795][ T5813] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 220.519151][ T5813] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 220.521885][ T8780] loop0: detected capacity change from 0 to 128 [ 220.529023][ T5813] usb 2-1: USB disconnect, device number 11 [ 220.567735][ T8780] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.604013][ T8765] loop2: detected capacity change from 0 to 32768 [ 220.654364][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.684619][ T8765] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.688488][ T8780] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.742243][ T5836] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 220.783927][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 220.783953][ T27] audit: type=1800 audit(1779143577.567:92): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1163" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 220.876388][ T8765] XFS (loop2): Ending clean mount [ 220.884827][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.896348][ T5813] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 220.912004][ T5813] XFS (loop2): Unmount and run xfs_repair [ 220.920013][ T5813] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 220.931986][ T5836] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.934365][ T5813] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 220.949839][ T5813] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 220.958970][ T5813] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 220.967974][ T5813] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 220.982807][ T5836] usb 4-1: config 0 has no interface number 0 [ 220.987833][ T5813] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 220.999987][ T5813] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 221.021694][ T5836] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 221.033612][ T5813] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 221.037917][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.063660][ T5836] usb 4-1: Product: syz [ 221.070131][ T5813] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 221.072522][ T5836] usb 4-1: Manufacturer: syz [ 221.085515][ T5836] usb 4-1: SerialNumber: syz [ 221.090365][ T8765] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 221.108296][ T8765] XFS (loop2): Failed to initialize disk quotas. [ 221.172937][ T5836] usb 4-1: config 0 descriptor?? [ 221.211144][ T5836] usb 4-1: selecting invalid altsetting 1 [ 221.228686][ T5836] dvb_ttusb_budget: ttusb_init_controller: error [ 221.235277][ T5836] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 221.248594][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.428020][ T5836] DVB: Unable to find symbol stv0299_attach() [ 221.521067][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1169'. [ 221.598038][ T5836] DVB: Unable to find symbol tda8083_attach() [ 221.604205][ T5836] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 221.654763][ T5836] usb 4-1: USB disconnect, device number 13 [ 221.686763][ T8802] loop1: detected capacity change from 0 to 4096 [ 221.782920][ T8802] NILFS (loop1): invalid segment: Checksum error in segment payload [ 221.810262][ T8802] NILFS (loop1): trying rollback from an earlier position [ 221.863725][ T8802] NILFS (loop1): recovery complete [ 221.905841][ T8809] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.984485][ T8807] loop0: detected capacity change from 0 to 4096 [ 222.009072][ T8807] EXT4-fs: inline encryption not supported [ 222.042435][ T8807] EXT4-fs (loop0): Test dummy encryption mode enabled [ 222.160624][ T8807] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 222.228040][ T8807] System zones: 0-5 [ 222.253313][ T8807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.455328][ T8807] EXT4-fs: Ignoring sb option on remount [ 222.481475][ T8807] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 222.550381][ T8807] EXT4-fs: Cannot change journaled quota options when quota turned on [ 222.677380][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.914627][ T8832] loop1: detected capacity change from 0 to 512 [ 223.485338][ T8824] loop2: detected capacity change from 0 to 32768 [ 223.562204][ T8824] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 223.580094][ T8824] JBD2: Ignoring recovery information on journal [ 223.638739][ T8824] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 223.801238][ T8824] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 223.847985][ T8824] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 223.901213][ T8824] OCFS2: File system is now read-only. [ 223.906768][ T8824] (syz.2.1179,8824,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 223.969081][ T8824] (syz.2.1179,8824,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 223.979769][ T8824] (syz.2.1179,8824,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 223.990398][ T8824] (syz.2.1179,8824,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 224.002200][ T8824] (syz.2.1179,8824,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 224.025580][ T8824] (syz.2.1179,8824,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 224.042420][ T8824] (syz.2.1179,8824,0):ocfs2_mknod:385 ERROR: status = -30 [ 224.053778][ T8824] (syz.2.1179,8824,0):ocfs2_mknod:502 ERROR: status = -30 [ 224.064694][ T8824] (syz.2.1179,8824,0):ocfs2_mkdir:659 ERROR: status = -30 [ 224.199929][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 224.504697][ T8866] loop0: detected capacity change from 0 to 1024 [ 224.689009][ T8870] loop3: detected capacity change from 0 to 2048 [ 224.714784][ T8866] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.720529][ T8870] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 224.743170][ T8866] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.827862][ T8871] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.895965][ T8858] loop1: detected capacity change from 0 to 32768 [ 224.927980][ T1140] hfsplus: b-tree write err: -5, ino 25 [ 224.935754][ T1140] hfsplus: b-tree write err: -5, ino 4 [ 224.962949][ T1140] hfsplus: b-tree write err: -5, ino 2 [ 224.972150][ T1140] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.997418][ T1140] hfsplus: request for non-existent node 16777216 in B*Tree [ 225.000879][ T8858] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 225.158148][ T8858] JBD2: Ignoring recovery information on journal [ 225.289218][ T8881] [U] ¦ [ 225.308287][ T8858] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 225.507143][ T8880] loop3: detected capacity change from 0 to 8192 [ 225.683760][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 225.767864][ T1204] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.978038][ T1204] usb 3-1: Using ep0 maxpacket: 16 [ 225.995537][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.006884][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.027371][ T1204] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.069325][ T1204] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.087922][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.107140][ T1204] usb 3-1: config 0 descriptor?? [ 226.151203][ T8893] loop1: detected capacity change from 0 to 512 [ 226.197967][ T8893] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1210: inode has both inline data and extents flags [ 226.253818][ T8893] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1210: couldn't read orphan inode 15 (err -117) [ 226.279658][ T8893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.295018][ T8889] loop0: detected capacity change from 0 to 32768 [ 226.319460][ T8889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1209 (8889) [ 226.385945][ T8889] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.413430][ T8889] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 226.435037][ T8889] BTRFS info (device loop0): setting nodatasum [ 226.457999][ T8889] BTRFS info (device loop0): enabling auto defrag [ 226.466597][ T8889] BTRFS info (device loop0): disabling tree log [ 226.485669][ T8889] BTRFS info (device loop0): using free space tree [ 226.497225][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.552056][ T1204] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 226.578216][ T1204] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 226.586837][ T1204] microsoft 0003:045E:07DA.000E: unbalanced delimiter at end of report description [ 226.596963][ T8891] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1211 (8891) [ 226.630739][ T1204] microsoft 0003:045E:07DA.000E: parse failed [ 226.636994][ T1204] microsoft: probe of 0003:045E:07DA.000E failed with error -22 [ 226.662735][ T8889] BTRFS info (device loop0): enabling ssd optimizations [ 226.723967][ T8889] BTRFS info (device loop0): auto enabling async discard [ 226.755645][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.781387][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.813564][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.841601][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.842022][ T5781] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5781) [ 226.872866][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.875728][ T1204] usb 3-1: USB disconnect, device number 9 [ 226.918604][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.945208][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.959163][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.966825][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 226.983832][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 227.002811][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 227.018987][ T5813] hid-generic 0103:0004:0000.000F: unknown main item tag 0x0 [ 227.064131][ T5813] hid-generic 0103:0004:0000.000F: hidraw0: HID v0.02 Device [syz0] on syz1 [ 227.078610][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.216056][ T8918] fido_id[8918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.504778][ T8924] set_capacity_and_notify: 1 callbacks suppressed [ 227.504795][ T8924] loop3: detected capacity change from 0 to 256 [ 227.632911][ T6257] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (6257) [ 227.647586][ T8924] FAT-fs (loop3): Directory bread(block 64) failed [ 227.678290][ T8924] FAT-fs (loop3): Directory bread(block 65) failed [ 227.685037][ T8924] FAT-fs (loop3): Directory bread(block 66) failed [ 227.735937][ T8924] FAT-fs (loop3): Directory bread(block 67) failed [ 227.748590][ T8931] loop2: detected capacity change from 0 to 512 [ 227.767225][ T8924] FAT-fs (loop3): Directory bread(block 68) failed [ 227.791130][ T8931] EXT4-fs: Ignoring removed i_version option [ 227.819649][ T8924] FAT-fs (loop3): Directory bread(block 69) failed [ 227.861861][ T8931] EXT4-fs (loop2): 1 truncate cleaned up [ 227.868545][ T8924] FAT-fs (loop3): Directory bread(block 70) failed [ 227.887590][ T8924] FAT-fs (loop3): Directory bread(block 71) failed [ 227.896967][ T8924] FAT-fs (loop3): Directory bread(block 72) failed [ 227.903093][ T8931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.903778][ T8924] FAT-fs (loop3): Directory bread(block 73) failed [ 228.028003][ T1204] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.145358][ T8938] loop1: detected capacity change from 0 to 4096 [ 228.168348][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.237929][ T1204] usb 1-1: Using ep0 maxpacket: 32 [ 228.308058][ T8939] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.309004][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.388711][ T1204] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.438895][ T1204] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 228.447384][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1224'. [ 228.467980][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.500678][ T1204] usb 1-1: config 0 descriptor?? [ 228.811944][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 228.993009][ T1204] nintendo 0003:057E:200E.0010: unknown main item tag 0x0 [ 229.012719][ T1204] nintendo 0003:057E:200E.0010: unknown main item tag 0x0 [ 229.031776][ T1204] nintendo 0003:057E:200E.0010: unknown main item tag 0x0 [ 229.071620][ T1204] nintendo 0003:057E:200E.0010: unknown main item tag 0x0 [ 229.099293][ T1204] nintendo 0003:057E:200E.0010: unknown main item tag 0x0 [ 229.146432][ T1204] nintendo 0003:057E:200E.0010: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 229.239132][ T1204] nintendo 0003:057E:200E.0010: Failed charging grip handshake [ 229.252671][ T1204] nintendo 0003:057E:200E.0010: Failed to initialize controller; ret=-110 [ 229.315536][ T1204] nintendo 0003:057E:200E.0010: probe - fail = -110 [ 229.338960][ T1204] nintendo: probe of 0003:057E:200E.0010 failed with error -110 [ 229.366929][ T1204] usb 1-1: USB disconnect, device number 8 [ 229.556883][ T8967] openvswitch: netlink: Duplicate or invalid key (type 0). [ 229.565603][ T8967] openvswitch: netlink: Actions may not be safe on all matching packets [ 229.674872][ T8960] loop1: detected capacity change from 0 to 32768 [ 229.689055][ T8960] XFS: ikeep mount option is deprecated. [ 229.721785][ T8960] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.831681][ T8960] XFS (loop1): Ending clean mount [ 230.032822][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.903085][ T9011] loop0: detected capacity change from 0 to 512 [ 230.921462][ T9011] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.950873][ T9011] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.990955][ T9011] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 231.030398][ T9011] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 231.094953][ T8999] loop2: detected capacity change from 0 to 32768 [ 231.102226][ T9011] EXT4-fs (loop0): 1 truncate cleaned up [ 231.116863][ T9011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.121949][ T8999] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1247 (8999) [ 231.184606][ T8999] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.197589][ T8999] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 231.208639][ T8999] BTRFS info (device loop2): setting nodatacow, compression disabled [ 231.218938][ T8999] BTRFS info (device loop2): use zlib compression, level 3 [ 231.227128][ T8999] BTRFS info (device loop2): force clearing of disk cache [ 231.242765][ T9011] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #2: block 4: comm syz.0.1252: lblock 0 mapped to illegal pblock 4 (length 1) [ 231.269390][ T8999] BTRFS info (device loop2): turning on sync discard [ 231.276743][ T8999] BTRFS info (device loop2): turning off barriers [ 231.298233][ T8999] BTRFS info (device loop2): use no compression [ 231.317926][ T8999] BTRFS info (device loop2): disabling free space tree [ 231.340941][ T8999] BTRFS info (device loop2): enabling ssd optimizations [ 231.343034][ T9011] EXT4-fs (loop0): Remounting filesystem read-only [ 231.358311][ T8999] BTRFS info (device loop2): using spread ssd allocation scheme [ 231.365507][ T28] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 231.378013][ T8999] BTRFS info (device loop2): not using ssd optimizations [ 231.418087][ T8999] BTRFS info (device loop2): not using spread ssd allocation scheme [ 231.501458][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.598159][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 231.630597][ T28] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 231.640356][ T8999] BTRFS info (device loop2): rebuilding free space tree [ 231.647816][ T28] usb 4-1: config 0 has no interface number 0 [ 231.656869][ T28] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 231.667509][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.675982][ T28] usb 4-1: Product: syz [ 231.680566][ T28] usb 4-1: Manufacturer: syz [ 231.685211][ T28] usb 4-1: SerialNumber: syz [ 231.692628][ T28] usb 4-1: config 0 descriptor?? [ 231.703281][ T28] smsc95xx v2.0.0 [ 231.729322][ T8999] BTRFS info (device loop2): disabling free space tree [ 231.736355][ T8999] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.758115][ T8999] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 232.368453][ T5776] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 232.888166][ T1204] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 233.090201][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.123615][ T1204] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 233.150104][ T1204] usb 2-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 233.173854][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.202835][ T1204] usb 2-1: config 0 descriptor?? [ 233.225372][ T9053] loop0: detected capacity change from 0 to 32768 [ 233.283715][ T9053] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.449590][ T9053] XFS (loop0): Ending clean mount [ 233.475957][ T9053] XFS (loop0): Quotacheck needed: Please wait. [ 233.572890][ T9053] XFS (loop0): Quotacheck: Done. [ 233.581973][ T9059] loop2: detected capacity change from 0 to 32768 [ 233.608212][ T9059] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1265 (9059) [ 233.655144][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x3 [ 233.671033][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.685737][ T9059] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 233.706790][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.721970][ T9059] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 233.731981][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.743140][ T9059] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 233.753546][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.761145][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.769005][ T9059] BTRFS info (device loop2): use zstd compression, level 3 [ 233.776375][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.784220][ T9059] BTRFS info (device loop2): using free space tree [ 233.791542][ T1204] wacom 0003:056A:0031.0011: unknown main item tag 0x0 [ 233.805511][ T1204] wacom 0003:056A:0031.0011: hidraw0: USB HID v0.0b Device [HID 056a:0031] on usb-dummy_hcd.1-1/input0 [ 233.842217][ T5770] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.875114][ T5814] usb 2-1: USB disconnect, device number 12 [ 233.984708][ T9079] fido_id[9079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 234.053751][ T9059] BTRFS info (device loop2): enabling ssd optimizations [ 234.062718][ T9059] BTRFS info (device loop2): auto enabling async discard [ 234.206571][ T28] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 234.227189][ T28] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 234.247414][ T28] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 234.275210][ T28] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 234.302554][ T27] audit: type=1800 audit(1779143591.087:93): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1265" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 234.338672][ T28] usb 4-1: USB disconnect, device number 14 [ 234.428748][ T5776] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 234.601154][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 234.626144][ T9090] Zero length message leads to an empty skb [ 234.865714][ T6257] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (6257) [ 235.402093][ T9113] loop0: detected capacity change from 0 to 64 [ 235.448296][ T1204] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.534986][ T9113] syz.0.1279: attempt to access beyond end of device [ 235.534986][ T9113] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 235.578573][ T9117] Bluetooth: MGMT ver 1.22 [ 235.588162][ T9113] Buffer I/O error on dev loop0, logical block 512, async page read [ 235.596477][ T9113] syz.0.1279: attempt to access beyond end of device [ 235.596477][ T9113] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 235.632414][ T9113] Buffer I/O error on dev loop0, logical block 56576, async page read [ 235.643319][ T1204] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 235.664906][ T9113] syz.0.1279: attempt to access beyond end of device [ 235.664906][ T9113] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 235.672383][ T1204] usb 2-1: config 1 has no interface number 0 [ 235.682607][ T9113] Buffer I/O error on dev loop0, logical block 512, async page read [ 235.694219][ T9113] syz.0.1279: attempt to access beyond end of device [ 235.694219][ T9113] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 235.718016][ T1204] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 235.743343][ T1204] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.780141][ T9113] Buffer I/O error on dev loop0, logical block 56576, async page read [ 235.806981][ T1204] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 235.817257][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.837240][ T1204] usb 2-1: Product: syz [ 235.852991][ T1204] usb 2-1: Manufacturer: syz [ 235.859482][ T1204] usb 2-1: SerialNumber: syz [ 235.893178][ T9107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.903667][ T1204] usb 2-1: Expected 3 endpoints, found: 2 [ 235.915290][ T9123] loop3: detected capacity change from 0 to 1024 [ 235.971010][ T9123] hfsplus: request for non-existent node 134217728 in B*Tree [ 235.997362][ T9123] hfsplus: request for non-existent node 134217728 in B*Tree [ 236.230952][ T9129] vlan3: entered allmulticast mode [ 236.249579][ T9129] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 236.464763][ T9137] tmpfs: Cannot change global quota limit on remount [ 236.540958][ T6257] udevd[6257]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 236.755655][ T9147] loop0: detected capacity change from 0 to 128 [ 236.776826][ T9147] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.792949][ T9147] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.889631][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.002830][ T9151] loop0: detected capacity change from 0 to 2048 [ 237.020328][ T9151] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 237.039548][ T9151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.237489][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 238.193751][ T5814] usb 2-1: USB disconnect, device number 13 [ 238.393539][ T9174] loop2: detected capacity change from 0 to 32768 [ 238.427868][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 238.456740][ T9174] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 238.456740][ T9174] [ 238.550326][ T9170] loop0: detected capacity change from 0 to 40427 [ 238.584012][ T9170] F2FS-fs (loop0): invalid crc value [ 238.840336][ T9170] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 238.910533][ T9176] loop3: detected capacity change from 0 to 32768 [ 238.944579][ T9176] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 239.058611][ T9190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 239.298444][ T9194] loop1: detected capacity change from 0 to 512 [ 239.323024][ T5781] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 239.521956][ T9199] loop3: detected capacity change from 0 to 1024 [ 239.541177][ T9194] EXT4-fs (loop1): 1 orphan inode deleted [ 239.567977][ T1140] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.579305][ T9194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.607954][ T1140] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1 [ 239.621043][ T9194] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.668622][ T9199] hfsplus: request for non-existent node 16777216 in B*Tree [ 239.681540][ T9199] hfsplus: request for non-existent node 16777216 in B*Tree [ 239.878499][ T1067] hfsplus: b-tree write err: -5, ino 25 [ 239.884362][ T1067] hfsplus: b-tree write err: -5, ino 4 [ 239.928384][ T1067] hfsplus: b-tree write err: -5, ino 2 [ 239.936896][ T1067] hfsplus: request for non-existent node 16777216 in B*Tree [ 239.990907][ T1067] hfsplus: request for non-existent node 16777216 in B*Tree [ 240.116060][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.169488][ T9189] loop2: detected capacity change from 0 to 32768 [ 240.498688][ T9209] tipc: Started in network mode [ 240.503662][ T9209] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 240.520388][ T9206] loop1: detected capacity change from 0 to 4096 [ 240.531704][ T9209] tipc: Enabled bearer , priority 10 [ 240.547650][ T9207] loop0: detected capacity change from 0 to 4096 [ 240.575996][ T9206] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 240.599111][ T9207] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 240.621526][ T9206] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 240.702633][ T9206] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 240.750195][ T9206] ntfs: volume version 3.1. [ 240.900398][ T9215] ntfs3: loop0: ino=0, attr_set_size [ 241.053783][ T5769] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 241.636356][ T9230] loop3: detected capacity change from 0 to 64 [ 241.644189][ T9228] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1329'. [ 241.659496][ T5813] tipc: Node number set to 10070698 [ 241.714095][ T9230] syz.3.1330: attempt to access beyond end of device [ 241.714095][ T9230] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 241.769180][ T9230] Buffer I/O error on dev loop3, logical block 512, async page read [ 241.780759][ T9230] syz.3.1330: attempt to access beyond end of device [ 241.780759][ T9230] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 241.812350][ T9230] Buffer I/O error on dev loop3, logical block 56576, async page read [ 241.827674][ T9230] syz.3.1330: attempt to access beyond end of device [ 241.827674][ T9230] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 241.844116][ T9230] Buffer I/O error on dev loop3, logical block 512, async page read [ 241.865637][ T9230] syz.3.1330: attempt to access beyond end of device [ 241.865637][ T9230] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 241.912855][ T9230] Buffer I/O error on dev loop3, logical block 56576, async page read [ 242.133747][ T9244] loop0: detected capacity change from 0 to 512 [ 242.204606][ T9244] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 242.237878][ T9244] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 242.271173][ T9244] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1336: Corrupt directory, running e2fsck is recommended [ 242.313519][ T9244] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 242.332201][ T9244] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.1336: corrupted in-inode xattr: e_name out of bounds [ 242.363740][ T9244] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1336: couldn't read orphan inode 15 (err -117) [ 242.390516][ T9244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.531651][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.998321][ T9240] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 243.004477][ T9240] JBD2: Ignoring recovery information on journal [ 243.092740][ T9246] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 243.124434][ T9240] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 243.187532][ T9265] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 243.187596][ T9265] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1345'. [ 243.187614][ T9265] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1345'. [ 243.412657][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 243.434616][ T5771] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 243.622003][ T9272] set_capacity_and_notify: 2 callbacks suppressed [ 243.622020][ T9272] loop3: detected capacity change from 0 to 64 [ 243.771356][ T9272] overlayfs: upper fs needs to support d_type. [ 243.778623][ T9272] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 243.778688][ T9272] overlayfs: failed to set xattr on upper [ 243.778699][ T9272] overlayfs: ...falling back to redirect_dir=nofollow. [ 243.778708][ T9272] overlayfs: ...falling back to index=off. [ 243.778716][ T9272] overlayfs: ...falling back to uuid=null. [ 244.006153][ T9279] vlan3: entered promiscuous mode [ 244.017017][ T9279] bridge0: entered promiscuous mode [ 244.151649][ T9283] loop2: detected capacity change from 0 to 1024 [ 244.367284][ T9288] loop1: detected capacity change from 0 to 512 [ 244.412055][ T9288] EXT4-fs: inline encryption not supported [ 244.463909][ T9288] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1355: bad orphan inode 15 [ 244.507848][ T9288] ext4_test_bit(bit=14, block=5) = 0 [ 244.523414][ T9288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.641813][ T9301] loop0: detected capacity change from 0 to 512 [ 244.652941][ T9301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.681464][ T9301] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.700851][ T9301] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.746330][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.820334][ T9301] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.1360: Allocating blocks 41-42 which overlap fs metadata [ 244.884111][ T9301] EXT4-fs (loop0): Remounting filesystem read-only [ 244.903234][ T9301] Quota error (device loop0): write_blk: dquota write failed [ 244.923445][ T9301] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 244.950787][ T9301] Quota error (device loop0): write_blk: dquota write failed [ 244.968043][ T9301] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 244.986629][ T9301] EXT4-fs (loop0): 1 truncate cleaned up [ 245.002495][ T9301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.204784][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.315965][ T9305] loop2: detected capacity change from 0 to 32768 [ 245.358591][ T9305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.2.1361 (9305) [ 245.438991][ T27] audit: type=1326 audit(1779143602.227:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.3.1365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 245.474475][ T9305] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.505508][ T9305] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 245.524705][ T27] audit: type=1326 audit(1779143602.227:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.3.1365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 245.548123][ T9305] BTRFS error (device loop2): superblock checksum mismatch [ 245.571469][ T6257] udevd[6257]: incorrect btrfs checksum on /dev/loop2 [ 245.596155][ T9305] BTRFS error (device loop2): open_ctree failed: -22 [ 245.616707][ T27] audit: type=1326 audit(1779143602.227:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.3.1365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 245.647031][ T27] audit: type=1326 audit(1779143602.227:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.3.1365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 246.171106][ T9309] loop1: detected capacity change from 0 to 40427 [ 246.224233][ T9311] loop0: detected capacity change from 0 to 32768 [ 246.230384][ T9309] F2FS-fs (loop1): invalid crc value [ 246.273928][ T9309] F2FS-fs (loop1): Found nat_bits in checkpoint [ 246.424580][ T9309] F2FS-fs (loop1): Start checkpoint disabled! [ 246.472392][ T9309] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 246.980923][ T12] kworker/u4:1: attempt to access beyond end of device [ 246.980923][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 247.022932][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 247.064397][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 247.246108][ T9321] loop3: detected capacity change from 0 to 32768 [ 247.310015][ T9321] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 247.569002][ T9353] netlink: 'syz.0.1380': attribute type 3 has an invalid length. [ 247.576812][ T9353] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1380'. [ 247.678030][ T9321] XFS (loop3): Ending clean mount [ 247.861480][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 248.998084][ T28] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.007064][ T9398] loop0: detected capacity change from 0 to 256 [ 249.031372][ T9398] exfat: Deprecated parameter 'utf8' [ 249.036999][ T9398] exfat: Deprecated parameter 'namecase' [ 249.045523][ T9398] exfat: Deprecated parameter 'namecase' [ 249.091192][ T9398] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 249.187837][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 249.199853][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.213467][ T9398] overlay: filesystem on ./bus not supported [ 249.228486][ T28] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 249.254518][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.287936][ T28] usb 3-1: config 0 descriptor?? [ 249.306475][ T28] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 249.600837][ T9396] loop3: detected capacity change from 0 to 32768 [ 249.913727][ T28] gspca_vc032x: reg_r err -71 [ 249.928109][ T28] vc032x: probe of 3-1:0.0 failed with error -71 [ 249.952867][ T28] usb 3-1: USB disconnect, device number 10 [ 251.090908][ T9435] netlink: 'syz.3.1418': attribute type 49 has an invalid length. [ 251.093639][ T9431] loop0: detected capacity change from 0 to 4096 [ 251.113592][ T9431] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 251.158098][ T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 251.181007][ T9431] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 251.199393][ T9431] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 251.310982][ T9437] loop3: detected capacity change from 0 to 64 [ 251.380182][ T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.405990][ T27] audit: type=1804 audit(1779143608.187:98): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1419" name="/newroot/339/bus/file1" dev="loop3" ino=21 res=1 errno=0 [ 251.417795][ T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.485552][ T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.541871][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.573549][ T9428] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.586642][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 251.803014][ T9433] loop1: detected capacity change from 0 to 32768 [ 251.863283][ T9433] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 251.915070][ T9433] JBD2: Ignoring recovery information on journal [ 252.013169][ T9433] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 252.118176][ T5836] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 252.328773][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 252.337045][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.351496][ T5814] usb 3-1: USB disconnect, device number 11 [ 252.372675][ T5836] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 252.396823][ T5836] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.415197][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.476978][ T5769] ocfs2: Unmounting device (7,1) on (node local) [ 252.563163][ T9455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1428'. [ 252.668923][ T5836] usb 4-1: USB disconnect, device number 15 [ 253.556239][ T9486] loop0: detected capacity change from 0 to 764 [ 253.589680][ T9486] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 253.935731][ T9500] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1446'. [ 253.952596][ T9500] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1446'. [ 254.049393][ T9503] loop3: detected capacity change from 0 to 1024 [ 254.060830][ T9503] hfsplus: failed to load catalog file [ 254.143458][ T6257] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.193318][ T5782] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 254.387892][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.428119][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 254.433210][ T9513] loop1: detected capacity change from 0 to 2048 [ 254.488624][ T9513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.544514][ T27] audit: type=1800 audit(1779143611.327:99): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1452" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 254.598325][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 254.608106][ T5836] usb 1-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 254.619683][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 254.626468][ T5836] usb 1-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.670304][ T8] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 254.680202][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.706958][ T5836] usb 1-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.717120][ T8] usb 3-1: Product: syz [ 254.727248][ T5836] usb 1-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 254.740634][ T8] usb 3-1: Manufacturer: syz [ 254.745278][ T8] usb 3-1: SerialNumber: syz [ 254.760747][ T9519] netlink: 'syz.3.1456': attribute type 10 has an invalid length. [ 254.769337][ T8] usb 3-1: config 0 descriptor?? [ 254.776058][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.791327][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 254.805271][ T5836] usb 1-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 254.824706][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.853274][ T5836] usb 1-1: config 0 descriptor?? [ 255.300496][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.307469][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.318006][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.325050][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.335177][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.342458][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.349874][ T5836] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 255.361477][ T5836] wacom 0003:056A:010E.0012: hidraw0: USB HID v11.d8 Device [HID 056a:010e] on usb-dummy_hcd.0-1/input0 [ 255.478101][ T8] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 255.484208][ T8] sq930x: probe of 3-1:0.0 failed with error -71 [ 255.492880][ T8] usb 3-1: USB disconnect, device number 12 [ 255.505746][ T28] usb 1-1: USB disconnect, device number 9 [ 256.103355][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.110943][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.267071][ T9546] loop0: detected capacity change from 0 to 4096 [ 256.336113][ T9546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.362105][ T9550] loop2: detected capacity change from 0 to 512 [ 256.370969][ T9550] EXT4-fs: Ignoring removed orlov option [ 256.391704][ T9550] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 256.622817][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.651319][ T9558] hugetlbfs: Bad value 'ß' for mount option 'size' [ 256.651319][ T9558] [ 256.715464][ T9556] loop1: detected capacity change from 0 to 4096 [ 256.753178][ T9556] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 256.783153][ T9556] NILFS (loop1): mounting unchecked fs [ 256.885890][ T9556] NILFS (loop1): recovery complete [ 256.912979][ T9564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.951130][ T9565] loop0: detected capacity change from 0 to 64 [ 256.973443][ T9565] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 257.446530][ T9580] loop2: detected capacity change from 0 to 512 [ 257.458731][ T9580] EXT4-fs: Ignoring removed i_version option [ 257.472859][ T9580] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.500207][ T9580] EXT4-fs (loop2): 1 truncate cleaned up [ 257.513474][ T9580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.582283][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.006707][ T9594] loop1: detected capacity change from 0 to 4096 [ 258.055664][ T9596] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 258.109078][ T5814] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 258.145720][ T9594] NILFS (loop1): bad btree node (ino=18446744073709486081, blocknr=1024): level = 0, flags = 0x0, nchildren = 0 [ 258.158906][ T9594] NILFS (loop1): error -5 preparing GC: cannot read source blocks [ 258.334897][ T5814] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 258.343962][ T5814] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 258.356284][ T9600] loop0: detected capacity change from 0 to 1024 [ 258.375585][ T9602] loop2: detected capacity change from 0 to 64 [ 258.380079][ T5814] usb 4-1: config 160 has no interface number 0 [ 258.416697][ T5814] usb 4-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.468246][ T5814] usb 4-1: config 160 interface 200 has no altsetting 0 [ 258.503611][ T5814] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 258.535913][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.584670][ T5814] usb 4-1: Product: syz [ 258.585696][ T1095] hfsplus: b-tree write err: -5, ino 25 [ 258.607906][ T5814] usb 4-1: Manufacturer: syz [ 258.613767][ T5814] usb 4-1: SerialNumber: syz [ 258.627386][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 258.650631][ T1095] hfsplus: b-tree write err: -5, ino 2 [ 258.689428][ T1095] hfsplus: b-tree write err: -5, ino 26 [ 258.887994][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1484'. [ 258.960771][ T5814] usb 4-1: USB disconnect, device number 16 [ 260.073932][ T5836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 260.131926][ T9656] loop2: detected capacity change from 0 to 128 [ 260.154993][ T9656] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 260.188053][ T9657] loop1: detected capacity change from 0 to 2048 [ 260.204611][ T9656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.255891][ T9659] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 260.264320][ T9660] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.307512][ T5836] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.338297][ T5836] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.356664][ T5836] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.385451][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.408265][ T9643] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 260.422604][ T5836] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 260.910592][ T9672] loop1: detected capacity change from 0 to 128 [ 261.004844][ T9672] FAT-fs (loop1): Directory bread(block 32) failed [ 261.033395][ T9672] FAT-fs (loop1): Directory bread(block 33) failed [ 261.058849][ T8] usb 4-1: USB disconnect, device number 17 [ 261.090548][ T9672] FAT-fs (loop1): Directory bread(block 34) failed [ 261.097382][ T9672] FAT-fs (loop1): Directory bread(block 35) failed [ 261.115276][ T9672] FAT-fs (loop1): Directory bread(block 36) failed [ 261.144391][ T9672] FAT-fs (loop1): Directory bread(block 37) failed [ 261.163179][ T9672] FAT-fs (loop1): Directory bread(block 38) failed [ 261.174256][ T9672] FAT-fs (loop1): Directory bread(block 39) failed [ 261.185999][ T9672] FAT-fs (loop1): Directory bread(block 40) failed [ 261.204594][ T9672] FAT-fs (loop1): Directory bread(block 41) failed [ 261.488265][ T27] audit: type=1800 audit(1779143618.267:100): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1523" name="file1" dev="loop1" ino=1048690 res=0 errno=0 [ 261.497193][ T9672] FAT-fs (loop1): Filesystem has been set read-only [ 261.514425][ T9684] loop2: detected capacity change from 0 to 1024 [ 261.535461][ T9672] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 261.580521][ T9684] hfsplus: bad catalog entry type [ 261.669031][ T1095] hfsplus: b-tree write err: -5, ino 25 [ 261.674879][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 261.707915][ T1095] hfsplus: b-tree write err: -5, ino 2 [ 262.011077][ T9698] loop3: detected capacity change from 0 to 64 [ 262.242809][ T9702] loop1: detected capacity change from 0 to 8 [ 262.332770][ T9702] SQUASHFS error: Unable to read directory block [629:46] [ 262.848443][ T5814] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 263.040643][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.061952][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 263.108050][ T5814] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 263.137657][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.182709][ T5814] usb 3-1: config 0 descriptor?? [ 263.625757][ T5814] wacom 0003:056A:0333.0013: ignoring exceeding usage max [ 263.638622][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.645835][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.653324][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.702400][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.711333][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.720292][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.727350][ T5814] wacom 0003:056A:0333.0013: unknown main item tag 0x0 [ 263.747078][ T5814] wacom 0003:056A:0333.0013: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 263.856655][ T5813] usb 3-1: USB disconnect, device number 13 [ 263.937215][ T9747] fido_id[9747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 264.254547][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1565'. [ 264.858004][ T9780] loop2: detected capacity change from 0 to 4096 [ 265.165823][ T9788] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 265.482069][ T9796] loop3: detected capacity change from 0 to 256 [ 265.492646][ T9794] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 265.509142][ T9796] exfat: Deprecated parameter 'utf8' [ 265.514580][ T9796] exfat: Deprecated parameter 'namecase' [ 265.535467][ T9794] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1582'. [ 265.567261][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 265.605816][ T9798] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 265.608800][ T9796] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 265.618033][ T9798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1584'. [ 266.033134][ T9808] loop1: detected capacity change from 0 to 512 [ 266.044744][ T9808] EXT4-fs: Ignoring removed bh option [ 266.059852][ T9806] dummy0: entered promiscuous mode [ 266.083793][ T9808] EXT4-fs (loop1): Test dummy encryption mode enabled [ 266.091445][ T9806] dummy0: left promiscuous mode [ 266.104635][ T9808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 266.131646][ T9808] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1588: inode has both inline data and extents flags [ 266.159493][ T9808] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1588: couldn't read orphan inode 15 (err -117) [ 266.193429][ T9808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.284868][ T9810] loop2: detected capacity change from 0 to 4096 [ 266.316334][ T9810] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 266.329529][ T9810] NILFS (loop2): mounting unchecked fs [ 266.333934][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.438216][ T9810] NILFS (loop2): recovery complete [ 266.469312][ T9817] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.575183][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1591'. [ 267.060383][ T9834] loop2: detected capacity change from 0 to 1024 [ 267.072639][ T9834] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.152256][ T9834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.200547][ T9839] loop1: detected capacity change from 0 to 512 [ 267.264151][ T9839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.299161][ T9839] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.466944][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.479770][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.342777][ T9870] loop2: detected capacity change from 0 to 128 [ 268.384129][ T9870] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.431803][ T9870] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.616376][ T9856] loop1: detected capacity change from 0 to 32768 [ 268.663873][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.168841][ T9887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 269.673155][ T9894] loop2: detected capacity change from 0 to 4096 [ 269.824920][ T9894] ntfs3: loop2: ino=5, "/" directory corrupted [ 269.844431][ T9894] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 269.885050][ T9894] ntfs3: loop2: ino=5, "/" directory corrupted [ 269.984538][ T9879] loop3: detected capacity change from 0 to 40427 [ 270.033780][ T9879] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 270.058149][ T9879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 270.098179][ T9879] F2FS-fs (loop3): invalid crc value [ 270.156349][ T9879] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.248074][ T9915] netlink: 'syz.0.1636': attribute type 16 has an invalid length. [ 270.274453][ T9916] loop1: detected capacity change from 0 to 512 [ 270.354245][ T9879] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 270.381876][ T9916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.395974][ T9879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.445499][ T9916] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.640476][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.248962][ T9943] loop2: detected capacity change from 0 to 256 [ 271.390815][ T9943] FAT-fs (loop2): Directory bread(block 64) failed [ 271.410559][ T9943] FAT-fs (loop2): Directory bread(block 65) failed [ 271.417265][ T9943] FAT-fs (loop2): Directory bread(block 66) failed [ 271.445973][ T9950] No buffer was provided with the request [ 271.447952][ T9943] FAT-fs (loop2): Directory bread(block 67) failed [ 271.477003][ T9943] FAT-fs (loop2): Directory bread(block 68) failed [ 271.489205][ T9943] FAT-fs (loop2): Directory bread(block 69) failed [ 271.496784][ T9943] FAT-fs (loop2): Directory bread(block 70) failed [ 271.504060][ T9943] FAT-fs (loop2): Directory bread(block 71) failed [ 271.513552][ T9943] FAT-fs (loop2): Directory bread(block 72) failed [ 271.520587][ T9943] FAT-fs (loop2): Directory bread(block 73) failed [ 271.981895][ T9952] loop1: detected capacity change from 0 to 4096 [ 272.039046][ T9952] ntfs3: loop1: ino=3, Correct links count -> 2. [ 272.395593][ T9972] hsr0: entered promiscuous mode [ 272.435022][ T9972] macvtap1: entered promiscuous mode [ 273.072245][ T9987] dummy0: entered promiscuous mode [ 273.103735][ T9989] loop2: detected capacity change from 0 to 256 [ 273.116943][ T9987] dummy0: left promiscuous mode [ 273.129602][ T9989] exfat: Deprecated parameter 'utf8' [ 273.181624][ T9989] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 273.927157][ T5836] kernel write not supported for file [eventfd] (pid: 5836 comm: kworker/0:4) [ 273.970396][T10011] loop3: detected capacity change from 0 to 4096 [ 274.042511][T10011] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 274.112651][T10011] ntfs3: loop3: Failed to load $Extend (-22). [ 274.135104][T10011] ntfs3: loop3: Failed to initialize $Extend. [ 274.319720][ T48] tipc: Subscription rejected, illegal request [ 274.353847][T10011] overlayfs: upper fs does not support tmpfile. [ 274.383903][T10011] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 275.066096][T10039] loop3: detected capacity change from 0 to 512 [ 275.149833][T10031] loop2: detected capacity change from 0 to 32768 [ 275.184166][T10031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1691 (10031) [ 275.267693][T10031] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 275.280726][T10031] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 275.297622][T10031] BTRFS info (device loop2): using free space tree [ 275.418807][T10031] BTRFS info (device loop2): enabling ssd optimizations [ 275.425978][T10031] BTRFS info (device loop2): auto enabling async discard [ 275.486832][T10033] orangefs_mount: mount request failed with -4 [ 275.981110][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.183938][ T6257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (6257) [ 276.777916][ T5813] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 277.004360][ T5813] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.020865][ T5813] usb 3-1: not running at top speed; connect to a high speed hub [ 277.045657][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.070092][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.089764][ T5813] usb 3-1: string descriptor 0 read error: -22 [ 277.096243][ T5813] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.110048][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.140197][ T5813] usb 3-1: 0:1 : does not exist [ 277.145246][ T5813] usb 3-1: 0:2 : does not exist [ 277.328105][ T5836] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 277.352713][ T5813] usb 3-1: 6:0: failed to get current value for ch 1 (-22) [ 277.395166][ T5813] usb 3-1: 6:0: failed to get current value for ch 0 (-22) [ 277.463034][ T5813] usb 3-1: USB disconnect, device number 14 [ 277.499715][T10106] netlink: 'syz.0.1718': attribute type 3 has an invalid length. [ 277.552556][ T5836] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.575053][ T5836] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 277.598487][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.612091][ T5836] usb 2-1: Product: syz [ 277.616333][ T5836] usb 2-1: Manufacturer: syz [ 277.621248][ T5836] usb 2-1: SerialNumber: syz [ 277.654597][T10110] nbd: must specify a device to reconfigure [ 278.259403][T10126] loop3: detected capacity change from 0 to 256 [ 278.358322][ T5836] usb 2-1: USB disconnect, device number 14 [ 278.436314][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.935411][ C1] sd 0:0:1:0: [sda] tag#8916 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 278.945955][ C1] sd 0:0:1:0: [sda] tag#8916 CDB: Read(6) 08 00 f9 56 e4 47 [ 279.344934][T10132] loop2: detected capacity change from 0 to 32768 [ 279.362672][T10132] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1730 (10132) [ 279.393370][T10132] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 279.410693][T10132] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 279.426371][T10132] BTRFS info (device loop2): using free space tree [ 279.507658][ T5782] Bluetooth: hci0: Malformed LE Event: 0x0d [ 279.543515][T10132] BTRFS info (device loop2): enabling ssd optimizations [ 279.550802][T10132] BTRFS info (device loop2): auto enabling async discard [ 279.818438][ T5776] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 280.762146][T10185] netlink: 'syz.1.1750': attribute type 3 has an invalid length. [ 280.914350][T10190] loop1: detected capacity change from 0 to 64 [ 280.971279][T10192] loop2: detected capacity change from 0 to 128 [ 281.442703][T10178] loop3: detected capacity change from 0 to 32768 [ 281.472190][T10178] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.1747 (10178) [ 281.516758][T10207] loop2: detected capacity change from 0 to 764 [ 281.524921][T10178] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 281.551545][T10178] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 281.591225][T10178] BTRFS info (device loop3): enabling ssd optimizations [ 281.606463][T10178] BTRFS info (device loop3): not using ssd optimizations [ 281.627165][T10178] BTRFS info (device loop3): turning off barriers [ 281.656414][T10178] BTRFS info (device loop3): using free space tree [ 281.663808][T10207] rock: directory entry would overflow storage [ 281.683560][T10207] rock: sig=0x4f50, size=4, remaining=3 [ 281.711787][T10207] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 281.792690][T10219] netlink: 'syz.1.1763': attribute type 29 has an invalid length. [ 281.889795][T10219] netlink: 'syz.1.1763': attribute type 29 has an invalid length. [ 281.925419][T10228] netlink: 'syz.1.1763': attribute type 29 has an invalid length. [ 282.177262][ T5774] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 282.326200][ T6257] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop3 scanned by udevd (6257) [ 283.048219][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1775'. [ 283.303518][T10259] loop2: detected capacity change from 0 to 8192 [ 283.334163][T10262] loop3: detected capacity change from 0 to 512 [ 283.359923][T10259] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 283.412341][T10262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002] [ 283.436079][T10259] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 283.453382][T10262] System zones: 1-20 [ 283.460713][T10259] REISERFS (device loop2): using ordered data mode [ 283.463183][T10246] loop1: detected capacity change from 0 to 32768 [ 283.467279][T10259] reiserfs: using flush barriers [ 283.472341][T10262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.513469][T10259] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 283.535333][T10246] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1769 (10246) [ 283.562664][T10259] REISERFS (device loop2): checking transaction log (loop2) [ 283.604756][T10246] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.631622][T10246] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 283.659901][T10246] BTRFS info (device loop1): using free space tree [ 283.729162][T10262] EXT4-fs: Cannot change journaled quota options when quota turned on [ 283.844009][T10259] REISERFS (device loop2): Using tea hash to sort names [ 283.861552][T10259] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 283.872652][T10246] BTRFS info (device loop1): enabling ssd optimizations [ 283.917959][T10246] BTRFS info (device loop1): auto enabling async discard [ 283.961725][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.213497][ T27] audit: type=1326 audit(1779143640.997:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 284.274317][ T27] audit: type=1326 audit(1779143640.997:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 284.330145][ T27] audit: type=1326 audit(1779143641.037:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 284.355322][ T27] audit: type=1326 audit(1779143641.037:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fedf9cbc2 code=0x7ffc0000 [ 284.392960][ T27] audit: type=1326 audit(1779143641.067:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 284.425260][T10286] loop3: detected capacity change from 0 to 4096 [ 284.443273][T10286] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.472406][ T5769] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.499509][ T27] audit: type=1326 audit(1779143641.207:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9fedf9cc87 code=0x7ffc0000 [ 284.551403][T10286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 284.615700][T10286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.644983][ T27] audit: type=1326 audit(1779143641.207:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 284.743764][ T27] audit: type=1326 audit(1779143641.207:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fedf9caeb code=0x7ffc0000 [ 284.846775][ T27] audit: type=1326 audit(1779143641.227:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 284.895233][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.999173][ T27] audit: type=1326 audit(1779143641.227:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10285 comm="syz.3.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9fedf5d68e code=0x7ffc0000 [ 285.205163][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1786'. [ 286.483654][T10334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 286.490943][T10334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 286.515130][T10334] vhci_hcd vhci_hcd.0: Device attached [ 286.547284][T10335] vhci_hcd: connection closed [ 286.562460][ T37] vhci_hcd: stop threads [ 286.577701][ T37] vhci_hcd: release socket [ 286.582351][ T37] vhci_hcd: disconnect device [ 286.589401][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 286.679471][T10322] loop3: detected capacity change from 0 to 32768 [ 286.702663][T10322] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1795 (10322) [ 286.735391][T10322] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 286.758209][T10322] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 286.767008][T10322] BTRFS info (device loop3): enabling disk space caching [ 286.777940][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 286.788347][T10322] BTRFS info (device loop3): force clearing of disk cache [ 286.795539][T10322] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 286.819218][T10322] BTRFS info (device loop3): use zstd compression, level 3 [ 286.826770][T10322] BTRFS info (device loop3): disk space caching is enabled [ 286.826977][ T5813] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 286.876187][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 286.902273][ T5813] usb 3-1: Product: syz [ 286.916046][ T5813] usb 3-1: Manufacturer: syz [ 286.941608][ T5813] usb 3-1: SerialNumber: syz [ 286.948043][T10322] BTRFS info (device loop3): enabling ssd optimizations [ 286.955065][T10322] BTRFS info (device loop3): auto enabling async discard [ 286.979831][ T5813] usb 3-1: config 0 descriptor?? [ 286.987171][T10322] BTRFS info (device loop3): rebuilding free space tree [ 287.030490][T10322] BTRFS info (device loop3): disabling free space tree [ 287.038653][T10322] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.048520][T10322] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.274473][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 287.294424][T10359] loop1: detected capacity change from 0 to 1024 [ 287.351390][ T5836] usb 3-1: USB disconnect, device number 15 [ 287.403325][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 287.451885][T10359] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 287.466132][T10359] hfsplus: xattr searching failed [ 287.584481][ T1095] hfsplus: b-tree write err: -5, ino 25 [ 287.603568][ T6257] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop3 scanned by udevd (6257) [ 287.619750][ T1095] hfsplus: b-tree write err: -5, ino 4 [ 287.625392][ T1095] hfsplus: b-tree write err: -5, ino 2 [ 288.692681][T10370] loop3: detected capacity change from 0 to 32768 [ 288.747642][T10370] JBD2: Ignoring recovery information on journal [ 288.895055][T10370] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 289.235562][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 289.235580][ T27] audit: type=1800 audit(1779143646.017:124): pid=10370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1809" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 289.364606][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 289.570600][ T28] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 289.772334][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.822613][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 289.847859][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 289.868714][ T28] usb 3-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 289.881064][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.893754][ T28] usb 3-1: config 0 descriptor?? [ 289.900701][T10403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.065943][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1833'. [ 290.076192][T10425] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1833'. [ 290.138365][T10426] tipc: Enabling of bearer rejected, failed to enable media [ 290.266736][ T27] audit: type=1326 audit(1779143647.047:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.304518][ T27] audit: type=1326 audit(1779143647.047:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.354826][ T27] audit: type=1326 audit(1779143647.077:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.396023][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x3 [ 290.419185][ T27] audit: type=1326 audit(1779143647.077:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.426695][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.461599][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 290.462287][ T27] audit: type=1326 audit(1779143647.077:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.487815][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.507492][ T27] audit: type=1326 audit(1779143647.077:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.527797][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.596248][ T27] audit: type=1326 audit(1779143647.077:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.0.1834" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadf939ce59 code=0x7ffc0000 [ 290.598783][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.653602][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.664377][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.674190][ T28] wacom 0003:056A:0301.0014: unknown main item tag 0x0 [ 290.684599][ T28] wacom 0003:056A:0301.0014: Unknown device_type for 'HID 056a:0301'. Assuming pen. [ 290.703254][ T28] wacom 0003:056A:0301.0014: hidraw0: USB HID v0.09 Device [HID 056a:0301] on usb-dummy_hcd.2-1/input0 [ 290.769635][ T28] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0301.0014/input/input28 [ 290.836680][ T28] usb 3-1: USB disconnect, device number 16 [ 290.865192][T10443] tipc: Resetting bearer [ 290.909586][ T5771] udevd[5771]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 290.927554][T10439] fido_id[10439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 290.949059][ T5771] udevd[5771]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 290.966598][ T5781] udevd[5781]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 290.985340][ T5781] udevd[5781]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 291.051529][T10443] tipc: Disabling bearer [ 292.084135][T10474] loop2: detected capacity change from 0 to 2048 [ 292.120045][T10474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.793071][T10485] usb usb8: usbfs: process 10485 (syz.2.1861) did not claim interface 0 before use [ 293.119334][T10491] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1866'. [ 294.049470][T10499] loop3: detected capacity change from 0 to 1024 [ 294.520271][T10519] loop1: detected capacity change from 0 to 256 [ 294.587233][T10519] FAT-fs (loop1): Directory bread(block 64) failed [ 294.616628][T10519] FAT-fs (loop1): Directory bread(block 65) failed [ 294.628298][T10519] FAT-fs (loop1): Directory bread(block 66) failed [ 294.634897][T10519] FAT-fs (loop1): Directory bread(block 67) failed [ 294.671708][T10519] FAT-fs (loop1): Directory bread(block 68) failed [ 294.692703][T10519] FAT-fs (loop1): Directory bread(block 69) failed [ 294.722210][T10519] FAT-fs (loop1): Directory bread(block 70) failed [ 294.748219][T10519] FAT-fs (loop1): Directory bread(block 71) failed [ 294.755032][T10519] FAT-fs (loop1): Directory bread(block 72) failed [ 294.787096][T10519] FAT-fs (loop1): Directory bread(block 73) failed [ 294.833676][T10528] loop2: detected capacity change from 0 to 512 [ 294.870093][T10528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 294.976040][T10528] EXT4-fs (loop2): 1 orphan inode deleted [ 295.013884][T10528] EXT4-fs (loop2): 1 truncate cleaned up [ 295.046530][T10528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.122467][T10536] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1887'. [ 295.208990][T10528] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.2.1884: path /427/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 295.241621][T10528] EXT4-fs (loop2): Remounting filesystem read-only [ 295.345299][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.783974][T10556] loop3: detected capacity change from 0 to 4096 [ 295.813917][T10556] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 295.854500][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 295.870370][T10554] loop1: detected capacity change from 0 to 8192 [ 295.914582][T10554] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 295.975618][T10554] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 295.988097][T10556] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 296.019304][T10554] REISERFS (device loop1): using ordered data mode [ 296.026888][T10554] reiserfs: using flush barriers [ 296.064945][T10554] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.103793][T10554] REISERFS (device loop1): checking transaction log (loop1) [ 296.289993][ T5774] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 296.303355][T10554] REISERFS (device loop1): Using tea hash to sort names [ 296.316475][T10554] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 296.773469][T10576] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 296.874799][T10581] loop3: detected capacity change from 0 to 64 [ 296.927460][T10581] syz.3.1908: attempt to access beyond end of device [ 296.927460][T10581] loop3: rw=2049, sector=8589932032, nr_sectors = 2 limit=64 [ 296.958255][T10581] Buffer I/O error on dev loop3, logical block 4294966016, lost async page write [ 296.967517][T10581] syz.3.1908: attempt to access beyond end of device [ 296.967517][T10581] loop3: rw=2049, sector=8589934590, nr_sectors = 2 limit=64 [ 296.987369][T10581] Buffer I/O error on dev loop3, logical block 4294967295, lost async page write [ 297.005428][T10581] syz.3.1908: attempt to access beyond end of device [ 297.005428][T10581] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 297.026824][T10581] Buffer I/O error on dev loop3, logical block 255, lost async page write [ 297.155701][T10586] loop1: detected capacity change from 0 to 2048 [ 297.207180][T10586] UDF-fs: error (device loop1): udf_read_inode: (ino 1312) failed !bh [ 297.233856][T10586] UDF-fs: Scanning with blocksize 512 failed [ 297.258617][T10586] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 297.268945][T10588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1910'. [ 297.287543][T10586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 297.297583][T10586] UDF-fs: Scanning with blocksize 1024 failed [ 297.308880][T10586] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 297.331039][T10586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 297.347899][T10586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 297.365877][T10586] UDF-fs: Scanning with blocksize 2048 failed [ 297.380114][T10586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 297.410039][T10586] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 297.422753][T10586] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 297.442799][T10586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 297.457877][T10586] UDF-fs: Scanning with blocksize 4096 failed [ 297.468522][T10586] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 297.560175][T10598] loop3: detected capacity change from 0 to 256 [ 297.563574][T10596] sp0: Synchronizing with TNC [ 297.858317][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 297.866815][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 297.908244][ T5813] kernel write not supported for file /input/event0 (pid: 5813 comm: kworker/1:4) [ 297.980930][T10605] tipc: Enabling of bearer rejected, failed to enable media [ 298.197906][T10612] loop3: detected capacity change from 0 to 512 [ 298.218309][T10612] EXT4-fs (loop3): orphan cleanup on readonly fs [ 298.232625][T10612] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 298.244145][T10612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 298.263832][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1922'. [ 298.266153][T10612] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1923: attempt to clear invalid blocks 2 len 1 [ 298.286387][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 298.297567][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 298.308565][T10612] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1923: invalid indirect mapped block 1819239214 (level 0) [ 298.327964][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 298.335912][T10612] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1923: invalid indirect mapped block 1819239214 (level 1) [ 298.446094][T10612] EXT4-fs (loop3): 1 truncate cleaned up [ 298.454249][T10612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.518203][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 298.535476][T10612] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 298.540726][ T8] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 298.550232][T10612] EXT4-fs: can't change dax mount option while remounting [ 298.563899][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.582128][ T8] usb 2-1: config 0 has no interface number 0 [ 298.589452][ T8] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.608543][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 298.619384][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.628576][ T8] usb 2-1: Product: syz [ 298.633834][ T8] usb 2-1: Manufacturer: syz [ 298.638115][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.638899][ T8] usb 2-1: SerialNumber: syz [ 298.671490][ T8] usb 2-1: config 0 descriptor?? [ 298.688128][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 298.704608][ T8] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 298.720589][ T8] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 298.886602][ T8] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 298.917628][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.938710][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.957977][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.974117][ T9] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 298.994112][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.006194][ T9] usb 3-1: config 0 descriptor?? [ 299.106953][ T8] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 299.154434][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 299.228296][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 299.322664][ T5813] usb 2-1: USB disconnect, device number 15 [ 299.335955][ T5813] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 299.432824][ T23] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 299.443726][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.454908][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.458048][ T9] hid-alps 0003:044E:120C.0015: unknown main item tag 0x0 [ 299.478084][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.488183][ T9] hid-alps 0003:044E:120C.0015: unexpected long global item [ 299.497100][ T9] hid-alps 0003:044E:120C.0015: parse failed [ 299.503711][ T9] hid-alps: probe of 0003:044E:120C.0015 failed with error -22 [ 299.503829][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.503881][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.537921][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.547226][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.562815][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.576002][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.589335][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.603267][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.616046][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.639393][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.657213][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.674126][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.682694][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.696809][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.713901][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.722472][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.731830][ T9] usb 3-1: USB disconnect, device number 17 [ 299.735932][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.754015][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.763926][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.780914][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.802796][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.813047][ T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 299.827215][ T23] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 299.836082][ T23] usb 4-1: Product: syz [ 299.845443][ T23] usb 4-1: Manufacturer: syz [ 299.850228][ T23] usb 4-1: SerialNumber: syz [ 299.858140][ T23] usb 4-1: config 0 descriptor?? [ 299.901633][ T23] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 300.189090][T10649] loop1: detected capacity change from 0 to 64 [ 300.245499][ T23] usb 4-1: USB disconnect, device number 18 [ 300.255960][ T23] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 300.659510][T10657] loop2: detected capacity change from 0 to 128 [ 300.700365][T10657] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 300.758136][T10657] hpfs: filesystem error: improperly stopped [ 300.764250][T10657] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 300.776079][T10657] hpfs: You really don't want any checks? You are crazy... [ 300.784432][T10661] use of bytesused == 0 is deprecated and will be removed in the future, [ 300.785758][T10657] hpfs: Code page index out of array [ 300.801710][T10657] hpfs: code page support is disabled [ 300.809303][T10657] hpfs: hpfs_map_4sectors(): unaligned read [ 300.816154][T10657] hpfs: hpfs_map_4sectors(): unaligned read [ 300.817851][T10661] use the actual size instead. [ 300.837970][T10657] hpfs: filesystem error: unable to find root dir [ 301.894371][T10701] loop3: detected capacity change from 0 to 256 [ 302.163015][T10707] loop3: detected capacity change from 0 to 4096 [ 302.183124][T10707] EXT4-fs (loop3): Test dummy encryption mode enabled [ 302.213223][T10707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.293886][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.973999][T10733] loop1: detected capacity change from 0 to 1024 [ 303.026710][T10733] hfsplus: small file entry [ 303.048161][ T5836] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 303.258348][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 303.271257][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.292205][ T5836] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 303.312269][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.338683][ T5836] usb 1-1: config 0 descriptor?? [ 303.603120][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 303.618593][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 303.677873][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 303.796969][ T5836] kye 0003:0458:0138.0016: unknown main item tag 0x3 [ 303.816525][ T5836] kye 0003:0458:0138.0016: unknown global tag 0xe [ 303.828118][ T5836] kye 0003:0458:0138.0016: item 0 1 1 14 parsing failed [ 303.835955][ T5836] kye 0003:0458:0138.0016: parse failed [ 303.868169][ T5836] kye: probe of 0003:0458:0138.0016 failed with error -22 [ 303.888175][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 303.910283][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.928223][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.945729][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.984477][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.022665][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.050846][ T8] usb 3-1: config 0 descriptor?? [ 304.076726][ T5836] usb 1-1: USB disconnect, device number 10 [ 304.202653][ T27] audit: type=1326 audit(1779143660.987:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.278518][ T27] audit: type=1326 audit(1779143660.987:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.326513][ T27] audit: type=1326 audit(1779143660.987:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.351929][ T27] audit: type=1326 audit(1779143660.987:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.385818][ T27] audit: type=1326 audit(1779143660.987:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.421109][ T27] audit: type=1326 audit(1779143660.987:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.458589][ T27] audit: type=1326 audit(1779143660.987:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.483790][T10777] loop3: detected capacity change from 0 to 8 [ 304.484691][ T27] audit: type=1326 audit(1779143660.987:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.3.1997" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedf9ce59 code=0x7ffc0000 [ 304.510762][ T8] microsoft 0003:045E:07DA.0017: unbalanced collection at end of report description [ 304.545210][ T8] microsoft 0003:045E:07DA.0017: parse failed [ 304.554580][ T8] microsoft: probe of 0003:045E:07DA.0017 failed with error -22 [ 304.591801][T10777] binfmt_misc: register: failed to install interpreter file ./file1 [ 304.751735][ T8] usb 3-1: USB disconnect, device number 18 [ 306.066110][T10825] loop2: detected capacity change from 0 to 128 [ 306.114714][T10825] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 306.456204][T10831] loop2: detected capacity change from 0 to 2048 [ 306.489230][T10831] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 306.523113][T10831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.559052][T10831] UDF-fs: unknown compression code (0) [ 306.735911][T10819] loop3: detected capacity change from 0 to 32768 [ 306.870158][T10819] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 306.984527][T10817] loop1: detected capacity change from 0 to 32768 [ 307.126370][T10817] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 307.129059][T10844] [ 307.137412][T10844] ====================================================== [ 307.144461][T10844] WARNING: possible circular locking dependency detected [ 307.151506][T10844] syzkaller #0 Not tainted [ 307.155936][T10844] ------------------------------------------------------ [ 307.162959][T10844] syz.3.2021/10844 is trying to acquire lock: [ 307.169058][T10844] ffff8880777d3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 307.182346][T10844] [ 307.182346][T10844] but task is already holding lock: [ 307.189739][T10844] ffff8880777d1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 307.199286][T10844] [ 307.199286][T10844] which lock already depends on the new lock. [ 307.199286][T10844] [ 307.209718][T10844] [ 307.209718][T10844] the existing dependency chain (in reverse order) is: [ 307.218766][T10844] [ 307.218766][T10844] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 307.226636][T10844] down_read+0x46/0x2e0 [ 307.231352][T10844] ocfs2_init_acl+0x30a/0x770 [ 307.236674][T10844] ocfs2_mknod+0x140f/0x2300 [ 307.241828][T10844] ocfs2_create+0x196/0x430 [ 307.246890][T10844] path_openat+0x12a0/0x3230 [ 307.252038][T10844] do_filp_open+0x1f5/0x430 [ 307.257095][T10844] do_sys_openat2+0x134/0x1d0 [ 307.262343][T10844] __x64_sys_open+0x11f/0x140 [ 307.267577][T10844] do_syscall_64+0x55/0xb0 [ 307.272552][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.279005][T10844] [ 307.279005][T10844] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 307.287578][T10844] down_read+0x46/0x2e0 [ 307.292302][T10844] ocfs2_start_trans+0x3a8/0x6f0 [ 307.297796][T10844] ocfs2_mknod+0xf1d/0x2300 [ 307.302863][T10844] ocfs2_create+0x196/0x430 [ 307.307926][T10844] path_openat+0x12a0/0x3230 [ 307.313078][T10844] do_filp_open+0x1f5/0x430 [ 307.318138][T10844] do_sys_openat2+0x134/0x1d0 [ 307.323375][T10844] __x64_sys_openat+0x139/0x160 [ 307.328787][T10844] do_syscall_64+0x55/0xb0 [ 307.333771][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.340235][T10844] [ 307.340235][T10844] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 307.347762][T10844] ocfs2_start_trans+0x2a9/0x6f0 [ 307.353261][T10844] ocfs2_mknod+0xf1d/0x2300 [ 307.358332][T10844] ocfs2_create+0x196/0x430 [ 307.358571][T10817] XFS (loop1): Ending clean mount [ 307.363378][T10844] path_openat+0x12a0/0x3230 [ 307.363403][T10844] do_filp_open+0x1f5/0x430 [ 307.363419][T10844] do_sys_openat2+0x134/0x1d0 [ 307.383816][T10844] __x64_sys_openat+0x139/0x160 [ 307.389236][T10844] do_syscall_64+0x55/0xb0 [ 307.394214][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.400672][T10844] [ 307.400672][T10844] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 307.411333][T10844] down_write+0x97/0x200 [ 307.416143][T10844] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 307.422853][T10844] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 307.429737][T10844] ocfs2_mknod+0xebb/0x2300 [ 307.434798][T10844] ocfs2_create+0x196/0x430 [ 307.439866][T10844] path_openat+0x12a0/0x3230 [ 307.445036][T10844] do_filp_open+0x1f5/0x430 [ 307.450107][T10844] do_sys_openat2+0x134/0x1d0 [ 307.455402][T10844] __x64_sys_openat+0x139/0x160 [ 307.460830][T10844] do_syscall_64+0x55/0xb0 [ 307.465811][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.472280][T10844] [ 307.472280][T10844] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 307.482851][T10844] __lock_acquire+0x2df1/0x7d40 [ 307.488269][T10844] lock_acquire+0x19e/0x420 [ 307.493337][T10844] down_write+0x97/0x200 [ 307.498142][T10844] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 307.504599][T10844] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 307.511487][T10844] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 307.517776][T10844] ocfs2_xattr_set+0xc3f/0x13e0 [ 307.523203][T10844] __vfs_setxattr+0x431/0x470 [ 307.528451][T10844] __vfs_setxattr_noperm+0x12d/0x5e0 [ 307.534295][T10844] vfs_setxattr+0x16b/0x2f0 [ 307.539401][T10844] path_setxattr+0x3f3/0x5d0 [ 307.544562][T10844] __x64_sys_setxattr+0xbb/0xd0 [ 307.549990][T10844] do_syscall_64+0x55/0xb0 [ 307.554967][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.561420][T10844] [ 307.561420][T10844] other info that might help us debug this: [ 307.561420][T10844] [ 307.571676][T10844] Chain exists of: [ 307.571676][T10844] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 307.571676][T10844] [ 307.588770][T10844] Possible unsafe locking scenario: [ 307.588770][T10844] [ 307.596258][T10844] CPU0 CPU1 [ 307.601661][T10844] ---- ---- [ 307.607053][T10844] lock(&oi->ip_xattr_sem); [ 307.611681][T10844] lock(&journal->j_trans_barrier); [ 307.619549][T10844] lock(&oi->ip_xattr_sem); [ 307.626706][T10844] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 307.634047][T10844] [ 307.634047][T10844] *** DEADLOCK *** [ 307.634047][T10844] [ 307.642311][T10844] 3 locks held by syz.3.2021/10844: [ 307.647545][T10844] #0: ffff888029a3e418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 307.656851][T10844] #1: ffff8880777d1818 (&type->i_mutex_dir_key#12){++++}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 307.667195][T10844] #2: ffff8880777d1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 307.677183][T10844] [ 307.677183][T10844] stack backtrace: [ 307.683094][T10844] CPU: 0 PID: 10844 Comm: syz.3.2021 Not tainted syzkaller #0 [ 307.690581][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.700669][T10844] Call Trace: [ 307.703972][T10844] [ 307.706928][T10844] dump_stack_lvl+0x18c/0x250 [ 307.711637][T10844] ? load_image+0x420/0x420 [ 307.716170][T10844] ? show_regs_print_info+0x20/0x20 [ 307.721396][T10844] ? print_circular_bug+0x12b/0x1a0 [ 307.726624][T10844] check_noncircular+0x2fc/0x400 [ 307.731604][T10844] ? look_up_lock_class+0x75/0x140 [ 307.736756][T10844] ? print_deadlock_bug+0x5d0/0x5d0 [ 307.742072][T10844] ? lockdep_lock+0xf5/0x230 [ 307.746696][T10844] ? _find_first_zero_bit+0xd3/0x100 [ 307.752014][T10844] __lock_acquire+0x2df1/0x7d40 [ 307.756915][T10844] ? __lock_acquire+0x7d40/0x7d40 [ 307.761975][T10844] ? verify_lock_unused+0x140/0x140 [ 307.767218][T10844] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 307.772889][T10844] ? do_raw_spin_lock+0x11f/0x2c0 [ 307.777950][T10844] ? mutex_unlock+0x10/0x10 [ 307.782486][T10844] lock_acquire+0x19e/0x420 [ 307.787025][T10844] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 307.793132][T10844] ? ocfs2_get_system_file_inode+0x202/0x850 [ 307.799154][T10844] ? __might_sleep+0xe0/0xe0 [ 307.803784][T10844] ? read_lock_is_recursive+0x20/0x20 [ 307.807256][T10873] loop2: detected capacity change from 0 to 2368 [ 307.809173][T10844] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 307.809202][T10844] ? verify_lock_unused+0x140/0x140 [ 307.826922][T10844] ? check_noncircular+0x18a/0x400 [ 307.832068][T10844] down_write+0x97/0x200 [ 307.836358][T10844] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 307.842443][T10844] ? down_read_killable+0x340/0x340 [ 307.847660][T10844] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 307.853604][T10844] ? mark_lock+0x94/0x320 [ 307.857969][T10844] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 307.863977][T10844] ? lock_chain_count+0x20/0x20 [ 307.868871][T10844] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 307.874772][T10844] ? lockdep_hardirqs_on+0x98/0x150 [ 307.879988][T10844] ? ocfs2_block_group_search+0x470/0x470 [ 307.885712][T10844] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 307.891619][T10844] ? _raw_spin_unlock+0x40/0x40 [ 307.896479][T10844] ? stack_trace_save+0xaa/0x100 [ 307.901424][T10844] ? stack_trace_snprint+0xf0/0xf0 [ 307.906548][T10844] ? __stack_depot_save+0x560/0x630 [ 307.911760][T10844] ? kasan_set_track+0x5f/0x70 [ 307.916529][T10844] ? kasan_set_track+0x4e/0x70 [ 307.921300][T10844] ? __kasan_kmalloc+0x8f/0xa0 [ 307.926088][T10844] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 307.932600][T10844] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 307.938417][T10844] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 307.943450][T10844] ? __vfs_setxattr+0x431/0x470 [ 307.948307][T10844] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 307.953773][T10844] ? vfs_setxattr+0x16b/0x2f0 [ 307.958459][T10844] ? path_setxattr+0x3f3/0x5d0 [ 307.963235][T10844] ? __x64_sys_setxattr+0xbb/0xd0 [ 307.968268][T10844] ? do_syscall_64+0x55/0xb0 [ 307.972882][T10844] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.979004][T10844] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 307.985356][T10844] ? ocfs2_init_steal_slots+0x160/0x160 [ 307.990908][T10844] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 307.996558][T10844] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 308.002204][T10844] ? ocfs2_xattr_set+0xc05/0x13e0 [ 308.007239][T10844] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 308.013317][T10844] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 308.019568][T10844] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 308.025467][T10844] ? down_write+0x16e/0x200 [ 308.030001][T10844] ? down_read_killable+0x340/0x340 [ 308.035211][T10844] ? up_write+0x1c3/0x410 [ 308.039558][T10844] ocfs2_xattr_set+0xc3f/0x13e0 [ 308.044431][T10844] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 308.050163][T10844] ? __lock_acquire+0x7d40/0x7d40 [ 308.055197][T10844] ? do_raw_spin_lock+0x11f/0x2c0 [ 308.060327][T10844] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 308.066232][T10844] ? __rwlock_init+0x150/0x150 [ 308.071016][T10844] ? do_raw_spin_unlock+0x121/0x230 [ 308.076225][T10844] ? put_pid+0xde/0x120 [ 308.080398][T10844] ? ocfs2_xattr_user_set+0xab/0xf0 [ 308.085611][T10844] ? ocfs2_xattr_user_get+0xe0/0xe0 [ 308.090847][T10844] __vfs_setxattr+0x431/0x470 [ 308.095547][T10844] __vfs_setxattr_noperm+0x12d/0x5e0 [ 308.100854][T10844] vfs_setxattr+0x16b/0x2f0 [ 308.105369][T10844] ? xattr_permission+0x470/0x470 [ 308.110412][T10844] ? __mnt_want_write+0x223/0x2a0 [ 308.115452][T10844] ? path_setxattr+0x3a1/0x5d0 [ 308.120231][T10844] path_setxattr+0x3f3/0x5d0 [ 308.124841][T10844] ? simple_xattrs_free+0x150/0x150 [ 308.130064][T10844] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 308.136053][T10844] ? lock_chain_count+0x20/0x20 [ 308.140918][T10844] __x64_sys_setxattr+0xbb/0xd0 [ 308.145784][T10844] do_syscall_64+0x55/0xb0 [ 308.150225][T10844] ? clear_bhb_loop+0x40/0x90 [ 308.154931][T10844] ? clear_bhb_loop+0x40/0x90 [ 308.159628][T10844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.165535][T10844] RIP: 0033:0x7f9fedf9ce59 [ 308.169960][T10844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.189687][T10844] RSP: 002b:00007f9feed8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 308.198110][T10844] RAX: ffffffffffffffda RBX: 00007f9fee216090 RCX: 00007f9fedf9ce59 [ 308.206086][T10844] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000001c0 [ 308.214063][T10844] RBP: 00007f9fee032d6f R08: 0000000000000001 R09: 0000000000000000 [ 308.222042][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.230018][T10844] R13: 00007f9fee216128 R14: 00007f9fee216090 R15: 00007ffc5f9252f8 [ 308.238000][T10844] [ 308.309470][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.438834][ T6257] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 308.473029][ T5774] ocfs2: Unmounting device (7,3) on (node local)