last executing test programs: 2.731075767s ago: executing program 0 (id=10924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 2.548333635s ago: executing program 0 (id=10928): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x5, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x9, 0x67, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}) 2.339361886s ago: executing program 0 (id=10931): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000000)) 2.155906414s ago: executing program 3 (id=10935): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.032436886s ago: executing program 0 (id=10938): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 1.878443002s ago: executing program 2 (id=10941): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x8, &(0x7f0000003040)={0xff, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) 1.733492877s ago: executing program 2 (id=10943): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x300, 0x0, 0x1, 0x9, 0x0, 0x6}, 0x20) 1.586971531s ago: executing program 2 (id=10946): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x103102, 0x0) read$nci(r0, &(0x7f0000002780)=""/3, 0x3) 1.510029769s ago: executing program 2 (id=10947): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @sndinfo={0x20, 0x84, 0x2, {0xfffb, 0x4, 0xff, 0x1}}], 0x38, 0xc004}, 0x40000) 1.485736961s ago: executing program 3 (id=10949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002000)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 1.380786012s ago: executing program 3 (id=10950): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa0041) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x8000000, 0x71, 0x200000009}) 1.366894803s ago: executing program 2 (id=10951): iopl(0x3) getrandom(0x0, 0x0, 0x6) 1.188885481s ago: executing program 2 (id=10953): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x97ef, &(0x7f0000012f40)="$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") 1.161402614s ago: executing program 1 (id=10954): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 1.154543984s ago: executing program 3 (id=10955): syz_mount_image$jfs(&(0x7f00000011c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYRES8=0x0], 0xfa, 0x61be, &(0x7f00000073c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 910.248499ms ago: executing program 1 (id=10956): r0 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0104307, &(0x7f0000000080)=0x81) 687.139101ms ago: executing program 1 (id=10957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x1, 0xffc, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x7f}}]}, 0x30}}, 0x408c0) 526.625237ms ago: executing program 1 (id=10958): setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7ff, 0xffffffdfffffffff}, 0x0) 376.158692ms ago: executing program 1 (id=10959): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[], 0x8b, 0x2cb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 289.984711ms ago: executing program 3 (id=10960): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 274.155512ms ago: executing program 0 (id=10961): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x9, 0x4, @name="8e1f0a6b2d3d8ecda22e32cbfb115b9ac2f7acae2f500d62c085de4d3309881a"}) 129.400507ms ago: executing program 0 (id=10962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff000000000000000085000000530000008500000007000000950000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.009877ms ago: executing program 1 (id=10963): r0 = timerfd_create(0x9, 0x800) timerfd_settime(r0, 0x2, &(0x7f00000006c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 3 (id=10964): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getpeername(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): alm OS converter now attached to ttyUSB0 [ 1195.861973][ T27] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1195.899020][ T27] usb 3-1: USB disconnect, device number 26 [ 1195.919964][ T27] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1195.968721][ T27] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1196.016605][ T27] visor 3-1:1.0: device disconnected [ 1196.342738][T27314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1196.355426][T27316] Non-string source [ 1197.213517][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9136'. [ 1197.244905][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9136'. [ 1197.726699][T27350] loop2: detected capacity change from 0 to 736 [ 1197.854344][T27350] rock: directory entry would overflow storage [ 1197.875554][T27350] rock: sig=0x3b10, size=4, remaining=3 [ 1198.057210][T27355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1198.064543][T27355] IPv6: NLM_F_CREATE should be set when creating new route [ 1198.124664][T27336] loop0: detected capacity change from 0 to 40427 [ 1198.159945][T27336] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 1198.190722][T27336] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1198.251768][T27336] F2FS-fs (loop0): invalid crc value [ 1198.302787][T27336] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1198.491158][T27364] netlink: 'syz.1.9147': attribute type 21 has an invalid length. [ 1198.498205][T27336] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 1198.549084][T27336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1198.648032][T27336] F2FS-fs (loop0): Corrupted max_depth of 3: 255 [ 1198.669776][T27336] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1198.909228][T27374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1199.268359][T27382] ip6gretap1: entered promiscuous mode [ 1199.667644][T27394] xt_bpf: check failed: parse error [ 1199.850279][T27400] netlink: 766 bytes leftover after parsing attributes in process `syz.2.9165'. [ 1200.337832][T27385] loop0: detected capacity change from 0 to 32768 [ 1200.378159][T27422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1200.387349][T27422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1200.397136][T27422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1200.398327][T27385] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1200.756744][T27436] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 1200.761457][T27385] XFS (loop0): Ending clean mount [ 1200.784167][T27385] XFS (loop0): Quotacheck needed: Please wait. [ 1200.872980][T27385] XFS (loop0): Quotacheck: Done. [ 1201.007194][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1201.743776][T27460] loop0: detected capacity change from 0 to 4096 [ 1201.780989][T27460] ntfs: volume version 3.1. [ 1201.940304][T27460] ntfs: (device loop0): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 1202.075804][T27474] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1202.686572][T27492] bond2: entered promiscuous mode [ 1203.119590][T27510] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551611) [ 1203.132021][T27510] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1203.913071][T27543] loop0: detected capacity change from 0 to 1024 [ 1203.925363][T27543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1203.942617][T27543] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1203.979717][T27543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.083411][T27543] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #11: comm syz.0.9229: missing EA_INODE flag [ 1204.108263][ T5857] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1204.168859][T27543] EXT4-fs (loop0): Remounting filesystem read-only [ 1204.268138][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.311546][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 1204.322711][ T5857] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1204.333969][ T5857] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config [ 1204.373345][ T5857] usb 2-1: config 0 has no interface number 0 [ 1204.393416][T27560] loop2: detected capacity change from 0 to 128 [ 1204.398757][ T5857] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1204.408821][T27560] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1204.416693][T27560] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1204.479976][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.513161][ T5857] usb 2-1: Product: syz [ 1204.524040][ T5857] usb 2-1: Manufacturer: syz [ 1204.538606][T27564] loop3: detected capacity change from 0 to 64 [ 1204.545708][ T5857] usb 2-1: SerialNumber: syz [ 1204.553078][ T5857] usb 2-1: config 0 descriptor?? [ 1204.800579][ T5857] usb 2-1: USB disconnect, device number 60 [ 1204.860337][T27572] IPv6: sit1: Disabled Multicast RS [ 1205.535273][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1205.542087][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1205.602971][T27601] netlink: 200 bytes leftover after parsing attributes in process `syz.3.9259'. [ 1205.928497][T27605] loop1: detected capacity change from 0 to 4096 [ 1206.034615][T27605] ntfs: volume version 3.1. [ 1206.169341][T27605] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 1206.605319][T27633] loop1: detected capacity change from 0 to 128 [ 1206.616887][T27633] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1206.636664][T27633] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1206.706966][ T5857] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1206.758774][ T28] audit: type=1326 audit(2000000155.033:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27636 comm="syz.0.9277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1206.812576][ T28] audit: type=1326 audit(2000000155.033:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27636 comm="syz.0.9277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1206.864952][ T28] audit: type=1326 audit(2000000155.070:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27636 comm="syz.0.9277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1206.930582][ T28] audit: type=1326 audit(2000000155.070:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27636 comm="syz.0.9277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1206.935169][ T5857] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1206.954537][ T28] audit: type=1326 audit(2000000155.070:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27636 comm="syz.0.9277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1207.000919][ T5857] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1207.024646][ T5857] usb 3-1: config 0 has no interface number 0 [ 1207.043710][ T5857] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1207.087321][ T5857] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1207.114499][ T5857] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1207.139016][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.168317][ T5857] usb 3-1: config 0 descriptor?? [ 1207.500854][T27635] loop3: detected capacity change from 0 to 32768 [ 1207.577976][ T28] audit: type=1800 audit(2000000155.790:52): pid=27635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9276" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 1207.638176][ T5857] usb 3-1: USB disconnect, device number 27 [ 1207.778976][T27651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9284'. [ 1207.892941][T27653] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1207.920801][T27641] loop0: detected capacity change from 0 to 32768 [ 1207.962872][T27641] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1208.215359][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9290'. [ 1208.236293][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9290'. [ 1208.258499][T27641] XFS (loop0): Ending clean mount [ 1208.281635][T27641] XFS (loop0): Quotacheck needed: Please wait. [ 1208.416534][T27641] XFS (loop0): Quotacheck: Done. [ 1208.539828][T27675] loop3: detected capacity change from 0 to 256 [ 1208.605962][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1208.734090][T27675] FAT-fs (loop3): Directory bread(block 64) failed [ 1208.757798][T27675] FAT-fs (loop3): Directory bread(block 65) failed [ 1208.807032][T27681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9296'. [ 1208.807259][T27675] FAT-fs (loop3): Directory bread(block 66) failed [ 1208.823020][T27675] FAT-fs (loop3): Directory bread(block 67) failed [ 1208.829688][T27675] FAT-fs (loop3): Directory bread(block 68) failed [ 1208.836890][T27681] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9296'. [ 1208.846709][T27675] FAT-fs (loop3): Directory bread(block 69) failed [ 1208.853369][T27675] FAT-fs (loop3): Directory bread(block 70) failed [ 1208.860134][T27675] FAT-fs (loop3): Directory bread(block 71) failed [ 1208.866906][T27675] FAT-fs (loop3): Directory bread(block 72) failed [ 1208.873565][T27675] FAT-fs (loop3): Directory bread(block 73) failed [ 1209.542146][T27704] sctp: [Deprecated]: syz.2.9305 (pid 27704) Use of int in maxseg socket option. [ 1209.542146][T27704] Use struct sctp_assoc_value instead [ 1210.424613][T27732] loop1: detected capacity change from 0 to 2048 [ 1210.442184][T27732] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1210.493329][T27737] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1210.593899][T27739] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1210.792497][T27717] loop3: detected capacity change from 0 to 32768 [ 1210.818304][T27717] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1210.855176][T27717] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1210.879584][T27746] loop2: detected capacity change from 0 to 8 [ 1210.953727][T27746] SQUASHFS error: xz decompression failed, data probably corrupt [ 1210.963291][T27746] SQUASHFS error: Failed to read block 0x108: -5 [ 1210.969686][T27746] SQUASHFS error: Unable to read metadata cache entry [106] [ 1210.977242][T27746] SQUASHFS error: Unable to read inode 0x11f [ 1211.019774][T27753] : renamed from bond_slave_0 (while UP) [ 1211.132529][T27717] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 1211.196336][T27717] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1211.238659][T27717] OCFS2: File system is now read-only. [ 1211.292413][T27717] (syz.3.9312,27717,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1211.301094][T27717] (syz.3.9312,27717,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1211.375285][T27717] (syz.3.9312,27717,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1211.410552][T27717] (syz.3.9312,27717,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1211.423397][T27717] (syz.3.9312,27717,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1211.442004][T27717] (syz.3.9312,27717,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1211.461295][T27717] (syz.3.9312,27717,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1211.482918][T27717] (syz.3.9312,27717,0):ocfs2_symlink:1944 ERROR: status = -30 [ 1211.494241][T27717] (syz.3.9312,27717,0):ocfs2_symlink:2068 ERROR: status = -30 [ 1211.585254][T27717] syz.3.9312 (27717) used greatest stack depth: 19504 bytes left [ 1211.617149][T27759] loop2: detected capacity change from 0 to 4096 [ 1211.638749][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 1211.851599][T27769] netlink: 'syz.1.9336': attribute type 6 has an invalid length. [ 1211.872871][T27769] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9336'. [ 1212.223555][T27777] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9340'. [ 1212.470211][T27787] netlink: 'syz.0.9343': attribute type 2 has an invalid length. [ 1212.614054][ T28] audit: type=1326 audit(2000000160.514:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27794 comm="syz.0.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1212.703786][ T28] audit: type=1326 audit(2000000160.542:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27794 comm="syz.0.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1212.734320][ T28] audit: type=1326 audit(2000000160.570:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27794 comm="syz.0.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1212.787682][ T28] audit: type=1326 audit(2000000160.570:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27794 comm="syz.0.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1212.824133][T27799] loop2: detected capacity change from 0 to 64 [ 1212.879300][T27799] Trying to free block not in datazone [ 1212.972615][T27805] loop1: detected capacity change from 0 to 8 [ 1212.993610][T27805] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1213.023324][ T7503] udevd[7503]: incorrect cramfs checksum on /dev/loop1 [ 1213.047541][T27805] cramfs: Error -3 while decompressing! [ 1213.056881][T27805] cramfs: ffffffff96fe1368(26)->ffff88805008f000(4096) [ 1213.063940][T27805] cramfs: Error -3 while decompressing! [ 1213.084032][T27805] cramfs: ffffffff96fe1368(26)->ffff88805008f000(4096) [ 1213.140076][ T7503] udevd[7503]: incorrect cramfs checksum on /dev/loop1 [ 1213.213780][T27809] loop2: detected capacity change from 0 to 65 [ 1213.320387][T27809] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1213.340098][T27809] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1213.960807][T27801] loop0: detected capacity change from 0 to 32768 [ 1213.980045][T27825] loop1: detected capacity change from 0 to 64 [ 1214.059564][T27825] Trying to free block not in datazone [ 1214.074177][T27801] ea_get: invalid extended attribute [ 1214.102626][T27801] ffff88805ea60c70: 04 00 00 00 .... [ 1214.506266][T27817] loop3: detected capacity change from 0 to 32768 [ 1214.572157][T27817] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 1214.598885][T27838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9370'. [ 1214.632409][T27817] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1214.661545][T27838] netlink: 30 bytes leftover after parsing attributes in process `syz.2.9370'. [ 1214.687951][ T11] (kworker/u4:0,11,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 1214.733216][T27842] netlink: 'syz.1.9371': attribute type 10 has an invalid length. [ 1214.761548][T27842] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9371'. [ 1214.765069][T27817] (syz.3.9358,27817,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 1214.798911][T27817] (syz.3.9358,27817,1):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 1214.997046][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 1215.016947][T27848] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1215.037464][T27848] overlayfs: missing 'lowerdir' [ 1215.576677][T27869] binder: BC_ATTEMPT_ACQUIRE not supported [ 1215.590935][T27869] binder: 27868:27869 ioctl c0306201 2000000003c0 returned -22 [ 1215.771957][T27875] loop2: detected capacity change from 0 to 1024 [ 1215.940939][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1216.158789][T27889] loop2: detected capacity change from 0 to 512 [ 1216.202693][T27889] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.9392: bad orphan inode 13 [ 1216.256432][T27889] ext4_test_bit(bit=12, block=4) = 1 [ 1216.265840][T27897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9397'. [ 1216.278290][T27889] is_bad_inode(inode)=0 [ 1216.282501][T27889] NEXT_ORPHAN(inode)=0 [ 1216.325698][T27889] max_ino=32 [ 1216.339365][T27889] i_nlink=1 [ 1216.343875][T27889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1216.425583][T27889] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.9392: Hash code is SIPHASH, but hash not in dirent [ 1216.473387][T27889] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9392: Corrupt directory, running e2fsck is recommended [ 1216.554808][T27889] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.9392: Hash code is SIPHASH, but hash not in dirent [ 1216.588269][T27889] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9392: Corrupt directory, running e2fsck is recommended [ 1216.766920][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.942691][T27913] tmpfs: Bad value for 'mpol' [ 1217.022490][ T23] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1217.236993][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1217.258078][ T23] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1217.283500][ T23] usb 2-1: config 0 has no interface number 0 [ 1217.293477][ T23] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1217.308988][ T23] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1217.324947][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1217.349293][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.391463][ T23] usb 2-1: Product: syz [ 1217.395787][ T23] usb 2-1: Manufacturer: syz [ 1217.439464][ T23] usb 2-1: SerialNumber: syz [ 1217.476463][ T23] usb 2-1: config 0 descriptor?? [ 1217.957280][ T23] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 1217.982603][ T23] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1218.070200][ T23] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1218.081301][T27947] gre1: entered promiscuous mode [ 1218.086295][T27947] gre1: entered allmulticast mode [ 1218.113640][ T23] usb 2-1: USB disconnect, device number 61 [ 1218.152370][T27951] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1219.148841][T27989] netlink: 'syz.1.9443': attribute type 3 has an invalid length. [ 1219.184490][T27985] loop2: detected capacity change from 0 to 4096 [ 1219.218622][T27985] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1219.348891][T27995] loop1: detected capacity change from 0 to 256 [ 1219.407274][T27985] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1219.430996][T27995] FAT-fs (loop1): Directory bread(block 64) failed [ 1219.446055][T27995] FAT-fs (loop1): Directory bread(block 65) failed [ 1219.484588][T27985] ntfs3: loop2: failed to convert "c46c" to cp874 [ 1219.488347][T27995] FAT-fs (loop1): Directory bread(block 66) failed [ 1219.531044][T27995] FAT-fs (loop1): Directory bread(block 67) failed [ 1219.588361][T27995] FAT-fs (loop1): Directory bread(block 68) failed [ 1219.613898][T27995] FAT-fs (loop1): Directory bread(block 69) failed [ 1219.632856][T27999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9448'. [ 1219.659058][T27995] FAT-fs (loop1): Directory bread(block 70) failed [ 1219.679625][T27995] FAT-fs (loop1): Directory bread(block 71) failed [ 1219.696177][T27995] FAT-fs (loop1): Directory bread(block 72) failed [ 1219.702771][T27995] FAT-fs (loop1): Directory bread(block 73) failed [ 1220.245054][T28017] loop3: detected capacity change from 0 to 256 [ 1220.298618][T28019] loop2: detected capacity change from 0 to 512 [ 1220.374519][T28019] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1220.387116][T28019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1220.443542][T28019] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.9457: bad orphan inode 131083 [ 1220.498435][T28019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1220.627654][T28030] bridge3: entered allmulticast mode [ 1220.753333][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.087857][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1221.417529][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1221.426628][T28062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1221.436402][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1221.502299][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1221.510458][ T5857] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1221.544693][ T7003] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1221.569863][T28067] syz.1.9480: attempt to access beyond end of device [ 1221.569863][T28067] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1221.582851][T28067] syz.1.9480: attempt to access beyond end of device [ 1221.582851][T28067] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1221.595813][T28067] syz.1.9480: attempt to access beyond end of device [ 1221.595813][T28067] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1221.609634][T28067] syz.1.9480: attempt to access beyond end of device [ 1221.609634][T28067] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0 [ 1221.622714][T28067] syz.1.9480: attempt to access beyond end of device [ 1221.622714][T28067] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0 [ 1221.635735][T28067] syz.1.9480: attempt to access beyond end of device [ 1221.635735][T28067] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0 [ 1221.648583][T28067] VFS: unable to find oldfs superblock on device nbd1 [ 1221.717901][ T8] usb 1-1: too many configurations: 37, using maximum allowed: 8 [ 1221.737282][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 1221.750847][ T7003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1221.764524][ T5857] usb 3-1: config 0 has no interfaces? [ 1221.786175][ T5857] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1221.799698][ T7003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1221.811456][ T8] usb 1-1: string descriptor 0 read error: -71 [ 1221.818397][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.827450][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1221.836987][ T7003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1221.848456][ T5857] usb 3-1: Product: syz [ 1221.852681][ T5857] usb 3-1: Manufacturer: syz [ 1221.857745][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.865969][ T7003] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1221.876269][ T5857] usb 3-1: SerialNumber: syz [ 1221.886140][ T5857] r8152-cfgselector 3-1: config 0 descriptor?? [ 1221.892705][ T8] usb 1-1: can't set config #1, error -71 [ 1221.903780][ T7003] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1221.919345][ T7003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.930789][ T8] usb 1-1: USB disconnect, device number 46 [ 1221.937947][ T7003] usb 4-1: Product: syz [ 1221.944739][ T7003] usb 4-1: Manufacturer: syz [ 1221.949411][ T7003] usb 4-1: SerialNumber: syz [ 1221.974052][ T7003] usb 4-1: config 0 descriptor?? [ 1222.098704][T28077] netlink: 'syz.1.9485': attribute type 4 has an invalid length. [ 1222.106743][T28077] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9485'. [ 1222.130474][ T5857] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1222.134031][T28077] .`: renamed from bond0 (while UP) [ 1222.145627][ T2986] usb 3-1: config 0 descriptor?? [ 1222.215308][ T7003] adutux 4-1:0.0: Could not retrieve serial number [ 1222.222354][ T7003] adutux: probe of 4-1:0.0 failed with error -5 [ 1222.366412][ T7003] usb 3-1: USB disconnect, device number 28 [ 1222.372986][ T2986] usb 3-1: can't set config #0, error -71 [ 1222.464275][ T8] usb 4-1: USB disconnect, device number 32 [ 1222.499871][T28085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9489'. [ 1222.653932][T28089] loop0: detected capacity change from 0 to 4096 [ 1222.693208][T28090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1222.742532][T28089] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 1222.943049][T28098] netlink: 'syz.0.9495': attribute type 10 has an invalid length. [ 1223.011107][T28098] veth1_macvtap: left promiscuous mode [ 1223.342671][T28108] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9500'. [ 1223.383428][T28108] openvswitch: netlink: Key type 2832 is out of range max 32 [ 1223.561049][T28118] netlink: 'syz.1.9505': attribute type 13 has an invalid length. [ 1223.841208][T28128] tmpfs: Bad value for 'nr_inodes' [ 1224.224300][T28140] loop0: detected capacity change from 0 to 256 [ 1224.291184][T28140] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1224.540801][ T28] audit: type=1326 audit(2000000171.673:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1224.543228][T28121] loop3: detected capacity change from 0 to 32768 [ 1224.587207][T28146] loop2: detected capacity change from 0 to 4096 [ 1224.618370][ T28] audit: type=1326 audit(2000000171.673:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1224.621521][T28146] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1224.675401][ T28] audit: type=1326 audit(2000000171.673:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1224.723366][ T28] audit: type=1326 audit(2000000171.692:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1224.746449][ T28] audit: type=1326 audit(2000000171.692:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1224.769874][ T28] audit: type=1326 audit(2000000171.692:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1224.792176][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.799449][ T28] audit: type=1326 audit(2000000171.767:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8415bc1f85 code=0x7ffc0000 [ 1224.843030][ T28] audit: type=1326 audit(2000000171.767:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8415bc1f85 code=0x7ffc0000 [ 1224.865347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.919597][ T28] audit: type=1326 audit(2000000171.767:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8415bc1f85 code=0x7ffc0000 [ 1225.063671][ T28] audit: type=1326 audit(2000000171.767:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28147 comm="syz.1.9520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8415bc1f85 code=0x7ffc0000 [ 1225.105542][T28146] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 1225.115627][T28146] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1225.136652][T28146] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1225.272478][T23212] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1225.657643][T28168] xt_nfacct: accounting object `syz1' does not exist [ 1226.031175][T28189] netlink: 'syz.0.9539': attribute type 4 has an invalid length. [ 1226.039164][T28189] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9539'. [ 1226.152358][T28189] .`: renamed from bond0 (while UP) [ 1226.462369][T28199] ieee802154 phy0 wpan0: encryption failed: -90 [ 1226.923706][T28214] loop3: detected capacity change from 0 to 8 [ 1226.990259][T28214] SQUASHFS error: Corrupted symlink [ 1227.015844][T28187] loop2: detected capacity change from 0 to 32768 [ 1227.067974][T28187] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1227.129155][T28226] delete_channel: no stack [ 1227.203766][T28228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9555'. [ 1227.327978][T28187] XFS (loop2): Ending clean mount [ 1227.371794][T28187] XFS (loop2): Quotacheck needed: Please wait. [ 1227.515497][T28187] XFS (loop2): Quotacheck: Done. [ 1227.527940][T28238] netlink: 'syz.3.9559': attribute type 15 has an invalid length. [ 1227.741350][T28242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1227.765449][T28242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1227.770870][ T5785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1227.775900][T28242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1228.264501][T28258] overlayfs: failed to resolve './file1': -2 [ 1228.504405][T28268] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9574'. [ 1228.513433][T28268] D`: renamed from hsr_slave_1 (while UP) [ 1228.836553][T28282] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9581'. [ 1229.256202][T28296] loop0: detected capacity change from 0 to 764 [ 1229.359329][T28296] Symlink component flag not implemented [ 1229.378264][T28296] Symlink component flag not implemented (101) [ 1229.880027][T28314] vlan0: entered promiscuous mode [ 1230.275757][T28329] x_tables: duplicate underflow at hook 4 [ 1230.395049][T28334] netlink: 'syz.3.9606': attribute type 5 has an invalid length. [ 1230.453883][T28334] ip6erspan0: entered allmulticast mode [ 1230.534750][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 1230.534767][ T28] audit: type=1326 audit(2000000177.267:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1230.610324][ T28] audit: type=1326 audit(2000000177.267:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1230.679473][ T28] audit: type=1326 audit(2000000177.277:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1230.712258][ T28] audit: type=1326 audit(2000000177.277:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1230.761934][ T28] audit: type=1326 audit(2000000177.277:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1230.784322][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.874461][ T28] audit: type=1326 audit(2000000177.342:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f287f1c1f85 code=0x7ffc0000 [ 1230.903841][ T28] audit: type=1326 audit(2000000177.342:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f287f1c1f85 code=0x7ffc0000 [ 1230.926222][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.934072][ T28] audit: type=1326 audit(2000000177.342:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f287f1c1f85 code=0x7ffc0000 [ 1230.979741][ T28] audit: type=1326 audit(2000000177.361:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f287f1c1f85 code=0x7ffc0000 [ 1231.038217][ T28] audit: type=1326 audit(2000000177.370:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28340 comm="syz.0.9609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f287f1c1f85 code=0x7ffc0000 [ 1231.970974][T28385] loop1: detected capacity change from 0 to 4096 [ 1231.979581][T28393] netlink: 'syz.2.9630': attribute type 6 has an invalid length. [ 1232.393681][T28403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1232.399094][T28406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9635'. [ 1232.684311][T28416] libceph: resolve '400' (ret=-3): failed [ 1232.912140][T28425] netlink: 'syz.1.9644': attribute type 10 has an invalid length. [ 1233.078949][T28425] team0: Device veth0_vlan failed to register rx_handler [ 1233.954454][T28460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.008047][T28460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.031637][T28460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.053017][T28460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.285422][T28442] loop1: detected capacity change from 0 to 32768 [ 1234.306454][T28468] usb usb8: check_ctrlrecip: process 28468 (syz.2.9666) requesting ep 01 but needs 81 [ 1234.344079][T28468] usb usb8: usbfs: process 28468 (syz.2.9666) did not claim interface 0 before use [ 1234.378144][T28442] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1234.673045][ T5792] ocfs2: Unmounting device (7,1) on (node local) [ 1234.993542][T28492] loop2: detected capacity change from 0 to 512 [ 1235.097218][T28492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.122022][T28492] ext4 filesystem being mounted at /2377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1235.195946][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9680'. [ 1235.205235][T28502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9680'. [ 1235.241379][T28492] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz.2.9677: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1235.296479][T28492] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.9677: directory missing '.' [ 1235.556620][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.657252][T28514] Cannot find del_set index 2 as target [ 1235.800980][T28518] bond3: entered promiscuous mode [ 1235.830853][T28518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1236.220923][T28546] IPVS: length: 4096 != 24 [ 1236.419063][T28553] netlink: 'syz.1.9699': attribute type 58 has an invalid length. [ 1236.437050][T20741] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1236.557974][T28558] netlink: 'syz.1.9702': attribute type 5 has an invalid length. [ 1236.591171][T28558] ip6erspan0: entered allmulticast mode [ 1236.670253][T20741] usb 1-1: Using ep0 maxpacket: 8 [ 1236.684571][T20741] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 1236.701971][T20741] usb 1-1: config 0 has no interface number 0 [ 1236.737868][T20741] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1236.753709][T20741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.766255][T20741] usb 1-1: Product: syz [ 1236.778674][T20741] usb 1-1: Manufacturer: syz [ 1236.783399][T20741] usb 1-1: SerialNumber: syz [ 1236.806901][T20741] usb 1-1: config 0 descriptor?? [ 1237.054872][T20741] peak_usb 1-1:0.56: PEAK-System PCAN-USB X6 v134 fw v24.0.0 (2 channels) [ 1237.278997][T20741] peak_usb 1-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 1237.303025][T20741] peak_usb 1-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1237.333645][T28585] loop1: detected capacity change from 0 to 8 [ 1237.380013][T20741] peak_usb: probe of 1-1:0.56 failed with error -71 [ 1237.431136][T20741] usb 1-1: USB disconnect, device number 47 [ 1237.712187][T28599] tmpfs: Bad value for 'mpol' [ 1238.031617][T28611] netlink: 'syz.1.9728': attribute type 10 has an invalid length. [ 1238.143798][T28611] team0: Port device syz_tun added [ 1238.276502][T28621] netlink: 'syz.2.9733': attribute type 21 has an invalid length. [ 1238.306916][T28621] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9733'. [ 1238.324658][T28623] netlink: 'syz.0.9734': attribute type 10 has an invalid length. [ 1238.337616][T28623] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.9734'. [ 1238.514419][T28629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1238.532409][ T7003] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1238.748801][ T7003] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1238.774086][ T7003] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1238.803725][ T7003] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.835846][ T7003] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1238.868261][ T7003] usb 4-1: config 1 has no interface number 0 [ 1238.886262][ T7003] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1238.919624][ T7003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.954167][ T7003] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1239.190741][ T7003] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 1239.212633][ T7003] snd_usb_pod 4-1:1.1: invalid control EP [ 1239.237601][ T7003] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 1239.263502][ T7003] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1239.274188][T28652] loop1: detected capacity change from 0 to 4096 [ 1239.282910][ T7003] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 1239.300286][T28652] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1239.360189][T28658] loop2: detected capacity change from 0 to 1024 [ 1239.464775][ T27] usb 4-1: USB disconnect, device number 33 [ 1239.545073][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1239.815603][T28670] xt_TCPMSS: Only works on TCP SYN packets [ 1240.548385][T28699] loop0: detected capacity change from 0 to 64 [ 1240.815505][T28708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9776'. [ 1240.835490][T28708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9776'. [ 1240.870221][T28702] loop3: detected capacity change from 0 to 8192 [ 1240.954772][ T7503] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1241.553962][T28734] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9790'. [ 1241.822995][T28742] loop0: detected capacity change from 0 to 4096 [ 1241.896459][T28742] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1241.960049][T28748] netlink: 'syz.3.9795': attribute type 10 has an invalid length. [ 1242.016395][T28748] team0: Port device syz_tun added [ 1242.081506][ T27] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1242.273747][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 1242.281565][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.300521][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1242.317064][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1242.341018][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1242.391374][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.399430][ T27] usb 3-1: Product: syz [ 1242.418197][ T27] usb 3-1: Manufacturer: syz [ 1242.426973][ T27] usb 3-1: SerialNumber: syz [ 1242.431937][T28762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1242.459318][ T27] cdc_ncm 3-1:1.0: skipping garbage [ 1242.464585][ T27] cdc_ncm 3-1:1.0: skipping garbage [ 1242.483216][ T27] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1242.491431][ T27] cdc_ncm 3-1:1.0: bind() failure [ 1242.541719][T28765] loop3: detected capacity change from 0 to 2048 [ 1242.555985][T28765] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1242.652717][T28768] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1242.712260][T28771] vivid-000: ================= START STATUS ================= [ 1242.733441][ T27] usb 3-1: USB disconnect, device number 29 [ 1242.755603][T28771] vivid-000: Generate PTS: true [ 1242.808309][T28771] vivid-000: Generate SCR: true [ 1242.815240][T28771] tpg source WxH: 1920x1080 (R'G'B) [ 1242.830748][T28771] tpg field: 1 [ 1242.841961][T28771] tpg crop: 1920x1080@0x0 [ 1242.846981][T28771] tpg compose: 1920x1080@0x0 [ 1242.857809][T28771] tpg colorspace: 8 [ 1242.865190][T28771] tpg transfer function: 0/0 [ 1242.880573][T28771] tpg quantization: 0/0 [ 1242.887950][T28771] tpg RGB range: 0/2 [ 1242.892516][T28771] vivid-000: ================== END STATUS ================== [ 1243.275340][T28785] loop1: detected capacity change from 0 to 8192 [ 1243.302299][T28785] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1243.328617][T28785] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1243.337969][T28785] REISERFS (device loop1): using ordered data mode [ 1243.344680][T28785] reiserfs: using flush barriers [ 1243.387555][T28785] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1243.435748][T28785] REISERFS (device loop1): checking transaction log (loop1) [ 1243.460794][T28785] REISERFS (device loop1): Using rupasov hash to sort names [ 1243.468212][T28785] REISERFS (device loop1): using 3.5.x disk format [ 1243.482315][T28785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1243.503696][T28785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1243.550002][T28785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1243.582911][T28785] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1243.620741][T28785] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1243.682497][T28794] loop3: detected capacity change from 0 to 8192 [ 1243.717789][T28785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1243.732880][T28794] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1243.746153][T28785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1243.757948][T28785] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1243.800748][T28794] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1243.810252][T28794] REISERFS (device loop3): using ordered data mode [ 1243.816904][T28794] reiserfs: using flush barriers [ 1243.825190][T28794] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1243.832890][T28804] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9822'. [ 1243.853502][T28794] REISERFS (device loop3): checking transaction log (loop3) [ 1243.875239][T28794] REISERFS (device loop3): Using r5 hash to sort names [ 1243.932838][T28794] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1244.026447][T28808] loop2: detected capacity change from 0 to 512 [ 1244.042558][T28807] netlink: 'syz.0.9824': attribute type 10 has an invalid length. [ 1244.173740][T28807] team0: Port device syz_tun added [ 1244.749664][T28828] loop1: detected capacity change from 0 to 2048 [ 1244.803993][T28828] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1244.875217][ T5788] udevd[5788]: incorrect nilfs2 checksum on /dev/loop1 [ 1244.893331][T28835] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1245.137805][T28843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1245.363335][ T27] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1245.589976][ T27] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1245.603874][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.616178][ T27] usb 3-1: config 0 has no interface number 0 [ 1245.628034][ T27] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1245.641820][ T27] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1245.651759][ T27] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.669696][ T27] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1245.679190][ T27] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1245.693094][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1245.701487][ T27] usb 3-1: SerialNumber: syz [ 1245.713828][ T27] usb 3-1: config 0 descriptor?? [ 1245.907181][T28859] loop0: detected capacity change from 0 to 32768 [ 1245.956138][ T27] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1245.972961][ T27] synaptics_usb: probe of 3-1:0.52 failed with error -5 [ 1246.184158][ T7003] usb 3-1: USB disconnect, device number 30 [ 1246.793099][T28861] netlink: 'syz.3.9850': attribute type 3 has an invalid length. [ 1246.823492][T28867] netlink: 'syz.2.9849': attribute type 10 has an invalid length. [ 1246.946290][T28867] team0: Port device syz_tun added [ 1247.237905][ T5858] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1247.564051][T28897] netlink: 'syz.1.9868': attribute type 10 has an invalid length. [ 1247.702785][ T4696] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1247.768969][ T27] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1247.806985][T28906] loop3: detected capacity change from 0 to 256 [ 1247.914411][T28910] loop2: detected capacity change from 0 to 512 [ 1248.007465][T28914] loop0: detected capacity change from 0 to 136 [ 1248.035692][T28910] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.9874: inode has both inline data and extents flags [ 1248.050630][T28910] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9874: couldn't read orphan inode 15 (err -117) [ 1248.069588][T28910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.143429][T28914] Symlink component flag not implemented [ 1248.203311][T28918] loop3: detected capacity change from 0 to 1024 [ 1248.222826][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.250275][T28918] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1248.341422][T28918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.433473][T28918] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.9876: missing EA_INODE flag [ 1248.451927][T28918] EXT4-fs (loop3): Remounting filesystem read-only [ 1248.486557][T28928] loop1: detected capacity change from 0 to 1024 [ 1248.493965][T28928] EXT4-fs: inline encryption not supported [ 1248.508394][T28928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1248.611023][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.624633][T28928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.739355][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.796140][ T2986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1248.805020][ T2986] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1249.031406][ T7003] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1249.320372][T28956] loop3: detected capacity change from 0 to 2048 [ 1249.345172][T28956] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1249.406453][T28960] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1249.475760][T28963] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1249.893696][T28980] loop2: detected capacity change from 0 to 256 [ 1249.913511][T28980] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 1249.960827][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1250.175012][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1250.187138][ T8] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1250.212169][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.238495][ T8] usb 4-1: config 0 has no interface number 0 [ 1250.248157][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1250.281116][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.302308][ T8] usb 4-1: Product: syz [ 1250.306534][ T8] usb 4-1: Manufacturer: syz [ 1250.311171][ T8] usb 4-1: SerialNumber: syz [ 1250.337903][ T8] usb 4-1: config 0 descriptor?? [ 1250.563377][ T8] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 1250.579942][T28994] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.588803][ T8] usb 4-1: No valid video chain found. [ 1250.600961][T28968] loop1: detected capacity change from 0 to 32768 [ 1250.708699][T28968] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1250.776857][T29008] cgroup: Bad value for 'name' [ 1250.782007][ T5858] usb 4-1: USB disconnect, device number 34 [ 1250.928403][T28968] XFS (loop1): Ending clean mount [ 1250.989581][T28968] XFS (loop1): Quotacheck needed: Please wait. [ 1251.049709][T29014] sock: sock_timestamping_bind_phc: sock not bind to device [ 1251.075035][ T4696] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2446 dinode [ 1251.119920][ T4696] XFS (loop1): Unmount and run xfs_repair [ 1251.130830][T29016] loop0: detected capacity change from 0 to 164 [ 1251.135238][ T4696] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1251.145342][ T4696] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1251.170915][ T4696] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1251.173915][T29016] Unable to read rock-ridge attributes [ 1251.180574][ T4696] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 1251.210087][ T4696] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a 4.Xh...=........ [ 1251.238399][ T4696] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 1251.252486][ T4696] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 56 b3 a5 bd ..e.........V... [ 1251.262124][ T4696] 00000060: ff ff ff ff 35 98 98 34 00 00 00 00 00 00 00 08 ....5..4........ [ 1251.285318][ T4696] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 1251.380988][T28968] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1251.623509][ T5792] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1251.834906][T29034] netlink: 'syz.3.9928': attribute type 1 has an invalid length. [ 1252.327512][T29050] netlink: 'syz.3.9935': attribute type 28 has an invalid length. [ 1252.553056][T29056] loop3: detected capacity change from 0 to 8 [ 1252.972418][T29065] loop3: detected capacity change from 0 to 1764 [ 1253.172314][T29036] loop0: detected capacity change from 0 to 32768 [ 1253.203990][T29036] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1253.231619][T29036] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1253.302575][T29036] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1253.385290][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1253.393009][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1253.424219][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1253.489121][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 89ms [ 1253.523042][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 1253.528393][T29036] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1253.730642][T29058] loop2: detected capacity change from 0 to 32768 [ 1254.564510][T29100] loop0: detected capacity change from 0 to 512 [ 1254.605516][T29100] EXT4-fs: Ignoring removed i_version option [ 1254.634171][T29100] EXT4-fs: Ignoring removed mblk_io_submit option [ 1254.705602][T29100] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.9959: inode #13: comm syz.0.9959: iget: illegal inode # [ 1254.800680][T29100] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9959: couldn't read orphan inode 13 (err -117) [ 1254.878926][T29100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1254.953099][T29100] EXT4-fs error (device loop0): ext4_resize_begin:62: comm syz.0.9959: resize_inode disabled but reserved GDT blocks non-zero [ 1255.089584][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.580829][T29089] loop3: detected capacity change from 0 to 32768 [ 1255.598573][T29130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9974'. [ 1255.618178][T29089] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1255.627227][T29089] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1255.668300][T29089] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1255.735702][ T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1255.762132][ T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1255.902700][ T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 1255.934499][ T27] gfs2: fsid=syz:syz.0: jid=0: Done [ 1255.945411][T29089] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1255.987587][T29144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9980'. [ 1256.827012][T29167] netlink: 'syz.2.9991': attribute type 21 has an invalid length. [ 1256.841865][T29167] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9991'. [ 1257.119780][T29176] loop1: detected capacity change from 0 to 4096 [ 1257.139206][T29181] comedi comedi0: Minor 3 could not be opened [ 1257.180201][T29176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.239961][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.173793][T29223] loop1: detected capacity change from 0 to 256 [ 1258.336430][T29223] FAT-fs (loop1): Directory bread(block 64) failed [ 1258.360575][T29223] FAT-fs (loop1): Directory bread(block 65) failed [ 1258.373925][T29223] FAT-fs (loop1): Directory bread(block 66) failed [ 1258.389819][T29223] FAT-fs (loop1): Directory bread(block 67) failed [ 1258.400681][T29223] FAT-fs (loop1): Directory bread(block 68) failed [ 1258.408573][T29223] FAT-fs (loop1): Directory bread(block 69) failed [ 1258.415868][T29223] FAT-fs (loop1): Directory bread(block 70) failed [ 1258.423046][T29223] FAT-fs (loop1): Directory bread(block 71) failed [ 1258.431446][T29223] FAT-fs (loop1): Directory bread(block 72) failed [ 1258.456539][T29223] FAT-fs (loop1): Directory bread(block 73) failed [ 1258.746832][T29236] loop0: detected capacity change from 0 to 256 [ 1258.762980][T29236] exfat: Deprecated parameter 'namecase' [ 1258.781150][T29236] exfat: Deprecated parameter 'namecase' [ 1258.786884][T29236] exfat: Deprecated parameter 'namecase' [ 1258.807276][T29236] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1258.835433][T29236] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1258.848173][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10026'. [ 1259.243114][T29249] ip6gre1: entered promiscuous mode [ 1259.266710][T29252] loop2: detected capacity change from 0 to 256 [ 1259.283207][T29252] exfat: Deprecated parameter 'utf8' [ 1259.298525][T29252] exfat: Deprecated parameter 'utf8' [ 1259.357950][T29252] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1259.472938][T29259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1259.855415][T29273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10042'. [ 1259.901166][T29273] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10042'. [ 1259.964104][T29273] netlink: 'syz.1.10042': attribute type 5 has an invalid length. [ 1259.998752][T29273] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10042'. [ 1260.394403][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10052'. [ 1260.674496][T29302] JFS: discard option not supported on device [ 1260.680975][T29302] Mount JFS Failure: -22 [ 1260.736656][T29302] jfs_mount failed w/return code = -22 [ 1260.861904][T29303] loop3: detected capacity change from 0 to 8192 [ 1260.894623][T29303] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1260.913445][T29279] loop0: detected capacity change from 0 to 40427 [ 1260.932643][T29303] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1260.941344][T29279] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1260.942585][T29303] REISERFS (device loop3): using ordered data mode [ 1260.955588][T29303] reiserfs: using flush barriers [ 1260.966415][T29303] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1260.983955][T29303] REISERFS (device loop3): checking transaction log (loop3) [ 1261.013526][T29279] F2FS-fs (loop0): invalid crc value [ 1261.107210][T29279] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1261.108254][T29310] loop2: detected capacity change from 0 to 1024 [ 1261.350501][T29279] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1261.394547][T29303] REISERFS (device loop3): Using tea hash to sort names [ 1261.446020][T29316] bond0: entered promiscuous mode [ 1261.453063][T29303] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1261.484760][T29316] bond0: entered allmulticast mode [ 1261.528277][T29316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.188493][T29338] loop0: detected capacity change from 0 to 256 [ 1262.267193][T29340] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10074'. [ 1262.281381][T29342] loop3: detected capacity change from 0 to 256 [ 1262.288375][T29340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.300060][T29342] exfat: Deprecated parameter 'namecase' [ 1262.305848][T29342] exfat: Deprecated parameter 'namecase' [ 1262.317504][T29340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.318719][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1262.329080][T29342] exfat: Deprecated parameter 'namecase' [ 1262.350772][T29340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.381607][T29342] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1262.393939][T29340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.419538][T29342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1262.438247][T29340] batadv_slave_1: entered promiscuous mode [ 1262.917418][T29356] loop0: detected capacity change from 0 to 1024 [ 1263.098292][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1263.253083][T29372] loop0: detected capacity change from 0 to 256 [ 1263.514429][T29378] loop3: detected capacity change from 0 to 1024 [ 1263.597107][T29378] syz.3.10091: attempt to access beyond end of device [ 1263.597107][T29378] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1263.672657][T29378] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 1263.694608][T29378] syz.3.10091: attempt to access beyond end of device [ 1263.694608][T29378] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1263.737325][T29378] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 1263.786576][T29386] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1264.008196][T29392] loop3: detected capacity change from 0 to 256 [ 1264.015887][T29392] exfat: Deprecated parameter 'utf8' [ 1264.038343][T29392] exfat: Deprecated parameter 'utf8' [ 1264.081378][T29392] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1264.324540][T29382] loop1: detected capacity change from 0 to 32768 [ 1264.370630][T29382] JBD2: Ignoring recovery information on journal [ 1264.454190][T29382] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1264.603910][T29404] loop3: detected capacity change from 0 to 4096 [ 1264.790006][T29382] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 1264.855753][T29382] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1264.896573][T29382] OCFS2: File system is now read-only. [ 1264.902174][T29382] (syz.1.10095,29382,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 1264.980596][T29382] (syz.1.10095,29382,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1264.999844][T29382] (syz.1.10095,29382,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1265.023274][T29382] (syz.1.10095,29382,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1265.087415][T29382] (syz.1.10095,29382,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1265.095769][T29382] (syz.1.10095,29382,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1265.119929][T29382] (syz.1.10095,29382,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1265.127948][T29382] (syz.1.10095,29382,1):ocfs2_mknod:385 ERROR: status = -30 [ 1265.152246][T29382] (syz.1.10095,29382,1):ocfs2_mknod:502 ERROR: status = -30 [ 1265.171014][T29382] (syz.1.10095,29382,1):ocfs2_create:676 ERROR: status = -30 [ 1265.261776][ T5792] ocfs2: Unmounting device (7,1) on (node local) [ 1265.278974][T29418] bond1: entered promiscuous mode [ 1265.284356][T29418] bond1: entered allmulticast mode [ 1265.290083][T29418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.556170][T29410] loop2: detected capacity change from 0 to 32768 [ 1265.668815][T29410] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 1265.757667][T29430] loop1: detected capacity change from 0 to 256 [ 1265.823537][T29410] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 1265.843230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.857189][T29430] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1265.897053][T29410] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1265.935435][T29410] OCFS2: Returning error to the calling process. [ 1265.958879][T29410] (syz.2.10107,29410,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1265.985989][T29410] (syz.2.10107,29410,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1265.994666][T29410] (syz.2.10107,29410,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 1266.034822][T29410] (syz.2.10107,29410,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1266.044870][T29410] (syz.2.10107,29410,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 1266.103520][T29410] (syz.2.10107,29410,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1266.125049][T29410] (syz.2.10107,29410,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1266.133486][T29410] (syz.2.10107,29410,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1266.161886][T29410] (syz.2.10107,29410,1):ocfs2_mknod:298 ERROR: status = -5 [ 1266.199298][T29410] (syz.2.10107,29410,1):ocfs2_mknod:502 ERROR: status = -5 [ 1266.206605][T29410] (syz.2.10107,29410,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1266.338530][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 1266.403261][T29447] loop0: detected capacity change from 0 to 256 [ 1266.445542][T29447] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1266.491112][T29451] loop1: detected capacity change from 0 to 512 [ 1266.597721][T29451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.664712][T29451] ext4 filesystem being mounted at /2566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.741122][T29451] EXT4-fs error (device loop1): ext4_xattr_block_get:600: inode #15: comm syz.1.10126: corrupted xattr block 13: invalid checksum [ 1266.794905][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 1266.794920][ T28] audit: type=1800 audit(2000000211.194:201): pid=29451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10126" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1266.919927][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.380573][T29475] ptrace attach of "./syz-executor exec"[5792] was attempted by ""[29475] [ 1267.570044][T29477] loop1: detected capacity change from 0 to 64 [ 1267.676194][T29462] loop0: detected capacity change from 0 to 32768 [ 1267.806416][T29462] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1267.864856][T29470] loop3: detected capacity change from 0 to 32768 [ 1267.916751][T29470] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1268.052141][T29470] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1268.173621][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 1268.193151][T29470] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 1268.252442][T29470] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1268.284972][T29470] OCFS2: Returning error to the calling process. [ 1268.307238][T29470] (syz.3.10133,29470,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 1268.327079][T29470] (syz.3.10133,29470,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 1268.352938][T29493] loop2: detected capacity change from 0 to 8192 [ 1268.359517][T29470] (syz.3.10133,29470,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 1268.385949][T29470] (syz.3.10133,29470,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 1268.402854][T29470] (syz.3.10133,29470,1):ocfs2_read_virt_blocks:995 ERROR: status = -30 [ 1268.436440][T29470] (syz.3.10133,29470,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 1268.447647][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.474857][T29470] (syz.3.10133,29470,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5 [ 1268.484017][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.506945][T29499] loop1: detected capacity change from 0 to 1024 [ 1268.513659][T29470] (syz.3.10133,29470,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5 [ 1268.525766][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.546775][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.560240][T29470] (syz.3.10133,29470,1):ocfs2_mknod:298 ERROR: status = -5 [ 1268.583133][T29470] (syz.3.10133,29470,1):ocfs2_mknod:502 ERROR: status = -5 [ 1268.591291][T29470] (syz.3.10133,29470,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1268.601683][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.637219][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.670201][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.720676][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.763472][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.796828][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.811515][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 1268.842453][T29493] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1268.889440][ T28] audit: type=1800 audit(2000000213.149:202): pid=29493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10143" name="file2" dev="loop2" ino=1048678 res=0 errno=0 [ 1269.376706][T29497] loop0: detected capacity change from 0 to 32768 [ 1269.416414][T29497] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1269.439181][T29497] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1269.647652][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 1269.766208][T29526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10159'. [ 1269.953116][T29531] loop0: detected capacity change from 0 to 256 [ 1269.976848][T29522] loop3: detected capacity change from 0 to 8192 [ 1270.022124][T29522] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1270.093431][T29531] FAT-fs (loop0): Directory bread(block 64) failed [ 1270.100025][T29531] FAT-fs (loop0): Directory bread(block 65) failed [ 1270.154818][T29522] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1270.164120][T29522] REISERFS (device loop3): using ordered data mode [ 1270.197782][T29531] FAT-fs (loop0): Directory bread(block 66) failed [ 1270.204429][T29531] FAT-fs (loop0): Directory bread(block 67) failed [ 1270.229738][T29531] FAT-fs (loop0): Directory bread(block 68) failed [ 1270.236325][T29531] FAT-fs (loop0): Directory bread(block 69) failed [ 1270.242919][T29522] reiserfs: using flush barriers [ 1270.262384][T29522] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1270.295452][T29531] FAT-fs (loop0): Directory bread(block 70) failed [ 1270.305424][T29531] FAT-fs (loop0): Directory bread(block 71) failed [ 1270.315285][T29531] FAT-fs (loop0): Directory bread(block 72) failed [ 1270.325387][T29522] REISERFS (device loop3): checking transaction log (loop3) [ 1270.333068][T29531] FAT-fs (loop0): Directory bread(block 73) failed [ 1270.366578][T29522] REISERFS (device loop3): Using r5 hash to sort names [ 1270.380219][T29522] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1270.555106][ T28] audit: type=1800 audit(2000000214.711:203): pid=29531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10161" name="file1" dev="loop0" ino=1048679 res=0 errno=0 [ 1270.814965][T29551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10170'. [ 1271.206612][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1271.213041][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.858096][T29597] loop2: detected capacity change from 0 to 22 [ 1271.887101][T29597] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1271.902783][T29597] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1272.110849][T29603] netlink: 'syz.3.10196': attribute type 2 has an invalid length. [ 1272.145986][T29603] netlink: 'syz.3.10196': attribute type 8 has an invalid length. [ 1272.168181][T29603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10196'. [ 1272.368791][ T28] audit: type=1326 audit(2000000216.414:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29614 comm="syz.0.10203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1272.431947][ T28] audit: type=1326 audit(2000000216.414:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29614 comm="syz.0.10203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1272.520813][ T28] audit: type=1326 audit(2000000216.432:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29614 comm="syz.0.10203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1272.568326][ T28] audit: type=1326 audit(2000000216.432:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29614 comm="syz.0.10203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1272.678472][T29619] loop3: detected capacity change from 0 to 8192 [ 1272.881153][ T27] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1273.095470][ T27] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1273.104703][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.131701][ T27] usb 3-1: Product: syz [ 1273.135919][ T27] usb 3-1: Manufacturer: syz [ 1273.145886][ T27] usb 3-1: SerialNumber: syz [ 1273.172984][ T27] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1273.198458][ T5858] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1273.519626][T29647] overlayfs: conflicting options: userxattr,metacopy=on [ 1273.690995][T29631] loop3: detected capacity change from 0 to 32768 [ 1273.699035][ T27] usb 3-1: USB disconnect, device number 31 [ 1273.699664][T29650] gtp0: entered promiscuous mode [ 1273.740987][T29650] gtp0: entered allmulticast mode [ 1273.765200][T29631] JBD2: Ignoring recovery information on journal [ 1273.867797][T29654] loop1: detected capacity change from 0 to 1024 [ 1273.889879][T29631] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 1273.943609][T29654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.039927][T29654] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz.1.10222: directory missing '..' [ 1274.094275][T29662] netlink: 'syz.0.10224': attribute type 1 has an invalid length. [ 1274.116832][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 1274.149091][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.370068][ T5858] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1274.377348][ T5858] ath9k_htc: Failed to initialize the device [ 1274.441408][ T27] usb 3-1: ath9k_htc: USB layer deinitialized [ 1274.581201][T29674] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1274.597480][T29671] loop0: detected capacity change from 0 to 4096 [ 1274.640887][T29671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.878682][T29685] xt_TCPMSS: Only works on TCP SYN packets [ 1274.913640][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.458444][T29703] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10243'. [ 1275.658545][T29709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10246'. [ 1275.721665][T29711] loop2: detected capacity change from 0 to 2048 [ 1275.806821][T29711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1275.942584][T29717] loop3: detected capacity change from 0 to 64 [ 1275.951915][T29691] loop0: detected capacity change from 0 to 32768 [ 1275.997776][T29717] minix_free_block (loop3:21): bit already cleared [ 1276.000055][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1276.042746][T29717] Trying to free block not in datazone [ 1276.089490][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1276.138766][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1276.217780][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1276.258966][T29691] JBD2: Ignoring recovery information on journal [ 1276.363133][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1276.407465][T29691] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1276.446452][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1276.493508][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1276.583748][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1276.670368][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 1276.707171][T29691] (syz.0.10236,29691,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 1276.746417][T29691] (syz.0.10236,29691,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1276.778180][T29691] (syz.0.10236,29691,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1276.797746][T29691] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5 [ 1276.824114][T29691] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1276.855243][T29691] (syz.0.10236,29691,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1276.881241][T29691] (syz.0.10236,29691,1):ocfs2_mknod:314 ERROR: status = -5 [ 1276.896226][T29691] (syz.0.10236,29691,1):ocfs2_mknod:502 ERROR: status = -5 [ 1277.037336][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 1277.194682][T29754] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.10265'. [ 1277.523261][T29764] loop0: detected capacity change from 0 to 512 [ 1277.618472][T29764] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.10263: bg 0: block 393: padding at end of block bitmap is not set [ 1277.651728][T29764] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1277.682438][T29764] EXT4-fs (loop0): 2 truncates cleaned up [ 1277.703480][T29764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.894111][T29779] loop1: detected capacity change from 0 to 64 [ 1277.920372][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.173410][ T28] audit: type=1326 audit(2000000221.820:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.3.10281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dda38f6c9 code=0x7ffc0000 [ 1278.222140][ T28] audit: type=1326 audit(2000000221.820:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.3.10281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dda38f6c9 code=0x7ffc0000 [ 1278.275043][T29791] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10282'. [ 1278.286343][T29791] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1278.313801][ T28] audit: type=1326 audit(2000000221.839:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.3.10281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f7dda38f6c9 code=0x7ffc0000 [ 1278.389678][ T28] audit: type=1326 audit(2000000221.839:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.3.10281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dda38f6c9 code=0x7ffc0000 [ 1278.456227][ T28] audit: type=1326 audit(2000000221.839:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29786 comm="syz.3.10281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dda38f6c9 code=0x7ffc0000 [ 1278.502735][ T28] audit: type=1326 audit(2000000222.138:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29794 comm="syz.1.10284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1278.547044][ T28] audit: type=1326 audit(2000000222.138:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29794 comm="syz.1.10284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8415b8f6c9 code=0x7ffc0000 [ 1278.781974][T29811] syz.0.10290: attempt to access beyond end of device [ 1278.781974][T29811] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1278.843658][T29812] loop2: detected capacity change from 0 to 512 [ 1278.892100][T29812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 1278.906350][T29812] System zones: 1-12 [ 1278.913089][T29816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10292'. [ 1278.940204][T29812] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.10291: invalid indirect mapped block 8 (level 2) [ 1278.968590][T29812] EXT4-fs (loop2): Remounting filesystem read-only [ 1278.984763][T29812] EXT4-fs (loop2): 1 truncate cleaned up [ 1279.001855][T29812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1279.091904][T29820] netlink: 'syz.3.10296': attribute type 1 has an invalid length. [ 1279.245469][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.097173][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1280.280280][T29866] vcan0: entered promiscuous mode [ 1280.335027][T29866] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1281.060088][ T5857] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1281.264522][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 1281.286804][ T5857] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1281.307415][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.329320][ T5857] usb 4-1: Product: syz [ 1281.333587][ T5857] usb 4-1: Manufacturer: syz [ 1281.352629][ T5857] usb 4-1: SerialNumber: syz [ 1281.373932][ T5857] r8152-cfgselector 4-1: config 0 descriptor?? [ 1281.743482][ T8] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1281.839611][ T5857] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1281.852721][ T5857] r8152-cfgselector 4-1: USB disconnect, device number 35 [ 1281.982486][ T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1282.004076][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.023899][ T8] usb 2-1: config 0 descriptor?? [ 1282.471744][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 1282.507217][ T8] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1282.545203][ T8] [drm] Initialized udl on minor 2 [ 1282.566824][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1282.575195][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1282.586523][ T7003] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1282.616667][ T7003] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1282.638727][ T8] usb 2-1: USB disconnect, device number 62 [ 1282.650231][ T7003] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1282.928050][T29936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10350'. [ 1283.497297][T29954] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1283.695943][T29963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10364'. [ 1283.710982][T29964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10365'. [ 1285.044296][T30020] netlink: 'syz.0.10391': attribute type 5 has an invalid length. [ 1285.464725][T30034] loop2: detected capacity change from 0 to 1024 [ 1285.655226][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1286.046340][T30019] loop1: detected capacity change from 0 to 32768 [ 1286.120664][T30019] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1286.375413][T30064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10409'. [ 1286.378466][T30019] XFS (loop1): Ending clean mount [ 1286.398643][T30064] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1286.556853][ T5792] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1286.573079][T30042] loop0: detected capacity change from 0 to 32768 [ 1286.611939][T30042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.10403 (30042) [ 1286.685366][T30042] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1286.714976][T30042] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1286.723751][T30042] BTRFS info (device loop0): force clearing of disk cache [ 1286.811567][T30042] BTRFS info (device loop0): enabling ssd optimizations [ 1286.818594][T30042] BTRFS info (device loop0): using spread ssd allocation scheme [ 1286.873463][T30042] BTRFS info (device loop0): turning on sync discard [ 1286.908585][T30042] BTRFS info (device loop0): enabling disk space caching [ 1286.922767][T30070] loop1: detected capacity change from 0 to 2048 [ 1286.937226][T30042] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1286.972430][T30042] BTRFS info (device loop0): use zstd compression, level 3 [ 1286.990597][T30042] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1287.026486][T30042] BTRFS info (device loop0): disk space caching is enabled [ 1287.054592][T30070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1287.111781][T30070] ext4 filesystem being mounted at /2643/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1287.269572][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.292092][T30042] BTRFS info (device loop0): rebuilding free space tree [ 1287.373657][T30101] loop2: detected capacity change from 0 to 256 [ 1287.389446][T30042] BTRFS info (device loop0): disabling free space tree [ 1287.396449][T30042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1287.418290][T30101] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1287.468704][T30042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1287.561952][T30105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10421'. [ 1287.649157][ T5789] kworker/dying (5789) used greatest stack depth: 16040 bytes left [ 1287.874980][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1288.020253][ T5788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (5788) [ 1288.233422][T30124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1288.399473][T30128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10431'. [ 1289.176387][T30148] loop3: detected capacity change from 0 to 64 [ 1289.309280][T30123] loop1: detected capacity change from 0 to 32768 [ 1289.382363][T30154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10444'. [ 1289.399246][T30123] ea_get: invalid extended attribute [ 1289.567110][T30158] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10446'. [ 1289.918669][T30170] binder: binder_mmap: 30169 200000001000-20000000b000 bad vm_flags failed -1 [ 1290.457838][T30193] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1290.482775][T30195] netlink: 'syz.0.10464': attribute type 30 has an invalid length. [ 1290.520089][T30189] loop3: detected capacity change from 0 to 4096 [ 1290.524599][T30195] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1290.553972][T30189] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1290.691479][T30189] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1290.921598][T30205] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC [ 1290.921598][T30205] SȘȞZ6' [ 1292.386216][T30263] netlink: 'syz.2.10496': attribute type 30 has an invalid length. [ 1292.574015][T30269] netlink: 'syz.1.10500': attribute type 3 has an invalid length. [ 1292.622954][T30269] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.10500'. [ 1292.749124][T30234] loop0: detected capacity change from 0 to 32768 [ 1292.820536][T30234] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1292.998584][T30234] XFS (loop0): Metadata corruption detected at xfs_agf_verify+0x211/0x9b0, xfs_agf block 0x1 [ 1292.998645][T30234] XFS (loop0): Unmount and run xfs_repair [ 1292.998660][T30234] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1292.998679][T30234] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 1292.998695][T30234] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 1292.998711][T30234] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 1292.998727][T30234] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 1292.998751][T30234] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 1292.998767][T30234] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 1292.998782][T30234] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1292.998798][T30234] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1292.998821][T30234] XFS (loop0): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 117 [ 1292.998920][T30234] XFS (loop0): Error -117 reserving per-AG metadata reserve pool. [ 1292.999391][T30234] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592). Shutting down filesystem. [ 1292.999442][T30234] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 1292.999466][T30234] XFS (loop0): Ending clean mount [ 1293.223832][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1293.504401][T30302] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 1293.888147][T30313] netlink: 'syz.1.10517': attribute type 1 has an invalid length. [ 1293.896049][T30313] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10517'. [ 1294.638315][T30344] loop0: detected capacity change from 0 to 1024 [ 1295.242681][T30334] loop1: detected capacity change from 0 to 32768 [ 1295.306268][T30334] (syz.1.10527,30334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1295.360767][T30334] (syz.1.10527,30334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1295.435475][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1295.552744][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1295.602857][T30334] JBD2: Ignoring recovery information on journal [ 1295.699979][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 1295.747165][T30334] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1295.769795][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 1295.806740][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1295.994508][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1296.059400][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 1296.095098][T30334] (syz.1.10527,30334,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 1296.117972][T30389] snd_dummy snd_dummy.0: control 0:8:0:syz0:0 is already present [ 1296.144166][T30334] (syz.1.10527,30334,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1296.152828][T30334] (syz.1.10527,30334,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1296.187557][T30334] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 1296.218661][T30334] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1296.270839][T30334] (syz.1.10527,30334,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1296.294112][T30334] (syz.1.10527,30334,1):ocfs2_mknod:314 ERROR: status = -5 [ 1296.302202][T30334] (syz.1.10527,30334,1):ocfs2_mknod:502 ERROR: status = -5 [ 1296.344754][ T5792] ocfs2: Unmounting device (7,1) on (node local) [ 1296.678777][T30401] netlink: zone id is out of range [ 1296.684379][T30401] netlink: zone id is out of range [ 1296.728673][T30401] netlink: zone id is out of range [ 1296.742341][T30401] netlink: zone id is out of range [ 1296.747516][T30401] netlink: zone id is out of range [ 1296.752713][T30401] netlink: zone id is out of range [ 1296.771703][T30405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10563'. [ 1296.784800][T30401] netlink: zone id is out of range [ 1296.790984][T30405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10563'. [ 1296.806071][T30401] netlink: zone id is out of range [ 1296.811762][T30401] netlink: zone id is out of range [ 1296.825704][T30401] netlink: zone id is out of range [ 1297.000784][T30393] loop2: detected capacity change from 0 to 32768 [ 1297.194318][T30417] loop0: detected capacity change from 0 to 128 [ 1297.248473][T30417] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1297.300044][T30417] ext4 filesystem being mounted at /2643/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.338335][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10571'. [ 1297.405566][T30417] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 1297.620408][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1297.701915][T30433] nvme_fabrics: missing parameter 'transport=%s' [ 1297.725963][T30433] nvme_fabrics: missing parameter 'nqn=%s' [ 1297.904008][T30447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1298.607719][T30474] loop3: detected capacity change from 0 to 256 [ 1298.636234][T30474] exfat: Deprecated parameter 'utf8' [ 1298.694709][T30474] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 1299.223256][ T7003] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1299.258133][T30498] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1299.377456][T30502] loop2: detected capacity change from 0 to 8 [ 1299.415917][ T7003] usb 2-1: Using ep0 maxpacket: 8 [ 1299.445648][ T7003] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1299.459894][T30502] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1299.471153][ T7003] usb 2-1: config 179 has no interface number 0 [ 1299.486231][T30502] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1299.494415][ T7003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1299.510813][T30502] SQUASHFS error: Failed to read block 0x8f: -5 [ 1299.519231][ T7003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1299.532317][ T7003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1299.546649][ T28] audit: type=1800 audit(2000000241.819:215): pid=30502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10607" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1299.553980][ T7003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1299.639564][ T7003] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1299.694201][ T7003] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1299.725177][ T7003] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1299.767032][ T7003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.854810][ T7003] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input99 [ 1299.955449][ T5143] input input99: unable to receive magic message: -110 [ 1299.980452][ T5143] input input99: unable to receive magic message: -32 [ 1300.000461][ T5143] input input99: unable to receive magic message: -32 [ 1300.049361][ T5143] input input99: unable to receive magic message: -32 [ 1300.090919][ T5143] input input99: unable to receive magic message: -32 [ 1300.096022][ T28] audit: type=1400 audit(2000000242.315:216): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=30517 comm="syz.2.10615" [ 1300.152720][ T7503] input input99: unable to receive magic message: -32 [ 1300.254541][ T5143] input input99: unable to receive magic message: -32 [ 1300.294574][ T5143] input input99: unable to receive magic message: -32 [ 1300.362993][T20740] usb 2-1: USB disconnect, device number 63 [ 1300.363129][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1300.378101][T20740] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1300.400102][T30529] loop3: detected capacity change from 0 to 128 [ 1300.439908][T30529] FAT-fs (loop3): Directory bread(block 11554) failed [ 1300.452154][T30529] FAT-fs (loop3): Directory bread(block 11555) failed [ 1300.462152][T30529] FAT-fs (loop3): Directory bread(block 11556) failed [ 1300.504919][T30529] FAT-fs (loop3): Directory bread(block 11557) failed [ 1300.520860][T30529] FAT-fs (loop3): Directory bread(block 11558) failed [ 1300.528445][T30529] FAT-fs (loop3): Directory bread(block 11559) failed [ 1300.535358][T30529] FAT-fs (loop3): Directory bread(block 11560) failed [ 1300.575803][T30529] FAT-fs (loop3): Directory bread(block 11561) failed [ 1300.597803][T30529] FAT-fs (loop3): Directory bread(block 11562) failed [ 1300.629788][T30529] FAT-fs (loop3): Directory bread(block 11563) failed [ 1301.690536][T30574] loop3: detected capacity change from 0 to 1764 [ 1301.748221][T30574] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1301.830654][T30578] loop1: detected capacity change from 0 to 2048 [ 1301.902527][T30578] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1301.983732][T30582] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1301.984661][T30578] syz.1.10644: attempt to access beyond end of device [ 1301.984661][T30578] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1302.206179][T30578] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1302.246926][T30578] Remounting filesystem read-only [ 1302.272335][T30578] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1302.304795][T30578] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1302.327346][T30559] loop0: detected capacity change from 0 to 32768 [ 1302.350039][ T28] audit: type=1800 audit(2000000244.438:217): pid=30578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10644" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1302.389515][T30559] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1302.398893][T30578] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 16777227 [ 1302.427996][T30559] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1302.436670][T30578] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1302.436839][T30578] NILFS (loop1): error -5 truncating bmap (ino=16) [ 1302.481346][T30559] BTRFS info (device loop0): turning on flush-on-commit [ 1302.481760][ T28] audit: type=1326 audit(2000000244.569:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30587 comm="syz.3.10649" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dda38f6c9 code=0x0 [ 1302.504565][T30559] BTRFS info (device loop0): use zlib compression, level 3 [ 1302.542556][T30559] BTRFS info (device loop0): disabling free space tree [ 1302.559328][T30559] BTRFS info (device loop0): enabling disk space caching [ 1302.585407][ T5792] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1302.586161][T30559] BTRFS info (device loop0): setting nodatasum [ 1302.599298][ T5792] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 1302.611495][ T5792] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1302.616935][T30559] BTRFS info (device loop0): turning off barriers [ 1302.631490][ T5792] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1302.649282][T30559] BTRFS info (device loop0): enabling ssd optimizations [ 1302.653096][ T5792] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1302.664533][T30559] BTRFS info (device loop0): force clearing of disk cache [ 1302.686634][ T5792] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 1302.699053][T30559] BTRFS info (device loop0): disk space caching is enabled [ 1302.707318][ T5792] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1302.723984][ T5792] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1302.755064][ T5792] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1302.778194][ T5792] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1302.804000][ T5792] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1302.862435][T30559] BTRFS info (device loop0): rebuilding free space tree [ 1302.876347][T30584] loop2: detected capacity change from 0 to 32768 [ 1302.912870][T30559] BTRFS info (device loop0): disabling free space tree [ 1302.920980][T30584] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.10647 (30584) [ 1302.921634][T30559] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1302.964165][T30559] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1303.100082][ T7503] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (7503) [ 1303.154831][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1303.338720][ T5788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (5788) [ 1303.969491][ T27] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1303.997308][T30606] loop1: detected capacity change from 0 to 32768 [ 1304.054941][T30606] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.10650 (30606) [ 1304.126366][T30631] loop2: detected capacity change from 0 to 128 [ 1304.135429][T30631] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1304.184843][T30631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1304.230970][T30606] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1304.247213][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 1304.256470][ T27] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 1304.286471][ T27] usb 1-1: config 0 has no interface number 0 [ 1304.299909][T30606] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1304.318864][ T27] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1304.356955][ T27] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1304.361516][T30606] BTRFS info (device loop1): force zlib compression, level 3 [ 1304.375972][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.398836][T30606] BTRFS info (device loop1): force clearing of disk cache [ 1304.406013][T30606] BTRFS info (device loop1): turning off barriers [ 1304.407505][ T27] usb 1-1: Product: syz [ 1304.441115][ T27] usb 1-1: Manufacturer: syz [ 1304.445772][ T27] usb 1-1: SerialNumber: syz [ 1304.448476][T30606] BTRFS info (device loop1): doing ref verification [ 1304.471738][T30606] BTRFS info (device loop1): enabling disk space caching [ 1304.497551][T30606] BTRFS info (device loop1): disk space caching is enabled [ 1304.504913][ T27] usb 1-1: config 0 descriptor?? [ 1304.626709][T30606] BTRFS info (device loop1): enabling ssd optimizations [ 1304.648559][T30606] BTRFS info (device loop1): auto enabling async discard [ 1304.673225][T30606] BTRFS info (device loop1): rebuilding free space tree [ 1304.718275][T30606] BTRFS info (device loop1): disabling free space tree [ 1304.731565][T30606] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1304.782221][T30606] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1304.966175][ T27] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 1304.988672][ T5792] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1305.016882][ T27] usb 1-1: USB disconnect, device number 48 [ 1306.075126][T30693] tipc: Can't bind to reserved service type 35 [ 1306.351341][T30706] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10690'. [ 1306.992392][T30700] loop1: detected capacity change from 0 to 32768 [ 1307.042310][T30700] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1307.254298][ T7503] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1308.110172][T30767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10719'. [ 1308.325313][T30776] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10725'. [ 1308.404682][T30778] loop3: detected capacity change from 0 to 2048 [ 1308.443744][T30778] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1308.519776][T30783] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1308.522983][T30778] syz.3.10724: attempt to access beyond end of device [ 1308.522983][T30778] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1308.608268][T30786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10728'. [ 1308.637130][T30786] bridge_slave_1: left allmulticast mode [ 1308.653569][T30786] bridge_slave_1: left promiscuous mode [ 1308.669674][T30786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.681626][T30778] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1308.710520][T30786] bridge_slave_0: left allmulticast mode [ 1308.717556][T30786] bridge_slave_0: left promiscuous mode [ 1308.734141][T30778] Remounting filesystem read-only [ 1308.734465][T30786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.747785][T30778] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1308.771136][T30778] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1308.807604][ T28] audit: type=1800 audit(2000000250.481:219): pid=30778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10724" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1308.821466][T30778] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 16777227 [ 1308.837789][T30778] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1308.851027][T30786] .`: (slave bridge0): Releasing backup interface [ 1308.853291][T30778] NILFS (loop3): error -5 truncating bmap (ino=16) [ 1308.983988][ T5794] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 1309.001929][ T5794] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 1309.020574][ T5794] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1309.044380][ T5794] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1309.062360][ T5794] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1309.075599][ T5794] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 1309.115200][ T5794] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1309.129708][ T5794] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1309.172468][ T5794] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1309.194248][ T5794] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1309.205261][ T5794] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1309.267486][T30794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10733'. [ 1309.290532][T30768] loop2: detected capacity change from 0 to 40427 [ 1309.328787][T30768] F2FS-fs (loop2): invalid crc value [ 1309.362231][T30768] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1309.428392][T30796] loop1: detected capacity change from 0 to 2048 [ 1309.491265][T30796] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 1309.516697][T30768] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1309.724705][T30806] loop3: detected capacity change from 0 to 2048 [ 1309.788532][T30806] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1309.825608][T30806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1309.978774][T30814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10741'. [ 1309.993171][T30814] net_ratelimit: 334 callbacks suppressed [ 1309.993187][T30814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.207910][T30820] 9pnet_fd: p9_fd_create_tcp (30820): problem connecting socket to 127.0.0.1 [ 1311.291239][T30854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10760'. [ 1311.344698][T30854] netlink: 'syz.2.10760': attribute type 1 has an invalid length. [ 1311.407567][T30826] loop1: detected capacity change from 0 to 32768 [ 1311.434647][T30858] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1311.442009][T30858] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1311.485325][T30826] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1311.748954][T30826] XFS (loop1): Ending clean mount [ 1311.788915][T30826] XFS (loop1): Quotacheck needed: Please wait. [ 1311.892945][T30826] XFS (loop1): Quotacheck: Done. [ 1312.214793][ T5792] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1312.317439][T30896] loop2: detected capacity change from 0 to 1764 [ 1312.358310][T30896] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1313.341685][T30910] loop0: detected capacity change from 0 to 32768 [ 1313.390308][T30910] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1313.628215][T30910] XFS (loop0): Ending clean mount [ 1313.644546][T30910] XFS (loop0): Quotacheck needed: Please wait. [ 1313.722275][T30910] XFS (loop0): Quotacheck: Done. [ 1313.979292][ T5784] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1314.229339][T30957] 9pnet: Could not find request transport: x [ 1314.307164][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1314.450642][T30946] loop2: detected capacity change from 0 to 40427 [ 1314.504949][T30946] F2FS-fs (loop2): invalid crc value [ 1314.535811][T30946] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1314.690752][T30946] F2FS-fs (loop2): Start checkpoint disabled! [ 1314.712153][T30946] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1315.010615][T30972] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1315.039503][T30962] loop3: detected capacity change from 0 to 32768 [ 1315.066348][T30962] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.10804 (30962) [ 1315.106319][T30962] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1315.125129][T30962] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1315.162451][T30962] BTRFS info (device loop3): force zlib compression, level 3 [ 1315.170765][T30962] BTRFS info (device loop3): force clearing of disk cache [ 1315.206045][T30962] BTRFS info (device loop3): turning off barriers [ 1315.212550][T30962] BTRFS info (device loop3): doing ref verification [ 1315.237131][T30962] BTRFS info (device loop3): enabling disk space caching [ 1315.244317][T30962] BTRFS info (device loop3): disk space caching is enabled [ 1315.447377][T30962] BTRFS info (device loop3): enabling ssd optimizations [ 1315.482997][T30962] BTRFS info (device loop3): auto enabling async discard [ 1315.526120][T30962] BTRFS info (device loop3): rebuilding free space tree [ 1315.588208][T30962] BTRFS info (device loop3): disabling free space tree [ 1315.600769][T30962] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1315.611526][T30962] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1315.788356][T30997] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10813'. [ 1315.868956][ T5794] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1316.049711][T31002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10816'. [ 1316.149753][T31004] netlink: 'syz.2.10817': attribute type 1 has an invalid length. [ 1316.172652][T31006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10818'. [ 1316.193777][T31004] netlink: 'syz.2.10817': attribute type 2 has an invalid length. [ 1316.319407][T31008] bridge2: entered promiscuous mode [ 1317.085384][T31032] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1317.100172][T31032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1317.109759][T31032] netlink: 31 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1317.119303][T31032] netlink: 'syz.0.10830': attribute type 2 has an invalid length. [ 1317.127276][T31032] netlink: 31 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1317.129087][T31034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10831'. [ 1317.202030][T31034] bridge_slave_1: left allmulticast mode [ 1317.215147][T31034] bridge_slave_1: left promiscuous mode [ 1317.220947][T31034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.262076][T31034] bridge_slave_0: left allmulticast mode [ 1317.267800][T31034] bridge_slave_0: left promiscuous mode [ 1317.279232][T31034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.692819][T31018] loop2: detected capacity change from 0 to 40427 [ 1317.733009][T31018] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1317.749362][T31018] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1317.790592][T31018] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 1317.821608][T31018] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1317.911415][T31018] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1317.929503][T31018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1318.387883][T31066] loop0: detected capacity change from 0 to 4096 [ 1319.756401][T31113] loop1: detected capacity change from 0 to 1024 [ 1319.796544][T31113] EXT4-fs: Ignoring removed orlov option [ 1319.854780][T31113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1319.900741][T31113] ext4 filesystem being mounted at /2728/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1320.108214][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1320.185910][T31090] loop0: detected capacity change from 0 to 32768 [ 1320.209675][T31090] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1320.403524][ T5788] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1320.879627][T31151] geneve3: entered promiscuous mode [ 1321.323463][T31167] loop1: detected capacity change from 0 to 16 [ 1321.363596][T31167] erofs: (device loop1): mounted with root inode @ nid 36. [ 1321.387357][T31167] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1321.418239][T31167] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1321.796902][T31188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10904'. [ 1322.143064][T31200] binder: 31199:31200 ioctl c0306201 200000000080 returned -14 [ 1322.197465][ T28] audit: type=1326 audit(2000000263.025:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31201 comm="syz.0.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1322.219908][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.274211][ T28] audit: type=1326 audit(2000000263.025:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31201 comm="syz.0.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1322.357645][ T28] audit: type=1326 audit(2000000263.062:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31201 comm="syz.0.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1322.422351][ T28] audit: type=1326 audit(2000000263.062:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31201 comm="syz.0.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1322.463981][ T28] audit: type=1326 audit(2000000263.062:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31201 comm="syz.0.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287f18f6c9 code=0x7ffc0000 [ 1322.517513][T31214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10916'. [ 1322.570902][T31214] bridge_slave_1: left allmulticast mode [ 1322.576639][T31214] bridge_slave_1: left promiscuous mode [ 1322.601913][T31214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.636783][T31214] bridge_slave_0: left allmulticast mode [ 1322.642549][T31214] bridge_slave_0: left promiscuous mode [ 1322.663312][T31214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.783331][T31224] netlink: 'syz.0.10921': attribute type 1 has an invalid length. [ 1322.824716][T31218] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10917'. [ 1322.844334][T31218] 0X: renamed from caif0 [ 1322.867003][T31218] 0X: entered allmulticast mode [ 1322.887232][T31218] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1323.069315][T31232] loop2: detected capacity change from 0 to 16 [ 1323.099231][T31232] erofs: (device loop2): mounted with root inode @ nid 36. [ 1323.155208][T31232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1323.222281][T31232] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1323.601833][T31253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10935'. [ 1323.633376][T31253] bridge_slave_1: left allmulticast mode [ 1323.682702][T31253] bridge_slave_1: left promiscuous mode [ 1323.688559][T31253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.781698][T31253] bridge_slave_0: left allmulticast mode [ 1323.790634][T31253] bridge_slave_0: left promiscuous mode [ 1323.796534][T31253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.885523][T31253] bond0: (slave bridge0): Releasing backup interface [ 1323.907345][T31266] i2c i2c-0: Invalid block read size 255 [ 1324.035565][ T5858] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1324.281718][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1324.305582][ T5858] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1324.345586][ T5858] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1324.371625][ T5858] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1324.403625][ T5858] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1324.418777][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1324.432511][ T5858] usb 1-1: Product: syz [ 1324.436733][ T5858] usb 1-1: Manufacturer: syz [ 1324.441444][ T5858] usb 1-1: SerialNumber: syz [ 1324.482402][ T5858] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input101 [ 1324.658832][T31290] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10954'. [ 1324.688632][T31290] 0X: renamed from caif0 [ 1324.700028][T31290] 0X: entered allmulticast mode [ 1324.708534][T31290] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 1324.812133][ T5858] usb 1-1: USB disconnect, device number 49 [ 1324.845295][ T5858] appletouch 1-1:1.0: input: appletouch disconnected [ 1325.056072][T31296] netlink: 'syz.1.10957': attribute type 2 has an invalid length. [ 1325.221133][T31288] loop3: detected capacity change from 0 to 32768 [ 1325.440221][T31300] loop1: detected capacity change from 0 to 64 [ 1325.650643][T31292] loop2: detected capacity change from 0 to 32768 [ 1325.661787][ T11] ------------[ cut here ]------------ [ 1325.667305][ T11] kernel BUG at fs/hfs/inode.c:449! [ 1325.710137][ T11] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1325.716296][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1325.723715][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1325.733806][ T11] Workqueue: writeback wb_workfn (flush-7:1) [ 1325.739848][ T11] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 1325.745855][ T11] Code: c7 c1 00 23 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 23 ef 96 e8 86 c2 85 ff e9 6c fe ff ff e8 4c 67 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 1325.765482][ T11] RSP: 0018:ffffc90000107360 EFLAGS: 00010293 [ 1325.771552][ T11] RAX: ffffffff82572844 RBX: ffff88802eaae328 RCX: ffff88801be43c00 [ 1325.779522][ T11] RDX: 0000000000000000 RSI: ffffffff8cf36e80 RDI: 0000000000000000 [ 1325.787507][ T11] RBP: ffffc900001074f0 R08: ffff88801be43c00 R09: 0000000000000003 [ 1325.795487][ T11] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1325.803473][ T11] R13: 1ffff92000020e70 R14: ffff88802eaae2d8 R15: 0000000000000000 [ 1325.811447][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1325.820406][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1325.826996][ T11] CR2: 00007f7ddb1156c0 CR3: 0000000062790000 CR4: 00000000003506e0 [ 1325.834988][ T11] Call Trace: [ 1325.838273][ T11] [ 1325.841207][ T11] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1325.846610][ T11] ? __rwlock_init+0x150/0x150 [ 1325.851408][ T11] __writeback_single_inode+0x705/0xee0 [ 1325.857000][ T11] writeback_sb_inodes+0x77c/0xef0 [ 1325.862171][ T11] ? queue_io+0x560/0x560 [ 1325.866528][ T11] ? rcu_is_watching+0x15/0xb0 [ 1325.871317][ T11] wb_writeback+0x450/0xba0 [ 1325.875837][ T11] ? queue_io+0x381/0x560 [ 1325.880180][ T11] ? percpu_ref_tryget+0x250/0x250 [ 1325.885298][ T11] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1325.891298][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.896504][ T11] wb_workfn+0x3ff/0xe20 [ 1325.900759][ T11] ? inode_wait_for_writeback+0x200/0x200 [ 1325.906486][ T11] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1325.912470][ T11] ? read_lock_is_recursive+0x20/0x20 [ 1325.917850][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 1325.923052][ T11] ? process_scheduled_works+0x957/0x15b0 [ 1325.928782][ T11] ? process_scheduled_works+0x957/0x15b0 [ 1325.934507][ T11] process_scheduled_works+0xa45/0x15b0 [ 1325.940082][ T11] ? assign_work+0x400/0x400 [ 1325.944681][ T11] ? assign_work+0x39e/0x400 [ 1325.949298][ T11] worker_thread+0xa55/0xfc0 [ 1325.953912][ T11] kthread+0x2fa/0x390 [ 1325.958017][ T11] ? pr_cont_work+0x560/0x560 [ 1325.962717][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1325.967304][ T11] ret_from_fork+0x48/0x80 [ 1325.971723][ T11] ? kthread_blkcg+0xd0/0xd0 [ 1325.976314][ T11] ret_from_fork_asm+0x11/0x20 [ 1325.981116][ T11] [ 1325.984154][ T11] Modules linked in: [ 1326.014894][T31292] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1326.023394][T31292] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1326.036137][ T11] ---[ end trace 0000000000000000 ]--- [ 1326.041631][ T11] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 1326.047964][ T11] Code: c7 c1 00 23 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 23 ef 96 e8 86 c2 85 ff e9 6c fe ff ff e8 4c 67 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 1326.068226][ T11] RSP: 0018:ffffc90000107360 EFLAGS: 00010293 [ 1326.074365][ T11] RAX: ffffffff82572844 RBX: ffff88802eaae328 RCX: ffff88801be43c00 [ 1326.086194][ T11] RDX: 0000000000000000 RSI: ffffffff8cf36e80 RDI: 0000000000000000 [ 1326.095821][ T11] RBP: ffffc900001074f0 R08: ffff88801be43c00 R09: 0000000000000003 [ 1326.109155][ T11] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 1326.129181][ T11] R13: 1ffff92000020e70 R14: ffff88802eaae2d8 R15: 0000000000000000 [ 1326.138463][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1326.147998][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1326.155886][ T11] CR2: 00007fd5bddaa000 CR3: 000000005e2ee000 CR4: 00000000003506f0 [ 1326.164183][ T11] Kernel panic - not syncing: Fatal exception [ 1326.170606][ T11] Kernel Offset: disabled [ 1326.174938][ T11] Rebooting in 86400 seconds..