last executing test programs: 9m54.345718413s ago: executing program 0 (id=13986): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401604000000f5ee1771"], 0x0, 0x0}) 9m52.684197913s ago: executing program 0 (id=14015): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) 9m52.633061704s ago: executing program 0 (id=14017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x94, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x2885}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1000}, @IFLA_PORT_SELF={0x58}]}, 0x94}, 0x1, 0x0, 0x0, 0x7ed5d93391caedc3}, 0x0) 9m52.511006847s ago: executing program 0 (id=14018): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 9m52.184170585s ago: executing program 0 (id=14021): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x42, 0x0) 9m51.872243982s ago: executing program 0 (id=14026): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, 0x0) 9m51.607411529s ago: executing program 32 (id=14026): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, 0x0) 4m46.316133548s ago: executing program 4 (id=18063): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$netrom(r0, 0x0, 0x0) 4m45.84960149s ago: executing program 4 (id=18069): r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x64, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebd}, 0x0, 0x80000080, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 4m45.556038137s ago: executing program 4 (id=18075): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4008af22, &(0x7f0000000000)) 4m45.279630963s ago: executing program 4 (id=18078): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000805, &(0x7f0000000000)=ANY=[], 0x4, 0x1e9, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x21) 4m44.884147863s ago: executing program 4 (id=18083): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',gid=', @ANYRESHEX=0x0]) 4m38.544079966s ago: executing program 4 (id=18127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x682}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m38.074793338s ago: executing program 33 (id=18127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x682}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m23.197210848s ago: executing program 5 (id=18129): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 4m23.025377211s ago: executing program 5 (id=18209): r0 = syz_io_uring_setup(0x6ab9, &(0x7f0000000380)={0x0, 0xfffffffd, 0x10, 0x1, 0xf5}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0xffffffffffffffff, 0x1}, 0x20) 4m22.728848509s ago: executing program 5 (id=18212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) 4m22.446167195s ago: executing program 5 (id=18215): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m21.563688557s ago: executing program 5 (id=18224): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 4m20.424000914s ago: executing program 5 (id=18226): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x77, 0x7, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x7, 0xeb}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200d280000002802f125f11a9bb6acb117bd528f6b8c8696b6b06dd611"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m20.110375862s ago: executing program 34 (id=18226): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x77, 0x7, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x7, 0xeb}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200d280000002802f125f11a9bb6acb117bd528f6b8c8696b6b06dd611"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m4.012174471s ago: executing program 2 (id=18293): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x764f9000) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0}) 4m3.546554732s ago: executing program 2 (id=18304): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[], 0x80}}, 0x0) 4m3.357208637s ago: executing program 2 (id=18299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a31"], 0xec}, 0x1, 0x0, 0x0, 0x40006}, 0x40) 4m3.206030951s ago: executing program 2 (id=18301): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m2.870316929s ago: executing program 2 (id=18303): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x4, 0xffffffae}) 4m2.576286266s ago: executing program 2 (id=18308): setreuid(0x0, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) 4m2.118203847s ago: executing program 35 (id=18308): setreuid(0x0, 0xee01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) 5.712431412s ago: executing program 6 (id=20518): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000000100)=0xfffffffc, 0x20000002) 5.457638618s ago: executing program 6 (id=20521): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000520000/0x1000)=nil, 0x1000) 5.136333616s ago: executing program 6 (id=20524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x20000000) 4.841779953s ago: executing program 6 (id=20528): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.373415644s ago: executing program 6 (id=20534): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e100dc40030450f846a48502000109021200010000f0000904"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.897486214s ago: executing program 1 (id=20553): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f00000004c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000002e40)='asymmetric\x00', &(0x7f0000000040)=@secondary) 1.805720086s ago: executing program 1 (id=20554): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000002cc0), 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$binfmt_register(r0, &(0x7f0000000240)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7, 0x3a, '\x15\x10MY\xec<\xb0OE\xb9$\xbf:\x8c\xdd\xd6\\\x87w\xdf\xccR\xc6\x9c\xea\xc0p|\x92\x04\xb2\x92\xad\b1\x02\xa8\xbe\"\xd49\x9f.\x92\xd2d\xc6\xda\xa2\x85r\xcf\n\xfe\x04\x1b\xe9\xa3\xa5\"\xf40~\xb9\x93\xf2\v\xcc\x8e\xad\x917l\xf5\xe7\xfet\xab\xc7A\xdd3\xa2=R\xa7\xa7\xd3dP\x85\x82\xd7\xca\xbf\xaf\xc4Pz\xd6\x85\x18\xea\x19\x03\xb4=\xf2a\x89n\xe1(\x88\xa6\xef\xf1\x10b\n\xe97&[\x16\x1ah\x99\x99U\t\x98{\xbb\x1a\xab\xf1\xaf\xc3\x00\x960\xf3', 0x3a, '\xd0\xbf\xf9\x8d(\xc4\x8c\x02\xa7\xed \x1f\x1d\xc4\x96\x15\b\xe5\xb7\xc9\r\x89\x05D\xf5\x85\x95\xa4\xd4\xd0\xdej=\x9c\x8e\xc2,\xc2Wu\xfa\xb5\xd5qC\x05ju\xdb\xe3z[\x7f\xb8q\xd4jV\x0464\x06\x1eE\xe1]A-hT\xc3\xfb\n\x1d\x13Fk\xd6\xe9x \\\xd7V\xe4\x17\xfa\x8aG\xf3\xe7\t?/\xa6]\xf9&\xae\x97\x80\xca=@\x82\xca\x04\xb6\x1a\xb8\xceLS\x04\xa7X\xb2I\xe3\x1bS\x9a\xab\xea\xb4\xb9\xbc\xe9\xd8tLI\xc0\x047\x94\xd2\x03O\x14\xed\xb5\x06\xae\xc4\'@\x96N|\xddB\xd1\x82\x15ky\xd4\x8f\x88\xf7j\x8e\xf2Xv\xd7h\xe2b|/k\x19\xff\xc1,R\xe8br?', 0x3a, './file0'}, 0x16c) 1.63941226s ago: executing program 1 (id=20556): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000001c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007c1bcb554dcdcd464765613a01a861f4007fbefd8539539f5a5a3c1488b48284ca241df655e5c33cf630925e813ea6442f67a4ba1a92116aface282e9bc753fb4a324877709a4513"], 0xfe, 0x9e15, &(0x7f000000a040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 1.097618873s ago: executing program 7 (id=20561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d65746100000000140002800800014000000009080002401e0000100900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 1.058513024s ago: executing program 1 (id=20562): sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r0, r0, 0x0, 0x200000) 984.000936ms ago: executing program 6 (id=20563): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x6}}, 0x24, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) 949.468897ms ago: executing program 3 (id=20564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000020d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) 859.022729ms ago: executing program 7 (id=20565): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000800)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 712.159773ms ago: executing program 7 (id=20566): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x2c, 0xff, @remote, @local, {[@routing={0x8, 0x0, 0x0, 0xe}], {{0x8000, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 682.206433ms ago: executing program 3 (id=20567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd3000fcdbdf250f0000000c0014006970364672653000080001"], 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 553.636286ms ago: executing program 7 (id=20568): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x1, 0x2400c040) 553.507806ms ago: executing program 3 (id=20569): socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4c1e, @multicast2}, 0x10) 438.446289ms ago: executing program 3 (id=20570): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x1, 0x8, 0x5, 0x100, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0xa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c00003400028014000300feff000000000000000082620000003f14000200fe80000000000000000000000000000f08"], 0x64}}, 0x24000000) 428.98349ms ago: executing program 1 (id=20571): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49203}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x40001c0) 272.310803ms ago: executing program 7 (id=20572): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4fa7, 0x8, 0x2, 0x10000425, 0x2000001, 0x40000cc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0xa1a, 0x1, 0x209, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x6, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7fffffe, 0x485b]}) 173.473366ms ago: executing program 3 (id=20573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r0}, 0xc) 72.639048ms ago: executing program 1 (id=20574): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0xe2, 0x7fff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1d, 0x407, 0x6, 0x0, 0x3, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x21d5}, 0x8840) 10.25907ms ago: executing program 7 (id=20575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x30}}, 0x20000000) 0s ago: executing program 3 (id=20576): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x1, 0x2, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) kernel console output (not intermixed with test programs): .389624][T17625] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 1406.820904][T17629] loop7: detected capacity change from 0 to 256 [ 1407.087920][T17629] FAT-fs (loop7): Directory bread(block 64) failed [ 1407.111815][T17629] FAT-fs (loop7): Directory bread(block 65) failed [ 1407.118551][T17629] FAT-fs (loop7): Directory bread(block 66) failed [ 1407.165231][T17629] FAT-fs (loop7): Directory bread(block 67) failed [ 1407.171935][T17629] FAT-fs (loop7): Directory bread(block 68) failed [ 1407.207977][T17629] FAT-fs (loop7): Directory bread(block 69) failed [ 1407.228943][T17629] FAT-fs (loop7): Directory bread(block 70) failed [ 1407.261442][T17629] FAT-fs (loop7): Directory bread(block 71) failed [ 1407.283498][T17629] FAT-fs (loop7): Directory bread(block 72) failed [ 1407.290094][T17629] FAT-fs (loop7): Directory bread(block 73) failed [ 1407.465110][T25759] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1407.657501][T25759] usb 4-1: Using ep0 maxpacket: 16 [ 1407.670017][T25759] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1407.679582][T25759] usb 4-1: config 0 has no interface number 0 [ 1407.685751][T25759] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1407.718320][T25759] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1407.741241][T25759] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1407.760210][T25759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.787224][T17637] loop6: detected capacity change from 0 to 32768 [ 1407.793759][T25759] usb 4-1: Product: syz [ 1407.819036][T25759] usb 4-1: Manufacturer: syz [ 1407.834561][T25759] usb 4-1: SerialNumber: syz [ 1407.852211][T25759] usb 4-1: config 0 descriptor?? [ 1407.858575][T17637] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1407.868833][T17641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1407.876936][T17641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1408.045111][T17637] XFS (loop6): Ending clean mount [ 1408.112420][T17641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1408.154561][T17641] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1408.163966][T17649] loop1: detected capacity change from 0 to 40427 [ 1408.186731][T17649] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1408.198457][T17649] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1408.222316][T17649] F2FS-fs (loop1): Image doesn't support compression [ 1408.245408][T17649] F2FS-fs (loop1): Image doesn't support compression [ 1408.264666][T17649] F2FS-fs (loop1): invalid crc value [ 1408.278754][T13919] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1408.427540][T25759] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1408.621018][T17649] F2FS-fs (loop1): Start checkpoint disabled! [ 1408.654279][T25759] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1408.694571][T25759] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1408.726567][T25759] asix: probe of 4-1:0.34 failed with error -71 [ 1408.763466][T17649] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1408.773795][T25759] usb 4-1: USB disconnect, device number 116 [ 1408.777210][T17649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1409.024856][ T50] kworker/u4:4: attempt to access beyond end of device [ 1409.024856][ T50] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1409.048724][ T50] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1409.310553][ T28] audit: type=1326 audit(1785247692.758:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.369967][ T28] audit: type=1326 audit(1785247692.758:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.400198][ T28] audit: type=1326 audit(1785247692.758:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.425597][ T28] audit: type=1326 audit(1785247692.786:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.477526][ T28] audit: type=1326 audit(1785247692.786:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.507515][ T28] audit: type=1326 audit(1785247692.786:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.579493][ T28] audit: type=1326 audit(1785247692.786:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.609561][ T28] audit: type=1326 audit(1785247692.786:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.663614][ T28] audit: type=1326 audit(1785247692.786:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.696586][ T28] audit: type=1326 audit(1785247692.786:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.6.19472" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa856f9de99 code=0x7ffc0000 [ 1409.722272][T17689] netlink: 236 bytes leftover after parsing attributes in process `syz.1.19476'. [ 1409.758070][T17691] mkiss: ax0: crc mode is auto. [ 1409.830840][T17693] loop1: detected capacity change from 0 to 1024 [ 1409.913630][T17693] syz.1.19478: attempt to access beyond end of device [ 1409.913630][T17693] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1410.162963][T17701] macsec0: entered allmulticast mode [ 1410.171002][T17701] veth1_macvtap: entered promiscuous mode [ 1410.180149][T17701] veth1_macvtap: entered allmulticast mode [ 1410.186984][T17701] macsec0: left allmulticast mode [ 1410.194210][T17701] veth1_macvtap: left allmulticast mode [ 1410.729107][T17721] netlink: 'syz.6.19491': attribute type 2 has an invalid length. [ 1410.846072][T17725] veth1_macvtap: left promiscuous mode [ 1410.861865][T17725] macsec0: entered allmulticast mode [ 1410.925250][T17725] veth1_macvtap: entered promiscuous mode [ 1410.931724][T17725] veth1_macvtap: entered allmulticast mode [ 1410.948287][T17725] macsec0: left allmulticast mode [ 1410.960006][T17725] veth1_macvtap: left allmulticast mode [ 1411.145449][T17713] loop1: detected capacity change from 0 to 32768 [ 1411.777017][T17753] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19507'. [ 1411.789981][T17753] IPVS: Unknown mcast interface: vetN1_macvtap [ 1412.104512][ T57] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1412.165449][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19515'. [ 1412.186602][T17771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19515'. [ 1412.205924][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19515'. [ 1412.319868][ T57] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1412.350947][ T57] usb 2-1: config 0 has no interface number 0 [ 1412.388922][ T57] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1412.411457][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.446437][ T57] usb 2-1: Product: syz [ 1412.460639][ T57] usb 2-1: Manufacturer: syz [ 1412.480631][ T57] usb 2-1: SerialNumber: syz [ 1412.492891][ T57] usb 2-1: config 0 descriptor?? [ 1412.740340][T17770] loop6: detected capacity change from 0 to 32768 [ 1412.756747][T17770] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.19516 (17770) [ 1412.837273][T17770] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1412.860742][T17777] loop7: detected capacity change from 0 to 32768 [ 1412.864976][T17770] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1412.882865][T17770] BTRFS info (device loop6): using free space tree [ 1412.954759][T17777] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1412.998856][T17777] JBD2: Ignoring recovery information on journal [ 1413.012057][T17770] BTRFS info (device loop6): enabling ssd optimizations [ 1413.020351][T17770] BTRFS info (device loop6): auto enabling async discard [ 1413.131165][T17777] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1413.149477][ T57] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1413.168328][ T57] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1413.182927][ T57] asix: probe of 2-1:0.251 failed with error -71 [ 1413.194082][ T57] usb 2-1: USB disconnect, device number 118 [ 1413.220993][T13919] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1413.718887][T14325] ocfs2: Unmounting device (7,7) on (node local) [ 1414.056375][T17808] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1414.073003][T17808] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1414.079646][T17808] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1414.122359][T17808] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1414.131483][T17808] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1414.207378][T17808] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1414.239357][T17808] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1414.250606][T17808] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1414.312286][T17808] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1414.321371][T17808] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1414.371522][T17808] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1414.379116][T17808] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1414.435783][T17808] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1415.334570][T17842] loop3: detected capacity change from 0 to 2048 [ 1415.345338][T17845] veth1_macvtap: left promiscuous mode [ 1415.351666][T17845] macsec0: entered promiscuous mode [ 1415.380499][T17845] macsec0: entered allmulticast mode [ 1415.391885][T17842] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1415.425264][T17845] veth1_macvtap: entered promiscuous mode [ 1415.433224][T17842] NILFS (loop3): mounting unchecked fs [ 1415.466371][T17845] veth1_macvtap: entered allmulticast mode [ 1415.496948][T17845] macsec0: left promiscuous mode [ 1415.503744][ T5769] udevd[5769]: incorrect nilfs2 checksum on /dev/loop3 [ 1415.513136][T17842] NILFS (loop3): recovery complete [ 1415.521196][T17824] loop7: detected capacity change from 0 to 32768 [ 1415.528460][T17845] macsec0: left allmulticast mode [ 1415.533827][T17845] veth1_macvtap: left allmulticast mode [ 1415.569761][T17852] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1415.605966][T17855] blktrace: Concurrent blktraces are not allowed on sg0 [ 1415.669360][T17824] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1415.758989][T17865] loop1: detected capacity change from 0 to 8 [ 1415.851199][T17865] SQUASHFS error: Failed to read block 0x8f: -5 [ 1415.886227][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1415.886241][ T28] audit: type=1800 audit(1785247698.903:3601): pid=17865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19542" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1415.926797][T17865] SQUASHFS error: Failed to read block 0x8f: -5 [ 1416.120740][T17824] XFS (loop7): Ending clean mount [ 1416.189407][T17824] XFS (loop7): Quotacheck needed: Please wait. [ 1416.416417][T17824] XFS (loop7): Quotacheck: Done. [ 1416.536510][T17876] loop6: detected capacity change from 0 to 1024 [ 1416.554232][T17876] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1416.685993][T17876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1416.961133][T14325] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1416.996375][T17876] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.19544: missing EA_INODE flag [ 1417.052227][T17876] EXT4-fs (loop6): Remounting filesystem read-only [ 1417.195530][T13919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.348998][T17895] loop1: detected capacity change from 0 to 4096 [ 1417.462886][T17904] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1417.874872][T17913] loop6: detected capacity change from 0 to 2048 [ 1417.935352][T17913] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1417.984632][T17913] NILFS (loop6): mounting unchecked fs [ 1418.027332][ T5769] udevd[5769]: incorrect nilfs2 checksum on /dev/loop6 [ 1418.047742][T17913] NILFS (loop6): recovery complete [ 1418.068514][T17924] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1418.542315][T17930] loop1: detected capacity change from 0 to 1024 [ 1418.663390][ T12] hfsplus: b-tree write err: -5, ino 8 [ 1419.580426][T17962] loop6: detected capacity change from 0 to 256 [ 1419.601397][T17959] loop7: detected capacity change from 0 to 2048 [ 1419.635030][T17959] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1419.668672][T17962] FAT-fs (loop6): Directory bread(block 64) failed [ 1419.681151][T17959] NILFS (loop7): mounting unchecked fs [ 1419.692405][T17962] FAT-fs (loop6): Directory bread(block 65) failed [ 1419.713436][T17962] FAT-fs (loop6): Directory bread(block 66) failed [ 1419.725891][ T9775] udevd[9775]: incorrect nilfs2 checksum on /dev/loop7 [ 1419.731471][T17962] FAT-fs (loop6): Directory bread(block 67) failed [ 1419.745032][T17959] NILFS (loop7): recovery complete [ 1419.755637][T17962] FAT-fs (loop6): Directory bread(block 68) failed [ 1419.777099][T17967] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1419.795760][T17962] FAT-fs (loop6): Directory bread(block 69) failed [ 1419.823362][T17962] FAT-fs (loop6): Directory bread(block 70) failed [ 1419.834896][T17962] FAT-fs (loop6): Directory bread(block 71) failed [ 1419.856955][T17962] FAT-fs (loop6): Directory bread(block 72) failed [ 1419.886406][T17962] FAT-fs (loop6): Directory bread(block 73) failed [ 1420.139366][T17974] loop3: detected capacity change from 0 to 128 [ 1420.201747][T17974] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1420.244389][T17974] FAT-fs (loop3): Filesystem has been set read-only [ 1420.959510][T17996] loop6: detected capacity change from 0 to 1024 [ 1420.999303][ T28] audit: type=1326 audit(1785247703.683:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17997 comm="syz.3.19590" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce6759de99 code=0x0 [ 1421.042068][T18000] netlink: 80 bytes leftover after parsing attributes in process `syz.7.19585'. [ 1421.081166][T18000] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19585'. [ 1421.106873][T18003] loop1: detected capacity change from 0 to 1024 [ 1421.138739][T18000] netlink: 64 bytes leftover after parsing attributes in process `syz.7.19585'. [ 1421.195515][T18003] hfsplus: small dir entry [ 1421.467701][T18008] loop1: detected capacity change from 0 to 2048 [ 1421.507344][T18008] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1421.567452][T18008] NILFS (loop1): mounting unchecked fs [ 1421.641597][T18008] NILFS (loop1): recovery complete [ 1421.702020][T18011] netlink: 288 bytes leftover after parsing attributes in process `syz.7.19595'. [ 1421.732370][T18012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1422.120362][T18015] loop7: detected capacity change from 0 to 128 [ 1422.518770][T18005] loop6: detected capacity change from 0 to 131072 [ 1422.542068][T18005] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 1422.552026][T18005] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1422.565433][T18005] F2FS-fs (loop6): invalid crc value [ 1422.589936][T18005] F2FS-fs (loop6): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1 [ 1422.609462][T18005] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 1422.953127][T18032] loop7: detected capacity change from 0 to 128 [ 1422.967709][T18032] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1423.042800][T18032] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1423.225636][T18032] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz.7.19604: No space for directory leaf checksum. Please run e2fsck -D. [ 1423.284119][T18035] loop3: detected capacity change from 0 to 4096 [ 1423.297888][T18032] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #11: comm syz.7.19604: checksumming directory block 0 [ 1423.359748][T18041] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1423.534056][T14325] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1423.550721][T18040] loop1: detected capacity change from 0 to 4096 [ 1423.636423][T18040] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1423.803429][T18040] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1423.859612][T18040] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1423.886934][T18040] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 1423.900311][T18050] loop6: detected capacity change from 0 to 1024 [ 1423.921441][T18051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19611'. [ 1424.987465][ T788] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1425.191153][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 1425.208606][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.257615][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.287087][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1425.323312][ T788] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1425.338335][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.374922][ T788] usb 4-1: config 0 descriptor?? [ 1425.893861][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1425.923521][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1425.932666][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1425.947150][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1425.957417][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1425.980297][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1425.998858][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1426.007647][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1426.016330][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1426.026026][ T788] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 1426.120260][ T788] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001C/input/input91 [ 1426.174158][ T788] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1426.252067][ T788] usb 4-1: USB disconnect, device number 117 [ 1426.416633][T18124] fido_id[18124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1427.356428][T18164] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1427.388504][T18166] loop6: detected capacity change from 0 to 256 [ 1427.447533][T18166] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 1427.593583][ T28] audit: type=1800 audit(1785247709.857:3603): pid=18166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.19650" name="file1" dev="loop6" ino=1049015 res=0 errno=0 [ 1427.798959][T13525] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1428.025951][T13525] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1428.050582][T13525] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1428.064989][T13525] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.091577][T13525] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1428.103902][T13525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.116314][T13525] usb 4-1: Product: syz [ 1428.127401][T13525] usb 4-1: Manufacturer: syz [ 1428.137717][T13525] usb 4-1: SerialNumber: syz [ 1428.196126][T13525] hub 4-1:1.0: bad descriptor, ignoring hub [ 1428.207118][T13525] hub: probe of 4-1:1.0 failed with error -5 [ 1428.318329][T18193] netlink: 'syz.6.19663': attribute type 4 has an invalid length. [ 1428.478090][T13525] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1428.490541][T18195] loop1: detected capacity change from 0 to 2048 [ 1428.537209][T18195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1428.588742][ T28] audit: type=1800 audit(1785247710.783:3604): pid=18195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19664" name="file2" dev="loop1" ino=1347 res=0 errno=0 [ 1428.957971][T18205] loop6: detected capacity change from 0 to 1024 [ 1429.082233][ T5810] usb 4-1: USB disconnect, device number 118 [ 1429.147472][ T5810] usblp0: removed [ 1429.162817][T18211] loop1: detected capacity change from 0 to 512 [ 1429.222855][T18211] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1429.239249][T18211] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1429.259672][T18211] EXT4-fs (loop1): 1 truncate cleaned up [ 1429.272304][T18211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.367807][T18211] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1429.489333][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.662681][T18226] loop1: detected capacity change from 0 to 512 [ 1429.695484][T18226] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1429.825365][T18226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.19677: bg 0: block 104: invalid block bitmap [ 1429.940370][T18226] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1429.982416][T18226] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.19677: invalid indirect mapped block 1 (level 1) [ 1430.036273][T18226] EXT4-fs (loop1): 1 truncate cleaned up [ 1430.069771][T18226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1430.356479][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.560149][T18256] loop1: detected capacity change from 0 to 1024 [ 1430.667142][T18253] loop3: detected capacity change from 0 to 4096 [ 1430.682254][T18251] loop6: detected capacity change from 0 to 4096 [ 1430.697133][T18253] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1430.818430][T18251] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1430.836774][T18253] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1430.890315][T18253] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1430.944369][T18251] ntfs3: loop6: Failed to load $Extend (-22). [ 1430.962209][T18251] ntfs3: loop6: Failed to initialize $Extend. [ 1430.962534][T18253] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1431.017659][T18253] ntfs: volume version 3.1. [ 1431.148964][T18262] loop1: detected capacity change from 0 to 256 [ 1431.296394][ T2545] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1431.350794][ T2545] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1431.392381][ T5781] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1431.751748][T18258] loop7: detected capacity change from 0 to 32768 [ 1431.859880][T18258] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1431.987007][T18284] loop3: detected capacity change from 0 to 256 [ 1432.065592][T18258] XFS (loop7): Ending clean mount [ 1432.139707][T18284] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 1432.189848][T18284] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1432.276145][T14325] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1432.298166][T18289] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1432.298166][T18289] The task syz.6.19703 (18289) triggered the difference, watch for misbehavior. [ 1432.405086][T18291] netem: change failed [ 1432.634201][T18264] JBD2: Ignoring recovery information on journal [ 1432.796783][T18264] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1432.851890][ T50] (kworker/u4:4,50,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 1432.963639][T18299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.015252][T18299] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1433.063009][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 1433.143918][T18299] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.19704: corrupted inode contents [ 1433.233269][T18299] EXT4-fs error (device loop7): ext4_dirty_inode:6144: inode #2: comm syz.7.19704: mark_inode_dirty error [ 1433.283709][T18299] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.19704: corrupted inode contents [ 1433.336949][T18307] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.19704: corrupted inode contents [ 1433.397623][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19711'. [ 1433.405878][T18307] EXT4-fs error (device loop7): ext4_dirty_inode:6144: inode #2: comm syz.7.19704: mark_inode_dirty error [ 1433.464312][T18307] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #2: comm syz.7.19704: corrupted inode contents [ 1433.495707][T18309] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1433.528329][T18309] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1433.684328][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.757391][ T50] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1433.809426][ T5781] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1433.836136][ T5781] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1433.868600][ T5781] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1433.890431][ T3532] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1433.969020][T18317] set_capacity_and_notify: 3 callbacks suppressed [ 1433.969040][T18317] loop6: detected capacity change from 0 to 1024 [ 1434.031301][T18317] hfsplus: Filesystem is marked locked, mounting read-only. [ 1434.046353][T18321] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.19715'. [ 1434.125966][T18317] hfsplus: filesystem is marked locked, leaving read-only. [ 1434.273042][T18323] loop7: detected capacity change from 0 to 1024 [ 1434.414163][T18323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1434.436408][T18323] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.515623][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1434.637388][T18313] loop1: detected capacity change from 0 to 32768 [ 1434.758581][T18338] loop3: detected capacity change from 0 to 128 [ 1435.235201][T18346] loop3: detected capacity change from 0 to 64 [ 1435.310179][T18346] syz.3.19727: attempt to access beyond end of device [ 1435.310179][T18346] loop3: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1435.361485][T18346] Buffer I/O error on dev loop3, logical block 206, async page read [ 1435.394098][T18346] syz.3.19727: attempt to access beyond end of device [ 1435.394098][T18346] loop3: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1435.418434][T18346] Buffer I/O error on dev loop3, logical block 206, async page read [ 1435.428148][ T28] audit: type=1800 audit(1785247717.191:3605): pid=18346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19727" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1435.536223][T18340] loop7: detected capacity change from 0 to 32768 [ 1435.652503][T18340] jfs_create: dtInsert returned -EIO [ 1435.666811][T18340] ERROR: (device loop7): jfs_create: [ 1435.666811][T18340] [ 1435.681814][T18340] ERROR: (device loop7): remounting filesystem as read-only [ 1435.754244][T18354] loop1: detected capacity change from 0 to 256 [ 1435.881634][T18354] FAT-fs (loop1): Directory bread(block 64) failed [ 1435.916066][T18354] FAT-fs (loop1): Directory bread(block 65) failed [ 1435.927913][T18354] FAT-fs (loop1): Directory bread(block 66) failed [ 1435.936521][T18354] FAT-fs (loop1): Directory bread(block 67) failed [ 1435.947707][T18354] FAT-fs (loop1): Directory bread(block 68) failed [ 1435.959889][T18354] FAT-fs (loop1): Directory bread(block 69) failed [ 1435.967587][T18354] FAT-fs (loop1): Directory bread(block 70) failed [ 1435.974478][T18354] FAT-fs (loop1): Directory bread(block 71) failed [ 1435.981886][T18354] FAT-fs (loop1): Directory bread(block 72) failed [ 1435.989076][T18354] FAT-fs (loop1): Directory bread(block 73) failed [ 1436.640529][ T788] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1436.836808][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 1436.855016][ T788] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1436.867114][ T788] usb 2-1: config 0 has no interface number 0 [ 1436.879369][ T788] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1436.899682][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.915279][ T788] usb 2-1: Product: syz [ 1436.921014][ T788] usb 2-1: Manufacturer: syz [ 1436.927904][ T788] usb 2-1: SerialNumber: syz [ 1436.940386][ T788] usb 2-1: config 0 descriptor?? [ 1436.961578][ T788] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1437.162332][T18386] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1437.625572][ T788] gspca_spca1528: reg_w err -71 [ 1437.666440][ T788] spca1528: probe of 2-1:0.1 failed with error -71 [ 1437.688900][ T788] usb 2-1: USB disconnect, device number 119 [ 1437.875519][T18393] loop7: detected capacity change from 0 to 32768 [ 1437.925400][T18393] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1438.019479][T18393] XFS (loop7): Ending clean mount [ 1438.041195][T18393] XFS (loop7): Quotacheck needed: Please wait. [ 1438.191202][T18393] XFS (loop7): Quotacheck: Done. [ 1438.443977][T14325] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1439.014282][T18437] loop3: detected capacity change from 0 to 512 [ 1439.107438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.174098][T18439] geneve0: entered promiscuous mode [ 1439.193028][T18437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1439.220286][T18439] geneve0: left promiscuous mode [ 1439.229471][T18437] ext4 filesystem being mounted at /4989/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1439.395083][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1439.453039][T18446] loop7: detected capacity change from 0 to 128 [ 1439.516681][T18446] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1439.600635][T18446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1439.658956][T18434] loop6: detected capacity change from 0 to 32768 [ 1439.732278][T18453] loop1: detected capacity change from 0 to 256 [ 1439.740112][T18434] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1439.785569][ T28] audit: type=1800 audit(1785247721.269:3606): pid=18453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19771" name="file1" dev="loop1" ino=1049021 res=0 errno=0 [ 1439.793152][T18453] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1439.847257][T18453] FAT-fs (loop1): Filesystem has been set read-only [ 1439.857105][ T57] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1439.914409][T18460] netlink: 'syz.7.19772': attribute type 10 has an invalid length. [ 1439.980207][T23397] Bluetooth: hci3: command 0x0406 tx timeout [ 1440.008732][T18434] XFS (loop6): Ending clean mount [ 1440.080114][ T57] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1440.124188][ T57] usb 4-1: config 0 has no interface number 0 [ 1440.199977][ T57] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1440.223204][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.247979][ T57] usb 4-1: Product: syz [ 1440.263992][ T57] usb 4-1: Manufacturer: syz [ 1440.269317][T13919] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1440.285028][ T57] usb 4-1: SerialNumber: syz [ 1440.298043][ T57] usb 4-1: config 0 descriptor?? [ 1440.303734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.353716][ T57] usb 4-1: selecting invalid altsetting 1 [ 1440.364154][ T57] dvb_ttusb_budget: ttusb_init_controller: error [ 1440.373166][ T57] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1440.410993][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.557808][ T57] DVB: Unable to find symbol stv0299_attach() [ 1440.653576][T18475] loop1: detected capacity change from 0 to 64 [ 1440.726173][ T57] DVB: Unable to find symbol tda8083_attach() [ 1440.758524][ T57] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1440.799513][ T57] usb 4-1: USB disconnect, device number 119 [ 1440.973989][T18480] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1441.389155][T18493] loop7: detected capacity change from 0 to 512 [ 1441.498693][T18493] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1441.562887][T14325] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1441.771149][T14061] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1441.802182][T18502] netlink: 52 bytes leftover after parsing attributes in process `syz.7.19789'. [ 1441.832019][T18502] netlink: 56 bytes leftover after parsing attributes in process `syz.7.19789'. [ 1441.984695][T14061] usb 4-1: Using ep0 maxpacket: 32 [ 1442.002979][T14061] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1442.019718][T14061] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1442.075012][T14061] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1442.088956][T18487] loop6: detected capacity change from 0 to 32768 [ 1442.100869][T14061] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1442.151534][T14061] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1442.180271][T14061] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1442.191195][T14061] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1442.216906][T14061] usb 4-1: Product: syz [ 1442.231522][T14061] usb 4-1: Manufacturer: syz [ 1442.236792][T14061] usb 4-1: SerialNumber: syz [ 1442.252891][T14061] usb 4-1: config 0 descriptor?? [ 1442.270571][T14061] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1442.315553][T14061] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1442.697106][ T5810] usb 4-1: USB disconnect, device number 120 [ 1442.730782][ T5810] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1442.831617][T18523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19799'. [ 1442.870388][T18508] loop7: detected capacity change from 0 to 32768 [ 1443.018138][T18527] loop6: detected capacity change from 0 to 64 [ 1443.546494][T13525] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1443.704653][T18545] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19811'. [ 1443.774338][T13525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.803334][T13525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.830940][T13525] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1443.846844][T13525] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1443.875303][T13525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.901521][T13525] usb 2-1: config 0 descriptor?? [ 1444.382752][T13525] plantronics 0003:047F:FFFF.001D: unbalanced collection at end of report description [ 1444.395392][T13525] plantronics 0003:047F:FFFF.001D: parse failed [ 1444.413866][T13525] plantronics: probe of 0003:047F:FFFF.001D failed with error -22 [ 1444.463122][T18566] loop3: detected capacity change from 0 to 4096 [ 1444.474794][T18566] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1444.514418][T18570] usb usb1: check_ctrlrecip: process 18570 (syz.7.19823) requesting ep 01 but needs 81 [ 1444.525885][T18570] usb usb1: usbfs: process 18570 (syz.7.19823) did not claim interface 0 before use [ 1444.650564][T13525] usb 2-1: USB disconnect, device number 120 [ 1444.923649][T18578] loop3: detected capacity change from 0 to 512 [ 1444.948853][T18578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1445.073963][T18582] usb usb9: usbfs: process 18582 (syz.7.19828) did not claim interface 3 before use [ 1445.078192][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.468561][T18594] loop1: detected capacity change from 0 to 2048 [ 1445.488959][T18594] NILFS (loop1): couldn't find nilfs on the device [ 1445.519609][ T5769] udevd[5769]: incorrect nilfs2 checksum on /dev/loop1 [ 1445.657062][T18601] netlink: 'syz.1.19837': attribute type 4 has an invalid length. [ 1445.666025][T18601] netlink: 17 bytes leftover after parsing attributes in process `syz.1.19837'. [ 1445.861145][T18607] loop1: detected capacity change from 0 to 8 [ 1446.680647][T18628] loop1: detected capacity change from 0 to 64 [ 1447.147313][T18645] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 1447.395129][T18657] loop3: detected capacity change from 0 to 512 [ 1447.407727][T18657] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1447.425450][T18657] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1447.448641][T18657] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1447.470352][T18657] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1447.480712][ T57] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1447.502553][T18657] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1447.514752][T18657] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 1447.524309][T18657] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1447.530463][T18660] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.534277][T18657] EXT4-fs (loop3): mount failed [ 1447.543614][T18660] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.557909][T18660] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.567051][T18660] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.693527][ T57] usb 2-1: Using ep0 maxpacket: 32 [ 1447.706378][ T57] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1447.739004][ T57] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1447.781453][ T57] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1447.802309][ T57] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1447.858964][T18666] loop3: detected capacity change from 0 to 512 [ 1447.865592][ T57] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1447.889989][ T57] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1447.908692][ T57] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1447.918932][ T57] usb 2-1: Product: syz [ 1447.923315][ T57] usb 2-1: Manufacturer: syz [ 1447.939599][ T57] usb 2-1: SerialNumber: syz [ 1447.947042][ T57] usb 2-1: config 0 descriptor?? [ 1447.950564][T18666] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.3.19868: corrupted xattr block 95: invalid header [ 1447.955565][ T57] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1447.982842][ T57] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1448.028711][T18666] EXT4-fs (loop3): Remounting filesystem read-only [ 1448.046383][T18666] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 1448.067547][T18666] EXT4-fs (loop3): 1 orphan inode deleted [ 1448.122631][T18666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1448.227184][ T57] usb 2-1: USB disconnect, device number 121 [ 1448.240338][ T57] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1448.284027][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1448.778225][T18693] lo: entered promiscuous mode [ 1448.797104][T18693] tunl0: entered promiscuous mode [ 1448.803762][T18693] gre0: entered promiscuous mode [ 1448.840140][T18693] erspan0: entered promiscuous mode [ 1448.859949][T18693] ip_vti0: entered promiscuous mode [ 1448.883780][T18693] ip6_vti0: entered promiscuous mode [ 1448.899967][T18693] sit0: entered promiscuous mode [ 1448.908331][T18693] ip6tnl0: entered promiscuous mode [ 1448.926984][T18693] ip6gre0: entered promiscuous mode [ 1448.941887][T18693] syz_tun: entered promiscuous mode [ 1448.966427][T18693] ip6gretap0: entered promiscuous mode [ 1448.990588][T18693] bridge0: entered promiscuous mode [ 1449.017999][T18693] vcan0: entered promiscuous mode [ 1449.039525][T18693] bond0: entered promiscuous mode [ 1449.056461][T18693] bond_slave_0: entered promiscuous mode [ 1449.064266][T18693] bond_slave_1: entered promiscuous mode [ 1449.074659][T18693] team0: entered promiscuous mode [ 1449.086020][T18693] team_slave_0: entered promiscuous mode [ 1449.099269][T18693] team_slave_1: entered promiscuous mode [ 1449.116073][T18693] dummy0: entered promiscuous mode [ 1449.131902][T18693] nlmon0: entered promiscuous mode [ 1449.145244][T18693] caif0: entered promiscuous mode [ 1449.151626][T18693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1449.583109][T18701] loop3: detected capacity change from 0 to 32768 [ 1449.633443][T18701] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.19884 (18701) [ 1449.674700][T18701] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1449.699410][T18716] loop6: detected capacity change from 0 to 64 [ 1449.707263][T18701] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1449.724717][T18701] BTRFS info (device loop3): using free space tree [ 1449.866937][T18701] BTRFS info (device loop3): enabling ssd optimizations [ 1449.892110][T18701] BTRFS info (device loop3): auto enabling async discard [ 1449.929243][T18734] loop1: detected capacity change from 0 to 128 [ 1450.003881][T18734] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1450.043413][T18734] ext4 filesystem being mounted at /4915/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.272857][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1450.464827][ T5781] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 1450.688787][T18753] loop6: detected capacity change from 0 to 128 [ 1451.295852][T18767] loop6: detected capacity change from 0 to 4096 [ 1451.356239][T18767] ntfs3: Unknown parameter 'configfs' [ 1451.386301][T18775] loop7: detected capacity change from 0 to 256 [ 1451.436214][ T5765] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1451.563386][T18775] FAT-fs (loop7): Directory bread(block 64) failed [ 1451.587342][T18775] FAT-fs (loop7): Directory bread(block 65) failed [ 1451.620988][T18767] syz.6.19906: attempt to access beyond end of device [ 1451.620988][T18767] loop6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1451.643694][T18775] FAT-fs (loop7): Directory bread(block 66) failed [ 1451.705445][T18775] FAT-fs (loop7): Directory bread(block 67) failed [ 1451.755370][T18775] FAT-fs (loop7): Directory bread(block 68) failed [ 1451.780539][T18783] loop3: detected capacity change from 0 to 2048 [ 1451.799167][T18775] FAT-fs (loop7): Directory bread(block 69) failed [ 1451.806277][T18775] FAT-fs (loop7): Directory bread(block 70) failed [ 1451.885392][T18775] FAT-fs (loop7): Directory bread(block 71) failed [ 1451.914057][T18775] FAT-fs (loop7): Directory bread(block 72) failed [ 1451.914200][T18783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.923407][T18775] FAT-fs (loop7): Directory bread(block 73) failed [ 1452.228991][T18783] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1452.292069][T18790] loop1: detected capacity change from 0 to 1024 [ 1452.412879][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.622877][T18790] hfsplus: cannot replace xattr [ 1452.907165][T18807] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1453.515597][T18831] loop6: detected capacity change from 0 to 512 [ 1454.095233][T18819] loop3: detected capacity change from 0 to 32768 [ 1454.181915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.521896][T18857] loop3: detected capacity change from 0 to 512 [ 1454.592164][T18857] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1454.640307][T18857] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.19945: Allocating blocks 41-42 which overlap fs metadata [ 1454.732335][T18857] EXT4-fs (loop3): Remounting filesystem read-only [ 1454.771225][T18857] Quota error (device loop3): write_blk: dquota write failed [ 1454.780307][T18857] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1454.830608][T18857] Quota error (device loop3): write_blk: dquota write failed [ 1454.867417][T18857] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1454.889707][T18857] EXT4-fs (loop3): 1 truncate cleaned up [ 1454.910596][T18857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.046709][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.175141][T18871] lo: entered promiscuous mode [ 1455.218510][T18874] syz.1.19953: attempt to access beyond end of device [ 1455.218510][T18874] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1455.224911][T18871] tunl0: entered promiscuous mode [ 1455.232482][T18874] XFS (nbd1): SB validate failed with error -5. [ 1455.255594][T18880] loop7: detected capacity change from 0 to 16 [ 1455.263283][T18871] gre0: entered promiscuous mode [ 1455.278762][T18880] erofs: (device loop7): mounted with root inode @ nid 36. [ 1455.299626][T18881] syz.1.19953: attempt to access beyond end of device [ 1455.299626][T18881] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1455.367683][T18881] XFS (nbd1): SB validate failed with error -5. [ 1455.504567][T18871] erspan0: entered promiscuous mode [ 1455.543189][T18871] ip_vti0: entered promiscuous mode [ 1455.586144][T18871] ip6_vti0: entered promiscuous mode [ 1455.601968][T18871] sit0: entered promiscuous mode [ 1455.613739][T18871] ip6tnl0: entered promiscuous mode [ 1455.620137][T18871] ip6gre0: entered promiscuous mode [ 1455.665884][T18871] syz_tun: entered promiscuous mode [ 1455.690617][T18871] bridge0: entered promiscuous mode [ 1455.697245][T18871] vcan0: entered promiscuous mode [ 1455.722521][T18871] bond0: entered promiscuous mode [ 1455.740027][T18871] team0: entered promiscuous mode [ 1455.746779][T18871] wg1: entered promiscuous mode [ 1455.783229][T18871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.792560][T18871] dummy0: entered promiscuous mode [ 1455.799000][T18871] nlmon0: entered promiscuous mode [ 1455.812577][T18871] caif0: entered promiscuous mode [ 1455.829773][T18871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1456.190386][T18908] loop3: detected capacity change from 0 to 164 [ 1456.733509][T18921] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19970'. [ 1456.982378][T18929] loop1: detected capacity change from 0 to 2048 [ 1457.012027][T18929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1457.127946][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.162753][T18936] loop3: detected capacity change from 0 to 16 [ 1457.187600][T18936] erofs: (device loop3): mounted with root inode @ nid 36. [ 1457.232035][ T28] audit: type=1800 audit(1785247737.582:3607): pid=18936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19978" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 1457.548512][T18946] loop1: detected capacity change from 0 to 1024 [ 1457.557614][T18946] EXT4-fs: Ignoring removed bh option [ 1457.588049][T18946] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1457.640581][T18946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1457.724686][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.273768][T18973] loop1: detected capacity change from 0 to 1024 [ 1458.389919][T18976] loop6: detected capacity change from 0 to 2048 [ 1458.446924][T18976] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1458.482941][T18976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1458.533302][T18973] hfsplus: request for non-existent node 33554434 in B*Tree [ 1458.578109][T18973] hfsplus: request for non-existent node 33554434 in B*Tree [ 1458.645500][T18972] hfsplus: request for non-existent node 33554434 in B*Tree [ 1458.657540][T18972] hfsplus: request for non-existent node 33554434 in B*Tree [ 1458.720450][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 1458.738884][ T12] hfsplus: request for non-existent node 33554434 in B*Tree [ 1459.302817][T19000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20005'. [ 1459.623492][T18991] loop6: detected capacity change from 0 to 40427 [ 1459.640810][T18991] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1459.651490][T18991] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1459.666342][T18991] F2FS-fs (loop6): invalid crc value [ 1459.676086][T18991] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1459.846921][T18991] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1459.862774][T18991] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1460.916142][ T5810] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1461.122421][ T5810] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 1461.135113][ T5810] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.160244][ T5810] usb 4-1: config 160 has no interface number 0 [ 1461.175529][ T5810] usb 4-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1461.213668][ T5810] usb 4-1: config 160 interface 200 has no altsetting 0 [ 1461.235655][ T5810] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1461.257131][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.274187][ T5810] usb 4-1: Product: syz [ 1461.278532][ T5810] usb 4-1: Manufacturer: syz [ 1461.293375][ T5810] usb 4-1: SerialNumber: syz [ 1461.540764][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20019'. [ 1461.589109][ T5810] usb 4-1: USB disconnect, device number 121 [ 1461.776835][T19043] loop1: detected capacity change from 0 to 32768 [ 1461.805587][T19043] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.20024 (19043) [ 1461.864109][T19043] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1461.889131][T19043] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1461.906397][T19043] BTRFS info (device loop1): enabling auto defrag [ 1461.919150][T19043] BTRFS info (device loop1): max_inline at 4096 [ 1461.937490][T19043] BTRFS info (device loop1): using free space tree [ 1462.055691][T19043] BTRFS info (device loop1): enabling ssd optimizations [ 1462.070523][T19043] BTRFS info (device loop1): auto enabling async discard [ 1462.119816][T19061] can0: slcan on ptm0. [ 1462.322432][T19058] can0 (unregistered): slcan off ptm0. [ 1462.341343][ T5774] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1462.609057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.609478][ T28] audit: type=1326 audit(1785247742.615:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1462.768046][ T28] audit: type=1326 audit(1785247742.652:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1462.841346][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.886138][ T28] audit: type=1326 audit(1785247742.652:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1462.912234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1462.920769][ T28] audit: type=1326 audit(1785247742.652:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1462.946264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.048604][T19082] sock: sock_timestamping_bind_phc: sock not bind to device [ 1463.078996][ T28] audit: type=1326 audit(1785247742.652:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1463.131240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.163546][ T28] audit: type=1326 audit(1785247742.652:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1463.237090][ T28] audit: type=1326 audit(1785247742.652:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1463.367881][ T28] audit: type=1326 audit(1785247742.652:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1463.485200][ T28] audit: type=1326 audit(1785247742.652:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1463.595546][ T28] audit: type=1326 audit(1785247742.652:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19072 comm="syz.3.20029" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6759de99 code=0x7ffc0000 [ 1463.873812][T19103] loop3: detected capacity change from 0 to 1024 [ 1464.070394][ T42] hfsplus: b-tree write err: -5, ino 25 [ 1464.098896][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1464.109100][ T42] hfsplus: b-tree write err: -5, ino 2 [ 1464.317443][T19087] loop1: detected capacity change from 0 to 32768 [ 1464.533043][T19087] UFO tlock:0xffffc900028820d8 [ 1464.833071][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20046'. [ 1464.853646][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20046'. [ 1464.872757][T19128] netlink: 'syz.3.20046': attribute type 14 has an invalid length. [ 1464.882005][T19128] netlink: 'syz.3.20046': attribute type 11 has an invalid length. [ 1465.041931][T19133] loop3: detected capacity change from 0 to 64 [ 1465.068877][T19134] loop1: detected capacity change from 0 to 256 [ 1465.803875][T19138] loop1: detected capacity change from 0 to 65536 [ 1465.834820][T19138] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1465.873904][T19138] XFS (loop1): Ending clean mount [ 1465.890718][T19138] XFS (loop1): Quotacheck needed: Please wait. [ 1466.010080][T19138] XFS (loop1): Quotacheck: Done. [ 1466.194712][ T5774] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1466.271425][T19154] loop3: detected capacity change from 0 to 128 [ 1466.314610][T19154] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1466.361180][T19154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1466.388585][T19158] loop6: detected capacity change from 0 to 16 [ 1466.560408][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20057'. [ 1466.664911][T19164] netlink: 'syz.3.20059': attribute type 16 has an invalid length. [ 1466.673785][T19164] netlink: 'syz.3.20059': attribute type 17 has an invalid length. [ 1466.696206][T19164] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1466.790919][T19168] loop3: detected capacity change from 0 to 256 [ 1467.875882][T19170] loop6: detected capacity change from 0 to 65536 [ 1467.994830][T19170] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1468.013538][T19194] loop1: detected capacity change from 0 to 256 [ 1468.159933][T19170] XFS (loop6): Ending clean mount [ 1468.198489][T19170] XFS (loop6): Quotacheck needed: Please wait. [ 1468.260153][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20070'. [ 1468.422836][T19170] XFS (loop6): Quotacheck: Done. [ 1468.539819][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1468.539835][ T28] audit: type=1800 audit(1785247748.152:3623): pid=19170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.20062" name="file1" dev="loop6" ino=38 res=0 errno=0 [ 1468.572546][T19207] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1468.600894][T13919] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1468.778172][T19212] loop1: detected capacity change from 0 to 2048 [ 1468.799464][T19212] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1468.803300][T19212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1469.037486][T19201] loop3: detected capacity change from 0 to 32768 [ 1469.063003][T19201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.20072 (19201) [ 1469.144567][T19201] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1469.192569][T19201] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1469.224519][T19201] BTRFS info (device loop3): setting nodatasum [ 1469.237911][T19201] BTRFS info (device loop3): force zlib compression, level 3 [ 1469.250845][T19201] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1469.262417][T19201] BTRFS info (device loop3): use lzo compression, level 0 [ 1469.275993][T19201] BTRFS info (device loop3): turning on flush-on-commit [ 1469.295168][T19201] BTRFS info (device loop3): enabling auto defrag [ 1469.307207][T19201] BTRFS info (device loop3): max_inline at 4096 [ 1469.319840][T19201] BTRFS info (device loop3): using free space tree [ 1469.470612][ T788] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1469.491127][ T28] audit: type=1326 audit(1785247749.050:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1469.531024][T19201] BTRFS info (device loop3): enabling ssd optimizations [ 1469.542256][ T28] audit: type=1326 audit(1785247749.078:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1469.615546][ T28] audit: type=1326 audit(1785247749.088:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1469.684374][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 1469.690359][ T28] audit: type=1326 audit(1785247749.088:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1469.697807][ T788] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1469.744621][T19242] loop7: detected capacity change from 0 to 256 [ 1469.762601][ T788] usb 2-1: config 2 has no interface number 0 [ 1469.774778][ T28] audit: type=1326 audit(1785247749.088:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1469.808321][ T788] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1469.827884][ T28] audit: type=1326 audit(1785247749.088:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1469.850332][ T788] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1469.950009][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.960544][ T28] audit: type=1326 audit(1785247749.088:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.7.20083" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829fb9de99 code=0x7ffc0000 [ 1470.003668][ T788] usb 2-1: Product: syz [ 1470.009121][ T788] usb 2-1: Manufacturer: syz [ 1470.019803][ T788] usb 2-1: SerialNumber: syz [ 1470.259010][T19244] loop7: detected capacity change from 0 to 256 [ 1470.309446][T19244] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1470.325851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1470.483642][ T5781] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1470.630628][T19246] loop7: detected capacity change from 0 to 512 [ 1470.711576][T19246] EXT4-fs (loop7): 1 truncate cleaned up [ 1470.730254][T19246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.755839][ T788] ch9200: probe of 2-1:2.31 failed with error -22 [ 1470.770935][ T788] usb 2-1: USB disconnect, device number 122 [ 1470.830176][T19246] EXT4-fs (loop7): Online resizing not supported with sparse_super2 [ 1471.034015][T19252] loop6: detected capacity change from 0 to 8 [ 1471.120833][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.364418][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20089'. [ 1471.730860][T19270] loop3: detected capacity change from 0 to 1024 [ 1471.755253][T19270] EXT4-fs: Ignoring removed bh option [ 1471.838523][T19270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.920221][T19279] loop1: detected capacity change from 0 to 1024 [ 1471.928053][T19279] EXT4-fs: inline encryption not supported [ 1471.941616][T19279] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1472.025669][T19279] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.20098: Freeing blocks not in datazone - block = 0, count = 4096 [ 1472.085214][T19279] EXT4-fs (loop1): Remounting filesystem read-only [ 1472.104533][T19279] EXT4-fs (loop1): 1 orphan inode deleted [ 1472.113960][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.123746][ T3473] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1472.133334][T19279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1472.174812][ T3473] Quota error (device loop1): write_blk: dquota write failed [ 1472.196430][ T3473] Quota error (device loop1): remove_free_dqentry: Can't write block (2) with free entries [ 1472.219230][ T3473] EXT4-fs (loop1): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1472.240941][T19286] sp0: Synchronizing with TNC [ 1472.243203][ T3473] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 1472.276436][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1473.233450][T19310] EXT4-fs: Ignoring removed i_version option [ 1473.256107][T19310] EXT4-fs: Ignoring removed oldalloc option [ 1473.288777][T19315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20113'. [ 1473.315158][T19310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1473.341215][T19310] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1473.373697][T19310] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1473.541455][T19294] set_capacity_and_notify: 1 callbacks suppressed [ 1473.541472][T19294] loop1: detected capacity change from 0 to 40427 [ 1473.569741][T19317] loop3: detected capacity change from 0 to 1764 [ 1473.595003][T19294] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1473.617716][T19294] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1473.640140][T19317] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1473.663648][T19294] F2FS-fs (loop1): invalid crc_offset: 1 [ 1473.671527][T23397] Bluetooth: hci3: command 0x0406 tx timeout [ 1474.007435][T19294] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1474.036038][T19294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1474.488275][T19334] loop7: detected capacity change from 0 to 512 [ 1474.539430][T19334] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1474.575136][T19334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 1474.614081][T19334] System zones: 1-12 [ 1474.642633][T19334] EXT4-fs error (device loop7): ext4_orphan_get:1430: comm syz.7.20120: bad orphan inode 16 [ 1474.671739][T19334] ext4_test_bit(bit=15, block=4) = 0 [ 1474.682901][T19334] EXT4-fs (loop7): 1 orphan inode deleted [ 1474.692350][T19334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.789101][T19340] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1474.835047][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.877119][T19342] loop1: detected capacity change from 0 to 512 [ 1474.913181][T14061] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1474.959692][T19342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1474.994819][T19342] ext4 filesystem being mounted at /4973/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.114317][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.162583][T14061] usb 4-1: Using ep0 maxpacket: 16 [ 1475.172593][T14061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.200362][T14061] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.220807][T14061] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1475.238628][T14061] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1475.256136][T14061] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.267948][T14061] usb 4-1: config 0 descriptor?? [ 1475.294602][T19351] loop1: detected capacity change from 0 to 16 [ 1475.315876][T19351] erofs: (device loop1): mounted with root inode @ nid 36. [ 1475.459912][T19354] loop7: detected capacity change from 0 to 2048 [ 1475.508504][T19354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1475.600604][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1475.600622][ T28] audit: type=1800 audit(1785247754.756:3631): pid=19354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.20128" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 1475.601491][T19358] loop1: detected capacity change from 0 to 2048 [ 1475.669383][T19358] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1475.746974][T19359] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1475.788095][T14061] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input93 [ 1475.842225][T14061] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1476.097184][T19366] loop7: detected capacity change from 0 to 64 [ 1476.114733][T14061] usb 4-1: USB disconnect, device number 122 [ 1476.513824][T19370] loop7: detected capacity change from 0 to 4096 [ 1476.527689][T19370] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512). [ 1476.546004][T19364] loop1: detected capacity change from 0 to 32768 [ 1476.587775][T19370] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1476.598488][T19370] ntfs3: loop7: Failed to initialize $Extend/$Reparse. [ 1476.610982][T19364] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1476.649245][T19364] JBD2: Ignoring recovery information on journal [ 1476.769989][T19364] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1476.848909][T14325] ntfs3: loop7: ino=1a, ntfs_sync_fs failed, -22. [ 1477.061786][T19374] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1477.172014][T19374] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1477.189161][T19374] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1477.252032][T19374] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 1477.330977][ T12] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1477.345486][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 1477.396442][ T5781] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1477.424290][ T5781] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1477.439660][ T5781] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 1477.469743][ T3473] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 1478.078960][T19403] FAT-fs (loop6): Directory bread(block 64) failed [ 1478.089510][T19403] FAT-fs (loop6): Directory bread(block 65) failed [ 1478.108805][T19403] FAT-fs (loop6): Directory bread(block 66) failed [ 1478.115507][T19403] FAT-fs (loop6): Directory bread(block 67) failed [ 1478.141567][T19403] FAT-fs (loop6): Directory bread(block 68) failed [ 1478.148524][T19403] FAT-fs (loop6): Directory bread(block 69) failed [ 1478.173913][T19403] FAT-fs (loop6): Directory bread(block 70) failed [ 1478.184871][T19403] FAT-fs (loop6): Directory bread(block 71) failed [ 1478.192169][T19403] FAT-fs (loop6): Directory bread(block 72) failed [ 1478.229132][T19403] FAT-fs (loop6): Directory bread(block 73) failed [ 1478.545900][T19416] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20156'. [ 1478.568546][T19416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1478.999263][T19432] set_capacity_and_notify: 2 callbacks suppressed [ 1478.999274][T19432] loop7: detected capacity change from 0 to 256 [ 1479.082761][T19432] FAT-fs (loop7): Directory bread(block 64) failed [ 1479.089475][T19432] FAT-fs (loop7): Directory bread(block 65) failed [ 1479.103523][T19432] FAT-fs (loop7): Directory bread(block 66) failed [ 1479.113290][T19432] FAT-fs (loop7): Directory bread(block 67) failed [ 1479.123225][T19432] FAT-fs (loop7): Directory bread(block 68) failed [ 1479.134173][T19432] FAT-fs (loop7): Directory bread(block 69) failed [ 1479.149912][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20165'. [ 1479.149936][T19432] FAT-fs (loop7): Directory bread(block 70) failed [ 1479.177368][T19432] FAT-fs (loop7): Directory bread(block 71) failed [ 1479.185175][T19432] FAT-fs (loop7): Directory bread(block 72) failed [ 1479.198986][ T788] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1479.207097][T19432] FAT-fs (loop7): Directory bread(block 73) failed [ 1479.424648][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.458048][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1479.474937][ T788] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1479.485505][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1479.504423][ T788] usb 2-1: SerialNumber: syz [ 1479.581344][T19444] loop7: detected capacity change from 0 to 512 [ 1479.685006][T19444] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1479.693792][T19444] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1479.722872][T19444] EXT4-fs (loop7): 1 truncate cleaned up [ 1479.736252][T19444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.789332][ T788] usb 2-1: 0:2 : does not exist [ 1479.827837][T19444] EXT4-fs: group quota file already specified [ 1479.856227][ T788] usb 2-1: USB disconnect, device number 123 [ 1479.967539][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.167587][T19451] loop7: detected capacity change from 0 to 512 [ 1480.233898][T19451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1480.252824][T19440] loop6: detected capacity change from 0 to 32768 [ 1480.272006][T19451] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1480.330796][T19440] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1480.388826][T19447] loop3: detected capacity change from 0 to 32768 [ 1480.478715][T19447] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1480.514201][T13527] Bluetooth: hci3: command 0x0406 tx timeout [ 1480.611825][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.684238][T19440] XFS (loop6): Ending clean mount [ 1480.693216][T19440] XFS (loop6): Quotacheck needed: Please wait. [ 1480.841079][T19440] XFS (loop6): Quotacheck: Done. [ 1480.955943][T19447] XFS (loop3): Ending clean mount [ 1480.977205][T19447] XFS (loop3): Quotacheck needed: Please wait. [ 1481.016389][T13919] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1481.148730][T19447] XFS (loop3): Quotacheck: Done. [ 1481.566537][ T5781] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1481.762341][T19486] loop1: detected capacity change from 0 to 4096 [ 1481.912321][T19495] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1482.020949][T19486] NILFS (loop1): bad btree node (ino=3, blocknr=42): level = 255, flags = 0xff, nchildren = 511 [ 1482.038372][T19486] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 1482.110073][T19486] Remounting filesystem read-only [ 1482.115168][T19486] NILFS (loop1): error -5 preparing GC: cannot mark copying blocks dirty [ 1482.467031][T19492] loop6: detected capacity change from 0 to 32768 [ 1482.535627][T19505] loop1: detected capacity change from 0 to 4096 [ 1482.565693][T19492] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1482.582965][T19505] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1482.620778][T19505] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1482.648535][T19505] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003] [ 1482.697548][T19505] System zones: 0-5 [ 1482.709355][T19505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.911973][T19492] XFS (loop6): Ending clean mount [ 1483.028099][T19492] XFS (loop6): Quotacheck needed: Please wait. [ 1483.046027][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.137759][T19492] XFS (loop6): Quotacheck: Done. [ 1483.420756][T13919] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1483.549881][T19524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20194'. [ 1483.570036][T19518] loop7: detected capacity change from 0 to 32768 [ 1483.677665][T19518] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1483.789003][T19530] loop3: detected capacity change from 0 to 512 [ 1483.851496][T19530] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1483.944383][T19530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.971236][T14325] ocfs2: Unmounting device (7,7) on (node local) [ 1484.138886][T19530] EXT4-fs warning (device loop3): __ext4_ioctl:1266: Setting inode version is not supported with metadata_csum enabled. [ 1484.221418][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20203'. [ 1484.241208][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.487726][T19551] loop7: detected capacity change from 0 to 2048 [ 1484.516469][T19551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1484.544301][ T28] audit: type=1800 audit(1785247763.128:3632): pid=19551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.20206" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1484.585286][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.740352][T19557] loop7: detected capacity change from 0 to 256 [ 1485.359092][T19570] loop7: detected capacity change from 0 to 4096 [ 1485.373315][T19570] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512). [ 1485.444251][T19570] ntfs3: loop7: failed to convert "c46c" to iso8859-15 [ 1485.601881][T19577] netlink: 'syz.7.20215': attribute type 3 has an invalid length. [ 1485.758954][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20219'. [ 1485.920839][T19590] loop7: detected capacity change from 0 to 4096 [ 1485.941167][T19590] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1485.980934][T19590] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1485.985997][T19593] loop3: detected capacity change from 0 to 512 [ 1486.031945][T19593] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1486.032114][T19590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1486.044025][T19593] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1486.084545][T19593] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 1486.093867][T19593] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 1486.147200][T19593] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.20222: Failed to acquire dquot type 1 [ 1486.191098][T19593] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.20222: bg 0: block 40: padding at end of block bitmap is not set [ 1486.207130][ T28] audit: type=1800 audit(1785247764.681:3633): pid=19590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.20220" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1486.270740][T19593] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1486.304955][T19593] EXT4-fs (loop3): 1 truncate cleaned up [ 1486.338305][T19593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1486.389149][T19593] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.20222: bad symlink. [ 1486.394618][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.462197][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.561158][T19600] netlink: 54775 bytes leftover after parsing attributes in process `syz.7.20224'. [ 1486.688258][T19606] loop3: detected capacity change from 0 to 64 [ 1486.774257][ T5781] hfs: node 4:3 still has 1 user(s)! [ 1487.018301][T19614] loop3: detected capacity change from 0 to 4096 [ 1487.051699][T19614] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1487.082085][T19614] ntfs3: loop3: Failed to load $Extend (-22). [ 1487.089705][T19614] ntfs3: loop3: Failed to initialize $Extend. [ 1487.713894][T19634] loop6: detected capacity change from 0 to 256 [ 1487.715942][T19635] loop3: detected capacity change from 0 to 256 [ 1487.734052][T19634] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1487.837970][T14061] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1488.021443][T19643] loop6: detected capacity change from 0 to 256 [ 1488.042362][T14061] usb 2-1: Using ep0 maxpacket: 16 [ 1488.058061][T14061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.069988][T14061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.097604][T14061] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1488.127804][T19643] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1488.136044][T14061] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1488.169012][T14061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.181182][T14061] usb 2-1: config 0 descriptor?? [ 1488.230745][ T788] Process accounting resumed [ 1488.245851][ T788] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1488.272969][ T788] FAT-fs (loop6): Filesystem has been set read-only [ 1488.323299][ T788] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1488.732718][T14061] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001F/input/input94 [ 1488.804440][T14061] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1488.945472][T19658] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1489.028153][T13525] usb 2-1: USB disconnect, device number 124 [ 1489.048714][T19657] fido_id[19657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1489.070279][T19656] NILFS (loop6): bad btree node (ino=3, blocknr=42): level = 255, flags = 0xff, nchildren = 511 [ 1489.157046][T19656] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 1489.187945][T19656] Remounting filesystem read-only [ 1489.193839][T19656] NILFS (loop6): error -5 preparing GC: cannot mark copying blocks dirty [ 1489.379508][T19653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.20249 (19653) [ 1489.424083][T19653] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1489.436905][T19653] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1489.454293][T19653] BTRFS info (device loop3): setting nodatasum [ 1489.463838][T19653] BTRFS info (device loop3): force zlib compression, level 3 [ 1489.476835][T19653] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1489.489370][T19653] BTRFS info (device loop3): use lzo compression, level 0 [ 1489.498611][T19653] BTRFS info (device loop3): turning on flush-on-commit [ 1489.507394][T19653] BTRFS info (device loop3): enabling auto defrag [ 1489.514687][T19653] BTRFS info (device loop3): max_inline at 4096 [ 1489.532989][T19653] BTRFS info (device loop3): using free space tree [ 1489.598341][T19653] BTRFS info (device loop3): enabling ssd optimizations [ 1489.697900][ T5781] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1489.852794][T19683] set_capacity_and_notify: 4 callbacks suppressed [ 1489.852812][T19683] loop6: detected capacity change from 0 to 1764 [ 1490.059102][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20255'. [ 1490.115379][T19688] netlink: 'syz.3.20255': attribute type 5 has an invalid length. [ 1490.772196][T19711] loop3: detected capacity change from 0 to 512 [ 1490.929184][T19711] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1491.228795][T19721] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1491.534949][T19715] loop7: detected capacity change from 0 to 32768 [ 1491.612562][T19715] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1491.762471][T19715] XFS (loop7): Ending clean mount [ 1491.844052][T13525] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 1491.867761][T13525] XFS (loop7): Unmount and run xfs_repair [ 1491.885242][T13525] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1491.908330][T13525] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 1491.937533][T13525] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 1491.970040][T13525] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 1492.009440][T13525] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 1492.044247][T13525] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 1492.070609][T13525] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1492.089448][T13525] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1492.111503][T13525] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1492.133218][T19715] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 1492.163532][T19715] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1492.188908][T19715] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 1492.351678][T19752] loop1: detected capacity change from 0 to 32768 [ 1492.398318][T19752] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1492.552398][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 1492.772480][T14325] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1493.586507][T19760] loop7: detected capacity change from 0 to 32768 [ 1493.667197][T19760] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1493.826926][T19760] XFS (loop7): Ending clean mount [ 1493.841494][T19760] XFS (loop7): Quotacheck needed: Please wait. [ 1494.017630][T19789] loop1: detected capacity change from 0 to 2048 [ 1494.022130][T19760] XFS (loop7): Quotacheck: Done. [ 1494.131697][T19795] tipc: Started in network mode [ 1494.138187][T19795] tipc: Node identity da191a6c9e5a, cluster identity 4711 [ 1494.196952][T19789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1494.199292][T19795] tipc: Enabled bearer , priority 10 [ 1494.222163][ T28] audit: type=1800 audit(1785247772.183:3634): pid=19789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20294" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1494.233811][T19789] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1494.273757][T19789] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 1494.316566][T14325] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1494.317912][T19789] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1494.317912][T19789] [ 1494.390028][T19789] EXT4-fs (loop1): Total free blocks count 0 [ 1494.402728][T19789] EXT4-fs (loop1): Free/Dirty block details [ 1494.429538][T19789] EXT4-fs (loop1): free_blocks=66060288 [ 1494.435978][T19789] EXT4-fs (loop1): dirty_blocks=48 [ 1494.441610][T19789] EXT4-fs (loop1): Block reservation details [ 1494.448705][T19789] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 1494.621079][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.635404][T19802] loop3: detected capacity change from 0 to 128 [ 1494.776731][T19802] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1494.791661][T19802] ext4 filesystem being mounted at /5146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1495.018920][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1495.166535][T19813] loop1: detected capacity change from 0 to 512 [ 1495.193730][T19814] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1495.245633][T19813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1495.288942][T19813] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1495.290583][T19818] loop7: detected capacity change from 0 to 1024 [ 1495.353190][T19813] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.20304: Invalid block bitmap block 0 in block_group 0 [ 1495.395133][T14061] tipc: Node number set to 1145248364 [ 1495.419803][T19813] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1495.458746][T19813] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.20304: attempt to clear invalid blocks 983261 len 1 [ 1495.483311][T19813] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.20304: Invalid inode table block 0 in block_group 0 [ 1495.507865][T19813] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1495.519631][T19813] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1495.532968][T19813] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.20304: Invalid inode table block 0 in block_group 0 [ 1495.553028][T19813] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1495.563583][T19813] EXT4-fs error (device loop1): ext4_truncate:4302: inode #11: comm syz.1.20304: mark_inode_dirty error [ 1495.596605][T19813] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1495.627000][T19813] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz.1.20304: Invalid inode table block 0 in block_group 0 [ 1495.700301][T19813] EXT4-fs (loop1): 1 truncate cleaned up [ 1495.709900][T19813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.879040][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.755978][T19857] loop1: detected capacity change from 0 to 1024 [ 1496.779918][T19857] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1496.804579][T19857] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 1496.830541][T19837] loop7: detected capacity change from 0 to 32768 [ 1496.850961][T19857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1496.931483][T19837] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1497.074793][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.106318][T19837] XFS (loop7): Ending clean mount [ 1497.356620][T14325] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1497.474851][ C1] vkms_vblank_simulate: vblank timer overrun [ 1497.614928][T19883] loop6: detected capacity change from 0 to 4096 [ 1497.636401][T19884] loop1: detected capacity change from 0 to 4096 [ 1497.707337][T19884] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1497.769356][T19884] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1497.858016][T19884] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1497.928941][T19884] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1498.004279][T19884] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1498.020480][T19890] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.20338'. [ 1498.056504][T19890] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1498.090178][T19884] ntfs: volume version 3.1. [ 1498.118153][T19889] loop3: detected capacity change from 0 to 4096 [ 1498.135568][T19884] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1498.169301][T19884] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1498.220355][T19893] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1498.253982][T19884] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1498.294455][T19884] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1498.297195][T19892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.351393][T19889] NILFS (loop3): nilfs_sufile_do_free: segment 6 is already clean [ 1498.358364][T19892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.399148][T19889] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 1498.567922][T19894] lo: left promiscuous mode [ 1498.613733][T19894] tunl0: left promiscuous mode [ 1498.619491][T19894] gre0: left promiscuous mode [ 1498.662814][T19894] erspan0: left promiscuous mode [ 1498.694667][T19900] loop1: detected capacity change from 0 to 1024 [ 1498.716023][T19894] ip_vti0: left promiscuous mode [ 1498.759997][T19894] ip6_vti0: left promiscuous mode [ 1498.792354][T19894] sit0: left promiscuous mode [ 1498.826802][T19906] loop3: detected capacity change from 0 to 512 [ 1498.856870][T19906] EXT4-fs: Ignoring removed nobh option [ 1498.886314][T19906] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1498.902321][T19894] ip6tnl0: left promiscuous mode [ 1498.930216][T19894] ip6gre0: left promiscuous mode [ 1498.940998][T19894] syz_tun: left promiscuous mode [ 1498.961430][T19894] ip6gretap0: left promiscuous mode [ 1498.982580][T19894] bridge0: left promiscuous mode [ 1498.994351][T19906] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.20344: attempt to clear invalid blocks 1 len 1 [ 1498.999127][T19894] vcan0: left promiscuous mode [ 1499.022425][T19906] EXT4-fs (loop3): Remounting filesystem read-only [ 1499.046663][T19906] EXT4-fs (loop3): 1 truncate cleaned up [ 1499.064427][T19906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.089483][T19894] bond0: left promiscuous mode [ 1499.130402][T19894] bond_slave_0: left promiscuous mode [ 1499.179393][T19894] bond_slave_1: left promiscuous mode [ 1499.219977][T19894] team0: left promiscuous mode [ 1499.245794][T19894] team_slave_0: left promiscuous mode [ 1499.255677][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.273205][T19894] team_slave_1: left promiscuous mode [ 1499.306880][T19894] dummy0: left promiscuous mode [ 1499.321186][T19894] nlmon0: left promiscuous mode [ 1499.326747][T19894] caif0: left promiscuous mode [ 1499.366683][T19894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.374121][T19894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.448057][T19894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.455636][T19894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.542381][T19921] comedi comedi3: 8255: I/O port conflict (0x4004f27,4) [ 1499.560469][T19921] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1499.570409][T19894] vlan2: left allmulticast mode [ 1499.596866][T19921] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1499.608389][T19894] bond_slave_0: left allmulticast mode [ 1499.618614][T19921] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 1499.640969][T19921] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1499.660249][T19921] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1499.679309][T19921] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1500.240294][T19945] loop6: detected capacity change from 0 to 1024 [ 1500.271076][T19945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1500.289230][T19945] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 1501.017724][T19970] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20374'. [ 1501.147301][T19980] loop3: detected capacity change from 0 to 512 [ 1501.235560][T19980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.264534][T19980] ext4 filesystem being mounted at /5168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.307402][T19980] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1501.317416][T19980] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 1501.325786][T19980] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1501.366907][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.429765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1501.493034][T19991] loop7: detected capacity change from 0 to 2048 [ 1501.514599][T19991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1501.778483][T19997] loop3: detected capacity change from 0 to 512 [ 1501.800072][T19997] EXT4-fs: Ignoring removed nobh option [ 1501.846246][T19997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1501.912282][T19997] EXT4-fs (loop3): 1 truncate cleaned up [ 1501.914289][T20001] nbd: couldn't find device at index 23 [ 1501.942148][T19997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.195631][T20004] loop7: detected capacity change from 0 to 4096 [ 1502.254653][T20004] __ntfs_error: 5 callbacks suppressed [ 1502.254674][T20004] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1502.297376][T20004] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1502.330015][T20004] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1502.375188][T20004] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1502.412687][T20004] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1502.452688][T20004] ntfs: volume version 3.1. [ 1502.475385][T20004] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1502.525587][T20004] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1502.540643][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.610222][T20004] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1502.654362][T20004] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1502.679713][T20004] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1502.933024][T20015] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1503.283118][T20010] loop1: detected capacity change from 0 to 32768 [ 1503.342776][T20010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.20391 (20010) [ 1503.969037][ T788] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1504.031788][T20019] loop6: detected capacity change from 0 to 131072 [ 1504.058993][T20019] F2FS-fs (loop6): invalid crc value [ 1504.073971][T20019] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1504.104439][T20010] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1504.146788][T20010] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1504.182397][T20019] F2FS-fs (loop6): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 1504.191837][T20019] F2FS-fs (loop6): Failed to read root inode [ 1504.198793][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.223766][T20010] BTRFS info (device loop1): setting nodatasum [ 1504.259818][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.303069][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1504.303633][T20010] BTRFS info (device loop1): force zlib compression, level 3 [ 1504.316494][ T788] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1504.359539][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.371498][T20010] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1504.417946][ T788] usb 4-1: config 0 descriptor?? [ 1504.426225][T20010] BTRFS info (device loop1): use lzo compression, level 0 [ 1504.449534][T20010] BTRFS info (device loop1): turning on flush-on-commit [ 1504.472170][T20010] BTRFS info (device loop1): enabling auto defrag [ 1504.492338][T20010] BTRFS info (device loop1): max_inline at 4096 [ 1504.522784][T20010] BTRFS info (device loop1): using free space tree [ 1504.714011][T20054] loop7: detected capacity change from 0 to 512 [ 1504.731787][T20010] BTRFS info (device loop1): enabling ssd optimizations [ 1504.801506][T20054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1504.867081][T20054] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.922459][ T788] steelseries 0003:1038:1410.0020: unknown main item tag 0x1 [ 1504.943401][T20054] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.20403: No space for directory leaf checksum. Please run e2fsck -D. [ 1505.002130][ T788] steelseries 0003:1038:1410.0020: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1505.005447][T20054] EXT4-fs error (device loop7): ext4_readdir:223: inode #2: comm syz.7.20403: path /546/file0: directory fails checksum at offset 0 [ 1505.034457][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1505.267111][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.296885][ T788] usb 4-1: USB disconnect, device number 123 [ 1505.903121][T20070] loop7: detected capacity change from 0 to 4096 [ 1505.927414][T20070] ntfs: volume version 3.1. [ 1506.072372][T20076] bridge_slave_1: default FDB implementation only supports local addresses [ 1506.451560][T20091] loop1: detected capacity change from 0 to 512 [ 1506.467045][T20091] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1506.489735][T20091] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1506.499349][T20091] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.20418: invalid indirect mapped block 2683928664 (level 1) [ 1506.539608][T20091] EXT4-fs (loop1): Remounting filesystem read-only [ 1506.546839][T20091] EXT4-fs (loop1): 1 truncate cleaned up [ 1506.554069][T20091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.671394][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.998374][T20108] loop7: detected capacity change from 0 to 512 [ 1507.016196][T20108] EXT4-fs: Ignoring removed orlov option [ 1507.023752][T20108] EXT4-fs: Ignoring removed mblk_io_submit option [ 1507.039961][T20108] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.20424: corrupted in-inode xattr: e_value size too large [ 1507.064964][T20108] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.20424: couldn't read orphan inode 15 (err -117) [ 1507.085515][T20108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.155918][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.269526][T20111] netlink: 24 bytes leftover after parsing attributes in process `syz.7.20425'. [ 1507.281968][T20111] netlink: 212 bytes leftover after parsing attributes in process `syz.7.20425'. [ 1507.419329][T20113] loop6: detected capacity change from 0 to 512 [ 1507.444310][T20113] EXT4-fs: Ignoring removed bh option [ 1507.497544][T20113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.607985][T20113] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.694477][T20113] EXT4-fs error (device loop6): ext4_ext_check_inode:532: inode #2: comm syz.6.20426: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1507.782892][T20113] EXT4-fs (loop6): Remounting filesystem read-only [ 1507.821849][T20125] netlink: 'syz.3.20431': attribute type 29 has an invalid length. [ 1507.869386][T20125] netlink: 'syz.3.20431': attribute type 29 has an invalid length. [ 1507.889340][T13919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.901875][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20432'. [ 1507.921635][T20127] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1507.941014][T20127] netlink: 152 bytes leftover after parsing attributes in process `syz.7.20432'. [ 1508.065454][T20129] loop6: detected capacity change from 0 to 512 [ 1508.083972][T20129] EXT4-fs: Ignoring removed i_version option [ 1508.112652][T20129] EXT4-fs: Ignoring removed bh option [ 1508.195643][T20129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.285690][T20129] ext4 filesystem being mounted at /504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.349172][T20143] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1508.418410][T20129] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20433'. [ 1508.538943][T13919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.742849][T20155] sp0: Synchronizing with TNC [ 1508.788702][T20153] loop6: detected capacity change from 0 to 4096 [ 1509.053223][T20157] loop3: detected capacity change from 0 to 1024 [ 1509.087259][T20157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1509.125692][T20157] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 1509.180666][T20162] netlink: 100 bytes leftover after parsing attributes in process `syz.1.20448'. [ 1509.537455][T20173] loop1: detected capacity change from 0 to 2048 [ 1509.577299][T20173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.074787][T20192] loop3: detected capacity change from 0 to 4096 [ 1510.114753][T20193] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1510.149214][T20192] NILFS (loop3): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=0, cno=0, offset=0, blocknr=0, vblocknr=0 [ 1510.164459][T20192] NILFS (loop3): error -2 preparing GC: cannot read source blocks [ 1510.498285][T20190] loop1: detected capacity change from 0 to 32768 [ 1511.520942][T20230] loop3: detected capacity change from 0 to 8192 [ 1511.568462][T20231] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1511.659333][T20222] loop1: detected capacity change from 0 to 32768 [ 1511.742804][T20222] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page [ 1511.742804][T20222] [ 1511.759728][T20222] ERROR: (device loop1): remounting filesystem as read-only [ 1511.781494][T20222] ERROR: (device loop1): dbDiscardAG: -EIO [ 1511.781494][T20222] [ 1512.383901][T20249] loop3: detected capacity change from 0 to 512 [ 1512.435926][T20249] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.20489: invalid indirect mapped block 10 (level 1) [ 1512.508692][T20249] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.20489: invalid indirect mapped block 8 (level 1) [ 1512.566357][T20249] EXT4-fs (loop3): 1 truncate cleaned up [ 1512.574383][T20249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.671800][T20249] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 1512.740544][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.745813][T20245] loop7: detected capacity change from 0 to 32768 [ 1512.889464][T20245] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1513.005161][T20258] loop6: detected capacity change from 0 to 128 [ 1513.052079][T20258] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1513.141294][T14325] ocfs2: Unmounting device (7,7) on (node local) [ 1513.186096][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1513.186113][ T28] audit: type=1800 audit(2000000012.366:3636): pid=20258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.20491" name="file2" dev="loop6" ino=95 res=0 errno=0 [ 1513.412789][T20268] tipc: Enabled bearer , priority 2 [ 1513.641360][T20274] loop7: detected capacity change from 0 to 512 [ 1513.665716][T20274] EXT4-fs: Ignoring removed nobh option [ 1513.725314][T20274] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1513.820821][T20274] EXT4-fs (loop7): 1 truncate cleaned up [ 1513.857951][T20274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1514.078368][T20288] tunl0: left promiscuous mode [ 1514.090157][T20292] loop3: detected capacity change from 0 to 64 [ 1514.105288][T20292] hfs: unable to locate alternate MDB [ 1514.143603][T20292] hfs: continuing without an alternate MDB [ 1514.231963][T20288] veth1_to_hsr: left promiscuous mode [ 1514.260648][T20288] 0ªX¹¦D: left allmulticast mode [ 1514.281272][T20288] veth0_macvtap: left allmulticast mode [ 1514.299385][T20288] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1514.309142][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.321548][T20288] ip6erspan0: left allmulticast mode [ 1514.357865][T20288] bond2: left allmulticast mode [ 1514.395648][T20288] bridge1: left promiscuous mode [ 1514.400796][T20288] bridge1: left allmulticast mode [ 1514.407440][T20288] bond3: left promiscuous mode [ 1514.414216][T20288] gretap3: left allmulticast mode [ 1514.428842][T20288] bridge2: left promiscuous mode [ 1514.440572][T20288] bridge2: left allmulticast mode [ 1514.447015][T20288] batadv0: left promiscuous mode [ 1514.453666][T20288] bond6: left promiscuous mode [ 1514.497546][T20288] bridge7: left allmulticast mode [ 1514.504738][T20298] loop7: detected capacity change from 0 to 1024 [ 1514.526798][T20298] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1514.579392][T20298] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 2: comm syz.7.20509: lblock 2 mapped to illegal pblock 2 (length 1) [ 1514.608710][T20300] loop6: detected capacity change from 0 to 4096 [ 1514.613586][T20298] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1514.670662][T20298] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 48: comm syz.7.20509: lblock 0 mapped to illegal pblock 48 (length 1) [ 1514.687073][T20300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.711425][T20298] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1514.769637][T20298] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.20509: Failed to acquire dquot type 0 [ 1514.814441][T20298] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1514.844398][T20298] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.20509: mark_inode_dirty error [ 1514.880595][T13919] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.886860][T20306] loop1: detected capacity change from 0 to 256 [ 1514.904891][T20298] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1514.924411][T20298] EXT4-fs (loop7): 1 orphan inode deleted [ 1514.941543][T20298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1514.948755][T20306] exfat: Deprecated parameter 'namecase' [ 1514.967948][ T2545] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1514.996630][T20306] exfat: Deprecated parameter 'namecase' [ 1515.018090][ T2545] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1515.020787][T20306] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1515.046668][T20298] EXT4-fs error (device loop7): __ext4_get_inode_loc:4497: comm syz.7.20509: Invalid inode table block 1 in block_group 0 [ 1515.076326][ T2545] EXT4-fs error (device loop7): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 1515.114644][T20298] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1515.221519][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.271796][T14325] EXT4-fs error (device loop7): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1515.331136][T14325] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1515.377925][T14325] EXT4-fs error (device loop7): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 1515.633386][T20319] netlink: 128 bytes leftover after parsing attributes in process `syz.1.20520'. [ 1515.848351][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20522'. [ 1516.029453][T20330] loop7: detected capacity change from 0 to 1024 [ 1516.041477][T20317] loop3: detected capacity change from 0 to 32768 [ 1516.049608][T20330] EXT4-fs: Ignoring removed orlov option [ 1516.149783][T20330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1516.419660][T14325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.856089][T20359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1516.875483][T20359] ext4 filesystem being mounted at /5073/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.903627][ T5810] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1516.909562][T20359] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.20535: lblock 3 mapped to illegal pblock 3 (length 3) [ 1516.911670][ T28] audit: type=1800 audit(2000000015.846:3637): pid=20359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20535" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1516.943733][T20359] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.20535: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1517.070683][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1517.149647][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 1517.203022][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1517.209354][T20370] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1517.231492][T20370] hpfs: filesystem error: improperly stopped [ 1517.232486][ T5810] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1517.239352][T20370] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1517.249592][ T5810] usb 4-1: string descriptor 0 read error: -22 [ 1517.256672][T20370] [ 1517.267089][ T5810] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1517.276191][ T5810] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1517.308077][T20370] hpfs: You really don't want any checks? You are crazy... [ 1517.317068][ T5810] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1517.339413][ T5810] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1517.342505][T20370] hpfs: Code page index out of array [ 1517.368586][ T5810] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1517.382005][T20370] hpfs: code page support is disabled [ 1517.387499][ T5810] usb 4-1: media controller created [ 1517.404462][T20370] hpfs: hpfs_map_4sectors(): unaligned read [ 1517.415223][T20370] hpfs: hpfs_map_4sectors(): unaligned read [ 1517.427778][T20370] hpfs: filesystem error: unable to find root dir [ 1517.442247][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1517.949180][T20372] set_capacity_and_notify: 2 callbacks suppressed [ 1517.949198][T20372] loop1: detected capacity change from 0 to 40427 [ 1517.979501][T20372] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1517.992497][T20372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1518.026066][T20372] F2FS-fs (loop1): invalid crc value [ 1518.042352][T20372] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 1518.097128][T20372] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1518.216848][T20372] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1518.224425][T20372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1518.372330][T20372] syz.1.20538: attempt to access beyond end of device [ 1518.372330][T20372] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1518.410850][T20372] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1518.572399][ T5810] zl10353_read_register: readreg error (reg=127, ret==0) [ 1518.586567][T20351] usb 4-1: dvb_usb_au6610: wlen=4100, aborting [ 1518.683452][ T5810] usb 4-1: USB disconnect, device number 124 [ 1519.036723][T20401] loop1: detected capacity change from 0 to 64 [ 1519.087167][ T28] audit: type=1800 audit(2000000017.885:3638): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20549" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 1519.435734][T20399] loop7: detected capacity change from 0 to 32768 [ 1519.467873][T20399] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 1519.502270][T20409] loop1: detected capacity change from 0 to 128 [ 1519.561463][T20409] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1519.608458][T20409] hpfs: filesystem error: improperly stopped [ 1519.615047][T20409] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1519.660841][ T5769] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 1519.661957][T20409] hpfs: You really don't want any checks? You are crazy... [ 1519.701098][T20409] hpfs: hpfs_map_sector(): read error [ 1519.715278][T20409] hpfs: code page support is disabled [ 1519.720891][T20409] hpfs: hpfs_map_4sectors(): unaligned read [ 1519.740314][T20409] hpfs: hpfs_map_4sectors(): unaligned read [ 1519.746377][T20409] hpfs: filesystem error: unable to find root dir [ 1520.238379][T20426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20564'. [ 1520.748296][T20442] ip6tnl12: entered allmulticast mode [ 1520.844899][T20424] loop6: detected capacity change from 0 to 32768 [ 1520.896699][T20424] (syz.6.20563,20424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1520.942021][T20424] (syz.6.20563,20424,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1521.064475][T20424] JBD2: Ignoring recovery information on journal [ 1521.142516][T20424] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1521.268795][T20424] [ 1521.271327][T20424] ====================================================== [ 1521.278742][T20424] WARNING: possible circular locking dependency detected [ 1521.285798][T20424] syzkaller #0 Not tainted [ 1521.290675][T20424] ------------------------------------------------------ [ 1521.298465][T20424] syz.6.20563/20424 is trying to acquire lock: [ 1521.304988][T20424] ffff8880787b3498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1521.318268][T20424] [ 1521.318268][T20424] but task is already holding lock: [ 1521.325844][T20424] ffff88807c6e2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1521.335600][T20424] [ 1521.335600][T20424] which lock already depends on the new lock. [ 1521.335600][T20424] [ 1521.346372][T20424] [ 1521.346372][T20424] the existing dependency chain (in reverse order) is: [ 1521.355585][T20424] [ 1521.355585][T20424] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1521.363593][T20424] down_read+0x46/0x2e0 [ 1521.368403][T20424] ocfs2_init_acl+0x30a/0x770 [ 1521.373750][T20424] ocfs2_mknod+0x1427/0x2310 [ 1521.378953][T20424] ocfs2_create+0x196/0x430 [ 1521.384296][T20424] path_openat+0x1705/0x3270 [ 1521.389451][T20424] do_filp_open+0x1f2/0x430 [ 1521.394667][T20424] do_sys_openat2+0x134/0x1d0 [ 1521.400182][T20424] __x64_sys_openat+0x139/0x160 [ 1521.405594][T20424] do_syscall_64+0x55/0xb0 [ 1521.410805][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.417531][T20424] [ 1521.417531][T20424] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1521.426357][T20424] down_read+0x46/0x2e0 [ 1521.431070][T20424] ocfs2_start_trans+0x3a8/0x6f0 [ 1521.436754][T20424] ocfs2_setattr+0x10e8/0x1bf0 [ 1521.442245][T20424] notify_change+0xb05/0xde0 [ 1521.448173][T20424] chown_common+0x3f3/0x5b0 [ 1521.453413][T20424] do_fchownat+0x14b/0x240 [ 1521.458485][T20424] __x64_sys_lchown+0x85/0x90 [ 1521.464066][T20424] do_syscall_64+0x55/0xb0 [ 1521.469034][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.475498][T20424] [ 1521.475498][T20424] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1521.483122][T20424] ocfs2_start_trans+0x2a9/0x6f0 [ 1521.488796][T20424] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 1521.495332][T20424] ocfs2_dismount_volume+0x1e5/0x890 [ 1521.501352][T20424] generic_shutdown_super+0x134/0x2b0 [ 1521.507276][T20424] kill_block_super+0x44/0x90 [ 1521.512516][T20424] deactivate_locked_super+0x97/0x100 [ 1521.518444][T20424] cleanup_mnt+0x3d7/0x460 [ 1521.523421][T20424] task_work_run+0x1d4/0x260 [ 1521.528925][T20424] exit_to_user_mode_loop+0xe6/0x110 [ 1521.534768][T20424] exit_to_user_mode_prepare+0xee/0x180 [ 1521.540976][T20424] syscall_exit_to_user_mode+0x1a/0x50 [ 1521.547296][T20424] do_syscall_64+0x61/0xb0 [ 1521.552264][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.558803][T20424] [ 1521.558803][T20424] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 1521.569898][T20424] down_write+0x97/0x200 [ 1521.574918][T20424] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1521.581474][T20424] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 1521.588370][T20424] ocfs2_reserve_suballoc_bits+0x783/0x44a0 [ 1521.594888][T20424] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1521.601865][T20424] ocfs2_extend_dir+0xd3c/0x49b0 [ 1521.607383][T20424] ocfs2_prepare_dir_for_insert+0x30e7/0x5520 [ 1521.614174][T20424] ocfs2_mknod+0x831/0x2310 [ 1521.619222][T20424] ocfs2_mkdir+0x196/0x430 [ 1521.624288][T20424] vfs_mkdir+0x2a5/0x470 [ 1521.629138][T20424] do_mkdirat+0x1dc/0x450 [ 1521.634071][T20424] __x64_sys_mkdirat+0x89/0xa0 [ 1521.639355][T20424] do_syscall_64+0x55/0xb0 [ 1521.644299][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.651324][T20424] [ 1521.651324][T20424] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1521.661955][T20424] __lock_acquire+0x37ef/0x7d80 [ 1521.667506][T20424] lock_acquire+0x19e/0x420 [ 1521.672753][T20424] down_write+0x97/0x200 [ 1521.677814][T20424] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1521.684272][T20424] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1521.691146][T20424] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1521.697307][T20424] ocfs2_xattr_set+0xc75/0x13a0 [ 1521.702711][T20424] ocfs2_set_acl+0x4d4/0x580 [ 1521.707825][T20424] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1521.713416][T20424] vfs_set_acl+0x80f/0xa70 [ 1521.718364][T20424] do_set_acl+0xf5/0x180 [ 1521.723242][T20424] path_setxattr+0x362/0x590 [ 1521.728455][T20424] __x64_sys_setxattr+0xbb/0xd0 [ 1521.734196][T20424] do_syscall_64+0x55/0xb0 [ 1521.739994][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.746778][T20424] [ 1521.746778][T20424] other info that might help us debug this: [ 1521.746778][T20424] [ 1521.757010][T20424] Chain exists of: [ 1521.757010][T20424] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1521.757010][T20424] [ 1521.774079][T20424] Possible unsafe locking scenario: [ 1521.774079][T20424] [ 1521.781774][T20424] CPU0 CPU1 [ 1521.787220][T20424] ---- ---- [ 1521.792679][T20424] lock(&oi->ip_xattr_sem); [ 1521.797503][T20424] lock(&journal->j_trans_barrier); [ 1521.805312][T20424] lock(&oi->ip_xattr_sem); [ 1521.812436][T20424] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 1521.819991][T20424] [ 1521.819991][T20424] *** DEADLOCK *** [ 1521.819991][T20424] [ 1521.828285][T20424] 3 locks held by syz.6.20563/20424: [ 1521.833897][T20424] #0: ffff88802757a418 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1521.843231][T20424] #1: ffff88807c6e2658 (&type->i_mutex_dir_key#16){++++}-{3:3}, at: vfs_set_acl+0x368/0xa70 [ 1521.853519][T20424] #2: ffff88807c6e2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1521.863725][T20424] [ 1521.863725][T20424] stack backtrace: [ 1521.869677][T20424] CPU: 0 PID: 20424 Comm: syz.6.20563 Not tainted syzkaller #0 [ 1521.877661][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1521.888254][T20424] Call Trace: [ 1521.891789][T20424] [ 1521.894849][T20424] dump_stack_lvl+0x18c/0x250 [ 1521.900245][T20424] ? load_image+0x420/0x420 [ 1521.904977][T20424] ? show_regs_print_info+0x20/0x20 [ 1521.910895][T20424] ? print_circular_bug+0x12b/0x1a0 [ 1521.916426][T20424] check_noncircular+0x2fc/0x400 [ 1521.922015][T20424] ? look_up_lock_class+0x75/0x140 [ 1521.927158][T20424] ? print_deadlock_bug+0x5d0/0x5d0 [ 1521.932941][T20424] ? lockdep_lock+0xf5/0x230 [ 1521.938272][T20424] ? _find_first_zero_bit+0xd6/0x100 [ 1521.943876][T20424] __lock_acquire+0x37ef/0x7d80 [ 1521.949294][T20424] ? verify_lock_unused+0x140/0x140 [ 1521.954540][T20424] ? stack_trace_snprint+0xf0/0xf0 [ 1521.959667][T20424] ? check_noncircular+0x18a/0x400 [ 1521.965151][T20424] ? verify_lock_unused+0x140/0x140 [ 1521.970581][T20424] ? igrab+0x8b/0xa0 [ 1521.975190][T20424] ? __lock_acquire+0x7d80/0x7d80 [ 1521.980423][T20424] ? do_raw_spin_lock+0x11f/0x2b0 [ 1521.985669][T20424] lock_acquire+0x19e/0x420 [ 1521.990304][T20424] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1521.996740][T20424] ? _raw_spin_unlock+0x28/0x40 [ 1522.001693][T20424] ? ocfs2_get_system_file_inode+0x1f9/0x820 [ 1522.007896][T20424] ? __might_sleep+0xe0/0xe0 [ 1522.013317][T20424] ? read_lock_is_recursive+0x20/0x20 [ 1522.018826][T20424] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1522.025537][T20424] ? verify_lock_unused+0x140/0x140 [ 1522.030759][T20424] ? check_noncircular+0x18a/0x400 [ 1522.036148][T20424] down_write+0x97/0x200 [ 1522.040849][T20424] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1522.047155][T20424] ? down_read_killable+0x340/0x340 [ 1522.052500][T20424] ? deref_stack_reg+0x1ab/0x230 [ 1522.057649][T20424] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1522.063563][T20424] ? mark_lock+0x94/0x320 [ 1522.068025][T20424] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1522.074428][T20424] ? __lock_acquire+0x7d80/0x7d80 [ 1522.079939][T20424] ? lock_chain_count+0x20/0x20 [ 1522.085189][T20424] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1522.091656][T20424] ? lockdep_hardirqs_on+0x98/0x150 [ 1522.097317][T20424] ? ocfs2_block_group_search+0x470/0x470 [ 1522.104671][T20424] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1522.110595][T20424] ? _raw_spin_unlock+0x40/0x40 [ 1522.116281][T20424] ? stack_trace_save+0xaa/0x100 [ 1522.121344][T20424] ? stack_trace_snprint+0xf0/0xf0 [ 1522.126836][T20424] ? __stack_depot_save+0x575/0x660 [ 1522.132513][T20424] ? kasan_set_track+0x5f/0x70 [ 1522.137940][T20424] ? kasan_set_track+0x4e/0x70 [ 1522.143072][T20424] ? __kasan_kmalloc+0x8f/0xa0 [ 1522.147998][T20424] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 1522.155422][T20424] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1522.161526][T20424] ? ocfs2_xattr_set+0xc75/0x13a0 [ 1522.166758][T20424] ? ocfs2_set_acl+0x4d4/0x580 [ 1522.171810][T20424] ? ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1522.178898][T20424] ? vfs_set_acl+0x80f/0xa70 [ 1522.184289][T20424] ? do_set_acl+0xf5/0x180 [ 1522.189829][T20424] ? path_setxattr+0x362/0x590 [ 1522.195344][T20424] ? __x64_sys_setxattr+0xbb/0xd0 [ 1522.200747][T20424] ? do_syscall_64+0x55/0xb0 [ 1522.206049][T20424] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.213751][T20424] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1522.222901][T20424] ? ocfs2_init_steal_slots+0x160/0x160 [ 1522.229180][T20424] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 1522.235819][T20424] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1522.242370][T20424] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 1522.249269][T20424] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 1522.256170][T20424] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 1522.262987][T20424] ? down_write+0x16e/0x200 [ 1522.268619][T20424] ? down_read_killable+0x340/0x340 [ 1522.275152][T20424] ? up_write+0x1be/0x410 [ 1522.279985][T20424] ocfs2_xattr_set+0xc75/0x13a0 [ 1522.285205][T20424] ? _raw_spin_unlock+0x40/0x40 [ 1522.290638][T20424] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 1522.297533][T20424] ? ocfs2_set_acl+0xe6/0x580 [ 1522.302846][T20424] ? vfs_set_acl+0x80f/0xa70 [ 1522.309125][T20424] ? do_set_acl+0xf5/0x180 [ 1522.314001][T20424] ? path_setxattr+0x362/0x590 [ 1522.319932][T20424] ? do_syscall_64+0x55/0xb0 [ 1522.325090][T20424] ? ocfs2_set_acl+0xe6/0x580 [ 1522.330426][T20424] ? rcu_is_watching+0x15/0xb0 [ 1522.335576][T20424] ? ocfs2_set_acl+0xe6/0x580 [ 1522.342475][T20424] ? __kmalloc+0xe5/0x240 [ 1522.347557][T20424] ocfs2_set_acl+0x4d4/0x580 [ 1522.352453][T20424] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1522.357674][T20424] ? ocfs2_xattr_get+0x260/0x260 [ 1522.363157][T20424] ? evm_inode_set_acl+0xbc/0x430 [ 1522.369183][T20424] ? down_read_killable+0x340/0x340 [ 1522.375070][T20424] ? evm_revalidate_status+0x4f/0xb0 [ 1522.383350][T20424] ? posix_acl_valid+0x3ba/0x430 [ 1522.389300][T20424] vfs_set_acl+0x80f/0xa70 [ 1522.394309][T20424] do_set_acl+0xf5/0x180 [ 1522.399017][T20424] path_setxattr+0x362/0x590 [ 1522.403774][T20424] ? simple_xattrs_free+0x150/0x150 [ 1522.409114][T20424] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1522.415316][T20424] ? lock_chain_count+0x20/0x20 [ 1522.421646][T20424] __x64_sys_setxattr+0xbb/0xd0 [ 1522.426961][T20424] do_syscall_64+0x55/0xb0 [ 1522.432193][T20424] ? clear_bhb_loop+0x40/0x90 [ 1522.437256][T20424] ? clear_bhb_loop+0x40/0x90 [ 1522.442641][T20424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.449649][T20424] RIP: 0033:0x7fa856f9de99 [ 1522.454897][T20424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.478353][T20424] RSP: 002b:00007fa857f25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1522.489529][T20424] RAX: ffffffffffffffda RBX: 00007fa857225fa0 RCX: 00007fa856f9de99 [ 1522.498452][T20424] RDX: 0000200000000c40 RSI: 0000200000000080 RDI: 00002000000000c0 [ 1522.507397][T20424] RBP: 00007fa857033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1522.516232][T20424] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1522.524886][T20424] R13: 00007fa857226038 R14: 00007fa857225fa0 R15: 00007ffc0b54c638 [ 1522.533393][T20424] [ 1522.730707][T13919] ocfs2: Unmounting device (7,6) on (node local)