last executing test programs: 3.503332054s ago: executing program 2 (id=1646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x3}], 0x1, 0x40800) 3.462190355s ago: executing program 2 (id=1649): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2006360000003604f70b060003920000000040d4"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") 2.378074772s ago: executing program 3 (id=1662): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0x2, 0x631b, &(0x7f00000082c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000025a80)='./bus\x00', &(0x7f0000025e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1.465148404s ago: executing program 3 (id=1672): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4c3, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x200, 0x40000cca7}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 1.443679955s ago: executing program 0 (id=1673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000104, 0x0, 0x1000000000000000}]}) 1.355799307s ago: executing program 3 (id=1675): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) poll(&(0x7f0000000200)=[{r0, 0x3621}], 0x1, 0xa09) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) 1.305495778s ago: executing program 0 (id=1677): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x7}}, {@jqfmt_vfsold}]}, 0xff, 0x4f8, &(0x7f0000001040)="$eJzs3c9vG1kdAPCvnThx0uwmC3sABLtld6Ggqk7i7karPUA5IYQqIXoEqQ2JG0Wx4yh2ShN6SM9ckajECY78AZx74s4FwY1LOSDxIwI1SByMZjxJ3dRuoiaxo/jzkUbz3rypv+81nffqbxK/AIbW1YjYjYixiLgXEdPZ9Vx2xK32kdz3fO/R0v7eo6VctFp3/plL25Nr0fFnEley1yxGxA+/G/GT3KtxG9s7a4vVamUzq882axuzje2dG6u1xZXKSmW9XF6YX5j79OYn5TMb6/u1saz0lWd/2P3mz5JuTWVXOsdxltpDLxzGSYxGxPfPI9gAjGTjGRt0R3gj+ewR/yB9/qdjJP1qAgCXWas1Ha3pzjoAcNnl0xxYLl/KcgFTkc+XSu0c3rsxma/WG83r9+tb68vtXNlMFPL3V6uVuSxXOBOFXFKfT8sv6uUj9ZsR8U5E/GJ8Iq2XlurV5UH+xwcAhtiVI+v/f8bb6z8AcMkVB90BAKDvrP8AMHys/wAwfKz/ADB82uv/xKC7AQD0kff/ADB8rP8AMFR+cPt2crT2s8+/Xn6wvbVWf3BjudJYK9W2lkpL9c2N0kq9vpJ+Zk/tuNer1usb8x/H1sOZb200mrON7Z27tfrWevNu+rnedyuF9K7dPowMAOjlnfef/jmXrMifTaRHdOzlUBhoz4Dzlh90B4CBGRl0B4CBsdsXDK9TvMeXHoBLossWvS8pdvsFoVar1Tq/LgHn7NoX5f9hWHXk//0UMAwZ+X8YXvL/MLxardxJ9/yPk94IAFxscvxAj+//fy47/zb75sCPl4/e8eQ8ewUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYi3ImImCrn7q9XKXES8HRF/Gi+MJ/X5AfcZADit/N9y2f5f16Y/mnqp6b0rh8WxiPjpr+788uFis7n5x4ix3L/GD643n2TXy/3vPQBwvIN1Oj13vJF/vvdo6eDoZ3/+/p2IKLbj7++Nxf5h/NEYTc/FKETE5L9zWb0t15G7OI3dxxHxhW7jz8VUmgNp73x6NH4S+62+xs+/FD+ftrXPyd/F58+gLzBsnibzz61uz18+rqbn7s9/MZ2hTi+b/5KXWtpP58AX8Q/mv5Ee89/Vk8b4+Pffa5cmXm17HPGl0YiD2Psd889B/FyP+B+dMP5fvvzeB73aWr+OuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfpzU/Ks2mOerb3avCPz66/3astGf9kj/jFY8b/tROO/zf/u/ejr74m/jc+7BY/H+++Jn6yJn79hPEXJ39X7NWWxF/uMf7jvv7XTxj/2V93Xtk2HAAYnMb2ztpitVrZVFC4+IXkn+wF6EbXwrf7FWssujf9/MP2M32kqdV6o1i9ZoyzyLoBF8HhQx8R/x10ZwAAAAAAAAAAAAAAgK768RtLgx4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl9f/AwAA///5Y89R") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.21411866s ago: executing program 1 (id=1679): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}, {@utf8}, {@rodir}, {@uni_xlate}, {@utf8no}, {@utf8}, {@shortname_win95}, {@uni_xlate}, {@numtail}, {@utf8}]}, 0xfd, 0x2a8, &(0x7f0000000240)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UBiFT+fTU7POd85vzOd/lvk9MOXx0dP8zg8+/K36HSyaPSjHxdZ9KIRla9jSf+7AAD+yy5Sij/STJ1cFhGd7ZUFAGxR7Z//57OXne2WBQBs0TvvvvfW/mBw8Haed+Lx+JvTYfGXffE6G98/jE9iFM/iYXTjMiJdmbUfp5QmzbzQi9fHk9NhkRx/8Et5/f3fI6b5vehGb9q1nH8yONjLZxbyk6KO58v1+0X+UXTjxRXrPxkcPFqRj2Er3nhtof4H0Y1fP45PYxRPp0XM81/t5fmb6fs/v3i/KK/IZ5PTYXs6by75lQcAAAAAAAAAAAAAAAAAAAAAgI15UJ6d047p+T1FV3n+zs5l8cFu5JXe8vk8s3xWXeja+UCTFD9U5+s8zPM8lRPn+Wa81Izm/ewaAAAAAAAAAAAAAAAAAAAA/l1OPvv86KPR6NnxRhrVaQDV2/rrX+d8muov9Lwa61Pt+VqNsrlmidip5mQRa+spNrGh23Jb47mbav7xp7oX7Nw+Z7dYq7PBXVSf7oWeqHqy1fewfTW5Uz0kP1c9KaXUijuu3rppKNV6/Forh7q170brhWljsmZOZDcV9u0r86/Lcii7vovW0n1eauyWjYX4tWej1vP89+8VmdM6AAAAAAAAAAAAAAAAAABgq+Zv+l0xeLY22kjtrZUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+o+f//r9GYlOE7TG7F8ck9bxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/gb8CAAD//7JbXQI=") syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.096661663s ago: executing program 2 (id=1680): r0 = syz_io_uring_setup(0xf2d, &(0x7f0000000180)={0x0, 0xb5d2, 0x8, 0x1, 0x33a}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000300)) r1 = eventfd(0x26) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 981.121306ms ago: executing program 0 (id=1681): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1, 0x8}, 0xc) 908.831218ms ago: executing program 1 (id=1682): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 794.52666ms ago: executing program 2 (id=1683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r0, &(0x7f0000002700)={0x4e, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18) 771.775991ms ago: executing program 4 (id=1684): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 722.146622ms ago: executing program 0 (id=1685): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) 633.124524ms ago: executing program 1 (id=1686): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x20000002, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}}, 0x0) 559.844606ms ago: executing program 4 (id=1687): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 531.533517ms ago: executing program 3 (id=1688): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}}], 0x1, 0x4000000) 451.789679ms ago: executing program 1 (id=1689): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) 451.402099ms ago: executing program 0 (id=1690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x3, 0x0, 0x3}}, {@arp={0x806, @generic={0x200, 0x890d, 0x6, 0x0, 0x2, @remote, "", @broadcast}}}}, 0x0) 399.77449ms ago: executing program 4 (id=1691): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x7f9d2000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000100), 0x4) 336.299372ms ago: executing program 3 (id=1692): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x541, 0x4000000b, r0, 0x0) fanotify_mark(r1, 0x542, 0x48001021, r0, 0x0) 290.010403ms ago: executing program 1 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x4008000) 271.203063ms ago: executing program 4 (id=1694): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 248.400284ms ago: executing program 3 (id=1695): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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") mknod$loop(0x0, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b442, 0xa) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0xa, 0xc741, 0x80, 0x1}) 238.497644ms ago: executing program 0 (id=1696): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x1, &(0x7f0000000180)="0100203200"/20, 0x14) 150.619526ms ago: executing program 1 (id=1697): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 121.277537ms ago: executing program 4 (id=1698): unshare(0x2040400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 120.094117ms ago: executing program 2 (id=1699): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0xfffeffff) poll(&(0x7f0000000240)=[{r0, 0x8620}], 0x1, 0x3) 3.85709ms ago: executing program 4 (id=1700): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000180)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x548, &(0x7f00000011c0)="$eJzs3cFvI1cZAPBvvPEmu802KfQACOhSCgtarZN426jqhe0FhKpKiIoTh21I3CiKvY5ir2jMHrJH7pVYiRPwH3DjgNQTB27cQOLQSzkgLbACNUgcjGY8SbyJnbhN1k7i30+aeN6b2fnei/e9N/Mi+wUwtq5HxHZEXI6IdyNiJs9P8i3udLb0vE+ePFjeefJgOYl2+51/JtnxNC+6/k3qufyaUxHxw+9F/CQ5HLex1VpfqlYrm3l6rlnbmGtstW6tFfKc8uLC4vzrt18rn1pdX6r99vF319760e9/95WP/7T97Z+lxZr++bXsWHc99hVPHDPJrzPdlTcREW+d+Mpnx0T+/4fzJ21tn4uIl7P2PxOXsncTALjI2u2ZaM90pwGAiy59/p+OpFDK5wKmo1AolTpzeC/G1UK13mjenKnfv7cS2RzWbBQL761VK/P5XOFsFJM0vZDt76fLT6U/qNyOiBci4oPJK9nx0nK9ujLKGx8AGGPPHRj//zPZGf+7nfyvYADAmTM16gIAAEPXNf7PjrIcAMDweP4HgPHzKcZ/nw4EgAvC8z8AjB/jPwCMn2PH/4fDKQcAMBQ/ePvtdGvvdL7/evebum+tVBrrpdr95dJyfXOjtFqvr1YrpeV2+7jrVev1jYVX95KNrdbdWv3+vebdtdrSauVuxXcJAMDovfDSh39JB/3tN65kW3St5WCshoutMOoCACNzadQFAEbG53lgfA3wjG8aAC64Hkv0duQTBEm/Ex5Z/BXOqxtfNP8P4+ok8//mDuB8+2zz/9859XIAw2cMh/HVbifW/AeAMbM/xz/59I1B3z8IAhfNcc2971eEPBrg4nc+fXkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPJjOtqRQytYC305/FkqliGsRMRvF5L21amU+Ip6PiD9PFifT9MKoCw0AnFDh70m+/teNmVemDx69nPw3WxjwckT89Jfv/OL9pWZzcyHN/9defvNRmn+luVm+PIoKAADddtfd/Gg/Kxu/y/lr14P8J08eLO9uwyzi4zcjYupKFn8n3zpHJmIie52KYkRc/XeSpzvS+5VLpxB/+2FEfGG3/lPxfleE6WwOpLPy6cH4aexrpx6/+/d/MH7hqfoWsmPpazH7XXw+DhQOONaHb3b6ybztpU08b3+FuJ699m7/U1kPdXJp/5c2151D/V9hr/+7dCh+krX563vpo0vy+NU/fP9QZnumc+xhxJcmesVP9uInvfvf4isD1vGjL3/15X7H2r+KuNGz/rsrUteybnauWduYa2y1bq3VllYrq5V75fLiwuL867dfK89lc9Sdn3/sFeMfb9x8vl/8tP5X+8SfOrr+8Y0B6//r/737468dEf9bX+/9/r94RPx0TPzmgPGXrt7pu3x3Gn+lT/2Pef/j5oDxP/5ba2XAUwGAIWhstdaXqtXK5jE76b3mcefYGXwnfbY/A8XIdmI74rQumE1KRETPc9I76rNR5We1k7TSO+NRRP/NaV9w1D0T8KztN/r+5/x1mAUCAAAAAAAAAAAAAAAOaWy11id7f1rr1HZGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurv8HAAD//yHZxLU=") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./bus/file0\x00', 0x2) 0s ago: executing program 2 (id=1701): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@minixdf}, {@nogrpid}, {@usrquota}], [{@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x66, 0x35, 0x52, 0x63, 0x34, 0x36, 0x39], 0x2d, [0x64, 0x34, 0x36, 0x34], 0x2d, [0x63, 0x30, 0x62, 0x66], 0x2d, [0x62, 0x37, 0x34, 0x5f], 0x2d, [0x61, 0x38, 0x32, 0x36, 0x61, 0x39, 0x30, 0xe]}}}, {@audit}]}, 0x1, 0x509, &(0x7f0000000ac0)="$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") r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4) kernel console output (not intermixed with test programs): ) comm="syz.3.582" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 111.242990][ T5816] vhci_hcd: not connected 4 [ 111.261370][ T5818] loop0: detected capacity change from 0 to 256 [ 111.326668][ T5818] exfat: Deprecated parameter 'utf8' [ 111.336875][ T5818] exfat: Deprecated parameter 'namecase' [ 111.348403][ T5818] exfat: Deprecated parameter 'utf8' [ 111.366908][ T5818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 111.398935][ T5818] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 111.442717][ T5818] exFAT-fs (loop0): hint_cluster is invalid (1) [ 111.464172][ T5818] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000) [ 111.474160][ T5818] exFAT-fs (loop0): error, failed to bmap (inode : ffff888062701b60 iblock : 9, err : -5) [ 111.493157][ T5818] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 111.501406][ T5818] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 111.587701][ T5822] loop2: detected capacity change from 0 to 4096 [ 111.654601][ T5828] loop1: detected capacity change from 0 to 1024 [ 111.665850][ T9] attempt to access beyond end of device [ 111.665850][ T9] loop0: rw=1, want=34359738496, limit=256 [ 111.719706][ T5830] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.825721][ T5828] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.835063][ T5822] attempt to access beyond end of device [ 111.835063][ T5822] loop2: rw=0, want=67108866, limit=4096 [ 111.876579][ T25] audit: type=1800 audit(2000000013.270:11): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 res=0 errno=0 [ 111.935091][ T5822] attempt to access beyond end of device [ 111.935091][ T5822] loop2: rw=0, want=131072, limit=4096 [ 111.961591][ T5822] attempt to access beyond end of device [ 111.961591][ T5822] loop2: rw=0, want=65538, limit=4096 [ 111.990744][ T5822] NILFS (loop2): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=0, cno=0, offset=2, blocknr=0, vblocknr=0 [ 112.055409][ T5822] NILFS (loop2): error -2 preparing GC: cannot read source blocks [ 112.130838][ T5849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'. [ 112.380385][ T5866] loop1: detected capacity change from 0 to 128 [ 112.420089][ T5866] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 112.474838][ T4234] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.483068][ T5871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'. [ 112.509982][ T5871] netem: unknown loss type 13 [ 112.516576][ T5871] netem: change failed [ 112.736114][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 112.895108][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.897353][ T5896] loop2: detected capacity change from 0 to 512 [ 112.915681][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.935705][ T4234] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.957656][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.003313][ T4234] usb 4-1: config 0 descriptor?? [ 113.061160][ T5896] Quota error (device loop2): find_tree_dqentry: Getting block too big (196613 >= 6) [ 113.063424][ T5903] loop0: detected capacity change from 0 to 1024 [ 113.071151][ T5896] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.622: Failed to acquire dquot type 1 [ 113.086583][ T4234] hub 4-1:0.0: USB hub found [ 113.119660][ T5896] EXT4-fs (loop2): 1 truncate cleaned up [ 113.129193][ T5896] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.141851][ T5896] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.216001][ T5903] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 113.233607][ T5903] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.288051][ T5903] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 113.310981][ T5903] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.315022][ T4234] hub 4-1:0.0: 1 port detected [ 113.337465][ T5908] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.381256][ T5883] F2FS-fs (loop1): invalid crc value [ 113.391149][ T5883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 113.420837][ T5883] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 113.454919][ T4990] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.475657][ T5883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 113.724835][ T4990] usb 3-1: Using ep0 maxpacket: 16 [ 113.834974][ T4234] usb 4-1: USB disconnect, device number 5 [ 113.845110][ T4990] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 113.858751][ T4990] usb 3-1: config 0 has no interface number 0 [ 113.887354][ T4990] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 26, changing to 8 [ 113.928792][ T4990] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid maxpacket 50458, setting to 1024 [ 113.940628][ T4990] usb 3-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 113.951289][ T4990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.967625][ T4990] usb 3-1: config 0 descriptor?? [ 113.985094][ T5896] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 114.032733][ T5925] JBD2: Ignoring recovery information on journal [ 114.094092][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.120580][ T5925] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.184186][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 114.278796][ T5289] usb 3-1: USB disconnect, device number 2 [ 114.400988][ T5933] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.442724][ T5931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.716589][ T5949] exfat: Deprecated parameter 'utf8' [ 114.753175][ T5949] exfat: Deprecated parameter 'namecase' [ 114.769382][ T5949] exfat: Deprecated parameter 'utf8' [ 114.811639][ T5949] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 114.903732][ T5949] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 114.933207][ T5949] exFAT-fs (loop4): hint_cluster is invalid (1) [ 115.009840][ T5949] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 115.026230][ T5949] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805e9e0e60 iblock : 9, err : -5) [ 115.066217][ T5949] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 115.089792][ T5949] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 115.246018][ T9] attempt to access beyond end of device [ 115.246018][ T9] loop4: rw=1, want=34359738496, limit=256 [ 115.453731][ T5988] set_capacity_and_notify: 5 callbacks suppressed [ 115.453747][ T5988] loop3: detected capacity change from 0 to 512 [ 115.575589][ T5988] __quota_error: 1 callbacks suppressed [ 115.575604][ T5988] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 115.597206][ T5965] loop0: detected capacity change from 0 to 32768 [ 115.621652][ T5988] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 115.631603][ T5988] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.660: Failed to acquire dquot type 1 [ 115.652242][ T5988] EXT4-fs (loop3): 1 truncate cleaned up [ 115.697459][ T5988] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.734650][ T5988] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.794592][ T6002] vhci_hcd: not connected 4 [ 115.814153][ T5965] XFS (loop0): Mounting V5 Filesystem [ 115.816433][ T5976] loop2: detected capacity change from 0 to 32768 [ 115.980826][ T5976] XFS (loop2): Mounting V5 Filesystem [ 116.082820][ T5965] XFS (loop0): Ending clean mount [ 116.156455][ T6017] loop4: detected capacity change from 0 to 32768 [ 116.170275][ T6022] loop1: detected capacity change from 0 to 256 [ 116.178012][ T5976] XFS (loop2): Ending clean mount [ 116.226264][ T6022] exfat: Deprecated parameter 'utf8' [ 116.234898][ T5289] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.244391][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.253406][ T6022] exfat: Deprecated parameter 'namecase' [ 116.264073][ T6022] exfat: Deprecated parameter 'utf8' [ 116.281136][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 116.306844][ T4187] XFS (loop2): Unmounting Filesystem [ 116.325337][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 116.328538][ T6022] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 116.339047][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 116.369577][ T4185] XFS (loop0): Unmounting Filesystem [ 116.376311][ T6017] JBD2: Ignoring recovery information on journal [ 116.458711][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 116.473547][ T6017] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.494343][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 116.532092][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 116.549074][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 116.591939][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 116.615243][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 116.622072][ T6022] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 116.631063][ T6017] (syz.4.668,6017,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 116.650092][ T6017] (syz.4.668,6017,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 116.661677][ T6017] (syz.4.668,6017,0):ocfs2_quota_read:201 ERROR: status = -5 [ 116.669168][ T6017] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 116.679741][ T6017] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 116.689219][ T6017] (syz.4.668,6017,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 116.698970][ T6017] (syz.4.668,6017,0):ocfs2_symlink:1879 ERROR: status = -5 [ 116.708532][ T6017] (syz.4.668,6017,0):ocfs2_symlink:2065 ERROR: status = -5 [ 116.754878][ T6022] exFAT-fs (loop1): hint_cluster is invalid (1) [ 116.771567][ T5289] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 116.788222][ T5289] usb 4-1: config 0 has no interface number 0 [ 116.794497][ T5289] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 26, changing to 8 [ 116.801790][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 116.806476][ T5289] usb 4-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid maxpacket 50458, setting to 1024 [ 116.820290][ T6022] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 116.824012][ T5289] usb 4-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 116.841477][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.850324][ T6022] exFAT-fs (loop1): error, failed to bmap (inode : ffff888062703560 iblock : 9, err : -5) [ 116.883087][ T5289] usb 4-1: config 0 descriptor?? [ 116.893432][ T6022] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 116.901756][ T6022] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 116.910487][ T5988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.037575][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.074566][ T4212] attempt to access beyond end of device [ 117.074566][ T4212] loop1: rw=1, want=34359738496, limit=256 [ 117.293031][ T4990] usb 4-1: USB disconnect, device number 6 [ 117.458024][ T6037] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 117.473652][ T6037] netdevsim netdevsim1 netdevsim0: Failed to get key data for SA table [ 117.484491][ T6033] loop2: detected capacity change from 0 to 32768 [ 117.513870][ T25] audit: type=1800 audit(2000000018.900:12): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.670" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 117.539104][ T4242] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.572027][ T25] audit: type=1800 audit(2000000018.930:13): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.670" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 117.783336][ T6053] vhci_hcd: not connected 4 [ 117.795121][ T4242] usb 5-1: Using ep0 maxpacket: 32 [ 117.821900][ T6055] netlink: 32 bytes leftover after parsing attributes in process `syz.1.679'. [ 117.831293][ T6055] netem: unknown loss type 13 [ 117.845348][ T6055] netem: change failed [ 117.863627][ T6057] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 117.915039][ T4242] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 117.944906][ T4242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.976507][ T4242] usb 5-1: config 0 descriptor?? [ 118.016783][ T4242] gspca_main: sq930x-2.14.0 probing 041e:403c [ 118.039732][ T6068] loop2: detected capacity change from 0 to 512 [ 118.167278][ T6068] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.188292][ T6083] vhci_hcd: not connected 4 [ 118.330858][ T6093] udc-core: couldn't find an available UDC or it's busy [ 118.355517][ T6093] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.617585][ T6108] loop2: detected capacity change from 0 to 8 [ 118.704845][ T4242] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 118.712259][ T4242] sq930x: probe of 5-1:0.0 failed with error -71 [ 118.732123][ T4242] usb 5-1: USB disconnect, device number 6 [ 118.980469][ T6114] loop0: detected capacity change from 0 to 2048 [ 119.170603][ T6114] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.235606][ T6125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.393004][ T6135] loop0: detected capacity change from 0 to 512 [ 119.534665][ T6135] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.574242][ T6135] EXT4-fs error (device loop0): ext4_quota_enable:6444: inode #4: comm syz.0.715: casefold flag without casefold feature [ 119.615701][ T6135] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.715: Bad quota inode: 4, type: 1 [ 119.635424][ T6135] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.650516][ T6135] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 119.658191][ T6135] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 119.710487][ T6135] EXT4-fs (loop0): shut down requested (2) [ 119.721838][ T6135] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 119.736209][ T6135] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.841140][ T6133] JBD2: Ignoring recovery information on journal [ 119.848597][ T6123] XFS (loop1): Mounting V5 Filesystem [ 119.923666][ T6133] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.031733][ T6123] XFS (loop1): Ending clean mount [ 120.176316][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 120.207885][ T6161] udc-core: couldn't find an available UDC or it's busy [ 120.250626][ T6161] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.275844][ T4186] XFS (loop1): Unmounting Filesystem [ 120.756314][ T6175] set_capacity_and_notify: 3 callbacks suppressed [ 120.756332][ T6175] loop2: detected capacity change from 0 to 512 [ 120.842191][ T6175] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.732: missing EA_INODE flag [ 120.863548][ T6175] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.732: error while reading EA inode 12 err=-117 [ 120.910582][ T6167] loop4: detected capacity change from 0 to 32768 [ 120.918112][ T6175] EXT4-fs (loop2): 1 orphan inode deleted [ 120.923903][ T6175] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 120.948607][ T6184] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 121.014408][ T6167] JBD2: Ignoring recovery information on journal [ 121.027234][ T6167] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 121.085255][ T6167] JBD2: bad block at offset 32 [ 121.192840][ T6167] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.507728][ T6201] loop1: detected capacity change from 0 to 32768 [ 121.549240][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.566128][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 121.589515][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 121.607754][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 121.644941][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 121.662850][ T6201] JBD2: Ignoring recovery information on journal [ 121.730534][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 121.744458][ T6201] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 121.753932][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 121.771391][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 121.889236][ T6194] loop3: detected capacity change from 0 to 32768 [ 121.944532][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 121.960896][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 121.974486][ T6201] (syz.1.740,6201,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 121.987815][ T6201] (syz.1.740,6201,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 121.996379][ T6201] (syz.1.740,6201,0):ocfs2_quota_read:201 ERROR: status = -5 [ 122.003774][ T6201] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 122.013030][ T6201] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 122.022472][ T6201] (syz.1.740,6201,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 122.030249][ T6201] (syz.1.740,6201,0):ocfs2_symlink:1879 ERROR: status = -5 [ 122.037572][ T6201] (syz.1.740,6201,0):ocfs2_symlink:2065 ERROR: status = -5 [ 122.096023][ T6194] XFS (loop3): Mounting V5 Filesystem [ 122.213166][ T6194] XFS (loop3): Ending clean mount [ 122.243613][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 122.263509][ T6234] loop4: detected capacity change from 0 to 512 [ 122.327807][ T4188] XFS (loop3): Unmounting Filesystem [ 122.342007][ T6234] Quota error (device loop4): find_tree_dqentry: Getting block too big (196613 >= 6) [ 122.369473][ T6234] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 122.388580][ T6234] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.752: Failed to acquire dquot type 1 [ 122.428715][ T6234] EXT4-fs (loop4): 1 truncate cleaned up [ 122.434433][ T6234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.497479][ T6239] loop1: detected capacity change from 0 to 256 [ 122.519787][ T6234] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.854833][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.134860][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 123.265063][ T13] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 123.273283][ T13] usb 5-1: config 0 has no interface number 0 [ 123.279465][ T13] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 26, changing to 8 [ 123.290547][ T13] usb 5-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid maxpacket 50458, setting to 1024 [ 123.301825][ T13] usb 5-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 123.310869][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.321532][ T13] usb 5-1: config 0 descriptor?? [ 123.345164][ T6234] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.388687][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.578790][ T13] usb 5-1: USB disconnect, device number 7 [ 124.132800][ T6247] loop0: detected capacity change from 0 to 128 [ 124.277440][ T6251] loop2: detected capacity change from 0 to 256 [ 124.312827][ T6251] exfat: Deprecated parameter 'utf8' [ 124.333693][ T6251] exfat: Deprecated parameter 'utf8' [ 124.410402][ T6251] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 124.820468][ T6246] loop3: detected capacity change from 0 to 32768 [ 124.831421][ T6269] udc-core: couldn't find an available UDC or it's busy [ 124.845408][ T6269] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.898095][ T6246] JBD2: Ignoring recovery information on journal [ 124.916657][ T6255] loop4: detected capacity change from 0 to 32768 [ 125.022365][ T6246] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 125.074553][ T6255] XFS (loop4): Mounting V5 Filesystem [ 125.191772][ T6255] XFS (loop4): Ending clean mount [ 125.232917][ T6255] XFS (loop4): Quotacheck needed: Please wait. [ 125.292569][ T6255] XFS (loop4): Quotacheck: Done. [ 125.359799][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 125.370348][ T4192] XFS (loop4): Unmounting Filesystem [ 125.469709][ T6289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.506743][ T6291] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 125.555981][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 125.565624][ T6289] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.601136][ T6299] netlink: 'syz.0.786': attribute type 25 has an invalid length. [ 125.610461][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 125.629666][ T6291] EXT4-fs (loop1): shut down requested (2) [ 125.770564][ T6305] set_capacity_and_notify: 2 callbacks suppressed [ 125.770578][ T6305] loop0: detected capacity change from 0 to 256 [ 126.232734][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 126.255300][ T6334] netlink: 'syz.3.790': attribute type 25 has an invalid length. [ 126.263299][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 126.510891][ T6322] loop2: detected capacity change from 0 to 32768 [ 126.662461][ T6351] loop0: detected capacity change from 0 to 1024 [ 126.695911][ T6322] XFS (loop2): Mounting V5 Filesystem [ 126.759346][ T6351] EXT4-fs (loop0): Ignoring removed bh option [ 126.817109][ T6362] loop4: detected capacity change from 0 to 16 [ 126.927280][ T6351] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,dioread_lock,barrier=0x0000000000000404,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,i_version,bh,init_itable,. Quota mode: none. [ 126.955818][ T6322] XFS (loop2): Ending clean mount [ 127.005142][ T6362] erofs: (device loop4): mounted with root inode @ nid 36. [ 127.058504][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 127.071207][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.105997][ T4200] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 127.132787][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.151458][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 127.166137][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 127.188806][ T6384] loop1: detected capacity change from 0 to 64 [ 127.212728][ T4187] XFS (loop2): Unmounting Filesystem [ 127.241112][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 127.346129][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 127.433158][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 127.446114][ T4174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 127.464677][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 127.473841][ T6362] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 127.494130][ T6362] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 127.555426][ T25] audit: type=1800 audit(2000000028.950:14): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.774" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 127.645391][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.709746][ T6379] ODEBUG: Out of memory. ODEBUG disabled [ 127.803974][ T6379] syz.4.774 (6379): drop_caches: 2 [ 127.898561][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 127.954499][ T6403] netlink: 'syz.0.817': attribute type 15 has an invalid length. [ 128.015972][ T13] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 128.045851][ T13] usb 4-1: config 0 has no interface number 0 [ 128.066161][ T13] usb 4-1: config 0 interface 246 has no altsetting 0 [ 128.148997][ T6409] loop0: detected capacity change from 0 to 1024 [ 128.166432][ T4174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.185776][ T4174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.225098][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 128.238043][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.263262][ T13] usb 4-1: Product: syz [ 128.282497][ T6424] loop1: detected capacity change from 0 to 512 [ 128.282941][ T6409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.303916][ T13] usb 4-1: Manufacturer: syz [ 128.308784][ T13] usb 4-1: SerialNumber: syz [ 128.310032][ T6409] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.325929][ T13] usb 4-1: config 0 descriptor?? [ 128.337753][ T6424] EXT4-fs (loop1): Ignoring removed orlov option [ 128.375751][ T6427] loop4: detected capacity change from 0 to 4096 [ 128.387069][ T6424] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 128.417021][ T6427] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 128.444106][ T6431] loop2: detected capacity change from 0 to 256 [ 128.460636][ T6427] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 128.575369][ T6427] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 128.616003][ T6427] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 128.664380][ T6427] ntfs: volume version 3.1. [ 128.711417][ T13] usb 4-1: USB disconnect, device number 7 [ 128.860342][ T6427] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 128.928301][ T6427] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 129.039454][ T4192] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 129.125003][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.325075][ T6453] loop4: detected capacity change from 0 to 2048 [ 129.377443][ T6453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.425267][ T6461] EXT4-fs (loop3): Ignoring removed oldalloc option [ 129.443461][ T6461] EXT4-fs (loop3): Ignoring removed bh option [ 129.472546][ T6463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.499188][ T6461] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 129.501634][ T6465] erofs: (device loop0): mounted with root inode @ nid 36. [ 129.540379][ T6461] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.561568][ T6461] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.844: lblock 3 mapped to illegal pblock 3 (length 3) [ 129.732911][ T6461] EXT4-fs (loop3): Remounting filesystem read-only [ 129.951639][ T6475] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.011601][ T6475] ext4 filesystem being mounted at /167/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.048474][ T6479] NILFS (loop2): invalid segment: Checksum error in segment payload [ 130.097337][ T6493] Set syz1 is full, maxelem 0 reached [ 130.103465][ T6479] NILFS (loop2): trying rollback from an earlier position [ 130.154027][ T6489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.213390][ T6479] NILFS (loop2): recovery complete [ 130.234173][ T25] audit: type=1804 audit(2000000031.620:15): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.856" name=2F6E6577726F6F742F3133382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop4" ino=1367 res=1 errno=0 [ 130.299267][ T6492] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.858 (6492) [ 130.309283][ T6494] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.339367][ T6492] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 130.348952][ T6492] BTRFS info (device loop3): enabling auto defrag [ 130.355468][ T6492] BTRFS info (device loop3): force zlib compression, level 3 [ 130.362933][ T6492] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 130.372378][ T6492] BTRFS info (device loop3): use zstd compression, level 3 [ 130.379912][ T6492] BTRFS info (device loop3): allowing degraded mounts [ 130.386788][ T6492] BTRFS info (device loop3): using free space tree [ 130.393457][ T6492] BTRFS info (device loop3): has skinny extents [ 130.672225][ T6528] netlink: 76 bytes leftover after parsing attributes in process `syz.1.867'. [ 130.813964][ T6492] BTRFS info (device loop3): enabling ssd optimizations [ 130.941135][ T6492] BTRFS info (device loop3): force zlib compression, level 3 [ 130.949131][ T6492] BTRFS info (device loop3): use zstd compression, level 3 [ 130.956511][ T6492] BTRFS info (device loop3): allowing degraded mounts [ 131.004903][ T5533] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.033943][ T6555] udc-core: couldn't find an available UDC or it's busy [ 131.055520][ T6555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 131.306348][ T6565] set_capacity_and_notify: 7 callbacks suppressed [ 131.306364][ T6565] loop1: detected capacity change from 0 to 1024 [ 131.338907][ T4231] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.418174][ T5533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.423217][ T6565] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.882: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.436678][ T5533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.471405][ T5533] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.485012][ T5533] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.494141][ T5533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.504910][ T5533] usb 3-1: config 0 descriptor?? [ 131.518989][ T6565] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 131.585778][ T6565] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.882: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.615359][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 131.633353][ T6571] loop3: detected capacity change from 0 to 8192 [ 131.646471][ T6571] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 131.659205][ T6571] REISERFS (device loop3): using ordered data mode [ 131.665847][ T6571] reiserfs: using flush barriers [ 131.673700][ T6571] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.690621][ T6571] REISERFS (device loop3): checking transaction log (loop3) [ 131.698409][ T6565] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.882: Failed to acquire dquot type 0 [ 131.699846][ T6571] REISERFS (device loop3): Using r5 hash to sort names [ 131.722621][ T6571] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 131.724364][ T6565] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 131.750255][ T6565] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.882: mark_inode_dirty error [ 131.761842][ T4231] usb 5-1: config 0 has no interfaces? [ 131.767627][ T4231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.777034][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.786674][ T4231] usb 5-1: config 0 descriptor?? [ 131.798410][ T6565] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 131.812532][ T6565] EXT4-fs (loop1): 1 orphan inode deleted [ 131.818347][ T6565] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 131.840324][ T4212] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.840856][ T4212] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 131.929325][ T6565] EXT4-fs (loop1): Ignoring removed bh option [ 131.985682][ T6565] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.882: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.006591][ T5533] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description [ 132.031322][ T5533] plantronics 0003:047F:FFFF.0003: parse failed [ 132.043285][ T5533] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 132.065545][ T6565] EXT4-fs (loop1): Ignoring removed bh option [ 132.079972][ T4234] usb 5-1: USB disconnect, device number 8 [ 132.085982][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.152850][ T6581] loop0: detected capacity change from 0 to 512 [ 132.214289][ T13] usb 3-1: USB disconnect, device number 3 [ 132.258728][ T6581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.888: invalid indirect mapped block 10 (level 1) [ 132.280633][ T6585] loop3: detected capacity change from 0 to 4096 [ 132.304352][ T6581] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.888: invalid indirect mapped block 8 (level 1) [ 132.319533][ T6581] EXT4-fs (loop0): 1 truncate cleaned up [ 132.326496][ T6581] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 132.383125][ T6581] EXT4-fs (loop0): shut down requested (2) [ 132.522153][ T6593] input: syz1 as /devices/virtual/input/input16 [ 132.647169][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653536][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.866764][ T6619] program syz.0.903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.881530][ T6618] device veth0 entered promiscuous mode [ 132.896856][ T6616] device veth0 left promiscuous mode [ 132.967761][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 132.979609][ T6623] program syz.0.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.138660][ T4234] kernel read not supported for file /video9 (pid: 4234 comm: kworker/0:7) [ 133.430156][ T6656] netlink: 500 bytes leftover after parsing attributes in process `syz.0.921'. [ 133.737610][ T6638] loop4: detected capacity change from 0 to 32768 [ 133.759534][ T6674] loop3: detected capacity change from 0 to 2048 [ 133.834267][ T6638] XFS (loop4): Mounting V5 Filesystem [ 133.847229][ T6674] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 133.894854][ T4234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.929732][ T6638] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 133.973358][ T6638] XFS (loop4): Starting recovery (logdev: internal) [ 133.988586][ T6638] XFS (loop4): Ending recovery (logdev: internal) [ 134.082165][ T6638] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 134.102137][ T6638] XFS (loop4): Unmount and run xfs_repair [ 134.120675][ T4192] XFS (loop4): Unmounting Filesystem [ 134.134942][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 134.254982][ T4234] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 134.268490][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.288507][ T4234] usb 2-1: config 0 descriptor?? [ 134.305082][ T4986] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.438834][ T6691] loop0: detected capacity change from 0 to 4096 [ 134.546252][ T4234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 134.554858][ T4986] usb 4-1: Using ep0 maxpacket: 8 [ 134.564631][ T6705] loop4: detected capacity change from 0 to 128 [ 134.589421][ T6705] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.595961][ T4234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.623236][ T6691] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 134.646260][ T4234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 134.653447][ T4234] usb 2-1: media controller created [ 134.681006][ T6705] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.701805][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.719275][ T4986] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 134.744990][ T4986] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.759935][ T866] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 134.762890][ T4986] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.780310][ T4185] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 134.787912][ T4234] az6027: usb out operation failed. (-71) [ 134.804930][ T4234] az6027: usb out operation failed. (-71) [ 134.810040][ T4986] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.819889][ T4234] stb0899_attach: Driver disabled by Kconfig [ 134.827206][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 134.833243][ T4986] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.847328][ T4234] az6027: no front-end attached [ 134.847328][ T4234] [ 134.864970][ T4185] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 134.884963][ T4234] az6027: usb out operation failed. (-71) [ 134.885753][ T4986] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.894161][ T866] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 134.907018][ T4234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 134.915236][ T4986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.923732][ T4185] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 134.925745][ T4234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 134.947049][ T9] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.961410][ T4234] dvb-usb: schedule remote query interval to 400 msecs. [ 134.978090][ T4234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 135.034892][ T4234] usb 2-1: USB disconnect, device number 7 [ 135.121614][ T4234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 135.210942][ T4986] usb 4-1: GET_CAPABILITIES returned 0 [ 135.224877][ T4986] usbtmc 4-1:16.0: can't read capabilities [ 135.394862][ T5533] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.430338][ T4986] usb 4-1: USB disconnect, device number 8 [ 135.448953][ T6734] loop1: detected capacity change from 0 to 512 [ 135.476693][ T6734] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 135.532501][ T6734] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,jqfmt=vfsold,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 135.542997][ T6722] loop2: detected capacity change from 0 to 32768 [ 135.557175][ T6734] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.596906][ T6734] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 135.621995][ T6734] EXT4-fs (loop1): Remounting filesystem read-only [ 135.648158][ T6722] XFS (loop2): Mounting V5 Filesystem [ 135.677892][ T6722] XFS (loop2): Ending clean mount [ 135.770684][ T4187] XFS (loop2): Unmounting Filesystem [ 135.985059][ T5533] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 135.994138][ T5533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.045105][ T5533] usb 5-1: Product: syz [ 136.051400][ T6763] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 136.055793][ T5533] usb 5-1: Manufacturer: syz [ 136.077497][ T5533] usb 5-1: SerialNumber: syz [ 136.106986][ T5533] usb 5-1: config 0 descriptor?? [ 136.201291][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 136.218628][ T6771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 136.227789][ T6769] EXT4-fs (loop3): Ignoring removed orlov option [ 136.234322][ T6769] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 136.276517][ T6769] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodiscard,noquota,orlov,mblk_io_submit,,errors=continue. Quota mode: none. [ 136.300040][ T6769] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.302643][ T6771] device erspan0 entered promiscuous mode [ 136.360328][ T6771] device gretap0 entered promiscuous mode [ 136.379171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 136.381268][ T6769] fscrypt (loop3, inode 12): Unsupported encryption flags (0xe5) [ 136.395662][ T5533] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 136.502207][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 136.626992][ T6797] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.973'. [ 136.734585][ T6801] set_capacity_and_notify: 2 callbacks suppressed [ 136.734595][ T6801] loop0: detected capacity change from 0 to 4096 [ 136.776725][ T6802] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.779515][ T6801] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 136.809714][ T6801] NILFS (loop0): mounting fs with errors [ 136.815074][ T5533] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 136.842892][ T6801] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 136.874801][ T4234] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 137.043231][ T13] usb 5-1: USB disconnect, device number 9 [ 137.189553][ T6808] loop0: detected capacity change from 0 to 32768 [ 137.234907][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.246674][ T4234] usb 4-1: config 0 has no interfaces? [ 137.259970][ T6808] XFS (loop0): Mounting V5 Filesystem [ 137.288551][ T6808] XFS (loop0): Ending clean mount [ 137.370065][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 137.384538][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 137.384552][ T25] audit: type=1800 audit(2000000294.773:16): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.978" name="file3" dev="loop0" ino=6151 res=0 errno=0 [ 137.396803][ T6820] loop1: detected capacity change from 0 to 64 [ 137.425052][ T4234] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 137.459293][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 137.473952][ T6820] gfs2: path_lookup on c::: returned error -2 [ 137.480620][ T6822] loop2: detected capacity change from 0 to 128 [ 137.486973][ T4234] usb 4-1: Product: syz [ 137.486993][ T4234] usb 4-1: Manufacturer: syz [ 137.487007][ T4234] usb 4-1: SerialNumber: syz [ 137.488586][ T4234] usb 4-1: config 0 descriptor?? [ 137.531116][ T4185] XFS (loop0): Unmounting Filesystem [ 137.693498][ T6831] netlink: 71 bytes leftover after parsing attributes in process `syz.2.985'. [ 137.762931][ T6795] udc-core: couldn't find an available UDC or it's busy [ 137.787951][ T6795] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.798570][ T5292] usb 4-1: USB disconnect, device number 9 [ 137.883885][ T6837] netlink: 68 bytes leftover after parsing attributes in process `syz.4.989'. [ 137.975987][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.006687][ T6844] device veth0 entered promiscuous mode [ 138.006944][ T6843] device veth0 left promiscuous mode [ 138.145132][ T6848] rdma_rxe: rxe_register_device failed with error -23 [ 138.153063][ T6848] rdma_rxe: failed to add syz_tun [ 138.214952][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 138.310500][ T6846] loop0: detected capacity change from 0 to 40427 [ 138.334920][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.360168][ T13] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.370009][ T6846] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.388910][ T5292] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.398531][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.422953][ T13] usb 2-1: config 0 descriptor?? [ 138.487870][ T6846] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.588019][ T4185] attempt to access beyond end of device [ 138.588019][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 138.634863][ T5292] usb 4-1: Using ep0 maxpacket: 8 [ 138.706225][ T13] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.757367][ T5292] usb 4-1: config index 0 descriptor too short (expected 27, got 18) [ 138.772671][ T5292] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.836760][ T6869] loop2: detected capacity change from 0 to 128 [ 138.939402][ T4234] usb 2-1: USB disconnect, device number 8 [ 138.958051][ T5292] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 138.964888][ T6869] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 138.976577][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.997347][ T6869] FAT-fs (loop2): Filesystem has been set read-only [ 138.998851][ T5292] usb 4-1: Product: syz [ 139.027860][ T5292] usb 4-1: Manufacturer: syz [ 139.036962][ T5292] usb 4-1: SerialNumber: syz [ 139.054688][ T5292] usb 4-1: config 0 descriptor?? [ 139.074930][ T6865] loop4: detected capacity change from 0 to 32768 [ 139.180242][ T6865] XFS (loop4): Mounting V5 Filesystem [ 139.310627][ T4985] usb 4-1: USB disconnect, device number 10 [ 139.333392][ T6865] XFS (loop4): Ending clean mount [ 139.419978][ T6889] comedi comedi4: bad chanlist[0]=0x01400000 chan=0 range length=2 [ 139.437064][ T4192] XFS (loop4): Unmounting Filesystem [ 139.446871][ T6881] loop2: detected capacity change from 0 to 32768 [ 139.657696][ T6895] loop1: detected capacity change from 0 to 164 [ 139.711946][ T6895] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 140.206209][ T6918] loop0: detected capacity change from 0 to 16 [ 140.272055][ T6918] erofs: (device loop0): mounted with root inode @ nid 36. [ 140.324880][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 140.328221][ T6893] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown compression format 15 for nid 36, please upgrade kernel [ 140.543781][ T6901] JBD2: Ignoring recovery information on journal [ 140.644999][ T4986] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.700449][ T6901] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.818281][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 140.994944][ T4986] usb 3-1: Using ep0 maxpacket: 16 [ 141.014869][ T5533] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.044014][ T6945] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 141.070098][ T6945] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000010000,noinit_itable,jqfmt=vfsold,dioread_lock,errors=remount-ro,nodiscard,block_validity,. Quota mode: writeback. [ 141.089342][ T6945] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.121948][ T6945] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.139934][ T6945] EXT4-fs (loop4): Remounting filesystem read-only [ 141.147004][ T4986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.158674][ T4986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.168793][ T4986] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 141.181166][ T4986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.200673][ T4986] usb 3-1: config 0 descriptor?? [ 141.221715][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'. [ 141.250889][ T6952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'. [ 141.266580][ T6952] device erspan0 entered promiscuous mode [ 141.273525][ T6952] device gretap0 entered promiscuous mode [ 141.288485][ T5533] usb 4-1: Using ep0 maxpacket: 8 [ 141.297081][ T6952] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 141.314204][ T6952] Cannot create hsr debugfs directory [ 141.330794][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 141.406918][ T5533] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 141.425273][ T5533] usb 4-1: config 0 has no interface number 0 [ 141.561326][ T6969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.594990][ T5533] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 141.619305][ T5533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.637585][ T5533] usb 4-1: Product: syz [ 141.646297][ T5533] usb 4-1: Manufacturer: syz [ 141.656503][ T5533] usb 4-1: SerialNumber: syz [ 141.674677][ T5533] usb 4-1: config 0 descriptor?? [ 141.716292][ T4986] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 141.814495][ T6965] set_capacity_and_notify: 5 callbacks suppressed [ 141.814509][ T6965] loop0: detected capacity change from 0 to 32768 [ 141.855551][ T6975] netlink: 'syz.1.1044': attribute type 29 has an invalid length. [ 141.863888][ T6975] netlink: 'syz.1.1044': attribute type 29 has an invalid length. [ 141.873837][ T6975] netlink: 'syz.1.1044': attribute type 29 has an invalid length. [ 141.893218][ T6975] netlink: 'syz.1.1044': attribute type 29 has an invalid length. [ 141.905087][ T4986] corsair 0003:1B1C:1B02.0004: Read invalid backlight brightness: 57. [ 141.968309][ T6965] XFS (loop0): Mounting V5 Filesystem [ 141.974030][ T5533] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 141.981039][ T5533] usb 4-1: No valid video chain found. [ 141.989705][ T5533] usb 4-1: USB disconnect, device number 11 [ 142.000767][ T6984] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 142.031117][ T6965] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 142.073868][ T6965] XFS (loop0): Starting recovery (logdev: internal) [ 142.113148][ T4986] usb 3-1: USB disconnect, device number 4 [ 142.137790][ T6965] XFS (loop0): Ending recovery (logdev: internal) [ 142.213985][ T6985] fido_id[6985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.242106][ T6965] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 142.288948][ T6965] XFS (loop0): Unmount and run xfs_repair [ 142.323397][ T6997] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1051'. [ 142.352480][ T4185] XFS (loop0): Unmounting Filesystem [ 142.746168][ T7013] loop2: detected capacity change from 0 to 512 [ 142.868959][ T7017] loop0: detected capacity change from 0 to 128 [ 142.877679][ T7013] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.945331][ T7013] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.991378][ T7017] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 142.995843][ T7002] loop4: detected capacity change from 0 to 32768 [ 143.108540][ T7013] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 143.177532][ T7013] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 143.258742][ T7002] XFS (loop4): Mounting V5 Filesystem [ 143.291894][ T7013] EXT4-fs (loop2): This should not happen!! Data will be lost [ 143.291894][ T7013] [ 143.397525][ T7013] EXT4-fs (loop2): Total free blocks count 0 [ 143.475338][ T7013] EXT4-fs (loop2): Free/Dirty block details [ 143.488193][ T7002] XFS (loop4): Ending clean mount [ 143.500025][ T7013] EXT4-fs (loop2): free_blocks=65280 [ 143.520894][ T7013] EXT4-fs (loop2): dirty_blocks=31 [ 143.560049][ T25] audit: type=1800 audit(2000000300.953:17): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1054" name="file3" dev="loop4" ino=6151 res=0 errno=0 [ 143.560963][ T7013] EXT4-fs (loop2): Block reservation details [ 143.610758][ T4192] XFS (loop4): Unmounting Filesystem [ 143.634850][ T7013] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 143.762831][ T7042] loop1: detected capacity change from 0 to 1024 [ 143.800564][ T7044] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1068'. [ 143.846559][ T25] audit: type=1800 audit(2000000301.243:18): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1067" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 143.874939][ T7042] hfsplus: extend alloc file! (16384,256,150995124) [ 143.882185][ T7042] hfsplus: failed to extend attributes file [ 143.912858][ T7046] loop0: detected capacity change from 0 to 736 [ 143.983431][ T7047] hfsplus: extend alloc file! (16384,256,150995124) [ 144.045691][ T7047] hfsplus: failed to extend attributes file [ 144.323670][ T7029] loop3: detected capacity change from 0 to 32768 [ 144.326133][ T7061] loop2: detected capacity change from 0 to 4096 [ 144.402976][ T7061] NILFS (loop2): invalid segment: Checksum error in segment payload [ 144.426507][ T7029] XFS (loop3): Mounting V5 Filesystem [ 144.435745][ T7061] NILFS (loop2): trying rollback from an earlier position [ 144.455789][ T7061] NILFS (loop2): recovery complete [ 144.504784][ T4234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.524912][ T7080] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.537066][ T7061] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 144.572719][ T7029] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 144.633746][ T7061] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 144.656401][ T7029] XFS (loop3): Starting recovery (logdev: internal) [ 144.676582][ T7084] loop4: detected capacity change from 0 to 8192 [ 144.692907][ T7029] XFS (loop3): Ending recovery (logdev: internal) [ 144.728660][ T7084] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.752429][ T25] audit: type=1800 audit(2000000302.143:19): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1079" name="file1" dev="loop4" ino=1048624 res=0 errno=0 [ 144.818023][ T7029] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 144.864070][ T7029] XFS (loop3): Unmount and run xfs_repair [ 144.865972][ T7090] program syz.0.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.957756][ T4188] XFS (loop3): Unmounting Filesystem [ 145.013164][ T7097] loop0: detected capacity change from 0 to 64 [ 145.037833][ T4234] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 145.048328][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.059148][ T4234] usb 2-1: Product: syz [ 145.063649][ T4234] usb 2-1: Manufacturer: syz [ 145.068778][ T4234] usb 2-1: SerialNumber: syz [ 145.089412][ T4234] usb 2-1: config 0 descriptor?? [ 145.147892][ T4234] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 009 [ 145.237426][ T7103] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 145.283286][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.315767][ T25] audit: type=1800 audit(2000000302.713:20): pid=7106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1089" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 145.339758][ T7103] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 145.405346][ T7107] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 145.439180][ T7107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1091'. [ 145.476590][ T7107] device batadv0 entered promiscuous mode [ 145.509801][ T7107] bond0: (slave batadv0): Releasing backup interface [ 145.573937][ T7107] bridge0: port 3(batadv0) entered blocking state [ 145.581692][ T4234] (null): failure reading functionality [ 145.593306][ T7107] bridge0: port 3(batadv0) entered disabled state [ 145.605691][ T7116] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 145.629885][ T4234] i2c i2c-1: connected i2c-tiny-usb device [ 145.637945][ T4528] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 145.647990][ T4528] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 145.689800][ T7121] program syz.3.1096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.831519][ T4234] usb 2-1: USB disconnect, device number 9 [ 146.047195][ T7140] input: syz1 as /devices/virtual/input/input18 [ 146.194189][ T7147] mkiss: ax0: crc mode is auto. [ 146.464861][ T7122] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 146.487827][ T7169] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 146.506824][ T7122] JBD2: Ignoring recovery information on journal [ 146.544613][ T7169] netlink: 'syz.1.1119': attribute type 2 has an invalid length. [ 146.599669][ T7122] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.636591][ T7122] ocfs2: Unmounting device (7,0) on (node local) [ 147.032362][ T7195] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 147.042639][ T7195] netlink: 'syz.1.1131': attribute type 2 has an invalid length. [ 147.065075][ T4986] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.131006][ T7200] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.149286][ T7200] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 147.236938][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1137'. [ 147.269560][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 147.324839][ T4986] usb 4-1: Using ep0 maxpacket: 16 [ 147.340579][ T7217] set_capacity_and_notify: 4 callbacks suppressed [ 147.340590][ T7217] loop0: detected capacity change from 0 to 256 [ 147.407421][ T7217] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 147.419021][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 147.465030][ T4986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.492738][ T4986] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.511487][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 147.535885][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.543833][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 147.545842][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.563474][ T7222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.566122][ T7225] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 147.581448][ T7225] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 147.641930][ T7227] udc-core: couldn't find an available UDC or it's busy [ 147.659901][ T7227] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 147.714964][ T4986] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.732649][ T4986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.751115][ T4986] usb 4-1: Product: syz [ 147.755670][ T4986] usb 4-1: Manufacturer: syz [ 147.760534][ T4986] usb 4-1: SerialNumber: syz [ 147.888886][ T7241] loop4: detected capacity change from 0 to 2048 [ 147.954822][ T4985] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.971118][ T7241] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 148.002818][ T7243] loop2: detected capacity change from 0 to 512 [ 148.010919][ T7241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.102121][ T7243] EXT4-fs (loop2): Test dummy encryption mode enabled [ 148.129245][ T4986] usb 4-1: 0:2 : does not exist [ 148.180380][ T7243] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,stripe=0x0000000000000007,barrier=0x0000000000000006,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 148.192792][ T4986] usb 4-1: USB disconnect, device number 12 [ 148.214620][ T7245] loop4: detected capacity change from 0 to 8192 [ 148.314219][ T25] audit: type=1800 audit(2000000305.703:21): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1153" name="file2" dev="loop4" ino=1048626 res=0 errno=0 [ 148.327592][ T7245] attempt to access beyond end of device [ 148.327592][ T7245] loop4: rw=0, want=57848, limit=8192 [ 148.386853][ T7245] Buffer I/O error on dev loop4, logical block 57847, async page read [ 148.413972][ T7245] attempt to access beyond end of device [ 148.413972][ T7245] loop4: rw=0, want=57848, limit=8192 [ 148.457109][ T4985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.458493][ T7245] Buffer I/O error on dev loop4, logical block 57847, async page read [ 148.501186][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.565491][ T4985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.600072][ T4985] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.647217][ T4985] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 148.672405][ T4985] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 148.699174][ T4985] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 148.724544][ T7266] loop3: detected capacity change from 0 to 256 [ 148.736599][ T4985] usb 2-1: config 1 interface 1 has no altsetting 0 [ 148.791113][ T7266] exfat: Deprecated parameter 'utf8' [ 148.841857][ T7266] exfat: Deprecated parameter 'utf8' [ 148.899924][ T7266] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 148.994287][ T7275] netlink: 'syz.4.1164': attribute type 15 has an invalid length. [ 149.015484][ T4985] usb 2-1: string descriptor 0 read error: -22 [ 149.021778][ T4985] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 149.075530][ T4985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.088911][ T7260] loop2: detected capacity change from 0 to 32768 [ 149.172389][ T7260] XFS (loop2): Mounting V5 Filesystem [ 149.273707][ T7260] XFS (loop2): Ending clean mount [ 149.305384][ T7293] loop4: detected capacity change from 0 to 1024 [ 149.336022][ T4187] XFS (loop2): Unmounting Filesystem [ 149.370718][ T4985] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 149.391060][ T4985] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 149.445542][ T7293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.470646][ T7293] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.915018][ T4985] usb 2-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 149.965022][ T4985] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 149.994018][ T4985] usb 2-1: USB disconnect, device number 10 [ 150.060385][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.468311][ T7347] Set syz1 is full, maxelem 0 reached [ 150.483586][ T7328] loop2: detected capacity change from 0 to 32768 [ 150.530560][ T7346] loop0: detected capacity change from 0 to 4096 [ 150.596125][ T7346] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 150.622731][ T7328] JBD2: Ignoring recovery information on journal [ 150.693898][ T7343] loop3: detected capacity change from 0 to 32768 [ 150.702812][ T7328] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 150.751318][ T7346] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 150.815903][ T7343] XFS (loop3): Mounting V5 Filesystem [ 150.845009][ T7346] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 150.895787][ T7343] XFS (loop3): Ending clean mount [ 150.906746][ T7346] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 150.919998][ T7346] ntfs: volume version 3.1. [ 150.932740][ T7343] XFS (loop3): Quotacheck needed: Please wait. [ 150.944246][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 151.041659][ T7346] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 151.062803][ T7343] XFS (loop3): Quotacheck: Done. [ 151.155411][ T7346] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 151.227199][ T4188] XFS (loop3): Unmounting Filesystem [ 151.270268][ T4185] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 151.453725][ T7368] hfsplus: walked past end of dir [ 151.517486][ T7380] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 151.702370][ T7382] EXT4-fs (loop1): Ignoring removed oldalloc option [ 151.739728][ T7382] EXT4-fs (loop1): Ignoring removed bh option [ 151.812080][ T7382] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 151.889053][ T7382] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.990737][ T7382] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.1207: lblock 3 mapped to illegal pblock 3 (length 3) [ 152.035056][ T7404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.057260][ T7382] EXT4-fs (loop1): Remounting filesystem read-only [ 152.175226][ T7409] NILFS (loop0): invalid segment: Checksum error in segment payload [ 152.218617][ T7409] NILFS (loop0): trying rollback from an earlier position [ 152.293020][ T7409] NILFS (loop0): recovery complete [ 152.346995][ T7417] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.404994][ T5533] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 152.540731][ T7431] udc-core: couldn't find an available UDC or it's busy [ 152.556682][ T7433] set_capacity_and_notify: 4 callbacks suppressed [ 152.556697][ T7433] loop1: detected capacity change from 0 to 16 [ 152.576483][ T7435] loop2: detected capacity change from 0 to 16 [ 152.585042][ T7431] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.618072][ T7431] udc-core: couldn't find an available UDC or it's busy [ 152.625455][ T7433] erofs: (device loop1): mounted with root inode @ nid 36. [ 152.635006][ T7435] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.638722][ T7431] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.660024][ T7437] loop3: detected capacity change from 0 to 2048 [ 152.677753][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 152.699557][ T4200] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 152.731901][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 152.757481][ T5533] usb 5-1: not running at top speed; connect to a high speed hub [ 152.860848][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 152.875144][ T5533] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 152.911371][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 152.918982][ T5533] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 152.963518][ T5533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.974309][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 153.010466][ T7438] syz.2.1227 (7438): drop_caches: 2 [ 153.023804][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 153.027760][ T7437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.034911][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 153.046141][ T5533] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 153.063917][ T5533] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 153.118609][ T7435] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 153.129997][ T7435] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 153.153166][ T25] audit: type=1800 audit(2000000566.541:22): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1227" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 153.306248][ T4986] usb 5-1: USB disconnect, device number 10 [ 153.337863][ T4986] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 153.375398][ T7452] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 153.384476][ T4986] garmin_gps 5-1:1.0: device disconnected [ 153.388783][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 153.431492][ T7452] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 153.540838][ T7458] loop2: detected capacity change from 0 to 256 [ 153.570660][ T7464] ucma_write: process 612 (syz.0.1240) changed security contexts after opening file descriptor, this is not allowed. [ 153.599160][ T7458] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 153.622242][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 153.662067][ T25] audit: type=1800 audit(2000000567.051:23): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1238" name="file2" dev="loop2" ino=1048631 res=0 errno=0 [ 153.705735][ T7458] exFAT-fs (loop2): hint_cluster is invalid (17) [ 153.713478][ T7458] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 153.733377][ T25] audit: type=1800 audit(2000000567.051:24): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1238" name="file2" dev="loop2" ino=1048631 res=0 errno=0 [ 153.747966][ T7458] exFAT-fs (loop2): Filesystem has been set read-only [ 153.793093][ T7458] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 153.904658][ T7479] loop3: detected capacity change from 0 to 512 [ 153.952333][ T7479] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1249: inode has both inline data and extents flags [ 154.007452][ T7479] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1249: couldn't read orphan inode 15 (err -117) [ 154.019613][ T7485] loop2: detected capacity change from 0 to 4096 [ 154.037542][ T7479] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.053053][ T7485] ntfs: volume version 3.1. [ 154.134958][ T4986] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 154.336134][ T5533] kernel read not supported for file /dsp1 (pid: 5533 comm: kworker/1:21) [ 154.361069][ T7498] raw_sendmsg: syz.2.1257 forgot to set AF_INET. Fix it! [ 154.365006][ T7500] program syz.3.1256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.413111][ T4986] usb 5-1: Using ep0 maxpacket: 16 [ 154.467141][ T7506] syz.2.1260 uses obsolete (PF_INET,SOCK_PACKET) [ 154.508257][ T7506] netlink: 'syz.2.1260': attribute type 9 has an invalid length. [ 154.531462][ T7502] loop0: detected capacity change from 0 to 4096 [ 154.548083][ T4986] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 154.561629][ T4986] usb 5-1: config 0 has no interface number 0 [ 154.581814][ T7502] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 154.604192][ T4986] usb 5-1: config 0 interface 246 has no altsetting 0 [ 154.605168][ T7511] loop3: detected capacity change from 0 to 256 [ 154.704289][ T7511] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 154.795099][ T4986] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 154.831309][ T4986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.849842][ T4986] usb 5-1: Product: syz [ 154.854283][ T4986] usb 5-1: Manufacturer: syz [ 154.863133][ T4986] usb 5-1: SerialNumber: syz [ 154.876769][ T4986] usb 5-1: config 0 descriptor?? [ 154.904883][ T4231] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.110742][ T7532] loop0: detected capacity change from 0 to 512 [ 155.165942][ T7532] EXT4-fs (loop0): Ignoring removed bh option [ 155.174121][ T7535] loop2: detected capacity change from 0 to 512 [ 155.184860][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 155.194455][ T7535] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 155.206420][ T7535] EXT4-fs (loop2): inline encryption not supported [ 155.218861][ T7535] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.239400][ T4986] usb 5-1: USB disconnect, device number 11 [ 155.273843][ T7532] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 155.278644][ T7535] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 155.287680][ T7532] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.313338][ T7535] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1274: bg 0: block 248: padding at end of block bitmap is not set [ 155.340578][ T7535] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1274: Failed to acquire dquot type 1 [ 155.343700][ T7536] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 155.361195][ T4231] usb 2-1: config 0 has no interfaces? [ 155.378548][ T7535] EXT4-fs (loop2): 1 truncate cleaned up [ 155.380274][ T4231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.419231][ T7535] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 155.421350][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.438191][ T7532] lo speed is unknown, defaulting to 1000 [ 155.474192][ T4231] usb 2-1: config 0 descriptor?? [ 155.852825][ T4986] usb 2-1: USB disconnect, device number 11 [ 155.980331][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.991313][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.003586][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.014640][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.022916][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.033875][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.042140][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.053191][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.085110][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.096099][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.125197][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.136240][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.172891][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.183858][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.199464][ T4409] ldm_validate_partition_table(): Disk read failed. [ 156.225004][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.235966][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.244033][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.254996][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.267306][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.278297][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.294064][ T4409] Dev loop9: unable to read RDB block 0 [ 156.301022][ T7560] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 156.307077][ T4409] loop9: unable to read partition table [ 156.316627][ T4409] loop9: partition table beyond EOD, truncated [ 156.335599][ T7560] REISERFS (device loop0): using ordered data mode [ 156.342228][ T7560] reiserfs: using flush barriers [ 156.345472][ T7553] ldm_validate_partition_table(): Disk read failed. [ 156.350905][ T7560] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.364964][ T7553] Dev loop9: unable to read RDB block 0 [ 156.370614][ T7560] REISERFS (device loop0): checking transaction log (loop0) [ 156.393661][ T7553] loop9: unable to read partition table [ 156.403819][ T7553] loop9: partition table beyond EOD, truncated [ 156.415923][ T7553] loop_reread_partitions: partition scan of loop9 (Sj̳P=?}X 5`㫅) failed (rc=-5) [ 156.474877][ T4986] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.508690][ T7546] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 156.607832][ T7567] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 156.682374][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 156.735759][ T7560] REISERFS (device loop0): Using rupasov hash to sort names [ 156.784241][ T7560] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.865075][ T4986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.884812][ T4986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.934787][ T4986] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 156.947483][ T7571] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.954412][ T4986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.964865][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.977053][ T4986] usb 3-1: config 0 descriptor?? [ 157.018166][ T7571] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.088702][ T7571] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.1288: casefold flag without casefold feature [ 157.171105][ T7569] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 157.201371][ T7569] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.244889][ T7569] F2FS-fs (loop4): invalid crc value [ 157.257426][ T7576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.306425][ T7569] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.457562][ T4986] playstation 0003:054C:0DF2.0005: unknown main item tag 0x4 [ 157.484888][ T4986] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 157.513334][ T4986] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 157.526336][ T7569] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 157.533550][ T7569] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.625256][ T7586] set_capacity_and_notify: 8 callbacks suppressed [ 157.625271][ T7586] loop3: detected capacity change from 0 to 512 [ 157.652631][ T7569] attempt to access beyond end of device [ 157.652631][ T7569] loop4: rw=2049, want=45112, limit=40427 [ 157.664238][ T7589] lo speed is unknown, defaulting to 1000 [ 157.675027][ T4986] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 9: -71 [ 157.704754][ T4986] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -71 [ 157.739222][ T4986] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense [ 157.777955][ T7586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.818676][ T4986] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 157.868442][ T7586] ext4 filesystem being mounted at /248/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.898949][ T4986] playstation: probe of 0003:054C:0DF2.0005 failed with error -71 [ 157.955288][ T4986] usb 3-1: USB disconnect, device number 5 [ 158.158845][ T7599] fido_id[7599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 158.230896][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.243028][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.243156][ T7604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.292748][ T7609] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 158.292776][ T7609] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 158.331336][ T7607] loop2: detected capacity change from 0 to 2048 [ 158.335392][ T4174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.365877][ T7607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.606056][ T7611] program syz.1.1301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.777499][ T7623] loop1: detected capacity change from 0 to 16 [ 158.851092][ T7623] erofs: (device loop1): mounted with root inode @ nid 36. [ 158.878541][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 158.904897][ T4234] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 158.938039][ T4200] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 158.952250][ T7591] loop0: detected capacity change from 0 to 32768 [ 158.969969][ T4174] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 158.991266][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 159.141313][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 159.145303][ T7591] XFS (loop0): Mounting V5 Filesystem [ 159.201614][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 159.257000][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 159.306471][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 159.332626][ T7591] XFS (loop0): Ending clean mount [ 159.354962][ T4174] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 159.367399][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 159.394765][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.403663][ T7623] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 159.437383][ T4174] usb 4-1: config 0 descriptor?? [ 159.455416][ T7623] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 159.496453][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 159.496467][ T25] audit: type=1800 audit(2000000572.891:25): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1304" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 159.644012][ T7627] loop2: detected capacity change from 0 to 32768 [ 159.679623][ T4185] XFS (loop0): Unmounting Filesystem [ 159.803761][ T7627] XFS (loop2): Mounting V5 Filesystem [ 159.847875][ T7659] loop4: detected capacity change from 0 to 256 [ 159.914856][ T4174] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 159.932363][ T4174] hackrf 4-1:0.0: Could not detect board [ 159.938429][ T4174] hackrf: probe of 4-1:0.0 failed with error -71 [ 159.956221][ T4174] usb 4-1: USB disconnect, device number 13 [ 159.979111][ T7627] XFS (loop2): Ending clean mount [ 160.105309][ T7664] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 160.156511][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.164601][ T7664] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.271315][ T7667] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 160.317943][ T7667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1317'. [ 160.341164][ T7667] device batadv0 entered promiscuous mode [ 160.380509][ T7667] bond0: (slave batadv0): Releasing backup interface [ 160.395409][ T7667] bridge0: port 3(batadv0) entered blocking state [ 160.402877][ T7667] bridge0: port 3(batadv0) entered disabled state [ 160.424174][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.456271][ T4187] XFS (loop2): Unmounting Filesystem [ 160.468561][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.516603][ T4528] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.525284][ T7676] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 160.525883][ T4528] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 160.542993][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.550404][ T7676] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 160.779910][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 161.205940][ T7715] udc-core: couldn't find an available UDC or it's busy [ 161.234820][ T7715] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 161.474644][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 161.578469][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 161.657759][ T7698] loop1: detected capacity change from 0 to 32768 [ 161.711400][ T7698] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 161.807834][ T7698] JBD2: Ignoring recovery information on journal [ 161.944614][ T7742] loop4: detected capacity change from 0 to 32768 [ 161.959924][ T7698] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 161.999105][ T7698] ocfs2: Unmounting device (7,1) on (node local) [ 162.028388][ T7742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1350 (7742) [ 162.104490][ T7742] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 162.129015][ T7742] BTRFS info (device loop4): using free space tree [ 162.182739][ T7742] BTRFS info (device loop4): has skinny extents [ 162.427649][ T7742] BTRFS info (device loop4): enabling ssd optimizations [ 162.657163][ T7794] loop2: detected capacity change from 0 to 4096 [ 162.682163][ T7802] udc-core: couldn't find an available UDC or it's busy [ 162.697103][ T7802] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 162.742204][ T7794] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 162.754592][ T7805] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.783977][ T7794] NILFS (loop2): mounting fs with errors [ 162.894937][ T7794] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 162.904833][ T5292] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.912843][ T4409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4409) [ 163.166747][ T5292] usb 2-1: Using ep0 maxpacket: 32 [ 163.289335][ T5292] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 163.458514][ T7823] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 163.474937][ T5292] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 163.484791][ T7823] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 163.500233][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.531081][ T5292] usb 2-1: Product: syz [ 163.539017][ T5292] usb 2-1: Manufacturer: syz [ 163.559300][ T5292] usb 2-1: SerialNumber: syz [ 163.590572][ T7829] loop0: detected capacity change from 0 to 512 [ 163.634916][ T7831] netlink: 'syz.2.1380': attribute type 3 has an invalid length. [ 163.652911][ T7831] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1380'. [ 163.678389][ T7829] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 163.717716][ T7829] EXT4-fs (loop0): invalid journal inode [ 163.743919][ T7837] loop4: detected capacity change from 0 to 64 [ 163.857764][ T5292] usb 2-1: selecting invalid altsetting 1 [ 163.979649][ T7844] tipc: Started in network mode [ 163.988860][ T7844] tipc: Node identity ac14140f, cluster identity 4711 [ 164.005313][ T7844] tipc: New replicast peer: 255.255.255.255 [ 164.033364][ T7844] tipc: Enabled bearer , priority 10 [ 164.082610][ T5292] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 164.082694][ T5292] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 164.120885][ T7849] netlink: 'syz.0.1388': attribute type 10 has an invalid length. [ 164.283957][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.313983][ T7849] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 164.334775][ T7852] netlink: 'syz.0.1388': attribute type 10 has an invalid length. [ 164.388044][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1388'. [ 164.408189][ T7852] device batadv0 entered promiscuous mode [ 164.428306][ T7852] bond0: (slave batadv0): Releasing backup interface [ 164.490578][ T7852] bridge0: port 3(batadv0) entered blocking state [ 164.508619][ T7852] bridge0: port 3(batadv0) entered disabled state [ 164.692900][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1393'. [ 164.986024][ T4212] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 164.995661][ T4212] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 165.014147][ T7876] loop2: detected capacity change from 0 to 512 [ 165.130823][ T7860] loop4: detected capacity change from 0 to 32768 [ 165.144797][ T5292] tipc: Node number set to 2886997007 [ 165.161910][ T7886] loop0: detected capacity change from 0 to 512 [ 165.162093][ T7876] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.193893][ T7876] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.270556][ T7886] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1400: inode has both inline data and extents flags [ 165.315028][ T7860] XFS (loop4): Mounting V5 Filesystem [ 165.321050][ T7886] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1400: couldn't read orphan inode 15 (err -117) [ 165.333718][ T7886] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.456689][ T7860] XFS (loop4): Ending clean mount [ 165.542875][ T4192] XFS (loop4): Unmounting Filesystem [ 165.628819][ T5292] usb 2-1: USB disconnect, device number 12 [ 165.898736][ T7915] loop1: detected capacity change from 0 to 512 [ 165.959337][ T7915] EXT4-fs (loop1): Ignoring removed bh option [ 166.034987][ T4234] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.056512][ T7915] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 166.096825][ T7915] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.197825][ T7915] lo speed is unknown, defaulting to 1000 [ 166.395078][ T4234] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 166.417599][ T4234] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 166.457577][ T4234] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 166.511040][ T4234] usb 3-1: config 220 interface 0 has no altsetting 0 [ 166.535675][ T4234] usb 3-1: config 220 interface 1 has no altsetting 0 [ 166.714847][ T4234] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 166.740994][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.756048][ T4234] usb 3-1: Product: syz [ 166.764979][ T4234] usb 3-1: Manufacturer: syz [ 166.769610][ T4234] usb 3-1: SerialNumber: syz [ 167.054064][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 167.086197][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 167.094076][ T7962] loop1: detected capacity change from 0 to 4096 [ 167.131430][ T7962] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 167.186361][ T4234] usb 3-1: selecting invalid altsetting 0 [ 167.238946][ T7962] ntfs: volume version 3.1. [ 167.255896][ T4234] usb 3-1: selecting invalid altsetting 0 [ 167.265330][ T4234] usbtest: probe of 3-1:220.1 failed with error -22 [ 167.302121][ T4234] usb 3-1: USB disconnect, device number 6 [ 167.537759][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 167.559480][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1444'. [ 167.965722][ T7970] loop4: detected capacity change from 0 to 32768 [ 168.014580][ T7970] (syz.4.1435,7970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.093656][ T7970] (syz.4.1435,7970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.130322][ T7970] (syz.4.1435,7970,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 168.144324][ T7970] JBD2: Ignoring recovery information on journal [ 168.247806][ T7986] loop1: detected capacity change from 0 to 32768 [ 168.282397][ T7970] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.482513][ T7986] XFS (loop1): Mounting V5 Filesystem [ 168.549995][ T8035] loop0: detected capacity change from 0 to 1024 [ 168.623107][ T7986] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 168.644503][ T7970] (syz.4.1435,7970,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x7fe56331. Applying ECC. [ 168.737430][ T7986] XFS (loop1): Starting recovery (logdev: internal) [ 168.802977][ T7970] (syz.4.1435,7970,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x55f1ae3f [ 168.818192][ T7986] XFS (loop1): Ending recovery (logdev: internal) [ 168.836953][ T7986] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 168.859831][ T7970] (syz.4.1435,7970,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 168.871005][ T7986] XFS (loop1): Failed to initialize disk quotas. [ 168.923550][ T7970] (syz.4.1435,7970,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 168.935991][ T8044] loop0: detected capacity change from 0 to 512 [ 168.962095][ T7970] (syz.4.1435,7970,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 168.980140][ T4186] XFS (loop1): Unmounting Filesystem [ 169.053808][ T7970] (syz.4.1435,7970,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 169.090295][ T7970] (syz.4.1435,7970,0):__ocfs2_claim_clusters:2387 ERROR: status = -5 [ 169.130557][ T7970] (syz.4.1435,7970,1):__ocfs2_claim_clusters:2395 ERROR: status = -5 [ 169.159472][ T8044] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 169.200067][ T7970] (syz.4.1435,7970,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 169.258840][ T8044] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.274827][ T7970] (syz.4.1435,7970,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 169.283469][ T7970] (syz.4.1435,7970,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 169.294833][ T8032] loop2: detected capacity change from 0 to 40427 [ 169.343369][ T8032] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 169.380714][ T7970] (syz.4.1435,7970,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 169.391067][ T8032] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 169.418252][ T8032] F2FS-fs (loop2): invalid crc value [ 169.444641][ T8032] F2FS-fs (loop2): invalid crc value [ 169.454169][ T7970] (syz.4.1435,7970,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 169.461465][ T8032] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 169.489289][ T7970] (syz.4.1435,7970,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 169.509012][ T8044] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1464: bg 0: block 217: padding at end of block bitmap is not set [ 169.530468][ T7970] (syz.4.1435,7970,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -5 [ 169.557613][ T7970] (syz.4.1435,7970,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -5 [ 169.585101][ T8044] EXT4-fs (loop0): Remounting filesystem read-only [ 169.591808][ T7970] (syz.4.1435,7970,1):ocfs2_lock_allocators:2704 ERROR: status = -5 [ 169.600167][ T8044] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 169.622155][ T7970] (syz.4.1435,7970,1):ocfs2_extend_allocation:591 ERROR: status = -5 [ 169.653390][ T8044] EXT4-fs (loop0): Remounting filesystem read-only [ 169.657288][ T7970] (syz.4.1435,7970,1):ocfs2_extend_no_holes:1033 ERROR: status = -5 [ 169.698262][ T7970] (syz.4.1435,7970,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 169.801361][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 170.753710][ T8100] IPVS: persistence engine module ip_vs_pe_ not found [ 170.810841][ T5279] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 171.048762][ T8089] loop0: detected capacity change from 0 to 131072 [ 171.124402][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'. [ 171.134842][ T5534] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.167413][ T8089] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 171.175739][ T8089] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.185561][ T8089] F2FS-fs (loop0): invalid crc value [ 171.197087][ T5279] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 171.229032][ T5279] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.243680][ T5279] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.262780][ T8089] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.272851][ T5279] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 171.299043][ T5279] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.329418][ T8089] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 171.333821][ T5279] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 171.336529][ T8089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 171.360499][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.392402][ T8125] loop1: detected capacity change from 0 to 128 [ 171.401745][ T5279] usb 5-1: config 0 descriptor?? [ 171.416988][ T5534] usb 3-1: Using ep0 maxpacket: 16 [ 171.462747][ T8125] FAT-fs (loop1): Directory bread(block 524322) failed [ 171.503226][ T8125] FAT-fs (loop1): Directory bread(block 524323) failed [ 171.520325][ T8125] FAT-fs (loop1): Directory bread(block 524324) failed [ 171.527702][ T8125] FAT-fs (loop1): Directory bread(block 524325) failed [ 171.540370][ T8125] FAT-fs (loop1): Directory bread(block 524326) failed [ 171.548658][ T8125] FAT-fs (loop1): Directory bread(block 524327) failed [ 171.561083][ T8125] FAT-fs (loop1): Directory bread(block 524328) failed [ 171.565121][ T5534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.568417][ T8125] FAT-fs (loop1): Directory bread(block 524329) failed [ 171.609360][ T5534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.643968][ T5534] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.667155][ T8125] FAT-fs (loop1): Directory bread(block 524322) failed [ 171.677544][ T5534] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.680240][ T8125] FAT-fs (loop1): Directory bread(block 524323) failed [ 171.694929][ T5534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.721450][ T5534] usb 3-1: config 0 descriptor?? [ 171.777222][ T8131] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1505'. [ 171.791504][ T8131] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 171.896561][ T5279] ryos 0003:1E7D:3138.0006: unknown main item tag 0x5 [ 171.913728][ T5279] ryos 0003:1E7D:3138.0006: item fetching failed at offset 2/5 [ 171.936925][ T5279] ryos 0003:1E7D:3138.0006: parse failed [ 171.964347][ T5279] ryos: probe of 0003:1E7D:3138.0006 failed with error -22 [ 172.124543][ T4234] usb 5-1: USB disconnect, device number 12 [ 172.200426][ T8148] loop0: detected capacity change from 0 to 256 [ 172.217251][ T5534] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 172.237976][ T5534] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 172.267750][ T8148] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.282719][ T8150] loop1: detected capacity change from 0 to 4096 [ 172.285404][ T8148] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 172.297843][ T5534] microsoft 0003:045E:07DA.0007: no inputs found [ 172.304221][ T5534] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 172.320207][ T8148] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 172.435125][ T5279] usb 3-1: USB disconnect, device number 7 [ 172.507130][ T8155] fido_id[8155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 172.630160][ T4186] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 172.664783][ T4186] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 172.816271][ T8169] loop0: detected capacity change from 0 to 256 [ 172.830358][ C1] sd 0:0:1:0: tag#488 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 172.840166][ C1] sd 0:0:1:0: tag#488 CDB: Read(6) 08 00 43 7a 00 00 [ 172.892426][ T8169] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 173.172837][ T8184] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1527'. [ 173.193447][ T8184] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1527'. [ 173.288337][ T8191] loop4: detected capacity change from 0 to 64 [ 173.451346][ T8197] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1533'. [ 173.999858][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1553'. [ 174.194883][ T5534] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.274356][ T8255] IPVS: sh: FWM 4 0x00000004 - no destination available [ 174.305755][ T8259] loop0: detected capacity change from 0 to 512 [ 174.354306][ T8259] EXT4-fs (loop0): Ignoring removed oldalloc option [ 174.405164][ T8259] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 174.453644][ T8259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 174.487097][ T8259] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.502237][ T8259] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1561: bad orphan inode 267 [ 174.514348][ T8259] EXT4-fs (loop0): Remounting filesystem read-only [ 174.527619][ T8259] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 174.548249][ T8259] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1561: dx entry: limit 0 != root limit 125 [ 174.576964][ T8259] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1561: Corrupt directory, running e2fsck is recommended [ 174.604968][ T5534] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 174.625254][ T5534] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 174.636804][ T5534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.703430][ T5534] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 174.996379][ T8288] loop0: detected capacity change from 0 to 256 [ 175.013386][ T8287] loop2: detected capacity change from 0 to 1024 [ 175.043965][ T8288] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.074800][ T8288] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 175.085875][ T8288] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 175.122841][ T8287] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 175.173949][ T8288] exFAT-fs (loop0): hint_cluster is invalid (17) [ 175.225876][ T8288] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 175.269226][ T8288] exFAT-fs (loop0): Filesystem has been set read-only [ 175.423397][ T8304] loop4: detected capacity change from 0 to 512 [ 175.495583][ T8304] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 175.516718][ T8304] EXT4-fs (loop4): inline encryption not supported [ 175.539825][ T8304] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 175.570310][ T8304] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 175.597679][ T8304] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 175.621595][ T8313] loop0: detected capacity change from 0 to 128 [ 175.631570][ T8304] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 175.643703][ T8304] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.657945][ T8304] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1583: bg 0: block 34: padding at end of block bitmap is not set [ 175.682853][ T8304] Quota error (device loop4): write_blk: dquota write failed [ 175.692841][ T8313] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.705129][ T8304] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 175.709791][ T8313] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.719741][ T8304] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1583: Failed to acquire dquot type 1 [ 175.780994][ T8304] EXT4-fs (loop4): 1 truncate cleaned up [ 175.792655][ T8304] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 175.925799][ T5292] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 175.928831][ T8320] loop0: detected capacity change from 0 to 764 [ 175.944833][ T5534] stv0680 2-1:4.0: Could not get descriptor 0200 [ 175.976396][ T8320] rock: directory entry would overflow storage [ 175.982629][ T8320] rock: sig=0x4654, size=5, remaining=4 [ 176.055525][ T8323] loop4: detected capacity change from 0 to 1024 [ 176.159384][ T5534] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 176.176803][ T5292] usb 3-1: Using ep0 maxpacket: 16 [ 176.179422][ T5534] stv0680 2-1:4.0: last error: 34, command = 0x4 [ 176.200944][ T5534] usb 2-1: USB disconnect, device number 13 [ 176.207110][ T25] audit: type=1804 audit(2000000589.591:26): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1590" name="/newroot/278/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 176.284377][ T25] audit: type=1800 audit(2000000589.601:27): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1590" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 176.325047][ T5292] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 176.353859][ T5292] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.383089][ T5292] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 176.400732][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.413253][ T5292] usb 3-1: config 0 descriptor?? [ 176.880490][ T8315] udc-core: couldn't find an available UDC or it's busy [ 176.899840][ T8315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 176.941764][ T5292] monterey 0003:0566:3004.0008: fixing up button/consumer in HID report descriptor [ 176.965844][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x2 [ 176.994916][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.002094][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.030746][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.041482][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.048959][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.057069][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.064287][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.082013][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x4 [ 177.100029][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.111925][ T8358] loop1: detected capacity change from 0 to 4096 [ 177.134129][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.144117][ T5292] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 177.157957][ T5292] monterey 0003:0566:3004.0008: item fetching failed at offset 39/40 [ 177.186481][ T5292] monterey: probe of 0003:0566:3004.0008 failed with error -22 [ 177.195974][ T8358] ntfs3: loop1: ino=3, Correct links count -> 2. [ 177.206510][ T5292] usb 3-1: USB disconnect, device number 8 [ 177.220614][ T8361] loop4: detected capacity change from 0 to 8192 [ 177.297091][ T8361] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 177.334359][ T8361] REISERFS (device loop4): using ordered data mode [ 177.355513][ T8361] reiserfs: using flush barriers [ 177.369326][ T8361] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 177.378417][ T8358] ntfs3: loop1: failed to convert "0080" to cp874 [ 177.388502][ T8361] REISERFS (device loop4): checking transaction log (loop4) [ 177.402201][ T8361] REISERFS (device loop4): Using r5 hash to sort names [ 177.457423][ T8361] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 177.483379][ T8358] ntfs3: loop1: failed to convert name for inode 1e. [ 177.535601][ T8361] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 177.926175][ T8381] comedi comedi0: Minor 3 specified more than once! [ 178.281239][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1627'. [ 178.555262][ T8422] netlink: 'syz.0.1636': attribute type 11 has an invalid length. [ 178.577751][ T8422] netlink: 'syz.0.1636': attribute type 11 has an invalid length. [ 178.604936][ T8422] netlink: 2704 bytes leftover after parsing attributes in process `syz.0.1636'. [ 178.834147][ T8442] loop1: detected capacity change from 0 to 256 [ 178.945381][ T8442] exfat: Deprecated parameter 'utf8' [ 178.950788][ T8442] exfat: Deprecated parameter 'namecase' [ 179.003539][ T8442] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 179.194894][ T4234] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 179.337390][ T8444] loop4: detected capacity change from 0 to 32768 [ 179.394167][ T8444] (syz.4.1647,8444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.413817][ T8444] (syz.4.1647,8444,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.454802][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 179.472034][ T8444] JBD2: Ignoring recovery information on journal [ 179.504931][ T8454] loop0: detected capacity change from 0 to 32768 [ 179.536476][ T8444] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 179.562796][ T8454] XFS (loop0): Mounting V5 Filesystem [ 179.575166][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.602623][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 179.622224][ T4234] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 179.631830][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.635774][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 179.666909][ T4234] usb 3-1: config 0 descriptor?? [ 179.679201][ T8454] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 179.705051][ T8454] XFS (loop0): Starting recovery (logdev: internal) [ 179.741895][ T8454] XFS (loop0): Ending recovery (logdev: internal) [ 179.749594][ T8454] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 179.765117][ T8454] XFS (loop0): Failed to initialize disk quotas. [ 179.881635][ T4185] XFS (loop0): Unmounting Filesystem [ 180.146684][ T4234] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 180.158971][ T4234] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 180.185022][ T4234] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 180.204798][ T4234] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x0 [ 180.222335][ T4234] saitek 0003:06A3:0CCB.0009: unknown main item tag 0x4 [ 180.249259][ T4234] saitek 0003:06A3:0CCB.0009: unknown global tag 0xd [ 180.274861][ T4234] saitek 0003:06A3:0CCB.0009: item 0 0 1 13 parsing failed [ 180.285345][ T4234] saitek 0003:06A3:0CCB.0009: parse failed [ 180.299768][ T4234] saitek: probe of 0003:06A3:0CCB.0009 failed with error -22 [ 180.322490][ T8494] device veth1_to_batadv entered promiscuous mode [ 180.374993][ T8448] loop2: detected capacity change from 0 to 512 [ 180.478697][ T8448] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 180.563858][ T8448] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 180.664774][ T8496] loop0: detected capacity change from 0 to 32768 [ 180.668275][ T8448] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.709858][ T4234] usb 3-1: USB disconnect, device number 9 [ 180.853304][ T8505] tipc: Started in network mode [ 180.860629][ T8505] tipc: Node identity ac14140f, cluster identity 4711 [ 180.871817][ T8505] tipc: New replicast peer: 255.255.255.255 [ 180.879726][ T8505] tipc: Enabled bearer , priority 10 [ 181.078842][ T8519] loop0: detected capacity change from 0 to 512 [ 181.111994][ T8519] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 181.157589][ T8524] loop1: detected capacity change from 0 to 256 [ 181.175168][ T8519] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000007,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 181.197219][ T8519] ext4 filesystem being mounted at /387/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.230224][ T8519] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1677: Allocating blocks 64-65 which overlap fs metadata [ 181.256951][ T8519] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.1677: Allocating blocks 64-65 which overlap fs metadata [ 181.298836][ T8518] EXT4-fs (loop0): pa ffff888024267460: logic 1, phys. 44, len 84 [ 181.307258][ T8518] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 63, pa_free 64 [ 181.329369][ T8519] syz.0.1677 (8519) used greatest stack depth: 19696 bytes left [ 181.482139][ T8530] loop1: detected capacity change from 0 to 2048 [ 181.519069][ T8530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.689227][ T8535] smpboot: CPU 1 is now offline [ 181.697094][ T8539] device batadv_slave_0 entered promiscuous mode [ 181.823716][ T8539] device batadv_slave_0 left promiscuous mode [ 181.997365][ T5279] tipc: Node number set to 2886997007 [ 182.347166][ T8571] loop4: detected capacity change from 0 to 512 [ 182.424415][ T8573] loop2: detected capacity change from 0 to 512 [ 182.432876][ T8571] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 182.478644][ T8573] EXT4-fs (loop2): Unrecognized mount option "obj_user=ext4" or missing value [ 182.492437][ T8571] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.514757][ T5279] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.590718][ T8571] [ 182.593091][ T8571] ====================================================== [ 182.600085][ T8571] WARNING: possible circular locking dependency detected [ 182.607083][ T8571] syzkaller #0 Not tainted [ 182.611469][ T8571] ------------------------------------------------------ [ 182.618457][ T8571] syz.4.1700/8571 is trying to acquire lock: [ 182.624404][ T8571] ffff88805e842ea8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 182.633250][ T8571] [ 182.633250][ T8571] but task is already holding lock: [ 182.640583][ T8571] ffff888024221668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 182.650040][ T8571] [ 182.650040][ T8571] which lock already depends on the new lock. [ 182.650040][ T8571] [ 182.660424][ T8571] [ 182.660424][ T8571] the existing dependency chain (in reverse order) is: [ 182.669420][ T8571] [ 182.669420][ T8571] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 182.677218][ T8571] down_write+0x38/0x60 [ 182.681875][ T8571] ext4_map_blocks+0x8c4/0x1a50 [ 182.687223][ T8571] ext4_getblk+0x176/0x670 [ 182.692142][ T8571] ext4_bread+0x26/0x180 [ 182.696882][ T8571] ext4_quota_write+0x237/0x580 [ 182.702241][ T8571] do_insert_tree+0x1193/0x19c0 [ 182.707596][ T8571] do_insert_tree+0x5c4/0x19c0 [ 182.712863][ T8571] do_insert_tree+0x5c4/0x19c0 [ 182.718128][ T8571] do_insert_tree+0x5c4/0x19c0 [ 182.723392][ T8571] qtree_write_dquot+0x354/0x4a0 [ 182.728829][ T8571] v2_write_dquot+0x108/0x190 [ 182.734004][ T8571] dquot_acquire+0x2d5/0x520 [ 182.739091][ T8571] ext4_acquire_dquot+0x2e3/0x4a0 [ 182.744627][ T8571] dqget+0x713/0xbb0 [ 182.749033][ T8571] __dquot_initialize+0x3a9/0xd00 [ 182.754552][ T8571] ext4_create+0x92/0x470 [ 182.759375][ T8571] path_openat+0x120a/0x2fb0 [ 182.764462][ T8571] do_filp_open+0x1df/0x400 [ 182.769465][ T8571] do_sys_openat2+0x14b/0x500 [ 182.774635][ T8571] __x64_sys_openat+0x135/0x160 [ 182.779980][ T8571] do_syscall_64+0x4c/0xa0 [ 182.784893][ T8571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.791287][ T8571] [ 182.791287][ T8571] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 182.799333][ T8571] down_read+0x44/0x2e0 [ 182.803984][ T8571] v2_read_dquot+0x4a/0x110 [ 182.808985][ T8571] dquot_acquire+0x152/0x520 [ 182.814066][ T8571] ext4_acquire_dquot+0x2e3/0x4a0 [ 182.819585][ T8571] dqget+0x713/0xbb0 [ 182.823999][ T8571] __dquot_initialize+0x3a9/0xd00 [ 182.829522][ T8571] ext4_create+0x92/0x470 [ 182.834349][ T8571] path_openat+0x120a/0x2fb0 [ 182.839435][ T8571] do_filp_open+0x1df/0x400 [ 182.844433][ T8571] do_sys_openat2+0x14b/0x500 [ 182.849606][ T8571] __x64_sys_openat+0x135/0x160 [ 182.854968][ T8571] do_syscall_64+0x4c/0xa0 [ 182.859901][ T8571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.866288][ T8571] [ 182.866288][ T8571] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 182.873899][ T8571] __lock_acquire+0x2c66/0x7b50 [ 182.879248][ T8571] lock_acquire+0x19e/0x400 [ 182.884261][ T8571] __mutex_lock_common+0x1e5/0x2400 [ 182.889958][ T8571] mutex_lock_nested+0x17/0x20 [ 182.895233][ T8571] dquot_commit+0x5a/0x410 [ 182.900144][ T8571] ext4_write_dquot+0x1f0/0x360 [ 182.905490][ T8571] mark_all_dquot_dirty+0x1e3/0x400 [ 182.911185][ T8571] __dquot_alloc_space+0x5cb/0xe10 [ 182.916789][ T8571] ext4_mb_new_blocks+0xf80/0x47c0 [ 182.922396][ T8571] ext4_ext_map_blocks+0x17d1/0x63d0 [ 182.928174][ T8571] ext4_map_blocks+0x97f/0x1a50 [ 182.933518][ T8571] ext4_getblk+0x176/0x670 [ 182.938425][ T8571] ext4_bread+0x26/0x180 [ 182.943161][ T8571] ext4_append+0x2bb/0x560 [ 182.948074][ T8571] ext4_init_new_dir+0x2a7/0x910 [ 182.953507][ T8571] ext4_mkdir+0x4c3/0xc90 [ 182.958332][ T8571] vfs_mkdir+0x386/0x570 [ 182.963085][ T8571] do_mkdirat+0x1dd/0x5c0 [ 182.967909][ T8571] __x64_sys_mkdirat+0x85/0x90 [ 182.973162][ T8571] do_syscall_64+0x4c/0xa0 [ 182.978075][ T8571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.984460][ T8571] [ 182.984460][ T8571] other info that might help us debug this: [ 182.984460][ T8571] [ 182.994661][ T8571] Chain exists of: [ 182.994661][ T8571] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 182.994661][ T8571] [ 183.008274][ T8571] Possible unsafe locking scenario: [ 183.008274][ T8571] [ 183.015711][ T8571] CPU0 CPU1 [ 183.021045][ T8571] ---- ---- [ 183.026383][ T8571] lock(&ei->i_data_sem/2); [ 183.030972][ T8571] lock(&s->s_dquot.dqio_sem); [ 183.038313][ T8571] lock(&ei->i_data_sem/2); [ 183.045411][ T8571] lock(&dquot->dq_lock); [ 183.049817][ T8571] [ 183.049817][ T8571] *** DEADLOCK *** [ 183.049817][ T8571] [ 183.057931][ T8571] 4 locks held by syz.4.1700/8571: [ 183.063010][ T8571] #0: ffff88801eb08460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 183.072120][ T8571] #1: ffff88805e953fc0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 183.082714][ T8571] #2: ffff888024221668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 183.092594][ T8571] #3: ffffffff8c4418d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 183.101605][ T8571] [ 183.101605][ T8571] stack backtrace: [ 183.107464][ T8571] CPU: 0 PID: 8571 Comm: syz.4.1700 Not tainted syzkaller #0 [ 183.114823][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 183.124860][ T8571] Call Trace: [ 183.128134][ T8571] [ 183.131045][ T8571] dump_stack_lvl+0x188/0x250 [ 183.135702][ T8571] ? load_image+0x410/0x410 [ 183.140179][ T8571] ? show_regs_print_info+0x20/0x20 [ 183.145353][ T8571] ? print_circular_bug+0x12b/0x1a0 [ 183.150524][ T8571] check_noncircular+0x296/0x330 [ 183.155434][ T8571] ? add_chain_block+0x9b0/0x9b0 [ 183.160349][ T8571] ? lockdep_lock+0xf1/0x1f0 [ 183.164936][ T8571] ? mark_lock+0x94/0x320 [ 183.169264][ T8571] ? _find_first_zero_bit+0xd1/0xf0 [ 183.174438][ T8571] __lock_acquire+0x2c66/0x7b50 [ 183.179360][ T8571] ? check_path+0x21/0x40 [ 183.183663][ T8571] ? verify_lock_unused+0x140/0x140 [ 183.188836][ T8571] ? lockdep_lock+0xf1/0x1f0 [ 183.193405][ T8571] ? lockdep_unlock+0x143/0x2e0 [ 183.198230][ T8571] ? lockdep_lock+0x1f0/0x1f0 [ 183.202900][ T8571] lock_acquire+0x19e/0x400 [ 183.207378][ T8571] ? dquot_commit+0x5a/0x410 [ 183.211963][ T8571] ? __might_sleep+0xf0/0xf0 [ 183.216527][ T8571] ? read_lock_is_recursive+0x10/0x10 [ 183.221873][ T8571] ? verify_lock_unused+0x140/0x140 [ 183.227135][ T8571] __mutex_lock_common+0x1e5/0x2400 [ 183.232308][ T8571] ? dquot_commit+0x5a/0x410 [ 183.236878][ T8571] ? dquot_commit+0x5a/0x410 [ 183.241439][ T8571] ? __might_sleep+0xf0/0xf0 [ 183.245999][ T8571] ? mutex_lock_io_nested+0x60/0x60 [ 183.251174][ T8571] mutex_lock_nested+0x17/0x20 [ 183.255929][ T8571] dquot_commit+0x5a/0x410 [ 183.260325][ T8571] ext4_write_dquot+0x1f0/0x360 [ 183.265155][ T8571] mark_all_dquot_dirty+0x1e3/0x400 [ 183.270343][ T8571] __dquot_alloc_space+0x5cb/0xe10 [ 183.275451][ T8571] ext4_mb_new_blocks+0xf80/0x47c0 [ 183.280542][ T8571] ? memset+0x1e/0x40 [ 183.284496][ T8571] ? ext4_mb_pa_callback+0xd0/0xd0 [ 183.289583][ T8571] ? ext4_inode_to_goal_block+0x2be/0x450 [ 183.295281][ T8571] ext4_ext_map_blocks+0x17d1/0x63d0 [ 183.300544][ T8571] ? ext4_ext_release+0x10/0x10 [ 183.305369][ T8571] ? rwsem_write_trylock+0x135/0x1c0 [ 183.310629][ T8571] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 183.316065][ T8571] ext4_map_blocks+0x97f/0x1a50 [ 183.320893][ T8571] ? ext4_issue_zeroout+0x250/0x250 [ 183.326068][ T8571] ext4_getblk+0x176/0x670 [ 183.330457][ T8571] ? ext4_get_block_unwritten+0x30/0x30 [ 183.335982][ T8571] ? __brelse+0x55/0x90 [ 183.340113][ T8571] ext4_bread+0x26/0x180 [ 183.344327][ T8571] ext4_append+0x2bb/0x560 [ 183.348720][ T8571] ? ext4_init_new_dir+0x910/0x910 [ 183.353801][ T8571] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 183.359491][ T8571] ext4_init_new_dir+0x2a7/0x910 [ 183.364402][ T8571] ext4_mkdir+0x4c3/0xc90 [ 183.368721][ T8571] ? ext4_symlink+0xcd0/0xcd0 [ 183.373382][ T8571] ? inode_permission+0xef/0x480 [ 183.378301][ T8571] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 183.383306][ T8571] ? security_inode_mkdir+0xb3/0x100 [ 183.388594][ T8571] vfs_mkdir+0x386/0x570 [ 183.393188][ T8571] do_mkdirat+0x1dd/0x5c0 [ 183.397496][ T8571] ? vfs_mkdir+0x570/0x570 [ 183.401889][ T8571] __x64_sys_mkdirat+0x85/0x90 [ 183.406628][ T8571] do_syscall_64+0x4c/0xa0 [ 183.411195][ T8571] ? clear_bhb_loop+0x30/0x80 [ 183.415861][ T8571] ? clear_bhb_loop+0x30/0x80 [ 183.420534][ T8571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 183.426422][ T8571] RIP: 0033:0x7f90dac5dd07 [ 183.430818][ T8571] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.450406][ T8571] RSP: 002b:00007f90d8eb6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 183.458796][ T8571] RAX: ffffffffffffffda RBX: 00007f90d8eb6ee0 RCX: 00007f90dac5dd07 [ 183.466752][ T8571] RDX: 00000000000001ff RSI: 0000200000000300 RDI: 00000000ffffff9c [ 183.474711][ T8571] RBP: 0000000000000000 R08: 0000200000000300 R09: 0000000000000000 [ 183.482667][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300 [ 183.490616][ T8571] R13: 00007f90d8eb6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 183.498568][ T8571] [ 183.624721][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 183.664082][ T8571] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #12: comm syz.4.1700: Attempting to read directory block (0) that is past i_size (3) [ 183.680951][ T8571] EXT4-fs (loop4): Remounting filesystem read-only [ 183.754857][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.766030][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 183.775909][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.788479][ T5279] usb 2-1: config 0 descriptor?? [ 183.793560][ T5280] Bluetooth: hci1: command 0x0406 tx timeout [ 183.800278][ T5280] Bluetooth: hci2: command 0x0406 tx timeout [ 183.825578][ T5279] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 184.484977][ T5279] gspca_vc032x: reg_r err -71 [ 184.491809][ T5279] vc032x: probe of 2-1:0.0 failed with error -71 [ 184.502486][ T5279] usb 2-1: USB disconnect, device number 14 [ 185.924795][ T5280] Bluetooth: hci3: command 0x0406 tx timeout [ 185.931666][ T5280] Bluetooth: hci0: command 0x0406 tx timeout [ 190.245076][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!