last executing test programs: 3.160688131s ago: executing program 3 (id=3301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.992644243s ago: executing program 3 (id=3305): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x1, 0x8, 0xf, 0x1, 0x6, 0x1}) 2.524038119s ago: executing program 3 (id=3313): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_']) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) 2.214749753s ago: executing program 3 (id=3317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$inet6_buf(r0, 0x29, 0x2b, 0x0, 0x0) 2.006385785s ago: executing program 3 (id=3321): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x4, &(0x7f0000000440)={[{@nodiscard}, {@noflush_merge}, {@quota}, {@alloc_mode_reuse}, {@nolazytime}, {@disable_roll_forward}, {@quota}, {@background_gc_off}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@discard_unit_section}, {@four_active_logs}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) write$cgroup_subtree(r0, &(0x7f0000000340)={[{0x2d, 'net_cls'}]}, 0x9) 1.884709607s ago: executing program 0 (id=3322): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) 1.766055158s ago: executing program 0 (id=3324): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x644, &(0x7f0000000cc0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) open$dir(&(0x7f0000000780)='./file1\x00', 0x200, 0x188) 1.765939238s ago: executing program 2 (id=3325): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x491, &(0x7f0000000340)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 1.259377034s ago: executing program 0 (id=3328): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a08040, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@shortname_winnt}, {@rodir}, {@uni_xlateno}, {@uni_xlateno}, {@utf8}, {@shortname_win95}, {@fat=@errors_continue}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.250073034s ago: executing program 2 (id=3330): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCGETA(r0, 0x89f3, &(0x7f0000000080)) 1.080826886s ago: executing program 1 (id=3331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, r1, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x3c}}, 0x0) 957.253378ms ago: executing program 1 (id=3332): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) 806.89744ms ago: executing program 1 (id=3333): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x37, 0xffffffffffffffff, [{0x0, 0x8, "08c82ce8da6e"}, {0x5, 0x2}, {0x0, 0xb, "7434954373561de584"}, {0x0, 0x2}, {0x2, 0x6, "cf0a0000"}, {0x6, 0x4, '\x00\x00'}, {0x7, 0x2}, {0x0, 0xe, "c8f46976e79ea788f03d9d32"}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) 692.588991ms ago: executing program 2 (id=3334): r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) 651.074402ms ago: executing program 3 (id=3335): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60a42, 0x118) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 528.703813ms ago: executing program 1 (id=3336): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 493.203554ms ago: executing program 2 (id=3337): r0 = io_uring_setup(0x6a7e, &(0x7f0000000000)={0x0, 0xecd8, 0x40, 0x0, 0x3e4}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 481.595874ms ago: executing program 0 (id=3338): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 248.707876ms ago: executing program 2 (id=3339): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) readv(r0, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000001c0)=""/79, 0x4f}], 0x2) 248.475626ms ago: executing program 1 (id=3340): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0xffffffffffffffff) 248.356906ms ago: executing program 0 (id=3341): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x1, 0x70bd3d, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x35, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.95874ms ago: executing program 2 (id=3342): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) 1.817909ms ago: executing program 0 (id=3350): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 0s ago: executing program 1 (id=3343): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCGETA(r0, 0x89f3, &(0x7f0000000080)) kernel console output (not intermixed with test programs): _remote_probe: endpoint_in message size==0? [ 228.210034][T10749] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.2207: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 228.269874][T10749] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.2207: couldn't read orphan inode 13 (err -117) [ 228.318389][T10749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.421385][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 228.444003][ T5830] usbhid: probe of 2-1:0.0 failed with error -71 [ 228.455084][T10749] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (24564!=0) [ 228.458691][ T5830] usb 2-1: USB disconnect, device number 13 [ 228.560134][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.013820][T10764] loop0: detected capacity change from 0 to 512 [ 229.047716][T10764] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 229.070458][T10764] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 229.078957][T10764] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.086890][T10764] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #13: comm syz.0.2226: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 229.106602][T10764] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2226: couldn't read orphan inode 13 (err -117) [ 229.153437][T10764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.189488][T10764] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (24564!=0) [ 229.234561][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.332986][ T5758] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 229.567418][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 229.567979][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.594839][ T5758] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.623371][ T5758] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 229.665622][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.677970][ T5758] usb 3-1: config 0 descriptor?? [ 229.698823][ T5758] xbox_remote_probe: endpoint_in message size==0? [ 229.851077][T10794] loop1: detected capacity change from 0 to 512 [ 229.867682][T10794] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24564!=0) [ 229.879884][T10794] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 229.889150][T10794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 229.896546][T10794] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #13: comm syz.1.2233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 229.902994][ T5758] usbhid 3-1:0.0: can't add hid device: -71 [ 229.920691][ T5758] usbhid: probe of 3-1:0.0 failed with error -71 [ 229.930897][ T5758] usb 3-1: USB disconnect, device number 13 [ 229.941420][T10794] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2233: couldn't read orphan inode 13 (err -117) [ 229.945734][ T5830] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.955258][T10794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.997519][T10794] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (24564!=0) [ 230.026680][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.142194][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 230.153284][ T5830] usb 4-1: config index 0 descriptor too short (expected 65230, got 72) [ 230.164952][ T5830] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.174181][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.182278][ T5830] usb 4-1: Product: syz [ 230.186445][ T5830] usb 4-1: Manufacturer: syz [ 230.191024][ T5830] usb 4-1: SerialNumber: syz [ 230.203606][ T5830] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.220051][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.344264][ T8] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 230.352686][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.362966][ T8] usb 1-1: config 0 has no interface number 0 [ 230.371391][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 230.380539][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.388843][ T8] usb 1-1: Product: syz [ 230.393192][ T8] usb 1-1: Manufacturer: syz [ 230.397863][ T8] usb 1-1: SerialNumber: syz [ 230.405830][ T8] usb 1-1: config 0 descriptor?? [ 230.459316][ C0] usb 4-1: ath9k_htc: invalid pkt_len (fe77) [ 230.623602][ T8] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 230.630165][ T8] usb 1-1: No valid video chain found. [ 230.674597][ T27] usb 4-1: USB disconnect, device number 12 [ 230.817717][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 230.862175][ T5758] usb 1-1: USB disconnect, device number 18 [ 231.284809][T10817] loop2: detected capacity change from 0 to 1764 [ 231.316802][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 231.344691][ T9] ath9k_htc: Failed to initialize the device [ 231.369250][ T27] usb 4-1: ath9k_htc: USB layer deinitialized [ 231.389832][T10817] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 231.568877][T10825] loop1: detected capacity change from 0 to 256 [ 231.591179][T10825] exfat: Deprecated parameter 'utf8' [ 231.635474][T10825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 231.706434][T10829] loop0: detected capacity change from 0 to 64 [ 231.750106][T10831] loop3: detected capacity change from 0 to 64 [ 232.101402][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.222488][T10847] ip6gretap2: entered allmulticast mode [ 232.231410][ T5808] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 232.301416][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 232.317942][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.331477][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 232.347294][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 232.364618][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.381305][ T27] usb 3-1: Product: syz [ 232.392234][ T27] usb 3-1: Manufacturer: syz [ 232.407176][ T27] usb 3-1: SerialNumber: syz [ 232.453372][ T5808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.491389][ T5808] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.499058][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2263'. [ 232.517477][ T5808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 232.528223][ T5808] usb 1-1: New USB device found, idVendor=1a34, idProduct=08fb, bcdDevice= 0.00 [ 232.538570][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.548859][T10857] UBIFS error (pid: 10857): cannot open "usrquota", error -22 [ 232.560131][ T5808] usb 1-1: config 0 descriptor?? [ 232.775695][T10865] loop1: detected capacity change from 0 to 1024 [ 232.911574][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 233.019706][ T5808] hid-generic 0003:1A34:08FB.0001: item fetching failed at offset 0/1 [ 233.053702][ T27] usb 3-1: USB disconnect, device number 14 [ 233.074324][ T5808] hid-generic: probe of 0003:1A34:08FB.0001 failed with error -22 [ 233.147167][T10874] loop3: detected capacity change from 0 to 512 [ 233.164353][T10874] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.2271: Directory hole found for htree index block 0 [ 233.182561][T10874] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 233.192431][T10874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.211421][ T5808] usb 1-1: USB disconnect, device number 19 [ 233.284545][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.357711][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'. [ 233.366903][T10878] nbd: illegal input index -1113835520 [ 233.936891][T10902] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 234.110114][T10907] loop3: detected capacity change from 0 to 2048 [ 234.168107][T10912] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.299528][T10916] loop1: detected capacity change from 0 to 64 [ 234.363912][T10912] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 234.406724][T10912] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 234.461318][T10912] Remounting filesystem read-only [ 234.469843][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2292'. [ 234.475495][ T59] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 234.504739][ T59] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 234.533267][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.547906][T10923] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2294'. [ 234.561281][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.592893][T10923] IPv6: NLM_F_REPLACE set, but no existing node found! [ 234.600809][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.626283][ T59] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 234.648364][ T59] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 234.671418][ T59] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 234.701742][ T59] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 234.709096][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.734872][ T59] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 234.755316][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.771320][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.780232][ T59] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 234.802278][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 234.804351][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.811170][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'. [ 234.850581][ T59] NILFS (loop3): discard dirty page: offset=131072, ino=3 [ 234.857295][T10931] netlink: 'syz.1.2298': attribute type 6 has an invalid length. [ 234.865790][T10931] netlink: 'syz.1.2298': attribute type 5 has an invalid length. [ 234.872306][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.904353][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.924425][ T59] NILFS (loop3): discard dirty block: blocknr=46, size=1024 [ 234.946344][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 234.978915][ T59] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 234.990872][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.019024][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.061627][ T59] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 235.076057][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.101390][ T59] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 235.108227][ T59] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 235.137715][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.162284][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.187596][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.219868][ T59] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 235.244426][ T59] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 235.271387][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.280304][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.298753][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.326300][ T59] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 235.343650][ T59] NILFS (loop3): discard dirty block: blocknr=17, size=1024 [ 235.356738][T10950] vlan3: entered allmulticast mode [ 235.361437][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.367871][T10950] team0: entered allmulticast mode [ 235.377430][T10950] team_slave_0: entered allmulticast mode [ 235.387008][T10950] team_slave_1: entered allmulticast mode [ 235.391113][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.411376][ T59] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.451406][ T5771] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 235.492351][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 235.499146][ T5771] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 235.534839][ T5771] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 235.558750][T10958] loop1: detected capacity change from 0 to 256 [ 235.561016][ T5771] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 235.582147][T10959] openvswitch: netlink: Actions may not be safe on all matching packets [ 235.582411][ T5771] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 235.626231][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 235.663621][ T5771] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 235.671030][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.712052][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.721018][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.782416][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 235.789199][ T5771] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 235.820309][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.842205][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 235.851639][ T5771] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 236.328674][T10990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2325'. [ 236.461975][ T27] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 236.471387][ T8] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 236.538959][T10999] netlink: 'syz.3.2329': attribute type 9 has an invalid length. [ 236.653103][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.664601][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.665461][ T27] usb 3-1: config 0 has no interface number 0 [ 236.693407][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 236.711566][ T27] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.720356][ T8] usb 1-1: config 1 interface 0 altsetting 204 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 236.727834][ T27] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.743432][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 236.756746][ T27] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.758406][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.780070][ T27] usb 3-1: config 0 interface 1 has no altsetting 0 [ 236.791326][ T27] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 236.800418][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.815515][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.831350][ T8] usb 1-1: Product: syz [ 236.835887][ T8] usb 1-1: Manufacturer: syz [ 236.840523][ T8] usb 1-1: SerialNumber: syz [ 236.860846][ T27] usb 3-1: config 0 descriptor?? [ 236.869712][T10983] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 236.920273][T11009] loop1: detected capacity change from 0 to 1024 [ 236.927407][ T5807] IPVS: starting estimator thread 0... [ 237.034845][T11014] netlink: 'syz.3.2336': attribute type 8 has an invalid length. [ 237.043316][T11012] IPVS: using max 21 ests per chain, 50400 per kthread [ 237.132449][ T8] usb 1-1: bad CDC descriptors [ 237.161920][ T8] usb 1-1: USB disconnect, device number 20 [ 237.295112][T11022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2340'. [ 237.409286][T11026] Bluetooth: MGMT ver 1.22 [ 237.505654][ T27] uclogic 0003:145F:0212.0002: failed retrieving string descriptor #100: -71 [ 237.530071][ T27] uclogic 0003:145F:0212.0002: failed retrieving pen parameters: -71 [ 237.539279][ T27] uclogic 0003:145F:0212.0002: pen probing failed: -71 [ 237.548323][ T27] uclogic 0003:145F:0212.0002: failed probing parameters: -71 [ 237.564083][ T27] uclogic: probe of 0003:145F:0212.0002 failed with error -71 [ 237.617453][ T27] usb 3-1: USB disconnect, device number 15 [ 237.867838][T11040] loop1: detected capacity change from 0 to 1024 [ 238.008254][T11048] netlink: 'syz.0.2350': attribute type 2 has an invalid length. [ 238.008352][T11047] netlink: 'syz.3.2351': attribute type 29 has an invalid length. [ 238.017319][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 238.033990][T11047] netlink: 'syz.3.2351': attribute type 29 has an invalid length. [ 238.034858][ T42] hfsplus: b-tree write err: -5, ino 25 [ 238.049127][ T42] hfsplus: b-tree write err: -5, ino 4 [ 238.051700][T11047] netlink: 'syz.3.2351': attribute type 29 has an invalid length. [ 238.055766][ T42] hfsplus: b-tree write err: -5, ino 2 [ 238.213200][T11054] loop2: detected capacity change from 0 to 8 [ 238.228964][T11054] SQUASHFS error: lzo decompression failed, data probably corrupt [ 238.238727][T11054] SQUASHFS error: Failed to read block 0x91: -5 [ 238.250772][T11054] SQUASHFS error: Unable to read metadata cache entry [8f] [ 238.270610][T11054] SQUASHFS error: Unable to read inode 0x11f [ 238.356018][T11058] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 238.607544][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 238.616589][ T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 238.806337][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 238.841589][ T27] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.871273][ T27] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.887425][ T27] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.901863][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 238.908536][ T27] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 238.931415][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.967065][ T27] usb 1-1: config 0 descriptor?? [ 239.139493][T11089] loop2: detected capacity change from 0 to 512 [ 239.174116][T11089] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 239.260844][T11089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.377228][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.420130][ T27] mcp2200 0003:04D8:00DF.0003: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.0-1/input0 [ 239.534840][ T5807] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.627170][ T8] usb 1-1: USB disconnect, device number 21 [ 239.677243][T11110] loop2: detected capacity change from 0 to 1024 [ 239.705867][T11110] EXT4-fs: Ignoring removed bh option [ 239.744068][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.762325][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.788841][ T5807] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.801449][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 239.805143][T11110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.819955][ T5807] usb 2-1: SerialNumber: syz [ 239.850967][T11116] loop3: detected capacity change from 0 to 256 [ 239.935453][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.948332][T11116] FAT-fs (loop3): Directory bread(block 64) failed [ 239.961589][T11116] FAT-fs (loop3): Directory bread(block 65) failed [ 239.981470][T11116] FAT-fs (loop3): Directory bread(block 66) failed [ 239.988111][T11116] FAT-fs (loop3): Directory bread(block 67) failed [ 240.017590][T11116] FAT-fs (loop3): Directory bread(block 68) failed [ 240.024676][T11116] FAT-fs (loop3): Directory bread(block 69) failed [ 240.031391][T11116] FAT-fs (loop3): Directory bread(block 70) failed [ 240.038246][T11116] FAT-fs (loop3): Directory bread(block 71) failed [ 240.046420][T11116] FAT-fs (loop3): Directory bread(block 72) failed [ 240.060674][T11118] loop2: detected capacity change from 0 to 1024 [ 240.074888][T11116] FAT-fs (loop3): Directory bread(block 73) failed [ 240.076853][ T5807] usb 2-1: 0:2 : does not exist [ 240.103887][T11118] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 240.115155][T11118] hfsplus: xattr searching failed [ 240.141642][T11118] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 240.148211][T11118] hfsplus: xattr searching failed [ 240.168815][ T5807] usb 2-1: USB disconnect, device number 14 [ 240.201607][T11118] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 240.210699][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 240.210712][ T28] audit: type=1800 audit(1778114195.516:166): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2384" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1048720 res=0 errno=0 [ 240.232644][T11118] hfsplus: xattr searching failed [ 240.268570][T11118] syz.2.2385: attempt to access beyond end of device [ 240.268570][T11118] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 240.298552][T11118] Buffer I/O error on dev loop2, logical block 458752, async page read [ 240.340178][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.352305][T11118] hfsplus: unable to mark blocks free: error -5 [ 240.366248][T11118] hfsplus: can't free extent [ 240.395161][T11121] loop0: detected capacity change from 0 to 256 [ 240.461695][T11121] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 240.770295][T11129] loop0: detected capacity change from 0 to 1024 [ 240.834184][T11135] loop3: detected capacity change from 0 to 2048 [ 240.883390][T11138] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.012330][T11140] Bluetooth: MGMT ver 1.22 [ 241.041368][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.265797][ T8] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.287561][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.312916][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 241.345166][T11149] FAT-fs (loop2): Directory bread(block 64) failed [ 241.356650][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.375403][T11149] FAT-fs (loop2): Directory bread(block 65) failed [ 241.384458][ T8] usb 2-1: config 0 descriptor?? [ 241.398400][T11149] FAT-fs (loop2): Directory bread(block 66) failed [ 241.419295][T11149] FAT-fs (loop2): Directory bread(block 67) failed [ 241.437903][T11149] FAT-fs (loop2): Directory bread(block 68) failed [ 241.452034][T11149] FAT-fs (loop2): Directory bread(block 69) failed [ 241.469261][T11149] FAT-fs (loop2): Directory bread(block 70) failed [ 241.487381][T11149] FAT-fs (loop2): Directory bread(block 71) failed [ 241.496332][T11149] FAT-fs (loop2): Directory bread(block 72) failed [ 241.508198][T11149] FAT-fs (loop2): Directory bread(block 73) failed [ 241.561077][T11149] FAT-fs (loop2): Filesystem has been set read-only [ 241.574054][T11149] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 241.730318][T11159] EXT4-fs: Ignoring removed orlov option [ 241.754483][T11159] EXT4-fs (loop0): Test dummy encryption mode enabled [ 241.770980][T11159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.800014][ T8] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x1 [ 241.808059][ T8] lua 0003:1E7D:2C2E.0004: report_id 52101 is invalid [ 241.815386][ T8] lua 0003:1E7D:2C2E.0004: item 0 2 1 8 parsing failed [ 241.823185][ T8] lua 0003:1E7D:2C2E.0004: parse failed [ 241.828982][ T8] lua: probe of 0003:1E7D:2C2E.0004 failed with error -22 [ 241.839488][T11159] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0 [ 241.923934][T11167] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 241.962114][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.020306][ T8] usb 2-1: USB disconnect, device number 15 [ 242.128467][T11169] set_capacity_and_notify: 3 callbacks suppressed [ 242.128482][T11169] loop3: detected capacity change from 0 to 1024 [ 242.179564][T11169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.195453][T11169] ext4 filesystem being mounted at /643/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.252881][T11174] loop2: detected capacity change from 0 to 4096 [ 242.332820][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.348773][T11174] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 242.410642][T11177] loop0: detected capacity change from 0 to 512 [ 242.448747][T11177] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2410: inode has both inline data and extents flags [ 242.498534][T11177] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2410: couldn't read orphan inode 15 (err -117) [ 242.533935][T11177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.640972][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.704669][T11186] loop3: detected capacity change from 0 to 128 [ 242.723376][T11186] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 242.759400][T11186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.809085][T11188] loop0: detected capacity change from 0 to 2048 [ 242.838874][T11188] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 242.871690][T11190] xt_hashlimit: max too large, truncated to 1048576 [ 242.902672][T11191] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.977210][ T28] audit: type=1800 audit(1778114198.286:167): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2415" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 243.087992][T11197] loop3: detected capacity change from 0 to 64 [ 243.105868][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'. [ 243.117011][T11196] netlink: 'syz.1.2419': attribute type 2 has an invalid length. [ 243.268691][T11200] loop1: detected capacity change from 0 to 256 [ 243.276575][T11201] loop0: detected capacity change from 0 to 16 [ 243.286267][T11200] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.318112][T11201] erofs: (device loop0): mounted with root inode @ nid 36. [ 243.330395][T11200] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 243.373894][T11200] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 243.420728][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 320 @ nid 36 [ 243.469411][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 243.495976][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 243.521469][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 243.551310][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 243.582851][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 288 @ nid 36 [ 243.601495][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 243.610844][T11205] loop3: detected capacity change from 0 to 4096 [ 243.618151][T11209] nbd: must specify a size in bytes for the device [ 243.648226][T11205] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 243.659696][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 243.693513][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 243.743347][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 243.763940][T11205] ntfs3: loop3: failed to convert "c46c" to iso8859-13 [ 243.784803][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 243.819224][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 243.834259][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 243.879130][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 243.895803][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 243.929855][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 243.929919][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 243.929938][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 243.930141][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 243.930352][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 243.930690][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 243.930714][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 243.930731][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 243.930766][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 243.930800][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 243.931172][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 243.931946][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 244.097580][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 244.097609][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 244.097627][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 244.097650][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 244.097670][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 244.097687][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 244.098002][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 244.098149][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 244.098187][T11201] erofs: (device loop0): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 244.102745][T11201] syz.0.2420: attempt to access beyond end of device [ 244.102745][T11201] loop0: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 244.102842][T11201] syz.0.2420: attempt to access beyond end of device [ 244.102842][T11201] loop0: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 244.103019][T11201] syz.0.2420: attempt to access beyond end of device [ 244.103019][T11201] loop0: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 244.103084][T11201] syz.0.2420: attempt to access beyond end of device [ 244.103084][T11201] loop0: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 244.103196][T11201] syz.0.2420: attempt to access beyond end of device [ 244.103196][T11201] loop0: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 244.103334][T11201] syz.0.2420: attempt to access beyond end of device [ 244.103334][T11201] loop0: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 244.120702][T11201] syz.0.2420: attempt to access beyond end of device [ 244.120702][T11201] loop0: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 244.120801][T11201] syz.0.2420: attempt to access beyond end of device [ 244.120801][T11201] loop0: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 244.120870][T11201] syz.0.2420: attempt to access beyond end of device [ 244.120870][T11201] loop0: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 244.173386][T11223] 9pnet_rdma: rdma_create_trans (11223): problem binding to privport: 13 [ 244.425703][T11227] loop1: detected capacity change from 0 to 256 [ 244.715245][T11235] exfat: Deprecated parameter 'utf8' [ 244.741856][T11237] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 244.825211][T11235] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 245.211889][T11246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 245.224756][T11246] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.298404][T11246] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 245.379125][T11246] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 245.393552][T11262] exfat: Deprecated parameter 'utf8' [ 245.402895][T11246] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.2441: Failed to acquire dquot type 0 [ 245.448331][T11262] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 245.528100][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 245.875523][T11276] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 246.180778][T11289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2461'. [ 246.520837][T11297] FAT-fs (loop3): Directory bread(block 64) failed [ 246.540537][T11297] FAT-fs (loop3): Directory bread(block 65) failed [ 246.560981][T11297] FAT-fs (loop3): Directory bread(block 66) failed [ 246.571124][T11297] FAT-fs (loop3): Directory bread(block 67) failed [ 246.579722][T11297] FAT-fs (loop3): Directory bread(block 68) failed [ 246.589640][T11297] FAT-fs (loop3): Directory bread(block 69) failed [ 246.607192][T11297] FAT-fs (loop3): Directory bread(block 70) failed [ 246.625340][T11297] FAT-fs (loop3): Directory bread(block 71) failed [ 246.637264][T11297] FAT-fs (loop3): Directory bread(block 72) failed [ 246.655493][T11297] FAT-fs (loop3): Directory bread(block 73) failed [ 246.779395][T11305] overlayfs: missing 'workdir' [ 247.331373][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 247.534035][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.544619][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.569755][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.601386][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 247.610483][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.657437][ T9] usb 4-1: config 0 descriptor?? [ 248.020819][T11356] set_capacity_and_notify: 6 callbacks suppressed [ 248.020834][T11356] loop0: detected capacity change from 0 to 24 [ 248.034571][T11354] loop1: detected capacity change from 0 to 2048 [ 248.056829][T11354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.178021][ T9] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 248.218802][ T9] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 248.344121][ T5811] usb 4-1: USB disconnect, device number 13 [ 248.724816][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2503'. [ 248.903374][T11388] loop0: detected capacity change from 0 to 64 [ 248.990003][T11390] usb usb1: usbfs: process 11390 (syz.3.2508) did not claim interface 0 before use [ 249.776319][T11416] loop2: detected capacity change from 0 to 128 [ 249.825309][T11418] loop1: detected capacity change from 0 to 1024 [ 249.856304][T11396] loop3: detected capacity change from 0 to 32768 [ 249.906220][T11396] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.029052][T11396] XFS (loop3): Ending clean mount [ 250.106564][ T42] hfsplus: b-tree write err: -5, ino 8 [ 250.119749][T11406] loop0: detected capacity change from 0 to 32768 [ 250.149433][T11406] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 250.183083][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.218571][T11406] JBD2: Ignoring recovery information on journal [ 250.289922][T11406] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 250.522145][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 251.109127][T11461] loop0: detected capacity change from 0 to 256 [ 251.145674][T11461] exfat: Deprecated parameter 'utf8' [ 251.172272][T11461] exfat: Deprecated parameter 'utf8' [ 251.245460][T11461] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 252.009748][T11491] loop1: detected capacity change from 0 to 2048 [ 252.021325][ T5807] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 252.065440][T11472] loop3: detected capacity change from 0 to 32768 [ 252.066052][T11496] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.089875][T11472] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.2541 (11472) [ 252.146451][T11472] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 252.170617][T11472] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 252.207829][T11472] BTRFS info (device loop3): using free space tree [ 252.214535][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 252.224148][ T5807] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.235419][ T5807] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 252.244888][ T5807] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.254734][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.340620][T11472] BTRFS info (device loop3): enabling ssd optimizations [ 252.375942][T11472] BTRFS info (device loop3): auto enabling async discard [ 252.485901][ T5811] usb 1-1: USB disconnect, device number 22 [ 252.551634][ T5771] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 252.697559][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 252.851922][T11528] FAT-fs (loop1): Directory bread(block 64) failed [ 252.880208][T11528] FAT-fs (loop1): Directory bread(block 65) failed [ 252.907634][T11528] FAT-fs (loop1): Directory bread(block 66) failed [ 252.919606][T11528] FAT-fs (loop1): Directory bread(block 67) failed [ 252.938086][T11528] FAT-fs (loop1): Directory bread(block 68) failed [ 252.972630][T11528] FAT-fs (loop1): Directory bread(block 69) failed [ 252.979338][T11528] FAT-fs (loop1): Directory bread(block 70) failed [ 253.029296][T11528] FAT-fs (loop1): Directory bread(block 71) failed [ 253.059848][T11528] FAT-fs (loop1): Directory bread(block 72) failed [ 253.100009][T11528] FAT-fs (loop1): Directory bread(block 73) failed [ 253.327022][T11540] set_capacity_and_notify: 2 callbacks suppressed [ 253.327037][T11540] loop2: detected capacity change from 0 to 164 [ 253.428618][T11540] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 254.033771][T11564] loop2: detected capacity change from 0 to 8192 [ 254.066979][T11564] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.124418][T11564] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 254.124598][T11564] REISERFS (device loop2): using ordered data mode [ 254.124605][T11564] reiserfs: using flush barriers [ 254.127343][T11564] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.127887][T11564] REISERFS (device loop2): checking transaction log (loop2) [ 254.175816][T11575] loop1: detected capacity change from 0 to 64 [ 254.227648][T11575] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 254.278085][T11575] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 254.318773][T11564] REISERFS (device loop2): Using tea hash to sort names [ 254.354517][T11564] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 254.517751][T11577] loop1: detected capacity change from 0 to 2048 [ 254.535655][T11577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.947589][T11583] loop0: detected capacity change from 0 to 4096 [ 254.967880][T11583] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 255.042236][T11591] loop1: detected capacity change from 0 to 1024 [ 255.066922][T11583] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 255.083577][T11591] EXT4-fs: Ignoring removed bh option [ 255.098696][T11583] ntfs3: loop0: Failed to load $Extend (-22). [ 255.118695][T11583] ntfs3: loop0: Failed to initialize $Extend. [ 255.182236][T11591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.360339][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.035144][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.043314][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.174368][T11641] loop0: detected capacity change from 0 to 256 [ 256.270140][T11641] FAT-fs (loop0): Directory bread(block 64) failed [ 256.288394][T11643] netlink: 'syz.2.2611': attribute type 5 has an invalid length. [ 256.298128][T11641] FAT-fs (loop0): Directory bread(block 65) failed [ 256.317696][T11641] FAT-fs (loop0): Directory bread(block 66) failed [ 256.335325][T11641] FAT-fs (loop0): Directory bread(block 67) failed [ 256.352267][T11641] FAT-fs (loop0): Directory bread(block 68) failed [ 256.359001][T11641] FAT-fs (loop0): Directory bread(block 69) failed [ 256.391049][T11641] FAT-fs (loop0): Directory bread(block 70) failed [ 256.407688][T11641] FAT-fs (loop0): Directory bread(block 71) failed [ 256.428876][T11641] FAT-fs (loop0): Directory bread(block 72) failed [ 256.450005][T11641] FAT-fs (loop0): Directory bread(block 73) failed [ 256.626557][ T28] audit: type=1800 audit(1778114211.936:168): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2609" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048742 res=0 errno=0 [ 256.703428][T11656] loop3: detected capacity change from 0 to 512 [ 256.717679][T11656] EXT4-fs: Ignoring removed bh option [ 256.824925][T11656] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 256.892759][T11656] EXT4-fs (loop3): 1 truncate cleaned up [ 256.909296][T11652] loop1: detected capacity change from 0 to 32768 [ 256.918279][T11656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.971326][ T5811] XFS (loop1): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 257.104636][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.644116][T11683] loop1: detected capacity change from 0 to 256 [ 257.689857][T11683] FAT-fs (loop1): Directory bread(block 64) failed [ 257.703090][T11683] FAT-fs (loop1): Directory bread(block 65) failed [ 257.717539][T11683] FAT-fs (loop1): Directory bread(block 66) failed [ 257.726003][T11683] FAT-fs (loop1): Directory bread(block 67) failed [ 257.735881][T11683] FAT-fs (loop1): Directory bread(block 68) failed [ 257.743922][T11683] FAT-fs (loop1): Directory bread(block 69) failed [ 257.750681][T11683] FAT-fs (loop1): Directory bread(block 70) failed [ 257.760376][T11683] FAT-fs (loop1): Directory bread(block 71) failed [ 257.768323][T11683] FAT-fs (loop1): Directory bread(block 72) failed [ 257.776084][T11683] FAT-fs (loop1): Directory bread(block 73) failed [ 257.851417][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 257.859295][ T5811] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 257.897294][ T28] audit: type=1800 audit(1778114213.206:169): pid=11683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2629" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1048743 res=0 errno=0 [ 257.901712][T11667] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 257.951544][T11667] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 258.007093][T11667] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 258.030203][ T5830] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 258.049233][ T5830] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 258.058011][ T5811] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.076214][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.090989][ T5811] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.106249][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.121464][ T5811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.130507][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 258.141670][ T9] usb 1-1: Product: syz [ 258.145866][ T9] usb 1-1: Manufacturer: syz [ 258.150574][ T9] usb 1-1: SerialNumber: syz [ 258.173829][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 258.191896][ T5830] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms [ 258.208413][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.217585][ T5830] gfs2: fsid=syz:syz.0: jid=0: Done [ 258.225349][T11667] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 258.225624][ T5811] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.247891][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.270788][ T5811] usb 4-1: Product: syz [ 258.275588][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.298754][ T5811] usb 4-1: Manufacturer: syz [ 258.318344][ T5811] cdc_wdm 4-1:1.0: skipping garbage [ 258.336502][ T5811] cdc_wdm 4-1:1.0: skipping garbage [ 258.397424][ T5811] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 258.426491][ T5811] cdc_wdm 4-1:1.0: Unknown control protocol [ 258.452976][T11687] set_capacity_and_notify: 1 callbacks suppressed [ 258.452992][T11687] loop1: detected capacity change from 0 to 256 [ 258.504360][T11687] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.630484][ T5807] usb 4-1: USB disconnect, device number 14 [ 258.701146][T11689] loop1: detected capacity change from 0 to 512 [ 258.720565][T11689] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.817434][T11689] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 258.842314][T11689] Quota error (device loop1): write_blk: dquota write failed [ 258.849856][T11689] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 258.860606][T11694] loop2: detected capacity change from 0 to 1024 [ 258.866103][T11689] Quota error (device loop1): write_blk: dquota write failed [ 258.878365][T11689] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 258.890217][T11689] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2631: Failed to acquire dquot type 1 [ 258.903436][T11689] EXT4-fs (loop1): 1 truncate cleaned up [ 258.910989][T11689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.919987][ T5807] usb 1-1: USB disconnect, device number 23 [ 259.025956][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.046889][ T2929] hfsplus: b-tree write err: -5, ino 8 [ 259.229609][T11702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2635'. [ 259.341129][ T5808] hid-generic 0000:FFFFFFFB:0000.0006: hidraw0: HID v6.fc Device [syz1] on syz1 [ 259.444857][T11709] loop1: detected capacity change from 0 to 256 [ 259.464967][T11709] exfat: Deprecated parameter 'utf8' [ 259.490950][T11709] exfat: Deprecated parameter 'utf8' [ 259.500948][T11711] loop3: detected capacity change from 0 to 1024 [ 259.551653][ T8] usb 1-1: Service connection timeout for: 256 [ 259.582830][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 259.600678][T11709] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 259.618329][T11707] fido_id[11707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.634286][T11711] hfsplus: bad catalog entry type [ 259.639837][ T8] ath9k_htc: Failed to initialize the device [ 259.648962][ T5807] usb 1-1: ath9k_htc: USB layer deinitialized [ 259.789688][ T2949] hfsplus: b-tree write err: -5, ino 25 [ 259.821437][ T2949] hfsplus: b-tree write err: -5, ino 4 [ 259.829489][ T2949] hfsplus: b-tree write err: -5, ino 2 [ 260.347257][T11735] xt_CT: No such helper "snmp" [ 260.454686][T11717] loop0: detected capacity change from 0 to 32768 [ 260.465454][T11717] XFS: attr2 mount option is deprecated. [ 260.544322][T11717] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 260.567304][T11749] binder: 11748:11749 ioctl 400c620e 200000000040 returned -22 [ 260.619402][T11717] XFS (loop0): Ending clean mount [ 260.639610][T11717] XFS (loop0): Quotacheck needed: Please wait. [ 260.720818][T11717] XFS (loop0): Quotacheck: Done. [ 260.771686][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 260.799572][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2657'. [ 260.874646][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 260.993187][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.025628][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 261.047435][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.074561][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 261.101773][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 261.110831][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 261.163865][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.201073][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.241818][ T9] usb 4-1: Product: syz [ 261.246047][ T9] usb 4-1: Manufacturer: syz [ 261.259633][ T9] usb 4-1: SerialNumber: syz [ 261.264799][T11766] loop2: detected capacity change from 0 to 164 [ 261.289134][T11766] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 261.334475][T11768] loop0: detected capacity change from 0 to 1024 [ 261.424053][T11768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.436611][T11768] ext4 filesystem being mounted at /636/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.460219][T11768] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.2670: corrupted xattr block 128: overlapping e_value [ 261.481386][T11771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 261.521517][ T9] usb 4-1: 0:2 : does not exist [ 261.550464][ T9] usb 4-1: USB disconnect, device number 15 [ 261.588890][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 261.593466][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.672430][T11773] team0: entered promiscuous mode [ 261.703013][T11773] team_slave_0: entered promiscuous mode [ 261.712028][T11773] team_slave_1: entered promiscuous mode [ 261.722387][T11773] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 261.723288][T11760] loop1: detected capacity change from 0 to 32768 [ 261.791795][T11760] JBD2: Ignoring recovery information on journal [ 261.849574][T11760] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 262.017147][T11760] (syz.1.2667,11760,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 262.054016][T11760] (syz.1.2667,11760,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 262.074676][T11760] (syz.1.2667,11760,0):ocfs2_mknod:298 ERROR: status = -2 [ 262.095185][T11760] (syz.1.2667,11760,0):ocfs2_mknod:502 ERROR: status = -2 [ 262.100586][T11783] devtmpfs: Cannot enable quota on remount [ 262.108698][T11760] (syz.1.2667,11760,0):ocfs2_create:676 ERROR: status = -2 [ 262.297118][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 262.794119][T11805] UBIFS error (pid: 11805): cannot open "usrquota", error -22 [ 262.987559][T11815] loop0: detected capacity change from 0 to 64 [ 263.239545][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2689'. [ 263.276681][T11825] ip6gretap2: entered allmulticast mode [ 263.492446][ T5807] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 263.691399][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 263.698299][ T5807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.707205][ T5807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 263.720947][ T5807] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 263.730351][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.738690][ T5807] usb 2-1: Product: syz [ 263.743024][ T5807] usb 2-1: Manufacturer: syz [ 263.747637][ T5807] usb 2-1: SerialNumber: syz [ 263.791632][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.985387][ T27] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 263.993761][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.004113][ T27] usb 4-1: config 0 has no interface number 0 [ 264.012841][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 264.022010][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.030043][ T27] usb 4-1: Product: syz [ 264.034365][ T27] usb 4-1: Manufacturer: syz [ 264.039013][ T27] usb 4-1: SerialNumber: syz [ 264.047138][ T27] usb 4-1: config 0 descriptor?? [ 264.262015][ T27] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 264.268453][ T27] usb 4-1: No valid video chain found. [ 264.391602][ T5811] usb 2-1: USB disconnect, device number 16 [ 264.477206][ T9] usb 4-1: USB disconnect, device number 16 [ 264.983690][T11844] loop0: detected capacity change from 0 to 1024 [ 264.993283][T11845] loop2: detected capacity change from 0 to 64 [ 265.001487][T11844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.054238][T11844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.177717][T11844] VFS: Lookup of 'file0' in ext4 loop0 would have caused loop [ 265.197152][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2700'. [ 265.267051][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.764667][T11874] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 265.818136][T11875] loop0: detected capacity change from 0 to 4096 [ 265.863363][T11875] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 266.061682][T11875] ntfs3: loop0: ino=5, "/" directory corrupted [ 266.067917][T11875] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 266.331330][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.551530][ T8] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 266.569175][ T8] usb 3-1: config 160 has no interface number 0 [ 266.576943][ T8] usb 3-1: config 160 interface 200 has no altsetting 0 [ 266.586928][ T8] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 266.599593][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.609850][ T8] usb 3-1: Product: syz [ 266.614370][ T8] usb 3-1: Manufacturer: syz [ 266.618976][ T8] usb 3-1: SerialNumber: syz [ 266.865094][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 266.875446][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 266.919853][ T8] usb 3-1: USB disconnect, device number 16 [ 266.922425][T11913] bad cache= option: no%e [ 266.922425][T11913] [ 266.951505][T11913] CIFS: VFS: bad cache= option: no%e [ 267.022761][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.198979][T11919] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 267.465000][T11929] loop3: detected capacity change from 0 to 64 [ 268.171068][T11960] netlink: 'syz.0.2762': attribute type 7 has an invalid length. [ 268.459739][T11969] loop2: detected capacity change from 0 to 4096 [ 268.487251][T11969] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 268.506744][T11969] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 268.536171][T11969] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 268.567380][T11969] ntfs: volume version 3.1. [ 268.611164][T11976] loop3: detected capacity change from 0 to 4096 [ 268.651618][T11976] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 268.687133][T11979] loop1: detected capacity change from 0 to 1024 [ 268.723687][T11979] EXT4-fs: Ignoring removed oldalloc option [ 268.741358][T11979] EXT4-fs: Ignoring removed orlov option [ 268.751811][T11979] EXT4-fs: Ignoring removed oldalloc option [ 268.766942][T11979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.775140][ T5775] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 268.867153][T11979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.968554][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'. [ 268.977798][T11987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2764'. [ 268.989441][T11988] loop2: detected capacity change from 0 to 64 [ 269.010370][T11979] EXT4-fs error (device loop1): ext4_xattr_set_entry:1670: inode #13: comm syz.1.2760: corrupted xattr entries [ 269.032428][T11988] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 269.065047][T11979] EXT4-fs (loop1): Remounting filesystem read-only [ 269.091438][T11979] EXT4-fs warning (device loop1): ext4_xattr_ibody_set:2277: inode #18: comm syz.1.2760: dec ref error=-5 [ 269.122557][T11988] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 269.271255][ T28] audit: type=1326 audit(1778114224.576:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.2769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1e79cdd9 code=0x7ffc0000 [ 269.306982][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.340480][ T28] audit: type=1326 audit(1778114224.576:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.2769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1e79cdd9 code=0x7ffc0000 [ 269.376111][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.387256][T11998] loop2: detected capacity change from 0 to 512 [ 269.433207][ T28] audit: type=1326 audit(1778114224.636:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.2769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f5b1e79cdd9 code=0x7ffc0000 [ 269.457300][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.506302][T11998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.551547][T11998] ext4 filesystem being mounted at /649/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.565224][ T28] audit: type=1326 audit(1778114224.636:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.2769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1e79cdd9 code=0x7ffc0000 [ 269.591894][ T28] audit: type=1326 audit(1778114224.636:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.2769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1e79cdd9 code=0x7ffc0000 [ 269.674511][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.811404][ T5807] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 269.884717][T12014] loop0: detected capacity change from 0 to 2048 [ 269.916932][T12017] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.981689][T12019] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.011750][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 270.022151][T12019] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 270.053356][ T5807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.069940][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.102212][T12019] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 270.123936][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.136487][ T5807] usb 2-1: config 1 has no interface number 0 [ 270.142189][T12019] System zones: 0-2, 18-18, 34-35 [ 270.144158][ T5807] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.149293][T12019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.162381][ T5807] usb 2-1: string descriptor 0 read error: -22 [ 270.176036][ T5811] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 270.176490][ T5807] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 270.207614][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.316428][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.374473][ T5811] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 270.379267][T12024] set_capacity_and_notify: 1 callbacks suppressed [ 270.379308][T12024] loop0: detected capacity change from 0 to 8192 [ 270.393086][ T5811] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 270.432315][ T5811] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.469751][ T5811] usb 4-1: config 0 has no interface number 0 [ 270.501347][ T5811] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 270.544560][ T5811] usb 4-1: config 0 interface 104 has no altsetting 1 [ 270.580524][ T5811] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 270.583653][ T5807] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 270.617858][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.637182][T12024] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 270.651336][ T5811] usb 4-1: Product: syz [ 270.655563][ T5811] usb 4-1: Manufacturer: syz [ 270.672952][ T5811] usb 4-1: SerialNumber: syz [ 270.686145][T12024] FAT-fs (loop0): Filesystem has been set read-only [ 270.695859][ T5811] usb 4-1: config 0 descriptor?? [ 270.704532][T12028] loop2: detected capacity change from 0 to 4096 [ 270.732068][ T5811] asix: probe of 4-1:0.104 failed with error -22 [ 270.772122][T12028] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 270.780140][ T5830] usb 2-1: USB disconnect, device number 17 [ 270.816650][T12028] ntfs: volume version 3.1. [ 270.968812][ T5811] usb 4-1: USB disconnect, device number 17 [ 271.231746][T12042] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.591405][T12055] openvswitch: netlink: Actions may not be safe on all matching packets [ 271.647442][T12056] loop2: detected capacity change from 0 to 4096 [ 271.690687][T12056] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 271.922984][T12060] loop0: detected capacity change from 0 to 4096 [ 271.981871][T12060] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 271.995144][T12060] ntfs3: loop0: Failed to load $Extend (-22). [ 272.030408][T12060] ntfs3: loop0: Failed to initialize $Extend. [ 272.158054][T12070] loop2: detected capacity change from 0 to 2048 [ 272.172172][T12060] ntfs3: loop0: ino=5, "/" directory corrupted [ 272.209982][T12070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.261943][ T5768] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 272.453821][T12078] libceph: resolve '0.4' (ret=-3): failed [ 272.531706][T12083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2807'. [ 272.770800][T12086] loop0: detected capacity change from 0 to 4096 [ 272.853876][T12093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2814'. [ 272.866840][T12086] ntfs: volume version 3.1. [ 272.874940][T12093] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2814'. [ 272.888315][T12093] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2814'. [ 272.901810][T12093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2814'. [ 273.170436][T12081] loop3: detected capacity change from 0 to 32768 [ 273.223961][T12081] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.2808 (12081) [ 273.291169][T12081] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 273.309720][T12081] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 273.330016][T12081] BTRFS info (device loop3): using free space tree [ 273.494534][T12081] BTRFS info (device loop3): enabling ssd optimizations [ 273.553446][T12081] BTRFS info (device loop3): auto enabling async discard [ 273.630451][T12133] netlink: 'syz.0.2827': attribute type 1 has an invalid length. [ 273.650606][T12133] netlink: 'syz.0.2827': attribute type 2 has an invalid length. [ 273.697341][ T5771] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 273.754520][ T5807] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 273.975821][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 273.993497][ T5807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.004025][ T5807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.025585][ T5807] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.046060][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.054317][ T5807] usb 3-1: Product: syz [ 274.058646][ T5807] usb 3-1: Manufacturer: syz [ 274.063640][ T5807] usb 3-1: SerialNumber: syz [ 274.290326][ T5807] usb 3-1: 0:2 : does not exist [ 274.295876][ T5807] usb 3-1: unit 9 not found! [ 274.314731][ T5807] usb 3-1: USB disconnect, device number 17 [ 274.331167][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.813250][T12145] loop3: detected capacity change from 0 to 256 [ 274.827585][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 274.833900][T12145] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.871350][T12145] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 274.895052][T12144] netlink: 'syz.0.2840': attribute type 2 has an invalid length. [ 274.904070][T12145] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 275.124177][T12152] netlink: 'syz.1.2835': attribute type 1 has an invalid length. [ 275.153060][T12152] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2835'. [ 275.309089][T12156] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2837'. [ 275.454089][T12157] loop0: detected capacity change from 0 to 4096 [ 275.586127][T12166] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2839'. [ 276.135009][T12182] loop2: detected capacity change from 0 to 256 [ 276.163549][T12186] loop0: detected capacity change from 0 to 24 [ 276.370885][T12188] loop1: detected capacity change from 0 to 164 [ 276.417280][T12192] loop3: detected capacity change from 0 to 64 [ 276.464740][T12188] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 276.563148][T12196] netlink: 'syz.2.2856': attribute type 8 has an invalid length. [ 276.682065][T12200] loop3: detected capacity change from 0 to 16 [ 276.703172][T12200] erofs: (device loop3): mounted with root inode @ nid 36. [ 276.742148][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 320 @ nid 36 [ 276.753281][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 299 @ nid 36 [ 276.764007][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 298 @ nid 36 [ 276.773438][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 297 @ nid 36 [ 276.782986][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 296 @ nid 36 [ 276.792310][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 288 @ nid 36 [ 276.803639][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 280 @ nid 36 [ 276.813887][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 186 @ nid 36 [ 276.823217][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 185 @ nid 36 [ 276.832530][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 184 @ nid 36 [ 276.842085][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 155 @ nid 36 [ 276.851479][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 154 @ nid 36 [ 276.860760][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 153 @ nid 36 [ 276.870074][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 152 @ nid 36 [ 276.879396][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 139 @ nid 36 [ 276.881347][ T5807] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 276.888825][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 138 @ nid 36 [ 276.905810][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 137 @ nid 36 [ 276.915286][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 136 @ nid 36 [ 276.924890][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 128 @ nid 36 [ 276.934864][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 120 @ nid 36 [ 276.944547][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 276.953953][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 81 @ nid 36 [ 276.963219][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 80 @ nid 36 [ 276.972502][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 276.981776][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 276.991308][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 277.000496][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 277.010087][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 277.019328][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 277.028540][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 277.037739][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 277.047007][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 277.056264][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 277.065533][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 277.074965][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 277.080778][ T5807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.084292][T12200] erofs: (device loop3): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 277.102411][T12200] bio_check_eod: 34 callbacks suppressed [ 277.102425][T12200] syz.3.2858: attempt to access beyond end of device [ 277.102425][T12200] loop3: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 277.104837][ T5807] usb 1-1: config 0 has no interface number 0 [ 277.108165][T12200] syz.3.2858: attempt to access beyond end of device [ 277.108165][T12200] loop3: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 277.141933][ T5807] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.149915][T12200] syz.3.2858: attempt to access beyond end of device [ 277.149915][T12200] loop3: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 277.166773][ T5807] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.166802][ T5807] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.166824][ T5807] usb 1-1: config 0 interface 1 has no altsetting 0 [ 277.171809][ T5807] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 277.178231][T12200] syz.3.2858: attempt to access beyond end of device [ 277.178231][T12200] loop3: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 277.196863][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.206473][T12200] syz.3.2858: attempt to access beyond end of device [ 277.206473][T12200] loop3: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 277.233644][ T5807] usb 1-1: config 0 descriptor?? [ 277.249522][T12200] syz.3.2858: attempt to access beyond end of device [ 277.249522][T12200] loop3: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 277.265709][T12200] syz.3.2858: attempt to access beyond end of device [ 277.265709][T12200] loop3: rw=524288, sector=525152, nr_sectors = 32 limit=16 [ 277.279799][T12200] syz.3.2858: attempt to access beyond end of device [ 277.279799][T12200] loop3: rw=524288, sector=13478624032, nr_sectors = 32 limit=16 [ 277.294745][T12200] syz.3.2858: attempt to access beyond end of device [ 277.294745][T12200] loop3: rw=524288, sector=13478624040, nr_sectors = 32 limit=16 [ 277.312002][T12200] syz.3.2858: attempt to access beyond end of device [ 277.312002][T12200] loop3: rw=524288, sector=14550774152, nr_sectors = 32 limit=16 [ 277.540058][T12207] loop3: detected capacity change from 0 to 1024 [ 277.661643][ T2929] hfsplus: b-tree write err: -5, ino 8 [ 277.888477][ T5807] uclogic 0003:145F:0212.0007: failed retrieving string descriptor #100: -71 [ 277.908573][ T5807] uclogic 0003:145F:0212.0007: failed retrieving pen parameters: -71 [ 277.918591][ T5807] uclogic 0003:145F:0212.0007: pen probing failed: -71 [ 277.931275][ T5807] uclogic 0003:145F:0212.0007: failed probing parameters: -71 [ 277.948656][ T5807] uclogic: probe of 0003:145F:0212.0007 failed with error -71 [ 277.976087][ T5807] usb 1-1: USB disconnect, device number 24 [ 278.288551][T12229] loop2: detected capacity change from 0 to 1024 [ 278.297555][T12229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 278.349511][T12229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.405423][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.150807][T12264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2888'. [ 279.316548][T12266] loop1: detected capacity change from 0 to 8192 [ 279.355342][T12266] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 279.394988][T12258] loop0: detected capacity change from 0 to 32768 [ 279.403186][T12266] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 279.412794][T12266] REISERFS (device loop1): using ordered data mode [ 279.419942][T12266] reiserfs: using flush barriers [ 279.427541][T12266] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 279.444307][T12266] REISERFS (device loop1): checking transaction log (loop1) [ 279.669816][T12266] REISERFS (device loop1): Using tea hash to sort names [ 279.686563][T12266] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 280.682956][T12310] loop2: detected capacity change from 0 to 128 [ 280.739067][T12314] loop3: detected capacity change from 0 to 1024 [ 280.805971][T12310] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 280.849140][T12314] hfsplus: bad catalog entry type [ 280.865939][T12310] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 280.904699][T12310] hpfs: You really don't want any checks? You are crazy... [ 280.924049][T12310] hpfs: hpfs_map_sector(): read error [ 280.941438][ T59] hfsplus: b-tree write err: -5, ino 25 [ 280.942959][T12310] hpfs: code page support is disabled [ 280.962044][ T59] hfsplus: b-tree write err: -5, ino 4 [ 280.964272][T12310] hpfs: hpfs_map_4sectors(): unaligned read [ 280.976524][ T59] hfsplus: b-tree write err: -5, ino 2 [ 280.986891][T12310] hpfs: hpfs_map_4sectors(): unaligned read [ 281.010461][T12310] hpfs: filesystem error: unable to find root dir [ 281.245518][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 281.361434][ T27] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 281.409662][T12312] loop1: detected capacity change from 0 to 32768 [ 281.553349][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.564812][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.583462][ T27] usb 1-1: config 0 descriptor?? [ 281.591496][ T27] cp210x 1-1:0.0: cp210x converter detected [ 281.885435][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2923'. [ 281.930000][T12344] loop1: detected capacity change from 0 to 512 [ 282.000130][T12344] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 282.033846][T12344] EXT4-fs (loop1): orphan cleanup on readonly fs [ 282.035379][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 282.058053][T12344] __quota_error: 31 callbacks suppressed [ 282.058068][T12344] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 282.077407][T12344] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.118787][T12344] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 282.127017][T12349] loop2: detected capacity change from 0 to 2048 [ 282.134038][T12344] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #16: comm syz.1.2924: inode has both inline data and extents flags [ 282.172427][T12344] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2924: couldn't read orphan inode 16 (err -117) [ 282.215360][T12344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.239173][ T9] usb 1-1: USB disconnect, device number 25 [ 282.249534][T12352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.281628][T12344] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 282.290712][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.355468][ T9] cp210x 1-1:0.0: device disconnected [ 282.360690][ T28] audit: type=1800 audit(1778114237.656:175): pid=12349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2927" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 282.397163][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.968179][T12375] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 282.973180][T12378] loop2: detected capacity change from 0 to 16 [ 282.995884][T12375] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 283.029492][T12378] erofs: (device loop2): mounted with root inode @ nid 36. [ 283.323210][T12371] loop1: detected capacity change from 0 to 32768 [ 283.330766][T12389] loop0: detected capacity change from 0 to 256 [ 283.347654][T12389] exfat: Deprecated parameter 'utf8' [ 283.415876][T12389] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 284.189849][T12415] loop2: detected capacity change from 0 to 1024 [ 284.201558][ T5830] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 284.252727][T12415] hfsplus: bad catalog entry type [ 284.313046][ T59] hfsplus: b-tree write err: -5, ino 25 [ 284.322564][ T59] hfsplus: b-tree write err: -5, ino 4 [ 284.328160][ T59] hfsplus: b-tree write err: -5, ino 2 [ 284.363585][T12419] loop0: detected capacity change from 0 to 4096 [ 284.400048][T12420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.401296][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 284.468593][ T5830] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 284.499904][T12419] overlayfs: upper fs does not support tmpfile. [ 284.506839][ T5830] usb 2-1: config 0 has no interface number 0 [ 284.527983][ T5830] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 284.540268][T12419] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 284.544640][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.569486][T12419] overlayfs: failed to set xattr on upper [ 284.569542][T12419] overlayfs: ...falling back to redirect_dir=nofollow. [ 284.569552][T12419] overlayfs: ...falling back to index=off. [ 284.569559][T12419] overlayfs: ...falling back to uuid=null. [ 284.571240][ T5830] usb 2-1: Product: syz [ 284.571261][ T5830] usb 2-1: Manufacturer: syz [ 284.571276][ T5830] usb 2-1: SerialNumber: syz [ 284.596570][ T5830] usb 2-1: config 0 descriptor?? [ 284.612581][ T5830] smsc95xx v2.0.0 [ 284.739616][ T5768] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 284.776391][ T5768] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 284.838367][ T5768] Remounting filesystem read-only [ 284.845139][ T5768] NILFS (loop0): error -5 truncating bmap (ino=12) [ 284.860912][ T5768] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 284.870094][ T5768] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 284.877656][ T5768] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 284.885908][ T5768] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 284.893761][ T5768] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 284.900888][ T5768] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 285.003781][ T28] audit: type=1326 audit(1778114240.316:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.0.2960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb419cdd9 code=0x7ffc0000 [ 285.063452][ T28] audit: type=1326 audit(1778114240.346:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.0.2960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1fb419cdd9 code=0x7ffc0000 [ 285.124405][T12417] gfs2: fsid=Ô±rÐÛ»ð_î [ 285.124405][T12417] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Trying to join cluster "lock_nolock", "Ô±rÐÛ»ð_î [ 285.124405][T12417] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM" [ 285.155792][ T28] audit: type=1326 audit(1778114240.346:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.0.2960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb419cdd9 code=0x7ffc0000 [ 285.195461][T12417] gfs2: fsid=Ô±rÐÛ»ð_î [ 285.195461][T12417] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM: Now mounting FS (format 1801)... [ 285.216562][ T28] audit: type=1326 audit(1778114240.346:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.0.2960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fb419cdd9 code=0x7ffc0000 [ 285.259240][ T5830] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 285.263154][T12417] gfs2: fsid=Ô±rÐÛ»ð_î [ 285.263154][T12417] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: journal 0 mapped with 5 extents in 0ms [ 285.274600][ T5830] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 285.294165][ T5830] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 285.305458][ T5830] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 285.318201][ T5830] usb 2-1: USB disconnect, device number 18 [ 285.325811][ T28] audit: type=1326 audit(1778114240.346:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.0.2960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1fb419cdd9 code=0x7ffc0000 [ 285.352011][ T28] audit: type=1326 audit(1778114240.346:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12429 comm="syz.0.2960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1fb419cdd9 code=0x7ffc0000 [ 285.506614][T12417] gfs2: fsid=Ô±rÐÛ»ð_î [ 285.506614][T12417] ˜b‚瀫ñ§Ö]êk;.Ä Œ±OŽ¿²ˆ:‚.£’t‹‰U§æM.s: first mount done, others may mount [ 285.525311][T12442] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 285.573162][T12442] ext4 filesystem being mounted at /714/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.696286][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.832407][T12450] set_capacity_and_notify: 2 callbacks suppressed [ 285.832423][T12450] loop0: detected capacity change from 0 to 1024 [ 285.908441][T12450] hfsplus: bad catalog entry type [ 286.005152][ T42] hfsplus: b-tree write err: -5, ino 25 [ 286.014240][ T42] hfsplus: b-tree write err: -5, ino 4 [ 286.032294][ T42] hfsplus: b-tree write err: -5, ino 2 [ 286.052448][T12454] loop1: detected capacity change from 0 to 256 [ 286.130540][T12456] ALSA: mixer_oss: invalid OSS volume 'ãì TÁÑ`Uó9u&þ½t»3+ý²ÈݺÛ' [ 286.183575][T12454] FAT-fs (loop1): Directory bread(block 64) failed [ 286.225865][T12454] FAT-fs (loop1): Directory bread(block 65) failed [ 286.251461][T12454] FAT-fs (loop1): Directory bread(block 66) failed [ 286.283685][T12454] FAT-fs (loop1): Directory bread(block 67) failed [ 286.310453][T12454] FAT-fs (loop1): Directory bread(block 68) failed [ 286.317057][T12454] FAT-fs (loop1): Directory bread(block 69) failed [ 286.359283][T12454] FAT-fs (loop1): Directory bread(block 70) failed [ 286.368027][T12464] loop0: detected capacity change from 0 to 512 [ 286.373642][T12454] FAT-fs (loop1): Directory bread(block 71) failed [ 286.391317][T12454] FAT-fs (loop1): Directory bread(block 72) failed [ 286.401056][T12454] FAT-fs (loop1): Directory bread(block 73) failed [ 286.406889][T12464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.491634][T12464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.584580][T12474] loop2: detected capacity change from 0 to 256 [ 286.591978][T12474] exfat: Deprecated parameter 'utf8' [ 286.598030][T12464] ext4 filesystem being mounted at /717/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.647207][T12474] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 286.733342][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.965234][ T27] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 286.996489][ T27] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 287.240489][T12495] loop3: detected capacity change from 0 to 256 [ 287.250570][T12495] exfat: Deprecated parameter 'utf8' [ 287.258487][T12491] fido_id[12491]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.303583][T12495] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 287.461796][T12500] loop1: detected capacity change from 0 to 764 [ 287.528279][T12500] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 287.745059][T12511] loop0: detected capacity change from 0 to 1024 [ 287.774866][T12511] hfsplus: Filesystem is marked locked, mounting read-only. [ 287.806386][T12514] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.2998'. [ 287.814478][T12515] loop3: detected capacity change from 0 to 16 [ 287.833023][T12511] hfsplus: filesystem is marked locked, leaving read-only. [ 287.851878][T12517] loop2: detected capacity change from 0 to 64 [ 287.865417][T12515] erofs: (device loop3): mounted with root inode @ nid 36. [ 288.063772][T12521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'. [ 288.117205][ T42] bio_check_eod: 33 callbacks suppressed [ 288.117221][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.117221][ T42] loop2: rw=1, sector=65, nr_sectors = 1 limit=64 [ 288.191657][ T42] Buffer I/O error on dev loop2, logical block 65, lost async page write [ 288.200875][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.200875][ T42] loop2: rw=1, sector=66, nr_sectors = 1 limit=64 [ 288.233121][ T42] Buffer I/O error on dev loop2, logical block 66, lost async page write [ 288.243981][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.243981][ T42] loop2: rw=1, sector=67, nr_sectors = 1 limit=64 [ 288.257661][ T42] Buffer I/O error on dev loop2, logical block 67, lost async page write [ 288.266180][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.266180][ T42] loop2: rw=1, sector=68, nr_sectors = 1 limit=64 [ 288.287268][ T42] Buffer I/O error on dev loop2, logical block 68, lost async page write [ 288.296670][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.296670][ T42] loop2: rw=1, sector=72, nr_sectors = 1 limit=64 [ 288.333944][ T42] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 288.362654][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.362654][ T42] loop2: rw=1, sector=73, nr_sectors = 1 limit=64 [ 288.391602][ T42] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 288.415993][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.415993][ T42] loop2: rw=1, sector=76, nr_sectors = 1 limit=64 [ 288.434003][ T42] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 288.443006][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.443006][ T42] loop2: rw=1, sector=77, nr_sectors = 1 limit=64 [ 288.458836][ T42] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 288.487680][ T42] kworker/u4:2: attempt to access beyond end of device [ 288.487680][ T42] loop2: rw=1, sector=78, nr_sectors = 91 limit=64 [ 288.626800][T12535] loop0: detected capacity change from 0 to 512 [ 288.833561][T12525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3004 (12525) [ 288.928309][T12525] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.970054][T12525] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 288.982770][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3013'. [ 289.003283][T12525] BTRFS info (device loop1): setting nodatacow, compression disabled [ 289.023937][T12525] BTRFS info (device loop1): turning on flush-on-commit [ 289.055357][T12525] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 289.080832][T12525] BTRFS info (device loop1): use lzo compression, level 0 [ 289.088043][T12525] BTRFS info (device loop1): setting nodatasum [ 289.125989][T12525] BTRFS info (device loop1): use no compression [ 289.136818][T12525] BTRFS info (device loop1): trying to use backup root at mount time [ 289.158712][T12525] BTRFS info (device loop1): max_inline at 0 [ 289.178580][T12525] BTRFS info (device loop1): using free space tree [ 289.241619][ T59] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 289.266446][T12525] BTRFS warning (device loop1): couldn't read tree root [ 289.274511][T12525] BTRFS warning (device loop1): try to load backup roots slot 1 [ 289.285179][ T59] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 289.299204][T12525] BTRFS warning (device loop1): couldn't read tree root [ 289.307031][T12525] BTRFS warning (device loop1): try to load backup roots slot 2 [ 289.337517][ T59] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 289.350635][T12525] BTRFS warning (device loop1): couldn't read tree root [ 289.358326][T12525] BTRFS warning (device loop1): try to load backup roots slot 3 [ 289.415176][T12525] BTRFS info (device loop1): enabling ssd optimizations [ 289.422849][T12525] BTRFS info (device loop1): auto enabling async discard [ 289.432695][T12525] BTRFS info (device loop1): rebuilding free space tree [ 289.525946][T12525] BTRFS info (device loop1): checking UUID tree [ 289.779734][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.959454][ T28] audit: type=1326 audit(1778114244.993:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.2.3014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6d19cdd9 code=0x7fc00000 [ 290.203405][T12587] syz.1.3025: attempt to access beyond end of device [ 290.203405][T12587] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 290.279130][T12587] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 290.548465][T12600] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.3031: inode has both inline data and extents flags [ 290.682262][T12600] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.3031: couldn't read orphan inode 15 (err -117) [ 290.733969][T12600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.758875][T12595] ntfs3: loop0: failed to convert "0080" to macinuit [ 290.791847][T12595] ntfs3: loop0: failed to convert name for inode 1e. [ 290.822337][T12600] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.3031: Directory hole found for htree leaf block 0 [ 291.005397][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.095830][T12614] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.148548][T12617] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 291.179814][T12614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 291.285493][T12614] Quota error (device loop0): write_blk: dquota write failed [ 291.312374][T12614] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 291.356051][T12614] Quota error (device loop0): write_blk: dquota write failed [ 291.363630][T12614] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 291.375224][T12614] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.3035: Failed to acquire dquot type 1 [ 291.402198][T12614] EXT4-fs (loop0): 1 truncate cleaned up [ 291.409407][T12614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.589438][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.804996][T12637] set_capacity_and_notify: 6 callbacks suppressed [ 291.805011][T12637] loop3: detected capacity change from 0 to 4096 [ 291.864523][T12637] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 291.873965][T12637] ntfs3: loop3: Failed to load $Extend (-22). [ 291.895316][T12637] ntfs3: loop3: Failed to initialize $Extend. [ 291.935299][T12637] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 292.030802][ T5771] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 292.047452][T12643] loop1: detected capacity change from 0 to 4096 [ 292.114242][T12646] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.195355][T12645] loop0: detected capacity change from 0 to 8192 [ 292.203202][T12643] overlayfs: upper fs does not support tmpfile. [ 292.242541][T12643] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.264277][T12643] overlayfs: failed to set xattr on upper [ 292.272342][T12643] overlayfs: ...falling back to redirect_dir=nofollow. [ 292.303117][T12643] overlayfs: ...falling back to index=off. [ 292.349631][T12643] overlayfs: ...falling back to uuid=null. [ 292.557849][ T5772] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 292.583217][ T5772] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 292.630197][ T5772] Remounting filesystem read-only [ 292.636764][ T5772] NILFS (loop1): error -5 truncating bmap (ino=12) [ 292.678587][ T5772] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 292.717336][ T5772] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 292.735289][ T5772] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 292.742298][ T5772] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 292.788414][ T5772] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 292.813580][ T5772] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 293.237367][T12676] loop3: detected capacity change from 0 to 4096 [ 293.354561][T12683] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.450176][T12676] overlayfs: upper fs does not support tmpfile. [ 293.486235][T12676] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 293.501918][T12676] overlayfs: failed to set xattr on upper [ 293.512347][T12676] overlayfs: ...falling back to redirect_dir=nofollow. [ 293.520648][T12676] overlayfs: ...falling back to index=off. [ 293.532182][T12676] overlayfs: ...falling back to uuid=null. [ 293.559482][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 293.590624][T12687] netlink: 'syz.1.3070': attribute type 1 has an invalid length. [ 293.592739][T12664] loop2: detected capacity change from 0 to 32768 [ 293.634120][ T5771] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 293.664099][ T5771] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 293.700069][ T5771] Remounting filesystem read-only [ 293.707105][ T5771] NILFS (loop3): error -5 truncating bmap (ino=12) [ 293.737618][ T5771] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 293.748529][ T5771] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 293.775174][ T5771] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 293.792613][ T5771] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 293.799980][ T5771] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 293.824699][ T5771] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 294.040831][T12685] loop0: detected capacity change from 0 to 32768 [ 294.070661][T12685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3069 (12685) [ 294.133497][T12685] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.178876][T12685] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 294.196687][T12685] BTRFS info (device loop0): using free space tree [ 294.285048][ T5808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 294.327699][T12685] BTRFS info (device loop0): enabling ssd optimizations [ 294.334780][T12685] BTRFS info (device loop0): auto enabling async discard [ 294.421057][T12719] loop1: detected capacity change from 0 to 8192 [ 294.441300][T12719] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 294.508380][T12719] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 294.516110][ T5808] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 294.518993][T12719] REISERFS (device loop1): using ordered data mode [ 294.534753][T12719] reiserfs: using flush barriers [ 294.541930][T12719] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 294.558722][T12719] REISERFS (device loop1): checking transaction log (loop1) [ 294.585767][ T5808] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 294.587587][T12719] REISERFS (device loop1): Using r5 hash to sort names [ 294.614967][T12719] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 294.634967][ T5808] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 294.672316][ T5808] usb 4-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.672896][T12724] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 294.709403][ T5808] usb 4-1: config 16 interface 0 has no altsetting 0 [ 294.736699][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.762245][ T5808] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 294.797729][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.082614][ T5808] usb 4-1: string descriptor 0 read error: -71 [ 295.110531][T12733] loop1: detected capacity change from 0 to 1024 [ 295.152087][ T5808] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 295.160444][ T5808] imon 4-1:16.0: unable to initialize intf0, err -19 [ 295.168497][ T5808] imon:imon_probe: failed to initialize context! [ 295.175238][ T5808] imon 4-1:16.0: unable to register, err -19 [ 295.225006][ T5808] usb 4-1: USB disconnect, device number 18 [ 295.478774][T12742] loop0: detected capacity change from 0 to 1024 [ 295.510021][T12743] loop2: detected capacity change from 0 to 1024 [ 295.573119][T12743] hfsplus: Filesystem is marked locked, mounting read-only. [ 295.613882][T12743] hfsplus: filesystem is marked locked, leaving read-only. [ 295.922010][ C1] sd 0:0:1:0: [sda] tag#6497 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 295.932540][ C1] sd 0:0:1:0: [sda] tag#6497 CDB: Read(6) 08 00 f9 56 e4 47 [ 296.229284][T12762] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3106'. [ 296.251348][T12762] IPv6: NLM_F_REPLACE set, but no existing node found! [ 296.283011][T12766] netlink: 'syz.0.3098': attribute type 9 has an invalid length. [ 296.284055][ T2968] hfsplus: b-tree write err: -5, ino 25 [ 296.315810][ T2968] hfsplus: b-tree write err: -5, ino 4 [ 296.321596][ T2968] hfsplus: b-tree write err: -5, ino 2 [ 296.620266][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 296.636971][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3107'. [ 296.663702][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 296.673355][T12779] netlink: 'syz.3.3105': attribute type 6 has an invalid length. [ 296.681716][T12779] netlink: 'syz.3.3105': attribute type 5 has an invalid length. [ 296.871088][T12787] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 297.074615][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3114'. [ 297.106405][T12797] nbd: illegal input index -1113835520 [ 297.235617][T12804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3117'. [ 297.329698][T12808] set_capacity_and_notify: 2 callbacks suppressed [ 297.329713][T12808] loop0: detected capacity change from 0 to 256 [ 297.355253][T12810] loop1: detected capacity change from 0 to 64 [ 297.362542][T12808] exfat: Deprecated parameter 'utf8' [ 297.388508][T12808] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 297.871512][T12826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3126'. [ 298.330129][T12844] loop0: detected capacity change from 0 to 1024 [ 298.725045][T12862] binder: 12861:12862 ioctl c018620c 2000000001c0 returned -22 [ 298.766000][T12864] loop1: detected capacity change from 0 to 512 [ 298.783030][T12864] EXT4-fs (loop1): orphan cleanup on readonly fs [ 298.790841][T12864] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 298.803531][T12864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 298.827767][T12864] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3146: attempt to clear invalid blocks 2 len 1 [ 298.840897][ T5807] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 298.853045][T12864] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3146: invalid indirect mapped block 1819239214 (level 0) [ 298.874926][T12864] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3146: invalid indirect mapped block 1819239214 (level 1) [ 298.889867][T12864] EXT4-fs (loop1): 1 truncate cleaned up [ 298.896335][T12864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.910034][T12864] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.041911][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 299.085477][ T5807] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 299.111695][ T5807] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 299.126234][ T5807] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.147950][ T5807] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 299.156965][ T5807] usb 3-1: config 1 has no interface number 0 [ 299.172605][ T5807] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 299.182136][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.200854][ T5807] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 299.254930][T12871] loop3: detected capacity change from 0 to 4096 [ 299.269728][T12871] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 299.282964][T12871] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 299.302011][T12871] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 299.315806][T12871] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 299.332128][T12871] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 299.356340][T12871] ntfs: volume version 3.1. [ 299.364204][T12871] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 299.381682][T12871] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 299.395199][T12871] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 299.411474][T12871] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 299.422898][T12871] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 299.441211][ T5807] snd_usb_pod 3-1:1.1: set_interface failed [ 299.479495][ T5807] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 299.486844][ T5807] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 299.510905][ T5807] usb 3-1: USB disconnect, device number 18 [ 300.107673][T12889] ip6t_srh: unknown srh match flags 4000 [ 300.167175][T12886] loop3: detected capacity change from 0 to 8192 [ 300.269138][T12895] program syz.2.3170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 300.333481][T12898] usb usb8: check_ctrlrecip: process 12898 (syz.0.3159) requesting ep 01 but needs 81 [ 300.392834][T12898] usb usb8: usbfs: process 12898 (syz.0.3159) did not claim interface 0 before use [ 300.481488][T12902] autofs4:pid:12902:autofs_fill_super: called with bogus options [ 300.572402][T12904] bad cache= option: no%e [ 300.572402][T12904] [ 300.594128][T12908] netlink: 'syz.0.3175': attribute type 5 has an invalid length. [ 300.602405][T12904] CIFS: VFS: bad cache= option: no%e [ 300.609609][T12907] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 301.081394][T12926] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 301.178369][T12929] ip6t_rpfilter: unknown options [ 301.183789][T12930] netlink: 'syz.2.3179': attribute type 21 has an invalid length. [ 301.203126][T12930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3179'. [ 301.364641][T12912] loop3: detected capacity change from 0 to 32768 [ 301.421312][T12912] JBD2: Ignoring recovery information on journal [ 301.468798][T12912] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 301.572849][T12936] loop0: detected capacity change from 0 to 4096 [ 301.615745][T12936] ntfs: volume version 3.1. [ 301.683959][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 302.046879][T12947] loop1: detected capacity change from 0 to 4096 [ 302.112981][T12955] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.598179][T12963] loop3: detected capacity change from 0 to 4096 [ 302.634604][T12949] JBD2: Ignoring recovery information on journal [ 302.685188][T12949] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 302.692593][T12963] ntfs: volume version 3.1. [ 302.910770][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 303.058484][T12975] set_capacity_and_notify: 1 callbacks suppressed [ 303.058500][T12975] loop3: detected capacity change from 0 to 512 [ 303.135972][T12975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.171299][T12975] ext4 filesystem being mounted at /830/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.277805][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.324194][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'. [ 304.543783][T13043] tmpfs: Bad value for 'mpol' [ 304.750850][T13053] loop2: detected capacity change from 0 to 16 [ 304.758014][T13053] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 304.773710][T13053] cramfs: Error -3 while decompressing! [ 304.777954][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop2 [ 304.779397][T13053] cramfs: ffffffff973fb368(27)->ffff88805509a000(4096) [ 304.806349][T13053] cramfs: Error -3 while decompressing! [ 304.819181][T13053] cramfs: ffffffff973fb368(27)->ffff88805509a000(4096) [ 304.834639][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 304.834651][ T28] audit: type=1800 audit(1778114258.913:183): pid=13053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3235" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 304.864582][ T5759] udevd[5759]: incorrect cramfs checksum on /dev/loop2 [ 305.217717][T13067] loop3: detected capacity change from 0 to 256 [ 305.248942][T13071] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.354375][T13067] FAT-fs (loop3): Directory bread(block 64) failed [ 305.368167][T13067] FAT-fs (loop3): Directory bread(block 65) failed [ 305.390686][T13067] FAT-fs (loop3): Directory bread(block 66) failed [ 305.404161][T13067] FAT-fs (loop3): Directory bread(block 67) failed [ 305.410854][T13067] FAT-fs (loop3): Directory bread(block 68) failed [ 305.421103][T13067] FAT-fs (loop3): Directory bread(block 69) failed [ 305.428129][T13067] FAT-fs (loop3): Directory bread(block 70) failed [ 305.446070][T13067] FAT-fs (loop3): Directory bread(block 71) failed [ 305.452780][T13067] FAT-fs (loop3): Directory bread(block 72) failed [ 305.461091][T13067] FAT-fs (loop3): Directory bread(block 73) failed [ 305.640703][T13082] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 305.855458][T13092] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.157358][T13106] loop3: detected capacity change from 0 to 256 [ 306.227655][T13106] FAT-fs (loop3): Directory bread(block 64) failed [ 306.234248][T13106] FAT-fs (loop3): Directory bread(block 65) failed [ 306.246866][T13106] FAT-fs (loop3): Directory bread(block 66) failed [ 306.253442][T13106] FAT-fs (loop3): Directory bread(block 67) failed [ 306.292958][T13106] FAT-fs (loop3): Directory bread(block 68) failed [ 306.300316][T13106] FAT-fs (loop3): Directory bread(block 69) failed [ 306.306900][T13106] FAT-fs (loop3): Directory bread(block 70) failed [ 306.314329][T13106] FAT-fs (loop3): Directory bread(block 71) failed [ 306.322677][T13106] FAT-fs (loop3): Directory bread(block 72) failed [ 306.329329][T13106] FAT-fs (loop3): Directory bread(block 73) failed [ 306.381645][T13106] syz.3.3256: attempt to access beyond end of device [ 306.381645][T13106] loop3: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 307.127582][T13127] loop1: detected capacity change from 0 to 32768 [ 307.137257][T13127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3270 (13127) [ 307.168178][T13127] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.190879][T13127] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 307.200399][T13127] BTRFS info (device loop1): using free space tree [ 307.239871][T13127] BTRFS info (device loop1): enabling ssd optimizations [ 307.252265][T13127] BTRFS info (device loop1): auto enabling async discard [ 307.311883][T13127] BTRFS info (device loop1): resizing devid 73709551615 [ 307.321619][T13127] BTRFS info (device loop1): resizer unable to find device 73709551615 [ 307.365791][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.434772][ T5759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5759) [ 307.971421][T13162] netlink: 'syz.3.3277': attribute type 1 has an invalid length. [ 307.999211][T13162] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3277'. [ 308.143649][T13170] loop1: detected capacity change from 0 to 512 [ 308.161904][T13172] loop3: detected capacity change from 0 to 128 [ 308.192382][T13172] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 308.221977][T13172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.238910][T13170] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.3291: inode has both inline data and extents flags [ 308.252834][T13170] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3291: couldn't read orphan inode 15 (err -117) [ 308.298831][T13170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.452909][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.617283][T13182] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3284'. [ 308.706566][T13164] loop0: detected capacity change from 0 to 32768 [ 308.911057][T13186] loop1: detected capacity change from 0 to 4096 [ 308.919868][T13186] EXT4-fs: Ignoring removed orlov option [ 308.973545][T13186] EXT4-fs (loop1): Test dummy encryption mode enabled [ 309.015402][T13186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.131831][T13186] fs-verity (loop1, inode 13): Unknown hash algorithm number: 0 [ 309.243319][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.547826][T13211] loop2: detected capacity change from 0 to 2048 [ 309.610986][T13212] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.674746][T13218] loop3: detected capacity change from 0 to 512 [ 309.796013][T13218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.866982][T13218] ext4 filesystem being mounted at /858/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.930165][T13229] loop0: detected capacity change from 0 to 256 [ 309.941565][T13231] loop2: detected capacity change from 0 to 256 [ 309.944627][T13218] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 310.058847][T13231] FAT-fs (loop2): Directory bread(block 64) failed [ 310.091979][T13231] FAT-fs (loop2): Directory bread(block 65) failed [ 310.117612][T13231] FAT-fs (loop2): Directory bread(block 66) failed [ 310.131948][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.162309][T13231] FAT-fs (loop2): Directory bread(block 67) failed [ 310.227197][T13231] FAT-fs (loop2): Directory bread(block 68) failed [ 310.254949][T13231] FAT-fs (loop2): Directory bread(block 69) failed [ 310.261634][T13231] FAT-fs (loop2): Directory bread(block 70) failed [ 310.296457][T13231] FAT-fs (loop2): Directory bread(block 71) failed [ 310.305831][T13231] FAT-fs (loop2): Directory bread(block 72) failed [ 310.313542][T13231] FAT-fs (loop2): Directory bread(block 73) failed [ 310.907210][T13261] loop2: detected capacity change from 0 to 512 [ 310.920927][T13260] loop0: detected capacity change from 0 to 1024 [ 310.958603][T13260] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 310.965978][T13260] hfsplus: xattr searching failed [ 310.978054][T13261] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.3325: inode has both inline data and extents flags [ 311.058854][T13260] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 311.087405][T13261] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3325: couldn't read orphan inode 15 (err -117) [ 311.109899][T13260] hfsplus: xattr searching failed [ 311.115551][T13260] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 311.136805][T13260] hfsplus: xattr searching failed [ 311.151626][T13260] syz.0.3324: attempt to access beyond end of device [ 311.151626][T13260] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 311.179089][T13261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.193524][T13260] Buffer I/O error on dev loop0, logical block 458752, async page read [ 311.213080][T13260] hfsplus: unable to mark blocks free: error -5 [ 311.239422][T13260] hfsplus: can't free extent [ 311.369010][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.411110][T13253] loop3: detected capacity change from 0 to 40427 [ 311.456872][T13253] F2FS-fs (loop3): invalid crc value [ 311.457569][T13271] loop0: detected capacity change from 0 to 256 [ 311.495347][T13253] F2FS-fs (loop3): Found nat_bits in checkpoint [ 311.559925][T13271] FAT-fs (loop0): Directory bread(block 64) failed [ 311.590445][T13271] FAT-fs (loop0): Directory bread(block 65) failed [ 311.599707][T13271] FAT-fs (loop0): Directory bread(block 66) failed [ 311.632987][T13271] FAT-fs (loop0): Directory bread(block 67) failed [ 311.665221][T13271] FAT-fs (loop0): Directory bread(block 68) failed [ 311.683733][T13253] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 311.692434][T13271] FAT-fs (loop0): Directory bread(block 69) failed [ 311.711190][T13271] FAT-fs (loop0): Directory bread(block 70) failed [ 311.739873][T13271] FAT-fs (loop0): Directory bread(block 71) failed [ 311.756171][T13271] FAT-fs (loop0): Directory bread(block 72) failed [ 311.779851][T13271] FAT-fs (loop0): Directory bread(block 73) failed [ 311.967113][ T5771] syz-executor: attempt to access beyond end of device [ 311.967113][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 312.049963][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 312.641163][ T2949] ------------[ cut here ]------------ [ 312.646734][ T2949] kernel BUG at fs/hfs/inode.c:449! [ 312.685016][ T2949] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 312.691166][ T2949] CPU: 0 PID: 2949 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 312.698734][ T2949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.708811][ T2949] Workqueue: writeback wb_workfn (flush-7:1) [ 312.714832][ T2949] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 312.720403][ T2949] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 312.740026][ T2949] RSP: 0018:ffffc9000bdc7340 EFLAGS: 00010293 [ 312.746118][ T2949] RAX: ffffffff825b5f2a RBX: ffff88805a86e328 RCX: ffff88802bedbc00 [ 312.754139][ T2949] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 312.762129][ T2949] RBP: ffffc9000bdc74d0 R08: ffff88802bedbc00 R09: 0000000000000003 [ 312.770124][ T2949] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 312.778117][ T2949] R13: 1ffff920017b8e6c R14: ffff88805a86e2d8 R15: 0000000000000000 [ 312.786112][ T2949] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 312.795092][ T2949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.801695][ T2949] CR2: 00002000002a1000 CR3: 000000002d7e6000 CR4: 00000000003506f0 [ 312.809692][ T2949] Call Trace: [ 312.813005][ T2949] [ 312.815960][ T2949] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 312.821457][ T2949] ? __rwlock_init+0x150/0x150 [ 312.826346][ T2949] __writeback_single_inode+0x705/0xec0 [ 312.831928][ T2949] writeback_sb_inodes+0x7cd/0xf50 [ 312.837091][ T2949] ? queue_io+0x550/0x550 [ 312.841460][ T2949] ? rcu_is_watching+0x15/0xb0 [ 312.846268][ T2949] wb_writeback+0x46a/0xbf0 [ 312.846491][T13308] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 312.850787][ T2949] ? queue_io+0x3b1/0x550 [ 312.850819][ T2949] ? percpu_ref_tryget+0x250/0x250 [ 312.872483][ T2949] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 312.878495][ T2949] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.883707][ T2949] wb_workfn+0x400/0xe60 [ 312.888053][ T2949] ? try_to_wake_up+0x70a/0x1190 [ 312.893001][ T2949] ? inode_wait_for_writeback+0x230/0x230 [ 312.898730][ T2949] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 312.904729][ T2949] ? read_lock_is_recursive+0x20/0x20 [ 312.910110][ T2949] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.915311][ T2949] ? process_scheduled_works+0x96f/0x15d0 [ 312.921025][ T2949] ? process_scheduled_works+0x96f/0x15d0 [ 312.926824][ T2949] process_scheduled_works+0xa5d/0x15d0 [ 312.932375][ T2949] ? worker_attach_to_pool+0x380/0x380 [ 312.937830][ T2949] ? assign_work+0x3d2/0x5d0 [ 312.942415][ T2949] worker_thread+0xa55/0xfc0 [ 312.947004][ T2949] kthread+0x2fa/0x390 [ 312.951060][ T2949] ? pr_cont_work+0x560/0x560 [ 312.955737][ T2949] ? kthread_blkcg+0xd0/0xd0 [ 312.960318][ T2949] ret_from_fork+0x48/0x80 [ 312.964731][ T2949] ? kthread_blkcg+0xd0/0xd0 [ 312.969313][ T2949] ret_from_fork_asm+0x11/0x20 [ 312.974078][ T2949] [ 312.977096][ T2949] Modules linked in: [ 313.002302][ T2949] ---[ end trace 0000000000000000 ]--- [ 313.007938][ T2949] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 313.013995][ T2949] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 313.034097][ T2949] RSP: 0018:ffffc9000bdc7340 EFLAGS: 00010293 [ 313.036988][T13307] loop2: p2 p3 p7 [ 313.040496][ T2949] RAX: ffffffff825b5f2a RBX: ffff88805a86e328 RCX: ffff88802bedbc00 [ 313.053488][ T2949] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 313.061800][ T2949] RBP: ffffc9000bdc74d0 R08: ffff88802bedbc00 R09: 0000000000000003 [ 313.076965][ T2949] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 313.085716][ T5139] loop2: p2 p3 p7 [ 313.099832][ T2949] R13: 1ffff920017b8e6c R14: ffff88805a86e2d8 R15: 0000000000000000 [ 313.120727][ T2949] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 313.162383][ T2949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.183855][ T2949] CR2: 00007f23f0661a90 CR3: 0000000075ed9000 CR4: 00000000003506f0 [ 313.208759][ T2949] Kernel panic - not syncing: Fatal exception [ 313.215489][ T2949] Kernel Offset: disabled [ 313.219813][ T2949] Rebooting in 86400 seconds..