last executing test programs: 6.510269562s ago: executing program 3 (id=1117): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x105d}}, 0x1006) 6.230098093s ago: executing program 3 (id=1119): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5541, &(0x7f000000b2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xc0406618, 0x0) 5.014564798s ago: executing program 3 (id=1126): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "5780eafb"}, @global=@item_012={0x1, 0x1, 0x0, "f3"}]}}, 0x0}, 0x0) 4.64525931s ago: executing program 1 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}], 0x2) 4.382503681s ago: executing program 1 (id=1132): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={0x0, 0x894}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000002b40)={&(0x7f00000029c0)=@in={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000002a00)="620ecbd29a5f", 0x6}], 0x1, 0x0, 0x0, 0x8851}, 0x20000000) 3.386311365s ago: executing program 1 (id=1142): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0xa, 0x0, {0x2, @usage=0x7ff, 0x0, 0x2, 0x4000000000, 0x0, 0x1fffc, 0x80000, 0x68, @usage=0x5, 0x0, 0x0, [0xfffffffffffff801, 0x1, 0x0, 0x2, 0x332]}, {0x0, @usage=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x4, 0x0, [0x2, 0x2, 0x4]}, {0x0, @struct={0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xa0, @struct={0x4, 0x4}, 0x6, 0xff, [0x7612, 0x0, 0x7, 0x0, 0x6]}, {0x6, 0xfffffffffffffffe}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 2.3356868s ago: executing program 0 (id=1162): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@rodir}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@numtail}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@shortname_win95}, {@rodir}]}, 0x26, 0x336, &(0x7f00000001c0)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x55d) 1.861607131s ago: executing program 0 (id=1163): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x2) 1.818431482s ago: executing program 3 (id=1164): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) r1 = dup2(r0, r0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x980901}) 1.753545963s ago: executing program 3 (id=1165): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2000, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f6, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 1.711266643s ago: executing program 1 (id=1166): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.633822213s ago: executing program 3 (id=1167): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "a6ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.540628663s ago: executing program 4 (id=1169): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000400), 0x4) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 1.502628044s ago: executing program 4 (id=1170): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0), 0x24, 0x0) 1.206733485s ago: executing program 1 (id=1173): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00', 0x1}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 986.566996ms ago: executing program 4 (id=1178): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x409, &(0x7f0000000040)) 866.466426ms ago: executing program 2 (id=1180): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000440)={[{@check_relaxed}, {@map_off}, {@unhide}, {@hide}, {@overriderock}, {@overriderock}, {@nocompress}, {@unhide}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {}, {@cruft}, {@overriderock}, {@cruft}]}, 0x4, 0xa20, &(0x7f0000004f40)="$eJzs3U1sXOW5B/D/GduJY1ASIJfLRUAm4SYY8HVs55LciAU3sSeJqT8q25GIuiCUOFUat7SklQBVIkhVV0Wt1KqLskNdtRskNmVTsWt37aqLShWr7lFX6crVmRnHX2OPbRw7hN8vOp7z8Zz3fc7nmxkfzxu+XOYPLJuan68PW5y+9NsdyJh72LmRzz786P1yeO9W9qQjLxS/T7qTVJPOJI8lXcMjU5PjbQq6kVxJ8mlSJNmbxuuGXEnxszy4OP1pig/Kete0Z6Ml0848X2m7ff4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC9qBgeGRgYLPZkdOLSK9WGpLrK8MjUZJH5+dVLFtZp+KTe63fxSdt6k6Ic0t290NX3Y4cWFz+apHo0TzSmnqh3SJ7uvPPAowdffKSzsrD+WtlsVjOjRnl7N17szbffufHa3Nzsm2uHzL/b2IbtSPOec6E2MTo9OTp+9kKtOjo9WT1z6tTAiYvnp6vnR8dq05enZ2rj1eGp2tmZyalq7/Cz1cEzZ05Wa/2XJy9NXBjpH6stzDz9P0MDA6eqL/d/vXZ2anpy4sTL/dPDF0fHxkYnLtRjysVlzOnyRPza6Ex1pnZ2vFq9dn1u9uSKnDpW7uwyaLDdlpRBQ+2ChgaGhgYHh4YG32v2nn1nxqkXzrxwemCgc2CFrIrYvpOWe9i+tQ/z9t7A4QuoNNr/fHsso5nIpbySast/wxnJVCYzvsbypoX2/9iJ2rr1Lm3/m61855LFj5c/juap5mT3Gu3/Grns3L+beTvv5EZey1zmMps3dz2jnf13IbVMZDTTmcxoxnO2PqfanFPNmZzKqQzk1VzM4UynmvMZzVhqmc7lTGcmtfoZNZyp1HI2M5nMVKrpzXCeTTWDOZMzOZlqaunP5UzmUiZyISM5Wy/lWq7X9/vJdXK8EzS4kaChdYJWNublub659r92v/5PkA3b/ps4bNF8s/3f0z60d3gnEgIAAAC23X/9KfsPPfzHvydFnqx/Ln9+dKz20m6nBQAAAGyj+uN6T5QvXeXYk9319/8Du50WAAAAsI2K+t/YFUl6crgxtvCXUD4EAAAAgPtE/ff/T6U4vDjD+38AAAC4z7T/jv22EUXfwtf/Vq82Xq82IxpTRc/50bFa//Dk2IuDOV7/loEkT64urSMpuup/fvBcjjSijvQ0XnsWSyzr7C6jBvtfHMxzOdrckN6ny5ene1tEDjUin2lEPrM0siPLIk+Wkev7YDt2OwDsqqPrtMcbbf+fS18jou/xepPf+XiLNnigfcsKAOyMO33s/KvZpVmL9r8Z8dRa7f//rvP+v4x4ONcONx4p6M/reSNzuZq+NJ84ONyq1IXeCBqPIfS1+TSgp/nIwl9OV9K36vOA7jvbujR2NkPpa/mJwJJyi4UcTjbiOu7OMQCAnXZ03XZ4Y+1/X5v3/z0eKQSAe8qdHuw3MfLuZoJn37y529sIACynlQYAAAAAAAAAAAAAAAAAAAAAAAAAAIDtt6Ev8P/z8WRubjbZQmcBWx7prmwiw/VHKtmhnHd9pCPJbtX+Uja9VneSL1Dp7/Y1V//H7u/5+25kt+9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7IQi6Wg1v5LsTTKQ5MTOZ3X33NrtBLZLdc+WVitu53beyv5tzwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cuu+f3/lTReH2jMSmclOZbkSpJv7HaO2+n2bidwdxTtQ77TCFz8/v9K0pX5Ip2Nw56ia3hkanK8LKrYWy7/7MOP3i+H9mWv7lWhLKCsYVnnEs0alszpWr7WQ/W1ekZmb974wRvfq46cq5+Y52bOj42MX5j6/8XAR4uPk2oaw4KFfH907A8/XzK72VFC8XG5pa2trPd8vd6R1fX+Z6u116h3We2tXZ+bHSprmqm9MvPD715/a8mih3Mkebo36V1e07fKoWVNyZGV+3O54vPiJ8X+/CpX6se/3BvFfFEeogP17d937frcbP/rb8xdvZPTu8tyOpjDSa4m3RvP6fDa52b9rKt0lbUO1IPKH4falLeuJSUOrrFfH6qfMj2b2oZqm+urzX5vZnSyZUa/+P4jOb7pI328TY1JsTrl4vPib8XF/DU/XtL/R6U8/sfS8upsUWo9srJvfn5+vn6mLF227PKqHFvc8qGlC15dWeaaVyV3wU/zzfzfneNfWXL/bx6rnbkfLamx9XWRbP66+M2BVS3KonqLdGhFi9S8+6y1TjPPQ42oNfL8jzzfKHMTd5Tn27XYX/j6b6H4vPh10Zt/5pb+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHtfkXS0ml9JjiU5mORAOV1N5lfG3NpCfZWeYitpbput5PzlU6y5ocXt3M5b2b/TGQEAAAAAAABwd5wb+ezDj94vh/rv4zvy35XmkmrSmeRg8cuu4ZGpyfEVK658WqArubLwK/3uzeVwpfzx4OL0p+XUY21W2t3HBwDgS+3fAQAA//8sNHCS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/154, 0x9a) 860.779786ms ago: executing program 4 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 847.804156ms ago: executing program 0 (id=1182): timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000400)) 678.519127ms ago: executing program 0 (id=1183): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) copy_file_range(r0, &(0x7f0000000080)=0xfffffffffffffff9, r0, 0x0, 0x100000001, 0x0) 678.315607ms ago: executing program 2 (id=1184): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000001340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 667.048537ms ago: executing program 4 (id=1185): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 612.569697ms ago: executing program 0 (id=1186): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x83, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x1, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) 514.459107ms ago: executing program 4 (id=1187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@global=@item_4={0x3, 0x1, 0x0, "bb695dec"}, @global=@item_4={0x3, 0x1, 0x1, "93aedf4d"}, @local=@item_4={0x3, 0x2, 0xa, "12d66229"}, @local=@item_4={0x3, 0x2, 0x0, "55ad6c27"}, @local=@item_4={0x3, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "00040002"}, @main=@item_4={0x3, 0x0, 0x0, "33f9ad53"}]}}, 0x0}, 0x0) 514.157897ms ago: executing program 2 (id=1188): setresuid(0x0, 0xee01, 0x0) r0 = io_uring_setup(0x410f, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x0}, 0x20) 484.020938ms ago: executing program 0 (id=1189): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000220001"], 0x1c}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x7c, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}) 439.607428ms ago: executing program 2 (id=1190): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d3, &(0x7f0000000880)="$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") rename(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 302.446278ms ago: executing program 1 (id=1191): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4421, &(0x7f0000004500)="$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") open(&(0x7f0000000040)='./file0\x00', 0x861c5, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) 288.407048ms ago: executing program 2 (id=1192): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1144, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={0x1, 0x0, 0x40000}, 0x20) 0s ago: executing program 2 (id=1193): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xd1, 0x0, 0x0) kernel console output (not intermixed with test programs): arch=c000003e syscall=202 compat=0 ip=0x7f41f03cb819 code=0x7fc00000 [ 90.926659][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.938935][ T26] audit: type=1326 audit(1732108965.858:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5101 comm="syz.4.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f03cb819 code=0x7fc00000 [ 90.961449][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.021341][ T5135] loop4: detected capacity change from 0 to 8 [ 91.114082][ T5128] loop2: detected capacity change from 0 to 32768 [ 91.617547][ T5135] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 91.639000][ T5131] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 91.693140][ T5139] loop0: detected capacity change from 0 to 64 [ 91.745335][ T5137] loop1: detected capacity change from 0 to 4096 [ 91.864264][ T5137] ntfs: volume version 3.1. [ 92.113525][ T5152] loop0: detected capacity change from 0 to 2048 [ 92.173222][ T5154] (unnamed net_device) (uninitialized): (slave virt_wifi0): Device is not bonding slave [ 92.184384][ T5154] (unnamed net_device) (uninitialized): option active_slave: invalid value (virt_wifi0) [ 92.295603][ T5152] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.351526][ T5152] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.471657][ T5166] loop1: detected capacity change from 0 to 1024 [ 92.505708][ T4209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.571998][ T5166] hfsplus: request for non-existent node 134217728 in B*Tree [ 92.611697][ T5166] hfsplus: request for non-existent node 134217728 in B*Tree [ 92.765671][ T4209] usb 3-1: Using ep0 maxpacket: 16 [ 92.857939][ T5144] loop4: detected capacity change from 0 to 32768 [ 92.898056][ T5144] (syz.4.368,5144,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.915893][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.929340][ T5144] (syz.4.368,5144,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.945874][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.961749][ T5178] loop0: detected capacity change from 0 to 512 [ 92.984367][ T5144] JBD2: Ignoring recovery information on journal [ 92.986353][ T4209] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 93.012573][ T5174] loop3: detected capacity change from 0 to 4096 [ 93.020954][ T4209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.045252][ T5178] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.074993][ T4209] usb 3-1: config 0 descriptor?? [ 93.089148][ T5144] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.201688][ T5174] ntfs: volume version 3.1. [ 93.278424][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 93.525548][ T4210] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.554275][ T5190] sp0: Synchronizing with TNC [ 93.639228][ T4209] elecom 0003:056E:011C.0009: hidraw0: USB HID v0.06 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 93.679561][ T5196] loop3: detected capacity change from 0 to 1024 [ 93.716425][ T5198] loop4: detected capacity change from 0 to 22 [ 93.741711][ T5198] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 93.761818][ T5198] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 93.780842][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.814744][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 93.814760][ T26] audit: type=1800 audit(1732108969.028:3989): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.393" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 93.855577][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.876834][ T4209] usb 3-1: USB disconnect, device number 4 [ 93.886669][ T4210] usb 1-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 93.905985][ T4210] usb 1-1: config 255 has an invalid descriptor of length 78, skipping remainder of the config [ 93.916525][ T4210] usb 1-1: config 255 has no interfaces? [ 93.922300][ T4210] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 93.932093][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.225730][ T4210] usb 1-1: string descriptor 0 read error: -71 [ 94.245796][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.252726][ T4210] usb 1-1: USB disconnect, device number 7 [ 94.274736][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.296817][ T21] usb 2-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 94.315890][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.336255][ T21] usb 2-1: config 0 descriptor?? [ 94.366179][ T5206] loop4: detected capacity change from 0 to 32768 [ 94.425823][ T5206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.397 (5206) [ 94.536435][ T5206] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 94.554380][ T5206] BTRFS info (device loop4): using free space tree [ 94.571406][ T5206] BTRFS info (device loop4): has skinny extents [ 94.645802][ T5210] loop3: detected capacity change from 0 to 32768 [ 94.782767][ T5223] loop0: detected capacity change from 0 to 1024 [ 94.809461][ T5210] XFS (loop3): Mounting V5 Filesystem [ 94.825763][ T21] wacom 0003:056A:0013.000A: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 94.846606][ T21] wacom 0003:056A:0013.000A: hidraw0: USB HID v0.05 Device [HID 056a:0013] on usb-dummy_hcd.1-1/input0 [ 94.860505][ T21] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0013.000A/input/input7 [ 94.873080][ T5206] BTRFS info (device loop4): enabling ssd optimizations [ 94.972559][ T5223] hfsplus: xattr searching failed [ 94.980943][ T5212] loop2: detected capacity change from 0 to 32768 [ 95.038063][ T5210] XFS (loop3): Ending clean mount [ 95.062396][ T5210] XFS (loop3): Quotacheck needed: Please wait. [ 95.070146][ T4176] usb 2-1: USB disconnect, device number 5 [ 95.436980][ T5210] XFS (loop3): Quotacheck: Done. [ 95.454166][ T5246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.403'. [ 95.627203][ T4175] XFS (loop3): Unmounting Filesystem [ 95.742528][ T5254] loop0: detected capacity change from 0 to 1024 [ 95.768040][ T5258] loop4: detected capacity change from 0 to 1024 [ 95.902338][ T5256] loop1: detected capacity change from 0 to 8192 [ 95.947503][ T5262] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 95.964004][ T5258] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.995431][ T26] audit: type=1800 audit(1732108971.208:3990): pid=5258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.407" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 96.085672][ T5256] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "tail" [ 96.721486][ T5291] loop1: detected capacity change from 0 to 4096 [ 96.765828][ T5247] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.783587][ T5291] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 96.876236][ T5295] loop4: detected capacity change from 0 to 4096 [ 96.932502][ T5295] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 96.972718][ T5295] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,errors=remount-ro,grpjquota=,nomblk_io_submit,. Quota mode: writeback. [ 97.035610][ T5247] usb 1-1: Using ep0 maxpacket: 16 [ 97.123603][ T5295] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.423: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 97.155751][ T5247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.182905][ T5247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.219564][ T5289] loop3: detected capacity change from 0 to 32768 [ 97.230756][ T5247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 41907, setting to 1024 [ 97.244027][ T5247] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.254415][ T5247] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.258877][ T5295] EXT4-fs (loop4): Remounting filesystem read-only [ 97.267223][ T5247] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.280789][ T5295] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.423: directory missing '..' [ 97.291278][ T5289] (syz.3.420,5289,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.309959][ T5295] EXT4-fs (loop4): Remounting filesystem read-only [ 97.317722][ T5289] (syz.3.420,5289,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 97.365923][ T5247] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.378546][ T5247] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.387226][ T5247] usb 1-1: Manufacturer: syz [ 97.387930][ T5289] JBD2: Ignoring recovery information on journal [ 97.399653][ T5247] usb 1-1: config 0 descriptor?? [ 97.515910][ T5320] loop1: detected capacity change from 0 to 64 [ 97.520119][ T5289] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.718924][ T4175] ocfs2: Unmounting device (7,3) on (node local) [ 98.085560][ T5247] rc_core: IR keymap rc-hauppauge not found [ 98.091495][ T5247] Registered IR keymap rc-empty [ 98.097235][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.112443][ T5325] loop4: detected capacity change from 0 to 32768 [ 98.126216][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.157251][ T5247] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 98.171377][ T5247] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 98.187516][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.205600][ C0] mceusb 1-1:0.0: Error: urb status = -75 [ 98.231751][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.243406][ T5325] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 98.265796][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.298798][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.320584][ T5337] loop3: detected capacity change from 0 to 128 [ 98.320999][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 98.335684][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.375780][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.403953][ T5337] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 98.425415][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.466928][ T5337] sysv_free_block: getblk() failed [ 98.473285][ T5337] sysv_free_block: getblk() failed [ 98.478801][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.486925][ T5337] sysv_free_block: getblk() failed [ 98.492235][ T5337] sysv_free_block: getblk() failed [ 98.497996][ T5337] sysv_free_block: getblk() failed [ 98.503244][ T5337] sysv_free_block: getblk() failed [ 98.510529][ T5337] sysv_free_block: getblk() failed [ 98.520396][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.529419][ T5337] sysv_free_block: getblk() failed [ 98.534778][ T5337] sysv_free_block: getblk() failed [ 98.544067][ T5337] sysv_free_block: getblk() failed [ 98.551641][ T5337] sysv_free_block: getblk() failed [ 98.557237][ T5247] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.564631][ T5337] sysv_free_block: getblk() failed [ 98.571572][ T5337] sysv_free_block: getblk() failed [ 98.577200][ T5337] sysv_free_block: getblk() failed [ 98.582433][ T5337] sysv_free_block: getblk() failed [ 98.588463][ T5337] sysv_free_block: getblk() failed [ 98.593694][ T5337] sysv_free_block: getblk() failed [ 98.600537][ T5247] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 98.609029][ T5247] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 98.618684][ T5337] sysv_free_block: getblk() failed [ 98.623979][ T5337] sysv_free_block: getblk() failed [ 98.649724][ T5337] sysv_free_block: getblk() failed [ 98.655102][ T5247] usb 1-1: USB disconnect, device number 8 [ 98.664637][ T5340] loop4: detected capacity change from 0 to 4096 [ 98.667482][ T5337] sysv_free_block: getblk() failed [ 98.697545][ T5337] sysv_free_block: getblk() failed [ 98.702760][ T5337] sysv_free_block: getblk() failed [ 98.708313][ T5337] sysv_free_block: getblk() failed [ 98.713533][ T5337] sysv_free_block: getblk() failed [ 98.718865][ T5337] sysv_free_block: getblk() failed [ 98.724174][ T5337] sysv_free_block: getblk() failed [ 98.742925][ T5340] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 98.755683][ T5337] sysv_free_block: getblk() failed [ 98.761128][ T5337] sysv_free_block: getblk() failed [ 98.781459][ T5337] sysv_free_block: getblk() failed [ 98.786938][ T5337] sysv_free_block: getblk() failed [ 98.792484][ T5337] sysv_free_block: getblk() failed [ 98.799620][ T5337] sysv_free_block: getblk() failed [ 98.804819][ T5337] sysv_free_block: getblk() failed [ 98.810773][ T5337] sysv_free_block: getblk() failed [ 98.816278][ T5337] sysv_free_block: getblk() failed [ 98.830165][ T5337] sysv_free_block: trying to free block not in datazone [ 98.878604][ T5343] loop1: detected capacity change from 0 to 256 [ 98.891903][ T4175] sysv_free_block: getblk() failed [ 98.897637][ T4175] sysv_free_block: getblk() failed [ 98.902761][ T4175] sysv_free_block: trying to free block not in datazone [ 98.921911][ T4175] sysv_free_block: getblk() failed [ 98.949522][ T4175] sysv_free_block: getblk() failed [ 98.978361][ T5343] FAT-fs (loop1): Directory bread(block 64) failed [ 98.984942][ T5343] FAT-fs (loop1): Directory bread(block 65) failed [ 98.992316][ T4175] sysv_free_block: getblk() failed [ 99.011715][ T4175] sysv_free_block: getblk() failed [ 99.038748][ T4175] sysv_free_block: getblk() failed [ 99.043931][ T4175] sysv_free_block: getblk() failed [ 99.066779][ T5343] FAT-fs (loop1): Directory bread(block 66) failed [ 99.073353][ T5343] FAT-fs (loop1): Directory bread(block 67) failed [ 99.084955][ T4175] sysv_free_block: getblk() failed [ 99.110196][ T4175] sysv_free_block: getblk() failed [ 99.125792][ T5343] FAT-fs (loop1): Directory bread(block 68) failed [ 99.135216][ T5351] loop2: detected capacity change from 0 to 1024 [ 99.142294][ T4175] sysv_free_block: getblk() failed [ 99.148105][ T5343] FAT-fs (loop1): Directory bread(block 69) failed [ 99.155195][ T5343] FAT-fs (loop1): Directory bread(block 70) failed [ 99.163013][ T4175] sysv_free_block: getblk() failed [ 99.168532][ T4175] sysv_free_block: getblk() failed [ 99.179134][ T4175] sysv_free_block: getblk() failed [ 99.184373][ T4175] sysv_free_block: getblk() failed [ 99.202060][ T5343] FAT-fs (loop1): Directory bread(block 71) failed [ 99.211143][ T4175] sysv_free_block: getblk() failed [ 99.218368][ T5343] FAT-fs (loop1): Directory bread(block 72) failed [ 99.235149][ T4175] sysv_free_block: getblk() failed [ 99.248436][ T4175] sysv_free_block: getblk() failed [ 99.253603][ T4175] sysv_free_block: getblk() failed [ 99.264663][ T5343] FAT-fs (loop1): Directory bread(block 73) failed [ 99.282202][ T4175] sysv_free_block: getblk() failed [ 99.293215][ T4175] sysv_free_block: trying to free block not in datazone [ 99.309248][ T4175] sysv_free_block: trying to free block not in datazone [ 99.345803][ T4175] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 99.454785][ T5355] loop0: detected capacity change from 0 to 4096 [ 99.550699][ T5355] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 99.711403][ T5371] loop4: detected capacity change from 0 to 128 [ 99.832203][ T5371] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 99.881904][ T5371] sysv_free_block: getblk() failed [ 99.887369][ T5371] sysv_free_block: getblk() failed [ 99.899450][ T5371] sysv_free_block: getblk() failed [ 99.910538][ T5371] sysv_free_block: getblk() failed [ 99.923699][ T5371] sysv_free_block: getblk() failed [ 99.935814][ T5371] sysv_free_block: getblk() failed [ 99.968592][ T5371] sysv_free_block: getblk() failed [ 99.997209][ T5371] sysv_free_block: getblk() failed [ 100.010514][ T5371] sysv_free_block: getblk() failed [ 100.028405][ T5371] sysv_free_block: getblk() failed [ 100.045860][ T5371] sysv_free_block: getblk() failed [ 100.055297][ T5371] sysv_free_block: getblk() failed [ 100.060613][ T5371] sysv_free_block: getblk() failed [ 100.071354][ T5371] sysv_free_block: getblk() failed [ 100.076663][ T5371] sysv_free_block: getblk() failed [ 100.084095][ T5371] sysv_free_block: getblk() failed [ 100.095405][ T5371] sysv_free_block: getblk() failed [ 100.115739][ T4209] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.119289][ T5371] sysv_free_block: getblk() failed [ 100.134069][ T5371] sysv_free_block: getblk() failed [ 100.150412][ T5371] sysv_free_block: getblk() failed [ 100.171190][ T5371] sysv_free_block: getblk() failed [ 100.176650][ T5371] sysv_free_block: getblk() failed [ 100.181814][ T5371] sysv_free_block: getblk() failed [ 100.198642][ T5371] sysv_free_block: getblk() failed [ 100.215718][ T5371] sysv_free_block: getblk() failed [ 100.220887][ T5371] sysv_free_block: getblk() failed [ 100.235354][ T5371] sysv_free_block: getblk() failed [ 100.241205][ T5371] sysv_free_block: getblk() failed [ 100.252526][ T5371] sysv_free_block: getblk() failed [ 100.261758][ T5371] sysv_free_block: getblk() failed [ 100.273938][ T5371] sysv_free_block: getblk() failed [ 100.284902][ T5369] loop1: detected capacity change from 0 to 32768 [ 100.292438][ T5371] sysv_free_block: getblk() failed [ 100.298227][ T5371] sysv_free_block: getblk() failed [ 100.303711][ T5371] sysv_free_block: getblk() failed [ 100.312054][ T5371] sysv_free_block: getblk() failed [ 100.318337][ T5371] sysv_free_block: getblk() failed [ 100.324142][ T5371] sysv_free_block: trying to free block not in datazone [ 100.332466][ T5386] loop0: detected capacity change from 0 to 24 [ 100.375534][ T4209] usb 3-1: Using ep0 maxpacket: 16 [ 100.385724][ T5369] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.397616][ T4169] sysv_free_block: getblk() failed [ 100.409730][ T4169] sysv_free_block: getblk() failed [ 100.415000][ T4169] sysv_free_block: trying to free block not in datazone [ 100.416595][ T5386] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 100.425224][ T4169] sysv_free_block: getblk() failed [ 100.434351][ T4169] sysv_free_block: getblk() failed [ 100.440552][ T4169] sysv_free_block: getblk() failed [ 100.446196][ T4169] sysv_free_block: getblk() failed [ 100.451972][ T4169] sysv_free_block: getblk() failed [ 100.457658][ T4169] sysv_free_block: getblk() failed [ 100.463600][ T4169] sysv_free_block: getblk() failed [ 100.469174][ T4169] sysv_free_block: getblk() failed [ 100.475233][ T4169] sysv_free_block: getblk() failed [ 100.481143][ T4169] sysv_free_block: getblk() failed [ 100.483602][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 100.486488][ T4169] sysv_free_block: getblk() failed [ 100.486515][ T4169] sysv_free_block: getblk() failed [ 100.486541][ T4169] sysv_free_block: getblk() failed [ 100.486568][ T4169] sysv_free_block: getblk() failed [ 100.486595][ T4169] sysv_free_block: getblk() failed [ 100.486622][ T4169] sysv_free_block: getblk() failed [ 100.486648][ T4169] sysv_free_block: getblk() failed [ 100.486885][ T4169] sysv_free_block: getblk() failed [ 100.533985][ T5386] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 100.537247][ T4209] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.565553][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.577344][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 41907, setting to 1024 [ 100.629703][ T4209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.655535][ T4169] sysv_free_block: trying to free block not in datazone [ 100.662865][ T4169] sysv_free_block: trying to free block not in datazone [ 100.677700][ T4209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 100.692823][ T4169] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 100.703272][ T4209] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.753663][ T5393] loop0: detected capacity change from 0 to 256 [ 100.842524][ T4209] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.860529][ T4209] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.878903][ T4209] usb 3-1: Manufacturer: syz [ 100.894613][ T5396] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 100.898657][ T4209] usb 3-1: config 0 descriptor?? [ 101.198542][ T5409] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 101.211709][ T5409] [U] J"—E:ÀÆ" [ 101.240174][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.297080][ T5407] bond0: (slave rose0): Enslaving as an active interface with an up link [ 101.391650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 101.635614][ T4209] rc_core: IR keymap rc-hauppauge not found [ 101.641657][ T4209] Registered IR keymap rc-empty [ 101.662748][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 101.718858][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 101.797111][ T4209] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 101.827700][ T4209] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 101.902674][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 101.915544][ C1] mceusb 3-1:0.0: Error: urb status = -75 [ 101.929759][ T5398] loop3: detected capacity change from 0 to 32768 [ 101.945745][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 101.995893][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.026079][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.065950][ T5398] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.105936][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.119117][ T5403] loop0: detected capacity change from 0 to 32768 [ 102.186291][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.217694][ T4175] ocfs2: Unmounting device (7,3) on (node local) [ 102.232376][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.272459][ T5403] XFS (loop0): Mounting V5 Filesystem [ 102.293734][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.355737][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.415751][ T4209] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 102.438560][ T5403] XFS (loop0): Ending clean mount [ 102.448828][ T4209] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 102.464845][ T4209] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 102.482335][ T4209] usb 3-1: USB disconnect, device number 5 [ 102.505614][ T4176] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.525107][ T5471] autofs4:pid:5471:autofs_fill_super: called with bogus options [ 102.588126][ T4171] XFS (loop0): Unmounting Filesystem [ 102.606017][ T4572] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.828030][ T5479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 102.845576][ T4572] usb 5-1: Using ep0 maxpacket: 16 [ 102.906669][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.928675][ T4176] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 102.950184][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.965897][ T4572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.982054][ T4176] usb 2-1: config 0 descriptor?? [ 102.998337][ T4572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.033527][ T4572] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 103.046974][ T5490] loop3: detected capacity change from 0 to 512 [ 103.054867][ T4572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.091996][ T4572] usb 5-1: config 0 descriptor?? [ 103.124044][ T5490] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.183712][ T5497] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 103.192620][ T5497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'. [ 103.198910][ T5490] EXT4-fs (loop3): 1 truncate cleaned up [ 103.230626][ T5490] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 103.383893][ T5504] loop0: detected capacity change from 0 to 22 [ 103.446407][ T5504] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 103.484742][ T4176] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 103.496971][ T5508] tmpfs: Cannot retroactively limit inodes [ 103.504658][ T4176] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 103.523874][ T5504] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 103.573425][ T4176] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 103.579163][ T4572] wacom 0003:056A:033B.000C: unknown main item tag 0x0 [ 103.591368][ T4176] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 103.606732][ T4176] redragon 0003:0C45:760B.000B: unknown main item tag 0x0 [ 103.623498][ T4176] redragon 0003:0C45:760B.000B: hidraw0: USB HID ve.4e Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0 [ 103.628558][ T4572] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 103.665282][ T4572] wacom 0003:056A:033B.000C: hidraw1: USB HID v0.00 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 103.703350][ T4572] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033B.000C/input/input12 [ 103.706233][ T4176] usb 2-1: USB disconnect, device number 6 [ 103.806219][ T4572] usb 5-1: USB disconnect, device number 3 [ 103.995427][ T5488] loop2: detected capacity change from 0 to 40427 [ 104.094151][ T5488] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 104.112492][ T5488] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 104.146153][ T5488] F2FS-fs (loop2): invalid crc value [ 104.199941][ T5488] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.229412][ T5520] loop3: detected capacity change from 0 to 4096 [ 104.291161][ T5488] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.315313][ T5488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.829592][ T5516] loop0: detected capacity change from 0 to 32768 [ 104.984724][ T5516] XFS (loop0): Mounting V5 Filesystem [ 105.122361][ T5516] XFS (loop0): Ending clean mount [ 105.165695][ T4176] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.194725][ T4171] XFS (loop0): Unmounting Filesystem [ 105.254347][ T5557] loop3: detected capacity change from 0 to 2048 [ 105.330100][ T5557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.440830][ T5561] loop2: detected capacity change from 0 to 256 [ 105.453017][ T5531] loop4: detected capacity change from 0 to 32768 [ 105.482980][ T5561] exfat: Deprecated parameter 'namecase' [ 105.522823][ T5561] exfat: Deprecated parameter 'namecase' [ 105.531532][ T5531] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 105.568865][ T5561] exfat: Deprecated parameter 'utf8' [ 105.575765][ T4176] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.592448][ T5561] exfat: Deprecated parameter 'namecase' [ 105.609063][ T5566] netlink: 6 bytes leftover after parsing attributes in process `syz.3.514'. [ 105.619661][ T5566] netlink: 6 bytes leftover after parsing attributes in process `syz.3.514'. [ 105.622139][ T4176] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.670598][ T5561] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 105.697954][ T5570] program syz.3.515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.733042][ T4176] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.747864][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 105.765614][ T4176] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 105.774682][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.808079][ T5561] exFAT-fs (loop2): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 510, unilen : 257 > 255 [ 105.836987][ T5572] loop0: detected capacity change from 0 to 512 [ 105.844181][ T4176] usb 2-1: config 0 descriptor?? [ 105.882670][ T5574] loop3: detected capacity change from 0 to 2048 [ 105.931394][ T5572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 105.944408][ T5574] EXT4-fs (loop3): Invalid log block size: 589826 [ 106.007061][ T5572] EXT4-fs (loop0): 1 truncate cleaned up [ 106.022250][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 106.026790][ T5579] loop4: detected capacity change from 0 to 512 [ 106.170878][ T5584] netlink: 312 bytes leftover after parsing attributes in process `syz.2.522'. [ 106.176984][ T5574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.518'. [ 106.190941][ T5579] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 106.214195][ T5579] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.349612][ T4176] koneplus 0003:1E7D:2E22.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 106.458795][ T5596] tipc: Started in network mode [ 106.475427][ T5596] tipc: Node identity e0000001, cluster identity 4711 [ 106.509040][ T5596] tipc: Enabling of bearer rejected, failed to enable media [ 106.537366][ T5600] loop0: detected capacity change from 0 to 256 [ 106.582545][ T4176] usb 2-1: USB disconnect, device number 7 [ 106.632813][ T5600] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.769062][ T5602] loop4: detected capacity change from 0 to 4096 [ 106.851393][ T5602] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 106.876866][ T5602] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 106.943847][ T5602] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 106.971462][ T5602] ntfs: volume version 3.1. [ 106.987799][ T5602] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 107.005603][ T5602] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 107.035600][ T5602] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 107.185593][ T4176] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 107.426738][ T5599] loop2: detected capacity change from 0 to 32768 [ 107.538837][ T5599] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.564841][ T5599] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.589292][ T5606] loop3: detected capacity change from 0 to 40427 [ 107.611451][ T4176] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 107.620685][ T4176] usb 1-1: config 0 has no interface number 0 [ 107.643057][ T5620] loop1: detected capacity change from 0 to 4096 [ 107.644633][ T5624] loop4: detected capacity change from 0 to 512 [ 107.672271][ T5599] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 107.674202][ T5606] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 107.685414][ T5247] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.691353][ T5606] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 107.714661][ T5620] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 107.731260][ T5624] EXT4-fs (loop4): Ignoring removed bh option [ 107.733304][ T5620] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 107.756976][ T5624] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.760295][ T5620] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 107.772172][ T5247] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 107.796022][ T5624] EXT4-fs (loop4): invalid journal inode [ 107.801740][ T5624] EXT4-fs (loop4): can't get journal size [ 107.804047][ T5606] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 107.839693][ T5624] EXT4-fs (loop4): 1 truncate cleaned up [ 107.839697][ T5620] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 107.841494][ T5620] ntfs: volume version 3.1. [ 107.845371][ T5624] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bh,resuid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none. [ 107.858942][ T4176] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 107.912286][ T5247] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 107.918367][ T4176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.938177][ T4176] usb 1-1: Product: syz [ 107.942368][ T4176] usb 1-1: Manufacturer: syz [ 107.948520][ T5247] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.955174][ T5599] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 108.004658][ T4176] usb 1-1: SerialNumber: syz [ 108.021314][ T4176] usb 1-1: config 0 descriptor?? [ 108.044356][ T5606] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 108.066843][ T5606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.076586][ T4176] usb-storage 1-1:0.20: USB Mass Storage device detected [ 108.124198][ T4176] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 108.371697][ T4176] usb 1-1: USB disconnect, device number 9 [ 108.515842][ T5641] netlink: 312 bytes leftover after parsing attributes in process `syz.1.546'. [ 108.659685][ T5647] loop1: detected capacity change from 0 to 256 [ 108.768514][ T5647] FAT-fs (loop1): Directory bread(block 64) failed [ 108.775099][ T5647] FAT-fs (loop1): Directory bread(block 65) failed [ 108.779408][ T5649] loop2: detected capacity change from 0 to 1024 [ 108.804475][ T5647] FAT-fs (loop1): Directory bread(block 66) failed [ 108.811285][ T5647] FAT-fs (loop1): Directory bread(block 67) failed [ 108.818223][ T5647] FAT-fs (loop1): Directory bread(block 68) failed [ 108.824932][ T5647] FAT-fs (loop1): Directory bread(block 69) failed [ 108.831800][ T5647] FAT-fs (loop1): Directory bread(block 70) failed [ 108.838572][ T5647] FAT-fs (loop1): Directory bread(block 71) failed [ 108.845264][ T5647] FAT-fs (loop1): Directory bread(block 72) failed [ 108.862621][ T5649] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 108.880573][ T5647] FAT-fs (loop1): Directory bread(block 73) failed [ 108.909186][ T5649] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,bsddf,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 109.058336][ T5652] loop0: detected capacity change from 0 to 512 [ 109.178482][ T5643] loop4: detected capacity change from 0 to 32768 [ 109.216786][ T5656] loop2: detected capacity change from 0 to 512 [ 109.223209][ T5652] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 109.267870][ T5652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 109.269513][ T5658] loop1: detected capacity change from 0 to 256 [ 109.286371][ T5652] System zones: 1-12 [ 109.292113][ T5652] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.312788][ T5643] XFS (loop4): Mounting V5 Filesystem [ 109.320726][ T5652] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.550: bg 0: block 361: padding at end of block bitmap is not set [ 109.328227][ T5656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.339688][ T5652] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 109.355268][ T5658] exfat: Deprecated parameter 'namecase' [ 109.361179][ T5658] exfat: Deprecated parameter 'namecase' [ 109.367412][ T5658] exfat: Deprecated parameter 'utf8' [ 109.372730][ T5658] exfat: Deprecated parameter 'namecase' [ 109.398102][ T5652] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.550: attempt to clear invalid blocks 33619980 len 1 [ 109.415795][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 109.438765][ T5652] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.550: invalid indirect mapped block 1811939328 (level 0) [ 109.463508][ T5658] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 109.465173][ T5652] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.550: invalid indirect mapped block 2 (level 2) [ 109.485617][ T5656] EXT4-fs (loop2): 1 truncate cleaned up [ 109.510882][ T5658] exFAT-fs (loop1): failed to exfat_utf8_to_utf16 (estr:ENAMETOOLONG) nls len : 510, unilen : 257 > 255 [ 109.532138][ T5656] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 109.581741][ T5652] EXT4-fs (loop0): 1 truncate cleaned up [ 109.613882][ T5652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 109.618206][ T5643] XFS (loop4): Ending clean mount [ 109.701280][ T5676] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.738500][ T5643] XFS (loop4): Quotacheck needed: Please wait. [ 109.805786][ T5643] XFS (loop4): Quotacheck: Done. [ 109.959919][ T4169] XFS (loop4): Unmounting Filesystem [ 109.973179][ T5680] loop1: detected capacity change from 0 to 4096 [ 109.981968][ T5686] loop3: detected capacity change from 0 to 256 [ 110.076170][ T5686] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 110.172549][ T5686] exFAT-fs (loop3): hint_cluster is invalid (1) [ 110.210220][ T5686] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 110.233023][ T5686] exFAT-fs (loop3): Filesystem has been set read-only [ 110.266224][ T5686] exFAT-fs (loop3): error, failed to bmap (inode : ffff888060a0b560 iblock : 11, err : -5) [ 110.701467][ T5701] loop3: detected capacity change from 0 to 4096 [ 110.846913][ T5705] loop4: detected capacity change from 0 to 4096 [ 110.868018][ T5701] ntfs: volume version 3.1. [ 111.186825][ T5711] loop3: detected capacity change from 0 to 512 [ 111.224777][ T5711] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.273377][ T5692] loop0: detected capacity change from 0 to 40427 [ 111.301462][ T5711] EXT4-fs (loop3): 1 truncate cleaned up [ 111.310755][ T5711] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 111.324331][ T5699] loop1: detected capacity change from 0 to 32768 [ 111.354413][ T5692] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 111.394208][ T5699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.566 (5699) [ 111.400548][ T5692] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.426905][ T5692] F2FS-fs (loop0): invalid crc value [ 111.434425][ T5699] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 111.452235][ T5699] BTRFS info (device loop1): using free space tree [ 111.462334][ T5699] BTRFS info (device loop1): has skinny extents [ 111.478139][ T5692] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.605706][ T5248] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.623285][ T5692] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.638297][ T5692] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.693548][ T5699] BTRFS info (device loop1): enabling ssd optimizations [ 111.856252][ T5248] usb 5-1: Using ep0 maxpacket: 16 [ 111.976222][ T5248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.007006][ T5248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.027547][ T5248] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.032715][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.047797][ T5248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.062050][ T5749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.108620][ T5248] usb 5-1: config 0 descriptor?? [ 112.296355][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 112.375631][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.424667][ T5753] loop0: detected capacity change from 0 to 64 [ 112.575971][ T23] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 112.585044][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.587688][ T5248] elan 0003:04F3:0755.000E: unknown main item tag 0x0 [ 112.620159][ T5248] elan 0003:04F3:0755.000E: item fetching failed at offset 2/5 [ 112.644424][ T23] usb 4-1: Product: syz [ 112.647276][ T5248] elan 0003:04F3:0755.000E: Hid Parse failed [ 112.660514][ T23] usb 4-1: Manufacturer: syz [ 112.665156][ T23] usb 4-1: SerialNumber: syz [ 112.665253][ T5248] elan: probe of 0003:04F3:0755.000E failed with error -22 [ 112.685124][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 112.702161][ T23] usb 4-1: config 0 descriptor?? [ 112.758782][ T5761] loop0: detected capacity change from 0 to 1024 [ 112.787951][ T23] gspca_main: sq930x-2.14.0 probing 2770:930c [ 112.816925][ T5248] usb 5-1: USB disconnect, device number 4 [ 112.825942][ T5761] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 112.841580][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 112.874235][ T5761] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,bsddf,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 112.874265][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.910753][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.939490][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 187, changing to 11 [ 112.971761][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59276, setting to 1024 [ 113.003480][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 113.013529][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.046567][ T21] usb 3-1: config 0 descriptor?? [ 113.065929][ T5749] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 113.073798][ T5749] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 113.153534][ T5757] loop1: detected capacity change from 0 to 32768 [ 113.210952][ T5766] loop0: detected capacity change from 0 to 512 [ 113.231151][ T5757] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.240608][ T5757] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.253570][ T5766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.266578][ T5757] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 113.281828][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.289856][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.316458][ T5766] EXT4-fs (loop0): 1 truncate cleaned up [ 113.331318][ T5766] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 113.371885][ T5248] usb 3-1: USB disconnect, device number 6 [ 113.432013][ T5771] MPTCP: kernel_bind error, err=-99 [ 113.505701][ T23] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 113.546827][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 256ms [ 113.554558][ T23] sq930x: probe of 4-1:0.0 failed with error -71 [ 113.577332][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.582599][ T5757] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.603309][ T23] usb 4-1: USB disconnect, device number 4 [ 113.882955][ T5777] loop0: detected capacity change from 0 to 1024 [ 114.005422][ T5777] hfsplus: request for non-existent node 134217728 in B*Tree [ 114.055576][ T5777] hfsplus: request for non-existent node 134217728 in B*Tree [ 114.122765][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 114.122781][ T26] audit: type=1326 audit(1732108989.338:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.212445][ T26] audit: type=1326 audit(1732108989.388:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.290486][ T5775] loop4: detected capacity change from 0 to 40427 [ 114.327745][ T26] audit: type=1326 audit(1732108989.398:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.359967][ T5775] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.410651][ T5775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.457998][ T26] audit: type=1326 audit(1732108989.398:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.493327][ T5775] F2FS-fs (loop4): invalid crc value [ 114.534761][ T5775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.572571][ T26] audit: type=1326 audit(1732108989.398:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.673711][ T26] audit: type=1326 audit(1732108989.398:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.721855][ T5775] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.736988][ T26] audit: type=1326 audit(1732108989.398:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 114.741280][ T5775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.845676][ T26] audit: type=1326 audit(1732108989.398:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5783 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4140d2819 code=0x7ffc0000 [ 115.214707][ T5785] loop3: detected capacity change from 0 to 32768 [ 115.492482][ T5806] loop1: detected capacity change from 0 to 32768 [ 115.508710][ T5799] loop2: detected capacity change from 0 to 32768 [ 115.586803][ T5818] loop0: detected capacity change from 0 to 4096 [ 115.605914][ T5799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.597 (5799) [ 115.619733][ T5818] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 115.656375][ T5806] XFS (loop1): Mounting V5 Filesystem [ 115.715781][ T5799] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 115.724487][ T5799] BTRFS info (device loop2): using free space tree [ 115.733796][ T5799] BTRFS info (device loop2): has skinny extents [ 115.745069][ T5828] MPTCP: kernel_bind error, err=-99 [ 115.840903][ T5837] loop3: detected capacity change from 0 to 512 [ 115.861527][ T5833] loop4: detected capacity change from 0 to 512 [ 115.887550][ T5806] XFS (loop1): Ending clean mount [ 115.911561][ T5818] ntfs: volume version 3.1. [ 115.913041][ T5806] XFS (loop1): Quotacheck needed: Please wait. [ 115.957193][ T5833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.972164][ T5806] XFS (loop1): Quotacheck: Done. [ 115.983146][ T5818] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 116.010751][ T5837] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 116.023279][ T4170] XFS (loop1): Unmounting Filesystem [ 116.028884][ T5799] BTRFS info (device loop2): enabling ssd optimizations [ 116.079651][ T5837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 116.088201][ T5837] System zones: 1-12 [ 116.093273][ T5837] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.101424][ T5837] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.602: bg 0: block 361: padding at end of block bitmap is not set [ 116.118084][ T5837] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 116.120602][ T5833] EXT4-fs (loop4): 1 truncate cleaned up [ 116.154151][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 116.169032][ T5837] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.602: attempt to clear invalid blocks 33619980 len 1 [ 116.328793][ T5837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.602: invalid indirect mapped block 1811939328 (level 0) [ 116.355794][ T5837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.602: invalid indirect mapped block 2 (level 2) [ 116.390327][ T5837] EXT4-fs (loop3): 1 truncate cleaned up [ 116.404904][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 116.907882][ T5874] loop2: detected capacity change from 0 to 256 [ 116.931514][ T5857] loop0: detected capacity change from 0 to 32768 [ 117.003844][ T5874] FAT-fs (loop2): Directory bread(block 64) failed [ 117.044973][ T5874] FAT-fs (loop2): Directory bread(block 65) failed [ 117.055706][ T5874] FAT-fs (loop2): Directory bread(block 66) failed [ 117.062267][ T5874] FAT-fs (loop2): Directory bread(block 67) failed [ 117.069517][ T5874] FAT-fs (loop2): Directory bread(block 68) failed [ 117.076407][ T5874] FAT-fs (loop2): Directory bread(block 69) failed [ 117.083452][ T5874] FAT-fs (loop2): Directory bread(block 70) failed [ 117.090427][ T5874] FAT-fs (loop2): Directory bread(block 71) failed [ 117.098024][ T5874] FAT-fs (loop2): Directory bread(block 72) failed [ 117.104570][ T5874] FAT-fs (loop2): Directory bread(block 73) failed [ 117.116358][ T5857] XFS (loop0): Mounting V5 Filesystem [ 117.206977][ T5857] XFS (loop0): Ending clean mount [ 117.223716][ T5872] loop3: detected capacity change from 0 to 32768 [ 117.275699][ T5857] XFS (loop0): Quotacheck needed: Please wait. [ 117.322637][ T5888] loop4: detected capacity change from 0 to 64 [ 117.329589][ T5872] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.608 (5872) [ 117.382431][ T5857] XFS (loop0): Quotacheck: Done. [ 117.440871][ T5872] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.481992][ T5872] BTRFS info (device loop3): force zlib compression, level 3 [ 117.503266][ T5872] BTRFS info (device loop3): force clearing of disk cache [ 117.520621][ T5872] BTRFS info (device loop3): setting nodatasum [ 117.555374][ T5872] BTRFS info (device loop3): use zlib compression, level 3 [ 117.608745][ T5872] BTRFS info (device loop3): allowing degraded mounts [ 117.675563][ T5872] BTRFS info (device loop3): enabling disk space caching [ 117.682692][ T5872] BTRFS info (device loop3): disk space caching is enabled [ 117.698808][ T4171] XFS (loop0): Unmounting Filesystem [ 117.740478][ T5872] BTRFS info (device loop3): has skinny extents [ 117.881069][ T5893] loop4: detected capacity change from 0 to 4096 [ 117.922222][ T5905] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.931108][ T5905] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.940269][ T5905] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.940740][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 117.949131][ T5905] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.967629][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 117.967842][ T5893] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 117.975323][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 117.992343][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.000652][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.016433][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.024243][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.042825][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.054569][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.069338][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.080164][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.092085][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.102760][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.118797][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.120698][ T5917] loop2: detected capacity change from 0 to 4096 [ 118.129564][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.133003][ T5872] BTRFS info (device loop3): enabling ssd optimizations [ 118.144804][ T5750] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x0 [ 118.153711][ T5872] BTRFS info (device loop3): clearing free space tree [ 118.163465][ T5872] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.166898][ T5750] hid-generic 0000:3000000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 118.174444][ T5872] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.246154][ T5917] ntfs: volume version 3.1. [ 118.362678][ T5921] loop1: detected capacity change from 0 to 512 [ 118.403818][ T5872] BTRFS info (device loop3): balance: start -f -slimit=17179869188,stripes=6..255 [ 118.428428][ T5872] BTRFS info (device loop3): balance: ended with status: 0 [ 118.442520][ T5921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.569358][ T5921] EXT4-fs (loop1): 1 truncate cleaned up [ 118.612113][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 118.813419][ T5928] loop4: detected capacity change from 0 to 256 [ 119.442705][ T5951] loop3: detected capacity change from 0 to 256 [ 119.484917][ T5947] loop1: detected capacity change from 0 to 4096 [ 119.498053][ T5751] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.519607][ T5951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 119.632081][ T5925] loop2: detected capacity change from 0 to 32768 [ 119.763950][ T5961] mkiss: ax0: crc mode is auto. [ 119.775843][ T5751] usb 1-1: Using ep0 maxpacket: 16 [ 119.797379][ T5925] XFS (loop2): Mounting V5 Filesystem [ 119.876310][ T5963] loop1: detected capacity change from 0 to 4096 [ 119.895792][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.909289][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.919704][ T5751] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 119.926715][ T5963] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 119.929679][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.966545][ T5751] usb 1-1: config 0 descriptor?? [ 119.973663][ T5925] XFS (loop2): Ending clean mount [ 119.989578][ T5925] XFS (loop2): Quotacheck needed: Please wait. [ 120.040161][ T5925] XFS (loop2): Quotacheck: Done. [ 120.128456][ T4165] XFS (loop2): Unmounting Filesystem [ 120.447551][ T5751] elan 0003:04F3:0755.0010: unknown main item tag 0x0 [ 120.470651][ T5751] elan 0003:04F3:0755.0010: item fetching failed at offset 2/5 [ 120.504307][ T5974] loop4: detected capacity change from 0 to 4096 [ 120.516517][ T5751] elan 0003:04F3:0755.0010: Hid Parse failed [ 120.522552][ T5751] elan: probe of 0003:04F3:0755.0010 failed with error -22 [ 120.660485][ T5978] tipc: Started in network mode [ 120.672038][ T5751] usb 1-1: USB disconnect, device number 10 [ 120.687363][ T5978] tipc: Node identity , cluster identity 4711 [ 120.723700][ T5974] ntfs: volume version 3.1. [ 120.806318][ T5981] loop2: detected capacity change from 0 to 512 [ 120.866053][ T5968] loop3: detected capacity change from 0 to 32768 [ 120.887937][ T5982] loop1: detected capacity change from 0 to 4096 [ 120.899285][ T5981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 120.940435][ T5982] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 120.955354][ T5981] EXT4-fs (loop2): 1 truncate cleaned up [ 120.963598][ T5981] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 121.141562][ T5988] mkiss: ax0: crc mode is auto. [ 121.442174][ T5997] loop0: detected capacity change from 0 to 512 [ 121.465733][ T5934] Bluetooth: hci1: command 0x0405 tx timeout [ 121.530402][ T5997] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 121.545785][ T5997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.569134][ T5999] loop2: detected capacity change from 0 to 4096 [ 121.570983][ T5997] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.648: corrupted in-inode xattr [ 121.597799][ T5997] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.648: couldn't read orphan inode 15 (err -117) [ 121.613456][ T6002] loop3: detected capacity change from 0 to 4096 [ 121.616235][ T5997] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,mb_optimize_scan=0x0000000000000001,init_itable=0x00000000000003ed,,errors=continue. Quota mode: none. [ 121.668580][ T5999] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 121.723655][ T5751] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.005067][ T5751] usb 2-1: Using ep0 maxpacket: 16 [ 122.135834][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.157552][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.175136][ T6013] loop2: detected capacity change from 0 to 4096 [ 122.181668][ T5751] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 122.199318][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.213672][ T5751] usb 2-1: config 0 descriptor?? [ 122.246202][ T6007] loop0: detected capacity change from 0 to 32768 [ 122.384126][ T6007] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.392791][ T6016] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 122.409428][ T6016] [U] J"—E:ÀÆ" [ 122.424523][ T6013] ntfs: volume version 3.1. [ 122.589170][ T4171] ocfs2: Unmounting device (7,0) on (node local) [ 122.643680][ T6023] loop3: detected capacity change from 0 to 512 [ 122.697575][ T5751] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 122.716042][ T6023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.726339][ T5751] elan 0003:04F3:0755.0011: item fetching failed at offset 2/5 [ 122.734349][ T5751] elan 0003:04F3:0755.0011: Hid Parse failed [ 122.791584][ T5751] elan: probe of 0003:04F3:0755.0011 failed with error -22 [ 122.800988][ T6023] EXT4-fs (loop3): 1 truncate cleaned up [ 122.825588][ T6023] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 122.985853][ T5933] usb 2-1: USB disconnect, device number 8 [ 123.107438][ T6019] loop4: detected capacity change from 0 to 32768 [ 123.290073][ T6040] loop0: detected capacity change from 0 to 512 [ 123.359691][ T6040] EXT4-fs (loop0): Ignoring removed bh option [ 123.407582][ T6040] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.452084][ T6040] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 123.536064][ T6040] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.666: invalid indirect mapped block 8 (level 2) [ 123.616688][ T6040] EXT4-fs (loop0): Remounting filesystem read-only [ 123.623483][ T6040] EXT4-fs (loop0): 1 truncate cleaned up [ 123.680153][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 123.786894][ T6052] loop4: detected capacity change from 0 to 8 [ 123.952162][ T6037] loop2: detected capacity change from 0 to 32768 [ 123.958988][ T6054] UHID_CREATE from different security context by process 277 (syz.0.672), this is not allowed. [ 124.073250][ T6034] loop3: detected capacity change from 0 to 32768 [ 124.073932][ T6057] loop0: detected capacity change from 0 to 128 [ 124.089510][ T6037] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.663 (6037) [ 124.161184][ T6037] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 124.175861][ T6037] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.215541][ T6037] BTRFS info (device loop2): use zstd compression, level 3 [ 124.218047][ T6057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.273942][ T6037] BTRFS info (device loop2): using free space tree [ 124.366133][ T6037] BTRFS info (device loop2): has skinny extents [ 124.570963][ T6057] EXT4-fs (loop0): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 124.595622][ T6057] ext4 filesystem being remounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.716632][ T6050] loop1: detected capacity change from 0 to 32768 [ 124.754190][ T6037] BTRFS info (device loop2): enabling ssd optimizations [ 124.796095][ T6050] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.669 (6050) [ 124.877013][ T6050] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 124.885985][ T6050] BTRFS info (device loop1): using free space tree [ 124.892533][ T6050] BTRFS info (device loop1): has skinny extents [ 125.075144][ T6111] loop3: detected capacity change from 0 to 64 [ 125.193991][ T6115] loop4: detected capacity change from 0 to 1024 [ 125.247735][ T6115] EXT4-fs (loop4): Ignoring removed bh option [ 125.253866][ T6115] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.389000][ T6050] BTRFS info (device loop1): enabling ssd optimizations [ 125.429724][ T6050] BTRFS error (device loop1): balance: invalid convert data profile single [ 125.456569][ T6115] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,jqfmt=vfsv0,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noinit_itable,max_batch_time=0x0000000000000002,data_err=abort,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 125.851232][ T6139] loop2: detected capacity change from 0 to 256 [ 126.480224][ T6161] loop2: detected capacity change from 0 to 512 [ 126.585091][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 126.692369][ T6161] EXT4-fs (loop2): 1 truncate cleaned up [ 126.712664][ T6161] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.735237][ T6128] loop0: detected capacity change from 0 to 32768 [ 126.845219][ T6175] loop3: detected capacity change from 0 to 1024 [ 126.929716][ T6175] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 126.971460][ T6157] loop4: detected capacity change from 0 to 32768 [ 126.974926][ T6175] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.044102][ T6157] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.697 (6157) [ 127.113185][ T6157] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 127.125051][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.146687][ T6157] BTRFS info (device loop4): using free space tree [ 127.146712][ T6157] BTRFS info (device loop4): has skinny extents [ 127.385588][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 127.507295][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.571163][ T6218] loop0: detected capacity change from 0 to 64 [ 127.584130][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.594882][ T6157] BTRFS info (device loop4): enabling ssd optimizations [ 127.630384][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.649738][ T7] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 127.686210][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.723469][ T7] usb 2-1: config 0 descriptor?? [ 127.852195][ T6180] loop2: detected capacity change from 0 to 32768 [ 128.066051][ T6227] loop0: detected capacity change from 0 to 8 [ 128.218582][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.225417][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.239361][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.255636][ T4208] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.274460][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.282262][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.323943][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.339931][ T7] kye 0003:0458:5010.0012: unknown main item tag 0x0 [ 128.369161][ T7] kye 0003:0458:5010.0012: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 128.369199][ T7] kye 0003:0458:5010.0012: tablet-enabling feature report not found [ 128.369217][ T7] kye 0003:0458:5010.0012: tablet enabling failed [ 128.370222][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 128.370236][ T26] audit: type=1800 audit(1732109003.588:4000): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.721" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 128.426987][ T1107] usb 2-1: USB disconnect, device number 9 [ 128.465542][ T4208] usb 4-1: device descriptor read/64, error -71 [ 128.691399][ T6245] tipc: Started in network mode [ 128.705406][ T6245] tipc: Node identity ffffffff, cluster identity 4711 [ 128.722958][ T6245] tipc: Node number set to 4294967295 [ 128.765987][ T4208] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.972819][ T6239] loop2: detected capacity change from 0 to 32768 [ 128.979405][ T4208] usb 4-1: device descriptor read/64, error -71 [ 129.091646][ T6239] JBD2: Ignoring recovery information on journal [ 129.107182][ T4208] usb usb4-port1: attempt power cycle [ 129.200997][ T6239] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 129.334054][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 129.461200][ T6276] loop1: detected capacity change from 0 to 128 [ 129.515635][ T4208] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.630442][ T4208] usb 4-1: device descriptor read/8, error -71 [ 129.911458][ T4208] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.976983][ T6264] loop4: detected capacity change from 0 to 32768 [ 130.005804][ T4208] usb 4-1: device descriptor read/8, error -71 [ 130.125857][ T4208] usb usb4-port1: unable to enumerate USB device [ 130.374436][ T6289] loop1: detected capacity change from 0 to 32768 [ 130.547544][ T6289] XFS (loop1): Mounting V5 Filesystem [ 130.643530][ T6289] XFS (loop1): Ending clean mount [ 130.660269][ T6289] XFS (loop1): Quotacheck needed: Please wait. [ 130.739858][ T6289] XFS (loop1): Quotacheck: Done. [ 130.773988][ T26] audit: type=1800 audit(1732109005.988:4001): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.746" name="bus" dev="loop1" ino=4428 res=0 errno=0 [ 130.864916][ T4170] XFS (loop1): Unmounting Filesystem [ 130.977719][ T6297] loop2: detected capacity change from 0 to 32768 [ 131.034613][ T6299] loop4: detected capacity change from 0 to 32768 [ 131.072972][ T6299] XFS: ikeep mount option is deprecated. [ 131.107757][ T6297] JBD2: Ignoring recovery information on journal [ 131.195727][ T6299] XFS (loop4): Mounting V5 Filesystem [ 131.243320][ T6297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.355766][ T6299] XFS (loop4): Ending clean mount [ 131.367327][ T6299] XFS (loop4): Quotacheck needed: Please wait. [ 131.468729][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 131.475640][ T6299] XFS (loop4): Quotacheck: Done. [ 131.662612][ T6337] loop1: detected capacity change from 0 to 4096 [ 131.708221][ T4169] XFS (loop4): Unmounting Filesystem [ 131.810947][ T6337] ntfs: volume version 3.1. [ 132.029112][ T5933] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.031451][ T6316] loop3: detected capacity change from 0 to 32768 [ 132.139692][ T6354] loop1: detected capacity change from 0 to 512 [ 132.165548][ T6316] XFS (loop3): Mounting V5 Filesystem [ 132.221200][ T6354] EXT4-fs (loop1): inline encryption not supported [ 132.238812][ T6354] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 132.238812][ T6354] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 132.238812][ T6354] [ 132.297474][ T6316] XFS (loop3): Ending clean mount [ 132.317411][ T6354] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.769: casefold flag without casefold feature [ 132.410025][ T6354] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.769: couldn't read orphan inode 15 (err -117) [ 132.434752][ T4175] XFS (loop3): Unmounting Filesystem [ 132.446640][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.494565][ T6354] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,inlinecrypt,block_validity,acl,noacl,i_version,,errors=continue. Quota mode: writeback. [ 132.513566][ T6375] loop4: detected capacity change from 0 to 64 [ 132.519765][ T5933] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 132.519821][ T5933] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 132.519848][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.548003][ T5933] usb 1-1: config 0 descriptor?? [ 132.591222][ T6371] loop2: detected capacity change from 0 to 4096 [ 132.669340][ T1420] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 132.678912][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.686528][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106927][ T6392] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 133.224492][ T6386] loop2: detected capacity change from 0 to 4096 [ 133.266608][ T6394] loop4: detected capacity change from 0 to 512 [ 133.275728][ T5933] Bluetooth: Can't get version to change to load ram patch err [ 133.283393][ T5933] Bluetooth: Loading sysconfig file failed [ 133.291786][ T6386] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 133.319999][ T6394] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 133.331815][ T6400] loop1: detected capacity change from 0 to 256 [ 133.337977][ T5933] ath3k: probe of 1-1:0.0 failed with error -71 [ 133.341734][ T6394] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 133.358113][ T5933] usb 1-1: USB disconnect, device number 11 [ 133.376117][ T6394] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 133.384667][ T6394] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 133.397430][ T6400] exfat: Deprecated parameter 'utf8' [ 133.424021][ T6386] ntfs: (device loop2): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 133.440331][ T6400] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 133.467678][ T6386] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 133.493292][ T6386] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 133.529449][ T6394] EXT4-fs (loop4): 1 truncate cleaned up [ 133.535601][ T6394] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 133.586269][ T6386] ntfs: volume version 3.1. [ 133.620451][ T6386] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 133.622177][ T6394] EXT4-fs (loop4): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback. [ 133.655545][ T6232] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.671843][ T6386] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 133.691021][ T6408] loop1: detected capacity change from 0 to 8 [ 133.697430][ T6386] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 133.949829][ T6420] loop1: detected capacity change from 0 to 1024 [ 134.031219][ T6420] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: writeback. [ 134.186001][ T6232] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 134.196151][ T6232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.245607][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 134.253750][ T6232] usb 4-1: Product: syz [ 134.275587][ T6232] usb 4-1: Manufacturer: syz [ 134.280219][ T6232] usb 4-1: SerialNumber: syz [ 134.308248][ T6232] usb 4-1: config 0 descriptor?? [ 134.347353][ T6232] ch341 4-1:0.0: ch341-uart converter detected [ 134.466189][ T6427] loop4: detected capacity change from 0 to 32768 [ 134.589231][ T6427] XFS (loop4): Mounting V5 Filesystem [ 134.627077][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.635246][ T7] usb 1-1: config 0 has no interface number 0 [ 134.641626][ T4208] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.666920][ T6427] XFS (loop4): Ending clean mount [ 134.681401][ T6427] XFS (loop4): Quotacheck needed: Please wait. [ 134.750674][ T6427] XFS (loop4): Quotacheck: Done. [ 134.815927][ T7] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice= 0.00 [ 134.825771][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.834035][ T7] usb 1-1: Product: syz [ 134.835124][ T4169] XFS (loop4): Unmounting Filesystem [ 134.838318][ T7] usb 1-1: Manufacturer: syz [ 134.848321][ T7] usb 1-1: SerialNumber: syz [ 134.856055][ T7] usb 1-1: config 0 descriptor?? [ 134.905994][ T4208] usb 3-1: Using ep0 maxpacket: 16 [ 134.931603][ T6446] loop1: detected capacity change from 0 to 32768 [ 134.989623][ T6446] XFS (loop1): Mounting V5 Filesystem [ 135.011640][ T6232] usb 4-1: failed to send control message: -71 [ 135.017958][ T6232] ch341-uart: probe of ttyUSB0 failed with error -71 [ 135.025983][ T4208] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 135.034699][ T4208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 135.045398][ T6232] usb 4-1: USB disconnect, device number 9 [ 135.053458][ T6232] ch341 4-1:0.0: device disconnected [ 135.115929][ T7] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 135.149007][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.173400][ T6446] XFS (loop1): Ending clean mount [ 135.183881][ T7] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 135.206236][ T7] usb 1-1: media controller created [ 135.221260][ T4208] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.252343][ T4208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.279189][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.290246][ T4208] usb 3-1: Product: syz [ 135.298056][ T4208] usb 3-1: Manufacturer: syz [ 135.302736][ T4208] usb 3-1: SerialNumber: syz [ 135.334620][ T6446] XFS (loop1): Quotacheck needed: Please wait. [ 135.407369][ T6446] XFS (loop1): Quotacheck: Done. [ 135.536909][ T4170] XFS (loop1): Unmounting Filesystem [ 135.635988][ T7] usb 1-1: USB disconnect, device number 12 [ 135.845770][ T4208] r8152-cfgselector 3-1: Unknown version 0x0000 [ 135.873400][ T4208] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 136.086208][ T6485] loop4: detected capacity change from 0 to 4096 [ 136.161378][ T6485] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 136.272343][ T6485] ntfs3: loop4: ino=5, "/" directory corrupted [ 136.300530][ T6485] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 136.374092][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'. [ 136.517902][ T6511] loop0: detected capacity change from 0 to 190 [ 136.584317][ T6511] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 136.640479][ T6511] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 136.675612][ T6511] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 136.689626][ T6520] loop4: detected capacity change from 0 to 64 [ 136.742463][ T6511] ntfs: volume version 0.0. [ 136.747403][ T6511] ntfs: (device loop0): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 136.784317][ T6524] mkiss: ax0: crc mode is auto. [ 136.796890][ T6511] attempt to access beyond end of device [ 136.796890][ T6511] loop0: rw=0, want=560, limit=190 [ 136.838109][ T6511] attempt to access beyond end of device [ 136.838109][ T6511] loop0: rw=0, want=296, limit=190 [ 136.953767][ T6526] loop3: detected capacity change from 0 to 512 [ 137.083013][ T6530] loop0: detected capacity change from 0 to 1024 [ 137.109711][ T6526] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.149300][ T6530] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 137.195511][ T6530] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 137.207693][ T6530] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #5: comm syz.0.842: unexpected bad inode w/o EXT4_IGET_BAD [ 137.233919][ T6526] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 137.302681][ T6530] EXT4-fs (loop0): no journal found [ 137.339487][ T6526] EXT4-fs (loop3): 1 truncate cleaned up [ 137.345325][ T6526] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.345594][ T6530] EXT4-fs (loop0): can't get journal size [ 137.414852][ T6530] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 137.442330][ T6522] loop1: detected capacity change from 0 to 32768 [ 137.511804][ T6530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.842: bg 0: block 32: padding at end of block bitmap is not set [ 137.600569][ T6506] loop2: detected capacity change from 0 to 32768 [ 137.616749][ T6522] XFS (loop1): Mounting V5 Filesystem [ 137.803258][ T6506] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.859474][ T6522] XFS (loop1): Starting recovery (logdev: internal) [ 137.935413][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 137.957453][ T6522] XFS (loop1): Ending recovery (logdev: internal) [ 138.032809][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 138.103875][ T4170] XFS (loop1): Unmounting Filesystem [ 138.342049][ T6544] loop4: detected capacity change from 0 to 32768 [ 138.399356][ T6544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.846 (6544) [ 138.525117][ T6544] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 138.575580][ T6544] BTRFS info (device loop4): using free space tree [ 138.582269][ T6544] BTRFS info (device loop4): has skinny extents [ 138.815750][ T6565] loop3: detected capacity change from 0 to 32768 [ 138.964134][ T6544] BTRFS info (device loop4): enabling ssd optimizations [ 139.509882][ T6606] loop2: detected capacity change from 0 to 64 [ 139.588924][ T6606] hfs: unable to open extent tree [ 139.594372][ T6606] hfs: can't find a HFS filesystem on dev loop2 [ 139.815967][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 139.943950][ T6616] netlink: 276 bytes leftover after parsing attributes in process `syz.4.865'. [ 140.053473][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 140.062956][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 140.072292][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.080764][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.089140][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.097269][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.099866][ T6582] loop1: detected capacity change from 0 to 65536 [ 140.105162][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.124587][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.132403][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.140202][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.147983][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.155764][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.163903][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.172015][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.180354][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.197982][ T6232] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 140.227311][ T6232] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 140.227995][ T6582] XFS (loop1): Mounting V5 Filesystem [ 140.246280][ T6633] loop4: detected capacity change from 0 to 512 [ 140.370145][ T6633] EXT4-fs (loop4): 1 orphan inode deleted [ 140.379263][ T6582] XFS (loop1): Ending clean mount [ 140.390730][ T6633] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,errors=continue,. Quota mode: writeback. [ 140.418466][ T6633] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.559393][ T4170] XFS (loop1): Unmounting Filesystem [ 140.581965][ T6642] loop3: detected capacity change from 0 to 4096 [ 140.687993][ T6642] ntfs: volume version 3.1. [ 141.062616][ T6639] loop2: detected capacity change from 0 to 32768 [ 141.101329][ T6652] nbd: must specify at least one socket [ 141.234802][ T6639] XFS (loop2): Mounting V5 Filesystem [ 141.419583][ T6639] XFS (loop2): Ending clean mount [ 141.511113][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 141.568753][ T4165] XFS (loop2): Unmounting Filesystem [ 141.574674][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 141.594120][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.612270][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.629107][ T6663] loop3: detected capacity change from 0 to 4096 [ 141.640099][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.649552][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.658643][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.667771][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.680366][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.690246][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.702938][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.712440][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.725048][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.734332][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.747059][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.754812][ T5867] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 141.770585][ T5867] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 141.875392][ T6673] netlink: 'syz.0.885': attribute type 3 has an invalid length. [ 141.915535][ T6673] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 141.923325][ T6673] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.885'. [ 141.950493][ T6646] loop4: detected capacity change from 0 to 40427 [ 142.073189][ T6677] loop0: detected capacity change from 0 to 4096 [ 142.137337][ T6663] __ntfs_warning: 10 callbacks suppressed [ 142.137353][ T6663] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 142.190294][ T6677] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 142.210020][ T6677] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 142.227972][ T6646] F2FS-fs (loop4): invalid crc value [ 142.234554][ T6677] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 142.258853][ T6646] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.288216][ T6663] ntfs: volume version 3.1. [ 142.293212][ T6677] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 142.325640][ T6677] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 142.356796][ T6677] ntfs: volume version 3.1. [ 142.383548][ T6677] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 142.400227][ T6646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.460586][ T6677] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 142.482420][ T6681] loop1: detected capacity change from 0 to 4096 [ 142.488837][ T26] audit: type=1800 audit(1732109017.698:4002): pid=6646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.877" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 142.513327][ T6677] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 142.537189][ T4169] attempt to access beyond end of device [ 142.537189][ T4169] loop4: rw=2049, want=45104, limit=40427 [ 142.649213][ T6681] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 143.571675][ T6706] loop4: detected capacity change from 0 to 512 [ 143.731027][ T6706] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.889532][ T6699] loop2: detected capacity change from 0 to 32768 [ 143.934955][ T6716] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 143.947481][ T6699] XFS: ikeep mount option is deprecated. [ 143.953158][ T6699] XFS: noikeep mount option is deprecated. [ 144.014106][ T6686] loop3: detected capacity change from 0 to 32768 [ 144.095981][ T6699] XFS (loop2): Mounting V5 Filesystem [ 144.145667][ T5751] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.171147][ T6722] loop4: detected capacity change from 0 to 2048 [ 144.229814][ T6686] XFS (loop3): Mounting V5 Filesystem [ 144.257134][ T6699] XFS (loop2): Ending clean mount [ 144.305904][ T6699] XFS (loop2): Quotacheck needed: Please wait. [ 144.345909][ T6725] loop0: detected capacity change from 0 to 4096 [ 144.380310][ T6722] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 144.402400][ T6686] XFS (loop3): Ending clean mount [ 144.450306][ T6699] XFS (loop2): Quotacheck: Done. [ 144.451272][ T6722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.511785][ T5751] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 144.522438][ T6725] ntfs3: loop0: failed to convert "0080" to macroman [ 144.529933][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.539876][ T6725] ntfs3: loop0: failed to convert name for inode 1e. [ 144.555974][ T4175] XFS (loop3): Unmounting Filesystem [ 144.568849][ T5751] usb 2-1: config 0 descriptor?? [ 144.628262][ T5751] gspca_main: spca508-2.14.0 probing 8086:0110 [ 144.635853][ T4165] XFS (loop2): Unmounting Filesystem [ 144.855747][ T5751] gspca_spca508: reg_read err -32 [ 145.088218][ T6750] loop3: detected capacity change from 0 to 1024 [ 145.120760][ T5751] gspca_spca508: reg_read err -71 [ 145.146632][ T5751] gspca_spca508: reg_read err -71 [ 145.157988][ T6758] netlink: 112 bytes leftover after parsing attributes in process `syz.0.913'. [ 145.182729][ T5751] gspca_spca508: reg_read err -71 [ 145.208129][ T5751] gspca_spca508: reg write: error -71 [ 145.213586][ T5751] spca508: probe of 2-1:0.0 failed with error -71 [ 145.247347][ T5751] usb 2-1: USB disconnect, device number 10 [ 145.381051][ T6762] loop3: detected capacity change from 0 to 512 [ 145.481975][ T6762] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.915: bg 0: block 248: padding at end of block bitmap is not set [ 145.509156][ T6762] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.915: Failed to acquire dquot type 1 [ 145.524103][ T6762] EXT4-fs (loop3): 1 truncate cleaned up [ 145.530306][ T6762] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 145.543389][ T6762] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.794041][ T6754] loop4: detected capacity change from 0 to 32768 [ 145.959337][ T6785] loop0: detected capacity change from 0 to 8 [ 146.077626][ T6785] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 146.110135][ T4209] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.249898][ T6800] loop2: detected capacity change from 0 to 128 [ 146.284479][ T6800] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 146.293747][ T6802] program syz.0.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.339621][ T6800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.525745][ T4209] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.557698][ T4209] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.616350][ T4209] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.645619][ T4209] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 146.706118][ T4209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.756910][ T4209] usb 2-1: config 0 descriptor?? [ 146.813869][ T6822] loop3: detected capacity change from 0 to 256 [ 146.836556][ T6820] loop2: detected capacity change from 0 to 256 [ 146.871340][ T6820] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xeade4de0, utbl_chksum : 0xe619d30d) [ 146.886312][ T6822] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 147.270212][ T4209] elecom 0003:056E:011C.0015: unknown main item tag 0x6 [ 147.304099][ T4209] elecom 0003:056E:011C.0015: report_id 29495 is invalid [ 147.334442][ T4209] elecom 0003:056E:011C.0015: item 0 2 1 8 parsing failed [ 147.353272][ T4209] elecom: probe of 0003:056E:011C.0015 failed with error -22 [ 147.470404][ T5751] usb 2-1: USB disconnect, device number 11 [ 147.472509][ T6844] loop4: detected capacity change from 0 to 256 [ 147.613153][ T6846] team0: Port device syz_tun added [ 147.635176][ T6816] loop0: detected capacity change from 0 to 32768 [ 148.172569][ T6876] loop2: detected capacity change from 0 to 16 [ 148.205199][ T6876] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.223243][ T6879] loop1: detected capacity change from 0 to 64 [ 148.261676][ T6883] loop4: detected capacity change from 0 to 512 [ 148.264263][ T6876] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 148.295312][ T6876] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 148.320972][ T6876] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 148.340285][ T6883] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 148.343808][ T6879] hfs: keylen 94 too large [ 148.360409][ T6883] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 148.367277][ T6879] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 148.379565][ T6876] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 148.391726][ T6876] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 148.404054][ T6883] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.461771][ T6876] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 148.462558][ T6883] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e019, mo2=0000] [ 148.483995][ T6876] attempt to access beyond end of device [ 148.483995][ T6876] loop2: rw=524288, want=6536, limit=16 [ 148.496099][ T6876] attempt to access beyond end of device [ 148.496099][ T6876] loop2: rw=524288, want=34359736344, limit=16 [ 148.531784][ T6893] netlink: 216 bytes leftover after parsing attributes in process `syz.0.976'. [ 148.534664][ T6876] attempt to access beyond end of device [ 148.534664][ T6876] loop2: rw=524288, want=736, limit=16 [ 148.553233][ T6876] attempt to access beyond end of device [ 148.553233][ T6876] loop2: rw=524288, want=536576872, limit=16 [ 148.565498][ T6876] attempt to access beyond end of device [ 148.565498][ T6876] loop2: rw=524288, want=24, limit=16 [ 148.578084][ T6876] attempt to access beyond end of device [ 148.578084][ T6876] loop2: rw=524288, want=13478624040, limit=16 [ 148.589750][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.976'. [ 148.679903][ T6883] EXT4-fs (loop4): 1 truncate cleaned up [ 148.707967][ T154] __quota_error: 10 callbacks suppressed [ 148.707985][ T154] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 148.743710][ T6883] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nogrpid,jqfmt=vfsv1,resgid=0x000000000000ee01,jqfmt=vfsv1,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 148.746810][ T6902] program syz.0.988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.809958][ T154] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 1 [ 149.009079][ T6912] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.010044][ T6911] loop2: detected capacity change from 0 to 64 [ 149.028420][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.190341][ T6920] netlink: 64 bytes leftover after parsing attributes in process `syz.0.987'. [ 149.472893][ T6936] loop4: detected capacity change from 0 to 1024 [ 149.643097][ T6936] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,errors=remount-ro,. Quota mode: none. [ 149.665775][ T6936] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.722876][ T6947] loop2: detected capacity change from 0 to 4096 [ 149.735319][ T6948] loop1: detected capacity change from 0 to 1024 [ 149.783403][ T6947] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 149.829932][ T6948] hfsplus: bad catalog file entry [ 149.833302][ T6947] ntfs3: loop2: failed to convert "c46c" to maciceland [ 150.121517][ T6952] loop1: detected capacity change from 0 to 256 [ 150.264575][ T6952] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 150.515399][ T6940] loop3: detected capacity change from 0 to 32768 [ 150.696928][ T6940] XFS (loop3): Mounting V5 Filesystem [ 150.842527][ T6986] autofs4:pid:6986:autofs_fill_super: called with bogus options [ 150.867998][ T6940] XFS (loop3): Ending clean mount [ 150.904386][ T6964] loop0: detected capacity change from 0 to 32768 [ 150.944565][ T4175] XFS (loop3): Unmounting Filesystem [ 150.950856][ T6964] XFS: attr2 mount option is deprecated. [ 151.085231][ T6964] XFS (loop0): Mounting V5 Filesystem [ 151.230077][ T6964] XFS (loop0): Ending clean mount [ 151.234961][ T6964] XFS (loop0): Quotacheck needed: Please wait. [ 151.270276][ T6970] loop1: detected capacity change from 0 to 32768 [ 151.315958][ T6970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1011 (6970) [ 151.343230][ T6964] XFS (loop0): Quotacheck: Done. [ 151.368660][ T6970] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 151.385733][ T6970] BTRFS info (device loop1): enabling auto defrag [ 151.392568][ T6970] BTRFS info (device loop1): max_inline at 0 [ 151.399237][ T6970] BTRFS info (device loop1): enabling ssd optimizations [ 151.407889][ T6970] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 151.417627][ T6970] BTRFS info (device loop1): use lzo compression, level 0 [ 151.424793][ T6970] BTRFS info (device loop1): using free space tree [ 151.455645][ T6970] BTRFS info (device loop1): has skinny extents [ 151.601617][ T4171] XFS (loop0): Unmounting Filesystem [ 151.915247][ T7034] tipc: Enabling of bearer rejected, failed to enable media [ 152.003998][ T7036] loop3: detected capacity change from 0 to 512 [ 152.065045][ T7036] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1029: invalid indirect mapped block 256 (level 2) [ 152.143551][ T7036] EXT4-fs (loop3): 2 truncates cleaned up [ 152.153512][ T7036] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.759231][ T7043] loop4: detected capacity change from 0 to 32768 [ 152.840568][ T7043] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.1032 (7043) [ 152.888465][ T7066] loop1: detected capacity change from 0 to 256 [ 152.904287][ T7068] loop0: detected capacity change from 0 to 256 [ 152.948398][ T7066] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.977436][ T7043] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 152.987371][ T7066] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 152.999620][ T7043] BTRFS info (device loop4): using free space tree [ 153.015965][ T7043] BTRFS info (device loop4): has skinny extents [ 153.440291][ T7043] BTRFS info (device loop4): enabling ssd optimizations [ 153.503550][ T7043] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.808239][ T7070] loop3: detected capacity change from 0 to 32768 [ 154.021426][ T7070] XFS (loop3): Mounting V5 Filesystem [ 154.060588][ T7111] loop0: detected capacity change from 0 to 4096 [ 154.093163][ T4563] Bluetooth: hci1: command 0x0405 tx timeout [ 154.163824][ T7070] XFS (loop3): Ending clean mount [ 154.185118][ T7111] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 154.213109][ T7070] XFS (loop3): Quotacheck needed: Please wait. [ 154.328797][ T7070] XFS (loop3): Quotacheck: Done. [ 154.388867][ T7099] loop1: detected capacity change from 0 to 32768 [ 154.414032][ T7125] loop2: detected capacity change from 0 to 512 [ 154.443717][ T4175] XFS (loop3): Unmounting Filesystem [ 154.464568][ T7125] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.514779][ T7132] CIFS: Unable to determine destination address [ 154.587900][ T7099] XFS (loop1): Mounting V5 Filesystem [ 154.666703][ T7125] EXT4-fs (loop2): 1 truncate cleaned up [ 154.672389][ T7125] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 154.678334][ T7128] loop0: detected capacity change from 0 to 4096 [ 154.810181][ T7128] ntfs: volume version 3.1. [ 154.910765][ T7099] XFS (loop1): Ending clean mount [ 155.008816][ T4170] XFS (loop1): Unmounting Filesystem [ 155.323891][ T7155] loop4: detected capacity change from 0 to 1024 [ 155.373374][ T7159] loop0: detected capacity change from 0 to 1024 [ 155.450271][ T7159] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 155.483768][ T7155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.512052][ T7159] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 155.568180][ T7155] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.4.1069: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 155.625196][ T7159] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.0.1067: corrupted in-inode xattr [ 155.699534][ T7155] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1782: Corrupt filesystem [ 155.727136][ T7167] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #2: comm syz.0.1067: corrupted in-inode xattr [ 156.091396][ T7183] loop0: detected capacity change from 0 to 64 [ 156.206930][ T7153] loop3: detected capacity change from 0 to 32768 [ 156.227871][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1077'. [ 156.260250][ T7153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1058 (7153) [ 156.276837][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 156.343880][ T7153] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 156.363365][ T7153] BTRFS info (device loop3): using free space tree [ 156.380950][ T7153] BTRFS info (device loop3): has skinny extents [ 156.629863][ T7153] BTRFS info (device loop3): enabling ssd optimizations [ 156.641436][ T7175] loop2: detected capacity change from 0 to 32768 [ 156.690575][ T7175] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1074 (7175) [ 156.785777][ T7222] loop4: detected capacity change from 0 to 8 [ 156.795132][ T7175] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 156.833267][ T7175] BTRFS info (device loop2): force zlib compression, level 3 [ 156.859142][ T7175] BTRFS info (device loop2): force clearing of disk cache [ 156.883846][ T7175] BTRFS info (device loop2): setting nodatasum [ 156.905009][ T7175] BTRFS info (device loop2): use zlib compression, level 3 [ 156.945706][ T7222] SQUASHFS error: xz decompression failed, data probably corrupt [ 156.954030][ T7222] SQUASHFS error: Failed to read block 0xa8: -5 [ 156.960851][ T7175] BTRFS info (device loop2): allowing degraded mounts [ 156.985873][ T7175] BTRFS info (device loop2): enabling disk space caching [ 156.997397][ T7175] BTRFS info (device loop2): disk space caching is enabled [ 157.004649][ T7175] BTRFS info (device loop2): has skinny extents [ 157.007090][ T7228] netlink: 'syz.0.1088': attribute type 21 has an invalid length. [ 157.047742][ T7222] SQUASHFS error: xz decompression failed, data probably corrupt [ 157.051568][ T7228] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 157.095636][ T7222] SQUASHFS error: Failed to read block 0xa8: -5 [ 157.106029][ T26] audit: type=1800 audit(1732109032.328:4003): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1086" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 157.575283][ T7175] BTRFS info (device loop2): enabling ssd optimizations [ 157.600666][ T7175] BTRFS info (device loop2): clearing free space tree [ 157.665834][ T7175] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.706090][ T7175] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.754983][ T7267] loop3: detected capacity change from 0 to 512 [ 157.815602][ T1110] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 157.823522][ T7267] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1099: invalid indirect mapped block 256 (level 2) [ 157.915320][ T7175] BTRFS info (device loop2): balance: start -f -slimit=17179869188,stripes=6..255 [ 157.924108][ T7267] EXT4-fs (loop3): Remounting filesystem read-only [ 157.931714][ T7267] EXT4-fs (loop3): 2 truncates cleaned up [ 157.938580][ T7267] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug_want_extra_isize=0x0000000000000008,data_err=ignore,. Quota mode: writeback. [ 157.966758][ T7277] tipc: Started in network mode [ 157.978568][ T7175] BTRFS info (device loop2): balance: ended with status: 0 [ 158.012686][ T7277] tipc: Node identity , cluster identity 4711 [ 158.052086][ T7277] tipc: Failed to obtain node identity [ 158.070039][ T7277] tipc: Enabling of bearer rejected, failed to enable media [ 158.203684][ T1110] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 158.229246][ T1110] usb 5-1: config 0 has no interface number 0 [ 158.235396][ T1110] usb 5-1: config 0 interface 244 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.275553][ T1110] usb 5-1: config 0 interface 244 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.303963][ T1110] usb 5-1: config 0 interface 244 has no altsetting 0 [ 158.328972][ T1110] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 158.369839][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.398484][ T1110] usb 5-1: config 0 descriptor?? [ 158.446801][ T7288] tipc: Started in network mode [ 158.452720][ T7288] tipc: Node identity 4, cluster identity 4711 [ 158.518872][ T7288] tipc: Node number set to 4 [ 158.528382][ T7288] tipc: Cannot configure node identity twice [ 158.788629][ T7294] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1104'. [ 158.879254][ T1110] uclogic 0003:256C:006D.0016: No inputs registered, leaving [ 158.898633][ T1110] uclogic 0003:256C:006D.0016: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input244 [ 159.079590][ T4563] usb 5-1: USB disconnect, device number 5 [ 159.183169][ T7311] loop2: detected capacity change from 0 to 8 [ 159.433789][ T7300] loop1: detected capacity change from 0 to 32768 [ 159.471007][ T7315] loop2: detected capacity change from 0 to 128 [ 159.509770][ T7315] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.563644][ T7315] EXT4-fs (loop2): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 159.676946][ T7300] XFS (loop1): Mounting V5 Filesystem [ 159.726000][ T7315] ext4 filesystem being remounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.820493][ T7307] loop0: detected capacity change from 0 to 32768 [ 159.851042][ T7300] XFS (loop1): Ending clean mount [ 159.893244][ T7307] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1115 (7307) [ 159.947807][ T7307] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.973622][ T7307] BTRFS info (device loop0): force zlib compression, level 3 [ 160.012396][ T7313] loop3: detected capacity change from 0 to 40427 [ 160.018311][ T7307] BTRFS info (device loop0): force clearing of disk cache [ 160.044775][ T4170] XFS (loop1): Unmounting Filesystem [ 160.062528][ T7307] BTRFS info (device loop0): setting nodatasum [ 160.093782][ T7333] loop4: detected capacity change from 0 to 256 [ 160.095586][ T7307] BTRFS info (device loop0): use zlib compression, level 3 [ 160.148573][ T7307] BTRFS info (device loop0): allowing degraded mounts [ 160.177500][ T7307] BTRFS info (device loop0): enabling disk space caching [ 160.184582][ T7307] BTRFS info (device loop0): disk space caching is enabled [ 160.206934][ T7307] BTRFS info (device loop0): has skinny extents [ 160.212444][ T7333] FAT-fs (loop4): Directory bread(block 64) failed [ 160.226125][ T7333] FAT-fs (loop4): Directory bread(block 65) failed [ 160.230445][ T7313] F2FS-fs (loop3): Found nat_bits in checkpoint [ 160.239676][ T7333] FAT-fs (loop4): Directory bread(block 66) failed [ 160.309871][ T7333] FAT-fs (loop4): Directory bread(block 67) failed [ 160.335746][ T7333] FAT-fs (loop4): Directory bread(block 68) failed [ 160.342328][ T7333] FAT-fs (loop4): Directory bread(block 69) failed [ 160.365910][ T7333] FAT-fs (loop4): Directory bread(block 70) failed [ 160.387439][ T7333] FAT-fs (loop4): Directory bread(block 71) failed [ 160.394111][ T7333] FAT-fs (loop4): Directory bread(block 72) failed [ 160.412306][ T7313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 160.444593][ T7333] FAT-fs (loop4): Directory bread(block 73) failed [ 160.527230][ T4175] attempt to access beyond end of device [ 160.527230][ T4175] loop3: rw=2049, want=45104, limit=40427 [ 160.625661][ T7307] BTRFS info (device loop0): enabling ssd optimizations [ 160.696602][ T7307] BTRFS info (device loop0): clearing free space tree [ 160.705713][ T7307] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.716032][ T7307] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.784454][ T7307] BTRFS info (device loop0): balance: start -f -slimit=17179869188,stripes=6..255 [ 160.854131][ T7307] BTRFS info (device loop0): balance: ended with status: 0 [ 161.065007][ T7370] loop4: detected capacity change from 0 to 1764 [ 161.302982][ T7370] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 161.394084][ T7338] loop2: detected capacity change from 0 to 32768 [ 161.494557][ T7376] loop4: detected capacity change from 0 to 128 [ 161.519365][ T7338] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 161.519365][ T7338] [ 161.557259][ T7376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.571200][ T7338] jfs_create: dtInsert returned -EIO [ 161.580566][ T7338] ERROR: (device loop2): jfs_create: [ 161.580566][ T7338] [ 161.706155][ T7376] EXT4-fs (loop4): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 161.772416][ T7376] ext4 filesystem being remounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.875952][ T5862] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.295734][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.321720][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.366726][ T5862] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 162.393389][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.421768][ T5862] usb 4-1: config 0 descriptor?? [ 162.762674][ T7420] sp0: Synchronizing with TNC [ 162.928639][ T5862] apple 0003:05AC:0232.0017: hidraw0: USB HID v0.00 Device [HID 05ac:0232] on usb-dummy_hcd.3-1/input0 [ 163.039828][ T7430] loop0: detected capacity change from 0 to 1024 [ 163.082696][ T7397] loop1: detected capacity change from 0 to 32768 [ 163.129236][ T5750] usb 4-1: USB disconnect, device number 10 [ 163.150194][ T7397] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1142 (7397) [ 163.160715][ T7430] hfsplus: bad catalog entry type [ 163.194024][ T144] hfsplus: b-tree write err: -5, ino 4 [ 163.232973][ T7397] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.255125][ T7397] BTRFS info (device loop1): force zlib compression, level 3 [ 163.264507][ T7397] BTRFS info (device loop1): force clearing of disk cache [ 163.271985][ T7397] BTRFS info (device loop1): setting nodatasum [ 163.278758][ T7397] BTRFS info (device loop1): use zlib compression, level 3 [ 163.288950][ T7397] BTRFS info (device loop1): allowing degraded mounts [ 163.296104][ T7397] BTRFS info (device loop1): enabling disk space caching [ 163.333685][ T7397] BTRFS info (device loop1): disk space caching is enabled [ 163.358780][ T7397] BTRFS info (device loop1): has skinny extents [ 163.367053][ T7443] loop0: detected capacity change from 0 to 256 [ 163.432493][ T7443] FAT-fs (loop0): Directory bread(block 64) failed [ 163.443873][ T7443] FAT-fs (loop0): Directory bread(block 65) failed [ 163.455018][ T7443] FAT-fs (loop0): Directory bread(block 66) failed [ 163.464669][ T7443] FAT-fs (loop0): Directory bread(block 67) failed [ 163.475266][ T7443] FAT-fs (loop0): Directory bread(block 68) failed [ 163.482941][ T7443] FAT-fs (loop0): Directory bread(block 69) failed [ 163.490229][ T7443] FAT-fs (loop0): Directory bread(block 70) failed [ 163.497354][ T7443] FAT-fs (loop0): Directory bread(block 71) failed [ 163.504416][ T7443] FAT-fs (loop0): Directory bread(block 72) failed [ 163.512464][ T7443] FAT-fs (loop0): Directory bread(block 73) failed [ 163.530145][ T7397] BTRFS info (device loop1): enabling ssd optimizations [ 163.544334][ T7397] BTRFS info (device loop1): clearing free space tree [ 163.554138][ T7397] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.564440][ T7397] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.668383][ T7397] BTRFS info (device loop1): balance: start -f -slimit=17179869188,stripes=6..255 [ 163.685886][ T7397] BTRFS info (device loop1): balance: ended with status: 0 [ 164.079781][ T7478] loop4: detected capacity change from 0 to 512 [ 164.162362][ T7478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1170: inode #1: comm syz.4.1170: iget: illegal inode # [ 164.202633][ T7481] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 164.211522][ T7481] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 164.216059][ T7478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1170: error while reading EA inode 1 err=-117 [ 164.221670][ T7481] netlink: 46603 bytes leftover after parsing attributes in process `syz.2.1171'. [ 164.265698][ T5858] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 164.341899][ T7478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1170: inode #1: comm syz.4.1170: iget: illegal inode # [ 164.361975][ T7478] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1170: error while reading EA inode 1 err=-117 [ 164.399971][ T7478] EXT4-fs (loop4): 1 orphan inode deleted [ 164.414194][ T7478] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 164.688632][ T7502] loop2: detected capacity change from 0 to 1764 [ 164.696069][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.723629][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 164.739032][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.761139][ T5858] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 164.795649][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.816313][ T5858] usb 4-1: config 0 descriptor?? [ 164.852437][ T7471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.919951][ T7512] smc: net device ip6tnl0 erased user defined pnetid SYZ0 [ 165.113479][ T7522] loop2: detected capacity change from 0 to 256 [ 165.145899][ T5750] Bluetooth: hci1: command 0x0405 tx timeout [ 165.285678][ T6231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 165.336879][ T7526] loop2: detected capacity change from 0 to 512 [ 165.347489][ T5858] smartjoyplus 0003:0925:8866.0018: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 165.365620][ T5858] smartjoyplus 0003:0925:8866.0018: no output reports found [ 165.383681][ T7526] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.418535][ T7526] EXT4-fs (loop2): 1 truncate cleaned up [ 165.436932][ T7526] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 165.528774][ T4165] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /240/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.535779][ T6231] usb 5-1: Using ep0 maxpacket: 16 [ 165.556268][ T5858] usb 4-1: USB disconnect, device number 11 [ 165.581924][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.613330][ T4165] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /240/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.642874][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.643708][ T7524] loop1: detected capacity change from 0 to 32768 [ 165.673131][ T4165] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /240/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.697123][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.717268][ T6231] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.718943][ T4165] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /240/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.736148][ T6231] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.760745][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.780683][ T6231] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.794452][ T6231] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.801647][ T4165] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /240/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.821108][ T7524] JBD2: Ignoring recovery information on journal [ 165.824263][ T6231] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 165.841034][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.860939][ T6231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.872686][ T6231] usb 5-1: config 0 descriptor?? [ 165.884859][ T7524] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 165.935019][ T7524] [ 165.937389][ T7524] ====================================================== [ 165.944417][ T7524] WARNING: possible circular locking dependency detected [ 165.951442][ T7524] 5.15.173-syzkaller #0 Not tainted [ 165.956641][ T7524] ------------------------------------------------------ [ 165.964099][ T7524] syz.1.1191/7524 is trying to acquire lock: [ 165.970089][ T7524] ffff8880608db488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 165.983381][ T7524] [ 165.983381][ T7524] but task is already holding lock: [ 165.990755][ T7524] ffff88805ec8bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 166.000280][ T7524] [ 166.000280][ T7524] which lock already depends on the new lock. [ 166.000280][ T7524] [ 166.010695][ T7524] [ 166.010695][ T7524] the existing dependency chain (in reverse order) is: [ 166.019715][ T7524] [ 166.019715][ T7524] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 166.027539][ T7524] lock_acquire+0x1db/0x4f0 [ 166.032577][ T7524] down_read+0x45/0x2e0 [ 166.037270][ T7524] ocfs2_init_acl+0x398/0x930 [ 166.042483][ T7524] ocfs2_mknod+0x1e8f/0x2cd0 [ 166.047592][ T7524] vfs_mknod+0x444/0x4d0 [ 166.052602][ T7524] do_mknodat+0x392/0x690 [ 166.057441][ T7524] __x64_sys_mknod+0x8a/0xa0 [ 166.062542][ T7524] do_syscall_64+0x3b/0xb0 [ 166.067470][ T7524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.073882][ T7524] [ 166.073882][ T7524] -> #3 (jbd2_handle){++++}-{0:0}: [ 166.081166][ T7524] lock_acquire+0x1db/0x4f0 [ 166.086185][ T7524] start_this_handle+0x12e1/0x1570 [ 166.091834][ T7524] jbd2__journal_start+0x2d1/0x5c0 [ 166.097488][ T7524] jbd2_journal_start+0x25/0x30 [ 166.102873][ T7524] ocfs2_start_trans+0x3c2/0x6f0 [ 166.108345][ T7524] ocfs2_reserve_local_alloc_bits+0xbf9/0x27a0 [ 166.115026][ T7524] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 166.121877][ T7524] ocfs2_symlink+0x1424/0x2e20 [ 166.127149][ T7524] vfs_symlink+0x247/0x3d0 [ 166.132088][ T7524] do_symlinkat+0x1fd/0x600 [ 166.137108][ T7524] __x64_sys_symlinkat+0x95/0xa0 [ 166.142580][ T7524] do_syscall_64+0x3b/0xb0 [ 166.147512][ T7524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.153925][ T7524] [ 166.153925][ T7524] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 166.162525][ T7524] lock_acquire+0x1db/0x4f0 [ 166.167541][ T7524] down_read+0x45/0x2e0 [ 166.172207][ T7524] ocfs2_start_trans+0x3b7/0x6f0 [ 166.177656][ T7524] ocfs2_reserve_local_alloc_bits+0xbf9/0x27a0 [ 166.184319][ T7524] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 166.191169][ T7524] ocfs2_symlink+0x1424/0x2e20 [ 166.196466][ T7524] vfs_symlink+0x247/0x3d0 [ 166.201496][ T7524] do_symlinkat+0x1fd/0x600 [ 166.206510][ T7524] __x64_sys_symlinkat+0x95/0xa0 [ 166.211959][ T7524] do_syscall_64+0x3b/0xb0 [ 166.216908][ T7524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.223319][ T7524] [ 166.223319][ T7524] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 166.230784][ T7524] lock_acquire+0x1db/0x4f0 [ 166.235829][ T7524] ocfs2_start_trans+0x2b2/0x6f0 [ 166.241297][ T7524] ocfs2_dio_end_io+0x88b/0x1250 [ 166.246748][ T7524] dio_complete+0x25b/0x6e0 [ 166.251768][ T7524] __blockdev_direct_IO+0x41f2/0x4f40 [ 166.257654][ T7524] ocfs2_direct_IO+0x250/0x2c0 [ 166.262937][ T7524] generic_file_direct_write+0x204/0x460 [ 166.269128][ T7524] __generic_file_write_iter+0x2a2/0x4f0 [ 166.275293][ T7524] ocfs2_file_write_iter+0x17d5/0x1fa0 [ 166.281263][ T7524] do_iter_readv_writev+0x594/0x7a0 [ 166.286981][ T7524] do_iter_write+0x1e6/0x760 [ 166.292105][ T7524] do_pwritev+0x219/0x360 [ 166.296948][ T7524] do_syscall_64+0x3b/0xb0 [ 166.301915][ T7524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.308342][ T7524] [ 166.308342][ T7524] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 166.318868][ T7524] validate_chain+0x1649/0x5930 [ 166.324229][ T7524] __lock_acquire+0x1295/0x1ff0 [ 166.329590][ T7524] lock_acquire+0x1db/0x4f0 [ 166.334606][ T7524] down_write+0x38/0x60 [ 166.339288][ T7524] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 166.345717][ T7524] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 166.352562][ T7524] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 166.358720][ T7524] ocfs2_xattr_set+0xf46/0x1930 [ 166.364082][ T7524] __vfs_setxattr+0x3e7/0x420 [ 166.369298][ T7524] __vfs_setxattr_noperm+0x12a/0x5e0 [ 166.375092][ T7524] vfs_setxattr+0x21d/0x420 [ 166.380103][ T7524] setxattr+0x27e/0x2e0 [ 166.384773][ T7524] path_setxattr+0x1bc/0x2a0 [ 166.389874][ T7524] __x64_sys_setxattr+0xb7/0xd0 [ 166.395245][ T7524] do_syscall_64+0x3b/0xb0 [ 166.400180][ T7524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.406619][ T7524] [ 166.406619][ T7524] other info that might help us debug this: [ 166.406619][ T7524] [ 166.416829][ T7524] Chain exists of: [ 166.416829][ T7524] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem [ 166.416829][ T7524] [ 166.432554][ T7524] Possible unsafe locking scenario: [ 166.432554][ T7524] [ 166.439991][ T7524] CPU0 CPU1 [ 166.445364][ T7524] ---- ---- [ 166.450715][ T7524] lock(&oi->ip_xattr_sem); [ 166.455384][ T7524] lock(jbd2_handle); [ 166.461958][ T7524] lock(&oi->ip_xattr_sem); [ 166.469052][ T7524] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 166.476328][ T7524] [ 166.476328][ T7524] *** DEADLOCK *** [ 166.476328][ T7524] [ 166.484455][ T7524] 3 locks held by syz.1.1191/7524: [ 166.489554][ T7524] #0: ffff8880297e2460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 166.498784][ T7524] #1: ffff88805ec8c2c8 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 166.509243][ T7524] #2: ffff88805ec8bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 166.519169][ T7524] [ 166.519169][ T7524] stack backtrace: [ 166.525065][ T7524] CPU: 0 PID: 7524 Comm: syz.1.1191 Not tainted 5.15.173-syzkaller #0 [ 166.533221][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.543272][ T7524] Call Trace: [ 166.546635][ T7524] [ 166.549561][ T7524] dump_stack_lvl+0x1e3/0x2d0 [ 166.554242][ T7524] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 166.559874][ T7524] ? print_circular_bug+0x12b/0x1a0 [ 166.565070][ T7524] check_noncircular+0x2f8/0x3b0 [ 166.570004][ T7524] ? add_chain_block+0x850/0x850 [ 166.574938][ T7524] ? lockdep_lock+0x11f/0x2a0 [ 166.579626][ T7524] ? __lock_acquire+0x1295/0x1ff0 [ 166.584649][ T7524] validate_chain+0x1649/0x5930 [ 166.589502][ T7524] ? mark_lock+0x98/0x340 [ 166.593825][ T7524] ? reacquire_held_locks+0x660/0x660 [ 166.599280][ T7524] ? ocfs2_get_system_file_inode+0x1e0/0x7b0 [ 166.605260][ T7524] ? __lock_acquire+0x1ff0/0x1ff0 [ 166.610298][ T7524] ? mark_lock+0x98/0x340 [ 166.614643][ T7524] __lock_acquire+0x1295/0x1ff0 [ 166.619498][ T7524] lock_acquire+0x1db/0x4f0 [ 166.624010][ T7524] ? ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 166.630074][ T7524] ? read_lock_is_recursive+0x10/0x10 [ 166.635468][ T7524] ? __might_sleep+0xc0/0xc0 [ 166.640075][ T7524] ? __lock_acquire+0x1295/0x1ff0 [ 166.645110][ T7524] down_write+0x38/0x60 [ 166.649261][ T7524] ? ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 166.655353][ T7524] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 166.661248][ T7524] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 166.667223][ T7524] ? print_irqtrace_events+0x210/0x210 [ 166.672678][ T7524] ? do_raw_spin_unlock+0x137/0x8b0 [ 166.677879][ T7524] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 166.683774][ T7524] ? lockdep_hardirqs_on+0x94/0x130 [ 166.688973][ T7524] ? ocfs2_block_group_search+0x490/0x490 [ 166.694689][ T7524] ? stack_trace_save+0x113/0x1c0 [ 166.699732][ T7524] ? stack_trace_snprint+0xe0/0xe0 [ 166.704838][ T7524] ? stack_depot_save+0x3db/0x440 [ 166.709857][ T7524] ? ____kasan_kmalloc+0xd1/0xf0 [ 166.714788][ T7524] ? ____kasan_kmalloc+0xba/0xf0 [ 166.719717][ T7524] ? kmem_cache_alloc_trace+0x143/0x290 [ 166.725251][ T7524] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 166.731746][ T7524] ? ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 166.737554][ T7524] ? ocfs2_xattr_set+0xf46/0x1930 [ 166.742605][ T7524] ? __vfs_setxattr+0x3e7/0x420 [ 166.747469][ T7524] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 166.752925][ T7524] ? vfs_setxattr+0x21d/0x420 [ 166.757588][ T7524] ? setxattr+0x27e/0x2e0 [ 166.761905][ T7524] ? path_setxattr+0x1bc/0x2a0 [ 166.766656][ T7524] ? __x64_sys_setxattr+0xb7/0xd0 [ 166.771678][ T7524] ? do_syscall_64+0x3b/0xb0 [ 166.776262][ T7524] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.782348][ T7524] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 166.788946][ T7524] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 166.795322][ T7524] ? ocfs2_init_steal_slots+0x150/0x150 [ 166.800879][ T7524] ? ocfs2_xattr_block_set+0x32a0/0x32a0 [ 166.806517][ T7524] ? ocfs2_xattr_set+0xef8/0x1930 [ 166.811683][ T7524] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 166.817343][ T7524] ? ocfs2_prepare_refcount_xattr+0x1220/0x1220 [ 166.823602][ T7524] ? up_write+0x19d/0x580 [ 166.827945][ T7524] ? ocfs2_remove_btree_range+0x18a0/0x18a0 [ 166.833860][ T7524] ? __up_read+0x690/0x690 [ 166.838297][ T7524] ? ocfs2_xattr_set+0x4d1/0x1930 [ 166.843352][ T7524] ocfs2_xattr_set+0xf46/0x1930 [ 166.848203][ T7524] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 166.854095][ T7524] ? __lock_acquire+0x1295/0x1ff0 [ 166.859121][ T7524] ? ocfs2_inode_unlock_tracker+0x236/0x2a0 [ 166.865023][ T7524] ? do_raw_spin_unlock+0x137/0x8b0 [ 166.870214][ T7524] ? privileged_wrt_inode_uidgid+0x210/0x260 [ 166.876196][ T7524] ? posix_xattr_acl+0xa5/0xd0 [ 166.880965][ T7524] ? evm_protect_xattr+0x33b/0xa70 [ 166.886070][ T7524] ? ocfs2_xattr_user_set+0xaa/0xf0 [ 166.891281][ T7524] ? ocfs2_xattr_user_get+0xe0/0xe0 [ 166.896479][ T7524] __vfs_setxattr+0x3e7/0x420 [ 166.901162][ T7524] __vfs_setxattr_noperm+0x12a/0x5e0 [ 166.906467][ T7524] vfs_setxattr+0x21d/0x420 [ 166.911008][ T7524] ? xattr_permission+0x4f0/0x4f0 [ 166.916074][ T7524] ? __might_fault+0xb4/0x110 [ 166.920774][ T7524] ? strncpy_from_user+0x209/0x370 [ 166.925905][ T7524] setxattr+0x27e/0x2e0 [ 166.930074][ T7524] ? path_setxattr+0x2a0/0x2a0 [ 166.934853][ T7524] ? preempt_count_add+0x8f/0x180 [ 166.939887][ T7524] ? __mnt_want_write+0x1e6/0x260 [ 166.944930][ T7524] path_setxattr+0x1bc/0x2a0 [ 166.949516][ T7524] ? simple_xattr_list_add+0xf0/0xf0 [ 166.954795][ T7524] ? syscall_enter_from_user_mode+0x2e/0x240 [ 166.960783][ T7524] __x64_sys_setxattr+0xb7/0xd0 [ 166.965624][ T7524] do_syscall_64+0x3b/0xb0 [ 166.970030][ T7524] ? clear_bhb_loop+0x15/0x70 [ 166.974713][ T7524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.980600][ T7524] RIP: 0033:0x7fa4140d2819 [ 166.985012][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.004615][ T7524] RSP: 002b:00007fa411f4a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 167.013032][ T7524] RAX: ffffffffffffffda RBX: 00007fa414289fa0 RCX: 00007fa4140d2819 [ 167.021002][ T7524] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000020000000 [ 167.028961][ T7524] RBP: 00007fa41414575e R08: 0000000000000000 R09: 0000000000000000 [ 167.036923][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.044901][ T7524] R13: 0000000000000000 R14: 00007fa414289fa0 R15: 00007fff14377b38 [ 167.052879][ T7524] [ 167.096798][ T4170] ocfs2: Unmounting device (7,1) on (node local) [ 167.322024][ T4218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.332407][ T4218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.367535][ T6231] hid-generic 0003:045E:05DA.0019: item fetching failed at offset 30/34 [ 167.377790][ T4218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.385903][ T6231] hid-generic: probe of 0003:045E:05DA.0019 failed with error -22 [ 167.391406][ T4218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.479621][ T4218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.492451][ T4218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.540140][ T4218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.553927][ T4218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.574639][ T5866] usb 5-1: USB disconnect, device number 6 [ 168.231664][ T4218] IPVS: stopping backup sync thread 5262 ... [ 168.399374][ T4218] device hsr_slave_0 left promiscuous mode [ 168.411702][ T4218] device hsr_slave_1 left promiscuous mode [ 168.422545][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.437601][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.445385][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.455353][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.466003][ T4218] device bridge_slave_1 left promiscuous mode [ 168.472213][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.498171][ T4218] device bridge_slave_0 left promiscuous mode [ 168.504456][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.530762][ T4218] device veth1_macvtap left promiscuous mode [ 168.545805][ T4218] device veth0_macvtap left promiscuous mode [ 168.551915][ T4218] device veth1_vlan left promiscuous mode [ 168.562565][ T4218] device veth0_vlan left promiscuous mode [ 168.643588][ T4218] bond2 (unregistering): Released all slaves [ 168.661652][ T4218] bond1 (unregistering): Released all slaves [ 168.740377][ T4218] team0 (unregistering): Port device team_slave_1 removed [ 168.754012][ T4218] team0 (unregistering): Port device team_slave_0 removed [ 168.766540][ T4218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.781608][ T4218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.845183][ T4218] bond0 (unregistering): Released all slaves