last executing test programs: 4m29.535186851s ago: executing program 1 (id=2): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000ac0)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d332c696f636861727365743d6370313235352c6572726f72733d72656d6f756e742d726f2c757466382c756d61736b3d30303030303030303030303030303030303030303031302c6572726f72733d636f6e74696e75652c757466382c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c646d61736b3d30303030303030303030303030303030303030303030312c0028ca36087435e4cba391cd51c427d037bc8bc02d363f6d784fbc28b1a9b19157cab61f9027e908eb7e2dbc6995ae30519b65a4d54e4b6af517688d19c89d8c1c5874b56d30dd229f6d96913b8dda0250be036702e261ca85de1990b32f9260421048b1e81489f075b274a8a5d4a6f7fcbff36d937c44d9a9343e2cfcd21111b9534c67dfe9ee891eed3fbde668690843"], 0x4, 0x1534, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 4m29.129101536s ago: executing program 1 (id=6): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x34}}, 0x0) 4m28.355437956s ago: executing program 1 (id=9): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000280)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@acl}, {@noacl}, {@heap}, {@noinline_data}, {@norecovery}, {@adaptive_mode}, {@grpjquota}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 4m28.126276008s ago: executing program 32 (id=9): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000280)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@acl}, {@noacl}, {@heap}, {@noinline_data}, {@norecovery}, {@adaptive_mode}, {@grpjquota}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 4.02564437s ago: executing program 0 (id=3033): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x8926, 0x0) 3.888402492s ago: executing program 4 (id=3034): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @multicast1}, 0x10) 3.769012133s ago: executing program 0 (id=3035): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) 3.599762595s ago: executing program 4 (id=3039): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x24, 0x6208, &(0x7f0000013980)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.934411484s ago: executing program 4 (id=3047): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00') exit(0x2) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) 2.615703997s ago: executing program 2 (id=3053): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='-', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x7, 0x4, 0x3, 0x7b3}, 0x8) 1.63626193s ago: executing program 3 (id=3058): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) 1.541795121s ago: executing program 2 (id=3059): timer_create(0x0, &(0x7f00000001c0)={0x0, 0x17, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) 1.426281712s ago: executing program 4 (id=3060): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 1.424866332s ago: executing program 5 (id=3061): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x2}}, 0x10, 0x0}, 0x804) 1.389261313s ago: executing program 2 (id=3062): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0xfffffffffffffffd) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000400)=0x9) 1.387241333s ago: executing program 4 (id=3063): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 1.252540964s ago: executing program 2 (id=3064): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000280)={[{@nodecompose}, {@umask={'umask', 0x3d, 0x93b}}, {@creator={'creator', 0x3d, "1929c15f"}}, {@gid}, {@uid}, {@nls={'nls', 0x3d, 'default'}}, {@barrier}]}, 0x3, 0x644, &(0x7f0000000e40)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 1.093939736s ago: executing program 4 (id=3065): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 1.024420197s ago: executing program 2 (id=3066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) 905.630639ms ago: executing program 3 (id=3067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000010000800000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 783.2768ms ago: executing program 2 (id=3068): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000700)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) 782.80051ms ago: executing program 3 (id=3069): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1) 670.853881ms ago: executing program 5 (id=3070): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x5522, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 616.656522ms ago: executing program 0 (id=3071): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000017c0)=""/185, 0xb9) read$hiddev(r0, &(0x7f0000001a40)=""/203, 0xcb) 561.179353ms ago: executing program 3 (id=3072): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xe25, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) 540.057813ms ago: executing program 5 (id=3073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x6e8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x6b8, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x490, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0c9939d757d796a1e7bc26b9664185fddbe74f5b51f2899e475ad95bcf6368"}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x20, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x200}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @empty, 0x5b}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9f4b4ae73c2437a67a4e92214f48aa48cb055e3fbb9944b0f77e0bc1083e94f6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe0}]}, {0x4}]}]}, 0x6e8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 444.691364ms ago: executing program 0 (id=3074): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000083000/0x1000)=nil, 0x1000, 0xa, 0x13012, r0, 0x0) 365.436315ms ago: executing program 3 (id=3075): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{}, {@nodecompose}, {@force}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='dyn']) 342.273816ms ago: executing program 5 (id=3076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008b00"]) 314.648296ms ago: executing program 0 (id=3077): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000140)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nobarrier}, {@part={'part', 0x3d, 0x5}}, {@part}, {@gid}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp863'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") mount$nfs(&(0x7f00000000c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x00\x00\x01\x00\x00\x00\x00\x00h#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4I\xc5\xcb\x15A\xb5\xbbG\x9e\xea\xc4\x03\xf2\xf5\xf4\xa1\x9c\xe0Q<=\xb1\x9b,vjn\x8b[0\xd9\xcb\xf8\x1a\xdf\x9e\x89\x91H\xf4\x11p\xd2\x96\x82\xd9)6\xcdm\x88\x91\x1dv\xff\xb3\xad\x8b\x82\xcdR\x98\x80k1\xce}\x90\xe8e\xdb\xb1HL\x1d%\xc4\x1atCt\xb4\x00\xb29E\x87-\xd1\xcd\xf3w\"\v\xf3`\x06x\xb4TQ\x8dB\a\xe4\xe2\xf8\xd6%C\xf9\xd6~\xf80\xfcE\xa0\x80\x0e\"\xb0\a\x88\xbc\x7fbn\x02\xeb\x9b\x04\x1d\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x123b058, 0x0) mount$nfs(&(0x7f00000000c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x00\x00\x01\x00\x00\x00\x00\x00h#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4I\xc5\xcb\x15A\xb5\xbbG\x9e\xea\xc4\x03\xf2\xf5\xf4\xa1\x9c\xe0Q<=\xb1\x9b,vjn\x8b[0\xd9\xcb\xf8\x1a\xdf\x9e\x89\x91H\xf4\x11p\xd2\x96\x82\xd9)6\xcdm\x88\x91\x1dv\xff\xb3\xad\x8b\x82\xcdR\x98\x80k1\xce}\x90\xe8e\xdb\xb1HL\x1d%\xc4\x1atCt\xb4\x00\xb29E\x87-\xd1\xcd\xf3w\"\v\xf3`\x06x\xb4TQ\x8dB\a\xe4\xe2\xf8\xd6%C\xf9\xd6~\xf80\xfcE\xa0\x80\x0e\"\xb0\a\x88\xbc\x7fbn\x02\xeb\x9b\x04\x1d\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x123b058, 0x0) 142.984048ms ago: executing program 5 (id=3078): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {0xa}, [@RTA_DST={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48870}, 0x0) 140.753188ms ago: executing program 0 (id=3079): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 431.74µs ago: executing program 5 (id=3080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 0s ago: executing program 3 (id=3081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1b, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): 264.766557][ T9876] device macvlan2 entered promiscuous mode [ 264.777242][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 264.799696][ T9826] XFS (loop5): Quotacheck: Done. [ 265.022363][ T4344] XFS (loop5): Unmounting Filesystem [ 265.193213][ T9892] loop2: detected capacity change from 0 to 512 [ 265.247904][ T9892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.283768][ T9894] loop4: detected capacity change from 0 to 512 [ 265.310662][ T9894] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.2084: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 265.333325][ T9892] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.2083: bad orphan inode 131083 [ 265.357603][ T9892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 265.405088][ T9894] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2084: couldn't read orphan inode 15 (err -117) [ 265.442376][ T9894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.484806][ T9900] loop3: detected capacity change from 0 to 2048 [ 265.505942][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 265.572660][ T9900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 265.589387][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 265.819752][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 265.944326][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 265.967108][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 265.976138][ T9912] netlink: 'syz.3.2087': attribute type 14 has an invalid length. [ 266.026979][ T9912] netlink: 'syz.3.2087': attribute type 11 has an invalid length. [ 266.125860][ T9914] loop2: detected capacity change from 0 to 4096 [ 266.138327][ T9898] loop0: detected capacity change from 0 to 40427 [ 266.161109][ T9898] F2FS-fs (loop0): invalid crc value [ 266.240984][ T9898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 266.437354][ T9898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 266.493355][ T9930] loop3: detected capacity change from 0 to 64 [ 267.209601][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 267.371636][ T9953] tipc: Resetting bearer [ 267.407467][ T4637] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 267.607365][ T4637] usb 3-1: Using ep0 maxpacket: 32 [ 267.616683][ T4637] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.659397][ T4637] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 267.699787][ T4637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.720039][ T4637] usb 3-1: Product: syz [ 267.724279][ T4637] usb 3-1: Manufacturer: syz [ 267.747603][ T4637] usb 3-1: SerialNumber: syz [ 267.783403][ T4637] usb 3-1: config 0 descriptor?? [ 267.794920][ T4637] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 268.002220][ T4637] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 268.012394][ T4637] quatech2: probe of 3-1:0.0 failed with error -8 [ 268.204777][ T4804] usb 3-1: USB disconnect, device number 17 [ 268.307548][ T9984] loop5: detected capacity change from 0 to 4096 [ 268.331815][ T9984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.359156][ T9984] EXT4-fs (loop5): Test dummy encryption mode enabled [ 268.387165][ T4269] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 268.396439][ T4269] Bluetooth: hci3: Injecting HCI hardware error event [ 268.409178][ T4264] Bluetooth: hci3: hardware error 0x00 [ 268.467133][ T9984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 268.608482][ T4344] EXT4-fs (loop5): unmounting filesystem. [ 268.891800][ T9957] loop3: detected capacity change from 0 to 65536 [ 268.983913][ T9957] XFS (loop3): Mounting V5 Filesystem [ 269.139019][ T9957] XFS (loop3): Ending clean mount [ 269.329290][ T4802] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 269.340705][ T4262] XFS (loop3): Unmounting Filesystem [ 269.529441][ T4802] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 269.543112][ T4802] usb 5-1: config 4 has no interface number 0 [ 269.564866][ T4802] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 269.584493][ T4802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.604766][ T4802] usb 5-1: Product: syz [ 269.609324][ T4802] usb 5-1: Manufacturer: syz [ 269.613967][ T4802] usb 5-1: SerialNumber: syz [ 269.654788][ T4802] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 269.698216][T10018] loop0: detected capacity change from 0 to 32768 [ 269.710950][T10018] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 269.743299][T10018] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 269.928446][ T4263] ocfs2: Unmounting device (7,0) on (node local) [ 269.935183][ T27] audit: type=1326 audit(1748060673.870:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.5.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 269.992444][ T27] audit: type=1326 audit(1748060673.900:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.5.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 270.046246][ T4802] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 270.056878][ T27] audit: type=1326 audit(1748060673.900:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.5.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9828785927 code=0x7ffc0000 [ 270.088271][ T4802] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 270.121776][ T27] audit: type=1326 audit(1748060673.900:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.5.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f982872ab39 code=0x7ffc0000 [ 270.175128][ T27] audit: type=1326 audit(1748060673.900:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.5.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 270.207457][ T4637] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 270.254888][ T4802] usb 5-1: USB disconnect, device number 18 [ 270.339420][T10041] loop5: detected capacity change from 0 to 4096 [ 270.419961][ T4637] usb 3-1: Using ep0 maxpacket: 8 [ 270.429185][ T4637] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.439016][T10048] debugfs: Directory 'Z:H' with parent 'damon' already present! [ 270.448784][ T4264] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 270.449622][ T4637] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.487082][ T4637] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 270.499161][ T4637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.517924][ T4637] usb 3-1: config 0 descriptor?? [ 270.590302][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2147'. [ 270.602375][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2147'. [ 270.933044][ T4637] elecom 0003:056E:00FB.0028: unknown main item tag 0x0 [ 270.945894][ T4637] elecom 0003:056E:00FB.0028: unknown main item tag 0x0 [ 270.968230][ T4637] elecom 0003:056E:00FB.0028: unknown main item tag 0x0 [ 270.985119][ T4637] elecom 0003:056E:00FB.0028: unknown main item tag 0x0 [ 271.000517][ T4637] elecom 0003:056E:00FB.0028: unknown main item tag 0x0 [ 271.022148][ T4637] elecom 0003:056E:00FB.0028: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.2-1/input0 [ 271.072840][T10050] loop0: detected capacity change from 0 to 32768 [ 271.125223][T10050] [ 271.125223][T10050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.125223][T10050] [ 271.141402][ T4637] usb 3-1: USB disconnect, device number 18 [ 271.185762][T10050] [ 271.185762][T10050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.185762][T10050] [ 271.218369][T10050] [ 271.218369][T10050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.218369][T10050] [ 271.240142][T10050] [ 271.240142][T10050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.240142][T10050] [ 271.273877][T10050] [ 271.273877][T10050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.273877][T10050] [ 271.308602][T10068] [ 271.308602][T10068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.308602][T10068] [ 271.349366][T10050] [ 271.349366][T10050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.349366][T10050] [ 271.387309][ T107] [ 271.387309][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.387309][ T107] [ 271.421223][T10068] [ 271.421223][T10068] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.421223][T10068] [ 271.542889][ T4263] [ 271.542889][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.542889][ T4263] [ 271.574622][ T4263] [ 271.574622][ T4263] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.574622][ T4263] [ 271.762309][T10081] loop4: detected capacity change from 0 to 8192 [ 271.960904][ T27] audit: type=1326 audit(1748060675.900:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 272.063744][ T27] audit: type=1326 audit(1748060675.930:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 272.147173][ T27] audit: type=1326 audit(1748060675.930:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 272.155832][T10095] loop4: detected capacity change from 0 to 512 [ 272.219978][T10095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.222686][ T27] audit: type=1326 audit(1748060675.930:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 272.236210][T10095] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.316020][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 272.355243][T10076] loop5: detected capacity change from 0 to 32768 [ 272.390435][T10076] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.2159 (10076) [ 272.392888][ T27] audit: type=1326 audit(1748060675.930:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10088 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 272.456971][T10076] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 272.498389][T10076] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 272.527073][T10076] BTRFS info (device loop5): using free space tree [ 272.684849][T10134] loop3: detected capacity change from 0 to 1024 [ 272.686547][T10076] BTRFS info (device loop5): enabling ssd optimizations [ 272.737337][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 272.827336][T10136] loop2: detected capacity change from 0 to 256 [ 273.019495][ T4344] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 273.361364][T10155] loop2: detected capacity change from 0 to 16 [ 273.403363][T10155] erofs: (device loop2): mounted with root inode @ nid 36. [ 273.488629][T10158] loop0: detected capacity change from 0 to 256 [ 273.510994][T10138] loop3: detected capacity change from 0 to 32768 [ 273.548626][T10158] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 274.356835][T10180] loop3: detected capacity change from 0 to 1024 [ 274.462456][T10160] loop4: detected capacity change from 0 to 32768 [ 274.518827][T10166] loop0: detected capacity change from 0 to 32768 [ 274.526497][T10160] XFS (loop4): Mounting V5 Filesystem [ 274.539110][T10166] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2192 (10166) [ 274.566353][T10166] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 274.646716][T10166] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 274.683310][T10160] XFS (loop4): Ending clean mount [ 274.687507][T10166] BTRFS info (device loop0): setting nodatacow, compression disabled [ 274.693152][T10160] XFS (loop4): Quotacheck needed: Please wait. [ 274.707529][T10166] BTRFS info (device loop0): force clearing of disk cache [ 274.737573][T10166] BTRFS info (device loop0): enabling ssd optimizations [ 274.750931][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2203'. [ 274.762549][T10166] BTRFS info (device loop0): using spread ssd allocation scheme [ 274.794328][T10166] BTRFS info (device loop0): doing ref verification [ 274.801744][T10160] XFS (loop4): Quotacheck: Done. [ 274.845002][ T4258] XFS (loop4): Unmounting Filesystem [ 274.851033][T10166] BTRFS info (device loop0): force zlib compression, level 3 [ 274.860555][T10166] BTRFS info (device loop0): not using ssd optimizations [ 274.872693][T10166] BTRFS info (device loop0): not using spread ssd allocation scheme [ 274.927871][T10166] BTRFS info (device loop0): using free space tree [ 275.191889][T10166] BTRFS info (device loop0): rebuilding free space tree [ 275.353555][T10228] loop3: detected capacity change from 0 to 256 [ 275.395548][T10228] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 275.432888][ T4263] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 276.037720][T10248] loop0: detected capacity change from 0 to 64 [ 276.084092][T10248] syz.0.2212: attempt to access beyond end of device [ 276.084092][T10248] loop0: rw=2049, sector=153, nr_sectors = 135 limit=64 [ 277.052235][T10254] loop4: detected capacity change from 0 to 32768 [ 277.062954][T10252] loop5: detected capacity change from 0 to 32768 [ 277.095541][T10265] loop3: detected capacity change from 0 to 2048 [ 277.110893][T10257] loop0: detected capacity change from 0 to 32768 [ 277.118752][T10265] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 277.141021][T10254] XFS (loop4): Mounting V5 Filesystem [ 277.148597][T10257] XFS: attr2 mount option is deprecated. [ 277.155445][T10257] XFS: ikeep mount option is deprecated. [ 277.183987][T10257] XFS: noikeep mount option is deprecated. [ 277.189807][T10252] XFS (loop5): Mounting V5 Filesystem [ 277.235022][T10257] XFS (loop0): Mounting V5 Filesystem [ 277.306160][T10254] XFS (loop4): Ending clean mount [ 277.325956][T10254] XFS (loop4): Quotacheck needed: Please wait. [ 277.337953][T10252] XFS (loop5): Ending clean mount [ 277.380888][T10252] XFS (loop5): Quotacheck needed: Please wait. [ 277.385705][T10299] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 277.410239][T10257] XFS (loop0): Ending clean mount [ 277.448663][T10257] XFS (loop0): Quotacheck needed: Please wait. [ 277.457381][T10300] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 277.489146][T10254] XFS (loop4): Quotacheck: Done. [ 277.489156][T10301] IPVS: stopping master sync thread 10300 ... [ 277.517635][T10252] XFS (loop5): Quotacheck: Done. [ 277.610121][T10257] XFS (loop0): Quotacheck: Done. [ 277.714469][ T4258] XFS (loop4): Unmounting Filesystem [ 277.726478][ T4263] XFS (loop0): Unmounting Filesystem [ 277.751101][ T4344] XFS (loop5): Unmounting Filesystem [ 278.309233][T10313] loop2: detected capacity change from 0 to 1024 [ 278.410842][T10313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.461537][T10313] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 278.497226][T10313] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 278.661053][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 278.682015][T10328] loop4: detected capacity change from 0 to 256 [ 278.835721][T10332] loop2: detected capacity change from 0 to 8 [ 278.920142][T10340] loop4: detected capacity change from 0 to 8 [ 278.972767][T10340] SQUASHFS error: Corrupted symlink [ 279.587738][T10336] loop5: detected capacity change from 0 to 32768 [ 279.680638][T10338] loop0: detected capacity change from 0 to 32768 [ 279.754588][T10344] loop3: detected capacity change from 0 to 32768 [ 279.766247][T10338] XFS (loop0): Mounting V5 Filesystem [ 279.825748][T10344] XFS (loop3): Mounting V5 Filesystem [ 279.912967][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 279.912984][ T27] audit: type=1326 audit(1748060683.850:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.4.2259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49ef98e969 code=0x0 [ 279.952247][T10338] XFS (loop0): Ending clean mount [ 279.977502][T10344] XFS (loop3): Ending clean mount [ 279.994988][T10338] XFS (loop0): Quotacheck needed: Please wait. [ 280.009735][T10344] XFS (loop3): Quotacheck needed: Please wait. [ 280.090592][T10338] XFS (loop0): Quotacheck: Done. [ 280.152438][T10344] XFS (loop3): Quotacheck: Done. [ 280.210936][ T4263] XFS (loop0): Unmounting Filesystem [ 280.229665][T10379] loop2: detected capacity change from 0 to 256 [ 280.295118][ T4262] XFS (loop3): Unmounting Filesystem [ 280.964478][T10392] xt_hashlimit: max too large, truncated to 1048576 [ 280.992683][T10381] loop5: detected capacity change from 0 to 32768 [ 281.010431][T10381] [ 281.010431][T10381] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.010431][T10381] [ 281.033259][T10396] loop2: detected capacity change from 0 to 512 [ 281.088152][T10396] EXT4-fs: Ignoring removed nobh option [ 281.099090][T10381] ERROR: (device loop5): diWrite: ixpxd invalid [ 281.099090][T10381] [ 281.101980][T10394] loop4: detected capacity change from 0 to 4096 [ 281.118529][T10381] ERROR: (device loop5): txCommit: [ 281.118529][T10381] [ 281.133209][T10394] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 281.172484][T10396] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.2269: corrupted in-inode xattr [ 281.197165][T10396] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2269: couldn't read orphan inode 15 (err -117) [ 281.212337][T10396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 281.269164][ T4344] [ 281.269164][ T4344] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.269164][ T4344] [ 281.336999][ T4344] [ 281.336999][ T4344] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.336999][ T4344] [ 281.382019][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 281.895816][T10428] netlink: 'syz.5.2282': attribute type 61 has an invalid length. [ 282.196211][T10413] loop2: detected capacity change from 0 to 32768 [ 282.223550][T10435] loop0: detected capacity change from 0 to 2048 [ 282.232032][T10435] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 282.275432][T10413] XFS (loop2): Mounting V5 Filesystem [ 282.296039][T10441] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.333629][T10444] loop5: detected capacity change from 0 to 512 [ 282.345350][T10444] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.435723][T10444] EXT4-fs (loop5): orphan cleanup on readonly fs [ 282.462108][T10413] XFS (loop2): Ending clean mount [ 282.480344][T10413] XFS (loop2): Quotacheck needed: Please wait. [ 282.513574][T10444] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 282.581655][T10413] XFS (loop2): Quotacheck: Done. [ 282.600668][T10444] EXT4-fs warning (device loop5): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.655054][T10456] loop0: detected capacity change from 0 to 8192 [ 282.660852][T10444] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 282.673083][T10456] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 282.691167][T10444] EXT4-fs (loop5): 1 truncate cleaned up [ 282.702705][T10444] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 282.715809][T10456] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 282.737401][T10456] REISERFS (device loop0): using ordered data mode [ 282.740953][ T4255] XFS (loop2): Unmounting Filesystem [ 282.744999][T10456] reiserfs: using flush barriers [ 282.764370][T10444] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 282.777269][T10456] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 282.822996][ T4344] EXT4-fs (loop5): unmounting filesystem. [ 282.857037][T10456] REISERFS (device loop0): checking transaction log (loop0) [ 282.883808][T10461] loop3: detected capacity change from 0 to 2048 [ 282.951426][T10456] REISERFS (device loop0): Using r5 hash to sort names [ 282.958957][T10456] REISERFS (device loop0): using 3.5.x disk format [ 282.979748][T10456] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 282.993506][T10461] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.034458][T10461] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.245462][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 283.440998][T10475] loop3: detected capacity change from 0 to 1024 [ 283.454062][T10475] EXT4-fs: Ignoring removed nobh option [ 283.464009][T10477] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2298'. [ 283.477807][T10475] EXT4-fs: Ignoring removed bh option [ 283.507032][T10475] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.583272][T10475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 283.732454][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 283.749810][T10489] loop0: detected capacity change from 0 to 2048 [ 283.791300][T10489] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 283.861402][ T4297] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 283.880794][T10489] syz.0.2301: attempt to access beyond end of device [ 283.880794][T10489] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 283.896144][T10494] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.929011][T10489] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 16777227 [ 283.940035][T10489] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 283.969382][T10489] Remounting filesystem read-only [ 283.974825][T10489] NILFS (loop0): error -5 truncating bmap (ino=16) [ 284.082742][ T4263] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 284.102647][ T4297] usb 3-1: Using ep0 maxpacket: 32 [ 284.119609][ T4297] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 284.147053][ T4297] usb 3-1: config 0 has no interface number 0 [ 284.163845][T10480] loop5: detected capacity change from 0 to 32768 [ 284.171634][ T4297] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.197236][ T4297] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.217053][ T4297] usb 3-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.272221][ T4297] usb 3-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 284.296984][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.325339][ T4297] usb 3-1: config 0 descriptor?? [ 284.751860][ T4297] hid (null): report_id 29495 is invalid [ 284.770398][ T4297] viewsonic 0003:0543:E621.0029: report_id 29495 is invalid [ 284.787024][ T4297] viewsonic 0003:0543:E621.0029: item 0 2 1 8 parsing failed [ 284.790399][T10496] loop3: detected capacity change from 0 to 32768 [ 284.798257][ T4297] viewsonic: probe of 0003:0543:E621.0029 failed with error -22 [ 284.868162][T10499] loop4: detected capacity change from 0 to 32768 [ 284.876610][T10499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2307 (10499) [ 284.895846][T10496] XFS (loop3): Mounting V5 Filesystem [ 284.904106][T10499] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 284.918884][T10499] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 284.929122][T10499] BTRFS info (device loop4): turning on async discard [ 284.936458][T10499] BTRFS info (device loop4): using free space tree [ 284.955495][ T4297] usb 3-1: USB disconnect, device number 19 [ 284.975647][T10499] BTRFS info (device loop4): enabling ssd optimizations [ 285.027266][T10496] XFS (loop3): Ending clean mount [ 285.057618][T10496] XFS (loop3): Quotacheck needed: Please wait. [ 285.076534][ T4258] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.113953][T10496] XFS (loop3): Quotacheck: Done. [ 285.184419][ T4262] XFS (loop3): Unmounting Filesystem [ 285.709134][T10554] loop4: detected capacity change from 0 to 1024 [ 285.734077][T10554] hfsplus: bad catalog entry type [ 285.758518][T10558] loop5: detected capacity change from 0 to 8 [ 285.776619][ T9] hfsplus: b-tree write err: -5, ino 4 [ 285.987055][ T4637] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 286.189869][ T4637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.207884][ T4637] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.241831][ T4637] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 286.252955][ T4637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.279893][ T4637] usb 3-1: config 0 descriptor?? [ 286.417753][T10570] loop4: detected capacity change from 0 to 4096 [ 286.538321][T10570] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 286.704890][ T4637] arvo 0003:1E7D:30D4.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 286.762118][T10581] loop4: detected capacity change from 0 to 128 [ 286.771415][T10581] EXT4-fs: Ignoring removed oldalloc option [ 286.779860][T10581] EXT4-fs: inline encryption not supported [ 286.792593][T10581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 286.802608][T10581] ext4 filesystem being mounted at /483/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 286.841946][ T4634] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 286.892084][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 286.913369][ T4637] arvo 0003:1E7D:30D4.002A: couldn't init struct arvo_device [ 286.921454][ T4297] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 286.930532][ T4637] arvo 0003:1E7D:30D4.002A: couldn't install keyboard [ 286.940142][ T4637] arvo: probe of 0003:1E7D:30D4.002A failed with error -71 [ 286.951044][ T4637] usb 3-1: USB disconnect, device number 20 [ 287.032696][ T4634] usb 6-1: Using ep0 maxpacket: 16 [ 287.040422][ T4634] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 287.050590][ T4634] usb 6-1: config 0 has no interface number 0 [ 287.056821][ T4634] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.070478][ T4634] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 287.082710][ T4634] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 287.093011][ T4634] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 287.101532][ T4634] usb 6-1: Product: syz [ 287.106010][ T4634] usb 6-1: SerialNumber: syz [ 287.118875][ T4634] usb 6-1: config 0 descriptor?? [ 287.131589][T10589] loop4: detected capacity change from 0 to 2048 [ 287.131656][ T4634] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 287.145193][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 287.155266][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.169626][ T4634] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input24 [ 287.179091][T10590] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.184517][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.202193][ T4297] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 287.215691][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.226541][ T4297] usb 4-1: config 0 descriptor?? [ 287.250313][T10589] overlayfs: upper fs does not support tmpfile. [ 287.261049][T10589] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 287.268937][T10589] overlayfs: failed to set xattr on upper [ 287.274797][T10589] overlayfs: ...falling back to index=off,metacopy=off. [ 287.353947][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 287.354302][ T4807] usb 6-1: USB disconnect, device number 18 [ 287.360965][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 287.378411][ T4807] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 287.402556][T10590] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 287.420855][T10590] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 287.443534][T10590] Remounting filesystem read-only [ 287.476534][ T4258] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 287.491022][ T4258] NILFS error (device loop4): nilfs_readdir: bad page in #18 [ 287.504230][ T4258] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 287.643069][ T4297] ft260 0003:0403:6030.002B: item fetching failed at offset 0/2 [ 287.657511][ T4297] ft260 0003:0403:6030.002B: failed to parse HID [ 287.674349][ T4297] ft260: probe of 0003:0403:6030.002B failed with error -22 [ 287.843756][ T4297] usb 4-1: USB disconnect, device number 20 [ 288.043543][T10600] loop0: detected capacity change from 0 to 8 [ 288.068753][T10594] loop4: detected capacity change from 0 to 32768 [ 288.115737][T10602] loop5: detected capacity change from 0 to 4096 [ 288.133393][T10602] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 288.166322][T10594] XFS (loop4): Mounting V5 Filesystem [ 288.291815][T10594] XFS (loop4): Ending clean mount [ 288.321570][T10596] loop2: detected capacity change from 0 to 40427 [ 288.326867][T10594] XFS (loop4): Quotacheck needed: Please wait. [ 288.343130][T10596] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 288.353944][T10596] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 288.426015][T10596] F2FS-fs (loop2): invalid crc value [ 288.431909][T10594] XFS (loop4): Quotacheck: Done. [ 288.465708][T10596] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 288.587968][ T4258] XFS (loop4): Unmounting Filesystem [ 288.629890][T10596] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 288.643674][T10596] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.752916][T10629] loop0: detected capacity change from 0 to 1024 [ 289.365902][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2358'. [ 289.998338][T10677] loop3: detected capacity change from 0 to 512 [ 290.016029][T10677] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.084189][T10677] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 290.144290][T10677] EXT4-fs (loop3): orphan cleanup on readonly fs [ 290.190135][T10677] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 290.228522][T10663] loop4: detected capacity change from 0 to 32768 [ 290.237742][T10677] EXT4-fs warning (device loop3): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 290.253702][T10663] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2365 (10663) [ 290.268028][T10677] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 290.295162][T10663] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.307335][T10663] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 290.327033][T10663] BTRFS info (device loop4): using free space tree [ 290.335851][T10677] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2372: bg 0: block 40: padding at end of block bitmap is not set [ 290.368162][T10677] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 290.391459][T10677] EXT4-fs (loop3): 1 truncate cleaned up [ 290.405918][T10677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.561322][T10663] BTRFS info (device loop4): enabling ssd optimizations [ 290.599594][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 290.662456][ T27] audit: type=1800 audit(1748060694.600:86): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2365" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 290.745860][ T4258] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.776508][T10712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2380'. [ 290.796611][T10712] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 291.070575][T10720] loop5: detected capacity change from 0 to 1024 [ 291.081722][T10719] loop0: detected capacity change from 0 to 512 [ 291.107924][T10719] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.211951][T10719] EXT4-fs (loop0): orphan cleanup on readonly fs [ 291.256144][T10719] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 291.273645][T10719] EXT4-fs warning (device loop0): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.347432][T10719] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 291.367341][T10719] EXT4-fs (loop0): 1 truncate cleaned up [ 291.373332][T10719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.416532][T10714] loop3: detected capacity change from 0 to 32768 [ 291.445000][T10719] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 291.571904][T10714] XFS (loop3): Mounting V5 Filesystem [ 291.572387][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 291.630280][T10735] loop2: detected capacity change from 0 to 64 [ 291.763387][T10714] XFS (loop3): Ending clean mount [ 291.764442][T10735] hfs: request for non-existent node 56 in B*Tree [ 291.786996][T10735] hfs: request for non-existent node 56 in B*Tree [ 291.812819][T10735] hfs: request for non-existent node 57 in B*Tree [ 291.832846][ T4262] XFS (loop3): Unmounting Filesystem [ 291.838281][T10735] hfs: request for non-existent node 57 in B*Tree [ 292.751624][T10766] x_tables: ip_tables: udp match: only valid for protocol 17 [ 292.806341][T10754] loop5: detected capacity change from 0 to 32768 [ 292.828154][T10754] XFS: ikeep mount option is deprecated. [ 292.833863][T10754] XFS: noikeep mount option is deprecated. [ 292.896208][T10754] XFS (loop5): Mounting V5 Filesystem [ 293.012107][T10754] XFS (loop5): Ending clean mount [ 293.035098][T10754] XFS (loop5): Quotacheck needed: Please wait. [ 293.058547][T10782] loop3: detected capacity change from 0 to 2048 [ 293.121951][T10754] XFS (loop5): Quotacheck: Done. [ 293.141967][T10782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 293.177169][T10782] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.236869][T10760] loop2: detected capacity change from 0 to 40427 [ 293.262181][T10782] EXT4-fs: Ignoring removed orlov option [ 293.268845][T10782] EXT4-fs (loop3): can't enable nombcache during remount [ 293.282295][ T4344] XFS (loop5): Unmounting Filesystem [ 293.299132][T10760] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 293.316153][T10760] F2FS-fs (loop2): invalid crc value [ 293.329012][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 293.362062][T10760] F2FS-fs (loop2): Found nat_bits in checkpoint [ 293.454643][T10760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 293.552612][ T4255] syz-executor: attempt to access beyond end of device [ 293.552612][ T4255] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.704987][T10806] program syz.4.2416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.856039][T10808] loop3: detected capacity change from 0 to 2048 [ 293.864892][T10808] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 293.891426][T10811] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.012618][T10818] loop3: detected capacity change from 0 to 256 [ 294.040410][T10818] FAT-fs (loop3): Directory bread(block 64) failed [ 294.054726][T10818] FAT-fs (loop3): Directory bread(block 65) failed [ 294.062471][T10818] FAT-fs (loop3): Directory bread(block 66) failed [ 294.074455][T10818] FAT-fs (loop3): Directory bread(block 67) failed [ 294.081601][T10818] FAT-fs (loop3): Directory bread(block 68) failed [ 294.094817][T10818] FAT-fs (loop3): Directory bread(block 69) failed [ 294.102603][T10818] FAT-fs (loop3): Directory bread(block 70) failed [ 294.114845][T10818] FAT-fs (loop3): Directory bread(block 71) failed [ 294.122096][T10818] FAT-fs (loop3): Directory bread(block 72) failed [ 294.129146][T10818] FAT-fs (loop3): Directory bread(block 73) failed [ 294.414798][T10817] loop2: detected capacity change from 0 to 40427 [ 294.513263][T10817] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.647093][T10817] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 294.774704][ T4255] syz-executor: attempt to access beyond end of device [ 294.774704][ T4255] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.081789][T10822] loop3: detected capacity change from 0 to 40427 [ 295.119059][T10822] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 295.157030][T10822] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 295.209705][T10822] F2FS-fs (loop3): invalid crc value [ 295.244612][T10822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.332919][T10848] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2432'. [ 295.422526][T10822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.655691][ T4262] syz-executor: attempt to access beyond end of device [ 295.655691][ T4262] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 295.663479][T10861] loop2: detected capacity change from 0 to 1024 [ 295.712720][T10862] loop0: detected capacity change from 0 to 1024 [ 295.835261][T10862] hfsplus: bad catalog entry type [ 295.936687][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 296.075166][T10872] loop0: detected capacity change from 0 to 512 [ 296.099967][T10872] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.157111][T10872] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 296.187857][T10872] ext4 filesystem being mounted at /458/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.215683][T10872] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.2442: corrupted xattr block 32 [ 296.233008][T10872] EXT4-fs (loop0): Remounting filesystem read-only [ 296.253990][T10872] EXT4-fs error (device loop0): ext4_get_inode_usage:852: inode #15: comm syz.0.2442: corrupted xattr block 32 [ 296.271581][T10872] EXT4-fs (loop0): Remounting filesystem read-only [ 296.356285][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 296.424489][ T27] audit: type=1326 audit(1748060700.360:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.447354][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.501724][ T27] audit: type=1326 audit(1748060700.360:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.630282][ T27] audit: type=1326 audit(1748060700.410:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.651547][T10892] loop0: detected capacity change from 0 to 256 [ 296.707227][ T27] audit: type=1326 audit(1748060700.410:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.713792][T10892] exfat: Deprecated parameter 'namecase' [ 296.729874][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.756787][ T27] audit: type=1326 audit(1748060700.410:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.779161][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.816479][ T27] audit: type=1326 audit(1748060700.420:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.866782][T10892] exfat: Deprecated parameter 'utf8' [ 296.897707][ T27] audit: type=1326 audit(1748060700.420:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 296.907086][T10892] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 296.971478][ T27] audit: type=1326 audit(1748060700.420:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10881 comm="syz.5.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 297.400886][T10929] loop3: detected capacity change from 0 to 256 [ 297.725718][T10941] loop4: detected capacity change from 0 to 16 [ 297.777317][T10941] erofs: (device loop4): mounted with root inode @ nid 36. [ 297.814206][T10941] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 297.857594][T10937] loop3: detected capacity change from 0 to 4096 [ 297.865311][T10941] erofs: (device loop4): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 297.887528][T10937] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 297.907278][T10941] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 297.915865][T10941] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 298.073761][T10945] loop2: detected capacity change from 0 to 4096 [ 298.102892][T10945] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 298.416044][T10931] loop0: detected capacity change from 0 to 40427 [ 298.442177][T10931] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 298.480530][T10931] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 298.509086][T10931] F2FS-fs (loop0): invalid crc value [ 298.539249][T10931] F2FS-fs (loop0): Found nat_bits in checkpoint [ 298.628507][T10958] loop2: detected capacity change from 0 to 4096 [ 298.646514][T10958] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 298.681613][T10931] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 298.705463][T10931] F2FS-fs (loop0): Start checkpoint disabled! [ 298.775694][T10931] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 298.795626][T10931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 298.837602][T10962] loop5: detected capacity change from 0 to 4096 [ 298.977185][T10962] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 298.985003][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 299.164169][ T33] kworker/u4:2: attempt to access beyond end of device [ 299.164169][ T33] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 299.246713][T10956] loop3: detected capacity change from 0 to 32768 [ 299.293061][T10956] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 299.302160][T10954] loop4: detected capacity change from 0 to 32768 [ 299.344740][T10954] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 299.373779][T10954] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 299.402116][ T4262] ocfs2: Unmounting device (7,3) on (node local) [ 299.433286][T10954] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 299.467127][ T4297] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 299.484590][ T4807] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 299.501872][ T4807] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 299.557220][ T4807] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 299.564997][ T4807] gfs2: fsid=syz:syz.0: jid=0: Done [ 299.595298][T10954] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 299.670536][T10974] loop0: detected capacity change from 0 to 4096 [ 299.678195][ T4297] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 299.702597][ T4297] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 299.727044][ T4297] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 299.736040][ T4297] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 299.800663][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 299.850272][ T4297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 299.904085][ T4297] usb 3-1: string descriptor 0 read error: -22 [ 299.925106][ T4297] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 299.962406][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.986698][ T4297] usb 3-1: config 0 descriptor?? [ 300.007860][T10968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.030926][ T4297] hub 3-1:0.0: bad descriptor, ignoring hub [ 300.041677][ T4263] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 300.048832][ T4297] hub: probe of 3-1:0.0 failed with error -5 [ 300.067751][ T4297] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 300.069136][ T4263] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 300.310568][ T4297] usb 3-1: USB disconnect, device number 21 [ 300.350544][T10970] loop5: detected capacity change from 0 to 40427 [ 300.356407][T10985] loop4: detected capacity change from 0 to 4096 [ 300.359443][T10970] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 300.366265][T10985] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 300.371254][T10970] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 300.390753][T10970] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 300.400841][T10970] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 300.414980][T10970] F2FS-fs (loop5): invalid crc value [ 300.466686][T10970] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.551219][T10970] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 300.565986][T10970] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 300.572628][T10999] loop4: detected capacity change from 0 to 64 [ 300.606219][T10999] hfs: request for non-existent node 56 in B*Tree [ 300.623961][T10999] hfs: request for non-existent node 56 in B*Tree [ 300.630630][T10999] hfs: request for non-existent node 57 in B*Tree [ 300.647068][T10999] hfs: request for non-existent node 57 in B*Tree [ 300.684561][ T4344] syz-executor: attempt to access beyond end of device [ 300.684561][ T4344] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.918083][T11019] loop5: detected capacity change from 0 to 32768 [ 301.972335][T11009] loop2: detected capacity change from 0 to 131072 [ 301.980355][ T4297] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 301.990293][T11009] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 302.001143][T11009] F2FS-fs (loop2): invalid crc value [ 302.012957][T11009] F2FS-fs (loop2): Wrong journal entry on segno 1541 [ 302.026154][T11009] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 302.034720][T11019] XFS (loop5): Mounting V5 Filesystem [ 302.094803][T11019] XFS (loop5): Ending clean mount [ 302.223277][ T4344] XFS (loop5): Unmounting Filesystem [ 302.465328][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.485682][ T4297] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 302.502351][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.512889][ T4297] usb 4-1: config 0 descriptor?? [ 302.953529][ T4297] nintendo 0003:057E:200E.002C: unbalanced delimiter at end of report description [ 302.955185][T11040] loop5: detected capacity change from 0 to 32768 [ 302.964774][ T4297] nintendo 0003:057E:200E.002C: HID parse failed [ 302.992173][ T4297] nintendo 0003:057E:200E.002C: probe - fail = -22 [ 302.999109][ T4297] nintendo: probe of 0003:057E:200E.002C failed with error -22 [ 302.999948][T11040] XFS (loop5): Mounting V5 Filesystem [ 303.082267][T11040] XFS (loop5): Ending clean mount [ 303.090345][T11040] XFS (loop5): Quotacheck needed: Please wait. [ 303.124034][T11040] XFS (loop5): Quotacheck: Done. [ 303.166847][ T4637] usb 4-1: USB disconnect, device number 21 [ 303.208310][ T4344] XFS (loop5): Unmounting Filesystem [ 303.562615][T11063] loop0: detected capacity change from 0 to 512 [ 303.592980][T11063] EXT4-fs: Ignoring removed nobh option [ 303.602497][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2517'. [ 303.627505][T11065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2517'. [ 303.739819][T11063] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.2516: corrupted inode contents [ 303.753840][T11072] loop5: detected capacity change from 0 to 64 [ 303.761745][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 303.769879][T11063] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.2516: mark_inode_dirty error [ 303.787035][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 303.796067][T11063] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.2516: corrupted inode contents [ 303.812677][T11072] hfs: request for non-existent node 56 in B*Tree [ 303.827252][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 303.834735][T11063] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.2516: mark_inode_dirty error [ 303.837255][T11072] hfs: request for non-existent node 56 in B*Tree [ 303.869367][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 303.876106][T11063] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.2516: corrupted inode contents [ 303.880858][T11072] hfs: request for non-existent node 57 in B*Tree [ 303.908781][T11072] hfs: request for non-existent node 57 in B*Tree [ 303.918912][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 303.936582][T11063] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 303.959652][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 303.966558][T11063] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.2516: corrupted inode contents [ 304.007589][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 304.016988][T11063] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.2516: mark_inode_dirty error [ 304.032685][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 304.040095][T11063] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 304.052183][T11063] EXT4-fs (loop0): Remounting filesystem read-only [ 304.059539][ T4807] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 304.071760][T11063] EXT4-fs (loop0): 1 truncate cleaned up [ 304.078471][T11063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 304.090385][ T4456] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 304.094263][T11063] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.121407][ T4456] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1 [ 304.151378][ T4456] EXT4-fs (loop0): Remounting filesystem read-only [ 304.160026][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2522'. [ 304.160874][T11063] EXT4-fs: Cannot change journaled quota options when quota turned on [ 304.187973][ T22] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 304.263544][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 304.278221][ T4807] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 304.311928][ T4807] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 304.337447][ T4807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 304.366141][ T4807] usb 3-1: Product: syz [ 304.374707][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 304.376489][ T4807] usb 3-1: Manufacturer: syz [ 304.413168][ T22] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 304.426806][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.442900][ T4807] usb 3-1: SerialNumber: syz [ 304.462735][ T22] usb 5-1: config 0 has no interface number 0 [ 304.479576][ T4807] usb 3-1: config 0 descriptor?? [ 304.485429][ T22] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 304.509637][ T22] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.546621][ T22] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 304.566506][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.584962][ T22] usb 5-1: Product: syz [ 304.597030][ T22] usb 5-1: Manufacturer: syz [ 304.601793][ T22] usb 5-1: SerialNumber: syz [ 304.622769][ T22] usb 5-1: config 0 descriptor?? [ 304.630815][T11076] loop3: detected capacity change from 0 to 40427 [ 304.646076][T11076] F2FS-fs (loop3): invalid crc value [ 304.656027][T11076] F2FS-fs (loop3): Found nat_bits in checkpoint [ 304.708986][ T4807] usb 3-1: USB disconnect, device number 22 [ 304.756429][T11076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 304.793441][ T27] audit: type=1326 audit(1748060708.730:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 304.856868][ T27] audit: type=1326 audit(1748060708.730:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 304.929895][ T27] audit: type=1326 audit(1748060708.730:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 304.955953][ T4262] syz-executor: attempt to access beyond end of device [ 304.955953][ T4262] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 304.983452][ T4262] syz-executor: attempt to access beyond end of device [ 304.983452][ T4262] loop3: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 304.991874][ T27] audit: type=1326 audit(1748060708.730:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 305.023960][ T4262] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 305.024016][ T4262] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 305.067017][ T27] audit: type=1326 audit(1748060708.730:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f1d8e969 code=0x7ffc0000 [ 305.132854][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 305.279555][ T22] usb 5-1: USB disconnect, device number 19 [ 305.317999][T11110] loop3: detected capacity change from 0 to 256 [ 305.370654][T11110] FAT-fs (loop3): Directory bread(block 64) failed [ 305.379292][T11114] loop5: detected capacity change from 0 to 64 [ 305.386863][T11110] FAT-fs (loop3): Directory bread(block 65) failed [ 305.397130][T11110] FAT-fs (loop3): Directory bread(block 66) failed [ 305.403747][T11110] FAT-fs (loop3): Directory bread(block 67) failed [ 305.417840][T11110] FAT-fs (loop3): Directory bread(block 68) failed [ 305.424740][T11110] FAT-fs (loop3): Directory bread(block 69) failed [ 305.432022][T11110] FAT-fs (loop3): Directory bread(block 70) failed [ 305.438848][T11110] FAT-fs (loop3): Directory bread(block 71) failed [ 305.462733][T11110] FAT-fs (loop3): Directory bread(block 72) failed [ 305.482320][T11110] FAT-fs (loop3): Directory bread(block 73) failed [ 305.554831][T11110] syz.3.2531: attempt to access beyond end of device [ 305.554831][T11110] loop3: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 306.127640][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 306.169429][T11147] loop3: detected capacity change from 0 to 1024 [ 306.251161][T11147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 306.277662][T11156] syz.5.2555 uses obsolete (PF_INET,SOCK_PACKET) [ 306.360177][T11147] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.2552: empty directory 'file1' has too many links (111) [ 306.546175][T11169] cifs: Bad value for 'cache' [ 306.554522][T11164] loop2: detected capacity change from 0 to 4096 [ 306.555454][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 306.573669][T11164] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 306.795325][T11174] tipc: Enabling of bearer rejected, media not registered [ 306.895697][T11176] loop0: detected capacity change from 0 to 4096 [ 306.911044][T11176] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 307.336201][T11191] loop2: detected capacity change from 0 to 256 [ 307.371396][T11191] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7b943f, utbl_chksum : 0xe619d30d) [ 307.407885][T11172] loop3: detected capacity change from 0 to 32768 [ 307.468583][T11172] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 307.468583][T11172] [ 307.517709][T11172] ERROR: (device loop3): remounting filesystem as read-only [ 307.545376][T11172] xtLookup: xtSearch returned -5 [ 307.556574][T11172] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 307.556574][T11172] [ 307.672443][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2575'. [ 307.680956][T11198] loop5: detected capacity change from 0 to 4096 [ 307.710593][T11202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2576'. [ 307.729866][T11198] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 308.049645][T11213] ptrace attach of "./syz-executor exec"[4255] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 308.087071][T11214] loop3: detected capacity change from 0 to 1024 [ 308.193063][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2582'. [ 308.444818][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 308.780434][T11208] loop4: detected capacity change from 0 to 32768 [ 308.844106][T11233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2591'. [ 308.847831][T11208] ialloc: diAlloc returned -5! [ 308.880184][T11210] loop0: detected capacity change from 0 to 32768 [ 308.914083][T11210] XFS (loop0): Mounting V5 Filesystem [ 308.923647][ T106] ERROR: (device loop4): diUpdatePMap: the iag is outside the map [ 308.923647][ T106] [ 308.945754][ T106] ERROR: (device loop4): remounting filesystem as read-only [ 309.020910][T11210] XFS (loop0): Ending clean mount [ 309.030920][T11210] XFS (loop0): Quotacheck needed: Please wait. [ 309.106392][T11210] XFS (loop0): Quotacheck: Done. [ 309.117255][ T4807] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 309.179390][ T4263] XFS (loop0): Unmounting Filesystem [ 309.311917][T11257] loop3: detected capacity change from 0 to 4096 [ 309.327333][ T4807] usb 6-1: Using ep0 maxpacket: 8 [ 309.334906][ T4807] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 309.357419][ T27] audit: type=1800 audit(1748060713.300:100): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2600" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 309.357795][ T4807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.415995][ T4807] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 309.436159][ T4807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.473557][ T4807] usb 6-1: config 0 descriptor?? [ 309.479686][T11235] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 309.625824][T11265] usb usb1: usbfs: process 11265 (syz.2.2605) did not claim interface 0 before use [ 309.762095][T11271] loop2: detected capacity change from 0 to 256 [ 309.805530][T11269] loop4: detected capacity change from 0 to 4096 [ 309.816590][T11271] FAT-fs (loop2): Directory bread(block 64) failed [ 309.826317][T11271] FAT-fs (loop2): Directory bread(block 65) failed [ 309.833561][T11269] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 309.842883][T11271] FAT-fs (loop2): Directory bread(block 66) failed [ 309.864843][T11271] FAT-fs (loop2): Directory bread(block 67) failed [ 309.893316][T11271] FAT-fs (loop2): Directory bread(block 68) failed [ 309.900310][T11275] loop3: detected capacity change from 0 to 8 [ 309.908073][T11271] FAT-fs (loop2): Directory bread(block 69) failed [ 309.914829][T11271] FAT-fs (loop2): Directory bread(block 70) failed [ 309.922638][ T4807] elo 0003:04E7:0030.002D: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 309.937406][T11271] FAT-fs (loop2): Directory bread(block 71) failed [ 309.955099][T11271] FAT-fs (loop2): Directory bread(block 72) failed [ 309.961980][T11271] FAT-fs (loop2): Directory bread(block 73) failed [ 309.963524][T11275] SQUASHFS error: xz decompression failed, data probably corrupt [ 309.987091][T11275] SQUASHFS error: Failed to read block 0x108: -5 [ 310.014104][T11275] SQUASHFS error: Unable to read metadata cache entry [106] [ 310.043184][T11275] SQUASHFS error: Unable to read inode 0x11f [ 310.132065][ T4807] usb 6-1: USB disconnect, device number 19 [ 310.300525][T11286] loop4: detected capacity change from 0 to 1024 [ 310.978767][T11308] loop2: detected capacity change from 0 to 4096 [ 310.995610][T11315] IPVS: ip_vs_add_dest(): server weight less than zero [ 311.166351][T11320] tipc: Enabled bearer , priority 27 [ 311.185936][ T4255] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 311.211781][ T4255] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 311.229935][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2631'. [ 311.439459][T11334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2636'. [ 311.609067][T11341] tipc: Enabling of bearer rejected, failed to enable media [ 312.158900][ T4807] tipc: Node number set to 3306029056 [ 312.740246][T11364] loop4: detected capacity change from 0 to 32768 [ 312.955912][T11368] loop3: detected capacity change from 0 to 40427 [ 312.966754][T11368] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9) [ 312.975239][T11368] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 312.979812][T11368] F2FS-fs (loop3): invalid crc value [ 313.012025][T11368] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 313.108669][T11368] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 313.130201][T11368] F2FS-fs (loop3): Start checkpoint disabled! [ 313.156105][T11368] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 313.167577][T11368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 313.197155][ T4297] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 313.397176][ T4297] usb 3-1: Using ep0 maxpacket: 16 [ 313.404917][ T4297] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 313.434148][ T4297] usb 3-1: config 0 has no interface number 0 [ 313.457018][ T4297] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.488579][ T4297] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 313.529091][ T4297] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 313.548800][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 313.575087][ T4297] usb 3-1: Product: syz [ 313.585115][ T4297] usb 3-1: SerialNumber: syz [ 313.614994][ T4297] usb 3-1: config 0 descriptor?? [ 313.635924][ T4297] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 313.659832][ T4297] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input28 [ 313.840724][T11420] loop4: detected capacity change from 0 to 64 [ 313.860064][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 313.867884][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 313.875151][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 313.883326][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 313.891798][ T4297] usb 3-1: USB disconnect, device number 23 [ 313.909319][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 313.916640][ T4297] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 314.069637][T11423] loop3: detected capacity change from 0 to 4096 [ 314.112794][T11423] NILFS (loop3): invalid segment: Checksum error in segment payload [ 314.129958][T11423] NILFS (loop3): trying rollback from an earlier position [ 314.170960][T11423] NILFS (loop3): recovery complete [ 314.193309][T11429] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.311838][T11419] loop0: detected capacity change from 0 to 32768 [ 314.334186][T11419] XFS (loop0): Mounting V5 Filesystem [ 314.401611][T11419] XFS (loop0): Ending clean mount [ 314.424318][T11419] XFS (loop0): Quotacheck needed: Please wait. [ 314.437239][ T4297] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 314.523579][T11419] XFS (loop0): Quotacheck: Done. [ 314.548139][ T4637] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 314.621401][ T4297] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 314.646476][ T4297] usb 6-1: config 0 interface 0 has no altsetting 0 [ 314.676423][ T4297] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 314.695903][ T4297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.707341][ T4263] XFS (loop0): Unmounting Filesystem [ 314.718174][ T4297] usb 6-1: config 0 descriptor?? [ 314.727587][T11428] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 314.750716][ T4637] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.761098][ T4637] usb 5-1: config 0 has no interface number 0 [ 314.767792][ T4637] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 314.779410][ T4637] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 314.807711][ T4637] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 314.819645][ T4637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.839950][ T4637] usb 5-1: config 0 descriptor?? [ 314.854727][T11431] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.897507][ T4637] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 315.092711][T11453] loop3: detected capacity change from 0 to 512 [ 315.100247][T11445] loop2: detected capacity change from 0 to 32768 [ 315.117989][ T4807] usb 5-1: USB disconnect, device number 20 [ 315.133250][T11453] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 315.147790][ T4297] konepure 0003:1E7D:2DBE.002E: unknown main item tag 0x0 [ 315.155941][ T4297] konepure 0003:1E7D:2DBE.002E: unknown main item tag 0x0 [ 315.164095][T11445] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 315.168252][T11453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802e01c, mo2=0102] [ 315.193961][ T4297] konepure 0003:1E7D:2DBE.002E: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0 [ 315.207124][T11453] EXT4-fs (loop3): orphan cleanup on readonly fs [ 315.218889][T11453] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2690: bg 0: block 361: padding at end of block bitmap is not set [ 315.251267][T11453] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 315.269049][T11453] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2690: invalid indirect mapped block 2185560079 (level 1) [ 315.284961][ T4255] (syz-executor,4255,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 315.293729][T11453] EXT4-fs (loop3): 1 truncate cleaned up [ 315.306732][T11453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 315.324514][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 315.362047][ T4634] usb 6-1: USB disconnect, device number 20 [ 315.377463][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 315.411038][T11460] loop0: detected capacity change from 0 to 256 [ 315.463795][T11460] FAT-fs (loop0): Directory bread(block 64) failed [ 315.476633][T11460] FAT-fs (loop0): Directory bread(block 65) failed [ 315.504972][T11460] FAT-fs (loop0): Directory bread(block 66) failed [ 315.519106][T11460] FAT-fs (loop0): Directory bread(block 67) failed [ 315.551079][T11460] FAT-fs (loop0): Directory bread(block 68) failed [ 315.567212][T11460] FAT-fs (loop0): Directory bread(block 69) failed [ 315.577565][T11460] FAT-fs (loop0): Directory bread(block 70) failed [ 315.595353][T11460] FAT-fs (loop0): Directory bread(block 71) failed [ 315.615744][T11460] FAT-fs (loop0): Directory bread(block 72) failed [ 315.625826][T11460] FAT-fs (loop0): Directory bread(block 73) failed [ 315.832533][T11472] loop2: detected capacity change from 0 to 4096 [ 315.943683][T11476] loop4: detected capacity change from 0 to 1024 [ 315.958110][T11476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.024939][T11476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 316.041334][ T4301] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 316.099367][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 316.100356][T11483] loop2: detected capacity change from 0 to 1024 [ 316.237070][ T4301] usb 4-1: Using ep0 maxpacket: 32 [ 316.244248][ T4301] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.270896][ T4301] usb 4-1: config 0 has no interface number 0 [ 316.309409][ T4301] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.326972][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.335032][ T4301] usb 4-1: Product: syz [ 316.356497][ T4301] usb 4-1: Manufacturer: syz [ 316.367066][ T4301] usb 4-1: SerialNumber: syz [ 316.374201][ T4301] usb 4-1: config 0 descriptor?? [ 316.392878][T11491] loop4: detected capacity change from 0 to 512 [ 316.409432][ T4301] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.425721][T11491] EXT4-fs: Ignoring removed nobh option [ 316.480807][T11491] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.2705: corrupted inode contents [ 316.507700][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.514413][T11491] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #16: comm syz.4.2705: mark_inode_dirty error [ 316.548157][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.554783][T11491] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.2705: corrupted inode contents [ 316.615862][ T4301] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.619916][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.634313][ T4301] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.676183][T11491] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2705: mark_inode_dirty error [ 316.707947][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.714736][T11491] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.2705: corrupted inode contents [ 316.738985][T11499] loop5: detected capacity change from 0 to 4096 [ 316.757455][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.769554][T11491] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 316.780061][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.787875][T11491] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #16: comm syz.4.2705: corrupted inode contents [ 316.838735][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.845337][T11491] EXT4-fs error (device loop4): ext4_truncate:4312: inode #16: comm syz.4.2705: mark_inode_dirty error [ 316.866798][T11474] loop0: detected capacity change from 0 to 40427 [ 316.867419][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.877099][T11474] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 316.895367][T11491] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 316.895487][T11474] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 316.920107][T11491] EXT4-fs (loop4): Remounting filesystem read-only [ 316.937285][T11474] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 316.944808][T11491] EXT4-fs (loop4): 1 truncate cleaned up [ 316.945985][T11474] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 316.962742][ T1191] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 316.974531][T11491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.989855][ T1191] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1 [ 316.991496][T11474] F2FS-fs (loop0): invalid crc value [ 317.011218][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.012207][T11491] ext4 filesystem being mounted at /557/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.036785][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.045562][ T4301] usb 4-1: USB disconnect, device number 22 [ 317.055711][ T1191] EXT4-fs (loop4): Remounting filesystem read-only [ 317.069412][T11474] F2FS-fs (loop0): Found nat_bits in checkpoint [ 317.071930][ T4301] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.114633][ T4301] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.132564][ T4301] quatech2 4-1:0.51: device disconnected [ 317.190443][T11491] EXT4-fs: Cannot change journaled quota options when quota turned on [ 317.214755][T11474] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 317.232530][T11474] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 317.298419][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 317.382559][T11501] loop2: detected capacity change from 0 to 32768 [ 317.401442][ T4263] syz-executor: attempt to access beyond end of device [ 317.401442][ T4263] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 317.443160][T11501] (syz.2.2709,11501,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 317.462179][T11501] (syz.2.2709,11501,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 317.495604][T11501] JBD2: Ignoring recovery information on journal [ 317.575865][T11501] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 317.734351][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 317.915124][T11523] loop4: detected capacity change from 0 to 512 [ 317.964341][T11523] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 317.997288][T11523] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.090307][ T4258] EXT4-fs (loop4): unmounting filesystem. [ 318.248994][T11533] loop0: detected capacity change from 0 to 256 [ 318.383493][T11537] loop4: detected capacity change from 0 to 1024 [ 318.510850][ T4301] hid-generic 0000:0005:0009.002F: unknown main item tag 0x0 [ 318.514056][T11540] loop0: detected capacity change from 0 to 2048 [ 318.549813][ T4301] hid-generic 0000:0005:0009.002F: unknown main item tag 0x0 [ 318.563367][T11540] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 318.577067][ T4301] hid-generic 0000:0005:0009.002F: unknown main item tag 0x0 [ 318.584813][T11540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.611835][ T4301] hid-generic 0000:0005:0009.002F: hidraw0: HID v0.02 Device [syz0] on syz1 [ 318.660457][T11520] loop3: detected capacity change from 0 to 40427 [ 318.711411][T11520] F2FS-fs (loop3): invalid crc value [ 318.738228][T11520] F2FS-fs (loop3): Found nat_bits in checkpoint [ 318.877206][T11520] F2FS-fs (loop3): Start checkpoint disabled! [ 318.927850][T11520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 319.155364][T11567] batman_adv: batadv0: Adding interface: geneve2 [ 319.200100][T11567] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 319.258258][T11570] device batadv0 entered promiscuous mode [ 319.277444][T11570] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 319.296564][T11573] loop2: detected capacity change from 0 to 256 [ 319.306912][T11570] device batadv0 left promiscuous mode [ 319.716133][T11578] loop5: detected capacity change from 0 to 8192 [ 319.739752][T11578] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 319.764776][T11578] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 319.775121][T11578] REISERFS (device loop5): using ordered data mode [ 319.781882][T11578] reiserfs: using flush barriers [ 319.816771][T11578] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 319.841426][T11578] REISERFS (device loop5): checking transaction log (loop5) [ 319.883823][T11578] REISERFS (device loop5): Using r5 hash to sort names [ 319.923688][T11578] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 319.967698][T11578] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 320.076391][T11578] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 320.220426][T11608] loop2: detected capacity change from 0 to 512 [ 320.286333][T11608] EXT4-fs: Ignoring removed nobh option [ 320.299154][T11614] loop0: detected capacity change from 0 to 8 [ 320.387925][T11608] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.2755: corrupted inode contents [ 320.408100][T11619] tipc: Can't bind to reserved service type 2 [ 320.414778][T11621] loop5: detected capacity change from 0 to 256 [ 320.447015][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.489783][T11621] FAT-fs (loop5): Directory bread(block 64) failed [ 320.496381][T11621] FAT-fs (loop5): Directory bread(block 65) failed [ 320.527171][T11621] FAT-fs (loop5): Directory bread(block 66) failed [ 320.534194][T11608] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.2755: mark_inode_dirty error [ 320.545944][T11621] FAT-fs (loop5): Directory bread(block 67) failed [ 320.553713][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.561333][T11621] FAT-fs (loop5): Directory bread(block 68) failed [ 320.563102][T11625] loop3: detected capacity change from 0 to 256 [ 320.568093][T11608] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.2755: corrupted inode contents [ 320.568337][T11621] FAT-fs (loop5): Directory bread(block 69) failed [ 320.568445][T11621] FAT-fs (loop5): Directory bread(block 70) failed [ 320.592622][T11625] exfat: Deprecated parameter 'namecase' [ 320.595018][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.613236][T11625] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 320.620312][T11608] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.2755: mark_inode_dirty error [ 320.649728][T11621] FAT-fs (loop5): Directory bread(block 71) failed [ 320.656706][T11621] FAT-fs (loop5): Directory bread(block 72) failed [ 320.663802][T11621] FAT-fs (loop5): Directory bread(block 73) failed [ 320.687937][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.695298][T11608] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.2755: corrupted inode contents [ 320.723331][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.751015][T11608] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 320.801606][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.812796][T11631] loop3: detected capacity change from 0 to 512 [ 320.832240][T11608] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.2755: corrupted inode contents [ 320.880096][T11631] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2765: inode #1: comm syz.3.2765: iget: illegal inode # [ 320.909135][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.915718][T11608] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.2755: mark_inode_dirty error [ 320.933978][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 320.943078][T11631] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2765: error while reading EA inode 1 err=-117 [ 320.943243][T11608] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 320.977802][T11631] EXT4-fs (loop3): 1 orphan inode deleted [ 320.990382][T11631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.026489][T11608] EXT4-fs (loop2): Remounting filesystem read-only [ 321.046802][T11608] EXT4-fs (loop2): 1 truncate cleaned up [ 321.063333][T11608] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 321.078615][ T33] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 321.104630][T11639] loop5: detected capacity change from 0 to 8192 [ 321.121583][ T33] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:2: Failed to release dquot type 1 [ 321.123558][T11608] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.147283][T11639] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 321.157332][T11644] loop0: detected capacity change from 0 to 64 [ 321.166194][ T33] EXT4-fs (loop2): Remounting filesystem read-only [ 321.177099][T11639] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 321.187831][T11639] REISERFS (device loop5): using ordered data mode [ 321.194378][T11639] reiserfs: using flush barriers [ 321.205876][ T4262] EXT4-fs (loop3): unmounting filesystem. [ 321.227118][T11639] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 321.260391][T11644] syz.0.2770: attempt to access beyond end of device [ 321.260391][T11644] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 321.283725][T11639] REISERFS (device loop5): checking transaction log (loop5) [ 321.284574][T11608] EXT4-fs: Cannot change journaled quota options when quota turned on [ 321.297243][T11646] loop4: detected capacity change from 0 to 64 [ 321.327176][T11644] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 321.351602][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 321.356081][T11639] REISERFS (device loop5): Using r5 hash to sort names [ 321.385837][T11639] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 321.443124][T11639] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 321.448825][T11644] Trying to free block not in datazone [ 321.503504][ T27] audit: type=1804 audit(1748060725.440:101): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2767" name="/newroot/533/bus/file0" dev="loop5" ino=4 res=1 errno=0 [ 321.732773][T11657] loop3: detected capacity change from 0 to 256 [ 321.747840][T11657] exfat: Deprecated parameter 'namecase' [ 321.763900][T11657] exfat: Deprecated parameter 'namecase' [ 321.822161][T11657] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 321.873503][ T27] audit: type=1326 audit(1748060725.810:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 321.943616][ T27] audit: type=1326 audit(1748060725.850:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 322.017016][ T27] audit: type=1326 audit(1748060725.850:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 322.089831][ T27] audit: type=1326 audit(1748060725.850:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 322.117784][ T22] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 322.159646][T11672] loop2: detected capacity change from 0 to 256 [ 322.164991][ T27] audit: type=1326 audit(1748060725.850:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 322.203973][T11672] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 322.217014][ T27] audit: type=1326 audit(1748060725.850:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 322.217061][ T27] audit: type=1326 audit(1748060725.850:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.4.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49ef98e969 code=0x7ffc0000 [ 322.353589][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 322.361076][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 322.412824][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 322.472422][ T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 322.511336][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.547427][ T22] usb 6-1: config 0 descriptor?? [ 322.883133][T11691] loop4: detected capacity change from 0 to 2048 [ 322.968967][ T22] kovaplus 0003:1E7D:2D50.0030: collection stack underflow [ 322.976405][ T22] kovaplus 0003:1E7D:2D50.0030: item 0 0 0 12 parsing failed [ 323.007947][ T22] kovaplus 0003:1E7D:2D50.0030: parse failed [ 323.014117][ T22] kovaplus: probe of 0003:1E7D:2D50.0030 failed with error -22 [ 323.149783][T11700] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 323.167262][T11700] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2798'. [ 323.178699][ T22] usb 6-1: USB disconnect, device number 21 [ 323.331812][T11709] loop2: detected capacity change from 0 to 8 [ 323.342714][T11709] SQUASHFS error: lzo decompression failed, data probably corrupt [ 323.365626][T11709] SQUASHFS error: Failed to read block 0x91: -5 [ 323.380376][T11709] SQUASHFS error: Unable to read metadata cache entry [8f] [ 323.401970][T11709] SQUASHFS error: Unable to read inode 0x11f [ 323.470426][T11705] syz.4.2800 (11705) used greatest stack depth: 18176 bytes left [ 323.605832][T11720] loop4: detected capacity change from 0 to 256 [ 324.055498][T11733] loop4: detected capacity change from 0 to 8192 [ 324.081289][T11733] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 324.104702][T11733] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 324.125565][T11733] REISERFS (device loop4): using ordered data mode [ 324.132644][T11733] reiserfs: using flush barriers [ 324.196609][T11733] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 324.221132][T11733] REISERFS (device loop4): checking transaction log (loop4) [ 324.269628][T11733] REISERFS (device loop4): Using r5 hash to sort names [ 324.285565][T11733] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 324.317347][T11733] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 324.353917][ T22] kernel write not supported for file /1125/attr/prev (pid: 22 comm: kworker/1:0) [ 324.377460][T11749] loop0: detected capacity change from 0 to 16 [ 324.417234][T11749] erofs: (device loop0): mounted with root inode @ nid 36. [ 324.472459][T11749] overlayfs: failed to get redirect (-117) [ 324.701538][T11763] loop4: detected capacity change from 0 to 16 [ 324.727233][T11763] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 325.175893][T11757] loop2: detected capacity change from 0 to 32768 [ 325.201531][T11758] loop5: detected capacity change from 0 to 32768 [ 325.212622][T11757] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2824 (11757) [ 325.254988][T11757] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 325.270541][T11758] XFS (loop5): Mounting V5 Filesystem [ 325.297991][T11757] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 325.326792][T11758] XFS (loop5): Ending clean mount [ 325.327131][T11757] BTRFS info (device loop2): force clearing of disk cache [ 325.335954][T11758] XFS (loop5): Quotacheck needed: Please wait. [ 325.354034][ T4634] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 325.380512][ T4634] XFS (loop5): Unmount and run xfs_repair [ 325.398095][T11757] BTRFS info (device loop2): enabling ssd optimizations [ 325.415310][ T4634] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 325.436036][T11757] BTRFS info (device loop2): using spread ssd allocation scheme [ 325.445491][ T4634] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 325.460828][T11757] BTRFS info (device loop2): using free space tree [ 325.466659][T11769] loop4: detected capacity change from 0 to 32768 [ 325.468915][ T4634] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 325.495234][ T4634] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 325.511826][ T4634] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 325.524798][ T4634] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 325.542311][ T4634] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 325.552974][ T4634] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 325.588107][ T4634] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 325.616316][ T4456] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 325.642452][T11758] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 325.714510][T11772] loop3: detected capacity change from 0 to 32768 [ 325.724906][T11757] BTRFS info (device loop2): rebuilding free space tree [ 325.726635][ T4344] XFS (loop5): Unmounting Filesystem [ 325.789512][ T4255] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 325.811831][T11772] XFS (loop3): Mounting V5 Filesystem [ 325.964143][T11772] XFS (loop3): Starting recovery (logdev: internal) [ 326.196665][T11772] XFS (loop3): Ending recovery (logdev: internal) [ 326.363084][ T4262] XFS (loop3): Unmounting Filesystem [ 326.449663][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2832'. [ 326.846678][ T27] audit: type=1326 audit(1748060730.780:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 326.896688][ T27] audit: type=1326 audit(1748060730.810:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 326.964669][ T27] audit: type=1326 audit(1748060730.820:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 327.031242][ T27] audit: type=1326 audit(1748060730.820:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 327.056099][T11809] loop4: detected capacity change from 0 to 32768 [ 327.076346][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2841'. [ 327.088625][ T27] audit: type=1326 audit(1748060730.820:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 327.129439][ T27] audit: type=1326 audit(1748060730.830:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 327.207034][ T27] audit: type=1326 audit(1748060730.830:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 327.270568][ T27] audit: type=1326 audit(1748060730.830:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11818 comm="syz.5.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982878e969 code=0x7ffc0000 [ 327.539534][T11839] loop3: detected capacity change from 0 to 1024 [ 327.600583][T11838] loop5: detected capacity change from 0 to 2048 [ 327.640012][T11838] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 327.664885][T11838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.913254][ T4298] hid-generic 0000:0005:0009.0031: unknown main item tag 0x0 [ 327.933239][ T4298] hid-generic 0000:0005:0009.0031: unknown main item tag 0x0 [ 327.959268][ T4298] hid-generic 0000:0005:0009.0031: unknown main item tag 0x0 [ 327.999189][ T4298] hid-generic 0000:0005:0009.0031: hidraw0: HID v0.02 Device [syz0] on syz1 [ 328.094468][T11856] device batadv0 entered promiscuous mode [ 328.119116][T11856] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 328.155857][T11856] device batadv0 left promiscuous mode [ 328.180625][T11854] loop3: detected capacity change from 0 to 4096 [ 328.284678][T11860] loop0: detected capacity change from 0 to 2048 [ 328.294596][T11860] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.316062][T11860] NILFS (loop0): mounting unchecked fs [ 328.344533][T11860] NILFS (loop0): recovery complete [ 328.361222][T11861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.689931][T11870] loop2: detected capacity change from 0 to 1024 [ 328.805961][T11873] loop3: detected capacity change from 0 to 2048 [ 328.836497][T11873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.021431][T11879] loop0: detected capacity change from 0 to 512 [ 329.118749][T11879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 329.137284][T11879] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.189815][T11883] loop2: detected capacity change from 0 to 1024 [ 329.267546][T11871] loop5: detected capacity change from 0 to 32768 [ 329.276436][T11871] XFS: ikeep mount option is deprecated. [ 329.282612][T11871] XFS: attr2 mount option is deprecated. [ 329.316775][T11883] hfsplus: bad catalog entry type [ 329.340387][T11871] XFS (loop5): Mounting V5 Filesystem [ 329.358393][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 329.380826][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 329.481969][T11869] loop4: detected capacity change from 0 to 32768 [ 329.501379][T11871] XFS (loop5): Ending clean mount [ 329.530401][T11869] XFS (loop4): Mounting V5 Filesystem [ 329.597847][ T4344] XFS (loop5): Unmounting Filesystem [ 329.617844][ T4298] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 329.658469][T11869] XFS (loop4): Ending clean mount [ 329.711874][T11912] loop2: detected capacity change from 0 to 1024 [ 329.743865][T11869] XFS (loop4): Quotacheck needed: Please wait. [ 329.827286][ T4298] usb 4-1: Using ep0 maxpacket: 16 [ 329.850203][ T4298] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 329.859083][ T4298] usb 4-1: config 0 has no interface number 0 [ 329.865944][ T4298] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 329.884320][ T4298] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 329.896121][T11869] XFS (loop4): Quotacheck: Done. [ 329.908392][ T4298] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 329.936985][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 329.945172][ T4298] usb 4-1: Product: syz [ 329.967041][ T4298] usb 4-1: SerialNumber: syz [ 329.980647][ T4298] usb 4-1: config 0 descriptor?? [ 330.009602][ T4298] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 330.026505][ T4298] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input29 [ 330.068737][ T4258] XFS (loop4): Unmounting Filesystem [ 330.076462][T11916] device batadv0 entered promiscuous mode [ 330.083656][T11916] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 330.113767][T11916] device batadv0 left promiscuous mode [ 330.253572][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 330.254567][ T126] usb 4-1: USB disconnect, device number 23 [ 330.260561][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 330.331908][ T126] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 330.603040][T11914] loop2: detected capacity change from 0 to 40427 [ 330.623512][T11914] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 330.650999][T11914] F2FS-fs (loop2): invalid crc value [ 330.693467][T11914] F2FS-fs (loop2): Found nat_bits in checkpoint [ 330.799125][T11914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 330.923855][ T4255] syz-executor: attempt to access beyond end of device [ 330.923855][ T4255] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 330.973608][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2884'. [ 330.986570][T11935] loop3: detected capacity change from 0 to 8192 [ 331.020414][T11935] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 331.049929][T11935] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 331.067884][T11935] REISERFS (device loop3): using ordered data mode [ 331.074542][T11935] reiserfs: using flush barriers [ 331.102699][T11935] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 331.120857][T11935] REISERFS (device loop3): checking transaction log (loop3) [ 331.153712][T11935] REISERFS (device loop3): Using r5 hash to sort names [ 331.178093][T11935] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 331.244219][T11935] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 331.276160][ T126] hid-generic 0000:0005:0009.0032: unknown main item tag 0x0 [ 331.307786][ T126] hid-generic 0000:0005:0009.0032: unknown main item tag 0x0 [ 331.315247][ T126] hid-generic 0000:0005:0009.0032: unknown main item tag 0x0 [ 331.327877][T11935] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 331.342051][ T126] hid-generic 0000:0005:0009.0032: hidraw0: HID v0.02 Device [syz0] on syz1 [ 331.420892][T11930] loop5: detected capacity change from 0 to 32768 [ 331.436617][T11930] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2881 (11930) [ 331.474869][T11930] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.491666][T11930] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 331.537990][T11930] BTRFS info (device loop5): setting nodatacow, compression disabled [ 331.547063][T11930] BTRFS info (device loop5): enabling auto defrag [ 331.554226][T11930] BTRFS info (device loop5): max_inline at 0 [ 331.560969][T11930] BTRFS info (device loop5): using free space tree [ 331.643811][T11958] loop2: detected capacity change from 0 to 512 [ 331.660711][T11958] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.700348][T11958] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.2890: invalid block [ 331.742621][T11958] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2890: invalid indirect mapped block 10 (level 1) [ 331.775690][T11958] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2890: invalid indirect mapped block 8 (level 1) [ 331.796520][ T4344] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 331.799869][T11958] EXT4-fs (loop2): 1 truncate cleaned up [ 331.821423][T11958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 332.202891][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 332.350355][T11984] loop2: detected capacity change from 0 to 1024 [ 332.412089][ T7384] hid-generic 0000:0005:0009.0033: unknown main item tag 0x0 [ 332.427132][ T7384] hid-generic 0000:0005:0009.0033: unknown main item tag 0x0 [ 332.437335][ T7384] hid-generic 0000:0005:0009.0033: unknown main item tag 0x0 [ 332.446283][ T7384] hid-generic 0000:0005:0009.0033: hidraw0: HID v0.02 Device [syz0] on syz1 [ 332.628343][T11992] loop3: detected capacity change from 0 to 2048 [ 332.655953][T11992] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 332.714868][T11997] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.726179][T11992] syz.3.2900: attempt to access beyond end of device [ 332.726179][T11992] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 332.826179][T11992] syz.3.2900: attempt to access beyond end of device [ 332.826179][T11992] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 332.860470][T11992] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 332.887068][T11992] NILFS (loop3): error -5 reading inode: ino=12 [ 333.112958][T11987] loop5: detected capacity change from 0 to 32768 [ 333.251031][T11987] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 333.282281][T11987] XFS (loop5): Mounting V5 Filesystem [ 333.378377][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 333.427030][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2913'. [ 333.436989][T11987] XFS (loop5): Ending clean mount [ 333.453982][T11987] XFS (loop5): Quotacheck needed: Please wait. [ 333.531421][T11987] XFS (loop5): Quotacheck: Done. [ 333.672868][ T4344] XFS (loop5): Unmounting Filesystem [ 333.904138][T12043] loop0: detected capacity change from 0 to 1024 [ 333.945137][T12043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.977380][T12039] loop3: detected capacity change from 0 to 8192 [ 334.035068][T12043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c019, mo2=0002] [ 334.054617][T12039] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 334.077193][T12039] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 334.086853][T12043] System zones: 0-1, 3-12 [ 334.105221][T12043] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 334.115863][T12039] REISERFS (device loop3): using ordered data mode [ 334.123438][T12039] reiserfs: using flush barriers [ 334.142999][T12039] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 334.165800][T12039] REISERFS (device loop3): checking transaction log (loop3) [ 334.183216][T12039] REISERFS (device loop3): Using r5 hash to sort names [ 334.205299][T12039] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 334.248521][T12056] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #13: comm syz.0.2922: corrupted in-inode xattr [ 334.277014][T12039] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 334.317260][T12056] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2748: inode #13: comm syz.0.2922: corrupted in-inode xattr [ 334.534654][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 334.656297][T12068] loop4: detected capacity change from 0 to 256 [ 334.672261][T12068] exfat: Deprecated parameter 'namecase' [ 334.703923][T12068] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 334.799877][T12070] loop0: detected capacity change from 0 to 4096 [ 334.828550][T12070] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 334.943194][T12070] ntfs3: loop0: ino=1c, "file0" attr_set_size [ 334.979936][T12070] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 335.133157][T12074] infiniband syz!: set active [ 335.138987][T12074] infiniband syz!: added team_slave_0 [ 335.167728][ T4263] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 335.177024][T12080] loop5: detected capacity change from 0 to 8 [ 335.187977][ T4263] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 335.224338][T12082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2937'. [ 335.239589][T12080] SQUASHFS error: Unable to read inode 0x87 [ 335.411792][T12074] RDS/IB: syz!: added [ 335.431110][T12074] smc: adding ib device syz! with port count 1 [ 335.467379][T12074] smc: ib device syz! port 1 has pnetid [ 335.508902][T12085] can: request_module (can-proto-0) failed. [ 335.825282][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2943'. [ 336.143606][T12108] loop0: detected capacity change from 0 to 256 [ 336.198346][T12108] FAT-fs (loop0): Directory bread(block 64) failed [ 336.205101][T12108] FAT-fs (loop0): Directory bread(block 65) failed [ 336.232372][T12108] FAT-fs (loop0): Directory bread(block 66) failed [ 336.267005][T12108] FAT-fs (loop0): Directory bread(block 67) failed [ 336.289668][T12108] FAT-fs (loop0): Directory bread(block 68) failed [ 336.316712][T12108] FAT-fs (loop0): Directory bread(block 69) failed [ 336.331078][T12108] FAT-fs (loop0): Directory bread(block 70) failed [ 336.351345][T12108] FAT-fs (loop0): Directory bread(block 71) failed [ 336.375699][T12108] FAT-fs (loop0): Directory bread(block 72) failed [ 336.399926][T12108] FAT-fs (loop0): Directory bread(block 73) failed [ 336.401741][T12093] loop5: detected capacity change from 0 to 32768 [ 336.439448][T12093] (syz.5.2939,12093,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 336.483652][T12093] (syz.5.2939,12093,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 336.560851][T12093] JBD2: Ignoring recovery information on journal [ 336.732563][T12093] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 336.778846][T12125] loop0: detected capacity change from 0 to 256 [ 336.785948][T12125] exfat: Deprecated parameter 'utf8' [ 336.823966][T12125] exfat: Deprecated parameter 'utf8' [ 336.879649][T12125] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 337.022379][ T4344] ocfs2: Unmounting device (7,5) on (node local) [ 337.031094][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2960'. [ 337.090717][T12135] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2960'. [ 337.121119][T12135] Zero length message leads to an empty skb [ 337.397124][T12147] loop3: detected capacity change from 0 to 64 [ 337.945745][T12163] loop5: detected capacity change from 0 to 1024 [ 337.968553][T12163] EXT4-fs: Ignoring removed orlov option [ 337.994621][T12163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.025629][T12149] loop0: detected capacity change from 0 to 32768 [ 338.041540][T12163] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 338.067862][ T4264] Bluetooth: hci0: unexpected event for opcode 0x080c [ 338.090570][T12149] XFS (loop0): Mounting V5 Filesystem [ 338.153640][ T4344] EXT4-fs (loop5): unmounting filesystem. [ 338.158764][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 338.256489][T12149] XFS (loop0): Ending clean mount [ 338.276349][T12149] XFS (loop0): Quotacheck needed: Please wait. [ 338.353065][T12149] XFS (loop0): Quotacheck: Done. [ 338.540215][ T4263] XFS (loop0): Unmounting Filesystem [ 338.669194][T12200] netlink: 328 bytes leftover after parsing attributes in process `syz.3.2985'. [ 338.683728][T12202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2986'. [ 338.697432][T12202] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2986'. [ 338.730968][T12202] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2986'. [ 338.903213][T12206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2989'. [ 338.914844][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 338.927086][ T4332] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 339.127157][ T4332] usb 6-1: Using ep0 maxpacket: 32 [ 339.134659][ T4332] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.153000][ T4332] usb 6-1: config 0 has no interface number 0 [ 339.162034][ T4332] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 339.181572][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.207033][ T4332] usb 6-1: Product: syz [ 339.212245][ T4332] usb 6-1: Manufacturer: syz [ 339.222106][ T4332] usb 6-1: SerialNumber: syz [ 339.235010][ T4332] usb 6-1: config 0 descriptor?? [ 339.250086][ T4332] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 339.262494][ T4332] usb 6-1: selecting invalid altsetting 1 [ 339.269267][ T4332] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 339.279301][ T4332] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.291348][ T4332] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 339.300824][ T4332] usb 6-1: media controller created [ 339.327691][ T4332] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.358346][T12224] loop2: detected capacity change from 0 to 164 [ 339.378305][T12224] Unable to read rock-ridge attributes [ 339.381436][T12223] loop0: detected capacity change from 0 to 2048 [ 339.399425][ T7384] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 339.401996][T12224] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 339.433737][T12223] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 339.447444][ T4802] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 339.544577][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 339.608799][ T7384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.632950][ T7384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.641072][ T4802] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 339.656574][ T7384] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 339.663452][ T4802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.678386][ T7384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.689824][ T7384] usb 5-1: config 0 descriptor?? [ 339.697325][ T4802] usb 4-1: config 0 descriptor?? [ 339.718388][ T4802] cp210x 4-1:0.0: cp210x converter detected [ 340.122396][ T4802] usb 4-1: cp210x converter now attached to ttyUSB0 [ 340.153575][T12230] loop2: detected capacity change from 0 to 32768 [ 340.173582][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3004'. [ 340.211444][T12230] XFS (loop2): Mounting V5 Filesystem [ 340.256270][T12230] XFS (loop2): Ending clean mount [ 340.314754][ T7384] hid-led: probe of 0003:1D34:000A.0034 failed with error -71 [ 340.332871][ T7384] usb 5-1: USB disconnect, device number 21 [ 340.346011][ T4255] XFS (loop2): Unmounting Filesystem [ 340.352160][ T951] usb 4-1: USB disconnect, device number 24 [ 340.365738][ T951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.406421][ T951] cp210x 4-1:0.0: device disconnected [ 340.459877][ T4332] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 340.474471][ T4332] zl10353_read_register: readreg error (reg=127, ret==-110) [ 340.508345][T12198] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 340.593407][ T4332] usb 6-1: USB disconnect, device number 22 [ 340.786238][T12258] loop0: detected capacity change from 0 to 4096 [ 340.799830][T12258] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 341.177010][ T4332] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 341.182562][T12274] loop3: detected capacity change from 0 to 256 [ 341.213202][T12274] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.257190][T12274] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 341.295513][T12274] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 341.370216][ T4332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.388537][ T4332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.407261][ T4332] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.428987][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.453810][ T4332] hub 3-1:1.0: bad descriptor, ignoring hub [ 341.476936][ T4332] hub: probe of 3-1:1.0 failed with error -5 [ 341.634292][T12268] loop4: detected capacity change from 0 to 32768 [ 341.668410][T12268] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3014 (12268) [ 341.704177][T12268] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 341.725162][T12268] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 341.757653][T12268] BTRFS info (device loop4): force clearing of disk cache [ 341.764854][T12268] BTRFS info (device loop4): enabling ssd optimizations [ 341.802531][T12268] BTRFS info (device loop4): using spread ssd allocation scheme [ 341.831042][T12268] BTRFS info (device loop4): using free space tree [ 341.954797][T12295] mkiss: ax0: crc mode is auto. [ 342.036748][T12268] BTRFS info (device loop4): rebuilding free space tree [ 342.098059][ T4332] usb 3-1: reset low-speed USB device number 24 using dummy_hcd [ 342.106835][T12283] loop5: detected capacity change from 0 to 32768 [ 342.185245][T12283] XFS (loop5): Mounting V5 Filesystem [ 342.222476][ T4258] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 342.373060][T12283] XFS (loop5): Starting recovery (logdev: internal) [ 342.571243][T12283] XFS (loop5): Ending recovery (logdev: internal) [ 342.705626][ T4344] XFS (loop5): Unmounting Filesystem [ 342.716981][ T4811] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 342.869973][ T4332] usb 3-1: USB disconnect, device number 24 [ 342.912408][ T4811] usb 4-1: Using ep0 maxpacket: 16 [ 342.919754][ T4811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.952154][ T4811] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 342.971723][ T4811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.015661][ T4811] usb 4-1: config 0 descriptor?? [ 343.153219][T12331] sp0: Synchronizing with TNC [ 343.183554][T12330] [U] è [ 343.430948][ T4811] hid-multitouch 0003:1FD2:6007.0035: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 343.634530][ T5619] usb 4-1: USB disconnect, device number 25 [ 343.842213][T12355] loop5: detected capacity change from 0 to 1024 [ 343.857952][T12355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.905426][T12355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c019, mo2=0002] [ 343.924029][T12355] System zones: 0-1, 3-12 [ 343.935123][T12355] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 343.978490][T12355] EXT4-fs error (device loop5): ext4_xattr_ibody_get:603: inode #13: comm syz.5.3044: corrupted in-inode xattr [ 344.012347][T12355] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2748: inode #13: comm syz.5.3044: corrupted in-inode xattr [ 344.013368][T12344] loop4: detected capacity change from 0 to 32768 [ 344.098268][ T4344] EXT4-fs (loop5): unmounting filesystem. [ 344.120979][T12362] loop2: detected capacity change from 0 to 1024 [ 344.180117][T12362] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 344.180463][T12366] netlink: 'syz.5.3046': attribute type 62 has an invalid length. [ 344.197299][T12362] ext4 filesystem being mounted at /634/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.325674][T12362] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3045: bg 0: block 409: padding at end of block bitmap is not set [ 344.358666][T12362] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 344.400676][T12362] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #15: comm syz.2.3045: corrupted xattr block 128 [ 344.425804][T12362] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 344.490649][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 344.571788][T12377] loop3: detected capacity change from 0 to 256 [ 344.611986][T12377] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 344.819389][T12388] loop5: detected capacity change from 0 to 4096 [ 344.827162][T12388] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 344.860545][T12388] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 344.871928][T12388] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 344.885347][T12388] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 344.902507][T12388] ntfs: volume version 3.1. [ 344.971571][ T4344] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 345.182857][T12389] loop3: detected capacity change from 0 to 32768 [ 345.197831][T12389] XFS: ikeep mount option is deprecated. [ 345.203611][T12389] XFS: attr2 mount option is deprecated. [ 345.267658][T12389] XFS (loop3): Mounting V5 Filesystem [ 345.328927][T12391] loop5: detected capacity change from 0 to 32768 [ 345.348061][T12391] XFS (loop5): Mounting V5 Filesystem [ 345.371177][T12389] XFS (loop3): Ending clean mount [ 345.414350][T12391] XFS (loop5): Ending clean mount [ 345.421793][T12391] XFS (loop5): Quotacheck needed: Please wait. [ 345.481421][ T4262] XFS (loop3): Unmounting Filesystem [ 345.492961][T12391] XFS (loop5): Quotacheck: Done. [ 345.667340][ T4344] XFS (loop5): Unmounting Filesystem [ 345.925024][T12417] loop2: detected capacity change from 0 to 1024 [ 346.612818][T12421] loop4: detected capacity change from 0 to 32768 [ 346.652746][T12421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3065 (12421) [ 346.709578][T12421] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 346.737147][T12421] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 346.746273][T12421] BTRFS info (device loop4): setting nodatacow, compression disabled [ 346.788443][T12421] BTRFS info (device loop4): enabling auto defrag [ 346.815353][T12421] BTRFS info (device loop4): max_inline at 0 [ 346.826981][T12421] BTRFS info (device loop4): using free space tree [ 346.841309][T12443] loop3: detected capacity change from 0 to 1024 [ 346.864956][T12449] loop0: detected capacity change from 0 to 1024 [ 347.074529][ T4262] [ 347.076913][ T4262] ============================================ [ 347.083087][ T4262] WARNING: possible recursive locking detected [ 347.089270][ T4262] 6.1.140-syzkaller #0 Not tainted [ 347.094401][ T4262] -------------------------------------------- [ 347.100568][ T4262] syz-executor/4262 is trying to acquire lock: [ 347.106710][ T4262] ffff888077c8b048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x39b/0x1530 [ 347.117773][ T4262] [ 347.117773][ T4262] but task is already holding lock: [ 347.120475][T12431] loop2: detected capacity change from 0 to 32768 [ 347.125132][ T4262] ffff888079b96d08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 347.142739][ T4262] [ 347.142739][ T4262] other info that might help us debug this: [ 347.150808][ T4262] Possible unsafe locking scenario: [ 347.150808][ T4262] [ 347.158291][ T4262] CPU0 [ 347.161567][ T4262] ---- [ 347.164842][ T4262] lock(&HFSPLUS_I(inode)->extents_lock); [ 347.170648][ T4262] lock(&HFSPLUS_I(inode)->extents_lock); [ 347.176457][ T4262] [ 347.176457][ T4262] *** DEADLOCK *** [ 347.176457][ T4262] [ 347.184599][ T4262] May be due to missing lock nesting notation [ 347.184599][ T4262] [ 347.192912][ T4262] 6 locks held by syz-executor/4262: [ 347.198201][ T4262] #0: ffff888075cdc460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 347.207455][ T4262] #1: ffff888077c8e180 (&type->i_mutex_dir_key#16/1){+.+.}-{3:3}, at: do_unlinkat+0x178/0x560 [ 347.217835][ T4262] #2: ffff888079b96f00 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_unlink+0xee/0x600 [ 347.228050][ T4262] #3: ffff88807910c198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x15a/0x760 [ 347.237589][ T4262] #4: ffff888079b96d08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 347.249202][ T4262] #5: ffff88807910c0f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbf/0x4b0 [ 347.259226][ T4262] [ 347.259226][ T4262] stack backtrace: [ 347.265174][ T4262] CPU: 1 PID: 4262 Comm: syz-executor Not tainted 6.1.140-syzkaller #0 [ 347.273413][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.283478][ T4262] Call Trace: [ 347.286760][ T4262] [ 347.289788][ T4262] dump_stack_lvl+0x168/0x22e [ 347.294495][ T4262] ? show_regs_print_info+0x12/0x12 [ 347.299718][ T4262] ? load_image+0x3b0/0x3b0 [ 347.304247][ T4262] __lock_acquire+0x122f/0x7c50 [ 347.309125][ T4262] ? check_path+0x21/0x40 [ 347.313475][ T4262] ? check_noncircular+0x16f/0x310 [ 347.318601][ T4262] ? verify_lock_unused+0x140/0x140 [ 347.323819][ T4262] ? lockdep_lock+0xdc/0x1e0 [ 347.328441][ T4262] ? lockdep_unlock+0x133/0x2d0 [ 347.333309][ T4262] ? lockdep_lock+0x1e0/0x1e0 [ 347.337994][ T4262] ? _find_first_zero_bit+0xcf/0x100 [ 347.343291][ T4262] lock_acquire+0x1b4/0x490 [ 347.347802][ T4262] ? hfsplus_get_block+0x39b/0x1530 [ 347.353114][ T4262] ? __might_sleep+0xd0/0xd0 [ 347.357714][ T4262] ? read_lock_is_recursive+0x10/0x10 [ 347.363111][ T4262] ? verify_lock_unused+0x140/0x140 [ 347.368438][ T4262] __mutex_lock+0x120/0xaf0 [ 347.372969][ T4262] ? hfsplus_get_block+0x39b/0x1530 [ 347.377267][T12431] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 347.378172][ T4262] ? memset+0x1e/0x40 [ 347.378198][ T4262] ? hfsplus_get_block+0x39b/0x1530 [ 347.395382][ T4262] ? mutex_lock_nested+0x10/0x10 [ 347.400344][ T4262] hfsplus_get_block+0x39b/0x1530 [ 347.405379][ T4262] ? alloc_buffer_head+0xd4/0x100 [ 347.410511][ T4262] ? hfsplus_ext_write_extent+0x200/0x200 [ 347.416238][ T4262] ? create_empty_buffers+0x59e/0x7a0 [ 347.421631][ T4262] ? verify_lock_unused+0x140/0x140 [ 347.426849][ T4262] ? do_raw_spin_unlock+0x11d/0x230 [ 347.432282][ T4262] ? create_page_buffers+0x24f/0x4a0 [ 347.437606][ T4262] block_read_full_folio+0x3c9/0xed0 [ 347.442922][ T4262] ? _raw_spin_unlock_irq+0x1f/0x40 [ 347.448222][ T4262] ? hfsplus_ext_write_extent+0x200/0x200 [ 347.453956][ T4262] ? block_is_partially_uptodate+0x5f0/0x5f0 [ 347.460146][ T4262] ? __lock_acquire+0x7c50/0x7c50 [ 347.465276][ T4262] ? folio_put+0xd0/0xd0 [ 347.469547][ T4262] ? filemap_alloc_folio+0xdb/0x460 [ 347.474869][ T4262] filemap_read_folio+0x160/0x760 [ 347.480084][ T4262] ? folio_batch_add_and_move+0x14a/0x250 [ 347.485860][ T4262] ? hfsplus_writepage+0x30/0x30 [ 347.490833][ T4262] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 347.496605][ T4262] ? hfsplus_block_free+0xbf/0x4b0 [ 347.501763][ T4262] do_read_cache_folio+0x2a0/0x760 [ 347.506924][ T4262] ? hfsplus_writepage+0x30/0x30 [ 347.511870][ T4262] do_read_cache_page+0x32/0x220 [ 347.516828][ T4262] hfsplus_block_free+0x128/0x4b0 [ 347.521969][ T4262] ? hfsplus_find_init+0x85/0x1c0 [ 347.527017][ T4262] hfsplus_free_extents+0x176/0xac0 [ 347.532270][ T4262] hfsplus_file_truncate+0x731/0xb30 [ 347.537629][ T4262] ? hfsplus_add_extent+0x890/0x890 [ 347.542925][ T4262] ? hfsplus_unlink+0x15a/0x760 [ 347.547822][ T4262] hfsplus_delete_inode+0x17c/0x230 [ 347.553047][ T4262] hfsplus_unlink+0x4c0/0x760 [ 347.557759][ T4262] ? hfsplus_link+0x700/0x700 [ 347.562453][ T4262] ? preempt_count_add+0x8d/0x190 [ 347.567830][ T4262] ? rwsem_write_trylock+0x12f/0x1b0 [ 347.573128][ T4262] ? bpf_lsm_inode_unlink+0x5/0x10 [ 347.578320][ T4262] ? security_inode_unlink+0xcb/0x110 [ 347.578840][T12431] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 347.583836][ T4262] vfs_unlink+0x385/0x600 [ 347.583874][ T4262] do_unlinkat+0x324/0x560 [ 347.601591][ T4262] ? fsnotify_link_count+0xf0/0xf0 [ 347.606726][ T4262] ? getname_flags+0x206/0x500 [ 347.611508][ T4262] __x64_sys_unlink+0x45/0x50 [ 347.616284][ T4262] do_syscall_64+0x4c/0xa0 [ 347.620737][ T4262] ? clear_bhb_loop+0x60/0xb0 [ 347.625435][ T4262] ? clear_bhb_loop+0x60/0xb0 [ 347.630119][ T4262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.636120][ T4262] RIP: 0033:0x7efc04b8df17 [ 347.640712][ T4262] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.660567][ T4262] RSP: 002b:00007ffc436b9d18 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 347.668994][ T4262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc04b8df17 [ 347.676977][ T4262] RDX: 00007ffc436b9d40 RSI: 00007ffc436b9dd0 RDI: 00007ffc436b9dd0 [ 347.684978][ T4262] RBP: 00007ffc436b9dd0 R08: 0000000000000000 R09: 0000000000000000 [ 347.693126][ T4262] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc436baec0 [ 347.701123][ T4262] R13: 00007efc04c1089d R14: 0000000000054b1b R15: 00007ffc436bbf90 [ 347.709107][ T4262] [ 347.723694][ T4262] hfsplus: unable to mark blocks free: error -5 [ 347.732739][ T4262] hfsplus: can't free extent [ 347.748703][ T4262] hfsplus: unable to mark blocks free: error -5 [ 347.755012][ T4262] hfsplus: can't free extent [ 347.762837][ T4262] hfsplus: unable to mark blocks free: error -5 [ 347.770716][ T4262] hfsplus: can't free extent [ 347.776671][ T4255] ocfs2: Unmounting device (7,2) on (node local) [ 347.776958][ T4262] hfsplus: invalid extended attribute record [ 347.789953][ T4262] hfsplus: unable to mark blocks free: error -5 [ 347.796419][ T4262] hfsplus: can't free extent [ 347.802875][ T4262] hfsplus: unable to mark blocks free: error -5 [ 347.804113][ T4258] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.812727][ T4262] hfsplus: can't free extent