last executing test programs: 5.253890147s ago: executing program 0 (id=1115): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f00000000c0)='nodioread_nolock', 0x40, 0x2, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) 5.035688674s ago: executing program 0 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) 4.910135819s ago: executing program 0 (id=1123): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000100)={0x0, 0xe, 0x4, "55dc20f3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.690663007s ago: executing program 2 (id=1126): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0xfffffffffffffffd, r1, 0x2}}, 0x18) 4.435717326s ago: executing program 2 (id=1131): r0 = mq_open(&(0x7f00000004c0)='\xd5\x0e\xd8f\xc6+\xa8\xe3u\xe8\x13\x1d\xf4\x19Q\xf2\a_?\xa0\xea5\x14y\x1c\xae\xef@\x9eS\x8d!\x1c\x03A\x0e\x00\xac\xe0\xc7\xe9c\x12\xd0l\x9a\x94\xff\xeeb|\x91h\x95d0\xee\x99\x93\xce\xfb\xa3^\xd0\xe3\xd8BA\xd8c\xed\xe8\xa3\x9aU\x8e\xf8H=\xbe\x9ai\x9fxV\xe8f\xa6\xfe\xa7\x804\xcbK\xa12\xed\x8cIzSH\x8be\x8aaj98]\x05WX\xe3\xc4t\xcb\xa3\xe1\xdcT\x84v\x15\x95\xf3\xd4\xe8\x97\x9f\xdcq.\xa0~U=\x15\x13aG\xc2-\x063\x00\xe0\nv*\xea\x82\x80gQ\x9a4\xa8\xaf\xc7\x03\xc6\xfav?\x9f\v\x84\x86\xf9\xa4\x1b\xe6~\x13\xa4T\xaf\x03S[\xe1\xa2=\xbbX\x01\x80\xe8\xe0W\xbbP\xfe\x9b&\x8f\xf4 flc_size [ 127.814372][ T4193] sysv_free_block: flc_count > flc_size [ 127.821156][ T4193] sysv_free_block: flc_count > flc_size [ 127.826860][ T4193] sysv_free_block: flc_count > flc_size [ 127.833519][ T4193] sysv_free_block: flc_count > flc_size [ 127.842950][ T4193] sysv_free_block: flc_count > flc_size [ 127.855321][ T4193] sysv_free_block: flc_count > flc_size [ 127.867176][ T4193] sysv_free_block: flc_count > flc_size [ 127.877974][ T4193] sysv_free_block: flc_count > flc_size [ 127.901843][ T4193] sysv_free_block: flc_count > flc_size [ 127.940182][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 127.947666][ T5147] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.979954][ T5716] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 128.307424][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.347274][ T5147] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.383434][ T5739] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 128.413373][ T5741] loop1: detected capacity change from 0 to 1024 [ 128.427605][ T5147] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1576, setting to 1024 [ 128.455195][ T5743] loop3: detected capacity change from 0 to 64 [ 128.515184][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.567168][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 128.595911][ T26] audit: type=1800 audit(1781856490.478:8): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.546" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 128.622599][ T5147] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 128.643091][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.660720][ T5147] usb 5-1: Product: syz [ 128.665028][ T5147] usb 5-1: Manufacturer: syz [ 128.674930][ T5147] usb 5-1: SerialNumber: syz [ 128.757066][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 128.789758][ T4230] usb 1-1: config 0 interface 0 altsetting 5 has an invalid endpoint with address 0x0, skipping [ 128.808234][ T4230] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 128.825427][ T4230] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 128.836771][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.877731][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.915813][ T5753] loop1: detected capacity change from 0 to 512 [ 128.942434][ T5753] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 128.955395][ T5753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 128.966554][ T5753] System zones: 1-12 [ 128.972352][ T5753] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.981319][ T5753] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.550: invalid indirect mapped block 12 (level 1) [ 128.995233][ T5147] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 129.007506][ T4230] usb 1-1: New USB device found, idVendor=0a07, idProduct=00c8, bcdDevice=4a.e4 [ 129.019248][ T5753] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.550: invalid indirect mapped block 2 (level 2) [ 129.033289][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.042181][ T4230] usb 1-1: Product: syz [ 129.046599][ T5147] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 129.053875][ T4230] usb 1-1: Manufacturer: syz [ 129.058994][ T13] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 129.071487][ T5147] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 129.079969][ T4230] usb 1-1: SerialNumber: syz [ 129.087069][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.099126][ T5756] loop3: detected capacity change from 0 to 512 [ 129.116352][ T4230] usb 1-1: config 0 descriptor?? [ 129.122932][ T5753] EXT4-fs (loop1): 1 truncate cleaned up [ 129.134571][ T13] usb 3-1: Product: syz [ 129.144837][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 129.165903][ T5756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 129.174956][ T5147] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 129.188751][ T13] usb 3-1: Manufacturer: syz [ 129.193478][ T13] usb 3-1: SerialNumber: syz [ 129.204977][ T13] usb 3-1: config 0 descriptor?? [ 129.217220][ T5756] System zones: 1-12 [ 129.223927][ T5756] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.551: Directory hole found for htree index block 0 [ 129.252682][ T5147] usb 5-1: USB disconnect, device number 3 [ 129.313461][ T13] asix: probe of 3-1:0.0 failed with error -22 [ 129.321448][ T5756] EXT4-fs (loop3): Remounting filesystem read-only [ 129.365513][ T5756] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 129.385686][ T5756] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.551: Directory hole found for htree index block 0 [ 129.416571][ T5756] EXT4-fs (loop3): Remounting filesystem read-only [ 129.426765][ T5756] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 129.440543][ T5756] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 129.478676][ T4230] adutux 1-1:0.0: interrupt endpoints not found [ 129.532621][ T4230] usb 1-1: USB disconnect, device number 3 [ 129.563248][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.595220][ T5760] binder: BC_ACQUIRE_RESULT not supported [ 129.601813][ T5760] binder: 5759:5760 ioctl c0306201 200000000100 returned -22 [ 129.662388][ T5762] netlink: 44 bytes leftover after parsing attributes in process `syz.4.554'. [ 129.744186][ T5767] loop1: detected capacity change from 0 to 256 [ 129.756190][ T5765] netlink: 64 bytes leftover after parsing attributes in process `syz.3.553'. [ 129.785807][ T5765] netlink: 18 bytes leftover after parsing attributes in process `syz.3.553'. [ 129.826010][ T5767] FAT-fs (loop1): Directory bread(block 64) failed [ 129.865973][ T5767] FAT-fs (loop1): Directory bread(block 65) failed [ 129.893703][ T5767] FAT-fs (loop1): Directory bread(block 66) failed [ 129.937739][ T5767] FAT-fs (loop1): Directory bread(block 67) failed [ 129.944430][ T5767] FAT-fs (loop1): Directory bread(block 68) failed [ 129.953370][ T5767] FAT-fs (loop1): Directory bread(block 69) failed [ 129.962454][ T5767] FAT-fs (loop1): Directory bread(block 70) failed [ 129.970242][ T5767] FAT-fs (loop1): Directory bread(block 71) failed [ 129.977504][ T5767] FAT-fs (loop1): Directory bread(block 72) failed [ 129.987417][ T5767] FAT-fs (loop1): Directory bread(block 73) failed [ 130.331447][ T5788] loop3: detected capacity change from 0 to 64 [ 130.593985][ T4193] hfs: node 4:3 still has 1 user(s)! [ 131.178980][ T4976] usb 3-1: USB disconnect, device number 5 [ 131.336623][ T5829] EXT4-fs (loop2): 1 truncate cleaned up [ 131.423310][ T5829] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 131.425131][ T5835] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.462186][ T5836] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.627531][ T5827] NILFS (loop3): nilfs_sufile_do_free: segment 7 is already clean [ 131.809038][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 132.029131][ T5817] set_capacity_and_notify: 4 callbacks suppressed [ 132.029147][ T5817] loop0: detected capacity change from 0 to 32768 [ 132.143980][ T5817] JBD2: Ignoring recovery information on journal [ 132.297063][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.306032][ T5817] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 132.497068][ T4230] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 132.557065][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 132.566324][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 132.677268][ T13] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 132.685627][ T13] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 132.747534][ T13] usb 3-1: config 1 has no interface number 1 [ 132.753727][ T13] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 132.787110][ T13] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.803497][ T13] usb 3-1: config 1 interface 105 has no altsetting 0 [ 132.805858][ T5882] loop4: detected capacity change from 0 to 164 [ 132.878658][ T4230] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 132.932840][ T4230] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 132.946024][ T5882] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 132.959930][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966282][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.977395][ T13] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 132.986514][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.017486][ T4230] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 133.026589][ T4230] usb 4-1: config 150 has no interface number 0 [ 133.057066][ T13] usb 3-1: Product: syz [ 133.061301][ T13] usb 3-1: Manufacturer: syz [ 133.065948][ T13] usb 3-1: SerialNumber: syz [ 133.082490][ T4230] usb 4-1: config 150 interface 204 has no altsetting 0 [ 133.117705][ T5850] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.267101][ T4230] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 133.276319][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.316526][ T5897] loop4: detected capacity change from 0 to 24 [ 133.337172][ T4230] usb 4-1: Product: syz [ 133.346884][ T4230] usb 4-1: Manufacturer: syz [ 133.357928][ T13] aqc111: probe of 3-1:1.105 failed with error -22 [ 133.367183][ T4230] usb 4-1: SerialNumber: syz [ 133.438641][ T5900] loop1: detected capacity change from 0 to 512 [ 133.526483][ T5900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.590719][ T5900] EXT4-fs (loop1): 1 truncate cleaned up [ 133.596794][ T5900] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 133.623709][ T4976] usb 3-1: USB disconnect, device number 6 [ 133.663137][ T5900] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.616: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 133.691650][ T4230] usb 4-1: USB disconnect, device number 5 [ 133.771780][ T5900] EXT4-fs (loop1): Remounting filesystem read-only [ 133.809527][ T5900] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 133.831773][ T5900] EXT4-fs (loop1): Remounting filesystem read-only [ 133.877913][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.623'. [ 134.004500][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 134.049043][ T5918] loop0: detected capacity change from 0 to 4096 [ 134.170773][ T5918] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 134.264861][ T5918] ntfs3: loop0: Failed to load $Extend. [ 134.404468][ T5936] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 134.792862][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 134.802563][ T5952] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 134.809687][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.846398][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 134.885939][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 134.923390][ T5958] loop1: detected capacity change from 0 to 2048 [ 135.011240][ T4180] loop1: p1 < > p4 < > [ 135.015786][ T4180] loop1: partition table partially beyond EOD, truncated [ 135.049539][ T4180] loop1: p4 start 42180 is beyond EOD, truncated [ 135.095155][ T5958] loop1: p1 < > p4 < > [ 135.115385][ T5958] loop1: partition table partially beyond EOD, truncated [ 135.140693][ T5958] loop1: p4 start 42180 is beyond EOD, truncated [ 135.167177][ T21] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 135.175038][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 135.272555][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 135.284582][ T5928] loop2: detected capacity change from 0 to 32768 [ 135.322433][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 135.397396][ T5928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.629 (5928) [ 135.446519][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 135.473881][ T5928] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 135.493403][ T5928] BTRFS warning (device loop2): excessive commit interval 3581 [ 135.548244][ T5928] BTRFS info (device loop2): force zlib compression, level 3 [ 135.563051][ T5955] vhci_hcd: connection closed [ 135.564316][ T5928] BTRFS info (device loop2): metadata ratio 107050 [ 135.576638][ T154] vhci_hcd: stop threads [ 135.599185][ T5928] BTRFS info (device loop2): turning on flush-on-commit [ 135.606363][ T5928] BTRFS info (device loop2): max_inline at 4096 [ 135.613124][ T5928] BTRFS info (device loop2): using free space tree [ 135.620114][ T5928] BTRFS info (device loop2): has skinny extents [ 135.627231][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.644332][ T154] vhci_hcd: release socket [ 135.671121][ T154] vhci_hcd: disconnect device [ 135.687170][ T21] usb 39-1: device descriptor read/64, error -71 [ 135.716285][ T5988] loop1: detected capacity change from 0 to 2048 [ 135.757448][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 135.777125][ T23] usb 4-1: can't read configurations, error -71 [ 135.811007][ T4180] loop1: p2 < > p3 < > [ 135.815269][ T4180] loop1: partition table partially beyond EOD, truncated [ 135.845671][ T4180] loop1: p2 start 4278190080 is beyond EOD, truncated [ 135.900793][ T5928] BTRFS info (device loop2): enabling ssd optimizations [ 135.907876][ T21] vhci_hcd: vhci_device speed not set [ 135.917318][ T5988] loop1: p2 < > p3 < > [ 135.921676][ T5988] loop1: partition table partially beyond EOD, truncated [ 135.931954][ T5988] loop1: p2 start 4278190080 is beyond EOD, truncated [ 136.021917][ T6015] netlink: 56 bytes leftover after parsing attributes in process `syz.1.658'. [ 136.222202][ T6021] loop4: detected capacity change from 0 to 1024 [ 136.230869][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 136.272250][ T6019] loop3: detected capacity change from 0 to 4096 [ 136.429513][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 136.534151][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 136.568482][ T6019] ntfs: volume version 3.1. [ 136.771010][ T6027] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.788887][ T6027] hpfs: filesystem error: improperly stopped [ 136.794961][ T6027] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 136.815204][ T6027] hpfs: You really don't want any checks? You are crazy... [ 136.858008][ T5989] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.654 (5989) [ 136.877301][ T6027] hpfs: hpfs_map_sector(): read error [ 136.882761][ T6027] hpfs: code page support is disabled [ 136.907277][ T6027] hpfs: hpfs_map_4sectors(): unaligned read [ 136.935267][ T6027] hpfs: hpfs_map_4sectors(): unaligned read [ 136.962957][ T5989] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 136.997112][ T6027] hpfs: filesystem error: unable to find root dir [ 137.015928][ T5989] BTRFS info (device loop0): using free space tree [ 137.087172][ T5989] BTRFS info (device loop0): has skinny extents [ 137.489958][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 137.507886][ T6058] set_capacity_and_notify: 2 callbacks suppressed [ 137.507902][ T6058] loop2: detected capacity change from 0 to 2048 [ 137.522250][ T6061] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 137.539712][ T5989] BTRFS info (device loop0): enabling ssd optimizations [ 137.657782][ T6058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.760065][ T6058] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.061834][ T4493] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop0 scanned by udevd (4493) [ 138.165701][ T6086] loop1: detected capacity change from 0 to 64 [ 138.325193][ T6093] netlink: 'syz.3.683': attribute type 5 has an invalid length. [ 139.206680][ T6126] loop1: detected capacity change from 0 to 4096 [ 139.336830][ T6126] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 139.393930][ T6126] ntfs3: loop1: Failed to load $MFT. [ 139.566906][ T6143] loop4: detected capacity change from 0 to 2048 [ 139.620632][ T6142] loop0: detected capacity change from 0 to 2048 [ 139.625825][ T6145] loop1: detected capacity change from 0 to 1024 [ 139.673290][ T6142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.697036][ T6145] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,barrier,barrier=0x0000000000000005,mb_optimize_scan=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 139.810909][ T6116] loop3: detected capacity change from 0 to 40427 [ 139.818595][ T6143] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 139.827506][ T6143] System zones: 0-7 [ 139.838595][ T6143] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 139.923254][ T6116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.248248][ T6116] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 140.261802][ T6160] loop1: detected capacity change from 0 to 64 [ 140.276648][ T6116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.492019][ T6153] loop2: detected capacity change from 0 to 32768 [ 140.726249][ T6153] XFS (loop2): Mounting V5 Filesystem [ 140.813623][ T6153] XFS (loop2): Ending clean mount [ 140.877123][ T5148] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.903752][ T6190] loop0: detected capacity change from 0 to 256 [ 141.003593][ T4199] XFS (loop2): Unmounting Filesystem [ 141.117124][ T5148] usb 5-1: Using ep0 maxpacket: 16 [ 141.265569][ T5148] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.280831][ T5148] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 141.301141][ T5148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.318022][ T5148] usb 5-1: config 0 descriptor?? [ 141.393702][ T6193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'. [ 141.584449][ T6195] tipc: Started in network mode [ 141.608623][ T6195] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 141.634456][ T6195] tipc: Enabling of bearer rejected, failed to enable media [ 141.792176][ T5148] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x2 [ 141.832899][ T5148] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x6 [ 141.841337][ T5148] hid-rmi 0003:06CB:81A7.0006: ignoring exceeding usage max [ 141.868338][ T5148] hid-rmi 0003:06CB:81A7.0006: hidraw0: USB HID v0.81 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 142.004564][ T4230] usb 5-1: USB disconnect, device number 4 [ 142.237396][ T6206] fido_id[6206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 142.809494][ T6240] set_capacity_and_notify: 1 callbacks suppressed [ 142.809512][ T6240] loop1: detected capacity change from 0 to 2048 [ 142.966826][ T6240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.127618][ T6267] process 'syz.3.755' launched '/dev/fd/3' with NULL argv: empty string added [ 143.289529][ T6269] loop1: detected capacity change from 0 to 2048 [ 143.362162][ T6269] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 143.466161][ T6276] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.484225][ T6269] attempt to access beyond end of device [ 143.484225][ T6269] loop1: rw=524288, want=33554432, limit=2048 [ 143.891296][ T6253] loop4: detected capacity change from 0 to 32768 [ 143.983842][ T6253] XFS (loop4): Mounting V5 Filesystem [ 144.038402][ T6273] loop2: detected capacity change from 0 to 32768 [ 144.161649][ T6253] XFS (loop4): Ending clean mount [ 144.464376][ T4201] XFS (loop4): Unmounting Filesystem [ 144.530275][ T6313] loop0: detected capacity change from 0 to 256 [ 144.821194][ T6284] loop3: detected capacity change from 0 to 32768 [ 144.965025][ T6329] loop2: detected capacity change from 0 to 512 [ 145.093107][ T6329] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 145.122859][ T6329] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 145.170574][ T6329] EXT4-fs (loop2): 1 truncate cleaned up [ 145.176472][ T6329] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 145.379451][ T6337] loop0: detected capacity change from 0 to 256 [ 145.497415][ T6329] EXT4-fs (loop2): can't change dax mount option while remounting [ 145.506550][ T6337] FAT-fs (loop0): Directory bread(block 64) failed [ 145.557562][ T6337] FAT-fs (loop0): Directory bread(block 65) failed [ 145.564261][ T6337] FAT-fs (loop0): Directory bread(block 66) failed [ 145.623839][ T6337] FAT-fs (loop0): Directory bread(block 67) failed [ 145.648205][ T6337] FAT-fs (loop0): Directory bread(block 68) failed [ 145.682635][ T6337] FAT-fs (loop0): Directory bread(block 69) failed [ 145.708488][ T6337] FAT-fs (loop0): Directory bread(block 70) failed [ 145.715519][ T6337] FAT-fs (loop0): Directory bread(block 71) failed [ 145.807431][ T6337] FAT-fs (loop0): Directory bread(block 72) failed [ 145.814075][ T6337] FAT-fs (loop0): Directory bread(block 73) failed [ 145.982227][ T6327] loop1: detected capacity change from 0 to 32768 [ 146.089846][ T6355] loop3: detected capacity change from 0 to 64 [ 146.144334][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 146.177133][ T5147] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.321406][ T4230] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 146.452480][ T5147] usb 5-1: Using ep0 maxpacket: 32 [ 146.542850][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.617390][ T5147] usb 5-1: unable to get BOS descriptor or descriptor too short [ 146.707374][ T4230] usb 3-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 146.718674][ T5147] usb 5-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 146.736555][ T4230] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 146.751028][ T6379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.766578][ T6379] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.778063][ T4230] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 146.797235][ T4230] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.814454][ T4230] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 146.837084][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.848981][ T4230] usb 3-1: config 0 descriptor?? [ 146.867858][ T6353] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 146.907412][ T5147] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 146.916767][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.925453][ T5147] usb 5-1: Product: syz [ 146.930099][ T5147] usb 5-1: Manufacturer: syz [ 146.938710][ T5147] usb 5-1: SerialNumber: syz [ 146.967336][ T23] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.975906][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.047129][ T5148] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.092821][ T23] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.102239][ T23] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 147.117243][ T23] usb 2-1: Manufacturer: syz [ 147.139021][ T23] usb 2-1: config 0 descriptor?? [ 147.196850][ T6349] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 147.251922][ T6349] device bond1 entered promiscuous mode [ 147.270103][ T23] rc_core: IR keymap rc-hauppauge not found [ 147.272256][ T6349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.276418][ T23] Registered IR keymap rc-empty [ 147.291662][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 147.297634][ T5148] usb 4-1: Using ep0 maxpacket: 32 [ 147.311603][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 147.332671][ T4230] magicmouse 0003:05AC:0265.0007: ignoring exceeding usage max [ 147.371867][ T4230] magicmouse 0003:05AC:0265.0007: hidraw0: USB HID v0.8c Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 147.456365][ T5147] comedi comedi5: Wrong number of endpoints [ 147.464149][ T5148] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 147.481754][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.503770][ T5147] dt9812 5-1:244.0: driver 'dt9812' failed to auto-configure device. [ 147.527157][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.568237][ T5147] usb 5-1: USB disconnect, device number 5 [ 147.578485][ T5148] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 147.613604][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.630619][ T5148] usb 4-1: config 0 descriptor?? [ 147.653283][ T4229] usb 3-1: USB disconnect, device number 7 [ 147.686866][ T6397] fido_id[6397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 147.852697][ T6404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.862378][ T5147] usb 2-1: USB disconnect, device number 4 [ 148.121848][ T5148] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 148.327338][ T5148] logitech 0003:046D:C29C.0008: no inputs found [ 148.348595][ T5148] usb 4-1: USB disconnect, device number 8 [ 148.462818][ T6421] set_capacity_and_notify: 2 callbacks suppressed [ 148.462836][ T6421] loop4: detected capacity change from 0 to 128 [ 148.542041][ T6421] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 148.590807][ T6421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.637380][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 148.677380][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 148.686330][ T6427] netlink: 'syz.2.822': attribute type 14 has an invalid length. [ 148.695550][ T6425] fido_id[6425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 148.787446][ T6427] netlink: 'syz.2.822': attribute type 12 has an invalid length. [ 148.805714][ T6429] loop1: detected capacity change from 0 to 512 [ 148.912756][ T6429] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 148.942133][ T6429] EXT4-fs (loop1): invalid journal inode [ 148.976282][ T6429] EXT4-fs (loop1): can't get journal size [ 149.156475][ T6429] EXT4-fs (loop1): 1 truncate cleaned up [ 149.195686][ T6444] vivid-006: disconnect [ 149.215129][ T6429] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 149.233830][ T6443] vivid-006: reconnect [ 149.396371][ T6410] loop0: detected capacity change from 0 to 40427 [ 149.415499][ T6450] loop3: detected capacity change from 0 to 1024 [ 149.537568][ T6454] loop2: detected capacity change from 0 to 1024 [ 149.580894][ T6410] F2FS-fs (loop0): Zoned block device path is missing [ 149.599313][ T6410] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 149.697216][ T6452] loop4: detected capacity change from 0 to 4096 [ 149.728862][ T6410] F2FS-fs (loop0): invalid crc value [ 149.792192][ T6410] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 149.909258][ T6459] loop3: detected capacity change from 0 to 4096 [ 149.942545][ T6452] ntfs: (device loop4): parse_options(): NLS character set is not found. Using previous one default. [ 149.961504][ T6468] usb usb7: usbfs: process 6468 (syz.1.839) did not claim interface 4 before use [ 149.981532][ T6452] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 150.037155][ T6459] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 150.173040][ T6459] EXT4-fs (loop3): Cannot change quota options when quota turned on [ 150.198844][ T6410] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 150.216259][ T6410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.249472][ T6452] ntfs: volume version 3.1. [ 150.340264][ T6452] ntfs: (device loop4): ntfs_readdir(): Directory index record with vcn 0x1 is corrupt. Corrupt inode 0x5. Run chkdsk. [ 150.424436][ T4188] attempt to access beyond end of device [ 150.424436][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 150.705730][ T6494] loop3: detected capacity change from 0 to 24 [ 151.355892][ T6509] loop0: detected capacity change from 0 to 164 [ 151.608636][ T6514] loop0: detected capacity change from 0 to 128 [ 151.867159][ T4234] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 152.050591][ T6518] program syz.0.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.193249][ T6502] XFS (loop3): Mounting V5 Filesystem [ 152.307323][ T4234] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 152.316733][ T4234] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 152.325814][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.336981][ T4234] usb 3-1: config 0 has no interface number 0 [ 152.343613][ T4234] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 152.354722][ T4234] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 152.369539][ T4234] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 152.379557][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.403164][ T4234] usb 3-1: config 0 descriptor?? [ 152.468921][ T6502] XFS (loop3): Ending clean mount [ 152.494069][ T4234] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 152.540472][ T6535] EXT4-fs (loop0): Ignoring removed nobh option [ 152.558272][ T6502] XFS (loop3): Quotacheck needed: Please wait. [ 152.646655][ T6535] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 152.685545][ T6502] XFS (loop3): Quotacheck: Done. [ 152.781832][ T5147] usb 3-1: USB disconnect, device number 8 [ 152.787922][ T6535] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.799624][ T9] usb 3-1: Failed to submit usb control message: -71 [ 152.817854][ T9] usb 3-1: unable to send the bmi data to the device: -71 [ 152.825516][ T9] usb 3-1: unable to get target info from device [ 152.877248][ T9] usb 3-1: could not get target info (-71) [ 152.916388][ T9] usb 3-1: could not probe fw (-71) [ 152.979941][ T4193] XFS (loop3): Unmounting Filesystem [ 153.532154][ T6555] set_capacity_and_notify: 6 callbacks suppressed [ 153.532172][ T6555] loop0: detected capacity change from 0 to 512 [ 153.612465][ T6557] sp0: Synchronizing with TNC [ 153.744811][ T6565] loop2: detected capacity change from 0 to 8 [ 153.771728][ T6555] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000005,errors=remount-ro,. Quota mode: writeback. [ 153.827693][ T6555] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.897813][ T6565] SQUASHFS error: zstd decompression error: 2 [ 153.907314][ T6565] SQUASHFS error: zstd decompression failed, data probably corrupt [ 153.916483][ T6565] SQUASHFS error: Failed to read block 0x60: -5 [ 153.933511][ T6565] SQUASHFS error: zstd decompression error: 2 [ 153.941573][ T6555] EXT4-fs error (device loop0): ext4_get_inode_usage:835: inode #12: comm syz.0.873: corrupted xattr block 6 [ 153.944376][ T6565] SQUASHFS error: zstd decompression failed, data probably corrupt [ 153.983373][ T6555] EXT4-fs (loop0): Remounting filesystem read-only [ 154.017381][ T6565] SQUASHFS error: Failed to read block 0x60: -5 [ 154.435937][ T6585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.510196][ T26] audit: type=1326 audit(1781856516.398:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.886" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b06a2e59 code=0x0 [ 154.533996][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.717079][ T6572] loop1: detected capacity change from 0 to 32768 [ 154.791619][ T6572] (syz.1.879,6572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.815844][ T6572] (syz.1.879,6572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.853938][ T6572] JBD2: Ignoring recovery information on journal [ 154.915374][ T6572] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 155.065978][ T26] audit: type=1326 audit(1781856516.948:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.094576][ T6581] loop0: detected capacity change from 0 to 32768 [ 155.112748][ T26] audit: type=1326 audit(1781856516.988:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.153078][ T26] audit: type=1326 audit(1781856516.988:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.183738][ T26] audit: type=1326 audit(1781856516.988:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.219340][ T26] audit: type=1326 audit(1781856516.988:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.252642][ T26] audit: type=1326 audit(1781856516.988:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.283686][ T26] audit: type=1326 audit(1781856516.988:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.340767][ T26] audit: type=1326 audit(1781856516.988:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.364984][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.405423][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 155.454208][ T6581] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 155.467432][ T26] audit: type=1326 audit(1781856516.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.492095][ T26] audit: type=1326 audit(1781856516.988:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.4.892" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db0e1ce59 code=0x50000 [ 155.681763][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 155.703506][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 155.787207][ T4230] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.147937][ T4230] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 156.177891][ T4230] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 156.190154][ T6625] loop3: detected capacity change from 0 to 512 [ 156.209025][ T4230] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 156.239237][ T4230] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 156.275242][ T4230] usb 3-1: config 220 has no interface number 2 [ 156.295713][ T4230] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 156.330064][ T6625] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 156.353538][ T6625] UDF-fs: Scanning with blocksize 512 failed [ 156.356260][ T4230] usb 3-1: config 220 interface 0 has no altsetting 0 [ 156.397023][ T4230] usb 3-1: config 220 interface 76 has no altsetting 0 [ 156.424028][ T4230] usb 3-1: config 220 interface 1 has no altsetting 0 [ 156.428643][ T6625] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 156.443741][ T6625] UDF-fs: Scanning with blocksize 1024 failed [ 156.501585][ T6625] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 156.525697][ T6625] UDF-fs: Scanning with blocksize 2048 failed [ 156.565439][ T6625] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 156.602327][ T6625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.627522][ T4230] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 156.652871][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.683229][ T4230] usb 3-1: Product: syz [ 156.702824][ T4230] usb 3-1: Manufacturer: syz [ 156.729508][ T4230] usb 3-1: SerialNumber: syz [ 157.037145][ T6637] loop3: detected capacity change from 0 to 256 [ 157.117491][ T4230] usb 3-1: selecting invalid altsetting 0 [ 157.127861][ T4230] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 157.150103][ T4230] usb 3-1: No valid video chain found. [ 157.259016][ T4230] usb 3-1: selecting invalid altsetting 0 [ 157.272018][ T6631] loop0: detected capacity change from 0 to 32768 [ 157.282501][ T4230] usbtest: probe of 3-1:220.1 failed with error -22 [ 157.325125][ T4230] usb 3-1: USB disconnect, device number 9 [ 157.463218][ T6631] XFS (loop0): Mounting V5 Filesystem [ 157.618777][ T6631] XFS (loop0): Ending clean mount [ 157.645994][ T6631] XFS (loop0): Quotacheck needed: Please wait. [ 157.768105][ T6652] loop3: detected capacity change from 0 to 4096 [ 157.776894][ T6631] XFS (loop0): Quotacheck: Done. [ 157.878606][ T4188] XFS (loop0): Unmounting Filesystem [ 157.919617][ T6657] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.073160][ T6652] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 158.424493][ T6671] loop1: detected capacity change from 0 to 1024 [ 158.499165][ T6671] EXT4-fs (loop1): Ignoring removed bh option [ 158.624329][ T6671] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 158.750241][ T6690] netlink: 'syz.4.929': attribute type 29 has an invalid length. [ 158.758712][ T6690] netlink: 'syz.4.929': attribute type 29 has an invalid length. [ 158.768966][ T6690] netlink: 'syz.4.929': attribute type 29 has an invalid length. [ 158.912091][ T6694] loop0: detected capacity change from 0 to 64 [ 159.295613][ T6702] loop1: detected capacity change from 0 to 64 [ 159.558006][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 159.755893][ T6677] loop3: detected capacity change from 0 to 32768 [ 159.827434][ T6677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.924 (6677) [ 159.863371][ T6677] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 159.895839][ T6677] BTRFS info (device loop3): setting nodatasum [ 159.923095][ T6677] BTRFS info (device loop3): force zlib compression, level 3 [ 159.961889][ T6677] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 160.017084][ T6677] BTRFS info (device loop3): use lzo compression, level 0 [ 160.046619][ T6677] BTRFS info (device loop3): turning on flush-on-commit [ 160.077098][ T6677] BTRFS info (device loop3): enabling auto defrag [ 160.083677][ T6677] BTRFS info (device loop3): max_inline at 4096 [ 160.116152][ T6677] BTRFS info (device loop3): using free space tree [ 160.117392][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.132131][ T6724] netlink: 'syz.4.943': attribute type 2 has an invalid length. [ 160.147157][ T6677] BTRFS info (device loop3): has skinny extents [ 160.175976][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.943'. [ 160.449975][ T6717] loop2: detected capacity change from 0 to 32768 [ 160.480873][ T6677] BTRFS info (device loop3): enabling ssd optimizations [ 160.519062][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.607313][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.672831][ T23] usb 2-1: config 0 descriptor?? [ 160.739452][ T23] cp210x 2-1:0.0: cp210x converter detected [ 161.155161][ T6768] raw_sendmsg: syz.0.958 forgot to set AF_INET. Fix it! [ 161.171628][ T6770] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 161.182181][ T6770] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 161.430229][ T23] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 161.450567][ T23] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 161.503189][ T6780] device wlan0 entered promiscuous mode [ 161.512967][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 161.548014][ T23] usb 2-1: USB disconnect, device number 5 [ 161.567661][ T6780] batman_adv: batadv0: Adding interface: wlan0 [ 161.574069][ T6780] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.604956][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.627889][ T23] cp210x 2-1:0.0: device disconnected [ 161.709095][ T6780] batman_adv: batadv0: Interface activated: wlan0 [ 162.037702][ T6804] loop0: detected capacity change from 0 to 1024 [ 162.102364][ T6804] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 162.148379][ T4593] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.359473][ T6819] loop0: detected capacity change from 0 to 256 [ 162.402823][ T6824] loop2: detected capacity change from 0 to 256 [ 162.437188][ T4593] usb 4-1: Using ep0 maxpacket: 16 [ 162.478383][ T6819] FAT-fs (loop0): Directory bread(block 64) failed [ 162.504926][ T6819] FAT-fs (loop0): Directory bread(block 65) failed [ 162.517636][ T6819] FAT-fs (loop0): Directory bread(block 66) failed [ 162.525298][ T6819] FAT-fs (loop0): Directory bread(block 67) failed [ 162.533543][ T6819] FAT-fs (loop0): Directory bread(block 68) failed [ 162.552328][ T6819] FAT-fs (loop0): Directory bread(block 69) failed [ 162.568212][ T6819] FAT-fs (loop0): Directory bread(block 70) failed [ 162.588256][ T6819] FAT-fs (loop0): Directory bread(block 71) failed [ 162.623018][ T6824] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 162.645632][ T6819] FAT-fs (loop0): Directory bread(block 72) failed [ 162.666756][ T6819] FAT-fs (loop0): Directory bread(block 73) failed [ 162.768905][ T4593] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 162.788943][ T4593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.843517][ T4593] usb 4-1: Product: syz [ 162.861935][ T4593] usb 4-1: Manufacturer: syz [ 162.882182][ T4593] usb 4-1: SerialNumber: syz [ 162.896541][ T4593] usb 4-1: config 0 descriptor?? [ 162.958976][ T4593] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 163.242702][ T6846] loop0: detected capacity change from 0 to 8 [ 163.313321][ T6833] loop4: detected capacity change from 0 to 32768 [ 163.334946][ T6846] SQUASHFS error: lzo decompression failed, data probably corrupt [ 163.356914][ T6846] SQUASHFS error: Failed to read block 0x91: -5 [ 163.376812][ T6846] SQUASHFS error: Unable to read metadata cache entry [8f] [ 163.384727][ T4593] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 163.395310][ T6833] JBD2: Ignoring recovery information on journal [ 163.407536][ T4593] visor: probe of 4-1:0.0 failed with error -5 [ 163.417262][ T6846] SQUASHFS error: Unable to read inode 0x11f [ 163.515700][ T6833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.603856][ T6840] loop2: detected capacity change from 0 to 32768 [ 163.619276][ T4592] usb 4-1: USB disconnect, device number 9 [ 163.653771][ T4201] ocfs2: Unmounting device (7,4) on (node local) [ 163.664479][ T6840] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.990 (6840) [ 163.737842][ T6840] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 163.764706][ T6840] BTRFS info (device loop2): enabling disk space caching [ 163.830383][ T6840] BTRFS info (device loop2): force clearing of disk cache [ 163.844435][ T6840] BTRFS info (device loop2): disk space caching is enabled [ 163.877079][ T6840] BTRFS info (device loop2): has skinny extents [ 164.119427][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 164.137197][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.147127][ T6840] BTRFS info (device loop2): enabling ssd optimizations [ 164.181703][ T6882] loop0: detected capacity change from 0 to 128 [ 164.191341][ T6879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1000'. [ 164.206219][ T6840] BTRFS info (device loop2): clearing free space tree [ 164.223149][ T6882] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 164.248536][ T6840] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.333102][ T6840] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.355186][ T6882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.387237][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 164.432354][ T6884] loop4: detected capacity change from 0 to 2048 [ 164.507533][ T4230] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.530760][ T6884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.546790][ T4230] usb 2-1: config 0 has no interface number 0 [ 164.579034][ T4230] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 164.610030][ T4230] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.625847][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 164.640892][ T4230] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 164.667321][ T4230] usb 2-1: config 0 interface 196 has no altsetting 0 [ 164.837249][ T4230] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 164.867772][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.876096][ T4230] usb 2-1: Product: syz [ 164.901473][ T4230] usb 2-1: Manufacturer: syz [ 164.906533][ T4230] usb 2-1: SerialNumber: syz [ 164.970506][ T4230] usb 2-1: config 0 descriptor?? [ 165.047374][ T6854] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.124584][ T6896] loop4: detected capacity change from 0 to 32768 [ 165.187830][ T6896] attempt to access beyond end of device [ 165.187830][ T6896] loop4: rw=0, want=34359738368, limit=32768 [ 165.200552][ T6896] metapage_read_end_io: I/O error [ 165.205796][ T6896] read_mapping_page failed! [ 165.210519][ T6896] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 165.217274][ T6896] Mount JFS Failure: -5 [ 165.221474][ T6896] jfs_mount failed w/return code = -5 [ 165.558829][ T4230] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 165.594518][ T4230] ipheth: probe of 2-1:0.196 failed with error -22 [ 165.797108][ T4592] usb 2-1: USB disconnect, device number 6 [ 166.019486][ T6897] loop0: detected capacity change from 0 to 32768 [ 166.196862][ T6897] XFS (loop0): Mounting V5 Filesystem [ 166.226027][ T6903] loop4: detected capacity change from 0 to 40427 [ 166.300144][ T6903] F2FS-fs (loop4): invalid crc value [ 166.386027][ T6897] XFS (loop0): Ending clean mount [ 166.417778][ T6903] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.434384][ T23] XFS (loop0): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 166.498703][ T6936] loop1: detected capacity change from 0 to 1024 [ 166.534548][ T23] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 166.572129][ T23] XFS (loop0): Unmount and run xfs_repair [ 166.581490][ T6936] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 166.590824][ T23] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 166.590898][ T23] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 166.608121][ T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 166.617167][ T23] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 166.626197][ T23] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 166.635339][ T23] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 166.644842][ T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 166.653959][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 166.663670][ T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 166.673793][ T6897] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 166.689072][ T6897] XFS (loop0): Failed to initialize disk quotas. [ 166.738479][ T6936] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 166.746220][ T6936] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 166.761237][ T6903] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.781475][ T4188] XFS (loop0): Unmounting Filesystem [ 166.817720][ T6936] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 166.852978][ T6945] loop3: detected capacity change from 0 to 256 [ 167.052266][ T6945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.738176][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 167.752972][ T6958] loop4: detected capacity change from 0 to 512 [ 167.797711][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 167.827349][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 167.868106][ T6958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.888911][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 167.913480][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 167.941061][ T6958] EXT4-fs (loop4): 1 truncate cleaned up [ 167.955818][ T6949] loop1: detected capacity change from 0 to 32768 [ 167.969137][ T6958] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 168.001371][ T26] kauditd_printk_skb: 2250 callbacks suppressed [ 168.001388][ T26] audit: type=1800 audit(1781856529.888:2270): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1025" name="file1" dev="loop3" ino=1048665 res=0 errno=0 [ 168.081081][ T6947] loop2: detected capacity change from 0 to 40427 [ 168.143926][ T6947] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 168.146500][ T6949] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 168.146500][ T6949] [ 168.161531][ T6947] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 168.216286][ T6947] F2FS-fs (loop2): invalid crc value [ 168.276833][ T6949] ERROR: (device loop1): remounting filesystem as read-only [ 168.284923][ T6961] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 168.313258][ T6949] ERROR: (device loop1): duplicateIXtree: [ 168.313258][ T6949] [ 168.341973][ T6947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.369989][ T6961] hpfs: filesystem error: improperly stopped [ 168.376376][ T6961] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 168.475251][ T6961] hpfs: You really don't want any checks? You are crazy... [ 168.506276][ T6961] hpfs: hpfs_map_sector(): read error [ 168.540294][ T6961] hpfs: code page support is disabled [ 168.569481][ T6961] hpfs: hpfs_map_4sectors(): unaligned read [ 168.591135][ T6961] hpfs: hpfs_map_4sectors(): unaligned read [ 168.608084][ T6961] hpfs: filesystem error: unable to find root dir [ 168.635466][ T6947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.699463][ T6967] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1034: dx entry: limit 0 != root limit 125 [ 168.712535][ T6967] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1034: Corrupt directory, running e2fsck is recommended [ 168.736817][ T6967] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 168.768404][ T6967] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1034: corrupted in-inode xattr [ 168.802120][ T6967] EXT4-fs (loop3): Remounting filesystem read-only [ 168.825999][ T6967] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1034: couldn't read orphan inode 15 (err -117) [ 168.862082][ T6967] EXT4-fs (loop3): Remounting filesystem read-only [ 168.868904][ T6967] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc=0x000000000000000e,abort,user_xattr,user_xattr,grpjquota=.max_batch_time=0x0000000000000001,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 168.901116][ T4199] attempt to access beyond end of device [ 168.901116][ T4199] loop2: rw=2049, want=45104, limit=40427 [ 169.230538][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.280446][ T6981] set_capacity_and_notify: 3 callbacks suppressed [ 169.280472][ T6981] loop3: detected capacity change from 0 to 256 [ 169.318870][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.392619][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.440678][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.465177][ T6981] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 169.501169][ T6985] loop1: detected capacity change from 0 to 64 [ 169.519886][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.551987][ T6975] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 169.582614][ T6975] UDF-fs: Scanning with blocksize 512 failed [ 169.625406][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.727048][ T6975] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 169.795560][ T6975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.835034][ T6991] ax25_connect(): syz.4.1046 uses autobind, please contact jreuter@yaina.de [ 169.976496][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 170.174676][ T7008] loop1: detected capacity change from 0 to 128 [ 170.206541][ T7010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1054'. [ 170.225067][ T7010] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1054'. [ 170.234928][ T7010] netlink: 'syz.3.1054': attribute type 6 has an invalid length. [ 170.245617][ T7010] netlink: 'syz.3.1054': attribute type 5 has an invalid length. [ 170.271609][ T7014] loop0: detected capacity change from 0 to 512 [ 170.290812][ T7008] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 170.302987][ T7010] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1054'. [ 170.312596][ T7008] FAT-fs (loop1): Filesystem has been set read-only [ 170.330190][ T7016] loop4: detected capacity change from 0 to 22 [ 170.352141][ T7013] device batadv0 entered promiscuous mode [ 170.373641][ T7014] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.385346][ T7013] device macvtap1 entered promiscuous mode [ 170.408153][ T7016] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 170.427677][ T7013] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 170.454847][ T7014] EXT4-fs (loop0): 1 truncate cleaned up [ 170.468968][ T6028] Bluetooth: hci4: command 0x0405 tx timeout [ 170.541841][ T7014] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 170.556789][ T7016] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 170.573612][ T7019] loop1: detected capacity change from 0 to 8192 [ 170.650930][ T7019] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 170.712214][ T7019] REISERFS (device loop1): using ordered data mode [ 170.768385][ T7029] loop2: detected capacity change from 0 to 1024 [ 170.771836][ T7019] reiserfs: using flush barriers [ 170.873066][ T7029] hfsplus: walked past end of dir [ 170.877596][ T7019] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 170.973740][ T7019] REISERFS (device loop1): checking transaction log (loop1) [ 171.090419][ T7019] REISERFS (device loop1): Using r5 hash to sort names [ 171.091555][ T7019] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 171.091633][ T7019] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 171.604089][ T7051] loop0: detected capacity change from 0 to 2048 [ 171.716902][ T7047] loop3: detected capacity change from 0 to 8192 [ 171.757565][ T7051] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.868513][ T7059] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.023822][ T7061] loop1: detected capacity change from 0 to 4096 [ 172.217079][ T7068] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.229014][ T7061] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 172.287899][ T7061] NILFS (loop1): mounting fs with errors [ 172.743167][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 173.024034][ T7095] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.045554][ T7095] hpfs: filesystem error: improperly stopped [ 173.075594][ T7095] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.133138][ T7058] attempt to access beyond end of device [ 173.133138][ T7058] loop2: rw=1, want=4680040, limit=32768 [ 173.157104][ T7095] hpfs: You really don't want any checks? You are crazy... [ 173.187551][ T7095] hpfs: hpfs_map_sector(): read error [ 173.193045][ T7095] hpfs: code page support is disabled [ 173.214270][ T7058] metapage_write_end_io: I/O error [ 173.234898][ T7095] hpfs: hpfs_map_4sectors(): unaligned read [ 173.258960][ T7095] hpfs: hpfs_map_4sectors(): unaligned read [ 173.265363][ T7058] blkno = 8ed2c, nblocks = 1 [ 173.285692][ T7058] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 173.285692][ T7058] [ 173.298245][ T7095] hpfs: filesystem error: unable to find root dir [ 173.348947][ T7058] ERROR: (device loop2): remounting filesystem as read-only [ 173.412678][ T7058] UFO tlock:0xffffc90002862048 [ 173.461686][ T7058] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 173.461686][ T7058] [ 173.516474][ T7058] jfs_lookup: dtSearch returned -5 [ 173.647636][ T276] blkno = 8ed2c, nblocks = 4 [ 173.652550][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 173.652550][ T276] [ 173.681297][ T4199] attempt to access beyond end of device [ 173.681297][ T4199] loop2: rw=1, want=4680040, limit=32768 [ 173.727400][ T4199] metapage_write_end_io: I/O error [ 173.733001][ T4199] JFS: metapage_get_blocks failed [ 173.755925][ T4199] JFS: metapage_get_blocks failed [ 173.791718][ T4199] JFS: metapage_get_blocks failed [ 173.812695][ T4199] JFS: metapage_get_blocks failed [ 174.115090][ T7130] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 174.343308][ T7132] set_capacity_and_notify: 4 callbacks suppressed [ 174.343323][ T7132] loop3: detected capacity change from 0 to 256 [ 174.502287][ T7132] FAT-fs (loop3): Directory bread(block 64) failed [ 174.515595][ T7132] FAT-fs (loop3): Directory bread(block 65) failed [ 174.537159][ T7132] FAT-fs (loop3): Directory bread(block 66) failed [ 174.576499][ T7132] FAT-fs (loop3): Directory bread(block 67) failed [ 174.587158][ T7132] FAT-fs (loop3): Directory bread(block 68) failed [ 174.607195][ T7132] FAT-fs (loop3): Directory bread(block 69) failed [ 174.613913][ T7132] FAT-fs (loop3): Directory bread(block 70) failed [ 174.638736][ T7132] FAT-fs (loop3): Directory bread(block 71) failed [ 174.658498][ T7132] FAT-fs (loop3): Directory bread(block 72) failed [ 174.707933][ T7132] FAT-fs (loop3): Directory bread(block 73) failed [ 175.090051][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 175.125028][ T7164] vivid-003: disconnect [ 175.173675][ T7161] vivid-003: reconnect [ 175.267166][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.557109][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 175.592934][ T7183] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1134'. [ 175.664187][ T7183] unsupported nlmsg_type 40 [ 175.717209][ T23] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 175.907492][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.927796][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.944618][ T7200] loop1: detected capacity change from 0 to 512 [ 175.955425][ T23] usb 1-1: Product: syz [ 175.966996][ T23] usb 1-1: Manufacturer: syz [ 175.977135][ T23] usb 1-1: SerialNumber: syz [ 175.990079][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 175.997931][ T7202] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.027178][ T7200] EXT4-fs (loop1): Ignoring removed orlov option [ 176.053085][ T7200] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 176.134889][ T7200] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 176.154591][ T7200] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1142: attempt to clear invalid blocks 2 len 1 [ 176.213367][ T7200] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 176.234646][ T7209] loop3: detected capacity change from 0 to 512 [ 176.296811][ T7200] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1142: invalid indirect mapped block 1819239214 (level 0) [ 176.312501][ T7209] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1146: corrupted inode contents [ 176.325217][ T7200] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1142: invalid indirect mapped block 1819239214 (level 1) [ 176.329496][ T7209] EXT4-fs (loop3): Remounting filesystem read-only [ 176.346535][ T7209] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 176.371295][ T7209] EXT4-fs (loop3): Remounting filesystem read-only [ 176.379687][ T7209] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1146: corrupted inode contents [ 176.385028][ T7187] loop2: detected capacity change from 0 to 32768 [ 176.392442][ T7200] EXT4-fs (loop1): 1 truncate cleaned up [ 176.400843][ T7209] EXT4-fs (loop3): Remounting filesystem read-only [ 176.406502][ T7200] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,init_itable=0x0000000000000003,mblk_io_submit,barrier=0x0000000000000007,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 176.432638][ T7209] EXT4-fs error (device loop3): ext4_evict_inode:332: inode #15: comm syz.3.1146: mark_inode_dirty error [ 176.473377][ T7187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1136 (7187) [ 176.488706][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 176.495166][ T23] r8152-cfgselector 1-1: bad CDC descriptors [ 176.513450][ T7209] EXT4-fs (loop3): Remounting filesystem read-only [ 176.537938][ T7209] EXT4-fs (loop3): 1 orphan inode deleted [ 176.549462][ T7187] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 176.563226][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 176.585239][ T7209] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,debug_want_extra_isize=0x0000000000000004,discard,nobarrier,. Quota mode: none. [ 176.612736][ T23] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 176.615603][ T7187] BTRFS info (device loop2): setting nodatasum [ 176.650820][ T7187] BTRFS info (device loop2): force zlib compression, level 3 [ 176.707554][ T7187] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 176.760777][ T7187] BTRFS info (device loop2): use lzo compression, level 0 [ 176.787846][ T7187] BTRFS info (device loop2): turning on flush-on-commit [ 176.826288][ T7187] BTRFS info (device loop2): enabling auto defrag [ 176.851353][ T7187] BTRFS info (device loop2): max_inline at 4096 [ 176.879198][ T7187] BTRFS info (device loop2): using free space tree [ 176.903572][ T7187] BTRFS info (device loop2): has skinny extents [ 177.203049][ T7187] BTRFS info (device loop2): enabling ssd optimizations [ 177.247181][ T5148] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.267437][ T5146] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.321290][ T7222] loop4: detected capacity change from 0 to 32768 [ 177.387077][ T5147] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 177.536009][ T5146] usb 4-1: Using ep0 maxpacket: 16 [ 177.626045][ T7222] XFS (loop4): Mounting V5 Filesystem [ 177.657499][ T5146] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 177.667792][ T5148] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.675971][ T5146] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.687807][ T5146] usb 4-1: config 0 has no interface number 0 [ 177.744937][ T7222] XFS (loop4): Ending clean mount [ 177.750744][ T5148] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.767525][ T5147] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.779216][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.791323][ T5148] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.801029][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.816097][ T5147] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 177.834345][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.860454][ T7258] loop2: detected capacity change from 0 to 512 [ 177.867653][ T5146] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 177.884028][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.895770][ T5147] usb 1-1: config 0 descriptor?? [ 177.901973][ T5146] usb 4-1: Product: syz [ 177.910095][ T7258] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.916700][ T5146] usb 4-1: Manufacturer: syz [ 177.926362][ T5146] usb 4-1: SerialNumber: syz [ 177.934158][ T5146] usb 4-1: config 0 descriptor?? [ 177.967454][ T5148] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 177.976662][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.987373][ T5146] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 177.994109][ T5146] usb 4-1: No valid video chain found. [ 178.003376][ T5148] usb 2-1: Product: syz [ 178.010537][ T5148] usb 2-1: Manufacturer: syz [ 178.015745][ T5148] usb 2-1: SerialNumber: syz [ 178.041128][ T7258] fs-verity: sha512 using implementation "sha512-avx2" [ 178.062185][ T5148] usb 2-1: selecting invalid altsetting 1 [ 178.068774][ T5148] usb 2-1: unit 6 not found! [ 178.070554][ T7258] EXT4-fs warning (device loop2): ext4_begin_enable_verity:136: inode #13: comm syz.2.1156: verity is only allowed on extent-based files [ 178.073429][ T5148] usb 2-1: unit 0 not found! [ 178.116375][ T5148] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 178.206322][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.252854][ T4201] XFS (loop4): Unmounting Filesystem [ 178.261633][ T23] usb 4-1: USB disconnect, device number 10 [ 178.300807][ T4593] usb 2-1: USB disconnect, device number 7 [ 178.383756][ T5147] hid-rmi 0003:0461:4E72.0009: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 178.602973][ T5148] usb 1-1: USB disconnect, device number 5 [ 178.936956][ T7263] loop2: detected capacity change from 0 to 32768 [ 178.963171][ T7272] loop1: detected capacity change from 0 to 1024 [ 179.007361][ T7263] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1159 (7263) [ 179.053255][ T7272] EXT4-fs (loop1): inline encryption not supported [ 179.063326][ T7263] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 179.081236][ T7272] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.124392][ T7263] BTRFS info (device loop2): setting nodatasum [ 179.144399][ T7263] BTRFS info (device loop2): force zlib compression, level 3 [ 179.164697][ T7263] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 179.192189][ T7263] BTRFS info (device loop2): use lzo compression, level 0 [ 179.202099][ T7263] BTRFS info (device loop2): turning on flush-on-commit [ 179.209636][ T7263] BTRFS info (device loop2): enabling auto defrag [ 179.216215][ T7263] BTRFS info (device loop2): max_inline at 4096 [ 179.223135][ T7263] BTRFS info (device loop2): using free space tree [ 179.230435][ T7263] BTRFS info (device loop2): has skinny extents [ 179.237216][ T5147] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.254501][ T7272] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.1162: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.270363][ T7281] loop0: detected capacity change from 0 to 64 [ 179.301677][ T7272] EXT4-fs (loop1): Remounting filesystem read-only [ 179.327098][ T7272] Quota error (device loop1): write_blk: dquota write failed [ 179.334902][ T7272] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 179.346287][ T7272] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1162: Failed to acquire dquot type 0 [ 179.377207][ T7272] EXT4-fs (loop1): Remounting filesystem read-only [ 179.384477][ T7272] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.1162: Freeing blocks not in datazone - block = 0, count = 4096 [ 179.405578][ T7272] EXT4-fs (loop1): Remounting filesystem read-only [ 179.422225][ T7272] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1162: Invalid inode bitmap blk 0 in block_group 0 [ 179.447198][ T1236] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 179.470021][ T7272] EXT4-fs (loop1): Remounting filesystem read-only [ 179.477292][ T7272] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 179.507349][ T7272] EXT4-fs (loop1): Remounting filesystem read-only [ 179.521062][ T7272] EXT4-fs (loop1): 1 orphan inode deleted [ 179.527806][ T7272] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; dioread_nolock,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 179.540402][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 179.581232][ T7281] hfs: hfs: Invalid key length: 94 [ 179.647268][ T5147] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.687421][ T7263] BTRFS info (device loop2): enabling ssd optimizations [ 179.701595][ T1236] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 179.712248][ T7307] tipc: Started in network mode [ 179.737321][ T5147] usb 5-1: config 4 has an invalid interface number: 150 but max is 0 [ 179.745738][ T5147] usb 5-1: config 4 has no interface number 0 [ 179.776088][ T7307] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 179.784577][ T1236] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 179.814688][ T9] ------------[ cut here ]------------ [ 179.818113][ T7307] tipc: Enabled bearer , priority 10 [ 179.825551][ T9] kernel BUG at fs/hfs/inode.c:447! [ 179.839729][ T26] audit: type=1800 audit(1781856541.728:2271): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1159" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 179.864069][ T1236] EXT4-fs (loop1): Remounting filesystem read-only [ 179.871121][ T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 179.877354][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 179.884674][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.894814][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 179.900898][ T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 179.906498][ T9] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 80 9b 8d ff e9 47 fe ff ff e8 26 82 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 179.926393][ T9] RSP: 0018:ffffc90000ce73c0 EFLAGS: 00010293 [ 179.932673][ T9] RAX: ffffffff8230c6ca RBX: ffff8880613c5c98 RCX: ffff88813fe90000 [ 179.940774][ T9] RDX: 0000000000000000 RSI: ffffffff8c4e3540 RDI: 0000000000000000 [ 179.949384][ T9] RBP: ffffc90000ce7550 R08: ffff88813fe90000 R09: 0000000000000003 [ 179.957395][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 179.965858][ T9] R13: 1ffff9200019ce7c R14: 0000000000000000 R15: ffff8880613c5c58 [ 179.974243][ T9] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 179.983685][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.991332][ T9] CR2: 0000001b32c1dff8 CR3: 000000002adfb000 CR4: 00000000003506f0 [ 180.000773][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.009782][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.018300][ T9] Call Trace: [ 180.021790][ T9] [ 180.024802][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 180.030315][ T9] ? __writeback_single_inode+0x471/0xda0 [ 180.036294][ T9] ? __rwlock_init+0x140/0x140 [ 180.041138][ T9] __writeback_single_inode+0x6c3/0xda0 [ 180.046744][ T9] writeback_sb_inodes+0xa4e/0x1680 [ 180.051999][ T9] ? queue_io+0x550/0x550 [ 180.057029][ T9] ? rcu_is_watching+0x11/0xa0 [ 180.062021][ T9] wb_writeback+0x45d/0xbe0 [ 180.066602][ T9] ? rcu_lock_release+0x20/0x20 [ 180.071525][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 180.077560][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 180.082811][ T9] wb_workfn+0x43a/0xf20 [ 180.087109][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 180.093283][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 180.100315][ T9] ? read_lock_is_recursive+0x10/0x10 [ 180.105754][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 180.111711][ T9] ? _raw_spin_unlock+0x40/0x40 [ 180.116610][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 180.121864][ T9] process_one_work+0x85f/0x1010 [ 180.126874][ T9] ? worker_detach_from_pool+0x240/0x240 [ 180.132562][ T9] ? lockdep_hardirqs_off+0x70/0x100 [ 180.138068][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 180.143152][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 180.148921][ T9] ? wq_worker_running+0x97/0x170 [ 180.154176][ T9] worker_thread+0xaa6/0x1290 [ 180.159747][ T9] kthread+0x436/0x520 [ 180.163947][ T9] ? rcu_lock_release+0x20/0x20 [ 180.169000][ T9] ? kthread_blkcg+0xd0/0xd0 [ 180.173901][ T9] ret_from_fork+0x1f/0x30 [ 180.178500][ T9] [ 180.182233][ T9] Modules linked in: [ 180.207480][ T9] ---[ end trace ba19cd2d7a904668 ]--- [ 180.213620][ T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 180.219602][ T9] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 80 9b 8d ff e9 47 fe ff ff e8 26 82 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 180.240763][ T9] RSP: 0018:ffffc90000ce73c0 EFLAGS: 00010293 [ 180.249588][ T9] RAX: ffffffff8230c6ca RBX: ffff8880613c5c98 RCX: ffff88813fe90000 [ 180.259189][ T9] RDX: 0000000000000000 RSI: ffffffff8c4e3540 RDI: 0000000000000000 [ 180.268148][ T9] RBP: ffffc90000ce7550 R08: ffff88813fe90000 R09: 0000000000000003 [ 180.276879][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 180.285431][ T5147] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=e8.82 [ 180.295452][ T9] R13: 1ffff9200019ce7c R14: 0000000000000000 R15: ffff8880613c5c58 [ 180.323777][ T9] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 180.334111][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.361228][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.368441][ T5147] usb 5-1: Product: syz [ 180.373096][ T5147] usb 5-1: Manufacturer: syz [ 180.378557][ T5147] usb 5-1: SerialNumber: syz [ 180.383651][ T9] CR2: 000055ba51e775f8 CR3: 000000001f0f0000 CR4: 00000000003506e0 [ 180.408475][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.441684][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.450815][ T9] Kernel panic - not syncing: Fatal exception [ 180.458070][ T9] Kernel Offset: disabled [ 180.463155][ T9] Rebooting in 86400 seconds..