last executing test programs: 26.685878116s ago: executing program 0 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=@bridge_setlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x40}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x44}}, 0x0) 26.433409521s ago: executing program 0 (id=567): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8000, 0x8, 0x8, 0x0, [{0x6, 0x9d, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x46}, {0x9, 0x77, 0xfe, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0xb, 0xe1, '\x00', 0x5}, {0xda, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x26, '\x00', 0xfd}, {0x7f, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xe4, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x7, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x7, 0x27, '\x00', 0xff}, {0x8}]}}) 26.328888018s ago: executing program 0 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003"], 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 26.237827954s ago: executing program 0 (id=561): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 25.667762328s ago: executing program 0 (id=565): chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000140)='./file2\x00') 24.935674314s ago: executing program 0 (id=575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x5, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 24.877004567s ago: executing program 32 (id=575): r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x5, 0x0, r0, 0x0}]) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.788411555s ago: executing program 1 (id=761): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 4.303997015s ago: executing program 4 (id=764): r0 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0xfffffefa}, 0x0, 0x80, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.212875821s ago: executing program 1 (id=765): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}, 0x46a}], 0x1, 0x102, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 3.827877104s ago: executing program 1 (id=768): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f89, &(0x7f0000002040)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 3.323603025s ago: executing program 4 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x80) 3.201220323s ago: executing program 4 (id=780): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000001"], 0x0, 0x7, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 2.825956116s ago: executing program 1 (id=785): write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x20, 0x5, 0x80, {0x80, 0xd, "82616faab7e983055eef9451b14709a6ea374c27aec68c7f7b64dfa67a66f51a9d26bdbb95a5c4bcf2a18537fa000000004c7154d09437dd35b0c8d50cf0a57d329ed033c9ede0e349136541ac6d209eb99f99b40e8b8302e8b10b3e16d5bf7d3644fbcbb2ca1c1352d9feeb0f6662759262f60e56da446124c62a36afa5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.062983733s ago: executing program 4 (id=791): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 1.829331408s ago: executing program 4 (id=793): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents(r0, &(0x7f0000000600)=""/149, 0x95) 1.802810479s ago: executing program 2 (id=794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000002200)=""/4110, 0x1a, 0x100e, 0x1}, 0x28) 1.536131626s ago: executing program 3 (id=796): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x3f, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "3d001c", 0x9, 0x11, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4e23, 0x4e20, 0x9, 0x0, @opaque="d4"}}}}}}, 0x0) 1.46390789s ago: executing program 2 (id=797): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='exec :'], 0x9d) 1.347850818s ago: executing program 4 (id=799): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1458c2, 0x1c2) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x10, 0x7fff}, {0x1, 0x400}]}, 0x14, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) 1.316043439s ago: executing program 2 (id=800): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 1.283501331s ago: executing program 3 (id=801): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x45, 0x0, &(0x7f0000000140)) 1.228144745s ago: executing program 2 (id=802): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000080)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@uid}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@fat=@discard}, {}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@nfs_stale_rw}, {@dots}, {@fat=@sys_immutable}, {}, {@fat=@nocase}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1.132872961s ago: executing program 3 (id=803): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000b80)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 960.778421ms ago: executing program 2 (id=804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 821.19056ms ago: executing program 5 (id=806): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 756.044864ms ago: executing program 3 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 648.61501ms ago: executing program 5 (id=808): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x803, 0x5) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) 541.976937ms ago: executing program 3 (id=809): sendmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="8ea43885f1c40b9099774ba9d9532a8e44d520730178482fb93e094e5782", 0x1e}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf251b0000000400cc0008009a00"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 461.333202ms ago: executing program 2 (id=810): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x2}], 0x1c) listen(r0, 0x2) getpeername(r0, 0x0, &(0x7f0000000200)) 431.841924ms ago: executing program 3 (id=811): r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x0, 0x446a, &(0x7f0000008900)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x1000) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000001c0)={[{@err_ro}, {@atime_quantum={'atime_quantum', 0x3d, 0x7388800}}, {@noacl}, {@intr}, {@journal_async_commit}, {@atime_quantum={'atime_quantum', 0x3d, 0xd7}}]}, 0x1, 0x445a, &(0x7f00000044c0)="$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") 371.243418ms ago: executing program 5 (id=812): r0 = io_uring_setup(0x5bec, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 303.677272ms ago: executing program 1 (id=813): openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x40f6, 0x4f7c, 0x0, 0x0, 0xffffffffffffffca) 212.735267ms ago: executing program 1 (id=814): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 209.855098ms ago: executing program 5 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 53.838847ms ago: executing program 5 (id=816): syz_genetlink_get_family_id$batadv(&(0x7f0000002640), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 5 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) kernel console output (not intermixed with test programs): T4233] usb 5-1: config 1 has no interface number 1 [ 64.327453][ T4489] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 64.338135][ T4233] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 64.356209][ T4489] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.67: corrupted in-inode xattr [ 64.375957][ T4489] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.67: couldn't read orphan inode 15 (err -117) [ 64.396933][ T4489] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000001,noblock_validity,noload,delalloc,max_batch_time=0x0000000000000001,inlinecrypt,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 64.562590][ T4233] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.581988][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.606537][ T4233] usb 5-1: Product: syz [ 64.610842][ T4233] usb 5-1: Manufacturer: syz [ 64.637454][ T4233] usb 5-1: SerialNumber: syz [ 64.774407][ T4508] process 'syz.1.76' launched './file0' with NULL argv: empty string added [ 64.846259][ T4503] loop0: detected capacity change from 0 to 32768 [ 65.062946][ T4233] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 65.083939][ T4503] UFO tlock:0xffffc900028921b0 [ 65.091188][ T4233] usb 5-1: found format II with max.bitrate = 26774, frame size=2 [ 65.182810][ T4233] usb 5-1: failed to enable PITCH for EP 0x82 [ 65.254816][ T4531] loop3: detected capacity change from 0 to 1024 [ 65.344420][ T4233] usb 5-1: USB disconnect, device number 3 [ 65.412483][ T4531] hfsplus: xattr searching failed [ 65.417998][ T26] audit: type=1800 audit(1771257261.883:6): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.85" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 65.472263][ T4531] hfsplus: xattr searching failed [ 65.506181][ T4545] hfsplus: xattr searching failed [ 65.986272][ T4577] loop4: detected capacity change from 0 to 512 [ 66.091625][ T4577] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.98: invalid block [ 66.188722][ T4577] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.98: invalid indirect mapped block 10 (level 1) [ 66.277503][ T4577] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.98: invalid indirect mapped block 8 (level 1) [ 66.338393][ T4591] netlink: 136 bytes leftover after parsing attributes in process `syz.2.99'. [ 66.351762][ T4577] EXT4-fs (loop4): 1 truncate cleaned up [ 66.365524][ T4577] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 66.505870][ T4562] loop3: detected capacity change from 0 to 32768 [ 66.597244][ T4562] JBD2: Ignoring recovery information on journal [ 66.719645][ T4562] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 66.753045][ T4575] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 66.768334][ T4607] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 66.795992][ T4607] ip6erspan0: linktype set to 1 [ 66.805292][ T4575] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 66.844337][ T4611] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 66.898395][ T4575] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 66.923483][ T3066] (kworker/u4:5,3066,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 67.192195][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 67.237357][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 67.563607][ T4634] netlink: 'syz.2.113': attribute type 1 has an invalid length. [ 67.571491][ T4634] netlink: 'syz.2.113': attribute type 2 has an invalid length. [ 67.593139][ T4631] exfat: Deprecated parameter 'namecase' [ 67.632083][ T4638] exfat: Deprecated parameter 'namecase' [ 67.651014][ T4638] exfat: Deprecated parameter 'utf8' [ 67.653306][ T4631] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 67.737916][ T4638] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 67.931100][ T4650] mkiss: ax0: crc mode is auto. [ 67.942497][ T4248] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.962107][ T4648] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 68.003022][ T4648] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.141556][ T4320] kernel write not supported for file /85/clear_refs (pid: 4320 comm: kworker/1:7) [ 68.196416][ T4248] usb 3-1: Using ep0 maxpacket: 8 [ 68.316696][ T4248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.331155][ T4248] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.339229][ T4671] set_capacity_and_notify: 4 callbacks suppressed [ 68.339243][ T4671] loop4: detected capacity change from 0 to 512 [ 68.346395][ T4248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.375728][ T4248] usb 3-1: config 0 descriptor?? [ 68.417482][ T4671] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.429083][ T4671] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.564112][ T4682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'. [ 68.638385][ T4248] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 68.854418][ T4248] usb 3-1: USB disconnect, device number 3 [ 68.939807][ T4696] loop4: detected capacity change from 0 to 32768 [ 68.961983][ T4696] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 68.973358][ T4696] JBD2: Ignoring recovery information on journal [ 69.001597][ T4696] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 69.085851][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 69.207000][ T4702] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 69.220804][ T4702] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 69.229860][ T4702] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 69.236941][ T4702] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 69.244077][ T4702] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 69.250773][ T4702] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 69.258891][ T4702] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 69.266398][ T4702] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 69.276954][ T4702] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 69.283758][ T4702] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 69.291925][ T4702] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 69.299345][ T4702] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 69.306277][ T4702] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 69.313209][ T4702] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 69.319912][ T4702] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 69.328671][ T4702] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 69.335978][ T4702] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 69.348056][ T4702] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 69.355045][ T4702] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 69.361780][ T4702] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 69.581705][ T4718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 69.761111][ T4733] loop2: detected capacity change from 0 to 512 [ 69.818201][ T4738] loop4: detected capacity change from 0 to 256 [ 69.857659][ T4733] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.885140][ T4738] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 69.924466][ T4733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.946985][ T26] audit: type=1800 audit(1771257266.413:7): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.157" name="file1" dev="loop4" ino=1048594 res=0 errno=0 [ 69.965883][ T4733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.087344][ T4733] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.154: Invalid block bitmap block 0 in block_group 0 [ 70.126247][ T4733] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 70.157360][ T4733] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.154: attempt to clear invalid blocks 983261 len 1 [ 70.183238][ T4733] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.154: Invalid inode table block 0 in block_group 0 [ 70.203814][ T4750] loop0: detected capacity change from 0 to 8 [ 70.205725][ T4733] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 70.211288][ T4724] loop3: detected capacity change from 0 to 32768 [ 70.230377][ T4733] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 70.251287][ T4733] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.154: Invalid inode table block 0 in block_group 0 [ 70.269581][ T4733] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 70.280261][ T4733] EXT4-fs error (device loop2): ext4_truncate:4279: inode #11: comm syz.2.154: mark_inode_dirty error [ 70.295032][ T4724] XFS: attr2 mount option is deprecated. [ 70.301177][ T4733] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 70.310998][ T4733] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.154: Invalid inode table block 0 in block_group 0 [ 70.325437][ T4733] EXT4-fs (loop2): 1 truncate cleaned up [ 70.331213][ T4733] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 70.460918][ T4724] XFS (loop3): Mounting V5 Filesystem [ 70.479984][ T4764] netlink: 260 bytes leftover after parsing attributes in process `syz.2.164'. [ 70.647680][ T4724] XFS (loop3): Ending clean mount [ 70.661084][ T4724] XFS (loop3): Quotacheck needed: Please wait. [ 70.705652][ T4724] XFS (loop3): Quotacheck: Done. [ 70.764643][ T4192] XFS (loop3): Unmounting Filesystem [ 70.954636][ T4779] loop3: detected capacity change from 0 to 512 [ 70.972633][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 71.012367][ T4340] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.021186][ T4779] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 71.036475][ T4779] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.110259][ T4785] loop1: detected capacity change from 0 to 4096 [ 71.232509][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 71.253457][ T4340] usb 1-1: Using ep0 maxpacket: 16 [ 71.277541][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.284217][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.377804][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 71.397515][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.484770][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 71.498262][ T13] pvrusb2: ********** [ 71.511307][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 71.539645][ T13] pvrusb2: Important functionality might not be entirely working. [ 71.562627][ T4340] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 71.577382][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 71.592795][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.611174][ T4340] usb 1-1: Product: syz [ 71.616162][ T13] pvrusb2: ********** [ 71.632858][ T4340] usb 1-1: Manufacturer: syz [ 71.637497][ T4340] usb 1-1: SerialNumber: syz [ 71.709274][ T2421] pvrusb2: Invalid write control endpoint [ 71.752697][ T4814] capability: warning: `syz.4.185' uses 32-bit capabilities (legacy support in use) [ 71.803550][ T2421] pvrusb2: Invalid write control endpoint [ 71.809506][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 71.811735][ T4814] program syz.4.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.827827][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 71.836425][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 71.862460][ T2421] pvrusb2: Device being rendered inoperable [ 71.870601][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 71.889131][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 71.911125][ T4775] pvrusb2: Attempted to execute control transfer when device not ok [ 71.924097][ T4340] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 71.938414][ T2421] pvrusb2: Attached sub-driver cx25840 [ 71.957998][ T4197] usb 3-1: USB disconnect, device number 4 [ 71.964022][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 71.978734][ T4340] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 72.008587][ T4795] loop1: detected capacity change from 0 to 40427 [ 72.027754][ T4340] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 72.032390][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 72.048311][ T4340] usb 1-1: media controller created [ 72.119563][ T4795] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 72.132948][ T4340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.166589][ T4795] F2FS-fs (loop1): invalid crc value [ 72.194895][ T4795] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.202546][ T4340] zl10353_read_register: readreg error (reg=127, ret==-71) [ 72.226361][ T4833] loop3: detected capacity change from 0 to 1024 [ 72.285600][ T4340] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 72.297934][ T4833] hfsplus: invalid length 32517 has been corrected to 255 [ 72.317908][ T4340] usb 1-1: USB disconnect, device number 2 [ 72.337421][ T4795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 72.436801][ T4186] attempt to access beyond end of device [ 72.436801][ T4186] loop1: rw=2049, want=45112, limit=40427 [ 72.519777][ T4836] hfsplus: bad catalog entry type [ 72.600380][ T3098] hfsplus: b-tree write err: -5, ino 4 [ 72.899249][ T4850] netlink: 48 bytes leftover after parsing attributes in process `syz.2.202'. [ 72.918956][ T4842] FAT-fs (loop0): Directory bread(block 64) failed [ 72.949582][ T4842] FAT-fs (loop0): Directory bread(block 65) failed [ 72.975169][ T4842] FAT-fs (loop0): Directory bread(block 66) failed [ 73.004157][ T4842] FAT-fs (loop0): Directory bread(block 67) failed [ 73.010786][ T4842] FAT-fs (loop0): Directory bread(block 68) failed [ 73.042419][ T4842] FAT-fs (loop0): Directory bread(block 69) failed [ 73.049075][ T4842] FAT-fs (loop0): Directory bread(block 70) failed [ 73.056000][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.092482][ T4842] FAT-fs (loop0): Directory bread(block 71) failed [ 73.097768][ T4854] mmap: syz.2.204 (4854) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 73.099284][ T4842] FAT-fs (loop0): Directory bread(block 72) failed [ 73.161495][ T4842] FAT-fs (loop0): Directory bread(block 73) failed [ 73.379599][ T4844] set_capacity_and_notify: 3 callbacks suppressed [ 73.379614][ T4844] loop3: detected capacity change from 0 to 32768 [ 73.430893][ T4861] loop2: detected capacity change from 0 to 8192 [ 73.437346][ T4844] OCFS2: ERROR (device loop3): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 4098 has bad extent record (0, 1, 0) [ 73.471881][ T4844] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 73.474343][ T4197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.485416][ T4844] OCFS2: File system is now read-only. [ 73.501281][ T4844] (syz.3.200,4844,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 73.509950][ T4844] (syz.3.200,4844,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 73.519118][ T23] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 73.520250][ T4844] (syz.3.200,4844,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 73.537461][ T4844] (syz.3.200,4844,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 73.544842][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.546267][ T4844] (syz.3.200,4844,0):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 73.585195][ T4844] (syz.3.200,4844,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 73.585230][ T4844] (syz.3.200,4844,0):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 73.593651][ T23] usb 5-1: config 0 descriptor?? [ 73.655766][ T4844] (syz.3.200,4844,0):ocfs2_initialize_super:2281 ERROR: status = -30 [ 73.674144][ T23] cp210x 5-1:0.0: cp210x converter detected [ 73.680773][ T4844] (syz.3.200,4844,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 73.732573][ T4197] usb 2-1: Using ep0 maxpacket: 32 [ 73.825786][ T4870] netlink: 80 bytes leftover after parsing attributes in process `syz.3.209'. [ 73.841592][ T4870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 73.862557][ T4197] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 73.864056][ T4425] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.870786][ T4197] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 73.870849][ T4197] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 73.870870][ T4197] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 73.870891][ T4197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.931817][ T4868] loop2: detected capacity change from 0 to 4096 [ 73.939841][ T23] usb 5-1: cp210x converter now attached to ttyUSB0 [ 73.952711][ T4868] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 73.996676][ T4868] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 74.022572][ T4197] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.028214][ T4868] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 74.062398][ T4197] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.065237][ T4868] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 74.083769][ T4868] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 74.098748][ T4197] usb 2-1: Product: syz [ 74.118776][ T4197] usb 2-1: Manufacturer: syz [ 74.128899][ T4197] usb 2-1: SerialNumber: syz [ 74.148690][ T4868] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 74.151217][ T4226] usb 5-1: USB disconnect, device number 4 [ 74.161174][ T4868] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 74.176637][ T4197] usb 2-1: config 0 descriptor?? [ 74.193959][ T4226] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 74.204143][ T4868] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 74.207996][ T4226] cp210x 5-1:0.0: device disconnected [ 74.223156][ T4197] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.233334][ T4868] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 74.268548][ T4197] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.271015][ T4868] ntfs: volume version 3.1. [ 74.393010][ T4425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.432773][ T4425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.448377][ T4425] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.456137][ T4857] ldusb 2-1:0.0: Write buffer overflow, 1 bytes dropped [ 74.457540][ T4425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.482138][ T4425] usb 1-1: config 0 descriptor?? [ 74.497013][ T4886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.532965][ T4320] usb 2-1: USB disconnect, device number 3 [ 74.533019][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 74.546070][ T4857] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 74.560401][ T4320] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 74.653210][ T4891] loop2: detected capacity change from 0 to 764 [ 74.858243][ T4425] usbhid 1-1:0.0: can't add hid device: -71 [ 74.865389][ T4425] usbhid: probe of 1-1:0.0 failed with error -71 [ 74.890954][ T4425] usb 1-1: USB disconnect, device number 3 [ 75.021540][ T4905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 75.355852][ T4897] loop4: detected capacity change from 0 to 40427 [ 75.399647][ T4921] loop2: detected capacity change from 0 to 128 [ 75.428472][ T4897] F2FS-fs (loop4): invalid crc value [ 75.480078][ T4897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.627154][ T4926] loop0: detected capacity change from 0 to 2048 [ 75.667158][ T4911] loop3: detected capacity change from 0 to 32768 [ 75.683388][ T4897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.755183][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 75.849519][ T4911] XFS (loop3): Mounting V5 Filesystem [ 75.865482][ T4935] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.902535][ T4926] syz.0.235 (4926) used greatest stack depth: 20504 bytes left [ 75.935496][ T4911] XFS (loop3): Ending clean mount [ 75.980014][ T4911] XFS (loop3): Quotacheck needed: Please wait. [ 76.074454][ T4911] XFS (loop3): Quotacheck: Done. [ 76.098703][ T4952] device macsec1 entered promiscuous mode [ 76.138504][ T4952] device macvlan1 entered promiscuous mode [ 76.171406][ T4954] loop1: detected capacity change from 0 to 512 [ 76.172113][ T4192] XFS (loop3): Unmounting Filesystem [ 76.183308][ T4952] device macvlan1 left promiscuous mode [ 76.206751][ T4954] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.319939][ T4954] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.244: corrupted in-inode xattr [ 76.349106][ T4954] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.244: couldn't read orphan inode 15 (err -117) [ 76.384915][ T7] cfg80211: failed to load regulatory.db [ 76.387623][ T4963] loop0: detected capacity change from 0 to 16 [ 76.473248][ T4954] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.522232][ T4963] erofs: (device loop0): mounted with root inode @ nid 36. [ 77.062424][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 77.312423][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 77.390480][ T5008] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 77.412846][ T5008] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.432639][ T13] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 77.451365][ T13] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 77.461974][ T13] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 77.477807][ T5008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 77.487268][ T5008] System zones: 0-1, 3-36 [ 77.497428][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 77.507596][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 77.573563][ T13] usb 2-1: language id specifier not provided by device, defaulting to English [ 77.702628][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.722016][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.740254][ T13] usb 2-1: Product: syz [ 77.748288][ T13] usb 2-1: Manufacturer: 熖∥辋ᗠ䒣䬈ﯶé»ï¿Œâžì´“䎗㺌܌랕기䆖à å¶–䕈ۺႊâ ï™œ [ 77.792533][ T13] usb 2-1: SerialNumber: syz [ 77.822806][ T4974] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.830423][ T4974] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.873975][ T4998] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 77.892780][ T4998] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 77.925705][ T4998] F2FS-fs (loop2): invalid crc value [ 77.980269][ T5012] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.268: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.010714][ T5014] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 78.063994][ T4998] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 78.074340][ T5012] __quota_error: 11 callbacks suppressed [ 78.074356][ T5012] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 78.091015][ T5012] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.268: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.095420][ T13] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 78.118243][ T5012] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 78.177233][ T13] usb 2-1: USB disconnect, device number 4 [ 78.188745][ T5012] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.268: Failed to acquire dquot type 0 [ 78.227995][ T4998] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 78.230887][ T5012] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 78.249892][ T4998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.275281][ T5012] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.268: mark_inode_dirty error [ 78.337067][ T5012] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 78.343646][ T26] audit: type=1800 audit(1771257274.813:8): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.263" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 78.361026][ T5012] EXT4-fs (loop0): 1 orphan inode deleted [ 78.381880][ T4998] attempt to access beyond end of device [ 78.381880][ T4998] loop2: rw=2049, want=45104, limit=40427 [ 78.395610][ T3066] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.404628][ T5012] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 78.449828][ T3066] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 78.462813][ T3066] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 78.739264][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 78.749815][ T5043] set_capacity_and_notify: 5 callbacks suppressed [ 78.749828][ T5043] loop1: detected capacity change from 0 to 256 [ 78.778799][ T154] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.804243][ T154] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 78.822728][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:2: Failed to release dquot type 0 [ 78.843130][ T4194] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 78.867468][ T5043] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.868414][ T4194] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 78.881790][ T5043] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 78.903963][ T4194] EXT4-fs error (device loop0): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 78.927960][ T5043] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.454671][ T5065] loop1: detected capacity change from 0 to 164 [ 79.635366][ T5051] loop2: detected capacity change from 0 to 40427 [ 79.705078][ T5051] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 79.739402][ T5051] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.787643][ T5057] loop0: detected capacity change from 0 to 40427 [ 79.804223][ T5051] F2FS-fs (loop2): invalid crc value [ 79.864453][ T5057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 79.915827][ T5051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.923728][ T5057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.038247][ T5057] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.085655][ T5051] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 80.094653][ T5051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 80.117862][ T5095] loop4: detected capacity change from 0 to 512 [ 80.197746][ T5101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'. [ 80.212437][ T5101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'. [ 80.227217][ T5095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.289507][ T5057] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.304375][ T5057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.323011][ T5105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'. [ 80.374210][ T5104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'. [ 80.412631][ T5095] EXT4-fs (loop4): 1 orphan inode deleted [ 80.477532][ T5095] EXT4-fs (loop4): 1 truncate cleaned up [ 80.483335][ T5095] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 80.548742][ T5095] EXT4-fs (loop4): shut down requested (1) [ 80.777872][ T5125] Set syz1 is full, maxelem 1029 reached [ 80.836562][ T5120] loop3: detected capacity change from 0 to 4096 [ 80.927055][ T5120] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 80.992613][ T5120] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 81.346284][ T5154] input: syz0 as /devices/virtual/input/input5 [ 81.450979][ T5156] loop3: detected capacity change from 0 to 4096 [ 81.521519][ T5156] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 81.597173][ T5156] ntfs3: loop3: Failed to load $Extend. [ 81.603410][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.764742][ T5178] vcan0: tx address claim with dlc 0 [ 81.847424][ T5183] loop1: detected capacity change from 0 to 136 [ 81.911168][ T5183] Attempt to read inode for relocated directory [ 81.972646][ T13] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 81.983872][ T13] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 81.996593][ T5188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.002470][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.004307][ T5188] IPv6: NLM_F_CREATE should be set when creating new route [ 82.019977][ T5188] IPv6: NLM_F_CREATE should be set when creating new route [ 82.027217][ T5188] IPv6: NLM_F_CREATE should be set when creating new route [ 82.037237][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.070976][ T13] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 82.222471][ T4425] Bluetooth: hci2: command 0x0401 tx timeout [ 82.239582][ T5190] loop1: detected capacity change from 0 to 32768 [ 82.279241][ T5192] loop4: detected capacity change from 0 to 64 [ 82.286883][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 82.309101][ T5190] (syz.1.343,5190,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.327756][ T5190] (syz.1.343,5190,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.413721][ T5190] JBD2: Ignoring recovery information on journal [ 82.429011][ T26] audit: type=1804 audit(1771257278.893:9): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.344" name="/newroot/69/bus/file1" dev="loop4" ino=21 res=1 errno=0 [ 82.450691][ T7] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 82.462530][ T7] usb 4-1: config 2 has no interface number 0 [ 82.468645][ T7] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 82.485933][ T7] usb 4-1: config 2 interface 88 has no altsetting 0 [ 82.508695][ T5190] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 82.683517][ T7] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 82.693341][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.703450][ T7] usb 4-1: Product: syz [ 82.707633][ T7] usb 4-1: Manufacturer: syz [ 82.712231][ T7] usb 4-1: SerialNumber: syz [ 82.732605][ T5179] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.763917][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 82.902883][ T5205] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.963948][ T5179] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 83.010367][ T5205] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #2: comm syz.4.349: Directory hole found for htree leaf block 0 [ 83.212235][ T5220] ALSA: mixer_oss: invalid OSS volume 'E' [ 83.220182][ T5220] ALSA: mixer_oss: invalid OSS volume 'Æ' [ 83.371085][ T5227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.403397][ T5224] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 83.420161][ T13] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 83.434405][ T13] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 83.470338][ T13] usb 1-1: USB disconnect, device number 4 [ 83.470789][ T5224] Remounting filesystem read-only [ 83.501518][ T5233] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 83.682565][ T7] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 83.704247][ T7] asix: probe of 4-1:2.88 failed with error -71 [ 83.719165][ T7] usb 4-1: USB disconnect, device number 2 [ 83.822188][ T5237] set_capacity_and_notify: 4 callbacks suppressed [ 83.822203][ T5237] loop4: detected capacity change from 0 to 8192 [ 83.843884][ T5241] loop1: detected capacity change from 0 to 512 [ 83.878354][ T5245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.365'. [ 83.900129][ T5241] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.905199][ T5237] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 83.942600][ T5237] REISERFS (device loop4): using ordered data mode [ 83.950768][ T5237] reiserfs: using flush barriers [ 83.968043][ T5241] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.971084][ T5237] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.991688][ T5237] REISERFS (device loop4): checking transaction log (loop4) [ 84.022255][ T5241] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3887: comm syz.1.363: Allocating blocks 41-42 which overlap fs metadata [ 84.168440][ T5241] Quota error (device loop1): write_blk: dquota write failed [ 84.176549][ T5241] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 84.232567][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.242052][ T5241] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 84.273115][ T5241] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.363: Failed to acquire dquot type 1 [ 84.311520][ T5241] EXT4-fs error (device loop1): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.326454][ T5237] REISERFS (device loop4): Using tea hash to sort names [ 84.351026][ T5237] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 84.363223][ T5251] loop2: detected capacity change from 0 to 32768 [ 84.372151][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.363: corrupted inode contents [ 84.390982][ T5237] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 84.401413][ T5241] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #12: comm syz.1.363: mark_inode_dirty error [ 84.414685][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.363: corrupted inode contents [ 84.434454][ T5241] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.363: mark_inode_dirty error [ 84.482429][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 84.492870][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.363: corrupted inode contents [ 84.521700][ T5241] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 84.532419][ T5241] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.363: corrupted inode contents [ 84.547299][ T5241] EXT4-fs error (device loop1): ext4_truncate:4279: inode #12: comm syz.1.363: mark_inode_dirty error [ 84.559318][ T5241] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 84.594033][ T5241] EXT4-fs (loop1): 1 truncate cleaned up [ 84.600312][ T5241] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 84.628297][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.635229][ T23] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 84.643788][ T23] usb 1-1: config 0 has no interface number 0 [ 84.683919][ T23] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 84.733165][ T5241] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback. [ 84.863022][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 84.880321][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.893296][ T23] usb 1-1: Product: syz [ 84.897543][ T23] usb 1-1: Manufacturer: syz [ 84.911548][ T23] usb 1-1: SerialNumber: syz [ 84.918039][ T4233] kernel read not supported for file /dsp (pid: 4233 comm: kworker/1:3) [ 84.934881][ T23] usb 1-1: config 0 descriptor?? [ 84.945344][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.953129][ T5248] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.009051][ T5268] loop3: detected capacity change from 0 to 256 [ 85.093849][ T5272] loop1: detected capacity change from 0 to 4096 [ 85.151060][ T5272] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 85.165578][ T5272] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 85.182542][ T5248] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.190897][ T5272] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 85.219033][ T5272] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 85.234213][ T5272] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 85.247586][ T5272] ntfs: volume version 3.1. [ 85.258901][ T5272] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 85.272407][ T5272] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 85.344216][ T5274] loop3: detected capacity change from 0 to 2048 [ 85.459178][ T5274] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.693429][ T5284] loop3: detected capacity change from 0 to 8192 [ 85.756925][ T5284] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 85.766490][ T5284] REISERFS (device loop3): using ordered data mode [ 85.773793][ T5284] reiserfs: using flush barriers [ 85.781369][ T5284] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.803601][ T5284] REISERFS (device loop3): checking transaction log (loop3) [ 85.816770][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.872985][ T23] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 85.884001][ T23] asix: probe of 1-1:0.188 failed with error -71 [ 85.900947][ T23] usb 1-1: USB disconnect, device number 5 [ 85.926767][ T5284] REISERFS (device loop3): Using tea hash to sort names [ 85.934528][ T5284] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 85.948288][ T5284] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 86.122386][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 86.191760][ T5293] loop3: detected capacity change from 0 to 512 [ 86.217892][ T5293] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.242906][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.260128][ T13] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.269196][ T5293] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.270465][ T5293] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.383: Allocating blocks 41-42 which overlap fs metadata [ 86.276569][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.306870][ T5293] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.383: Failed to acquire dquot type 1 [ 86.320695][ T13] usb 2-1: config 0 descriptor?? [ 86.329708][ T5293] EXT4-fs error (device loop3): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 86.346786][ T5293] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.383: corrupted inode contents [ 86.360110][ T5293] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #12: comm syz.3.383: mark_inode_dirty error [ 86.408386][ T5293] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.383: corrupted inode contents [ 86.427673][ T5293] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.383: mark_inode_dirty error [ 86.440094][ T5293] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.383: corrupted inode contents [ 86.459323][ T5293] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 86.472405][ T5293] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #12: comm syz.3.383: corrupted inode contents [ 86.485721][ T5293] EXT4-fs error (device loop3): ext4_truncate:4279: inode #12: comm syz.3.383: mark_inode_dirty error [ 86.499199][ T5293] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 86.515096][ T5293] EXT4-fs (loop3): 1 truncate cleaned up [ 86.520921][ T5293] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 86.634800][ T5293] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 86.661137][ T5309] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 86.682906][ T5309] NCSI netlink: No device for ifindex 131092 [ 86.817971][ T13] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 86.943777][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 86.949968][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 87.221734][ T7] usb 2-1: USB disconnect, device number 5 [ 87.847107][ T5319] loop1: detected capacity change from 0 to 8192 [ 87.891256][ T5321] loop4: detected capacity change from 0 to 1024 [ 87.963161][ T5321] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.975653][ T5319] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 88.025207][ T5319] REISERFS (device loop1): using ordered data mode [ 88.125665][ T5319] reiserfs: using flush barriers [ 88.151552][ T5321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 88.163518][ T5319] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.175562][ T5321] System zones: 0-1, 3-36 [ 88.206913][ T5321] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,max_dir_size_kb=0x0000000000000002,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 88.241273][ T5317] JBD2: Ignoring recovery information on journal [ 88.252548][ T5319] REISERFS (device loop1): checking transaction log (loop1) [ 88.295738][ T5321] EXT4-fs (loop4): shut down requested (2) [ 88.348715][ T154] hfsplus: b-tree write err: -5, ino 3 [ 88.355214][ T5317] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.493296][ T4192] ocfs2: Unmounting device (7,3) on (node local) [ 88.609769][ T5319] REISERFS (device loop1): Using tea hash to sort names [ 88.618608][ T5319] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 88.638261][ T5319] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 88.879357][ T5336] set_capacity_and_notify: 2 callbacks suppressed [ 88.879367][ T5336] loop4: detected capacity change from 0 to 32768 [ 88.980250][ T5336] XFS (loop4): Mounting V5 Filesystem [ 89.007442][ T5336] XFS (loop4): Ending clean mount [ 89.022625][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 89.028794][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 89.040144][ T4190] XFS (loop4): Unmounting Filesystem [ 89.322552][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.339340][ T5364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.412'. [ 89.369411][ T5364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.412'. [ 89.381853][ T5364] netlink: 'syz.0.412': attribute type 5 has an invalid length. [ 89.396645][ T5364] netlink: 43 bytes leftover after parsing attributes in process `syz.0.412'. [ 89.398834][ T5362] loop1: detected capacity change from 0 to 4096 [ 89.501237][ T5362] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 89.562534][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 89.573611][ T144] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 89.581494][ T4186] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 89.599127][ T4186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 89.622546][ T4186] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 89.645453][ T1230] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 89.665766][ T4186] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 89.697579][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.756001][ T13] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.786305][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.832198][ T13] usb 4-1: config 0 descriptor?? [ 89.901414][ T5366] loop0: detected capacity change from 0 to 32768 [ 89.920453][ T5383] device bridge0 entered promiscuous mode [ 89.926924][ T5382] device bridge0 left promiscuous mode [ 89.963804][ T5366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.413 (5366) [ 90.007728][ T5366] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.029974][ T5366] BTRFS info (device loop0): setting nodatacow, compression disabled [ 90.041150][ T5366] BTRFS info (device loop0): setting datasum, datacow enabled [ 90.049361][ T5366] BTRFS info (device loop0): force clearing of disk cache [ 90.058010][ T5366] BTRFS info (device loop0): enabling ssd optimizations [ 90.065979][ T5366] BTRFS info (device loop0): using spread ssd allocation scheme [ 90.075315][ T5366] BTRFS info (device loop0): turning on sync discard [ 90.082771][ T5366] BTRFS info (device loop0): turning off barriers [ 90.091783][ T5366] BTRFS info (device loop0): enabling auto defrag [ 90.104038][ T5366] BTRFS info (device loop0): not using ssd optimizations [ 90.105698][ T13] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 90.119657][ T5366] BTRFS info (device loop0): not using spread ssd allocation scheme [ 90.140399][ T5390] loop4: detected capacity change from 0 to 164 [ 90.162661][ T5366] BTRFS info (device loop0): using free space tree [ 90.169201][ T5366] BTRFS info (device loop0): has skinny extents [ 90.408771][ T5366] BTRFS info (device loop0): clearing free space tree [ 90.423900][ T5366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.464826][ T5366] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.486520][ T5414] loop4: detected capacity change from 0 to 2048 [ 90.567446][ T5366] BTRFS info (device loop0): creating free space tree [ 90.596012][ T5366] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.610689][ T5414] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.612562][ T5366] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.692664][ T5418] device erspan0 entered promiscuous mode [ 90.741984][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 90.741999][ T26] audit: type=1800 audit(1771257287.203:11): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.413" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 90.870897][ T5423] loop1: detected capacity change from 0 to 1024 [ 90.936174][ T5424] BTRFS info (device loop0): balance: start -sconvert=raid0,soft [ 90.960025][ T5423] EXT4-fs (loop1): inline encryption not supported [ 91.000168][ T5424] BTRFS info (device loop0): left=0, need=98304, flags=10 [ 91.012082][ T5424] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 91.020337][ T5424] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 91.034380][ T5424] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 91.043585][ T5424] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 91.051239][ T5424] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 91.058926][ T5424] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 91.066779][ T5424] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 91.090359][ T5424] BTRFS info (device loop0): relocating block group 1048576 flags system [ 91.103035][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 91.122004][ T5423] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,inlinecrypt,,errors=continue. Quota mode: none. [ 91.195519][ T5434] loop4: detected capacity change from 0 to 512 [ 91.237690][ T5434] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 91.244762][ T5424] BTRFS info (device loop0): balance: ended with status: 0 [ 91.257553][ T5434] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.362923][ T5438] program syz.1.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.376139][ T7] usb 4-1: USB disconnect, device number 3 [ 91.906171][ T7] Bluetooth: hci4: command 0x0407 tx timeout [ 91.961169][ T5467] loop4: detected capacity change from 0 to 1024 [ 91.990262][ T5468] UHID_CREATE from different security context by process 202 (syz.3.444), this is not allowed. [ 91.993898][ T5450] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.033505][ T5450] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.100338][ T5474] loop1: detected capacity change from 0 to 512 [ 92.109297][ T5476] loop0: detected capacity change from 0 to 4096 [ 92.116692][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 92.137429][ T5467] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.158115][ T5476] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 92.178592][ T5474] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 92.181611][ T5467] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.443: bg 0: block 112: padding at end of block bitmap is not set [ 92.199848][ T5474] EXT4-fs error (device loop1): __ext4_iget:4912: inode #11: block 1: comm syz.1.448: invalid block [ 92.219341][ T5467] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 92.236107][ T5476] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 92.252229][ T5467] EXT4-fs (loop4): This should not happen!! Data will be lost [ 92.252229][ T5467] [ 92.292869][ T5474] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.448: couldn't read orphan inode 11 (err -117) [ 92.306698][ T5476] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 92.325457][ T5476] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 92.340142][ T5476] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 92.377983][ T5474] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000004,dioread_lock,max_dir_size_kb=0x0000000000002004,nomblk_io_submit,nodiscard,usrquota,nojournal_checksum,noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 92.407016][ T5476] ntfs: volume version 3.1. [ 92.421065][ T5476] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 92.470021][ T5476] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 92.485791][ T5480] fido_id[5480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.516856][ T5484] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.541971][ T5476] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 92.592833][ T5476] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 92.647013][ T5474] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.448: Directory hole found for htree leaf block 0 [ 92.949877][ T5492] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 93.021316][ T5488] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.452 (5488) [ 93.041225][ T5488] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.050668][ T5488] BTRFS info (device loop0): turning on flush-on-commit [ 93.057708][ T5488] BTRFS info (device loop0): force clearing of disk cache [ 93.064863][ T5488] BTRFS info (device loop0): enabling ssd optimizations [ 93.071805][ T5488] BTRFS info (device loop0): using spread ssd allocation scheme [ 93.079521][ T5488] BTRFS info (device loop0): max_inline at 17 [ 93.085642][ T5488] BTRFS info (device loop0): turning off barriers [ 93.092078][ T5488] BTRFS info (device loop0): turning off flush-on-commit [ 93.099239][ T5488] BTRFS info (device loop0): allowing degraded mounts [ 93.106427][ T5488] BTRFS info (device loop0): not using ssd optimizations [ 93.113502][ T5488] BTRFS info (device loop0): not using spread ssd allocation scheme [ 93.121484][ T5488] BTRFS info (device loop0): using free space tree [ 93.128206][ T5488] BTRFS info (device loop0): has skinny extents [ 93.543455][ T5488] BTRFS info (device loop0): clearing free space tree [ 93.550308][ T5488] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.560802][ T5488] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.578278][ T5488] BTRFS info (device loop0): creating free space tree [ 93.586284][ T5488] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.596112][ T5488] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.841772][ T7] kernel write not supported for file /vcsa1 (pid: 7 comm: kworker/0:0) [ 94.145475][ T5541] set_capacity_and_notify: 4 callbacks suppressed [ 94.145490][ T5541] loop0: detected capacity change from 0 to 512 [ 94.152224][ T5543] loop1: detected capacity change from 0 to 512 [ 94.222168][ T5543] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.477: invalid block [ 94.256520][ T5543] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.477: invalid indirect mapped block 10 (level 1) [ 94.278390][ T5541] EXT4-fs (loop0): inline encryption not supported [ 94.288880][ T5541] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 94.357370][ T5543] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.477: invalid indirect mapped block 8 (level 1) [ 94.398839][ T5543] EXT4-fs (loop1): 1 truncate cleaned up [ 94.411811][ T5541] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.462: corrupted in-inode xattr [ 94.436091][ T5543] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 94.474909][ T5539] loop3: detected capacity change from 0 to 32768 [ 94.479046][ T5541] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.462: couldn't read orphan inode 15 (err -117) [ 94.509169][ T5541] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000001,noblock_validity,noload,delalloc,max_batch_time=0x0000000000000001,inlinecrypt,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 94.627445][ T5539] UFO tlock:0xffffc90002892090 [ 94.692536][ T5449] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.983638][ T5565] netlink: 136 bytes leftover after parsing attributes in process `syz.0.475'. [ 95.012060][ T5449] usb 5-1: Using ep0 maxpacket: 16 [ 95.116047][ T5571] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 95.166161][ T5449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.197922][ T5449] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.203316][ T5575] vcan0: tx address claim with dlc 0 [ 95.217316][ T5449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.247020][ T5449] usb 5-1: config 0 descriptor?? [ 95.501392][ T5563] loop3: detected capacity change from 0 to 32768 [ 95.631284][ T5581] loop2: detected capacity change from 0 to 32768 [ 95.684069][ T5581] (syz.2.483,5581,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.735543][ T5449] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 95.739813][ T5581] (syz.2.483,5581,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 95.818960][ T5598] loop3: detected capacity change from 0 to 512 [ 95.851507][ T5581] JBD2: Ignoring recovery information on journal [ 95.940978][ T5598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.998725][ T5581] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.076979][ T5598] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.490: corrupted in-inode xattr [ 96.090466][ T5598] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.490: couldn't read orphan inode 15 (err -117) [ 96.102931][ T5598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.148141][ T5449] usb 5-1: USB disconnect, device number 5 [ 96.238851][ T5603] loop1: detected capacity change from 0 to 256 [ 96.333241][ T5603] exfat: Deprecated parameter 'namecase' [ 96.338979][ T5603] exfat: Deprecated parameter 'utf8' [ 96.344387][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 96.390314][ T5603] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 96.734435][ T5620] loop1: detected capacity change from 0 to 512 [ 96.811718][ T5628] vcan0: tx address claim with dlc 0 [ 96.855927][ T5620] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 96.886569][ T5620] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.936648][ T5634] loop0: detected capacity change from 0 to 512 [ 96.960033][ T5634] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.016371][ T5638] loop4: detected capacity change from 0 to 4096 [ 97.023326][ T5634] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.038892][ T5634] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.517: Invalid block bitmap block 0 in block_group 0 [ 97.054007][ T5634] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 97.066892][ T5634] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.517: attempt to clear invalid blocks 983261 len 1 [ 97.082654][ T5634] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.517: Invalid inode table block 0 in block_group 0 [ 97.096695][ T5634] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 97.109769][ T5638] __ntfs_warning: 7 callbacks suppressed [ 97.109784][ T5638] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 97.163412][ T5634] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 97.172813][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.196282][ T5634] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.517: Invalid inode table block 0 in block_group 0 [ 97.200553][ T5638] ntfs: volume version 3.1. [ 97.210952][ T5634] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 97.242220][ T5634] EXT4-fs error (device loop0): ext4_truncate:4279: inode #11: comm syz.0.517: mark_inode_dirty error [ 97.260561][ T5634] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 97.279539][ T5634] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.517: Invalid inode table block 0 in block_group 0 [ 97.304341][ T5634] EXT4-fs (loop0): 1 truncate cleaned up [ 97.310021][ T5634] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 97.446141][ T4409] kernel write not supported for file /255/clear_refs (pid: 4409 comm: kworker/1:8) [ 97.545390][ T5646] mkiss: ax0: crc mode is auto. [ 97.572527][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.598747][ T7] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.619247][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.658963][ T7] usb 3-1: config 0 descriptor?? [ 97.717986][ T5658] netlink: 260 bytes leftover after parsing attributes in process `syz.0.516'. [ 97.727857][ T5649] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 97.769280][ T5649] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 97.788566][ T5649] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 97.814584][ T5649] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 97.830720][ T5649] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 97.856609][ T5649] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 97.905725][ T5649] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 97.934191][ T5660] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 97.934945][ T5649] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 97.962046][ T5649] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 97.972551][ T5660] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.993048][ T5649] ntfs: volume version 3.1. [ 98.133871][ T7] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 98.152225][ T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input6 [ 98.294729][ T7] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 98.356691][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 98.569203][ T5681] hfsplus: bad catalog entry type [ 98.601033][ T3098] hfsplus: b-tree write err: -5, ino 4 [ 98.856290][ T5686] XFS: attr2 mount option is deprecated. [ 98.878753][ T4422] usb 3-1: USB disconnect, device number 5 [ 98.980955][ T5686] XFS (loop4): Mounting V5 Filesystem [ 99.157926][ T5686] XFS (loop4): Ending clean mount [ 99.217236][ T5686] XFS (loop4): Quotacheck needed: Please wait. [ 99.282404][ T5686] XFS (loop4): Quotacheck: Done. [ 99.305457][ T5700] set_capacity_and_notify: 4 callbacks suppressed [ 99.305470][ T5700] loop1: detected capacity change from 0 to 32768 [ 99.433898][ T5700] XFS (loop1): Mounting V5 Filesystem [ 99.468561][ T4190] XFS (loop4): Unmounting Filesystem [ 99.493699][ T5712] loop3: detected capacity change from 0 to 256 [ 99.562066][ T5715] loop2: detected capacity change from 0 to 1024 [ 99.573850][ T5700] XFS (loop1): Ending clean mount [ 99.675829][ T5712] FAT-fs (loop3): Directory bread(block 64) failed [ 99.714089][ T5712] FAT-fs (loop3): Directory bread(block 65) failed [ 99.720760][ T5712] FAT-fs (loop3): Directory bread(block 66) failed [ 99.725877][ T5695] loop0: detected capacity change from 0 to 40427 [ 99.751636][ T5695] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 99.773237][ T5712] FAT-fs (loop3): Directory bread(block 67) failed [ 99.773530][ T4186] XFS (loop1): Unmounting Filesystem [ 99.779877][ T5712] FAT-fs (loop3): Directory bread(block 68) failed [ 99.817474][ T5695] F2FS-fs (loop0): invalid crc value [ 99.876977][ T5712] FAT-fs (loop3): Directory bread(block 69) failed [ 99.881695][ T5715] hfsplus: invalid length 32517 has been corrected to 255 [ 99.893966][ T5712] FAT-fs (loop3): Directory bread(block 70) failed [ 99.912623][ T5695] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.932746][ T5712] FAT-fs (loop3): Directory bread(block 71) failed [ 99.978018][ T5712] FAT-fs (loop3): Directory bread(block 72) failed [ 99.986800][ T5712] FAT-fs (loop3): Directory bread(block 73) failed [ 100.074374][ T5695] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.290042][ T4194] attempt to access beyond end of device [ 100.290042][ T4194] loop0: rw=2049, want=45112, limit=40427 [ 100.854221][ T5739] capability: warning: `syz.1.545' uses deprecated v2 capabilities in a way that may be insecure [ 101.065959][ T5731] loop3: detected capacity change from 0 to 40427 [ 101.103505][ T5731] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 101.151306][ T5731] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 101.199516][ T5733] loop2: detected capacity change from 0 to 32768 [ 101.204834][ T5731] F2FS-fs (loop3): invalid crc value [ 101.234483][ T5731] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 101.239603][ T5729] loop4: detected capacity change from 0 to 40427 [ 101.300761][ T5729] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 101.313716][ T5729] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 101.332507][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.376492][ T5729] F2FS-fs (loop4): invalid crc value [ 101.395887][ T5733] XFS (loop2): Mounting V5 Filesystem [ 101.411461][ T5731] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 101.413378][ T5729] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.459503][ T5731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.466621][ T5729] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.475473][ T5729] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.527082][ T5733] XFS (loop2): Ending clean mount [ 101.573711][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 101.593991][ T4193] XFS (loop2): Unmounting Filesystem [ 101.680054][ T5731] attempt to access beyond end of device [ 101.680054][ T5731] loop3: rw=2049, want=45104, limit=40427 [ 101.702702][ T13] usb 2-1: config 0 has no interfaces? [ 101.784583][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 101.809986][ T13] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.842489][ T13] usb 2-1: Manufacturer: syz [ 101.882351][ T13] usb 2-1: config 0 descriptor?? [ 102.138283][ T5784] device macsec1 entered promiscuous mode [ 102.154077][ T4226] usb 2-1: USB disconnect, device number 6 [ 102.157116][ T5784] device macvlan1 entered promiscuous mode [ 102.211426][ T5784] device macvlan1 left promiscuous mode [ 102.216212][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 102.390239][ T5799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.570'. [ 102.431403][ T5796] loop3: detected capacity change from 0 to 4096 [ 102.468445][ T5804] loop0: detected capacity change from 0 to 1024 [ 102.483558][ T5796] __ntfs_warning: 12 callbacks suppressed [ 102.483571][ T5796] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 102.523724][ T5796] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 102.530472][ T5802] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.545102][ T5804] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 102.572889][ T5796] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 102.595132][ T5804] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.610149][ T5796] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 102.643415][ T5804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 102.651857][ T5804] System zones: 0-1, 3-36 [ 102.656800][ T5796] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 102.683180][ T5796] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 102.691333][ T5796] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 102.742528][ T5796] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 102.760464][ T5796] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 102.782875][ T5796] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 102.801556][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 102.839162][ T5809] loop4: detected capacity change from 0 to 764 [ 102.873639][ T5796] ntfs: volume version 3.1. [ 102.957255][ C0] blk_update_request: operation not supported error, dev loop0, sector 32 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 103.021041][ T4194] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 103.094734][ T4194] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 103.223679][ T5815] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.544827][ T5825] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.573: invalid indirect mapped block 4294967295 (level 1) [ 103.602003][ T5825] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.573: invalid indirect mapped block 4294967295 (level 1) [ 103.682752][ T5832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 103.689010][ T5810] XFS (loop1): Mounting V5 Filesystem [ 103.700933][ T5825] EXT4-fs (loop4): 2 truncates cleaned up [ 103.715868][ T5825] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,abort,mb_optimize_scan=0x0000000000000001,nobarrier,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 103.795338][ T5825] EXT4-fs (loop4): shut down requested (2) [ 103.840957][ T5810] XFS (loop1): Ending clean mount [ 103.965373][ T4186] XFS (loop1): Unmounting Filesystem [ 104.061578][ T5844] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.095755][ T5844] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 104.140815][ T5844] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 104.412576][ T5856] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 104.413985][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 104.504966][ T5860] set_capacity_and_notify: 4 callbacks suppressed [ 104.504981][ T5860] loop2: detected capacity change from 0 to 164 [ 104.758069][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.759057][ T5866] loop4: detected capacity change from 0 to 32768 [ 104.780662][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.790779][ T5845] device bridge_slave_0 entered promiscuous mode [ 104.819865][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.919574][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.968930][ T5866] XFS (loop4): Mounting V5 Filesystem [ 104.982165][ T5845] device bridge_slave_1 entered promiscuous mode [ 105.135770][ T5866] XFS (loop4): Ending clean mount [ 105.199986][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.233532][ T5866] XFS (loop4): Quotacheck needed: Please wait. [ 105.262051][ T5869] loop1: detected capacity change from 0 to 40427 [ 105.275159][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.312228][ T5866] XFS (loop4): Quotacheck: Done. [ 105.376460][ T4190] XFS (loop4): Unmounting Filesystem [ 105.382880][ T5845] team0: Port device team_slave_0 added [ 105.391460][ T5845] team0: Port device team_slave_1 added [ 105.402321][ T5869] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 105.410056][ T5869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.507553][ T5869] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.512538][ T5449] Bluetooth: hci3: command 0x0407 tx timeout [ 105.518401][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.602484][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.702547][ T5869] F2FS-fs (loop1): recover fsync data on readonly fs [ 105.709534][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.757719][ T5869] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 105.780155][ T5869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.791735][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.807865][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.921057][ T5869] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 105.931953][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.057628][ T5845] device hsr_slave_0 entered promiscuous mode [ 106.097973][ T5845] device hsr_slave_1 entered promiscuous mode [ 106.106352][ T5881] loop2: detected capacity change from 0 to 32768 [ 106.125810][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.144758][ T5845] Cannot create hsr debugfs directory [ 106.154028][ T5897] loop4: detected capacity change from 0 to 1024 [ 106.164571][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 106.192484][ T5449] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.466487][ T5900] loop2: detected capacity change from 0 to 1024 [ 106.542600][ T5449] usb 4-1: too many configurations: 164, using maximum allowed: 8 [ 106.572012][ T5845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.621383][ T5845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.653916][ T5845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.665645][ T5845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.680675][ T5900] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.060035][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.085620][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.104497][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.131611][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.190102][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.229224][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.250791][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.257938][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.292600][ T5449] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 107.301666][ T5449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.320071][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.349741][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.361133][ T5449] usb 4-1: config 0 descriptor?? [ 107.393901][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.431158][ T5449] usb 4-1: bad CDC descriptors [ 107.439282][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.439364][ T5449] usb 4-1: bad CDC descriptors [ 107.446430][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.459409][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.559351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.578132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.611367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.619215][ T5940] usb usb1: usbfs: process 5940 (syz.4.610) did not claim interface 8 before use [ 107.635519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.644517][ T4412] usb 4-1: USB disconnect, device number 4 [ 107.667713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.696815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.718761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.768349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.788961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.809807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.857353][ T5925] loop2: detected capacity change from 0 to 40427 [ 107.883305][ T5925] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 107.908287][ T5925] F2FS-fs (loop2): invalid crc value [ 107.940548][ T5950] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.953278][ T5925] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.057122][ T5925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.116878][ T5961] loop1: detected capacity change from 0 to 256 [ 108.175774][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.193587][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.227197][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.234450][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 108.263251][ T5925] F2FS-fs (loop2) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2b6/0x550 [ 108.311502][ T5961] FAT-fs (loop1): Directory bread(block 64) failed [ 108.356498][ T5961] FAT-fs (loop1): Directory bread(block 65) failed [ 108.402875][ T5961] FAT-fs (loop1): Directory bread(block 66) failed [ 108.427815][ T4193] attempt to access beyond end of device [ 108.427815][ T4193] loop2: rw=2049, want=45112, limit=40427 [ 108.443227][ T5961] FAT-fs (loop1): Directory bread(block 67) failed [ 108.449929][ T5961] FAT-fs (loop1): Directory bread(block 68) failed [ 108.508311][ T5961] FAT-fs (loop1): Directory bread(block 69) failed [ 108.543067][ T5961] FAT-fs (loop1): Directory bread(block 70) failed [ 108.549633][ T5961] FAT-fs (loop1): Directory bread(block 71) failed [ 108.567047][ T1230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.606519][ T5961] FAT-fs (loop1): Directory bread(block 72) failed [ 108.640077][ T5961] FAT-fs (loop1): Directory bread(block 73) failed [ 108.736236][ T1230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.870263][ T5962] loop4: detected capacity change from 0 to 32768 [ 108.901556][ T1230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.934736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.958662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.076176][ T1230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.107276][ T5845] device veth0_vlan entered promiscuous mode [ 109.119738][ T5984] vivid-003: disconnect [ 109.128895][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 109.143496][ T5980] vivid-003: reconnect [ 109.149457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.169397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.197004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.233915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.256559][ T5845] device veth1_vlan entered promiscuous mode [ 109.429857][ T5845] device veth0_macvtap entered promiscuous mode [ 109.455029][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.484026][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.500300][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.534589][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.553276][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.630228][ T5845] device veth1_macvtap entered promiscuous mode [ 109.697925][ T6003] loop4: detected capacity change from 0 to 2048 [ 109.718636][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.761570][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.792369][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.830285][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.849467][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.880724][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.912205][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.952447][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.981466][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.996566][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.017226][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.040947][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.066991][ T6003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.081506][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.092690][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.139670][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.160039][ T4340] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.173705][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.231824][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.266271][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.298537][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.306542][ T4226] Bluetooth: hci4: command 0x040f tx timeout [ 110.309938][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.349471][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.372073][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.398917][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.426493][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.464623][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.487263][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.503072][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.522536][ T4340] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.540845][ T5845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.568338][ T4340] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.582517][ T5845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.621823][ T4340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.631590][ T5845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.659981][ T5845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.668920][ T4340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.720419][ T4340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.806104][ T6019] loop3: detected capacity change from 0 to 40427 [ 110.866934][ T6019] F2FS-fs (loop3): invalid crc value [ 110.899789][ T6019] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.907102][ T4340] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.918192][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.925447][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 110.932723][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 110.939930][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 110.960237][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.979895][ T4340] usb 3-1: Product: syz [ 111.010525][ T4340] usb 3-1: Manufacturer: syz [ 111.053995][ T4340] cdc_wdm 3-1:1.0: skipping garbage [ 111.059229][ T4340] cdc_wdm 3-1:1.0: skipping garbage [ 111.100174][ T6019] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.115836][ T4340] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 111.162169][ T4340] cdc_wdm 3-1:1.0: Unknown control protocol [ 111.269076][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.285275][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.354241][ T4226] usb 3-1: USB disconnect, device number 6 [ 111.390166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.442747][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.451856][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.475077][ T4192] attempt to access beyond end of device [ 111.475077][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 111.508438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.520913][ T6041] loop1: detected capacity change from 0 to 32768 [ 111.543805][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 111.560973][ T6041] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.640 (6041) [ 111.650746][ T6041] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 111.742961][ T6041] BTRFS info (device loop1): setting nodatacow, compression disabled [ 111.755830][ T6041] BTRFS info (device loop1): setting datasum, datacow enabled [ 111.782434][ T6041] BTRFS info (device loop1): force clearing of disk cache [ 111.842508][ T6041] BTRFS info (device loop1): enabling ssd optimizations [ 111.855307][ T6041] BTRFS info (device loop1): using spread ssd allocation scheme [ 111.874914][ T6041] BTRFS info (device loop1): turning on sync discard [ 111.942764][ T6041] BTRFS info (device loop1): turning off barriers [ 111.982464][ T6041] BTRFS info (device loop1): enabling auto defrag [ 112.030475][ T6041] BTRFS info (device loop1): not using ssd optimizations [ 112.070971][ T6041] BTRFS info (device loop1): not using spread ssd allocation scheme [ 112.119888][ T6041] BTRFS info (device loop1): using free space tree [ 112.157734][ T6041] BTRFS info (device loop1): has skinny extents [ 112.383533][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 112.391448][ T6098] loop3: detected capacity change from 0 to 16 [ 112.443499][ T6041] BTRFS info (device loop1): clearing free space tree [ 112.454179][ T6041] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.466174][ T1230] device hsr_slave_0 left promiscuous mode [ 112.471668][ T6098] erofs: (device loop3): mounted with root inode @ nid 36. [ 112.482433][ T6041] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.488871][ T6098] overlayfs: failed to get redirect (-117) [ 112.501365][ T6098] overlayfs: failed to resolve './file0/file0': -117 [ 112.521435][ T1230] device hsr_slave_1 left promiscuous mode [ 112.537752][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.545888][ T6041] BTRFS info (device loop1): creating free space tree [ 112.562203][ T6041] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.569588][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.579592][ T6041] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.641233][ T1230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.656320][ T6114] loop2: detected capacity change from 0 to 2048 [ 112.668332][ T1230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.711008][ T1230] device bridge_slave_1 left promiscuous mode [ 112.772018][ T1230] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.794636][ T6114] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.894270][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 112.894285][ T26] audit: type=1800 audit(1771257309.333:13): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.640" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 112.945721][ T1230] device bridge_slave_0 left promiscuous mode [ 113.013241][ T1230] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.040418][ T6041] BTRFS info (device loop1): balance: start -sconvert=raid0,soft [ 113.089109][ T6041] BTRFS info (device loop1): left=0, need=98304, flags=10 [ 113.106663][ T6119] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 113.152674][ T6041] BTRFS info (device loop1): space_info 2 has 0 free, is not full [ 113.160564][ T6041] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 113.174385][ T6041] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 113.183312][ T6041] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 113.190963][ T6041] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 113.198660][ T6041] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0 [ 113.206533][ T6041] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 113.306052][ T6121] loop5: detected capacity change from 0 to 4096 [ 113.353941][ T6116] loop3: detected capacity change from 0 to 131072 [ 113.368780][ T6041] BTRFS info (device loop1): relocating block group 1048576 flags system [ 113.402127][ T6116] F2FS-fs (loop3): invalid crc value [ 113.463430][ T6116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.501165][ T6116] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 113.529198][ T6116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 113.535201][ T1230] device veth1_macvtap left promiscuous mode [ 113.550757][ T6041] BTRFS info (device loop1): balance: ended with status: 0 [ 113.614675][ T1230] device veth0_macvtap left promiscuous mode [ 113.663643][ T6123] loop4: detected capacity change from 0 to 8192 [ 113.670233][ T1230] device veth1_vlan left promiscuous mode [ 113.679343][ T5845] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 113.695369][ T5845] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 113.725717][ T1230] device veth0_vlan left promiscuous mode [ 113.964513][ T6133] loop5: detected capacity change from 0 to 512 [ 114.053164][ T6133] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.174356][ T6133] EXT4-fs error (device loop5): ext4_empty_dir:3139: inode #2: comm syz.5.662: Directory hole found for htree leaf block 0 [ 115.050826][ T1230] team0 (unregistering): Port device team_slave_1 removed [ 115.086122][ T1230] team0 (unregistering): Port device team_slave_0 removed [ 115.107172][ T1230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.130070][ T1230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.203397][ T1230] bond0 (unregistering): Released all slaves [ 115.461809][ T6159] loop4: detected capacity change from 0 to 256 [ 115.605873][ T6159] FAT-fs (loop4): Directory bread(block 64) failed [ 115.661078][ T6159] FAT-fs (loop4): Directory bread(block 65) failed [ 115.698569][ T6159] FAT-fs (loop4): Directory bread(block 66) failed [ 115.738977][ T6159] FAT-fs (loop4): Directory bread(block 67) failed [ 115.761014][ T6159] FAT-fs (loop4): Directory bread(block 68) failed [ 115.768318][ T4409] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.798209][ T6159] FAT-fs (loop4): Directory bread(block 69) failed [ 115.805484][ T6159] FAT-fs (loop4): Directory bread(block 70) failed [ 115.812178][ T6159] FAT-fs (loop4): Directory bread(block 71) failed [ 115.857385][ T6159] FAT-fs (loop4): Directory bread(block 72) failed [ 115.874617][ T6159] FAT-fs (loop4): Directory bread(block 73) failed [ 116.069753][ T4409] usb 6-1: Using ep0 maxpacket: 32 [ 116.197446][ T4409] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.237794][ T4409] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.417779][ T4409] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.432320][ T4409] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 116.434274][ T6171] loop3: detected capacity change from 0 to 32768 [ 116.464005][ T6174] loop1: detected capacity change from 0 to 32768 [ 116.470955][ T4409] usb 6-1: Product: syz [ 116.489953][ T4409] usb 6-1: Manufacturer: syz [ 116.502179][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 116.563563][ T4409] hub 6-1:4.0: USB hub found [ 116.564711][ T6174] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 116.586856][ T6171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.675 (6171) [ 116.713754][ T6171] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.772669][ T6174] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 116.774364][ T6171] BTRFS info (device loop3): setting nodatacow, compression disabled [ 116.863658][ T4409] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 116.902677][ T6171] BTRFS info (device loop3): setting datasum, datacow enabled [ 116.922452][ T6171] BTRFS info (device loop3): force clearing of disk cache [ 116.929600][ T6171] BTRFS info (device loop3): enabling ssd optimizations [ 116.932851][ T6204] device erspan0 entered promiscuous mode [ 116.967575][ T6171] BTRFS info (device loop3): using spread ssd allocation scheme [ 117.008631][ T6171] BTRFS info (device loop3): turning on sync discard [ 117.026767][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 117.042666][ T6171] BTRFS info (device loop3): turning off barriers [ 117.049163][ T6171] BTRFS info (device loop3): enabling auto defrag [ 117.141048][ T6209] device bridge0 entered promiscuous mode [ 117.168272][ T6208] device bridge0 left promiscuous mode [ 117.174286][ T6171] BTRFS info (device loop3): not using ssd optimizations [ 117.197737][ T4409] usb 6-1: USB disconnect, device number 2 [ 117.232327][ T6171] BTRFS info (device loop3): not using spread ssd allocation scheme [ 117.292443][ T6171] BTRFS info (device loop3): using free space tree [ 117.346089][ T6171] BTRFS info (device loop3): has skinny extents [ 117.608345][ T6187] loop4: detected capacity change from 0 to 40427 [ 117.701657][ T6187] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 117.722180][ T6230] loop2: detected capacity change from 0 to 4096 [ 117.732515][ T6187] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 117.738642][ T6171] BTRFS info (device loop3): clearing free space tree [ 117.762032][ T6171] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.792367][ T6171] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.800084][ T6187] F2FS-fs (loop4): invalid crc value [ 117.844847][ T6187] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.894322][ T6171] BTRFS info (device loop3): creating free space tree [ 117.901806][ T6171] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.926396][ T6187] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.950841][ T6230] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 117.982382][ T6187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.992491][ T6171] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.053986][ T26] audit: type=1800 audit(1771257314.523:14): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.689" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 118.162531][ T4409] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.213202][ T26] audit: type=1800 audit(1771257314.563:15): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.689" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 118.238144][ T4193] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 118.271921][ T4193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 118.292444][ T4193] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 118.308085][ T26] audit: type=1800 audit(1771257314.753:16): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.675" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 118.389558][ T6171] BTRFS info (device loop3): balance: start -sconvert=raid0,soft [ 118.411694][ T6171] BTRFS info (device loop3): left=0, need=98304, flags=10 [ 118.483095][ T6171] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 118.491194][ T6171] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 118.505158][ T6171] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 118.513807][ T6171] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 118.521576][ T6171] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 118.529277][ T6171] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 118.537152][ T6171] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 118.562599][ T4409] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 118.603890][ T4409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.635990][ T4409] usb 6-1: config 0 descriptor?? [ 118.687118][ T4409] gspca_main: spca508-2.14.0 probing 8086:0110 [ 118.729193][ T6272] loop2: detected capacity change from 0 to 512 [ 118.762230][ T6171] BTRFS info (device loop3): relocating block group 1048576 flags system [ 118.888974][ T6171] BTRFS info (device loop3): balance: ended with status: 0 [ 118.902523][ T4409] gspca_spca508: reg_read err -32 [ 118.919239][ T6272] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.933337][ T6272] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.963745][ T4409] gspca_spca508: reg_read err -32 [ 119.224488][ T4409] gspca_spca508: reg_read err -71 [ 119.263553][ T4409] gspca_spca508: reg_read err -71 [ 119.290065][ T4409] gspca_spca508: reg write: error -71 [ 119.300088][ T4409] spca508: probe of 6-1:0.0 failed with error -71 [ 119.322110][ T4409] usb 6-1: USB disconnect, device number 3 [ 119.440338][ T6295] loop1: detected capacity change from 0 to 4096 [ 119.502994][ T6295] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 119.568563][ T6295] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 119.618891][ T6295] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 119.722069][ T6295] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 119.769009][ T6295] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 119.878120][ T6295] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 119.916204][ T6295] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 120.000700][ T6310] device erspan0 entered promiscuous mode [ 120.040072][ T6295] ntfs: volume version 3.1. [ 120.105356][ T6281] loop4: detected capacity change from 0 to 32768 [ 120.427745][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 120.522474][ T6137] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.768507][ T6349] loop5: detected capacity change from 0 to 512 [ 120.804661][ T4414] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 120.829743][ T6352] hub 9-0:1.0: USB hub found [ 120.840152][ T4414] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.841384][ T6352] hub 9-0:1.0: 1 port detected [ 120.877937][ T6349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.952670][ T6137] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 120.958858][ T6349] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 120.961771][ T6137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.993373][ T6137] usb 3-1: config 0 descriptor?? [ 121.044486][ T6137] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 121.069715][ T6357] loop3: detected capacity change from 0 to 4096 [ 121.091355][ T6361] fido_id[6361]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.115814][ T6349] EXT4-fs (loop5): 1 truncate cleaned up [ 121.121491][ T6349] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 121.214909][ T6357] ntfs: volume version 3.1. [ 121.272683][ T6137] gp8psk: usb in 128 operation failed. [ 121.285449][ T6372] loop1: detected capacity change from 0 to 512 [ 121.343760][ T6349] EXT4-fs (loop5): shut down requested (1) [ 121.459835][ T6372] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.501047][ T6372] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.562631][ T6137] gp8psk: FW Version = 33.63.98 (0x213f62) Build 2126/97/182 [ 121.772932][ T6392] loop3: detected capacity change from 0 to 8192 [ 121.792633][ T6137] gp8psk: usb in 149 operation failed. [ 121.798457][ T6137] gp8psk: failed to get FPGA version [ 121.830026][ T6137] gp8psk: usb in 138 operation failed. [ 121.838216][ T6137] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.856980][ T6392] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 121.876442][ T6137] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 121.885295][ T6137] usb 3-1: media controller created [ 121.907746][ T6137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.916513][ T4413] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 121.935673][ T6392] REISERFS (device loop3): using ordered data mode [ 121.937191][ T6137] gp8psk_fe: Frontend attached [ 121.947921][ T6137] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 121.957763][ T6137] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 121.978580][ T6392] reiserfs: using flush barriers [ 122.028457][ T6392] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.073013][ T6137] gp8psk: usb in 138 operation failed. [ 122.078898][ T6137] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 122.081764][ T6392] REISERFS (device loop3): checking transaction log (loop3) [ 122.102397][ T6137] gp8psk: found Genpix USB device pID = 203 (hex) [ 122.154288][ T6137] usb 3-1: USB disconnect, device number 7 [ 122.179006][ T6392] REISERFS (device loop3): Using r5 hash to sort names [ 122.192554][ T4413] usb 6-1: Using ep0 maxpacket: 8 [ 122.212178][ T6392] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.272091][ T6392] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 122.289713][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 122.338661][ T6392] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.350668][ T6137] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 122.368288][ T4413] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.381145][ T6392] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.391504][ T4413] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.407252][ T6392] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.419085][ T4413] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.452234][ T4413] usb 6-1: config 0 descriptor?? [ 122.466272][ T6419] loop4: detected capacity change from 0 to 128 [ 122.557798][ T6419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.616284][ T6419] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.673689][ T6419] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 122.694744][ T6419] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 122.742678][ T4413] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 123.088921][ T6448] loop9: detected capacity change from 0 to 7 [ 123.127702][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.138961][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.195458][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.206473][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.285327][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.296338][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.339272][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.350306][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.382310][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.393402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.402222][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.413210][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.461924][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.472871][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.480788][ T6448] ldm_validate_partition_table(): Disk read failed. [ 123.496513][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.507525][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.545281][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.556291][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.595064][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.606067][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.623619][ T6430] loop2: detected capacity change from 0 to 32768 [ 123.630678][ T6448] Dev loop9: unable to read RDB block 0 [ 123.637402][ T6448] loop9: unable to read partition table [ 123.643977][ T6448] loop9: partition table beyond EOD, truncated [ 123.650340][ T6448] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 123.674287][ T4180] ldm_validate_partition_table(): Disk read failed. [ 123.685774][ T4180] Dev loop9: unable to read RDB block 0 [ 123.692063][ T4180] loop9: unable to read partition table [ 123.698716][ T4180] loop9: partition table beyond EOD, truncated [ 123.887361][ T6466] loop4: detected capacity change from 0 to 65536 [ 123.906518][ T6453] ldm_validate_partition_table(): Disk read failed. [ 123.937601][ T6453] Dev loop9: unable to read RDB block 0 [ 123.947419][ T6453] loop9: unable to read partition table [ 123.953382][ T6453] loop9: partition table beyond EOD, truncated [ 123.962657][ T6453] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 123.987106][ T6481] loop1: detected capacity change from 0 to 512 [ 124.027856][ T6466] XFS (loop4): Mounting V5 Filesystem [ 124.033794][ T6430] XFS (loop2): Mounting V5 Filesystem [ 124.103911][ T4226] usb 6-1: USB disconnect, device number 4 [ 124.139860][ T6481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.761: bg 0: block 248: padding at end of block bitmap is not set [ 124.162994][ T6430] XFS (loop2): Ending clean mount [ 124.178787][ T6466] XFS (loop4): Ending clean mount [ 124.191397][ T6466] XFS (loop4): Quotacheck needed: Please wait. [ 124.215988][ T6481] __quota_error: 34 callbacks suppressed [ 124.216006][ T6481] Quota error (device loop1): write_blk: dquota write failed [ 124.230099][ T6481] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 124.244830][ T6481] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.761: Failed to acquire dquot type 1 [ 124.247434][ T6466] XFS (loop4): Quotacheck: Done. [ 124.258293][ T6481] EXT4-fs (loop1): 1 truncate cleaned up [ 124.267519][ T6481] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.290316][ T6481] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.345723][ T4193] XFS (loop2): Unmounting Filesystem [ 124.374261][ T4190] XFS (loop4): Unmounting Filesystem [ 124.523278][ T144] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 124.531875][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:1: Failed to release dquot type 1 [ 124.934884][ T6517] sp0: Synchronizing with TNC [ 125.556332][ T6541] loop2: detected capacity change from 0 to 8192 [ 125.703900][ T6548] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.241378][ T6563] set_capacity_and_notify: 1 callbacks suppressed [ 126.241392][ T6563] loop2: detected capacity change from 0 to 8192 [ 126.307048][ T6563] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 126.374157][ T6563] REISERFS (device loop2): using ordered data mode [ 126.412862][ T6563] reiserfs: using flush barriers [ 126.448017][ T6563] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.466848][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.469864][ T6561] loop5: detected capacity change from 0 to 40427 [ 126.482049][ T6569] loop3: detected capacity change from 0 to 764 [ 126.489381][ T6563] REISERFS (device loop2): checking transaction log (loop2) [ 126.510349][ T6563] REISERFS (device loop2): Using r5 hash to sort names [ 126.517837][ T6563] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 126.548224][ T6561] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x1ffff [ 126.582435][ T6569] rock: directory entry would overflow storage [ 126.589353][ T6561] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 126.605343][ T6569] rock: sig=0x4f50, size=4, remaining=3 [ 126.617801][ T6561] F2FS-fs (loop5): invalid crc value [ 126.626947][ T6569] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 126.646201][ T6571] loop4: detected capacity change from 0 to 256 [ 126.663659][ T6561] F2FS-fs (loop5): Found nat_bits in checkpoint [ 126.714204][ T6571] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 126.742405][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 126.781447][ T6561] F2FS-fs (loop5): Start checkpoint disabled! [ 126.862884][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.901027][ T6561] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 126.918338][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.921773][ T6579] loop3: detected capacity change from 0 to 1024 [ 126.931782][ T6580] loop4: detected capacity change from 0 to 512 [ 126.941863][ T7] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 126.997922][ T6580] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 127.007421][ T6561] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=72656c6c, run fsck to fix. [ 127.007439][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.037484][ T6580] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.094413][ T6580] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.793: bad orphan inode 131083 [ 127.108285][ T7] usb 2-1: config 0 descriptor?? [ 127.145497][ T3066] hfsplus: b-tree write err: -5, ino 4 [ 127.147209][ T6561] F2FS-fs (loop5): Found FS corruption, run fsck to fix. [ 127.194210][ T6580] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,journal_dev=0x00000000000003f2,noload,,errors=continue. Quota mode: none. [ 127.244534][ T26] audit: type=1400 audit(1771257323.713:18): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=3A202020202030206B420A53686D656D506D644D61707065643A202020202020202030206B420A46696C65506D644D61707065643A20202020202020202030206B420A5368617265645F48756765746C623A202020202020202030206B420A507269766174655F48756765746C623A2020202020202030206B420A537761703A20202020202020202020202020202020202030206B420A53 pid=6587 comm="syz.2.797" [ 127.499073][ T6593] loop2: detected capacity change from 0 to 512 [ 127.586532][ T7] hid-multitouch 0003:1FD2:6007.0006: unknown main item tag 0x6 [ 127.587880][ T6599] loop3: detected capacity change from 0 to 1024 [ 127.619858][ T6593] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.631170][ T7] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 127.738346][ T3098] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.746794][ T6599] hfsplus: request for non-existent node 62977 in B*Tree [ 127.774190][ T6599] hfsplus: request for non-existent node 62977 in B*Tree [ 127.790672][ T4413] usb 2-1: USB disconnect, device number 7 [ 127.945751][ T3098] hfsplus: b-tree write err: -5, ino 3 [ 127.954797][ T6604] fido_id[6604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 128.017265][ T6610] overlayfs: failed to clone upperpath [ 128.191115][ T6597] loop4: detected capacity change from 0 to 32768 [ 128.345196][ T6597] JBD2: Ignoring recovery information on journal [ 128.486256][ T6631] tap0: tun_chr_ioctl cmd 1074025677 [ 128.495208][ T6631] tap0: linktype set to 823 [ 128.540250][ T6597] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 128.596879][ T26] audit: type=1800 audit(1771257325.063:19): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.799" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 128.645108][ T6597] [ 128.647469][ T6597] ====================================================== [ 128.654569][ T6597] WARNING: possible circular locking dependency detected [ 128.661596][ T6597] syzkaller #0 Not tainted [ 128.666012][ T6597] ------------------------------------------------------ [ 128.673126][ T6597] syz.4.799/6597 is trying to acquire lock: [ 128.679026][ T6597] ffff88806119ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 128.692284][ T6597] [ 128.692284][ T6597] but task is already holding lock: [ 128.699653][ T6597] ffff88806105bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 128.709152][ T6597] [ 128.709152][ T6597] which lock already depends on the new lock. [ 128.709152][ T6597] [ 128.719653][ T6597] [ 128.719653][ T6597] the existing dependency chain (in reverse order) is: [ 128.728670][ T6597] [ 128.728670][ T6597] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 128.733513][ T6622] loop3: detected capacity change from 0 to 32768 [ 128.736492][ T6597] down_read+0x44/0x2e0 [ 128.747568][ T6597] ocfs2_init_acl+0x307/0x770 [ 128.752785][ T6597] ocfs2_mknod+0x15cb/0x2510 [ 128.757901][ T6597] ocfs2_mkdir+0x192/0x420 [ 128.762826][ T6597] vfs_mkdir+0x387/0x570 [ 128.767587][ T6597] do_mkdirat+0x1df/0x5b0 [ 128.772423][ T6597] __x64_sys_mkdirat+0x85/0x90 [ 128.777714][ T6597] do_syscall_64+0x4c/0xa0 [ 128.782644][ T6597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.789061][ T6597] [ 128.789061][ T6597] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 128.797556][ T6597] down_read+0x44/0x2e0 [ 128.802237][ T6597] ocfs2_start_trans+0x3a6/0x6f0 [ 128.807698][ T6597] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 128.813938][ T6597] ocfs2_dismount_volume+0x1e1/0x8a0 [ 128.819727][ T6597] generic_shutdown_super+0x130/0x300 [ 128.825695][ T6597] kill_block_super+0x7c/0xe0 [ 128.830873][ T6597] deactivate_locked_super+0x93/0xf0 [ 128.836664][ T6597] cleanup_mnt+0x42d/0x4e0 [ 128.841584][ T6597] task_work_run+0x125/0x1a0 [ 128.846696][ T6597] exit_to_user_mode_loop+0x10f/0x130 [ 128.852567][ T6597] exit_to_user_mode_prepare+0xee/0x180 [ 128.858609][ T6597] syscall_exit_to_user_mode+0x16/0x40 [ 128.864571][ T6597] do_syscall_64+0x58/0xa0 [ 128.869575][ T6597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.875967][ T6597] [ 128.875967][ T6597] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 128.883416][ T6597] ocfs2_start_trans+0x2a7/0x6f0 [ 128.888940][ T6597] ocfs2_mknod+0xf5a/0x2510 [ 128.893945][ T6597] ocfs2_create+0x192/0x420 [ 128.898965][ T6597] path_openat+0x11db/0x2fa0 [ 128.904053][ T6597] do_filp_open+0x1e2/0x410 [ 128.909054][ T6597] do_sys_openat2+0x150/0x4b0 [ 128.914227][ T6597] __x64_sys_openat+0x135/0x160 [ 128.919757][ T6597] do_syscall_64+0x4c/0xa0 [ 128.924698][ T6597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.931095][ T6597] [ 128.931095][ T6597] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 128.941635][ T6597] down_write+0x38/0x60 [ 128.946300][ T6597] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 128.952958][ T6597] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 128.959787][ T6597] ocfs2_mknod+0xef8/0x2510 [ 128.964791][ T6597] ocfs2_create+0x192/0x420 [ 128.969794][ T6597] path_openat+0x11db/0x2fa0 [ 128.974885][ T6597] do_filp_open+0x1e2/0x410 [ 128.979907][ T6597] do_sys_openat2+0x150/0x4b0 [ 128.985082][ T6597] __x64_sys_openat+0x135/0x160 [ 128.990431][ T6597] do_syscall_64+0x4c/0xa0 [ 128.995349][ T6597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.001839][ T6597] [ 129.001839][ T6597] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 129.012333][ T6597] __lock_acquire+0x2c42/0x7d10 [ 129.017687][ T6597] lock_acquire+0x19e/0x400 [ 129.022691][ T6597] down_write+0x38/0x60 [ 129.027378][ T6597] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 129.033782][ T6597] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 129.040638][ T6597] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 129.046783][ T6597] ocfs2_xattr_set+0xc38/0x13e0 [ 129.052179][ T6597] __vfs_setxattr+0x3e0/0x420 [ 129.057356][ T6597] __vfs_setxattr_noperm+0x129/0x5e0 [ 129.063144][ T6597] vfs_setxattr+0x167/0x2e0 [ 129.068165][ T6597] setxattr+0x36c/0x390 [ 129.072821][ T6597] path_setxattr+0x147/0x290 [ 129.077909][ T6597] __x64_sys_setxattr+0xb7/0xd0 [ 129.083263][ T6597] do_syscall_64+0x4c/0xa0 [ 129.088280][ T6597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.094676][ T6597] [ 129.094676][ T6597] other info that might help us debug this: [ 129.094676][ T6597] [ 129.104891][ T6597] Chain exists of: [ 129.104891][ T6597] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 129.104891][ T6597] [ 129.121852][ T6597] Possible unsafe locking scenario: [ 129.121852][ T6597] [ 129.129295][ T6597] CPU0 CPU1 [ 129.134642][ T6597] ---- ---- [ 129.139991][ T6597] lock(&oi->ip_xattr_sem); [ 129.144561][ T6597] lock(&journal->j_trans_barrier); [ 129.152361][ T6597] lock(&oi->ip_xattr_sem); [ 129.159605][ T6597] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 129.166886][ T6597] [ 129.166886][ T6597] *** DEADLOCK *** [ 129.166886][ T6597] [ 129.175028][ T6597] 3 locks held by syz.4.799/6597: [ 129.180029][ T6597] #0: ffff88801d53c460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 129.189346][ T6597] #1: ffff88806105c2c8 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 129.199768][ T6597] #2: ffff88806105bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 129.209672][ T6597] [ 129.209672][ T6597] stack backtrace: [ 129.215557][ T6597] CPU: 1 PID: 6597 Comm: syz.4.799 Not tainted syzkaller #0 [ 129.222826][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.232899][ T6597] Call Trace: [ 129.236385][ T6597] [ 129.239310][ T6597] dump_stack_lvl+0x188/0x250 [ 129.243999][ T6597] ? load_image+0x400/0x400 [ 129.248511][ T6597] ? show_regs_print_info+0x20/0x20 [ 129.253708][ T6597] ? print_circular_bug+0x12b/0x1a0 [ 129.258913][ T6597] check_noncircular+0x296/0x330 [ 129.263848][ T6597] ? add_chain_block+0x940/0x940 [ 129.268787][ T6597] ? lockdep_lock+0x15c/0x1f0 [ 129.273457][ T6597] ? mark_lock+0x94/0x320 [ 129.277772][ T6597] __lock_acquire+0x2c42/0x7d10 [ 129.282636][ T6597] ? verify_lock_unused+0x140/0x140 [ 129.287842][ T6597] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 129.293456][ T6597] ? do_raw_spin_lock+0x128/0x2f0 [ 129.298463][ T6597] ? mutex_unlock+0x10/0x10 [ 129.302952][ T6597] ? __rwlock_init+0x140/0x140 [ 129.307715][ T6597] ? do_raw_spin_unlock+0x11d/0x230 [ 129.312893][ T6597] lock_acquire+0x19e/0x400 [ 129.317385][ T6597] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 129.323451][ T6597] ? finish_lock_switch+0x12f/0x280 [ 129.328641][ T6597] ? __might_sleep+0xf0/0xf0 [ 129.333209][ T6597] ? read_lock_is_recursive+0x10/0x10 [ 129.338574][ T6597] ? verify_lock_unused+0x140/0x140 [ 129.343781][ T6597] down_write+0x38/0x60 [ 129.347979][ T6597] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 129.354061][ T6597] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 129.359953][ T6597] ? mark_lock+0x94/0x320 [ 129.364266][ T6597] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 129.370230][ T6597] ? lock_chain_count+0x20/0x20 [ 129.375062][ T6597] ? __rwlock_init+0x140/0x140 [ 129.379829][ T6597] ? ocfs2_block_group_search+0x470/0x470 [ 129.385532][ T6597] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 129.391496][ T6597] ? lockdep_hardirqs_on+0x94/0x140 [ 129.396688][ T6597] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 129.402598][ T6597] ? _raw_spin_unlock+0x40/0x40 [ 129.407452][ T6597] ? stack_trace_save+0xa6/0xf0 [ 129.412291][ T6597] ? stack_trace_snprint+0xf0/0xf0 [ 129.417419][ T6597] ? stack_depot_save+0x404/0x440 [ 129.422449][ T6597] ? __kasan_kmalloc+0xcc/0xf0 [ 129.427219][ T6597] ? __kasan_kmalloc+0xb5/0xf0 [ 129.431990][ T6597] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 129.438503][ T6597] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 129.444331][ T6597] ? ocfs2_xattr_set+0xc38/0x13e0 [ 129.449366][ T6597] ? __vfs_setxattr+0x3e0/0x420 [ 129.454226][ T6597] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 129.459724][ T6597] ? vfs_setxattr+0x167/0x2e0 [ 129.464394][ T6597] ? setxattr+0x36c/0x390 [ 129.468718][ T6597] ? path_setxattr+0x147/0x290 [ 129.473573][ T6597] ? __x64_sys_setxattr+0xb7/0xd0 [ 129.478616][ T6597] ? do_syscall_64+0x4c/0xa0 [ 129.483215][ T6597] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.489307][ T6597] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 129.495653][ T6597] ? ocfs2_init_steal_slots+0x150/0x150 [ 129.501361][ T6597] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 129.507021][ T6597] ? do_raw_spin_lock+0x128/0x2f0 [ 129.512058][ T6597] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 129.517703][ T6597] ? _raw_spin_unlock+0x24/0x40 [ 129.522591][ T6597] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 129.528671][ T6597] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 129.534928][ T6597] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 129.540844][ T6597] ? up_write+0x1bb/0x420 [ 129.545202][ T6597] ocfs2_xattr_set+0xc38/0x13e0 [ 129.550198][ T6597] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 129.555948][ T6597] ? verify_lock_unused+0x140/0x140 [ 129.561164][ T6597] ? verify_lock_unused+0x140/0x140 [ 129.566381][ T6597] ? stack_trace_save+0xa6/0xf0 [ 129.571247][ T6597] ? evm_protected_xattr_common+0x170/0x190 [ 129.577161][ T6597] ? evm_protect_xattr+0x7ad/0x9b0 [ 129.582285][ T6597] ? ocfs2_xattr_security_get+0x40/0x40 [ 129.587842][ T6597] __vfs_setxattr+0x3e0/0x420 [ 129.592533][ T6597] __vfs_setxattr_noperm+0x129/0x5e0 [ 129.597828][ T6597] vfs_setxattr+0x167/0x2e0 [ 129.602345][ T6597] ? xattr_permission+0x500/0x500 [ 129.607378][ T6597] ? _copy_from_user+0x111/0x170 [ 129.612325][ T6597] ? setxattr+0x2cc/0x390 [ 129.616669][ T6597] setxattr+0x36c/0x390 [ 129.620854][ T6597] ? path_setxattr+0x290/0x290 [ 129.625635][ T6597] ? __mnt_want_write+0x1e2/0x260 [ 129.630662][ T6597] path_setxattr+0x147/0x290 [ 129.635236][ T6597] ? simple_xattr_list_add+0xf0/0xf0 [ 129.640502][ T6597] ? lock_chain_count+0x20/0x20 [ 129.645349][ T6597] ? vtime_user_exit+0x2c8/0x3e0 [ 129.650391][ T6597] __x64_sys_setxattr+0xb7/0xd0 [ 129.655347][ T6597] do_syscall_64+0x4c/0xa0 [ 129.659755][ T6597] ? clear_bhb_loop+0x30/0x80 [ 129.664418][ T6597] ? clear_bhb_loop+0x30/0x80 [ 129.669084][ T6597] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.675077][ T6597] RIP: 0033:0x7f722ed0df79 [ 129.679499][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.699083][ T6597] RSP: 002b:00007f722cf68028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 129.707480][ T6597] RAX: ffffffffffffffda RBX: 00007f722ef87fa0 RCX: 00007f722ed0df79 [ 129.715439][ T6597] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000100 [ 129.723407][ T6597] RBP: 00007f722eda47e0 R08: 0000000000000000 R09: 0000000000000000 [ 129.731375][ T6597] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 129.739331][ T6597] R13: 00007f722ef88038 R14: 00007f722ef87fa0 R15: 00007ffc27caa4e8 [ 129.747293][ T6597] [ 129.770297][ T26] audit: type=1804 audit(1771257326.233:20): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.799" name="/newroot/190/file1/file1" dev="loop4" ino=17058 res=1 errno=0 [ 129.805456][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 129.823969][ T6622] (syz.3.811,6622,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 129.831524][ T6622] (syz.3.811,6622,0):ocfs2_map_slot_buffers:388 ERROR: status = -12 [ 129.863950][ T6622] (syz.3.811,6622,0):ocfs2_init_slot_info:426 ERROR: status = -12 [ 129.872170][ T6622] (syz.3.811,6622,0):ocfs2_initialize_super:2305 ERROR: status = -12 [ 129.880349][ T6622] (syz.3.811,6622,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 130.053244][ T6622] (syz.3.811,6622,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 130.062833][ T6622] (syz.3.811,6622,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 132.704267][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.710823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22