last executing test programs: 4.178015513s ago: executing program 2 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x884022, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38, 0x65]}}]}) 4.027339237s ago: executing program 2 (id=1154): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d325a"}, 0x35) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 3.92478775s ago: executing program 2 (id=1157): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x2a0041, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x1c) 3.717472866s ago: executing program 2 (id=1160): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3c, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x101, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xa, 0xcd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x24, 0x28, {0x28, 0x31, "f70ba3810300000000000028adf4615a15970bb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.523463403s ago: executing program 3 (id=1176): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120) fcntl$getflags(r0, 0xb) 2.372196517s ago: executing program 3 (id=1178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x28, r1, 0x211, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000) 2.370918528s ago: executing program 0 (id=1187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.145191324s ago: executing program 3 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 1.803036985s ago: executing program 0 (id=1181): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)=0x1) 1.496205434s ago: executing program 3 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.456055625s ago: executing program 2 (id=1185): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.330475999s ago: executing program 3 (id=1189): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='.\x02\x00', 0x2204806, &(0x7f0000000240)={[{@check_strict}, {@block={'block', 0x3d, 0x400}, 0x0}, {@map_acorn}, {@map_off}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}, {@utf8}, {@session={'session', 0x3d, 0x53}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020) 1.246966952s ago: executing program 4 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffbb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x400, 0x80000000, 0x55, 0x9, 0x3, 0x12, 0x1}}]}}]}, 0x154}}, 0x0) 1.213282383s ago: executing program 2 (id=1191): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) 1.065712137s ago: executing program 3 (id=1193): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0x6, 0x46, {0x46, 0x21, "491757c1e75d84312f1df3f46ba4a37f75533e7f1fac261ba764b700c9f4094b8897a472405e0d3b735701d0197b2ac59cf1b3b9c64fe9e01491000000000000000000f7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.023071778s ago: executing program 4 (id=1194): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200003, 0x0) fstatfs(r0, 0x0) 834.444754ms ago: executing program 0 (id=1196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 801.685485ms ago: executing program 1 (id=1197): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x48, 0x5) 702.312378ms ago: executing program 0 (id=1198): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x5}, 0x3c) 632.52406ms ago: executing program 1 (id=1199): r0 = epoll_create1(0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000a80)={0x10000000}) 601.408562ms ago: executing program 4 (id=1201): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x14f, &(0x7f0000000240)="$eJzs289KAlEUx/HfqKnZP8tqES2CINrkqIHVzh5FdBJpLMk2ShA9Su9Xi3atMhz0hqMQGHrJ+X42np+Hi2cWV89GAYisio7kyFFyEA7T2eecY3skAAvSH75+9QFET/zT9gQA7Hi/ltqS3j6eaoonJ/aDQb8y6sdSk/0X6SAx7DtprYb3i1fpZHTeyUw9nzH9tan90+PR569rQ5vaUlbb2lFu2K+b8/t/2IQAAIgOR/lwHnsjppum7xVMXgly0eRkkEuhfG5yKsj52r1fn9cjAJhR7Jf7Hw/d/0To/gP4vzrd3m3V970HCgoKClPY/mYCMG/uY6vtdrq9s2ar2vAa3l25VC5fFS4vim6w+Lvj6z+AJfLzo297EgAAAAAAAAAAAAAAMKtd7dkeAQAAAMCCLOLvRLafEQAAAAAAAAAAAAAAAACAZfMdAAD///JsITY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) 539.001163ms ago: executing program 0 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x800000, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x6300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008100}, 0x40080c0) 537.274573ms ago: executing program 1 (id=1203): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents64(r0, &(0x7f00000000c0)=""/44, 0x2c) getdents(r0, 0xfffffffffffffffd, 0x58) 472.238245ms ago: executing program 0 (id=1204): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) 441.144067ms ago: executing program 4 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="021c4c260a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 311.16824ms ago: executing program 4 (id=1206): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000005c80)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fcntl$setownex(r0, 0xf, 0x0) 310.30009ms ago: executing program 1 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6a521}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 124.777286ms ago: executing program 4 (id=1207): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) 120.838826ms ago: executing program 1 (id=1218): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x188, 0x10, 0x633, 0x20000, 0x0, {{@in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x84}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x80000, 0xffffff0a}, 0x70bd2b, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'ghash\x00'}, 0x0, 0xc0}}, @algo_aead={0x4c, 0x12, {{'seqiv(morus1280-sse2)\x00'}, 0x0, 0x200}}]}, 0x188}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 0s ago: executing program 1 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)={0x18, r1, 0x721, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) kernel console output (not intermixed with test programs): .671507][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.682916][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.694474][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.696377][ T4274] loop2: detected capacity change from 0 to 256 [ 72.703237][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.721824][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.746148][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.757486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.766365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.855094][ T4274] FAT-fs (loop2): Directory bread(block 64) failed [ 72.863062][ T4274] FAT-fs (loop2): Directory bread(block 65) failed [ 72.879844][ T4274] FAT-fs (loop2): Directory bread(block 66) failed [ 72.887151][ T4274] FAT-fs (loop2): Directory bread(block 67) failed [ 72.902242][ T4274] FAT-fs (loop2): Directory bread(block 68) failed [ 72.911873][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 72.929332][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 72.939537][ T4274] FAT-fs (loop2): Directory bread(block 69) failed [ 72.948503][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.974079][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.981972][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.994402][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.002198][ T4274] FAT-fs (loop2): Directory bread(block 70) failed [ 73.015340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.033235][ T4274] FAT-fs (loop2): Directory bread(block 71) failed [ 73.042534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.068934][ T4274] FAT-fs (loop2): Directory bread(block 72) failed [ 73.079088][ T4274] FAT-fs (loop2): Directory bread(block 73) failed [ 73.172530][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.183608][ T4279] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 73.196334][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.204599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.334776][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.349256][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.384445][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 73.397605][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.423416][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 73.442636][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 73.486165][ T4285] loop3: detected capacity change from 0 to 1024 [ 73.501075][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 73.509360][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 73.677311][ T4298] loop0: detected capacity change from 0 to 256 [ 73.760172][ T4300] loop4: detected capacity change from 0 to 2048 [ 73.833942][ T1137] hfsplus: b-tree write err: -5, ino 25 [ 73.841132][ T1137] hfsplus: b-tree write err: -5, ino 4 [ 73.876542][ T1137] hfsplus: b-tree write err: -5, ino 2 [ 73.973791][ T4305] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.034211][ T1107] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 74.217308][ T4314] loop3: detected capacity change from 0 to 64 [ 74.231711][ T4315] loop2: detected capacity change from 0 to 512 [ 74.395069][ T1107] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.422035][ T4315] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 74.442996][ T4315] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.445102][ T4322] loop0: detected capacity change from 0 to 256 [ 74.455961][ T1107] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 64 [ 74.468108][ T1107] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.475657][ T4315] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 74.481401][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.502817][ T1107] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 74.511979][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.524664][ T1107] usb 2-1: config 0 descriptor?? [ 74.546746][ T4294] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 74.555867][ T4315] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 74.564563][ T4315] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.19: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 74.602613][ T4315] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.19: couldn't read orphan inode 13 (err -117) [ 74.646560][ T4315] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 74.804569][ T4315] EXT4-fs warning (device loop2): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 74.972613][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 74.982673][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.036641][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.049807][ T4335] loop4: detected capacity change from 0 to 4096 [ 75.088597][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.096483][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.125083][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.126380][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.147596][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.173190][ T4335] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 75.191892][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.209379][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.218305][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.242147][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.244940][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.271788][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.290172][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.292506][ T1107] elecom 0003:056E:010D.0001: unknown main item tag 0x0 [ 75.306953][ T4337] netlink: 'syz.0.29': attribute type 3 has an invalid length. [ 75.344862][ T1107] elecom 0003:056E:010D.0001: hidraw0: USB HID v1.01 Device [HID 056e:010d] on usb-dummy_hcd.1-1/input0 [ 75.395685][ T1107] usb 2-1: USB disconnect, device number 2 [ 75.582008][ T4335] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 75.645548][ T4332] loop3: detected capacity change from 0 to 32768 [ 75.695035][ T4344] fido_id[4344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 75.772846][ T4332] JFS: metapage_get_blocks failed [ 75.804836][ T4332] ERROR: (device loop3): release_metapage: write_one_page() failed [ 75.804836][ T4332] [ 75.838315][ T4332] ERROR: (device loop3): remounting filesystem as read-only [ 75.924877][ T4356] netlink: 91 bytes leftover after parsing attributes in process `syz.0.36'. [ 75.963702][ T276] blkno = 5002c, nblocks = 1 [ 75.974197][ T276] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 75.974197][ T276] [ 76.016603][ T276] blkno = 5002d, nblocks = 1 [ 76.021292][ T276] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 76.021292][ T276] [ 76.136350][ T4364] capability: warning: `syz.4.35' uses 32-bit capabilities (legacy support in use) [ 76.304236][ T4238] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.374285][ T4191] JFS: metapage_get_blocks failed [ 76.734502][ T4238] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 76.743623][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.787072][ T4238] usb 2-1: config 0 descriptor?? [ 76.814328][ T4360] loop2: detected capacity change from 0 to 32768 [ 76.845760][ T4238] cp210x 2-1:0.0: cp210x converter detected [ 76.925695][ T4388] ======================================================= [ 76.925695][ T4388] WARNING: The mand mount option has been deprecated and [ 76.925695][ T4388] and is ignored by this kernel. Remove the mand [ 76.925695][ T4388] option from the mount to silence this warning. [ 76.925695][ T4388] ======================================================= [ 77.033722][ T4360] XFS (loop2): Mounting V5 Filesystem [ 77.076278][ T4388] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 77.096980][ T4388] REISERFS (device loop0): using ordered data mode [ 77.103586][ T4388] reiserfs: using flush barriers [ 77.125797][ T4388] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 77.143483][ T4388] REISERFS (device loop0): checking transaction log (loop0) [ 77.169209][ T4388] REISERFS (device loop0): Using r5 hash to sort names [ 77.210496][ T4388] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 77.281898][ T4360] XFS (loop2): Ending clean mount [ 77.309918][ T4388] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 77.382822][ T4406] EXT4-fs (loop3): inline encryption not supported [ 77.425463][ T4406] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.56: bad orphan inode 15 [ 77.484419][ T4238] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 77.506634][ T4406] ext4_test_bit(bit=14, block=5) = 0 [ 77.512101][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,inlinecrypt,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 77.535424][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.545230][ T4238] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 77.558712][ T4406] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #11: block 14: comm syz.3.56: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=255, size=1024 fake=1 [ 77.611348][ T4238] usb 2-1: cp210x converter now attached to ttyUSB0 [ 77.621927][ T4192] XFS (loop2): Unmounting Filesystem [ 77.678405][ T4238] usb 2-1: USB disconnect, device number 3 [ 77.754427][ T4238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 77.798870][ T4238] cp210x 2-1:0.0: device disconnected [ 77.982837][ T4418] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.63'. [ 78.004875][ T4414] set_capacity_and_notify: 2 callbacks suppressed [ 78.004894][ T4414] loop4: detected capacity change from 0 to 4096 [ 78.339502][ T4430] loop3: detected capacity change from 0 to 2048 [ 78.411370][ T4433] loop1: detected capacity change from 0 to 1024 [ 78.433243][ T4331] loop3: p1 < > p4 [ 78.433243][ T4331] p4: [ 78.467219][ T4331] loop3: p4 size 722688 extends beyond EOD, truncated [ 78.490468][ T4433] EXT4-fs (loop1): Unrecognized mount option "rootcontext=unconfined_u" or missing value [ 78.532813][ T4430] loop3: p1 < > p4 [ 78.532813][ T4430] p4: [ 78.597745][ T4430] loop3: p4 size 722688 extends beyond EOD, truncated [ 78.893082][ T4443] loop0: detected capacity change from 0 to 32768 [ 78.982408][ T4443] XFS (loop0): sunit and swidth must be specified together [ 79.121432][ T4455] loop3: detected capacity change from 0 to 512 [ 79.232301][ T4459] mmap: syz.1.80 (4459) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 79.265839][ T4455] EXT4-fs (loop3): Ignoring removed nobh option [ 79.272392][ T4455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.374137][ T4455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.448999][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 79.460479][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 79.502535][ T4455] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.531498][ T4457] loop0: detected capacity change from 0 to 8192 [ 79.610308][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 79.637598][ T4455] EXT4-fs (loop3): 1 truncate cleaned up [ 79.657607][ T4331] udevd[4331]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 79.664619][ T4455] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 79.737175][ T4457] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 79.754390][ T4457] REISERFS (device loop0): using ordered data mode [ 79.786331][ T4457] reiserfs: using flush barriers [ 79.841868][ T4457] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 79.934918][ T4457] REISERFS (device loop0): checking transaction log (loop0) [ 80.094398][ T4464] loop1: detected capacity change from 0 to 32768 [ 80.125544][ T4450] loop4: detected capacity change from 0 to 32768 [ 80.191991][ T4464] find_entry called with index = 0 [ 80.201796][ T4475] hfs: can't find a HFS filesystem on dev nullb0 [ 80.255593][ T4464] read_mapping_page failed! [ 80.264161][ T4464] ERROR: (device loop1): txCommit: [ 80.264161][ T4464] [ 80.267726][ T4450] JBD2: Ignoring recovery information on journal [ 80.331925][ T4457] REISERFS (device loop0): Using tea hash to sort names [ 80.379186][ T4450] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 80.395211][ T4457] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 80.426204][ T4477] jfs_unlink: dtDelete returned -116 [ 80.432029][ T4477] jfs_unlink: dtDelete returned -116 [ 80.584229][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 80.639433][ T4450] (syz.4.76,4450,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 80.651672][ T4489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 80.710895][ T4450] (syz.4.76,4450,0):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 3934730872549885558 failed -12 [ 80.769676][ T4491] loop3: detected capacity change from 0 to 512 [ 80.773831][ T4450] (syz.4.76,4450,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12 [ 80.825471][ T4450] (syz.4.76,4450,0):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12 [ 80.866081][ T4491] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 80.935996][ T4450] (syz.4.76,4450,1):ocfs2_test_inode_bit:2874 ERROR: status = -12 [ 80.944110][ T4450] (syz.4.76,4450,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 80.973957][ T4491] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 81.024259][ T4491] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #13: comm syz.3.94: iget: bad i_size value: 12154757448730 [ 81.065794][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 81.126000][ T4491] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.94: couldn't read orphan inode 13 (err -117) [ 81.171364][ T4491] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x0000000000000002,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 81.337218][ T4503] loop2: detected capacity change from 0 to 128 [ 81.462440][ T4511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 81.488921][ T4507] hfs: unable to locate alternate MDB [ 81.496996][ T4503] FAT-fs (loop2): Directory bread(block 1736) failed [ 81.524253][ T4507] hfs: continuing without an alternate MDB [ 81.549382][ T4503] FAT-fs (loop2): Directory bread(block 1737) failed [ 81.618072][ T4503] FAT-fs (loop2): Directory bread(block 1738) failed [ 81.637528][ T4515] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 81.637528][ T4515] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 81.637528][ T4515] [ 81.654663][ T4503] FAT-fs (loop2): Directory bread(block 1739) failed [ 81.662027][ T4503] FAT-fs (loop2): Directory bread(block 1740) failed [ 81.714252][ T4515] EXT4-fs (loop4): Ignoring removed orlov option [ 81.723691][ T4503] FAT-fs (loop2): Directory bread(block 1741) failed [ 81.732843][ T4503] FAT-fs (loop2): Directory bread(block 1742) failed [ 81.759555][ T4503] FAT-fs (loop2): Directory bread(block 1743) failed [ 81.781480][ T4503] FAT-fs (loop2): Directory bread(block 1744) failed [ 81.790730][ T4503] FAT-fs (loop2): Directory bread(block 1745) failed [ 81.806505][ T4515] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,orlov,,errors=continue. Quota mode: writeback. [ 82.728048][ T4532] (syz.3.111,4532,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.787021][ T4560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'. [ 82.799193][ T4532] (syz.3.111,4532,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.869606][ T4532] JBD2: Ignoring recovery information on journal [ 82.911913][ T4567] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.126'. [ 82.988342][ T4532] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 83.080211][ T4576] device bridge0 entered promiscuous mode [ 83.422445][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 83.669718][ T4598] validate_nla: 44 callbacks suppressed [ 83.669736][ T4598] netlink: 'syz.1.136': attribute type 2 has an invalid length. [ 83.877340][ T4610] netlink: 'syz.4.140': attribute type 21 has an invalid length. [ 83.920792][ T4610] netlink: 'syz.4.140': attribute type 1 has an invalid length. [ 84.243363][ T4628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 84.475107][ T4629] set_capacity_and_notify: 3 callbacks suppressed [ 84.475124][ T4629] loop0: detected capacity change from 0 to 8192 [ 84.559592][ T4650] loop4: detected capacity change from 0 to 64 [ 84.610333][ T4629] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 84.648425][ T4629] REISERFS (device loop0): using ordered data mode [ 84.690949][ T4629] reiserfs: using flush barriers [ 84.764293][ T4629] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.824530][ T4629] REISERFS (device loop0): checking transaction log (loop0) [ 84.936728][ T4664] loop3: detected capacity change from 0 to 512 [ 84.986493][ T4664] EXT4-fs (loop3): Ignoring removed oldalloc option [ 85.039466][ T4664] EXT4-fs (loop3): 1 truncate cleaned up [ 85.072160][ T4664] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 85.150154][ T4653] loop1: detected capacity change from 0 to 32768 [ 85.217931][ T4629] REISERFS (device loop0): Using tea hash to sort names [ 85.230475][ T4629] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 85.245567][ T4653] [ 85.245567][ T4653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.245567][ T4653] [ 85.309423][ T4671] loop2: detected capacity change from 0 to 4096 [ 85.331911][ T4629] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 85.343853][ T4653] [ 85.343853][ T4653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.343853][ T4653] [ 85.443307][ T4653] [ 85.443307][ T4653] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.443307][ T4653] [ 85.574234][ T275] [ 85.574234][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.574234][ T275] [ 85.616203][ T4671] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 85.654467][ T4671] ntfs3: loop2: Failed to load $Extend. [ 85.755653][ T4190] [ 85.755653][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.755653][ T4190] [ 85.796392][ T4190] [ 85.796392][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.796392][ T4190] [ 85.930167][ T4192] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 85.995014][ T4192] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 86.043268][ T4687] loop4: detected capacity change from 0 to 1024 [ 86.365635][ T4698] [U] [ 86.385734][ T1225] hfsplus: b-tree write err: -5, ino 25 [ 86.391533][ T1225] hfsplus: b-tree write err: -5, ino 4 [ 86.436970][ T1225] hfsplus: b-tree write err: -5, ino 2 [ 86.817626][ T23] cfg80211: failed to load regulatory.db [ 86.827753][ T4721] tipc: Started in network mode [ 86.833165][ T4721] tipc: Node identity 00000000000000000000030000000001, cluster identity 4711 [ 86.913205][ T4723] loop0: detected capacity change from 0 to 128 [ 86.925377][ T4721] tipc: Enabling of bearer rejected, failed to enable media [ 86.981803][ T4723] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 87.024812][ T4238] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.054644][ T4723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.283294][ T4737] loop2: detected capacity change from 0 to 2048 [ 87.304848][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 87.392372][ T4743] loop4: detected capacity change from 0 to 512 [ 87.406095][ T4740] loop0: detected capacity change from 0 to 1764 [ 87.424565][ T4238] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.463805][ T4745] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.474360][ T4238] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 87.474487][ T4238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.474524][ T4238] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 87.474549][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.513796][ T4238] usb 4-1: config 0 descriptor?? [ 87.547638][ T4743] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 87.570538][ T4740] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 87.597905][ T4743] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 87.625764][ T4743] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.739561][ T4743] Quota error (device loop4): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 87.763848][ T4743] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 87.803099][ T4743] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.196: Failed to acquire dquot type 1 [ 87.859952][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 87.936125][ T4743] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 88.046338][ T4238] koneplus 0003:1E7D:2D51.0002: unknown main item tag 0x0 [ 88.056958][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.063921][ T4743] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.196: corrupted inode contents [ 88.078349][ T4238] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.04 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 88.134066][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.140651][ T4743] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.196: mark_inode_dirty error [ 88.233167][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.270863][ T4743] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.196: corrupted inode contents [ 88.283584][ T4762] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 88.313234][ T4238] usb 4-1: USB disconnect, device number 2 [ 88.332680][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.354732][ T4743] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.196: mark_inode_dirty error [ 88.384148][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.420258][ T4743] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.196: corrupted inode contents [ 88.471136][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.483716][ T4762] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 88.499872][ T4743] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 88.564350][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.581193][ T4743] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.196: corrupted inode contents [ 88.616889][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.623617][ T4743] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.196: mark_inode_dirty error [ 88.642592][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.652343][ T4743] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 88.694787][ T4743] EXT4-fs (loop4): Remounting filesystem read-only [ 88.704462][ T4743] EXT4-fs (loop4): 1 truncate cleaned up [ 88.710211][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000004,noblock_validity,jqfmt=vfsold,nodelalloc,errors=remount-ro,nomblk_io_submit,nojournal_checksum,mb_optimize_scan=0x0000000000000001,resgid=0x00000000000000002. Quota mode: writeback. [ 88.754109][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.824318][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 88.988192][ T4784] process 'syz.3.215' launched '/dev/fd/3' with NULL argv: empty string added [ 89.004147][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 89.060540][ T4786] netlink: 436 bytes leftover after parsing attributes in process `syz.4.214'. [ 89.123280][ T4786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 89.133080][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.149580][ T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 89.179178][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.206758][ T23] usb 3-1: config 0 descriptor?? [ 89.244314][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 89.263752][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 89.277914][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 89.304483][ T7] usb 1-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 89.347513][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.375172][ T7] usb 1-1: config 0 descriptor?? [ 89.424542][ T4775] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 89.452792][ T4790] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 89.492162][ T4790] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 89.519101][ T4799] set_capacity_and_notify: 2 callbacks suppressed [ 89.519117][ T4799] loop3: detected capacity change from 0 to 512 [ 89.544898][ T4800] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.558957][ T4790] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 89.600224][ T4799] EXT4-fs (loop3): Ignoring removed oldalloc option [ 89.607328][ T4790] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 89.621448][ T4799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.679585][ T4790] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 89.702263][ T23] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0003/input/input5 [ 89.721262][ T4799] EXT4-fs (loop3): 1 truncate cleaned up [ 89.729665][ T4790] ntfs: volume version 3.1. [ 89.741861][ T4799] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 89.763928][ T4790] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 89.809416][ T23] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0042.0003/input/input6 [ 89.832765][ T23] uclogic 0003:5543:0042.0003: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 89.840380][ T4790] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 89.909309][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x2 [ 89.950675][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x0 [ 89.967536][ T4803] loop4: detected capacity change from 0 to 4096 [ 89.989104][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x1 [ 89.996491][ T4790] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 90.040099][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x0 [ 90.074110][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x2 [ 90.100417][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x0 [ 90.111540][ T4803] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 90.133547][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x0 [ 90.152292][ T7] wacom 0003:056A:0069.0004: unknown main item tag 0x0 [ 90.195812][ T7] wacom 0003:056A:0069.0004: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 90.247043][ T4235] usb 3-1: USB disconnect, device number 2 [ 90.253782][ T7] wacom 0003:056A:0069.0004: hidraw1: USB HID v0.05 Device [HID 056a:0069] on usb-dummy_hcd.0-1/input0 [ 90.322914][ T7] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0069.0004/input/input7 [ 90.467480][ T7] usb 1-1: USB disconnect, device number 2 [ 90.625898][ T4816] syz.3.227 uses obsolete (PF_INET,SOCK_PACKET) [ 90.698873][ T4818] loop4: detected capacity change from 0 to 1024 [ 90.737163][ T4813] fido_id[4813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.765268][ T4818] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 90.813607][ T4818] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 90.845067][ T4818] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.876412][ T4827] xt_policy: too many policy elements [ 90.921165][ T4818] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 90.922719][ T4829] loop1: detected capacity change from 0 to 1024 [ 90.943854][ T4818] System zones: 0-1, 3-36 [ 90.968883][ T4829] EXT4-fs (loop1): Ignoring removed bh option [ 91.017315][ T4833] loop2: detected capacity change from 0 to 512 [ 91.030701][ T4818] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,nobarrier,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 91.061112][ T4829] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,journal_ioprio=0x0000000000000003,lazytime,inode_readahead_blks=0x0000000000008000,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none. [ 91.156079][ T4833] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.2.234: corrupted xattr block 95 [ 91.172390][ T4833] EXT4-fs (loop2): Remounting filesystem read-only [ 91.191768][ T4833] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.234: bg 0: block 7: invalid block bitmap [ 91.262409][ T4833] EXT4-fs (loop2): Remounting filesystem read-only [ 91.269803][ T4833] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 91.281608][ T4833] EXT4-fs (loop2): Remounting filesystem read-only [ 91.288756][ T4833] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #11: comm syz.2.234: corrupted xattr block 95 [ 91.309184][ T4833] EXT4-fs (loop2): Remounting filesystem read-only [ 91.316051][ T4833] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117) [ 91.326043][ T4833] EXT4-fs (loop2): 1 orphan inode deleted [ 91.331825][ T4833] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,errors=remount-ro,init_itable,block_validity,noquota,lazytime,. Quota mode: none. [ 91.376163][ T4845] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 91.404105][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.407953][ T4833] EXT4-fs warning (device loop2): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 91.421894][ T4847] loop1: detected capacity change from 0 to 1024 [ 91.482279][ T4849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.242'. [ 91.490894][ T4849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.242'. [ 91.637718][ T4853] loop4: detected capacity change from 0 to 64 [ 91.662310][ T154] hfsplus: b-tree write err: -5, ino 25 [ 91.679302][ T154] hfsplus: b-tree write err: -5, ino 4 [ 91.685426][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 91.712111][ T154] hfsplus: b-tree write err: -5, ino 2 [ 91.818452][ T4857] loop3: detected capacity change from 0 to 4096 [ 91.834405][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.851259][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.861699][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.875941][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.891522][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.935115][ T13] usb 1-1: config 0 descriptor?? [ 91.992357][ T4864] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.124163][ T1107] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 92.446888][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.480101][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.498160][ T1107] usb 3-1: not running at top speed; connect to a high speed hub [ 92.504276][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.557872][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.575568][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.594302][ T1107] usb 3-1: config 1 has an invalid interface number: 35 but max is 0 [ 92.598664][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.616287][ T1107] usb 3-1: config 1 has no interface number 0 [ 92.622879][ T1107] usb 3-1: config 1 interface 35 altsetting 6 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 92.631712][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.664383][ T1107] usb 3-1: config 1 interface 35 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 92.684085][ T1107] usb 3-1: config 1 interface 35 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 92.694249][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.709510][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.714445][ T1107] usb 3-1: config 1 interface 35 has no altsetting 0 [ 92.720869][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.736799][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.748093][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.758264][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.760972][ T4879] loop3: detected capacity change from 0 to 4096 [ 92.765625][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.787174][ T13] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 92.799293][ T13] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input10 [ 92.832082][ T13] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 92.854752][ T13] usb 1-1: USB disconnect, device number 3 [ 92.873644][ T4879] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 92.894990][ T1107] usb 3-1: New USB device found, idVendor=054c, idProduct=0144, bcdDevice=49.75 [ 92.910153][ T4879] ntfs3: loop3: Failed to load $Extend. [ 92.916099][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.927074][ T1107] usb 3-1: Product: syz [ 92.931298][ T1107] usb 3-1: Manufacturer: syz [ 92.937436][ T1107] usb 3-1: SerialNumber: syz [ 92.954337][ T4195] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.174417][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.195987][ T4195] usb 2-1: Using ep0 maxpacket: 32 [ 93.296280][ T1107] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 93.314659][ T4195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.331624][ T1107] visor 3-1:1.35: Sony Clie 5.0 converter detected [ 93.337592][ T4888] loop3: detected capacity change from 0 to 2048 [ 93.341974][ T4195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.358583][ T4886] fido_id[4886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 93.373535][ T1107] usb 3-1: Sony Clie 5.0 converter now attached to ttyUSB0 [ 93.387226][ T4195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 93.411535][ T1107] usb 3-1: Sony Clie 5.0 converter now attached to ttyUSB1 [ 93.421665][ T4195] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 93.441357][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 93.465883][ T1107] usb 3-1: USB disconnect, device number 3 [ 93.474262][ T4888] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 93.489642][ T1107] clie_5 ttyUSB0: Sony Clie 5.0 converter now disconnected from ttyUSB0 [ 93.529037][ T4888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.558363][ T1107] clie_5 ttyUSB1: Sony Clie 5.0 converter now disconnected from ttyUSB1 [ 93.567370][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.599849][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.622030][ T1107] visor 3-1:1.35: device disconnected [ 93.636000][ T23] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 93.654598][ T4195] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 93.682178][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 93.691462][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.707052][ T4195] usb 2-1: Product: syz [ 93.721312][ T23] usb 5-1: config 0 descriptor?? [ 93.726815][ T4195] usb 2-1: Manufacturer: syz [ 93.731476][ T4195] usb 2-1: SerialNumber: syz [ 93.739448][ T4195] usb 2-1: config 0 descriptor?? [ 93.786585][ T4195] usb 2-1: no audio or video endpoints found [ 94.005660][ T1107] usb 2-1: USB disconnect, device number 4 [ 94.009220][ T4900] attempt to access beyond end of device [ 94.009220][ T4900] loop2: rw=0, want=5780, limit=1024 [ 94.062319][ T4906] attempt to access beyond end of device [ 94.062319][ T4906] loop2: rw=0, want=5780, limit=1024 [ 94.216815][ T23] zydacron 0003:13EC:0006.0006: item fetching failed at offset 0/2 [ 94.257796][ T23] zydacron 0003:13EC:0006.0006: parse failed [ 94.278035][ T23] zydacron: probe of 0003:13EC:0006.0006 failed with error -22 [ 94.450876][ T4238] usb 5-1: USB disconnect, device number 2 [ 94.491693][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 94.615817][ T4924] netlink: 108 bytes leftover after parsing attributes in process `syz.0.275'. [ 94.645720][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 94.655918][ T4924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'. [ 94.669068][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 94.678058][ T4926] netlink: 'syz.3.277': attribute type 14 has an invalid length. [ 94.686250][ T4926] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 95.045990][ T4948] smc: net device wlan0 applied user defined pnetid SYZ0 [ 95.121893][ T4951] set_capacity_and_notify: 3 callbacks suppressed [ 95.121910][ T4951] loop4: detected capacity change from 0 to 1024 [ 95.466319][ T4973] [U] „ [ 95.602428][ T4981] loop0: detected capacity change from 0 to 128 [ 95.645432][ T4968] loop2: detected capacity change from 0 to 8192 [ 95.710594][ T4981] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 95.741083][ T4968] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 95.775553][ T4968] REISERFS (device loop2): using ordered data mode [ 95.782301][ T4968] reiserfs: using flush barriers [ 95.794470][ T4968] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.839122][ T4981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.941065][ T4968] REISERFS (device loop2): checking transaction log (loop2) [ 96.002136][ T4968] REISERFS (device loop2): Using r5 hash to sort names [ 96.049244][ T4968] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 96.103919][ T4981] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 96.184940][ T4997] loop4: detected capacity change from 0 to 512 [ 96.187038][ T4993] loop3: detected capacity change from 0 to 4096 [ 96.275337][ T4993] ntfs3: Invalid value for gid. [ 96.294603][ T4997] EXT4-fs (loop4): Ignoring removed bh option [ 96.300860][ T4997] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.390306][ T4997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.483536][ T4997] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.311: Invalid block bitmap block 0 in block_group 0 [ 96.677543][ T4997] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 96.695104][ T4997] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.311: attempt to clear invalid blocks 983261 len 1 [ 96.729893][ T4997] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.311: Invalid inode table block 0 in block_group 0 [ 96.784943][ T4997] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 96.795759][ T5010] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 96.823476][ T4997] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 96.868108][ T4997] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.311: Invalid inode table block 0 in block_group 0 [ 96.924451][ T4997] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 96.950443][ T4997] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.311: mark_inode_dirty error [ 96.998679][ T4997] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 97.013855][ T5016] CUSE: unknown device info "" [ 97.064356][ T5016] CUSE: zero length info key specified [ 97.081341][ T4997] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.311: Invalid inode table block 0 in block_group 0 [ 97.134670][ T4997] EXT4-fs (loop4): 1 truncate cleaned up [ 97.140477][ T4997] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,grpquota,bh,noblock_validity,,errors=continue. Quota mode: writeback. [ 97.258342][ T5023] loop3: detected capacity change from 0 to 128 [ 97.288387][ T5025] loop0: detected capacity change from 0 to 512 [ 97.302015][ T5022] loop2: detected capacity change from 0 to 1024 [ 97.346923][ T5023] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 97.369711][ T5025] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.387203][ T5023] affs: Error parsing options [ 97.453422][ T5025] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.322: Allocating blocks 41-42 which overlap fs metadata [ 97.542223][ T5025] __quota_error: 8 callbacks suppressed [ 97.542240][ T5025] Quota error (device loop0): write_blk: dquota write failed [ 97.556512][ T5025] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 97.567742][ T5025] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.322: Allocating blocks 41-42 which overlap fs metadata [ 97.596983][ T5025] Quota error (device loop0): write_blk: dquota write failed [ 97.619982][ T5025] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 97.638406][ T5022] hfsplus: invalid length 1280 has been corrected to 255 [ 97.658091][ T5025] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.322: Failed to acquire dquot type 1 [ 97.706069][ T5025] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 97.754227][ T5025] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.322: corrupted inode contents [ 97.875282][ T5025] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #12: comm syz.0.322: mark_inode_dirty error [ 97.931470][ T5045] loop2: detected capacity change from 0 to 512 [ 97.944825][ T5025] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.322: corrupted inode contents [ 97.973742][ T5025] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.322: mark_inode_dirty error [ 98.000931][ T5025] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.322: corrupted inode contents [ 98.020381][ T5025] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 98.031032][ T5025] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.322: corrupted inode contents [ 98.085713][ T5025] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.322: mark_inode_dirty error [ 98.099240][ T5045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.329: bg 0: block 4: invalid block bitmap [ 98.167546][ T5045] EXT4-fs (loop2): Remounting filesystem read-only [ 98.181046][ T5025] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 98.192429][ T5050] ALSA: mixer_oss: invalid OSS volume 'ãì TÁÑ`Uó9u&þ½t»3+ý²ÈݺÛ' [ 98.229503][ T5045] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 98.241199][ T5025] EXT4-fs (loop0): 1 truncate cleaned up [ 98.276966][ T5045] EXT4-fs (loop2): Remounting filesystem read-only [ 98.290366][ T5025] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 98.292539][ T5045] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.329: invalid indirect mapped block 1 (level 1) [ 98.316978][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.428623][ T5039] loop1: detected capacity change from 0 to 32768 [ 98.436470][ T5045] EXT4-fs (loop2): Remounting filesystem read-only [ 98.443248][ T5045] EXT4-fs (loop2): 1 truncate cleaned up [ 98.451729][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 98.561948][ T5039] XFS (loop1): Mounting V5 Filesystem [ 98.684247][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.748248][ T5039] XFS (loop1): Ending clean mount [ 98.827536][ T5068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.338'. [ 98.845281][ T5064] FAT-fs (loop0): Directory bread(block 64) failed [ 98.851929][ T5064] FAT-fs (loop0): Directory bread(block 65) failed [ 98.903633][ T5064] FAT-fs (loop0): Directory bread(block 66) failed [ 98.940227][ T5064] FAT-fs (loop0): Directory bread(block 67) failed [ 98.984571][ T5064] FAT-fs (loop0): Directory bread(block 68) failed [ 98.991390][ T5064] FAT-fs (loop0): Directory bread(block 69) failed [ 98.994327][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 99.029774][ T4190] XFS (loop1): Unmounting Filesystem [ 99.035526][ T5064] FAT-fs (loop0): Directory bread(block 70) failed [ 99.042937][ T5064] FAT-fs (loop0): Directory bread(block 71) failed [ 99.051259][ T5064] FAT-fs (loop0): Directory bread(block 72) failed [ 99.058357][ T5064] FAT-fs (loop0): Directory bread(block 73) failed [ 99.170634][ T4235] usb 4-1: config index 0 descriptor too short (expected 18, got 10) [ 99.200546][ T4235] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 99.227187][ T4235] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 99.424605][ T4235] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 99.461313][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.486692][ T4235] usb 4-1: Product: syz [ 99.512332][ T4235] usb 4-1: Manufacturer: syz [ 99.517492][ T4235] usb 4-1: SerialNumber: syz [ 99.796665][ T5091] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.822186][ T5088] FAT-fs (loop1): Directory bread(block 64) failed [ 99.849472][ T5088] FAT-fs (loop1): Directory bread(block 65) failed [ 99.869930][ T4235] usb 4-1: USB disconnect, device number 3 [ 99.878667][ T5091] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.885806][ T5088] FAT-fs (loop1): Directory bread(block 66) failed [ 99.911167][ T5088] FAT-fs (loop1): Directory bread(block 67) failed [ 99.945552][ T5088] FAT-fs (loop1): Directory bread(block 68) failed [ 99.972616][ T5088] FAT-fs (loop1): Directory bread(block 69) failed [ 99.995728][ T5088] FAT-fs (loop1): Directory bread(block 70) failed [ 100.002536][ T5088] FAT-fs (loop1): Directory bread(block 71) failed [ 100.050308][ T5088] FAT-fs (loop1): Directory bread(block 72) failed [ 100.073509][ T5088] FAT-fs (loop1): Directory bread(block 73) failed [ 100.116619][ T1137] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.153063][ T5078] set_capacity_and_notify: 4 callbacks suppressed [ 100.153080][ T5078] loop2: detected capacity change from 0 to 32768 [ 100.308963][ T5078] XFS (loop2): Mounting V5 Filesystem [ 100.420131][ T5078] XFS (loop2): Ending clean mount [ 100.450001][ T5078] XFS (loop2): Quotacheck needed: Please wait. [ 100.561154][ T5078] XFS (loop2): Quotacheck: Done. [ 100.605552][ T5116] loop4: detected capacity change from 0 to 16 [ 100.659985][ T4192] XFS (loop2): Unmounting Filesystem [ 100.685646][ T5116] erofs: (device loop4): mounted with root inode @ nid 36. [ 101.019419][ T5127] loop1: detected capacity change from 0 to 256 [ 101.163195][ T5127] FAT-fs (loop1): Directory bread(block 64) failed [ 101.174265][ T5127] FAT-fs (loop1): Directory bread(block 65) failed [ 101.188847][ T5127] FAT-fs (loop1): Directory bread(block 66) failed [ 101.204310][ T5127] FAT-fs (loop1): Directory bread(block 67) failed [ 101.214558][ T5127] FAT-fs (loop1): Directory bread(block 68) failed [ 101.221159][ T5127] FAT-fs (loop1): Directory bread(block 69) failed [ 101.252044][ T5127] FAT-fs (loop1): Directory bread(block 70) failed [ 101.264154][ T5127] FAT-fs (loop1): Directory bread(block 71) failed [ 101.288001][ T5127] FAT-fs (loop1): Directory bread(block 72) failed [ 101.307755][ T5127] FAT-fs (loop1): Directory bread(block 73) failed [ 101.394093][ T1327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.667040][ T5150] loop2: detected capacity change from 0 to 1024 [ 101.689157][ T5144] loop0: detected capacity change from 0 to 8192 [ 101.740212][ T5144] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.754154][ T5150] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 101.774377][ T1327] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 101.798079][ T1327] usb 4-1: config 2 has no interface number 0 [ 101.833616][ T1327] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 101.871777][ T1327] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 101.918830][ T1327] usb 4-1: config 2 interface 43 has no altsetting 0 [ 102.119685][ T1327] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 102.149318][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.183248][ T1327] usb 4-1: Product: syz [ 102.203013][ T1327] usb 4-1: Manufacturer: syz [ 102.224130][ T1327] usb 4-1: SerialNumber: syz [ 102.294635][ T5133] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.309844][ T5133] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.338539][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 102.490441][ T5168] loop2: detected capacity change from 0 to 64 [ 102.491561][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 102.593865][ T5133] udc-core: couldn't find an available UDC or it's busy [ 102.625834][ T5133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.641328][ T5171] loop0: detected capacity change from 0 to 164 [ 102.681216][ T5152] loop1: detected capacity change from 0 to 40427 [ 102.735272][ T1327] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 102.758912][ T5171] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 102.780704][ T5152] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.792413][ T1327] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 102.816364][ T5152] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.846902][ T5152] F2FS-fs (loop1): invalid crc value [ 102.859196][ T1327] ums-usbat: probe of 4-1:2.43 failed with error 3 [ 102.897254][ T1327] usb 4-1: USB disconnect, device number 4 [ 102.966792][ T5152] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.003464][ T5137] loop4: detected capacity change from 0 to 65536 [ 103.104140][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.116631][ T5152] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.146313][ T5137] XFS (loop4): Mounting V5 Filesystem [ 103.159777][ T5152] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.224330][ T5137] XFS (loop4): Ending clean mount [ 103.281916][ T5137] XFS (loop4): Quotacheck needed: Please wait. [ 103.354228][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 103.413841][ T5137] XFS (loop4): Quotacheck: Done. [ 103.474458][ T23] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.511515][ T23] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.528454][ T4197] XFS (loop4): Unmounting Filesystem [ 103.562834][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.576130][ T23] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 103.584416][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.593926][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.602806][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.621496][ T23] usb 3-1: config 0 descriptor?? [ 103.844330][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 104.010193][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.015247][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 104.059712][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 104.116335][ T23] corsair 0003:1B1C:1B3E.0007: unknown main item tag 0x0 [ 104.125877][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.145076][ T5203] netlink: 91 bytes leftover after parsing attributes in process `syz.1.390'. [ 104.147228][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 104.175488][ T23] corsair 0003:1B1C:1B3E.0007: hidraw0: USB HID vff.ff Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 104.239606][ T13] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 104.259977][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.298763][ T13] usb 1-1: Product: syz [ 104.304333][ T13] usb 1-1: Manufacturer: syz [ 104.309075][ T13] usb 1-1: SerialNumber: syz [ 104.330514][ T23] usb 3-1: USB disconnect, device number 4 [ 104.339208][ T13] usb 1-1: config 0 descriptor?? [ 104.354339][ T1107] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 104.370102][ T5206] fido_id[5206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 104.385894][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.413607][ T1107] usb 4-1: Product: syz [ 104.433856][ T1107] usb 4-1: Manufacturer: syz [ 104.453090][ T1107] usb 4-1: SerialNumber: syz [ 104.636244][ T1110] usb 1-1: USB disconnect, device number 4 [ 104.800636][ T5212] loop1: detected capacity change from 0 to 32768 [ 104.874703][ T1107] usb 4-1: MIDIStreaming interface descriptor not found [ 105.000913][ T5222] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 105.016525][ T5222] EXT4-fs (loop2): inline encryption not supported [ 105.028133][ T5222] EXT4-fs (loop2): Test dummy encryption mode enabled [ 105.043831][ T1107] usb 4-1: USB disconnect, device number 5 [ 105.056403][ T5214] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 105.064249][ T5214] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 105.070108][ T5222] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 105.081699][ T5222] System zones: 0-5 [ 105.095062][ T5214] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 105.106612][ T5214] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 105.124471][ T5222] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,dioread_nolock,test_dummy_encryption=v1,errors=continue,delalloc,nombcache,grpquota,,errors=continue. Quota mode: writeback. [ 105.136021][ T5214] F2FS-fs (loop4): invalid crc value [ 105.215828][ T5214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.322992][ T5212] XFS (loop1): Mounting V5 Filesystem [ 105.452650][ T5212] XFS (loop1): Ending clean mount [ 105.512195][ T5214] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 105.521000][ T4806] udevd[4806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.587430][ T5214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.656130][ T4190] XFS (loop1): Unmounting Filesystem [ 105.756175][ T5214] F2FS-fs (loop4): switch discard_unit option is not allowed [ 106.269205][ T5261] set_capacity_and_notify: 2 callbacks suppressed [ 106.269227][ T5261] loop2: detected capacity change from 0 to 64 [ 106.556761][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 106.584441][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 106.595558][ T5270] netlink: 'syz.4.407': attribute type 13 has an invalid length. [ 106.651488][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 107.218387][ T5274] loop3: detected capacity change from 0 to 32768 [ 107.277145][ T5274] XFS (loop3): Mounting V5 Filesystem [ 107.371387][ T5274] XFS (loop3): Ending clean mount [ 107.486497][ T4191] XFS (loop3): Unmounting Filesystem [ 107.504625][ T5299] loop2: detected capacity change from 0 to 256 [ 107.525211][ T5299] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.611320][ T5299] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.960339][ T5307] loop4: detected capacity change from 0 to 64 [ 107.981389][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 108.079995][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 108.134296][ T5305] netlink: 'syz.1.428': attribute type 13 has an invalid length. [ 108.169742][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 108.402716][ T5318] loop3: detected capacity change from 0 to 512 [ 108.528161][ T5318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.422: bg 0: block 4: invalid block bitmap [ 108.586565][ T5318] EXT4-fs (loop3): Remounting filesystem read-only [ 108.609549][ T5318] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 108.680439][ T5318] EXT4-fs (loop3): Remounting filesystem read-only [ 108.704339][ T5318] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.422: invalid indirect mapped block 1 (level 1) [ 108.774600][ T5318] EXT4-fs (loop3): Remounting filesystem read-only [ 108.791725][ T5318] EXT4-fs (loop3): 1 truncate cleaned up [ 108.809694][ T5318] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 108.864846][ T1110] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 109.100203][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.247242][ T5331] loop4: detected capacity change from 0 to 32768 [ 109.284268][ T1110] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 109.297987][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 109.327825][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 109.341324][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.352039][ T1110] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 109.364045][ T5331] blkno = 8ed2c, nblocks = 1 [ 109.369092][ T5331] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 109.369092][ T5331] [ 109.383010][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.400662][ T5331] ERROR: (device loop4): remounting filesystem as read-only [ 109.425325][ T1110] usb 2-1: config 0 descriptor?? [ 109.430813][ T5331] ialloc: diAlloc returned -17! [ 109.444453][ T5323] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.674399][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 109.694537][ T13] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 109.704056][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.712100][ T13] usb 3-1: Product: syz [ 109.717570][ T13] usb 3-1: Manufacturer: syz [ 109.722220][ T13] usb 3-1: SerialNumber: syz [ 109.775908][ T13] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.804488][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.828092][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 109.845634][ T7] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 109.861718][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.884614][ T7] usb 4-1: config 0 descriptor?? [ 109.927044][ T1110] hid-multitouch 0003:1FD2:6007.0008: unknown main item tag 0x1 [ 109.943767][ T1110] hid-multitouch 0003:1FD2:6007.0008: unbalanced delimiter at end of report description [ 109.954906][ T1110] hid-multitouch: probe of 0003:1FD2:6007.0008 failed with error -22 [ 110.160748][ T1110] usb 2-1: USB disconnect, device number 5 [ 110.309351][ T5244] Set syz1 is full, maxelem 65536 reached [ 110.377841][ T7] wacom 0003:056A:0318.0009: ignoring exceeding usage max [ 110.405942][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.424134][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.431236][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.438873][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.454081][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.464679][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.483121][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.504395][ T7] wacom 0003:056A:0318.0009: unknown main item tag 0x0 [ 110.584367][ T13] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 110.631306][ T7] usb 4-1: USB disconnect, device number 6 [ 110.755754][ T5346] loop1: detected capacity change from 0 to 256 [ 110.775735][ T5339] loop4: detected capacity change from 0 to 40427 [ 110.819404][ T5346] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.858238][ T5346] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.887178][ T5339] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 110.921956][ T5339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 110.967027][ T5339] F2FS-fs (loop4): invalid crc value [ 110.999155][ T5339] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.041757][ T7] usb 3-1: USB disconnect, device number 5 [ 111.183879][ T5339] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 111.212338][ T5339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 111.421157][ T5356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 111.641738][ T5362] loop2: detected capacity change from 0 to 512 [ 111.696423][ T13] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 111.710307][ T13] ath9k_htc: Failed to initialize the device [ 111.727120][ T7] usb 3-1: ath9k_htc: USB layer deinitialized [ 111.847497][ T5362] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 111.903269][ T5362] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 111.930323][ T5362] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.449: iget: bad i_size value: 12154757448730 [ 111.982867][ T5351] loop1: detected capacity change from 0 to 32768 [ 111.995765][ T5362] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.449: couldn't read orphan inode 13 (err -117) [ 112.046963][ T5362] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x0000000000000002,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 112.089537][ T5351] JBD2: Ignoring recovery information on journal [ 112.282127][ T5351] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 112.469653][ T5351] (syz.1.444,5351,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 112.494653][ T5351] (syz.1.444,5351,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 3934730872549885558 failed -12 [ 112.551117][ T4208] Bluetooth: hci4: link tx timeout [ 112.557572][ T4208] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.575484][ T5351] (syz.1.444,5351,1):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12 [ 112.585187][ T5351] (syz.1.444,5351,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12 [ 112.668782][ T5351] (syz.1.444,5351,0):ocfs2_test_inode_bit:2874 ERROR: status = -12 [ 112.678005][ T5351] (syz.1.444,5351,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 112.807009][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 112.956268][ T5383] loop4: detected capacity change from 0 to 256 [ 113.034605][ T5383] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.077414][ T5383] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 113.171286][ T5383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 113.491400][ T5400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.462'. [ 114.366320][ T5405] loop4: detected capacity change from 0 to 32768 [ 114.481999][ T5405] find_entry called with index = 0 [ 114.502802][ T5405] read_mapping_page failed! [ 114.507994][ T5405] ERROR: (device loop4): txCommit: [ 114.507994][ T5405] [ 114.571933][ T5412] jfs_unlink: dtDelete returned -116 [ 114.603480][ T5412] jfs_unlink: dtDelete returned -116 [ 114.660230][ T1110] Bluetooth: hci4: command 0x0406 tx timeout [ 114.928511][ T5411] loop2: detected capacity change from 0 to 32768 [ 115.019327][ T5411] XFS (loop2): Mounting V5 Filesystem [ 115.251430][ T5411] XFS (loop2): Ending clean mount [ 115.385298][ T4192] XFS (loop2): Unmounting Filesystem [ 116.054910][ T5445] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.079110][ T5424] loop1: detected capacity change from 0 to 32768 [ 116.211340][ T5424] blkno = 8ed2c, nblocks = 1 [ 116.236977][ T5424] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 116.236977][ T5424] [ 116.295373][ T5424] ERROR: (device loop1): remounting filesystem as read-only [ 116.314307][ T5424] ialloc: diAlloc returned -17! [ 116.823306][ T5468] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.037794][ T5476] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.452092][ T5496] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 117.618993][ T5492] loop4: detected capacity change from 0 to 8192 [ 117.755090][ T5492] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 117.791518][ T5492] REISERFS (device loop4): using ordered data mode [ 117.840751][ T5492] reiserfs: using flush barriers [ 117.852943][ T5492] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.871227][ T5492] REISERFS (device loop4): checking transaction log (loop4) [ 118.022844][ T5367] Set syz1 is full, maxelem 65536 reached [ 118.081686][ T5492] REISERFS (device loop4): Using tea hash to sort names [ 118.131068][ T5492] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 118.174299][ T5492] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 118.185794][ T5484] loop2: detected capacity change from 0 to 32768 [ 118.315208][ T5484] blkno = 8ed2c, nblocks = 1 [ 118.319895][ T5484] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 118.319895][ T5484] [ 118.380979][ T5517] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 118.419283][ T5484] ERROR: (device loop2): remounting filesystem as read-only [ 118.464837][ T5484] ialloc: diAlloc returned -17! [ 118.517356][ T5521] MPTCP: kernel_bind error, err=-22 [ 118.589304][ T5522] [U] [ 118.748890][ T5529] loop4: detected capacity change from 0 to 512 [ 118.834521][ T5529] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.520: invalid indirect mapped block 4294967295 (level 1) [ 118.855853][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 118.862736][ T5529] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.520: invalid indirect mapped block 4294967295 (level 1) [ 118.975570][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 118.987518][ T5529] EXT4-fs (loop4): 2 truncates cleaned up [ 118.993333][ T5529] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,resuid=0x0000000000000000,. Quota mode: writeback. [ 119.179042][ T5529] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.520: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=0, size=1024 fake=0 [ 119.228883][ T5550] loop2: detected capacity change from 0 to 128 [ 119.265929][ T5551] loop3: detected capacity change from 0 to 2048 [ 119.279748][ T5550] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 119.297909][ T5529] EXT4-fs (loop4): Remounting filesystem read-only [ 119.327443][ T5550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.338185][ T5548] loop1: detected capacity change from 0 to 4096 [ 119.359302][ T5552] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.711303][ T4190] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 119.724985][ T4190] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.055967][ T5567] loop1: detected capacity change from 0 to 4096 [ 120.115763][ T5567] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 120.187547][ T5567] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.241771][ T5567] ntfs3: loop1: Failed to load $MFT. [ 120.385033][ T5567] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.428171][ T5592] netlink: 436 bytes leftover after parsing attributes in process `syz.3.549'. [ 120.460023][ T5567] exFAT-fs (loop1): unable to read boot sector [ 120.468474][ T5567] exFAT-fs (loop1): failed to read boot sector [ 120.473804][ T5592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 120.486039][ T5567] exFAT-fs (loop1): failed to recognize exfat type [ 120.765032][ T5607] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.875501][ T5613] loop4: detected capacity change from 0 to 512 [ 120.924116][ T5613] EXT4-fs (loop4): Ignoring removed oldalloc option [ 120.948357][ T5613] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.999810][ T5613] EXT4-fs (loop4): 1 truncate cleaned up [ 121.009424][ T5613] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,user_xattr,,errors=continue. Quota mode: none. [ 121.336074][ T5623] loop3: detected capacity change from 0 to 4096 [ 121.383069][ T5623] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 121.434912][ T5633] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.581'. [ 121.462423][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.533548][ T5637] MPTCP: kernel_bind error, err=-22 [ 121.724139][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 121.731954][ T23] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 121.830799][ T5625] loop1: detected capacity change from 0 to 32768 [ 121.884429][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.928176][ T7] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 121.942175][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.953455][ T7] usb 5-1: config 0 descriptor?? [ 121.964571][ T5625] XFS (loop1): Mounting V5 Filesystem [ 122.114426][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 122.135490][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.170160][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 122.229800][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 122.250683][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.263490][ T5625] XFS (loop1): Ending clean mount [ 122.299334][ T23] usb 3-1: config 0 descriptor?? [ 122.340063][ T5625] XFS (loop1): Quotacheck needed: Please wait. [ 122.345323][ T5635] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.436957][ T7] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.000A/input/input14 [ 122.468113][ T5667] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 122.504932][ T5625] XFS (loop1): Quotacheck: Done. [ 122.536792][ T7] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.000A/input/input15 [ 122.575974][ T7] uclogic 0003:5543:0042.000A: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 122.673419][ T4190] XFS (loop1): Unmounting Filesystem [ 122.685008][ T7] usb 5-1: USB disconnect, device number 3 [ 122.722389][ T5667] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 122.811629][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x2 [ 122.822767][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x0 [ 122.830518][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x1 [ 122.837871][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x0 [ 122.844893][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x2 [ 122.851880][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x0 [ 122.859163][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x0 [ 122.866224][ T23] wacom 0003:056A:0069.000B: unknown main item tag 0x0 [ 122.873796][ T23] wacom 0003:056A:0069.000B: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 122.904660][ T5672] fido_id[5672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 122.954480][ T23] wacom 0003:056A:0069.000B: hidraw1: USB HID v0.05 Device [HID 056a:0069] on usb-dummy_hcd.2-1/input0 [ 122.975780][ T23] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0069.000B/input/input16 [ 123.060108][ T23] usb 3-1: USB disconnect, device number 6 [ 123.281399][ T5674] fido_id[5674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 123.564275][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.705219][ T5689] set_capacity_and_notify: 2 callbacks suppressed [ 123.705235][ T5689] loop4: detected capacity change from 0 to 4096 [ 123.744748][ T5700] xt_policy: too many policy elements [ 123.805507][ T5689] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 123.834261][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 123.877312][ T5689] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 123.899914][ T5705] loop2: detected capacity change from 0 to 1024 [ 123.974467][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.985804][ T5689] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 124.004064][ T7] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 124.037329][ T5689] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 124.050847][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.081754][ T7] usb 1-1: config 0 descriptor?? [ 124.097423][ T5707] loop1: detected capacity change from 0 to 128 [ 124.104906][ T5689] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 124.176601][ T5707] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 124.192904][ T154] hfsplus: b-tree write err: -5, ino 25 [ 124.204603][ T154] hfsplus: b-tree write err: -5, ino 4 [ 124.210224][ T154] hfsplus: b-tree write err: -5, ino 2 [ 124.221658][ T5689] ntfs: volume version 3.1. [ 124.231251][ T5689] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 124.244967][ T5707] hpfs: filesystem error: improperly stopped [ 124.251200][ T5707] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 124.262883][ T5689] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 124.276684][ T5707] hpfs: You really don't want any checks? You are crazy... [ 124.284931][ T5689] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 124.299330][ T5707] hpfs: hpfs_map_sector(): read error [ 124.305070][ T5707] hpfs: code page support is disabled [ 124.310540][ T5689] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 124.323318][ T5707] hpfs: hpfs_map_4sectors(): unaligned read [ 124.344600][ T5689] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 124.375072][ T5707] hpfs: hpfs_map_4sectors(): unaligned read [ 124.381134][ T5707] hpfs: filesystem error: unable to find root dir [ 124.655147][ T7] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.000C/input/input19 [ 124.683223][ T5716] tmpfs: Bad value for 'mpol' [ 124.796588][ T7] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.000C/input/input20 [ 124.852500][ T7] uclogic 0003:5543:0042.000C: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 124.905279][ T7] usb 1-1: USB disconnect, device number 5 [ 125.064236][ T5726] fido_id[5726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 125.523383][ T5742] loop2: detected capacity change from 0 to 4096 [ 125.531534][ T5747] netlink: 'syz.0.619': attribute type 2 has an invalid length. [ 126.285762][ T5785] tipc: Enabling of bearer rejected, failed to enable media [ 126.744358][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 127.178912][ T5795] loop4: detected capacity change from 0 to 32768 [ 127.205461][ T5813] tmpfs: Bad value for 'mpol' [ 127.305622][ T5795] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.642 (5795) [ 127.353282][ T5817] loop1: detected capacity change from 0 to 256 [ 127.445622][ T5795] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 127.498977][ T5817] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d) [ 127.542418][ T5795] BTRFS info (device loop4): using free space tree [ 127.572790][ T5795] BTRFS info (device loop4): has skinny extents [ 127.880714][ T5795] BTRFS info (device loop4): enabling ssd optimizations [ 128.049415][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 128.072144][ T4192] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 128.928901][ T5868] loop3: detected capacity change from 0 to 8192 [ 129.014809][ T5868] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 129.063626][ T5868] REISERFS (device loop3): using ordered data mode [ 129.083661][ T5879] netem: change failed [ 129.170169][ T5868] reiserfs: using flush barriers [ 129.203966][ T5868] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.221894][ T5868] REISERFS (device loop3): checking transaction log (loop3) [ 129.542414][ T5868] REISERFS (device loop3): Using tea hash to sort names [ 129.549963][ T5868] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 129.584173][ T1110] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 129.594673][ T5868] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 129.751349][ T5868] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 129.780727][ T5868] REISERFS (device loop3): Remounting filesystem read-only [ 129.844086][ T1110] usb 2-1: Using ep0 maxpacket: 32 [ 129.974312][ T1110] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 129.988156][ T1110] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 130.020245][ T1110] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 130.051933][ T1110] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 130.102251][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.299964][ T1110] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 130.314828][ T1110] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 130.340875][ T1110] usb 2-1: Product: syz [ 130.364053][ T1110] usb 2-1: Manufacturer: syz [ 130.385237][ T1110] usb 2-1: SerialNumber: syz [ 130.422359][ T1110] usb 2-1: config 0 descriptor?? [ 130.471889][ T1110] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 130.532386][ T1110] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 130.732201][ T1110] usb 2-1: USB disconnect, device number 6 [ 130.757676][ T1110] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 130.892847][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'. [ 130.913349][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'. [ 131.013502][ T5938] loop4: detected capacity change from 0 to 8192 [ 131.164488][ T5938] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 131.191188][ T5938] REISERFS (device loop4): using ordered data mode [ 131.200256][ T5938] reiserfs: using flush barriers [ 131.212880][ T5938] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.253469][ T5938] REISERFS (device loop4): checking transaction log (loop4) [ 131.381360][ T5938] REISERFS (device loop4): Using tea hash to sort names [ 131.389318][ T5938] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 131.404996][ T5938] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 131.473334][ T5938] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 131.485149][ T5938] REISERFS (device loop4): Remounting filesystem read-only [ 131.564388][ T5953] loop3: detected capacity change from 0 to 512 [ 131.633224][ T5962] loop2: detected capacity change from 0 to 128 [ 131.642439][ T5953] EXT4-fs (loop3): Ignoring removed nobh option [ 131.785773][ T5953] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.703: inode has both inline data and extents flags [ 131.820022][ T5953] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.703: couldn't read orphan inode 15 (err -117) [ 131.877985][ T5953] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nobh,,errors=continue. Quota mode: none. [ 132.208377][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 132.538270][ T5997] loop1: detected capacity change from 0 to 2048 [ 132.684471][ T5997] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.819348][ T6011] netlink: 104 bytes leftover after parsing attributes in process `syz.4.727'. [ 132.911133][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.917570][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.153450][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'. [ 133.172261][ T6022] loop3: detected capacity change from 0 to 4096 [ 133.199317][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.733'. [ 133.408687][ T6022] ntfs3: loop3: failed to convert "0080" to cp864 [ 133.489898][ T6041] loop1: detected capacity change from 0 to 512 [ 133.593879][ T6041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.663701][ T6041] EXT4-fs (loop1): 1 truncate cleaned up [ 133.718675][ T6041] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 133.893179][ T6041] EXT4-fs (loop1): re-mounted. Opts: journal_ioprio=0x0000000000000004,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable=0x0000000000000009,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 134.734502][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.979501][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 135.104212][ T23] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 135.122784][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 135.148903][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 135.159990][ T6084] loop4: detected capacity change from 0 to 32768 [ 135.165665][ T23] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 135.193796][ T23] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 135.246362][ T6084] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.760 (6084) [ 135.259233][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.354503][ T6084] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 135.376111][ T6084] BTRFS info (device loop4): force zlib compression, level 3 [ 135.384388][ T6111] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.397552][ T6084] BTRFS info (device loop4): turning on flush-on-commit [ 135.424390][ T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 135.430877][ T6084] BTRFS info (device loop4): max_inline at 4096 [ 135.450942][ T6084] BTRFS info (device loop4): using free space tree [ 135.458656][ T23] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 135.458699][ T23] usb 4-1: Product: syz [ 135.458715][ T23] usb 4-1: Manufacturer: syz [ 135.458732][ T23] usb 4-1: SerialNumber: syz [ 135.475773][ T23] usb 4-1: config 0 descriptor?? [ 135.504950][ T6084] BTRFS info (device loop4): has skinny extents [ 135.555920][ T23] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 135.605981][ T23] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 135.715171][ T6127] loop1: detected capacity change from 0 to 512 [ 135.738511][ T6129] loop2: detected capacity change from 0 to 256 [ 135.797119][ T1110] usb 4-1: USB disconnect, device number 7 [ 135.816290][ T1110] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 135.842333][ T6129] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 135.883585][ T6127] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.904261][ T6127] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.985113][ T6127] EXT4-fs warning (device loop1): verify_group_input:165: Last group not full [ 136.001030][ T6084] BTRFS info (device loop4): enabling ssd optimizations [ 136.351899][ T6142] loop2: detected capacity change from 0 to 4096 [ 136.385903][ T6144] loop1: detected capacity change from 0 to 1024 [ 136.475276][ T6146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.779'. [ 136.491044][ T6144] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 136.512795][ T6144] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.648664][ T6144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 136.689075][ T6150] loop3: detected capacity change from 0 to 128 [ 136.695872][ T6144] System zones: 0-1, 3-36 [ 136.712382][ T6144] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 136.832180][ T6150] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 136.929049][ T6142] ntfs3: loop2: failed to convert "0080" to cp864 [ 136.970093][ T6150] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.998792][ T6150] ext2 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.021201][ T1110] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.494491][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 138.593817][ T6231] loop2: detected capacity change from 0 to 164 [ 138.794346][ T1110] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 138.820786][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.834116][ T1110] usb 5-1: Product: syz [ 138.838360][ T1110] usb 5-1: Manufacturer: syz [ 138.863512][ T1110] usb 5-1: SerialNumber: syz [ 138.937295][ T6240] loop3: detected capacity change from 0 to 256 [ 139.041522][ T6240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 139.518729][ T4238] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 139.599132][ T6245] loop2: detected capacity change from 0 to 32768 [ 139.634201][ T6245] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.822 (6245) [ 139.697365][ T1110] usb 5-1: USB disconnect, device number 4 [ 139.749747][ T6245] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 139.784547][ T6245] BTRFS info (device loop2): force zlib compression, level 3 [ 139.811123][ T6245] BTRFS info (device loop2): turning on flush-on-commit [ 139.820637][ T6245] BTRFS info (device loop2): max_inline at 4096 [ 139.842851][ T6245] BTRFS info (device loop2): using free space tree [ 139.857637][ T6245] BTRFS info (device loop2): has skinny extents [ 139.945295][ T4238] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 139.957492][ T4238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.964660][ T4238] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 139.973867][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.986073][ T4238] usb 2-1: config 0 descriptor?? [ 140.012866][ T6245] BTRFS info (device loop2): enabling ssd optimizations [ 140.015030][ T6247] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.032740][ T6249] loop3: detected capacity change from 0 to 32768 [ 140.141969][ T6249] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.201665][ T6273] loop4: detected capacity change from 0 to 512 [ 140.391885][ T6273] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.444232][ T6273] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.483548][ T6273] EXT4-fs warning (device loop4): verify_group_input:165: Last group not full [ 140.539850][ T4238] kye 0003:0458:501A.000D: unknown main item tag 0x2 [ 140.547326][ T4238] kye 0003:0458:501A.000D: unknown main item tag 0x6 [ 140.554407][ T4238] kye 0003:0458:501A.000D: ignoring exceeding usage max [ 140.565410][ T4238] kye 0003:0458:501A.000D: hidraw0: USB HID v0.81 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 140.577729][ T4238] kye 0003:0458:501A.000D: tablet-enabling feature report not found [ 140.586842][ T4238] kye 0003:0458:501A.000D: tablet enabling failed [ 140.734708][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 140.845928][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 140.862915][ T23] usb 2-1: USB disconnect, device number 7 [ 140.881707][ T4208] Bluetooth: hci4: link tx timeout [ 140.887176][ T4208] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.488329][ T6310] loop2: detected capacity change from 0 to 512 [ 141.587194][ T6310] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 141.608435][ T6310] EXT4-fs (loop2): invalid journal inode [ 141.623532][ T6310] EXT4-fs (loop2): can't get journal size [ 141.691316][ T6310] EXT4-fs (loop2): 1 truncate cleaned up [ 141.723533][ T6310] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 141.863035][ T6326] rdma_op ffff8880244a91f0 conn xmit_rdma 0000000000000000 [ 142.294631][ T6355] loop4: detected capacity change from 0 to 512 [ 142.330505][ T6355] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 142.369136][ T6355] EXT4-fs (loop4): invalid journal inode [ 142.379388][ T6355] EXT4-fs (loop4): can't get journal size [ 142.390849][ T6360] netlink: 88 bytes leftover after parsing attributes in process `syz.0.862'. [ 142.402364][ T6355] EXT4-fs (loop4): 1 truncate cleaned up [ 142.408793][ T6355] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 142.920831][ T6385] loop4: detected capacity change from 0 to 256 [ 143.030354][ T6385] FAT-fs (loop4): Directory bread(block 64) failed [ 143.066654][ T6385] FAT-fs (loop4): Directory bread(block 65) failed [ 143.098211][ T6385] FAT-fs (loop4): Directory bread(block 66) failed [ 143.148793][ T6385] FAT-fs (loop4): Directory bread(block 67) failed [ 143.202592][ T6385] FAT-fs (loop4): Directory bread(block 68) failed [ 143.217345][ T6385] FAT-fs (loop4): Directory bread(block 69) failed [ 143.245597][ T6385] FAT-fs (loop4): Directory bread(block 70) failed [ 143.252270][ T6385] FAT-fs (loop4): Directory bread(block 71) failed [ 143.304623][ T6385] FAT-fs (loop4): Directory bread(block 72) failed [ 143.319980][ T6392] loop3: detected capacity change from 0 to 4096 [ 143.340344][ T6385] FAT-fs (loop4): Directory bread(block 73) failed [ 143.554276][ T6392] ntfs3: loop3: failed to convert "0080" to cp737 [ 143.566141][ T6407] loop2: detected capacity change from 0 to 1024 [ 143.582953][ T6392] ntfs3: loop3: failed to convert name for inode 1e. [ 143.633154][ T6385] attempt to access beyond end of device [ 143.633154][ T6385] loop4: rw=2049, want=1300, limit=256 [ 143.913008][ T6412] loop1: detected capacity change from 0 to 4096 [ 144.180041][ T6412] ntfs3: loop1: failed to convert "0080" to cp737 [ 144.204732][ T6412] ntfs3: loop1: failed to convert name for inode 1e. [ 144.232354][ T6424] loop3: detected capacity change from 0 to 8192 [ 144.265834][ T6424] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 144.285208][ T6424] REISERFS (device loop3): using ordered data mode [ 144.292509][ T6424] reiserfs: using flush barriers [ 144.300280][ T6424] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.317303][ T6424] REISERFS (device loop3): checking transaction log (loop3) [ 144.326286][ T6424] REISERFS (device loop3): Using r5 hash to sort names [ 144.333762][ T6424] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 144.556854][ T6436] loop1: detected capacity change from 0 to 1024 [ 145.205205][ T23] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 145.506840][ T6458] loop4: detected capacity change from 0 to 32768 [ 145.528548][ T6462] loop1: detected capacity change from 0 to 32768 [ 145.564294][ T23] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 145.576009][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.582773][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 145.592600][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.652270][ T23] usb 3-1: config 0 descriptor?? [ 145.704414][ T6452] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.170307][ T23] kye 0003:0458:501A.000E: unknown main item tag 0x2 [ 146.188045][ T23] kye 0003:0458:501A.000E: unknown main item tag 0x6 [ 146.208363][ T23] kye 0003:0458:501A.000E: ignoring exceeding usage max [ 146.259650][ T23] kye 0003:0458:501A.000E: hidraw0: USB HID v0.81 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 146.311722][ T23] kye 0003:0458:501A.000E: tablet-enabling feature report not found [ 146.326956][ T23] kye 0003:0458:501A.000E: tablet enabling failed [ 146.499304][ T23] usb 3-1: USB disconnect, device number 7 [ 146.543815][ T6495] fido_id[6495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 147.182341][ T6521] loop3: detected capacity change from 0 to 2048 [ 147.284659][ T6526] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.373099][ T6521] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 147.431038][ T6529] loop4: detected capacity change from 0 to 64 [ 147.474171][ T6521] Remounting filesystem read-only [ 147.901353][ T6541] netlink: 104 bytes leftover after parsing attributes in process `syz.4.947'. [ 148.212871][ T6554] loop4: detected capacity change from 0 to 64 [ 148.260938][ T6557] program syz.2.955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.370821][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 148.370839][ T26] audit: type=1800 audit(1780704795.411:4): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.953" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 148.405568][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.956'. [ 148.684677][ T6567] program syz.0.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.016620][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 149.302763][ T6594] loop2: detected capacity change from 0 to 256 [ 149.412037][ T6594] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 149.442619][ T6586] loop3: detected capacity change from 0 to 4096 [ 149.529195][ T6586] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 149.703887][ T6586] ntfs3: loop3: failed to convert "076c" to cp866 [ 149.724546][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.735224][ T6586] ntfs3: loop3: ino=5, "/" directory corrupted [ 150.114356][ T23] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.114394][ T23] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.114419][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.114452][ T23] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 150.114478][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.116395][ T23] usb 5-1: config 0 descriptor?? [ 150.264798][ T6621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.984'. [ 150.384879][ T6623] program syz.3.985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.596850][ T23] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 150.608385][ T23] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 150.617198][ T23] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 150.624642][ T23] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 150.632053][ T23] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 150.639686][ T23] chicony 0003:04F2:1236.000F: unknown main item tag 0x0 [ 150.659420][ T6632] loop2: detected capacity change from 0 to 64 [ 150.675872][ T23] chicony 0003:04F2:1236.000F: hidraw0: USB HID vff.fc Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input0 [ 150.711152][ T6632] MINIX-fs: mounting file system with errors, running fsck is recommended [ 150.830861][ T6285] usb 5-1: USB disconnect, device number 5 [ 150.890398][ T6636] fido_id[6636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 151.010248][ T6640] ucma_write: process 417 (syz.2.992) changed security contexts after opening file descriptor, this is not allowed. [ 151.662056][ T6668] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 151.891632][ T6680] loop2: detected capacity change from 0 to 64 [ 151.980760][ T26] audit: type=1800 audit(1780704799.021:5): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1012" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 152.262491][ T6696] loop3: detected capacity change from 0 to 512 [ 152.420963][ T6696] EXT4-fs (loop3): Ignoring removed nobh option [ 152.473509][ T6696] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 152.537679][ T6696] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 152.572586][ T6696] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #13: comm syz.3.1020: inode has both inline data and extents flags [ 152.573083][ T6696] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1020: couldn't read orphan inode 13 (err -117) [ 152.573422][ T6696] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 152.638640][ T6472] Set syz1 is full, maxelem 65536 reached [ 153.118757][ T6702] loop2: detected capacity change from 0 to 32768 [ 153.334944][ T6739] loop4: detected capacity change from 0 to 256 [ 153.398336][ T6702] XFS (loop2): Mounting V5 Filesystem [ 153.429953][ T6739] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 153.448071][ T6747] loop3: detected capacity change from 0 to 1024 [ 153.485407][ T6739] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 153.571453][ T6702] XFS (loop2): Ending clean mount [ 153.581975][ T6747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.582616][ T6702] XFS (loop2): Quotacheck needed: Please wait. [ 153.595566][ T6739] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 153.639953][ T26] audit: type=1800 audit(1780704800.681:6): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1038" name="file1" dev="loop4" ino=1048639 res=0 errno=0 [ 153.777806][ T6702] XFS (loop2): Quotacheck: Done. [ 153.904502][ T4192] XFS (loop2): Unmounting Filesystem [ 154.222494][ T6772] loop4: detected capacity change from 0 to 256 [ 154.339029][ T5877] Bluetooth: hci0: command 0x0c20 tx timeout [ 154.389912][ T6772] FAT-fs (loop4): Directory bread(block 64) failed [ 154.426815][ T6772] FAT-fs (loop4): Directory bread(block 65) failed [ 154.441422][ T6772] FAT-fs (loop4): Directory bread(block 66) failed [ 154.474065][ T6772] FAT-fs (loop4): Directory bread(block 67) failed [ 154.501532][ T6772] FAT-fs (loop4): Directory bread(block 68) failed [ 154.544838][ T6772] FAT-fs (loop4): Directory bread(block 69) failed [ 154.551809][ T6772] FAT-fs (loop4): Directory bread(block 70) failed [ 154.586652][ T6772] FAT-fs (loop4): Directory bread(block 71) failed [ 154.589154][ T6782] loop1: detected capacity change from 0 to 256 [ 154.600125][ T6772] FAT-fs (loop4): Directory bread(block 72) failed [ 154.644228][ T6772] FAT-fs (loop4): Directory bread(block 73) failed [ 154.728815][ T6782] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.803880][ T6782] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.825479][ T6782] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.848157][ T26] audit: type=1800 audit(1780704801.881:7): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1055" name="file1" dev="loop1" ino=1048640 res=0 errno=0 [ 154.895808][ T6788] loop3: detected capacity change from 0 to 8 [ 155.071498][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1058'. [ 155.101353][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1058'. [ 155.321102][ T6807] loop1: detected capacity change from 0 to 64 [ 155.401053][ T6807] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 157.052621][ T6896] loop2: detected capacity change from 0 to 1024 [ 157.185425][ T6896] hfsplus: xattr searching failed [ 157.237825][ T6896] hfsplus: xattr searching failed [ 157.472938][ T6910] loop2: detected capacity change from 0 to 64 [ 157.490018][ T6909] loop3: detected capacity change from 0 to 736 [ 157.513086][ T6877] loop4: detected capacity change from 0 to 32768 [ 157.633414][ T6909] rock: directory entry would overflow storage [ 157.646172][ T6909] rock: sig=0x3b10, size=4, remaining=3 [ 157.700283][ T6877] XFS (loop4): Mounting V5 Filesystem [ 157.876870][ T6877] XFS (loop4): Ending clean mount [ 157.926780][ T6935] loop1: detected capacity change from 0 to 128 [ 157.945846][ T6877] XFS (loop4): Quotacheck needed: Please wait. [ 158.024145][ T5873] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.091578][ T6877] XFS (loop4): Quotacheck: Done. [ 158.106125][ T6935] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 158.110218][ T6943] loop2: detected capacity change from 0 to 64 [ 158.126449][ T6935] hpfs: filesystem error: improperly stopped [ 158.132693][ T6935] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 158.173866][ T6935] hpfs: You really don't want any checks? You are crazy... [ 158.237729][ T4197] XFS (loop4): Unmounting Filesystem [ 158.255354][ T6935] hpfs: Code page index out of array [ 158.262428][ T6935] hpfs: code page support is disabled [ 158.284839][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 158.358683][ T6935] hpfs: hpfs_map_4sectors(): unaligned read [ 158.397750][ T6935] hpfs: hpfs_map_4sectors(): unaligned read [ 158.403816][ T6935] hpfs: filesystem error: unable to find root dir [ 158.414338][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.444061][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.453940][ T5873] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 158.483736][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.496138][ T5873] usb 1-1: config 0 descriptor?? [ 158.515143][ T6935] hpfs: bad mount options. [ 158.712945][ T6953] vivid-003: disconnect [ 158.746311][ T6952] vivid-003: reconnect [ 158.998564][ T5873] wacom 0003:056A:0084.0010: unbalanced delimiter at end of report description [ 158.999822][ T5873] wacom 0003:056A:0084.0010: parse failed [ 159.019611][ T5873] wacom: probe of 0003:056A:0084.0010 failed with error -22 [ 159.099117][ T6968] tipc: Enabling of bearer rejected, failed to enable media [ 159.198477][ T4235] usb 1-1: USB disconnect, device number 6 [ 159.239215][ T6972] loop2: detected capacity change from 0 to 512 [ 159.311957][ T6972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.341548][ T6972] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1139: corrupted xattr entries [ 159.357838][ T6972] EXT4-fs (loop2): 1 orphan inode deleted [ 159.363667][ T6972] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,min_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 159.496810][ T6959] loop3: detected capacity change from 0 to 32768 [ 159.655238][ T6959] XFS (loop3): Mounting V5 Filesystem [ 159.744418][ T6992] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1144'. [ 159.835486][ T6959] XFS (loop3): Ending clean mount [ 159.947132][ T4191] XFS (loop3): Unmounting Filesystem [ 159.970655][ T7003] tmpfs: Too small a size for current use [ 160.154214][ T7013] loop1: detected capacity change from 0 to 256 [ 160.274960][ T7013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 160.644297][ T5873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.794791][ T7039] loop3: detected capacity change from 0 to 256 [ 160.884195][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 160.903390][ T7043] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.917940][ T7039] FAT-fs (loop3): Directory bread(block 64) failed [ 160.953281][ T7043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 160.966959][ T7039] FAT-fs (loop3): Directory bread(block 65) failed [ 160.973938][ T7039] FAT-fs (loop3): Directory bread(block 66) failed [ 160.978124][ T7043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.004351][ T5873] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.035359][ T7048] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1169'. [ 161.053271][ T5873] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.066303][ T7039] FAT-fs (loop3): Directory bread(block 67) failed [ 161.074552][ T7039] FAT-fs (loop3): Directory bread(block 68) failed [ 161.081218][ T7039] FAT-fs (loop3): Directory bread(block 69) failed [ 161.088341][ T7039] FAT-fs (loop3): Directory bread(block 70) failed [ 161.096036][ T7039] FAT-fs (loop3): Directory bread(block 71) failed [ 161.102978][ T7039] FAT-fs (loop3): Directory bread(block 72) failed [ 161.117865][ T7039] FAT-fs (loop3): Directory bread(block 73) failed [ 161.128847][ T7043] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.1167: Allocating blocks 41-42 which overlap fs metadata [ 161.164144][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.170865][ T5873] usb 3-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 161.210280][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.234265][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.245044][ T7043] Quota error (device loop4): write_blk: dquota write failed [ 161.273065][ T5873] usb 3-1: config 0 descriptor?? [ 161.273269][ T7043] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 161.334616][ T7043] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1167: Failed to acquire dquot type 0 [ 161.368245][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.375543][ T7052] FAT-fs (loop3): Directory bread(block 1285) failed [ 161.390093][ T7043] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 161.406409][ T7052] FAT-fs (loop3): Directory bread(block 1286) failed [ 161.413189][ T7052] FAT-fs (loop3): Directory bread(block 1287) failed [ 161.426481][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.433572][ T7052] FAT-fs (loop3): Directory bread(block 1288) failed [ 161.443850][ T7043] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1167: corrupted inode contents [ 161.475582][ T7052] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 161.485670][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.492270][ T7043] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.1167: mark_inode_dirty error [ 161.519017][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.536588][ T7043] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1167: corrupted inode contents [ 161.573584][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 161.588230][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.598295][ T7043] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.1167: mark_inode_dirty error [ 161.635162][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.642164][ T7043] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1167: corrupted inode contents [ 161.713505][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.753678][ T7043] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 161.797204][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x3 [ 161.812427][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.820205][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x0 [ 161.834546][ T7043] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.1167: corrupted inode contents [ 161.854128][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x0 [ 161.862408][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x0 [ 161.877707][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.888465][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x0 [ 161.919009][ T7043] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.1167: mark_inode_dirty error [ 161.944155][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x0 [ 161.961616][ T5873] lg-g15 0003:046D:0A07.0011: unknown main item tag 0x6 [ 161.972508][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 161.976815][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1180'. [ 161.998835][ T7043] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 162.015446][ T5873] lg-g15 0003:046D:0A07.0011: hidraw0: USB HID v1.01 Device [HID 046d:0a07] on usb-dummy_hcd.2-1/input0 [ 162.034997][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 162.058144][ T7043] EXT4-fs (loop4): 1 truncate cleaned up [ 162.068999][ T5873] usb 3-1: USB disconnect, device number 8 [ 162.079663][ T7043] EXT4-fs (loop4): pa ffff88801f4332a0: logic 1, phys. 41, len 23 [ 162.088439][ T7043] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 162.115989][ T7071] set_capacity_and_notify: 2 callbacks suppressed [ 162.116006][ T7071] loop1: detected capacity change from 0 to 736 [ 162.149557][ T7043] EXT4-fs (loop4): Remounting filesystem read-only [ 162.156642][ T7043] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback. [ 162.333048][ T7072] fido_id[7072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 162.355492][ T7071] rock: directory entry would overflow storage [ 162.381952][ T7071] rock: sig=0x3b10, size=4, remaining=3 [ 162.540171][ T7077] netlink: 'syz.1.1182': attribute type 1 has an invalid length. [ 162.581231][ T7079] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1183'. [ 162.683546][ T7083] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 162.748524][ T7087] tmpfs: Too small a size for current use [ 162.781013][ T7083] CIFS: Unable to determine destination address [ 162.793026][ T7089] loop3: detected capacity change from 0 to 164 [ 162.848895][ T7091] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1190'. [ 162.901215][ T7089] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 163.061990][ T7099] loop4: detected capacity change from 0 to 256 [ 163.149771][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 163.165648][ T7103] tipc: Started in network mode [ 163.170752][ T7103] tipc: Node identity 2d1414aa, cluster identity 4711 [ 163.181729][ T7103] tipc: Enabling of bearer rejected, failed to enable media [ 163.239100][ T7099] FAT-fs (loop4): Directory bread(block 1285) failed [ 163.261559][ T7099] FAT-fs (loop4): Directory bread(block 1286) failed [ 163.296365][ T7099] FAT-fs (loop4): Directory bread(block 1287) failed [ 163.314295][ T7099] FAT-fs (loop4): Directory bread(block 1288) failed [ 163.394116][ T5877] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.404722][ T7099] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 163.634263][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 163.707462][ T7095] loop2: detected capacity change from 0 to 32768 [ 163.757050][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.772986][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.786779][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 163.800093][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.813839][ T7124] device macsec2 entered promiscuous mode [ 163.826368][ T7124] device virt_wifi0 entered promiscuous mode [ 163.844068][ T7095] JBD2: Ignoring recovery information on journal [ 163.870202][ T5877] usb 4-1: config 0 descriptor?? [ 163.978280][ T7128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1218'. [ 163.996476][ T7095] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 164.115171][ T7095] [ 164.117575][ T7095] ====================================================== [ 164.124626][ T7095] WARNING: possible circular locking dependency detected [ 164.131709][ T7095] syzkaller #0 Not tainted [ 164.136160][ T7095] ------------------------------------------------------ [ 164.143204][ T7095] syz.2.1191/7095 is trying to acquire lock: [ 164.149222][ T7095] ffff888020335488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 164.160244][ T7095] [ 164.160244][ T7095] but task is already holding lock: [ 164.167649][ T7095] ffff8880604714a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x198/0x310 [ 164.178233][ T7095] [ 164.178233][ T7095] which lock already depends on the new lock. [ 164.178233][ T7095] [ 164.188671][ T7095] [ 164.188671][ T7095] the existing dependency chain (in reverse order) is: [ 164.197715][ T7095] [ 164.197715][ T7095] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 164.207038][ T7095] down_read+0x44/0x2e0 [ 164.211785][ T7095] ocfs2_read_virt_blocks+0x237/0x8d0 [ 164.218012][ T7095] ocfs2_find_entry+0x3ca/0x2060 [ 164.223545][ T7095] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 164.229755][ T7095] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 164.235963][ T7095] ocfs2_get_system_file_inode+0x32b/0x7f0 [ 164.242475][ T7095] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 164.249218][ T7095] ocfs2_fill_super+0x4060/0x50f0 [ 164.254833][ T7095] mount_bdev+0x287/0x3c0 [ 164.259735][ T7095] legacy_get_tree+0xe6/0x180 [ 164.264985][ T7095] vfs_get_tree+0x88/0x270 [ 164.269977][ T7095] do_new_mount+0x24a/0xa40 [ 164.275088][ T7095] __se_sys_mount+0x2e3/0x3d0 [ 164.280334][ T7095] do_syscall_64+0x4c/0xa0 [ 164.285319][ T7095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.292489][ T7095] [ 164.292489][ T7095] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 164.300955][ T7095] __lock_acquire+0x2c42/0x7d10 [ 164.306443][ T7095] lock_acquire+0x19e/0x400 [ 164.311506][ T7095] __mutex_lock_common+0x1e3/0x2400 [ 164.317252][ T7095] mutex_lock_nested+0x17/0x20 [ 164.322572][ T7095] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 164.329440][ T7095] ocfs2_reserve_local_alloc_bits+0xfb/0x25f0 [ 164.336249][ T7095] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 164.343203][ T7095] ocfs2_lock_allocators+0x2d5/0x5f0 [ 164.349032][ T7095] ocfs2_write_begin_nolock+0x1d17/0x4400 [ 164.355306][ T7095] ocfs2_write_begin+0x1b9/0x310 [ 164.360807][ T7095] generic_perform_write+0x2b6/0x550 [ 164.367189][ T7095] __generic_file_write_iter+0x25f/0x4e0 [ 164.372397][ T5877] apple 0003:05AC:024B.0012: report_id 0 is invalid [ 164.373389][ T7095] ocfs2_file_write_iter+0x1670/0x1e70 [ 164.386145][ T7095] vfs_write+0x745/0xd60 [ 164.388109][ T5877] apple 0003:05AC:024B.0012: item 0 0 1 8 parsing failed [ 164.390953][ T7095] ksys_write+0x152/0x260 [ 164.390976][ T7095] do_syscall_64+0x4c/0xa0 [ 164.407839][ T7095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.414463][ T7095] [ 164.414463][ T7095] other info that might help us debug this: [ 164.414463][ T7095] [ 164.418507][ T5877] apple 0003:05AC:024B.0012: parse failed [ 164.424757][ T7095] Possible unsafe locking scenario: [ 164.424757][ T7095] [ 164.424766][ T7095] CPU0 CPU1 [ 164.424771][ T7095] ---- ---- [ 164.424777][ T7095] lock(&ocfs2_file_ip_alloc_sem_key); [ 164.424795][ T7095] lock(&osb->system_file_mutex); [ 164.424811][ T7095] lock(&ocfs2_file_ip_alloc_sem_key); [ 164.424826][ T7095] lock(&osb->system_file_mutex); [ 164.424840][ T7095] [ 164.424840][ T7095] *** DEADLOCK *** [ 164.424840][ T7095] [ 164.424844][ T7095] 4 locks held by syz.2.1191/7095: [ 164.424858][ T7095] #0: ffff88807760bc70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 164.424914][ T7095] #1: [ 164.439605][ T5877] apple: probe of 0003:05AC:024B.0012 failed with error -22 [ 164.443831][ T7095] ffff88802642e460 (sb_writers#30){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 164.517426][ T7095] #2: ffff888060471808 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x436/0x1e70 [ 164.528859][ T7095] #3: ffff8880604714a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x198/0x310 [ 164.540020][ T7095] [ 164.540020][ T7095] stack backtrace: [ 164.545996][ T7095] CPU: 0 PID: 7095 Comm: syz.2.1191 Not tainted syzkaller #0 [ 164.553575][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 164.563675][ T7095] Call Trace: [ 164.566984][ T7095] [ 164.569950][ T7095] dump_stack_lvl+0x188/0x250 [ 164.574732][ T7095] ? load_image+0x400/0x400 [ 164.579279][ T7095] ? show_regs_print_info+0x20/0x20 [ 164.584617][ T7095] ? print_circular_bug+0x12b/0x1a0 [ 164.589866][ T7095] check_noncircular+0x296/0x330 [ 164.595019][ T7095] ? add_chain_block+0x940/0x940 [ 164.599999][ T7095] ? lockdep_lock+0xf1/0x1f0 [ 164.604646][ T7095] ? mark_lock+0x94/0x320 [ 164.609030][ T7095] __lock_acquire+0x2c42/0x7d10 [ 164.613931][ T7095] ? 0xffffffffa0028000 [ 164.618131][ T7095] ? verify_lock_unused+0x140/0x140 [ 164.623371][ T7095] ? mark_lock+0x94/0x320 [ 164.627743][ T7095] ? __lock_acquire+0x13bc/0x7d10 [ 164.630982][ T5877] usb 4-1: USB disconnect, device number 8 [ 164.632808][ T7095] ? hlock_conflict+0x59/0x1f0 [ 164.632837][ T7095] ? __bfs+0x2a3/0x5c0 [ 164.647569][ T7095] lock_acquire+0x19e/0x400 [ 164.652126][ T7095] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 164.658259][ T7095] ? rcu_is_watching+0x11/0xa0 [ 164.663298][ T7095] ? __might_sleep+0xf0/0xf0 [ 164.668017][ T7095] ? lock_release+0xb5/0x8a0 [ 164.672651][ T7095] ? read_lock_is_recursive+0x10/0x10 [ 164.678078][ T7095] ? rcu_lock_release+0x5/0x20 [ 164.682973][ T7095] ? read_lock_is_recursive+0x10/0x10 [ 164.688392][ T7095] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 164.694409][ T7095] __mutex_lock_common+0x1e3/0x2400 [ 164.699655][ T7095] ? ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 164.705708][ T7095] ? ocfs2_get_system_file_inode+0x156/0x7f0 [ 164.711755][ T7095] ? mutex_lock_io_nested+0x60/0x60 [ 164.717027][ T7095] ? __rwlock_init+0x140/0x140 [ 164.721808][ T7095] ? do_raw_spin_unlock+0x11d/0x230 [ 164.727114][ T7095] mutex_lock_nested+0x17/0x20 [ 164.731927][ T7095] ocfs2_get_system_file_inode+0x1b6/0x7f0 [ 164.737963][ T7095] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 164.743971][ T7095] ? lockdep_unlock+0x143/0x2e0 [ 164.748861][ T7095] ? lockdep_lock+0x1f0/0x1f0 [ 164.753553][ T7095] ? add_lock_to_list+0x18d/0x280 [ 164.758590][ T7095] ? __lock_acquire+0x28ac/0x7d10 [ 164.763660][ T7095] ocfs2_reserve_local_alloc_bits+0xfb/0x25f0 [ 164.769771][ T7095] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 164.775820][ T7095] ? _raw_spin_unlock+0x40/0x40 [ 164.780727][ T7095] ? verify_lock_unused+0x140/0x140 [ 164.785981][ T7095] ? ocfs2_set_buffer_uptodate+0xab/0x1120 [ 164.791839][ T7095] ? ocfs2_complete_local_alloc_recovery+0x580/0x580 [ 164.798539][ T7095] ? ocfs2_reserve_clusters_with_limit+0xda/0xc10 [ 164.805088][ T7095] ? ocfs2_lock_allocators+0x2d5/0x5f0 [ 164.810690][ T7095] ? ocfs2_write_begin_nolock+0x1d17/0x4400 [ 164.816599][ T7095] ? ocfs2_write_begin+0x1b9/0x310 [ 164.821752][ T7095] ? generic_perform_write+0x2b6/0x550 [ 164.827248][ T7095] ? ocfs2_file_write_iter+0x1670/0x1e70 [ 164.833069][ T7095] ? vfs_write+0x745/0xd60 [ 164.837497][ T7095] ? ksys_write+0x152/0x260 [ 164.842020][ T7095] ? do_syscall_64+0x4c/0xa0 [ 164.846655][ T7095] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 164.852758][ T7095] ? __lock_acquire+0x7d10/0x7d10 [ 164.857808][ T7095] ? do_raw_spin_lock+0x128/0x2f0 [ 164.862873][ T7095] ? __rwlock_init+0x140/0x140 [ 164.867658][ T7095] ? do_raw_spin_unlock+0x11d/0x230 [ 164.872892][ T7095] ? _raw_spin_unlock+0x24/0x40 [ 164.877756][ T7095] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 164.884081][ T7095] ? ocfs2_reserve_clusters_with_limit+0x15d/0xc10 [ 164.890634][ T7095] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 164.897005][ T7095] ? ocfs2_reserve_clusters+0x30/0x30 [ 164.902523][ T7095] ? rcu_is_watching+0x11/0xa0 [ 164.907324][ T7095] ? ocfs2_num_free_extents+0x2eb/0x5b0 [ 164.913083][ T7095] ? ocfs2_validate_extent_block+0x570/0x570 [ 164.919133][ T7095] ? __brelse+0x55/0x90 [ 164.923427][ T7095] ocfs2_lock_allocators+0x2d5/0x5f0 [ 164.928745][ T7095] ? _ocfs2_clear_bit+0x40/0x40 [ 164.933636][ T7095] ? do_raw_spin_lock+0x128/0x2f0 [ 164.938680][ T7095] ? ocfs2_write_begin_nolock+0x10ad/0x4400 [ 164.944593][ T7095] ? rcu_is_watching+0x11/0xa0 [ 164.949393][ T7095] ? ocfs2_write_begin_nolock+0x10ad/0x4400 [ 164.955310][ T7095] ? kfree+0x4a/0x2a0 [ 164.959344][ T7095] ocfs2_write_begin_nolock+0x1d17/0x4400 [ 164.965141][ T7095] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 164.970986][ T7095] ? __lock_acquire+0x28ac/0x7d10 [ 164.976044][ T7095] ? ocfs2_read_inode_block+0x120/0x190 [ 164.981637][ T7095] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 164.987652][ T7095] ? handle_mm_fault+0x2be9/0x4410 [ 164.992812][ T7095] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 164.998996][ T7095] ? do_user_addr_fault+0x694/0xc80 [ 165.004613][ T7095] ? rwsem_write_trylock+0x135/0x1c0 [ 165.009973][ T7095] ? clear_nonspinnable+0x60/0x60 [ 165.015152][ T7095] ? exc_page_fault+0x88/0x100 [ 165.020316][ T7095] ? lockdep_hardirqs_on+0x94/0x140 [ 165.025636][ T7095] ? exc_page_fault+0x88/0x100 [ 165.031058][ T7095] ocfs2_write_begin+0x1b9/0x310 [ 165.036030][ T7095] ? ocfs2_readahead+0x190/0x190 [ 165.041116][ T7095] ? __get_user_nocheck_1+0x6/0x10 [ 165.046290][ T7095] ? fault_in_readable+0xf6/0x150 [ 165.051370][ T7095] generic_perform_write+0x2b6/0x550 [ 165.056691][ T7095] ? grab_cache_page_write_begin+0xa0/0xa0 [ 165.062553][ T7095] ? file_remove_privs+0x5d0/0x5d0 [ 165.067719][ T7095] ? __rwlock_init+0x140/0x140 [ 165.072516][ T7095] ? __up_read+0x2b2/0x6b0 [ 165.077212][ T7095] __generic_file_write_iter+0x25f/0x4e0 [ 165.082868][ T7095] ? _raw_spin_unlock+0x24/0x40 [ 165.087749][ T7095] ? ocfs2_inode_unlock+0x11a/0x140 [ 165.092996][ T7095] ocfs2_file_write_iter+0x1670/0x1e70 [ 165.098632][ T7095] ? verify_lock_unused+0x140/0x140 [ 165.103858][ T7095] ? ocfs2_file_read_iter+0xa80/0xa80 [ 165.109248][ T7095] ? aa_file_perm+0x38b/0xe80 [ 165.113950][ T7095] ? rcu_read_lock_any_held+0xb0/0x130 [ 165.119461][ T7095] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 165.124792][ T7095] ? end_current_label_crit_section+0x14b/0x170 [ 165.131074][ T7095] ? memset+0x1e/0x40 [ 165.135113][ T7095] ? iov_iter_init+0xb4/0x170 [ 165.139912][ T7095] vfs_write+0x745/0xd60 [ 165.144171][ T7095] ? file_end_write+0x250/0x250 [ 165.149077][ T7095] ? __fget_files+0x40f/0x480 [ 165.153883][ T7095] ? mutex_lock_nested+0x17/0x20 [ 165.158891][ T7095] ? __fdget_pos+0x2bf/0x370 [ 165.163519][ T7095] ? ksys_write+0x71/0x260 [ 165.168058][ T7095] ksys_write+0x152/0x260 [ 165.172433][ T7095] ? __ia32_sys_read+0x80/0x80 [ 165.177235][ T7095] ? lockdep_hardirqs_on+0x94/0x140 [ 165.182477][ T7095] do_syscall_64+0x4c/0xa0 [ 165.187131][ T7095] ? clear_bhb_loop+0x30/0x80 [ 165.192005][ T7095] ? clear_bhb_loop+0x30/0x80 [ 165.196762][ T7095] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.202710][ T7095] RIP: 0033:0x7fb322389e59 [ 165.207161][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.226893][ T7095] RSP: 002b:00007fb3205e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.235499][ T7095] RAX: ffffffffffffffda RBX: 00007fb322602fa0 RCX: 00007fb322389e59 [ 165.243519][ T7095] RDX: 000000000000fea7 RSI: 0000200000000200 RDI: 0000000000000004 [ 165.251530][ T7095] RBP: 00007fb32241fd6f R08: 0000000000000000 R09: 0000000000000000 [ 165.259589][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.267598][ T7095] R13: 00007fb322603038 R14: 00007fb322602fa0 R15: 00007fff8161bde8 [ 165.275744][ T7095] [ 165.330940][ T4192] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 165.346769][ T4192] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 165.357616][ T4192] OCFS2: File system is now read-only. [ 165.363103][ T4192] (syz-executor,4192,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30 [ 165.371748][ T4192] (syz-executor,4192,0):_ocfs2_free_clusters:2583 ERROR: status = -30 [ 165.380155][ T4192] (syz-executor,4192,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 165.392117][ T4192] (syz-executor,4192,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 165.400734][ T4192] (syz-executor,4192,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 165.413066][ T4192] ocfs2: Unmounting device (7,2) on (node local)