last executing test programs: 4.343133456s ago: executing program 2 (id=934): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='`#:\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.450324627s ago: executing program 4 (id=941): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201e10000000040050be01700000000000109022400010000000009040200010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) 2.10217111s ago: executing program 3 (id=952): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x103, 0x70bd2b, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.06549622s ago: executing program 0 (id=953): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.040343281s ago: executing program 2 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x1, 0x70bd26, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x25e5a, 0x16a41}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004080}, 0x200088c2) 1.842768566s ago: executing program 0 (id=955): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010000108"], 0x30}}, 0x40020) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 1.68909015s ago: executing program 2 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) 1.68871505s ago: executing program 3 (id=957): r0 = eventfd2(0x0, 0x0) io_uring_setup(0x3476, &(0x7f0000000340)={0x0, 0x94f4, 0x8, 0x1, 0xf1}) read(r0, &(0x7f0000000900)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 1.619213511s ago: executing program 0 (id=958): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000040), 0x0, 0x3fc, &(0x7f0000000280)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x20400, 0x1cb) fadvise64(r0, 0x6, 0xc, 0x4) 1.612132492s ago: executing program 2 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x600}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 1.519901164s ago: executing program 3 (id=960): r0 = socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e", 0x19}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3, 0x20000001, 0xd, 0x3}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 1.374634247s ago: executing program 0 (id=961): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 1.343061898s ago: executing program 1 (id=962): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c5602067fbc45ff000000000000000458000b480400945f64009400050028925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.321569298s ago: executing program 0 (id=963): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003340)={0x1c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.220121201s ago: executing program 4 (id=964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000100, 0x0, 0x100000000}]}) 1.160100652s ago: executing program 1 (id=965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) 1.049852845s ago: executing program 1 (id=966): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 1.046806705s ago: executing program 3 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0) 1.028017145s ago: executing program 0 (id=968): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x1d17000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy(0x3, &(0x7f0000000e80)=0x4000000001fb, 0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) 1.027502656s ago: executing program 4 (id=969): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') fcntl$notify(r1, 0x402, 0x8000002f) preadv2(r0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x9, 0x8856, 0xe) 945.602667ms ago: executing program 2 (id=970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe8800000000000000000000000001016401010000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffffac1414aa000004d53c"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x300, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 911.023578ms ago: executing program 4 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) close(0x3) 895.438729ms ago: executing program 1 (id=972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x1800, 0x6, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 841.61613ms ago: executing program 3 (id=973): r0 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x20901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xe000200d}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xa19, 0x0, 0x0) 781.083891ms ago: executing program 1 (id=974): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000000c0)={[{}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@test_dummy_encryption}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@bh}, {@data_journal}]}, 0x1, 0x45d, &(0x7f0000000740)="$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") r0 = open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) write$binfmt_format(r0, &(0x7f0000000140)='0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x6ab858183a7ef6ba) 780.571511ms ago: executing program 4 (id=975): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x1010000, &(0x7f0000001500)={[{@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlateno}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8no}]}, 0x3, 0x371, &(0x7f0000001600)="$eJzs3U9oI9UfAPBvOmnTLvx+7U0UhOhN0LLdm15skS4s9qIS/HMQg5tVSarQYrE9bFoPijcFj3rypqAHD+JRBEW8efDqCrIqHnRvCy4+SWbyp0na7S62Uvx8oMnre+/73ncyQzIdJq/PLUfz4nRcunbtaszOlqK8/MhyXC/FQmTRsxvjZibUAQCnw/WU4o+UG22bnRxSOoG0AIBj1P38fyEiqrGQ17z+1WH9k09/ADj1ir//5w7rc8B1gIhXjiUlAOCYjV3/v3df80z3p9z7tTx0VwAAcFo98fQzj66sRTxerc5GrL+5VduqxUOD9pVL8VK0ohFnYz5uROQnCp2HUvfx/IW11bPVarUdPy9ELSKmisBafqawknXjK7EU87FQxBdnGyml7Pyna6tL1a6I2G1354/10lZtOs4U8/9wJhqDE4/eIN2niAtrq+eqxQC19V58O2JvcKNCJ//FmI/vnu8Pk1LvDsa11ctLvaQH8Vu1SlzsvwoHXgEBAAAAAAAAAAAAAAAAAAAAAIDbsljtW+ivn5M6z/lKOYuLE9q76+Pk8cX6QHv5+kCpkiKl3197oPZWFvvWBxpdn2fLQoIAAAAAAAAAAAAAAAAAAADQt7k9E/VWq7Gxub3THC60Nza3pyKiU/PyNx9/ORfjfW5SKOdTVCL6U1SLaXea9ZT1OqcsYjw860zeq/nws37Gw30qMVdsxcQ0Kgc3tVr/u+en9wY1d2e9kf8a9Mli8gZmQ2k8PDLy+v/zNG/lheoXzg3XVMZnv5JSGqp5Yzj88rPjA0YponzrO26nORUH90mdwtdXX7yzUuyR+hcpd9/9809eefeDX5v1Vmfm6O7BmY3NG6lZL/U6H2H2YrjU3QWDY6MUeaE0fCSUDxtwb39NPfv+t6fueufbo70Iabjm1c7xPNInyzfnk9HwmbzQSXOkaW4QPl1sRKsxPeHgv1nhNvbpHe9//lFKP/5y5CkGpsbeNkr/1PsPAAAAAAAAAAAAAAAAAAAwMPRd8eJL1+28YfqwqAcfO6H0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBEDP7//1BhbzdGao5S+LM9IarS2NiMeLvxb28nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bX8HAAD//15fZ4E=") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 780.135502ms ago: executing program 2 (id=976): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x50800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 371.188461ms ago: executing program 3 (id=977): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 110.181588ms ago: executing program 4 (id=978): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=979): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0xfffffffffffffe0d, 0x800) kernel console output (not intermixed with test programs): [ 58.970359][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.978911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.987545][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.987911][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.004407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.005142][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.023819][ T4195] device veth1_macvtap entered promiscuous mode [ 59.042759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.056050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.064170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.080585][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.091658][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.102921][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.114407][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.124628][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.135837][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 59.142262][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 59.142447][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.148632][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 59.164523][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.164543][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.166148][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.175355][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 59.192559][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 59.223824][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.232457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.242379][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.253330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.262564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.272880][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.289542][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.302196][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.313452][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.324528][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.335102][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.345494][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.356083][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.367814][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.403966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.412935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.422312][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.424311][ T4195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.443647][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.445648][ T4195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.466580][ T4195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.481277][ T4195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.517130][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.518989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.577985][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.638329][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.742936][ T4214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.760204][ T4214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.772745][ T4277] Zero length message leads to an empty skb [ 59.791551][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.799725][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.834887][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.849930][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.886650][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.923979][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.956672][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.979524][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.997656][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.036794][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.295977][ T4301] ======================================================= [ 60.295977][ T4301] WARNING: The mand mount option has been deprecated and [ 60.295977][ T4301] and is ignored by this kernel. Remove the mand [ 60.295977][ T4301] option from the mount to silence this warning. [ 60.295977][ T4301] ======================================================= [ 60.338741][ T4303] loop3: detected capacity change from 0 to 512 [ 60.459696][ T4301] overlayfs: conflicting lowerdir path [ 60.529946][ T4303] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.18: inode #1: comm syz.3.18: iget: illegal inode # [ 60.663359][ T4296] loop1: detected capacity change from 0 to 32768 [ 60.668933][ T4303] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.18: error while reading EA inode 1 err=-117 [ 60.705269][ T4303] EXT4-fs (loop3): 1 orphan inode deleted [ 60.711037][ T4303] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,grpjquota=,debug_want_extra_isize=0x0000000000000006,noauto_da_alloc,grpjquota=,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 60.819249][ T4303] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.18: corrupted inode contents [ 60.827411][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 60.828941][ T4303] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #13: comm syz.3.18: mark_inode_dirty error [ 60.863105][ T4303] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.18: invalid indirect mapped block 234881024 (level 0) [ 60.865159][ T4303] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #13: comm syz.3.18: corrupted inode contents [ 60.866463][ T4303] EXT4-fs error (device loop3): ext4_truncate:4286: inode #13: comm syz.3.18: mark_inode_dirty error [ 60.866786][ T4303] EXT4-fs error (device loop3) in ext4_setattr:5645: Corrupt filesystem [ 60.915025][ T4296] XFS (loop1): Mounting V5 Filesystem [ 61.062523][ T4296] XFS (loop1): Ending clean mount [ 61.126625][ T4342] loop2: detected capacity change from 0 to 256 [ 61.214564][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 61.242428][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 61.249064][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 61.265680][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 61.296186][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 61.345610][ T4353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.472159][ T4186] XFS (loop1): Unmounting Filesystem [ 61.648582][ T4234] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.934287][ T4234] usb 5-1: Using ep0 maxpacket: 8 [ 61.993935][ T4367] netlink: 'syz.2.41': attribute type 12 has an invalid length. [ 62.003628][ T4369] loop1: detected capacity change from 0 to 256 [ 62.028348][ T4369] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.073770][ T4234] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.099105][ T4234] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.120511][ T4234] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 62.140843][ T4234] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 62.171382][ T4234] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.193546][ T4356] loop0: detected capacity change from 0 to 40427 [ 62.204591][ T4234] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.222210][ T4356] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 62.231586][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.240700][ T4356] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.294166][ T4356] F2FS-fs (loop0): invalid crc value [ 62.337081][ T4234] usbtmc: probe of 5-1:16.0 failed with error -22 [ 62.379616][ T4356] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.412065][ T4365] loop3: detected capacity change from 0 to 32768 [ 62.522036][ T4365] XFS (loop3): Mounting V5 Filesystem [ 62.542698][ T4356] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.553879][ T4356] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.596780][ T4374] attempt to access beyond end of device [ 62.596780][ T4374] loop0: rw=2049, want=45104, limit=40427 [ 62.727423][ T4372] loop2: detected capacity change from 0 to 40427 [ 62.748700][ T4372] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 62.753684][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.769111][ T4372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 62.785774][ T23] usb 5-1: USB disconnect, device number 2 [ 62.793214][ T4372] F2FS-fs (loop2): invalid crc value [ 62.840524][ T4365] XFS (loop3): Ending clean mount [ 62.846244][ T4372] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 62.978042][ T4187] XFS (loop3): Unmounting Filesystem [ 62.990302][ T4372] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 63.006840][ T4372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.163718][ T4234] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 63.183675][ T4234] usb 2-1: config 0 has no interface number 0 [ 63.374332][ T4234] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 63.394033][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.436831][ T4234] usb 2-1: Product: syz [ 63.451955][ T4234] usb 2-1: Manufacturer: syz [ 63.492726][ T4234] usb 2-1: SerialNumber: syz [ 63.519524][ T4234] usb 2-1: config 0 descriptor?? [ 63.528610][ T4408] loop4: detected capacity change from 0 to 1024 [ 63.673644][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.769599][ T4420] capability: warning: `syz.4.55' uses 32-bit capabilities (legacy support in use) [ 63.794103][ T4234] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 63.821061][ T4234] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 63.838121][ T4234] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 63.847686][ T4234] usb 2-1: media controller created [ 63.872072][ T4234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.002172][ T4430] loop4: detected capacity change from 0 to 256 [ 64.005887][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.039340][ T4430] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.105189][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.115751][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.213771][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.223502][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.231954][ T7] usb 1-1: SerialNumber: syz [ 64.263647][ T4233] usb 3-1: Using ep0 maxpacket: 16 [ 64.393889][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.405219][ T4233] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.419348][ T4233] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.429407][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.439364][ T4233] usb 3-1: config 0 descriptor?? [ 64.548128][ T7] usb 1-1: 0:2 : does not exist [ 64.554265][ T7] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 64.574242][ T7] usb 1-1: USB disconnect, device number 2 [ 64.838424][ T4451] loop4: detected capacity change from 0 to 512 [ 64.855747][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.864073][ T4453] program syz.3.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.962423][ T4451] EXT4-fs (loop4): Ignoring removed bh option [ 64.996817][ T4234] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 65.011109][ T4451] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 65.044589][ T4451] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.168719][ T4234] usb 2-1: USB disconnect, device number 2 [ 65.400323][ T4478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 65.426684][ T4487] process 'syz.4.82' launched '/dev/fd/3' with NULL argv: empty string added [ 65.610857][ T4499] loop0: detected capacity change from 0 to 512 [ 65.651309][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 66.145707][ T4523] loop1: detected capacity change from 0 to 4096 [ 66.219221][ T4523] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 66.441099][ T4531] loop0: detected capacity change from 0 to 256 [ 66.459328][ T4515] loop3: detected capacity change from 0 to 32768 [ 66.630335][ T4518] loop4: detected capacity change from 0 to 32768 [ 66.667572][ T4515] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 66.743675][ T4233] usbhid 3-1:0.0: can't add hid device: -71 [ 66.749922][ T4233] usbhid: probe of 3-1:0.0 failed with error -71 [ 66.765692][ T4233] usb 3-1: USB disconnect, device number 2 [ 66.843215][ T4518] [ 66.843215][ T4518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 66.843215][ T4518] [ 66.919213][ T4544] loop0: detected capacity change from 0 to 512 [ 66.969594][ T4544] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.983755][ T26] audit: type=1800 audit(1785205262.418:2): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 67.010289][ T4544] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.014246][ T4195] [ 67.014246][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 67.014246][ T4195] [ 67.028021][ T4544] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.045003][ T4544] EXT4-fs (loop0): 1 truncate cleaned up [ 67.049209][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 67.050746][ T4544] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 67.114465][ T4195] [ 67.114465][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 67.114465][ T4195] [ 67.330841][ T4549] program syz.4.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.496405][ T4553] loop3: detected capacity change from 0 to 8192 [ 67.555722][ T4564] netlink: 'syz.1.116': attribute type 2 has an invalid length. [ 67.590942][ T4553] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 67.606765][ T4553] REISERFS (device loop3): using ordered data mode [ 67.615917][ T4553] reiserfs: using flush barriers [ 67.623591][ T4553] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 67.642982][ T4553] REISERFS (device loop3): checking transaction log (loop3) [ 67.769756][ T4553] REISERFS (device loop3): Using tea hash to sort names [ 67.780605][ T4553] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 68.024129][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.050192][ T4581] loop1: detected capacity change from 0 to 512 [ 68.076016][ T4579] i2c i2c-0: new_device: Can't parse I2C address [ 68.090951][ T4583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.124'. [ 68.119508][ T4581] FAT-fs (loop1): Directory bread(block 199916) failed [ 68.142800][ T4581] FAT-fs (loop1): Directory bread(block 199917) failed [ 68.184005][ T4581] FAT-fs (loop1): Directory bread(block 199918) failed [ 68.190923][ T4581] FAT-fs (loop1): Directory bread(block 199919) failed [ 68.218856][ T4581] FAT-fs (loop1): Directory bread(block 199920) failed [ 68.233171][ T4581] FAT-fs (loop1): Directory bread(block 199921) failed [ 68.241117][ T4581] FAT-fs (loop1): Directory bread(block 199922) failed [ 68.263182][ T4581] FAT-fs (loop1): Directory bread(block 199923) failed [ 68.285723][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 68.404013][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 68.503811][ T4231] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 68.511454][ T4231] usb 5-1: can't read configurations, error -71 [ 68.661220][ T4585] loop2: detected capacity change from 0 to 32768 [ 68.680127][ T4605] loop1: detected capacity change from 0 to 64 [ 68.790078][ T4585] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 68.929187][ T4186] hfs: node 4:3 still has 1 user(s)! [ 68.950715][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 68.957084][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 68.959882][ T4613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 69.236000][ T4627] program syz.1.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.357660][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.368982][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.416063][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.427048][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.480362][ T4633] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.554395][ T4633] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.601387][ T4633] ldm_validate_partition_table(): Disk read failed. [ 69.618378][ T4633] Dev loop4: unable to read RDB block 0 [ 69.633684][ T4633] loop4: unable to read partition table [ 69.649460][ T4633] loop4: partition table beyond EOD, truncated [ 69.672743][ T4633] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 69.695839][ T4646] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 69.749533][ T4646] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.849913][ T4637] JBD2: Ignoring recovery information on journal [ 69.962872][ T4637] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 69.997546][ T4265] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.158889][ T4661] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 70.181044][ T4655] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 70.191616][ T4655] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.207878][ T4661] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 70.221426][ T4661] OCFS2: File system is now read-only. [ 70.230543][ T4655] F2FS-fs (loop4): invalid crc value [ 70.236131][ T4661] (syz.0.148,4661,1):ocfs2_find_entry_id:407 ERROR: status = -30 [ 70.253777][ T4265] usb 3-1: Using ep0 maxpacket: 32 [ 70.261343][ T4655] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.292559][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 70.355952][ T4655] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.383644][ T4655] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.407942][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.427123][ T4265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.448274][ T4265] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.486268][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.520935][ T4265] usb 3-1: config 0 descriptor?? [ 70.585156][ T4265] hub 3-1:0.0: USB hub found [ 70.722810][ T4675] set_capacity_and_notify: 5 callbacks suppressed [ 70.722825][ T4675] loop0: detected capacity change from 0 to 4096 [ 70.793832][ T4265] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 71.227633][ T4265] hid-generic 0003:046D:C31C.0001: item fetching failed at offset 0/1 [ 71.235564][ T4684] loop4: detected capacity change from 0 to 4096 [ 71.263978][ T4265] hid-generic: probe of 0003:046D:C31C.0001 failed with error -22 [ 71.310959][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.317611][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.353926][ T4684] NILFS (loop4): invalid segment: Checksum error in segment payload [ 71.394553][ T4684] NILFS (loop4): trying rollback from an earlier position [ 71.447924][ T4684] NILFS (loop4): recovery complete [ 71.484123][ T4686] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.497375][ T4677] loop3: detected capacity change from 0 to 32768 [ 71.578811][ T4265] usb 3-1: USB disconnect, device number 3 [ 71.672797][ T4677] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 71.806440][ T4677] (syz.3.163,4677,1):ocfs2_double_lock:1188 ERROR: status = -2 [ 71.883839][ T4677] (syz.3.163,4677,0):ocfs2_rename:1297 ERROR: status = -2 [ 71.894411][ T4677] (syz.3.163,4677,0):ocfs2_rename:1687 ERROR: status = -2 [ 72.026566][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 72.252013][ T4700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 72.298660][ T4700] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 72.542386][ T4690] loop1: detected capacity change from 0 to 32768 [ 72.713701][ T4231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.749807][ T4708] loop0: detected capacity change from 0 to 32768 [ 72.938944][ T4705] loop4: detected capacity change from 0 to 40427 [ 72.953782][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 73.004514][ T4705] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 73.011495][ T4705] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 73.061523][ T4705] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 73.073801][ T4231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.082418][ T4231] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 73.088041][ T4705] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 73.133837][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.145232][ T4705] F2FS-fs (loop4): invalid crc value [ 73.165458][ T4231] usb 4-1: config 0 descriptor?? [ 73.196577][ T4720] mmap: syz.1.179 (4720) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 73.253159][ T4705] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.369157][ T4728] loop2: detected capacity change from 0 to 128 [ 73.384788][ T4705] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 73.400509][ T4705] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.472025][ T4728] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 73.498566][ T4728] hpfs: filesystem error: improperly stopped [ 73.512204][ T4728] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 73.536725][ T4728] hpfs: You really don't want any checks? You are crazy... [ 73.560075][ T4728] hpfs: hpfs_map_sector(): read error [ 73.576617][ T4728] hpfs: code page support is disabled [ 73.593116][ T4728] hpfs: hpfs_map_4sectors(): unaligned read [ 73.621263][ T4728] hpfs: hpfs_map_4sectors(): unaligned read [ 73.630168][ T4195] attempt to access beyond end of device [ 73.630168][ T4195] loop4: rw=2049, want=45112, limit=40427 [ 73.647980][ T4728] hpfs: filesystem error: unable to find root dir [ 73.669486][ T4231] wacom 0003:056A:0057.0002: unknown main item tag 0x0 [ 73.690670][ T4737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.186'. [ 73.713600][ T4231] wacom 0003:056A:0057.0002: ignoring exceeding usage max [ 73.738356][ T4728] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 73.759170][ T4231] wacom 0003:056A:0057.0002: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.3-1/input0 [ 73.904798][ T4744] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.190'. [ 73.919147][ T4233] usb 4-1: USB disconnect, device number 2 [ 73.948092][ T4742] fido_id[4742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 74.255869][ T4754] loop2: detected capacity change from 0 to 256 [ 74.300218][ T4754] exfat: Deprecated parameter 'utf8' [ 74.346915][ T4754] exfat: Deprecated parameter 'utf8' [ 74.382972][ T4754] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 74.392670][ T4759] loop4: detected capacity change from 0 to 512 [ 74.472601][ T4759] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.529431][ T4741] loop0: detected capacity change from 0 to 40427 [ 74.599224][ T4741] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.617511][ T4741] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.665438][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 74.735863][ T4741] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.833765][ T4741] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.841175][ T4741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.893125][ T4779] rock: directory entry would overflow storage [ 74.908647][ T4779] rock: sig=0x4654, size=5, remaining=4 [ 75.069265][ T4233] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 75.103587][ T4232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.296120][ T26] audit: type=1800 audit(1785205270.738:3): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.210" name="file2" dev="loop1" ino=1048597 res=0 errno=0 [ 75.328633][ T4790] attempt to access beyond end of device [ 75.328633][ T4790] loop1: rw=0, want=57848, limit=8192 [ 75.359836][ T4790] Buffer I/O error on dev loop1, logical block 57847, async page read [ 75.376990][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 75.483938][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 75.513696][ T4232] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 75.522764][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.522860][ T4233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.571496][ T4232] usb 5-1: config 0 descriptor?? [ 75.625353][ T4232] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 75.774910][ T4233] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 75.781783][ T4817] set_capacity_and_notify: 3 callbacks suppressed [ 75.781797][ T4817] loop1: detected capacity change from 0 to 256 [ 75.794178][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.813216][ T4233] usb 4-1: Product: syz [ 75.818215][ T4233] usb 4-1: Manufacturer: syz [ 75.830966][ T4233] usb 4-1: SerialNumber: syz [ 75.850666][ T4233] usb 4-1: config 0 descriptor?? [ 75.896624][ T4821] loop0: detected capacity change from 0 to 2048 [ 75.900988][ T4233] hub 4-1:0.0: bad descriptor, ignoring hub [ 75.909037][ T4233] hub: probe of 4-1:0.0 failed with error -5 [ 75.936694][ T4233] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 75.981267][ T4821] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 76.016158][ T4821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.275825][ T4784] loop4: detected capacity change from 0 to 64 [ 76.332830][ T4233] usb 4-1: USB disconnect, device number 3 [ 76.393614][ T4232] gspca_nw80x: reg_w err -71 [ 76.398784][ T4232] nw80x: probe of 5-1:0.0 failed with error -71 [ 76.422544][ T4232] usb 5-1: USB disconnect, device number 5 [ 77.124034][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.477356][ T4909] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 77.490376][ T23] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 77.498965][ T4909] syzkaller0: linktype set to 776 [ 77.504818][ T23] usb 1-1: config 1 has no interface number 0 [ 77.513229][ T23] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 32 [ 77.535904][ T23] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 77.703783][ T23] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 77.712925][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.749134][ T23] usb 1-1: Product: syz [ 77.753337][ T23] usb 1-1: Manufacturer: syz [ 77.759342][ T23] usb 1-1: SerialNumber: syz [ 77.773296][ T4925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 77.804216][ T4863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.811821][ T4863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.960161][ T4937] sch_fq: defrate 512 ignored. [ 78.071721][ T4863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.095143][ T4863] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.105095][ T23] usb 1-1: No status endpoint found [ 78.382708][ T4960] syz.2.289 uses obsolete (PF_INET,SOCK_PACKET) [ 78.395920][ T4265] usb 1-1: USB disconnect, device number 3 [ 78.693049][ T4972] loop1: detected capacity change from 0 to 2048 [ 78.765341][ T4972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.794166][ T4944] loop3: detected capacity change from 0 to 40427 [ 78.813086][ T4944] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 78.832538][ T4944] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 78.847256][ T4974] loop2: detected capacity change from 0 to 4096 [ 78.863187][ T4944] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 78.918516][ T4944] F2FS-fs (loop3): invalid crc value [ 78.940626][ T4974] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 78.990794][ T4944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.170333][ T4944] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 79.183738][ T4944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.205863][ T4193] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 79.212786][ T4193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 79.282217][ T4193] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 79.290808][ T4989] loop0: detected capacity change from 0 to 128 [ 79.304758][ T4962] loop4: detected capacity change from 0 to 32768 [ 79.379948][ T4989] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 79.387191][ T4997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 79.421979][ T4962] XFS (loop4): Mounting V5 Filesystem [ 79.476194][ T5003] tipc: Started in network mode [ 79.484184][ T5003] tipc: Node identity ac14140f, cluster identity 4711 [ 79.491743][ T5003] tipc: New replicast peer: 255.255.255.255 [ 79.499132][ T5003] tipc: Enabled bearer , priority 10 [ 79.510667][ T4187] attempt to access beyond end of device [ 79.510667][ T4187] loop3: rw=2049, want=45112, limit=40427 [ 79.556233][ T26] audit: type=1800 audit(1785205274.998:4): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.302" name="file1" dev="loop0" ino=94 res=0 errno=0 [ 79.576415][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.676264][ T4962] XFS (loop4): Ending clean mount [ 79.763908][ T4962] XFS (loop4): Quotacheck needed: Please wait. [ 79.913177][ T4962] XFS (loop4): Quotacheck: Done. [ 79.997470][ T5008] loop1: detected capacity change from 0 to 32768 [ 80.111066][ T4195] XFS (loop4): Unmounting Filesystem [ 80.121008][ T5008] XFS (loop1): Mounting V5 Filesystem [ 80.187944][ T5020] loop0: detected capacity change from 0 to 4096 [ 80.387922][ T5008] XFS (loop1): Ending clean mount [ 80.412298][ T5008] XFS (loop1): Quotacheck needed: Please wait. [ 80.489339][ T5032] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.520181][ T5008] XFS (loop1): Quotacheck: Done. [ 80.523153][ T1323] tipc: Node number set to 2886997007 [ 80.651710][ T5027] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.306 (5027) [ 80.683258][ T4186] XFS (loop1): Unmounting Filesystem [ 80.878924][ T5027] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.897282][ T5027] BTRFS info (device loop3): using free space tree [ 80.960713][ T5027] BTRFS info (device loop3): has skinny extents [ 81.014495][ T5040] set_capacity_and_notify: 2 callbacks suppressed [ 81.014510][ T5040] loop2: detected capacity change from 0 to 512 [ 81.028622][ T5043] loop0: detected capacity change from 0 to 256 [ 81.252918][ T5062] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 81.272157][ T5062] pim6reg1: linktype set to 768 [ 81.317451][ T5069] tipc: Started in network mode [ 81.322539][ T5069] tipc: Node identity -ultiq, cluster identity 4711 [ 81.364997][ T5066] tap0: tun_chr_ioctl cmd 1074025677 [ 81.399592][ T5027] BTRFS info (device loop3): enabling ssd optimizations [ 81.421080][ T5066] tap0: linktype set to 805 [ 81.511149][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 81.537448][ T1106] cfg80211: failed to load regulatory.db [ 81.596184][ T5083] i2c i2c-0: delete_device: Can't parse I2C address [ 81.845766][ T5096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'. [ 82.155849][ T5105] tipc: Started in network mode [ 82.160761][ T5105] tipc: Node identity ac14140f, cluster identity 4711 [ 82.218286][ T5105] tipc: New replicast peer: 255.255.255.255 [ 82.373554][ T5105] tipc: Enabled bearer , priority 10 [ 82.431563][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 82.579052][ T5123] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 82.617254][ T5100] loop1: detected capacity change from 0 to 16384 [ 82.644865][ T5123] comedi comedi1: 8255: I/O port conflict (0xe,4) [ 82.692058][ T5123] comedi comedi1: 8255: I/O port conflict (0x840006,4) [ 82.717193][ T5123] comedi comedi1: 8255: I/O port conflict (0x7ffffffe,4) [ 82.738556][ T5124] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.759616][ T5123] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 82.783683][ T5123] comedi comedi1: 8255: I/O port conflict (0x8000006,4) [ 82.823824][ T5123] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 82.843613][ T5123] comedi comedi1: 8255: I/O port conflict (0xfffffffffeffffff,4) [ 82.858012][ T5126] loop3: detected capacity change from 0 to 128 [ 82.885912][ T5123] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 82.892381][ T5123] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 82.938920][ T5123] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 82.941248][ T5098] loop4: detected capacity change from 0 to 40427 [ 82.946665][ T5126] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.003744][ T5123] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 83.010231][ T5123] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 83.049373][ T5123] comedi comedi1: 8255: I/O port conflict (0x4007a,4) [ 83.056298][ T5098] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.066364][ T5098] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.094299][ T5123] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 83.112843][ T5118] loop0: detected capacity change from 0 to 32768 [ 83.124450][ T5126] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.143805][ T5123] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 83.150602][ T5098] F2FS-fs (loop4): invalid crc value [ 83.174196][ T5123] comedi comedi1: 8255: I/O port conflict (0xeb0cab5,4) [ 83.242179][ T5098] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.248968][ T5123] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 83.287056][ T4233] tipc: Node number set to 2886997007 [ 83.294643][ T5123] comedi comedi1: 8255: I/O port conflict (0x85,4) [ 83.304196][ T5123] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 83.332791][ T5123] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 83.373112][ T5123] comedi comedi1: 8255: I/O port conflict (0x800a6b5,4) [ 83.419426][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.457606][ T5098] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.468468][ T5098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.702152][ T4195] attempt to access beyond end of device [ 83.702152][ T4195] loop4: rw=2049, want=40968, limit=40427 [ 83.803608][ T1323] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.036715][ T5158] device netdevsim0 entered promiscuous mode [ 84.064325][ T5158] device batadv0 entered promiscuous mode [ 84.081810][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 84.254123][ T1323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.286322][ T1323] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 84.310184][ T1323] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 84.341109][ T1323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.408287][ T1323] usb 2-1: config 0 descriptor?? [ 84.460493][ T1323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 84.477951][ T1323] dvb-usb: bulk message failed: -22 (3/0) [ 84.516252][ T1323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 84.574397][ T1323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 84.591743][ T1323] usb 2-1: media controller created [ 84.623099][ T1323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.662188][ T5133] dvb-usb: bulk message failed: -22 (4/0) [ 84.681085][ T1323] dvb-usb: bulk message failed: -22 (6/0) [ 84.694790][ T1323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 84.789265][ T1323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 84.797074][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.816967][ T5192] loop2: detected capacity change from 0 to 2048 [ 84.824129][ T1323] dvb-usb: schedule remote query interval to 150 msecs. [ 84.831272][ T1323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 84.849306][ T1323] usb 2-1: USB disconnect, device number 3 [ 84.901715][ T1323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 84.945017][ T5194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.068705][ T5199] netlink: 'syz.2.373': attribute type 9 has an invalid length. [ 85.169287][ T5202] loop4: detected capacity change from 0 to 512 [ 85.205342][ T5202] EXT4-fs (loop4): Ignoring removed orlov option [ 85.230230][ T5202] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.280423][ T5202] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #16: comm syz.4.374: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 85.302467][ T5202] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.374: couldn't read orphan inode 16 (err -117) [ 85.317611][ T5202] EXT4-fs (loop4): 1 orphan inode deleted [ 85.325086][ T5202] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 85.388724][ T5210] loop1: detected capacity change from 0 to 8 [ 85.421619][ T5202] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1465: inode #12: block 7: comm syz.4.374: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 85.601618][ T5217] loop2: detected capacity change from 0 to 1024 [ 85.942524][ T5234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.997372][ T5242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.043545][ T5117] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.113783][ T4265] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.184954][ T5248] set_capacity_and_notify: 1 callbacks suppressed [ 86.184968][ T5248] loop3: detected capacity change from 0 to 8 [ 86.215066][ T5250] loop4: detected capacity change from 0 to 1024 [ 86.231756][ T5250] EXT4-fs (loop4): inline encryption not supported [ 86.253219][ T5250] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 86.303342][ T5250] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nodelalloc,inlinecrypt,nouid32,nomblk_io_submit,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000005,,errors=continue. Quota mode: none. [ 86.361409][ T5250] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.413746][ T4265] usb 2-1: Using ep0 maxpacket: 16 [ 86.414675][ T5117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.430058][ T5117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.439860][ T5117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.454279][ T5117] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.463415][ T5117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.490416][ T5117] usb 1-1: config 0 descriptor?? [ 86.553753][ T4265] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 86.571310][ T4265] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 86.582406][ T4265] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 86.592783][ T4265] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 86.607135][ T4265] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 86.619944][ T4265] usb 2-1: config 1 interface 0 has no altsetting 0 [ 86.626717][ T4265] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 86.636267][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.704975][ T4265] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 86.995496][ T5117] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description [ 87.010956][ T5117] plantronics 0003:047F:FFFF.0003: parse failed [ 87.028619][ T5117] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 87.088249][ T4265] ums-sddr09: probe of 2-1:1.0 failed with error -22 [ 87.109169][ T4265] usb 2-1: USB disconnect, device number 4 [ 87.218190][ T5276] loop2: detected capacity change from 0 to 512 [ 87.243073][ T5117] usb 1-1: USB disconnect, device number 4 [ 87.257527][ T5276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 87.278921][ T5276] System zones: 1-12 [ 87.286841][ T5276] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.404: Directory hole found for htree index block 0 [ 87.306843][ T5276] EXT4-fs (loop2): Remounting filesystem read-only [ 87.314171][ T5276] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 87.323017][ T5276] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.404: Directory hole found for htree index block 0 [ 87.336426][ T5276] EXT4-fs (loop2): Remounting filesystem read-only [ 87.343065][ T5276] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 87.361997][ T5276] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 87.913684][ T5104] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.988981][ T5308] loop2: detected capacity change from 0 to 256 [ 88.117216][ T5311] netlink: 'syz.4.419': attribute type 1 has an invalid length. [ 88.155785][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 88.273825][ T5104] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.313545][ T5104] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.368922][ T5317] loop2: detected capacity change from 0 to 4096 [ 88.416560][ T5317] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 88.437522][ T5104] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.451122][ T5104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.464037][ T5304] loop0: detected capacity change from 0 to 32768 [ 88.485103][ T5104] usb 2-1: SerialNumber: syz [ 88.498693][ T5317] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 88.509822][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 88.578066][ T5304] XFS (loop0): Mounting V5 Filesystem [ 88.605781][ T5317] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 88.637943][ T5317] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 88.665835][ T4233] Bluetooth: hci4: command 0x0411 tx timeout [ 88.685987][ T5317] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 88.697554][ T5317] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 88.720085][ T5317] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 88.729653][ T5317] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 88.753195][ T5317] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 88.762169][ T5317] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 88.765326][ T5304] XFS (loop0): Ending clean mount [ 88.791488][ T5317] ntfs: volume version 3.1. [ 88.798729][ T5104] usb 2-1: 0:2 : does not exist [ 88.814586][ T5104] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 88.871201][ T5104] usb 2-1: USB disconnect, device number 5 [ 88.895653][ T5304] XFS (loop0): Quotacheck needed: Please wait. [ 88.973611][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.980603][ T5304] XFS (loop0): Quotacheck: Done. [ 89.059569][ T5304] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 89.093919][ T4185] XFS (loop0): Unmounting Filesystem [ 89.105662][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.192188][ T5102] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.339295][ T5345] loop2: detected capacity change from 0 to 4096 [ 89.385568][ T5345] ntfs: volume version 3.1. [ 89.433646][ T5102] usb 4-1: Using ep0 maxpacket: 32 [ 89.563980][ T5102] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.590088][ T5102] usb 4-1: config 0 has no interface number 0 [ 89.603749][ T5102] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 89.681912][ T5102] usb 4-1: config 0 interface 1 has no altsetting 0 [ 89.732279][ T5104] hid-generic 0005:0B57:0000.0004: item fetching failed at offset 0/1 [ 89.751658][ T5361] loop0: detected capacity change from 0 to 64 [ 89.764347][ T5104] hid-generic: probe of 0005:0B57:0000.0004 failed with error -22 [ 89.773575][ T5347] loop1: detected capacity change from 0 to 32768 [ 89.884489][ T5102] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 89.900206][ T5102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.952905][ T5102] usb 4-1: Product: syz [ 89.969697][ T5102] usb 4-1: Manufacturer: syz [ 89.981790][ T5102] usb 4-1: SerialNumber: syz [ 89.995622][ T5102] usb 4-1: config 0 descriptor?? [ 90.285611][ T5102] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 90.347688][ T5102] cx231xx 4-1:0.1: Failed to read PCB config [ 90.375585][ T5102] cx231xx: probe of 4-1:0.1 failed with error -71 [ 90.400143][ T5102] usb 4-1: USB disconnect, device number 4 [ 90.563168][ T5383] loop2: detected capacity change from 0 to 512 [ 90.772801][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.941362][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.057813][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.117578][ T5403] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.462: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.142593][ T5403] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.462: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.175313][ T144] device netdevsim0 left promiscuous mode [ 91.191438][ T5408] FAT-fs (loop2): Directory bread(block 64) failed [ 91.203012][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.218466][ T5408] FAT-fs (loop2): Directory bread(block 65) failed [ 91.234931][ T5403] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.462: Failed to acquire dquot type 0 [ 91.245850][ T5408] FAT-fs (loop2): Directory bread(block 66) failed [ 91.261149][ T5408] FAT-fs (loop2): Directory bread(block 67) failed [ 91.267957][ T5408] FAT-fs (loop2): Directory bread(block 68) failed [ 91.285225][ T5408] FAT-fs (loop2): Directory bread(block 69) failed [ 91.285312][ T5403] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 91.299175][ T5408] FAT-fs (loop2): Directory bread(block 70) failed [ 91.308554][ T5405] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 91.329978][ T5408] FAT-fs (loop2): Directory bread(block 71) failed [ 91.343116][ T5403] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.462: mark_inode_dirty error [ 91.367663][ T5403] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 91.378872][ T5408] FAT-fs (loop2): Directory bread(block 72) failed [ 91.390525][ T5403] EXT4-fs (loop4): 1 orphan inode deleted [ 91.398782][ T5408] FAT-fs (loop2): Directory bread(block 73) failed [ 91.433185][ T5101] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 91.453601][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,noblock_validity,nolazytime,max_batch_time=0x0000000000000007,nodiscard,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 91.500787][ T5101] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 91.779282][ T5403] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.462: Invalid inode table block 1 in block_group 0 [ 91.796723][ T5403] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 91.822761][ T5403] EXT4-fs error (device loop4): ext4_setattr:5490: inode #2: comm syz.4.462: mark_inode_dirty error [ 91.861379][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 91.907165][ T144] tipc: Left network mode [ 92.045417][ T5101] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.114639][ T5101] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 92.173092][ T4195] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 92.233798][ T4195] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 92.293757][ T4234] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.299251][ T4195] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 92.314605][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.321703][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.371512][ T5414] device bridge_slave_0 entered promiscuous mode [ 92.383187][ T5457] set_capacity_and_notify: 3 callbacks suppressed [ 92.383200][ T5457] loop1: detected capacity change from 0 to 1024 [ 92.434883][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.463585][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.513162][ T5414] device bridge_slave_1 entered promiscuous mode [ 92.573377][ T5444] infiniband syz1: set active [ 92.611515][ T5444] infiniband syz1: added syz_tun [ 92.632448][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.660763][ T5461] loop4: detected capacity change from 0 to 4096 [ 92.686388][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.702930][ T5444] RDS/IB: syz1: added [ 92.713075][ T4234] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 92.715561][ T5444] smc: adding ib device syz1 with port count 1 [ 92.723637][ T4234] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 92.754400][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.772223][ T5461] NILFS (loop4): invalid segment: Checksum error in segment payload [ 92.787188][ T5444] smc: ib device syz1 port 1 has pnetid [ 92.802400][ T5461] NILFS (loop4): trying rollback from an earlier position [ 92.816745][ T4234] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 92.857847][ T5414] team0: Port device team_slave_0 added [ 92.892361][ T5461] NILFS (loop4): recovery complete [ 92.929701][ T5470] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.935982][ T5414] team0: Port device team_slave_1 added [ 93.085512][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.114677][ T5475] tmpfs: Bad value for 'size' [ 93.119508][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.155620][ T5475] overlayfs: unrecognized mount option "verity=on" or missing value [ 93.199662][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.272008][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.294967][ T1323] Bluetooth: hci0: command 0x0409 tx timeout [ 93.302534][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.351670][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.549205][ T5414] device hsr_slave_0 entered promiscuous mode [ 93.564598][ T5414] device hsr_slave_1 entered promiscuous mode [ 93.575144][ T5414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.607525][ T5414] Cannot create hsr debugfs directory [ 93.736436][ T1323] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 93.959566][ T5510] loop4: detected capacity change from 0 to 256 [ 93.984139][ T4234] stv0680 4-1:4.0: Could not get descriptor 0200 [ 94.020992][ T1323] usb 2-1: Using ep0 maxpacket: 8 [ 94.036649][ T5510] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 94.163702][ T5510] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 94.176435][ T1323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.202337][ T1323] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 94.211753][ T4234] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 94.226924][ T5510] exFAT-fs (loop4): Filesystem has been set read-only [ 94.238315][ T1323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.249572][ T4234] stv0680 4-1:4.0: last error: 34, command = 0x4 [ 94.261860][ T5510] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880734307e0 iblock : 8, err : -5) [ 94.278911][ T1323] usb 2-1: config 0 descriptor?? [ 94.284710][ T4234] usb 4-1: USB disconnect, device number 5 [ 94.324095][ T5510] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 94.357829][ T1323] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 94.410830][ T5509] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 94.893194][ T5414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.935488][ T5540] loop2: detected capacity change from 0 to 512 [ 94.950993][ T5414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.978700][ T5540] EXT4-fs (loop2): Ignoring removed orlov option [ 94.981914][ T5414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.000411][ T1323] gspca_vc032x: reg_r err -71 [ 95.005488][ T1323] vc032x: probe of 2-1:0.0 failed with error -71 [ 95.026684][ T5414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.039917][ T1323] usb 2-1: USB disconnect, device number 6 [ 95.124223][ T5540] EXT4-fs (loop2): 1 truncate cleaned up [ 95.203607][ T5540] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,orlov,noauto_da_alloc,init_itable,discard,journal_ioprio=0x0000000000000004,errors=remount-ro,nodiscard,. Quota mode: none. [ 95.297793][ T144] device batadv0 left promiscuous mode [ 95.321120][ T144] device hsr_slave_0 left promiscuous mode [ 95.331839][ T5540] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.496: invalid indirect mapped block 234881024 (level 0) [ 95.348022][ T144] device hsr_slave_1 left promiscuous mode [ 95.360366][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.363935][ T5540] EXT4-fs (loop2): Remounting filesystem read-only [ 95.372428][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.374911][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 95.397588][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.411797][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.434952][ T144] device bridge_slave_1 left promiscuous mode [ 95.443785][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.496853][ T144] device bridge_slave_0 left promiscuous mode [ 95.503287][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.532398][ T5545] loop3: detected capacity change from 0 to 32768 [ 95.567841][ T144] device veth1_macvtap left promiscuous mode [ 95.575207][ T144] device veth0_macvtap left promiscuous mode [ 95.594263][ T144] device veth1_vlan left promiscuous mode [ 95.611916][ T144] device veth0_vlan left promiscuous mode [ 95.670699][ T5545] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 95.725283][ T5545] JBD2: Ignoring recovery information on journal [ 95.859612][ T5545] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.965850][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 95.965866][ T26] audit: type=1800 audit(1785205291.408:5): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 96.039041][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 96.378150][ T144] team0 (unregistering): Port device team_slave_1 removed [ 96.430866][ T144] team0 (unregistering): Port device team_slave_0 removed [ 96.460549][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.488099][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.639573][ T144] bond0 (unregistering): Released all slaves [ 96.771929][ T5572] loop3: detected capacity change from 0 to 32768 [ 96.781312][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.824114][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.856259][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.895670][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.919450][ T5572] JBD2: Ignoring recovery information on journal [ 96.946601][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.980830][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.990375][ T5572] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 97.014919][ T5592] loop1: detected capacity change from 0 to 512 [ 97.048713][ T5572] JBD2: bad block at offset 32 [ 97.062477][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.069612][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.156555][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.177335][ T5572] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.184298][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.237252][ T5592] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 97.245730][ T5592] System zones: 0-2, 18-18, 34-35 [ 97.254761][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.279013][ T5592] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.344458][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.351548][ T5101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.359576][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.370653][ T5592] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.371406][ T5572] (syz.3.506,5572,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 97.405143][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.463903][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.473213][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.496320][ T1323] Bluetooth: hci0: command 0x040f tx timeout [ 97.533619][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.570533][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.619114][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.654894][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.685969][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.714812][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.738551][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.789966][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.820717][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.870717][ T4187] ocfs2: Unmounting device (7,3) on (node local) [ 97.939226][ T5635] loop4: detected capacity change from 0 to 256 [ 98.064207][ T5635] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 98.245156][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.304836][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.318316][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.432470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.447887][ T5651] loop4: detected capacity change from 0 to 164 [ 98.475168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.515637][ T5625] loop2: detected capacity change from 0 to 32768 [ 98.549432][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.585089][ T5653] loop3: detected capacity change from 0 to 2048 [ 98.602484][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.689272][ T5625] XFS (loop2): Mounting V5 Filesystem [ 98.719415][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.788308][ T5603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.797412][ T5414] device veth0_vlan entered promiscuous mode [ 98.822516][ T5653] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 98.903227][ T5414] device veth1_vlan entered promiscuous mode [ 98.911443][ T5625] XFS (loop2): Ending clean mount [ 98.923595][ T5653] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 99.010840][ T5653] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 99.059977][ T5653] UDF-fs: Scanning with blocksize 512 failed [ 99.080863][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.118121][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.130597][ T5653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.158468][ T5414] device veth0_macvtap entered promiscuous mode [ 99.169399][ T4193] XFS (loop2): Unmounting Filesystem [ 99.225519][ T5414] device veth1_macvtap entered promiscuous mode [ 99.367490][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.408524][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.439281][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.472026][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.498728][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.529345][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.539468][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 99.550570][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.591368][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.650316][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.691240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.730194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.790563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.839005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.885702][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.929463][ T5655] loop1: detected capacity change from 0 to 32768 [ 99.954715][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.009363][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.030299][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.058941][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.088898][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.113333][ T5414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.133516][ T5414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.162231][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.195937][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.254987][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.269174][ T5414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.354337][ T5655] XFS (loop1): Mounting V5 Filesystem [ 100.354751][ T5414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.397070][ T5414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.482224][ T5414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.503631][ T5655] XFS (loop1): Ending clean mount [ 100.542011][ T5655] XFS (loop1): Quotacheck needed: Please wait. [ 100.637199][ T5655] XFS (loop1): Quotacheck: Done. [ 100.867429][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.896080][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.921164][ T4186] XFS (loop1): Unmounting Filesystem [ 100.928671][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.974796][ T5747] loop3: detected capacity change from 0 to 256 [ 101.044539][ T4214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.052385][ T4214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.096909][ T5752] loop2: detected capacity change from 0 to 512 [ 101.154096][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.423747][ T5117] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 101.482553][ T5763] program syz.0.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.796824][ T5117] usb 4-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 101.840900][ T5117] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.877394][ T5117] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 101.879805][ T5785] loop0: detected capacity change from 0 to 256 [ 101.903313][ T5117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.913440][ T5117] usb 4-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 101.928309][ T5117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.954897][ T5117] usb 4-1: config 0 descriptor?? [ 102.093644][ T5102] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.348676][ T5102] usb 2-1: Using ep0 maxpacket: 32 [ 102.378060][ T5784] loop2: detected capacity change from 0 to 32768 [ 102.438100][ T5117] logitech-hidpp-device 0003:046D:C088.0005: hidraw0: USB HID v0.00 Device [HID 046d:c088] on usb-dummy_hcd.3-1/input0 [ 102.473852][ T5102] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 102.545668][ T5784] XFS (loop2): Mounting V5 Filesystem [ 102.606827][ T5795] loop0: detected capacity change from 0 to 32768 [ 102.652666][ T5117] usb 4-1: USB disconnect, device number 6 [ 102.658149][ T5784] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 102.682061][ T5814] netlink: 'syz.4.573': attribute type 4 has an invalid length. [ 102.690276][ T5102] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 102.707477][ T5102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.716551][ T5102] usb 2-1: Product: syz [ 102.721301][ T5102] usb 2-1: Manufacturer: syz [ 102.726584][ T5102] usb 2-1: SerialNumber: syz [ 102.734419][ T5818] rdma_rxe: rxe_register_device failed with error -23 [ 102.743075][ T5795] XFS (loop0): Mounting V5 Filesystem [ 102.770104][ T5784] XFS (loop2): Starting recovery (logdev: internal) [ 102.789738][ T5102] snd-ua101 2-1:1.1: sample format descriptor not found [ 102.803045][ T5102] snd-ua101 2-1:1.0: invalid num_altsetting [ 102.841093][ T5818] rdma_rxe: failed to add lo [ 102.850929][ T5795] XFS (loop0): Ending clean mount [ 102.856547][ T5784] XFS (loop2): Ending recovery (logdev: internal) [ 102.951660][ T5784] XFS (loop2): Quotacheck needed: Please wait. [ 103.016203][ T5784] XFS (loop2): Quotacheck: Done. [ 103.077343][ T7] usb 2-1: USB disconnect, device number 7 [ 103.099502][ T5414] XFS (loop0): Unmounting Filesystem [ 103.204679][ T5829] openvswitch: netlink: Actions may not be safe on all matching packets [ 103.250064][ T4193] XFS (loop2): Unmounting Filesystem [ 103.432625][ T5838] loop3: detected capacity change from 0 to 16 [ 103.532441][ T5838] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.601730][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 103.629686][ T5842] loop0: detected capacity change from 0 to 2048 [ 103.658508][ T4204] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 103.709386][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 103.795905][ T5849] tap0: tun_chr_ioctl cmd 1074025677 [ 103.801388][ T5849] tap0: linktype set to 804 [ 103.813596][ T5842] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 103.839683][ T5842] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 103.850111][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 103.850167][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 103.850187][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 103.850204][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 103.850222][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 103.886392][ T5842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.106925][ T5838] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 104.166528][ T5838] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 104.237129][ T26] audit: type=1800 audit(1785205299.678:6): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.582" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 104.339157][ T5845] ODEBUG: Out of memory. ODEBUG disabled [ 104.692860][ T5883] loop4: detected capacity change from 0 to 2048 [ 104.825260][ T5845] syz.3.582 (5845): drop_caches: 2 [ 104.862251][ T5893] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.903230][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 104.920410][ T5883] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 104.951564][ T5895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.605'. [ 104.978813][ T5899] loop0: detected capacity change from 0 to 512 [ 105.012123][ T5883] Remounting filesystem read-only [ 105.080653][ T5899] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.608: bg 0: block 104: invalid block bitmap [ 105.120493][ T5899] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 105.171158][ T5899] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.608: invalid indirect mapped block 1 (level 1) [ 105.200257][ T5899] EXT4-fs (loop0): 1 truncate cleaned up [ 105.210761][ T5915] loop1: detected capacity change from 0 to 128 [ 105.213643][ T5899] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.348896][ T5915] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 105.593979][ T5925] loop3: detected capacity change from 0 to 32768 [ 105.678492][ T5925] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.693005][ T5925] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.747330][ T5925] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 105.763120][ T5104] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 105.774101][ T5104] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 105.945168][ T5104] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 171ms [ 105.967201][ T5104] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.975204][ T5925] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.142403][ T5921] loop4: detected capacity change from 0 to 40427 [ 106.153961][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.293824][ T5921] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 106.301002][ T5921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 106.355179][ T5921] F2FS-fs (loop4): invalid crc value [ 106.408500][ T5921] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 106.431192][ T5949] loop1: detected capacity change from 0 to 256 [ 106.433527][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 106.593644][ T4234] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 106.602116][ T4234] usb 3-1: config 179 has no interface number 0 [ 106.627651][ T4234] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 106.708669][ T4234] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 106.747188][ T4234] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 106.783616][ T4234] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 106.802855][ T5921] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 106.824568][ T5921] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 106.826006][ T4234] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 106.893814][ T4234] usb 3-1: config 179 interface 65 has no altsetting 0 [ 106.900737][ T4234] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 106.929111][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.990428][ T4234] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 107.036276][ T4195] attempt to access beyond end of device [ 107.036276][ T4195] loop4: rw=2049, want=40976, limit=40427 [ 107.036521][ T5962] loop3: detected capacity change from 0 to 256 [ 107.081617][ T5965] loop0: detected capacity change from 0 to 512 [ 107.111661][ T5965] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 107.150932][ T5962] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 107.167554][ T5965] EXT4-fs (loop0): inline encryption not supported [ 107.235784][ T5965] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 107.263212][ T5965] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 107.317660][ T5965] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 107.356601][ T5965] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 107.361424][ T21] usb 3-1: USB disconnect, device number 4 [ 107.364776][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.380572][ T21] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 107.380630][ T4234] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.410017][ T5965] EXT4-fs (loop0): orphan cleanup on readonly fs [ 107.430221][ T5967] EXT4-fs (loop3): Ignoring removed nobh option [ 107.476329][ T5965] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.636: bg 0: block 34: padding at end of block bitmap is not set [ 107.490004][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 107.508573][ T5965] Quota error (device loop0): write_blk: dquota write failed [ 107.520520][ T5965] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 107.549428][ T5967] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 107.586228][ T5965] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.636: Failed to acquire dquot type 1 [ 107.617372][ T5967] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.676726][ T5965] EXT4-fs (loop0): 1 truncate cleaned up [ 107.688712][ T5967] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.637: corrupted inode contents [ 107.722925][ T5965] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 107.749055][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.757217][ T5967] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.637: mark_inode_dirty error [ 107.774694][ T5967] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.637: corrupted inode contents [ 107.814704][ T4234] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.823114][ T5967] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.637: mark_inode_dirty error [ 107.834204][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.873271][ T4234] usb 2-1: config 0 descriptor?? [ 107.949761][ T4234] cp210x 2-1:0.0: cp210x converter detected [ 108.067634][ T5990] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.140490][ T5990] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.267560][ T6007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 108.361245][ T6008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.363610][ T4234] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 108.480153][ T4234] usb 2-1: cp210x converter now attached to ttyUSB0 [ 108.632316][ T6031] set_capacity_and_notify: 4 callbacks suppressed [ 108.632332][ T6031] loop3: detected capacity change from 0 to 8 [ 108.726855][ T5104] usb 2-1: USB disconnect, device number 8 [ 108.752485][ T5104] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.779128][ T5104] cp210x 2-1:0.0: device disconnected [ 108.802209][ T6031] SQUASHFS error: Unable to read inode 0x11f [ 108.944262][ T6041] loop4: detected capacity change from 0 to 4096 [ 109.010812][ T6046] loop3: detected capacity change from 0 to 512 [ 109.062738][ T6033] loop2: detected capacity change from 0 to 40427 [ 109.079766][ T6050] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.111788][ T6046] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 109.127630][ T26] audit: type=1800 audit(1785205304.568:7): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.670" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 109.134750][ T6033] F2FS-fs (loop2): invalid crc value [ 109.181569][ T6046] EXT4-fs (loop3): invalid journal inode [ 109.192423][ T6046] EXT4-fs (loop3): can't get journal size [ 109.221542][ T6046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 109.238599][ T6046] System zones: 1-12, 13-13 [ 109.241051][ T6033] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.270999][ T6046] EXT4-fs (loop3): 1 truncate cleaned up [ 109.356061][ T6046] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback. [ 109.397591][ T26] audit: type=1800 audit(1785205304.838:8): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.672" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 109.418333][ T6065] loop4: detected capacity change from 0 to 16 [ 109.420249][ T6060] input: syz0 as /devices/virtual/input/input11 [ 109.434847][ C1] sd 0:0:1:0: tag#4072 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 109.444884][ C1] sd 0:0:1:0: tag#4072 CDB: Read(6) 08 00 43 7a 00 00 [ 109.474611][ T6033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.509909][ T6065] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.611187][ T4193] attempt to access beyond end of device [ 109.611187][ T4193] loop2: rw=2049, want=45104, limit=40427 [ 109.635357][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 109.731283][ T6076] loop3: detected capacity change from 0 to 256 [ 110.054201][ T6089] loop4: detected capacity change from 0 to 256 [ 110.097395][ T6089] exfat: Deprecated parameter 'utf8' [ 110.113435][ T6089] exfat: Deprecated parameter 'utf8' [ 110.241846][ T6089] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 110.710490][ T6104] loop3: detected capacity change from 0 to 2048 [ 110.717617][ T5104] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 110.767825][ T6104] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.769221][ T6086] loop2: detected capacity change from 0 to 32768 [ 110.834062][ T6108] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.883813][ T6086] XFS (loop2): Mounting V5 Filesystem [ 110.890778][ T6104] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 110.907430][ T6104] Remounting filesystem read-only [ 110.949371][ T6086] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 110.982323][ T6086] XFS (loop2): Starting recovery (logdev: internal) [ 111.052010][ T6086] XFS (loop2): Ending recovery (logdev: internal) [ 111.086959][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 111.116773][ T5104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 111.152252][ T6086] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 111.188968][ T6086] XFS (loop2): Unmount and run xfs_repair [ 111.235875][ T4193] XFS (loop2): Unmounting Filesystem [ 111.303753][ T5104] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 111.317427][ T5104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.333265][ T5104] usb 2-1: Product: syz [ 111.337738][ T5104] usb 2-1: Manufacturer: syz [ 111.342422][ T5104] usb 2-1: SerialNumber: syz [ 111.349297][ T5104] usb 2-1: config 0 descriptor?? [ 111.395845][ T5104] hub 2-1:0.0: bad descriptor, ignoring hub [ 111.401796][ T5104] hub: probe of 2-1:0.0 failed with error -5 [ 111.421996][ T5104] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 112.223089][ T6170] loop4: detected capacity change from 0 to 1024 [ 112.299477][ T6155] XFS (loop3): Mounting V5 Filesystem [ 112.342941][ T6155] XFS (loop3): Ending clean mount [ 112.401840][ T6182] sch_fq: defrate 512 ignored. [ 112.422846][ T4187] XFS (loop3): Unmounting Filesystem [ 113.112628][ T6215] SQUASHFS error: zlib decompression failed, data probably corrupt [ 113.137593][ T6215] SQUASHFS error: Failed to read block 0x9b: -5 [ 113.163912][ T6215] SQUASHFS error: Unable to read metadata cache entry [99] [ 113.171364][ T6215] SQUASHFS error: Unable to read inode 0x127 [ 113.413395][ T6224] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.746: inode #1: comm syz.1.746: iget: illegal inode # [ 113.432796][ T6224] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.746: error while reading EA inode 1 err=-117 [ 113.449482][ T6224] EXT4-fs (loop1): 1 orphan inode deleted [ 113.462652][ T6224] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,grpjquota=,debug_want_extra_isize=0x0000000000000006,noauto_da_alloc,grpjquota=,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 113.572410][ T6224] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.746: corrupted inode contents [ 113.585665][ T6224] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #13: comm syz.1.746: mark_inode_dirty error [ 113.597806][ T6224] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.746: invalid indirect mapped block 234881024 (level 0) [ 113.660083][ T6200] XFS (loop2): Mounting V5 Filesystem [ 113.763150][ T6224] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #13: comm syz.1.746: corrupted inode contents [ 113.796961][ T6200] XFS (loop2): Ending clean mount [ 113.808667][ T6200] XFS (loop2): Quotacheck needed: Please wait. [ 113.904195][ T6200] XFS (loop2): Quotacheck: Done. [ 113.943800][ T6224] EXT4-fs error (device loop1): ext4_truncate:4286: inode #13: comm syz.1.746: mark_inode_dirty error [ 113.980281][ T6224] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 114.144262][ T4193] XFS (loop2): Unmounting Filesystem [ 114.691975][ T6278] program syz.0.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.814040][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.130406][ T6296] set_capacity_and_notify: 4 callbacks suppressed [ 115.130447][ T6296] loop3: detected capacity change from 0 to 512 [ 115.175682][ T6298] 9p: Unknown uid 18446744073709551615 [ 115.311316][ T6301] loop0: detected capacity change from 0 to 2048 [ 115.361841][ T6296] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.379578][ T6296] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 115.397650][ T6301] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.397994][ T6296] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 115.423620][ T6296] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=errors=continue,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 115.450547][ T6301] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 115.453148][ T26] audit: type=1800 audit(1785205310.888:9): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.774" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 116.035196][ T6313] loop1: detected capacity change from 0 to 65536 [ 116.207135][ T6313] XFS (loop1): Mounting V5 Filesystem [ 116.276581][ T6309] loop4: detected capacity change from 0 to 40427 [ 116.291937][ T6313] XFS (loop1): Ending clean mount [ 116.322296][ T26] audit: type=1800 audit(1785205311.758:10): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.777" name="file1" dev="loop1" ino=70 res=0 errno=0 [ 116.328997][ T6337] program syz.0.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.361258][ T6309] F2FS-fs (loop4): invalid crc value [ 116.441405][ T6309] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.470016][ T4186] XFS (loop1): Unmounting Filesystem [ 116.582544][ T5104] usb 2-1: USB disconnect, device number 9 [ 116.606274][ T6309] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 116.618872][ T6309] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.755451][ T4195] attempt to access beyond end of device [ 116.755451][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 117.193726][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 117.203795][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 117.250463][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 117.283767][ T6351] loop3: detected capacity change from 0 to 32768 [ 117.297536][ T6357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.787'. [ 117.390165][ T6365] loop4: detected capacity change from 0 to 512 [ 117.406960][ T6351] XFS (loop3): Mounting V5 Filesystem [ 117.447709][ T6351] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 117.475124][ T6351] XFS (loop3): Starting recovery (logdev: internal) [ 117.597940][ T6351] XFS (loop3): Ending recovery (logdev: internal) [ 117.712205][ T6351] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 117.714234][ T6355] loop2: detected capacity change from 0 to 32768 [ 117.743032][ T6351] XFS (loop3): Unmount and run xfs_repair [ 117.784485][ T4187] XFS (loop3): Unmounting Filesystem [ 117.789013][ T6355] (syz.2.793,6355,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.815152][ T6355] (syz.2.793,6355,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 117.882059][ T6355] JBD2: Ignoring recovery information on journal [ 117.972730][ T6355] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 118.038269][ T6355] (syz.2.793,6355,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 118.162478][ T6381] loop4: detected capacity change from 0 to 2048 [ 118.236459][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 118.294920][ T6381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.381797][ T6381] overlayfs: upper fs needs to support d_type. [ 118.409088][ T6381] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.437185][ T6381] overlayfs: failed to set xattr on upper [ 118.453781][ T6381] overlayfs: conflicting lowerdir path [ 118.886008][ T6414] loop2: detected capacity change from 0 to 256 [ 118.939090][ T6414] exfat: Deprecated parameter 'namecase' [ 118.958713][ T6414] exfat: Deprecated parameter 'utf8' [ 118.967040][ T6414] exfat: Deprecated parameter 'namecase' [ 118.972978][ T6414] exfat: Deprecated parameter 'utf8' [ 118.974032][ T6400] loop4: detected capacity change from 0 to 32768 [ 119.006273][ T6414] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 119.052507][ T6400] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 119.078915][ T6400] JBD2: Ignoring recovery information on journal [ 119.093611][ T5102] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 119.128448][ T6400] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 119.255551][ T26] audit: type=1800 audit(1785205314.698:11): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.804" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 119.321857][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 119.493604][ T5102] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.497567][ T6426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.505027][ T5102] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.632351][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 119.633843][ T5102] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.678133][ T5102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.703149][ T5102] usb 4-1: config 0 descriptor?? [ 119.765769][ T5102] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.777975][ T6441] netlink: 'syz.4.822': attribute type 3 has an invalid length. [ 119.783054][ T5102] dvb-usb: bulk message failed: -22 (3/0) [ 119.808415][ T5102] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.813590][ T6441] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.822'. [ 119.865081][ T5102] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.898972][ T5102] usb 4-1: media controller created [ 119.930104][ T5102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.947722][ T6412] dvb-usb: bulk message failed: -22 (4/0) [ 119.977249][ T6448] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.003064][ T5102] dvb-usb: bulk message failed: -22 (6/0) [ 120.017940][ T5102] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 120.074759][ T5102] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 120.108008][ T5102] dvb-usb: schedule remote query interval to 150 msecs. [ 120.132492][ T5102] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 120.193382][ T5102] usb 4-1: USB disconnect, device number 7 [ 120.255450][ T5102] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.263630][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.317757][ T6436] set_capacity_and_notify: 2 callbacks suppressed [ 120.317771][ T6436] loop1: detected capacity change from 0 to 32768 [ 120.425646][ T6436] XFS (loop1): Mounting V5 Filesystem [ 120.491558][ T6436] XFS (loop1): Ending clean mount [ 120.502821][ T6445] loop2: detected capacity change from 0 to 32768 [ 120.552889][ T4186] XFS (loop1): Unmounting Filesystem [ 120.563354][ T6450] loop0: detected capacity change from 0 to 32768 [ 120.683675][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.696888][ T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.717983][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.739825][ T6473] loop3: detected capacity change from 0 to 1024 [ 120.747574][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.771640][ T6445] XFS (loop2): Mounting V5 Filesystem [ 120.780066][ T6450] XFS (loop0): Mounting V5 Filesystem [ 120.793897][ T6447] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.973345][ T6473] hfsplus: xattr exists yet [ 121.012013][ T6445] XFS (loop2): Ending clean mount [ 121.100997][ T7] usb 5-1: USB disconnect, device number 6 [ 121.123380][ T6450] XFS (loop0): Ending clean mount [ 121.154003][ T6450] XFS (loop0): Quotacheck needed: Please wait. [ 121.354897][ T6450] XFS (loop0): Quotacheck: Done. [ 121.434916][ T26] audit: type=1800 audit(1785205316.878:12): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.826" name="bus" dev="loop0" ino=9291 res=0 errno=0 [ 121.456626][ T4193] XFS (loop2): Unmounting Filesystem [ 121.573744][ T6491] loop3: detected capacity change from 0 to 4096 [ 121.653149][ T5414] XFS (loop0): Unmounting Filesystem [ 121.963219][ T4187] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 121.970355][ T6501] loop4: detected capacity change from 0 to 512 [ 121.975855][ T4187] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 122.044686][ T6501] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.104422][ T6501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 122.112600][ T6501] System zones: 1-12 [ 122.189888][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 122.262868][ T6501] EXT4-fs (loop4): 1 truncate cleaned up [ 122.269025][ T6501] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 122.416411][ T6513] loop3: detected capacity change from 0 to 256 [ 122.505160][ T6517] loop0: detected capacity change from 0 to 1024 [ 122.586155][ T6522] loop4: detected capacity change from 0 to 512 [ 122.855992][ T6537] loop4: detected capacity change from 0 to 2048 [ 122.943005][ T6537] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 122.958883][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.995192][ T6547] capability: warning: `syz.1.858' uses deprecated v2 capabilities in a way that may be insecure [ 123.011422][ T6547] overlayfs: upper fs does not support tmpfile. [ 123.062330][ T6537] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 123.160243][ T6537] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 123.213641][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 123.274332][ T6537] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.274332][ T6537] [ 123.291587][ T6560] exfat: Deprecated parameter 'namecase' [ 123.321558][ T6560] exfat: Deprecated parameter 'utf8' [ 123.329952][ T6537] EXT4-fs (loop4): Total free blocks count 0 [ 123.340595][ T6560] exfat: Deprecated parameter 'namecase' [ 123.345027][ T21] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 123.349435][ T6537] EXT4-fs (loop4): Free/Dirty block details [ 123.367152][ T6560] exfat: Deprecated parameter 'utf8' [ 123.379882][ T6537] EXT4-fs (loop4): free_blocks=2415919504 [ 123.395031][ T6537] EXT4-fs (loop4): dirty_blocks=32 [ 123.406983][ T6537] EXT4-fs (loop4): Block reservation details [ 123.407206][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.425192][ T6537] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 123.442573][ T6560] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 123.504106][ T6556] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 123.546104][ T21] pvrusb2: Hardware description: Terratec Grabster AV400 [ 123.553237][ T21] pvrusb2: ********** [ 123.560358][ T6556] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.560358][ T6556] [ 123.593900][ T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 123.655967][ T21] pvrusb2: Important functionality might not be entirely working. [ 123.666178][ T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 123.706379][ T21] pvrusb2: ********** [ 123.792254][ T2424] pvrusb2: Invalid write control endpoint [ 123.886692][ T2424] pvrusb2: Invalid write control endpoint [ 123.902172][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 123.947968][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 123.986091][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 124.016851][ T2424] pvrusb2: Device being rendered inoperable [ 124.037337][ T2424] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 124.049612][ T5102] usb 3-1: USB disconnect, device number 5 [ 124.053655][ T2424] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 124.091130][ T2424] pvrusb2: Attached sub-driver cx25840 [ 124.107739][ T2424] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 124.119331][ T2424] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 124.301629][ T6592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.332503][ T6592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.376977][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.377092][ T6596] exfat: Deprecated parameter 'utf8' [ 124.396537][ T6596] exfat: Deprecated parameter 'utf8' [ 124.412098][ T6596] exfat: Deprecated parameter 'utf8' [ 124.421264][ T6597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.442212][ T6596] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 124.450765][ T6601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.514045][ T6601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 124.538643][ T6601] System zones: 1-12 [ 124.612810][ T6601] EXT4-fs (loop1): 1 truncate cleaned up [ 124.666437][ T6601] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 124.723278][ T6606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.885'. [ 125.079772][ T6599] JBD2: Ignoring recovery information on journal [ 125.198739][ T6599] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 125.262177][ T6634] program syz.3.897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.332093][ T6641] bridge0: port 2(bridge_slave_1) entered listening state [ 125.371943][ T6640] set_capacity_and_notify: 6 callbacks suppressed [ 125.371959][ T6640] loop0: detected capacity change from 0 to 512 [ 125.408719][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.450794][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 125.480057][ T6640] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.531444][ T6646] loop3: detected capacity change from 0 to 4096 [ 125.547286][ T6640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 125.555527][ T6640] System zones: 1-12 [ 125.566339][ T6640] EXT4-fs (loop0): 1 truncate cleaned up [ 125.572052][ T6640] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 125.639169][ T6648] loop1: detected capacity change from 0 to 4096 [ 125.680635][ T6651] loop4: detected capacity change from 0 to 128 [ 125.692366][ T6652] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.742610][ T6648] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 126.126957][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.914'. [ 126.140501][ T6676] loop3: detected capacity change from 0 to 512 [ 126.249677][ T6678] loop2: detected capacity change from 0 to 4096 [ 126.281621][ T6676] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.318636][ T6676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 126.331878][ T6676] System zones: 1-12 [ 126.353869][ T6676] EXT4-fs (loop3): 1 truncate cleaned up [ 126.359523][ T6676] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 126.487473][ T6684] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.859948][ T6697] loop9: detected capacity change from 0 to 7 [ 126.922757][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.933821][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.981035][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.992011][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.001109][ T6672] loop4: detected capacity change from 0 to 32768 [ 127.085787][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.096800][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.108739][ T6707] loop2: detected capacity change from 0 to 1024 [ 127.142808][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.147917][ T6707] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 127.153799][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.180491][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.191464][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.204670][ T6672] XFS (loop4): Mounting V5 Filesystem [ 127.264086][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.275244][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.287294][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.298263][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.306212][ T6697] ldm_validate_partition_table(): Disk read failed. [ 127.329809][ T6707] EXT4-fs (loop2): orphan cleanup on readonly fs [ 127.364086][ C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.375022][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.383202][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.387368][ T6707] EXT4-fs error (device loop2): ext4_quota_enable:6444: comm syz.2.925: inode #17152: comm syz.2.925: iget: illegal inode # [ 127.394185][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.415778][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 127.426792][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.442924][ T6697] Dev loop9: unable to read RDB block 0 [ 127.453836][ T6707] EXT4-fs (loop2): Remounting filesystem read-only [ 127.460492][ T6707] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.925: Bad quota inode: 17152, type: 2 [ 127.484126][ T6697] loop9: unable to read partition table [ 127.489990][ T6697] loop9: partition table beyond EOD, truncated [ 127.501843][ T6672] XFS (loop4): Ending clean mount [ 127.510057][ T6672] XFS (loop4): Quotacheck needed: Please wait. [ 127.517154][ T6707] EXT4-fs (loop2): Remounting filesystem read-only [ 127.533746][ T6707] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix. [ 127.550344][ T6691] loop0: detected capacity change from 0 to 32768 [ 127.570488][ T6707] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 127.587694][ T6697] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰•¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ`ÉæÖã«…ˆ) failed (rc=-5) [ 127.589975][ T6707] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noauto_da_alloc,errors=remount-ro,jqfmt=vfsv0,discard,usrjquota=,grpquota,nojournal_checksum,. Quota mode: writeback. [ 127.625712][ T6672] XFS (loop4): Quotacheck: Done. [ 127.785645][ T26] audit: type=1800 audit(1785205323.218:13): pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.913" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 127.786989][ T6691] XFS (loop0): Mounting V5 Filesystem [ 127.913864][ T6722] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 127.953781][ T6715] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.927 (6715) [ 128.003762][ T6722] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.005470][ T4195] XFS (loop4): Unmounting Filesystem [ 128.067218][ T6691] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 128.115564][ T6715] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 128.179540][ T6715] BTRFS info (device loop1): using free space tree [ 128.188150][ T6715] BTRFS info (device loop1): has skinny extents [ 128.313709][ T6731] hfsplus: xattr exists yet [ 128.333841][ T6691] XFS (loop0): Starting recovery (logdev: internal) [ 128.465516][ T6691] XFS (loop0): Ending recovery (logdev: internal) [ 128.677999][ T6715] BTRFS info (device loop1): enabling ssd optimizations [ 128.732586][ T6691] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 128.827559][ T6691] XFS (loop0): Unmount and run xfs_repair [ 128.850837][ T5414] XFS (loop0): Unmounting Filesystem [ 128.937812][ T4233] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.160521][ T4204] block nbd0: Receive control failed (result -32) [ 129.349325][ T6747] XFS (loop3): Mounting V5 Filesystem [ 129.388869][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.410140][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.440517][ T4233] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 129.461856][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.487268][ T4233] usb 3-1: config 0 descriptor?? [ 129.537077][ T6747] XFS (loop3): Ending clean mount [ 129.605691][ T6747] XFS (loop3): Quotacheck needed: Please wait. [ 129.691556][ T6747] XFS (loop3): Quotacheck: Done. [ 129.765721][ T4187] XFS (loop3): Unmounting Filesystem [ 129.853548][ T6802] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 129.874553][ T6770] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.974560][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 129.982439][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 129.999773][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.014001][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.014714][ T6802] sysv_free_block: trying to free block not in datazone [ 130.022039][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.022097][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.022120][ T4233] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 130.057853][ T4233] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 130.080336][ T4233] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 130.158643][ T5414] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 130.213606][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 130.321707][ T6770] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 130.341352][ T6770] usb 5-1: config 0 has no interface number 0 [ 130.347582][ T6770] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.358997][ T6770] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.369701][ T6770] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 130.393705][ T6806] XFS (loop1): Mounting V5 Filesystem [ 130.415742][ T6770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.421513][ T21] usb 3-1: USB disconnect, device number 6 [ 130.460890][ T6770] usb 5-1: config 0 descriptor?? [ 130.505971][ T6806] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 130.541698][ T6806] XFS (loop1): Starting recovery (logdev: internal) [ 130.590086][ T6806] XFS (loop1): Ending recovery (logdev: internal) [ 130.607668][ T6826] set_capacity_and_notify: 7 callbacks suppressed [ 130.607683][ T6826] loop3: detected capacity change from 0 to 2048 [ 130.735535][ T6832] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.752898][ T6806] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8 [ 130.783415][ T6806] XFS (loop1): Unmount and run xfs_repair [ 130.852378][ T4186] XFS (loop1): Unmounting Filesystem [ 130.972594][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 130.989345][ T6839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.997477][ T6839] IPv6: NLM_F_CREATE should be set when creating new route [ 131.004812][ T6839] IPv6: NLM_F_CREATE should be set when creating new route [ 131.010627][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 131.012034][ T6839] IPv6: NLM_F_CREATE should be set when creating new route [ 131.038457][ T6841] bridge0: port 2(bridge_slave_1) entered listening state [ 131.044636][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 131.052490][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 131.060014][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 131.067310][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 131.074393][ T6770] asus 0003:0B05:17E0.0007: unknown main item tag 0x0 [ 131.096506][ T6770] asus 0003:0B05:17E0.0007: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.4-1/input2 [ 131.124304][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.252216][ T5102] usb 5-1: USB disconnect, device number 7 [ 131.342219][ T6849] fido_id[6849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 131.395849][ T6856] loop0: detected capacity change from 0 to 136 [ 131.444779][ T6861] rdma_rxe: ignoring netdev event = 30 for syz_tun [ 131.466658][ T6861] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 131.513413][ T6861] infiniband syz1: set active [ 131.555247][ T6861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.604297][ T6861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.766990][ T6863] rdma_rxe: ignoring netdev event = 30 for syz_tun [ 131.794127][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 131.801697][ T6863] infiniband syz1: set active [ 131.833705][ T6863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.878930][ T6863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.037726][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 132.261787][ T6908] loop4: detected capacity change from 0 to 256 [ 132.287830][ T6912] loop2: detected capacity change from 0 to 512 [ 132.295232][ T6911] loop1: detected capacity change from 0 to 512 [ 132.340997][ T6912] EXT4-fs (loop2): Ignoring removed nobh option [ 132.378700][ T6911] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.387040][ T6908] FAT-fs (loop4): Directory bread(block 64) failed [ 132.426081][ T6911] EXT4-fs (loop1): Ignoring removed bh option [ 132.442324][ T6912] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 132.452156][ T6908] FAT-fs (loop4): Directory bread(block 65) failed [ 132.468973][ T6908] FAT-fs (loop4): Directory bread(block 66) failed [ 132.477049][ T6908] FAT-fs (loop4): Directory bread(block 67) failed [ 132.487915][ T6911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.489058][ T6908] FAT-fs (loop4): Directory bread(block 68) failed [ 132.513324][ T6908] FAT-fs (loop4): Directory bread(block 69) failed [ 132.520096][ T6908] FAT-fs (loop4): Directory bread(block 70) failed [ 132.527087][ T6908] FAT-fs (loop4): Directory bread(block 71) failed [ 132.533747][ T6908] FAT-fs (loop4): Directory bread(block 72) failed [ 132.540419][ T6908] FAT-fs (loop4): Directory bread(block 73) failed [ 132.614125][ T6912] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.643779][ T6911] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.974: inode has both inline data and extents flags [ 132.743710][ T6911] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.974: couldn't read orphan inode 15 (err -117) [ 132.746883][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761938][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.777952][ T6912] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.976: corrupted inode contents [ 132.794173][ T6911] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none. [ 132.862391][ T6912] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #2: comm syz.2.976: mark_inode_dirty error [ 132.908389][ T26] audit: type=1800 audit(1785205328.348:14): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.974" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 132.942694][ T6912] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.976: corrupted inode contents [ 132.959199][ T26] audit: type=1804 audit(1785205328.348:15): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.974" name="/newroot/203/bus/file2" dev="loop1" ino=16 res=1 errno=0 [ 132.996430][ T6912] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.976: mark_inode_dirty error [ 133.085051][ T6912] [ 133.087412][ T6912] ====================================================== [ 133.094426][ T6912] WARNING: possible circular locking dependency detected [ 133.101455][ T6912] syzkaller #0 Not tainted [ 133.105905][ T6912] ------------------------------------------------------ [ 133.112923][ T6912] syz.2.976/6912 is trying to acquire lock: [ 133.118945][ T6912] ffff88806024a428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 133.127927][ T6912] [ 133.127927][ T6912] but task is already holding lock: [ 133.135314][ T6912] ffff88807357e628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 133.144823][ T6912] [ 133.144823][ T6912] which lock already depends on the new lock. [ 133.144823][ T6912] [ 133.155349][ T6912] [ 133.155349][ T6912] the existing dependency chain (in reverse order) is: [ 133.164456][ T6912] [ 133.164456][ T6912] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 133.172290][ T6912] down_write+0x38/0x60 [ 133.176980][ T6912] ext4_map_blocks+0x8c4/0x1a50 [ 133.182370][ T6912] ext4_getblk+0x176/0x670 [ 133.187314][ T6912] ext4_bread+0x26/0x180 [ 133.192104][ T6912] ext4_quota_write+0x237/0x580 [ 133.197500][ T6912] do_insert_tree+0x1193/0x19c0 [ 133.202890][ T6912] do_insert_tree+0x5c4/0x19c0 [ 133.208183][ T6912] do_insert_tree+0x5c4/0x19c0 [ 133.213474][ T6912] do_insert_tree+0x5c4/0x19c0 [ 133.218771][ T6912] qtree_write_dquot+0x354/0x4a0 [ 133.224242][ T6912] v2_write_dquot+0x108/0x190 [ 133.229457][ T6912] dquot_acquire+0x2d5/0x520 [ 133.234579][ T6912] ext4_acquire_dquot+0x2e3/0x4a0 [ 133.240143][ T6912] dqget+0x713/0xbb0 [ 133.244572][ T6912] __dquot_initialize+0x3a9/0xd00 [ 133.250143][ T6912] ext4_process_orphan+0x4c/0x2e0 [ 133.255693][ T6912] ext4_orphan_cleanup+0xad8/0x1320 [ 133.261419][ T6912] ext4_fill_super+0x8c65/0x93f0 [ 133.266882][ T6912] mount_bdev+0x28a/0x3c0 [ 133.271742][ T6912] legacy_get_tree+0xe6/0x180 [ 133.276952][ T6912] vfs_get_tree+0x88/0x270 [ 133.281896][ T6912] do_new_mount+0x247/0xa40 [ 133.286924][ T6912] __se_sys_mount+0x2e3/0x3d0 [ 133.292187][ T6912] do_syscall_64+0x4c/0xa0 [ 133.297161][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.303592][ T6912] [ 133.303592][ T6912] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 133.311689][ T6912] down_read+0x44/0x2e0 [ 133.316382][ T6912] v2_read_dquot+0x4a/0x110 [ 133.321430][ T6912] dquot_acquire+0x152/0x520 [ 133.326556][ T6912] ext4_acquire_dquot+0x2e3/0x4a0 [ 133.332126][ T6912] dqget+0x713/0xbb0 [ 133.336568][ T6912] __dquot_initialize+0x3a9/0xd00 [ 133.342320][ T6912] ext4_process_orphan+0x4c/0x2e0 [ 133.347881][ T6912] ext4_orphan_cleanup+0xad8/0x1320 [ 133.353624][ T6912] ext4_fill_super+0x8c65/0x93f0 [ 133.359100][ T6912] mount_bdev+0x28a/0x3c0 [ 133.363961][ T6912] legacy_get_tree+0xe6/0x180 [ 133.369163][ T6912] vfs_get_tree+0x88/0x270 [ 133.374196][ T6912] do_new_mount+0x247/0xa40 [ 133.379232][ T6912] __se_sys_mount+0x2e3/0x3d0 [ 133.384437][ T6912] do_syscall_64+0x4c/0xa0 [ 133.389385][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.395810][ T6912] [ 133.395810][ T6912] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 133.403464][ T6912] __lock_acquire+0x2c66/0x7b50 [ 133.408848][ T6912] lock_acquire+0x19e/0x400 [ 133.413889][ T6912] __mutex_lock_common+0x1e5/0x2400 [ 133.419625][ T6912] mutex_lock_nested+0x17/0x20 [ 133.424922][ T6912] dquot_commit+0x5a/0x410 [ 133.429862][ T6912] ext4_write_dquot+0x1f0/0x360 [ 133.435232][ T6912] mark_all_dquot_dirty+0xf9/0x400 [ 133.440865][ T6912] __dquot_alloc_space+0x5cb/0xe10 [ 133.446492][ T6912] ext4_mb_new_blocks+0xf80/0x47c0 [ 133.452119][ T6912] ext4_ext_map_blocks+0x17d1/0x63d0 [ 133.457920][ T6912] ext4_map_blocks+0x97f/0x1a50 [ 133.463275][ T6912] ext4_getblk+0x176/0x670 [ 133.468193][ T6912] ext4_bread+0x26/0x180 [ 133.472936][ T6912] ext4_append+0x2bb/0x560 [ 133.477852][ T6912] ext4_init_new_dir+0x2a7/0x910 [ 133.483305][ T6912] ext4_mkdir+0x4c3/0xc90 [ 133.488137][ T6912] vfs_mkdir+0x386/0x570 [ 133.492882][ T6912] do_mkdirat+0x1dd/0x5c0 [ 133.497713][ T6912] __x64_sys_mkdirat+0x85/0x90 [ 133.502978][ T6912] do_syscall_64+0x4c/0xa0 [ 133.507899][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.514447][ T6912] [ 133.514447][ T6912] other info that might help us debug this: [ 133.514447][ T6912] [ 133.524665][ T6912] Chain exists of: [ 133.524665][ T6912] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 133.524665][ T6912] [ 133.538293][ T6912] Possible unsafe locking scenario: [ 133.538293][ T6912] [ 133.545743][ T6912] CPU0 CPU1 [ 133.551085][ T6912] ---- ---- [ 133.556430][ T6912] lock(&ei->i_data_sem/2); [ 133.561006][ T6912] lock(&s->s_dquot.dqio_sem); [ 133.568527][ T6912] lock(&ei->i_data_sem/2); [ 133.575620][ T6912] lock(&dquot->dq_lock); [ 133.580033][ T6912] [ 133.580033][ T6912] *** DEADLOCK *** [ 133.580033][ T6912] [ 133.588238][ T6912] 4 locks held by syz.2.976/6912: [ 133.593237][ T6912] #0: ffff88807d20c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 133.602358][ T6912] #1: ffff88806013abd0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 133.612953][ T6912] #2: ffff88807357e628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 133.622864][ T6912] #3: ffffffff8c4418d8 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 133.631911][ T6912] [ 133.631911][ T6912] stack backtrace: [ 133.637794][ T6912] CPU: 1 PID: 6912 Comm: syz.2.976 Not tainted syzkaller #0 [ 133.645061][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.655108][ T6912] Call Trace: [ 133.658375][ T6912] [ 133.661290][ T6912] dump_stack_lvl+0x188/0x250 [ 133.666025][ T6912] ? load_image+0x410/0x410 [ 133.670521][ T6912] ? show_regs_print_info+0x20/0x20 [ 133.675706][ T6912] ? print_circular_bug+0x12b/0x1a0 [ 133.680897][ T6912] check_noncircular+0x296/0x330 [ 133.685820][ T6912] ? add_chain_block+0x9b0/0x9b0 [ 133.690916][ T6912] ? lockdep_lock+0xf1/0x1f0 [ 133.695505][ T6912] ? mark_lock+0x94/0x320 [ 133.699818][ T6912] ? _find_first_zero_bit+0xd1/0xf0 [ 133.705006][ T6912] __lock_acquire+0x2c66/0x7b50 [ 133.709853][ T6912] ? check_path+0x21/0x40 [ 133.714166][ T6912] ? verify_lock_unused+0x140/0x140 [ 133.719351][ T6912] ? lockdep_lock+0xf1/0x1f0 [ 133.723928][ T6912] ? lockdep_unlock+0x143/0x2e0 [ 133.728763][ T6912] ? lockdep_lock+0x1f0/0x1f0 [ 133.733428][ T6912] lock_acquire+0x19e/0x400 [ 133.737917][ T6912] ? dquot_commit+0x5a/0x410 [ 133.742504][ T6912] ? __might_sleep+0xf0/0xf0 [ 133.747078][ T6912] ? read_lock_is_recursive+0x10/0x10 [ 133.752435][ T6912] ? verify_lock_unused+0x140/0x140 [ 133.757618][ T6912] __mutex_lock_common+0x1e5/0x2400 [ 133.762801][ T6912] ? dquot_commit+0x5a/0x410 [ 133.767378][ T6912] ? dquot_commit+0x5a/0x410 [ 133.771954][ T6912] ? __might_sleep+0xf0/0xf0 [ 133.776553][ T6912] ? mutex_lock_io_nested+0x60/0x60 [ 133.781741][ T6912] mutex_lock_nested+0x17/0x20 [ 133.786488][ T6912] dquot_commit+0x5a/0x410 [ 133.790892][ T6912] ext4_write_dquot+0x1f0/0x360 [ 133.795732][ T6912] mark_all_dquot_dirty+0xf9/0x400 [ 133.800827][ T6912] __dquot_alloc_space+0x5cb/0xe10 [ 133.805925][ T6912] ext4_mb_new_blocks+0xf80/0x47c0 [ 133.811028][ T6912] ? memset+0x1e/0x40 [ 133.814997][ T6912] ? ext4_mb_pa_callback+0xd0/0xd0 [ 133.820107][ T6912] ? ext4_inode_to_goal_block+0x313/0x450 [ 133.825895][ T6912] ext4_ext_map_blocks+0x17d1/0x63d0 [ 133.831178][ T6912] ? ext4_ext_release+0x10/0x10 [ 133.836018][ T6912] ? rwsem_write_trylock+0x135/0x1c0 [ 133.841290][ T6912] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 133.846739][ T6912] ext4_map_blocks+0x97f/0x1a50 [ 133.851596][ T6912] ? ext4_issue_zeroout+0x250/0x250 [ 133.856789][ T6912] ext4_getblk+0x176/0x670 [ 133.861199][ T6912] ? ext4_get_block_unwritten+0x30/0x30 [ 133.866728][ T6912] ? __brelse+0x55/0x90 [ 133.870863][ T6912] ext4_bread+0x26/0x180 [ 133.875089][ T6912] ext4_append+0x2bb/0x560 [ 133.879490][ T6912] ? ext4_init_new_dir+0x910/0x910 [ 133.884591][ T6912] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 133.890297][ T6912] ext4_init_new_dir+0x2a7/0x910 [ 133.895235][ T6912] ext4_mkdir+0x4c3/0xc90 [ 133.899572][ T6912] ? ext4_symlink+0xcd0/0xcd0 [ 133.904239][ T6912] ? inode_permission+0xef/0x480 [ 133.909168][ T6912] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 133.914180][ T6912] ? security_inode_mkdir+0xb3/0x100 [ 133.919459][ T6912] vfs_mkdir+0x386/0x570 [ 133.923693][ T6912] do_mkdirat+0x1dd/0x5c0 [ 133.928014][ T6912] ? vfs_mkdir+0x570/0x570 [ 133.932420][ T6912] __x64_sys_mkdirat+0x85/0x90 [ 133.937166][ T6912] do_syscall_64+0x4c/0xa0 [ 133.941568][ T6912] ? clear_bhb_loop+0x30/0x80 [ 133.946234][ T6912] ? clear_bhb_loop+0x30/0x80 [ 133.950900][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.956792][ T6912] RIP: 0033:0x7f2ea4aafe99 [ 133.961208][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.980813][ T6912] RSP: 002b:00007f2ea2d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 133.989216][ T6912] RAX: ffffffffffffffda RBX: 00007f2ea4d37fa0 RCX: 00007f2ea4aafe99 [ 133.997174][ T6912] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 134.005129][ T6912] RBP: 00007f2ea4b45eaf R08: 0000000000000000 R09: 0000000000000000 [ 134.013084][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.021039][ T6912] R13: 00007f2ea4d38038 R14: 00007f2ea4d37fa0 R15: 00007ffdb96d7b38 [ 134.029007][ T6912] [ 134.048895][ T6952] loop4: detected capacity change from 0 to 512 [ 134.089717][ T26] audit: type=1326 audit(1785205329.528:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.977" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fa606e99 code=0x7ffc0000 [ 134.125937][ T26] audit: type=1326 audit(1785205329.558:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.977" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fa606e99 code=0x7ffc0000 [ 134.165480][ T6952] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 134.195260][ T6952] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.214987][ T26] audit: type=1326 audit(1785205329.558:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.977" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f42fa606e99 code=0x7ffc0000 [ 134.260320][ T26] audit: type=1326 audit(1785205329.558:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6923 comm="syz.3.977" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f42fa606e99 code=0x7ffc0000 [ 134.290075][ T6952] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=./file0,nouid32,user_xattr,nodiscard,dioread_nolock,,errors=continue. Quota mode: writeback. [ 134.316931][ T6952] ext4 filesystem being mounted at /221/file7 supports timestamps until 2038-01-19 (0x7fffffff)