last executing test programs: 3.486084855s ago: executing program 3 (id=1748): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) fcntl$setlease(r0, 0x400, 0x1) 2.609666014s ago: executing program 3 (id=1765): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xfe, 0x49e, &(0x7f0000000480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280), 0x2, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x15, 0x7, 0x40, "c4f061ed582cb94ddd33597818679634"}, 0x15, 0x2) 2.573755488s ago: executing program 1 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c0000000600190009000000050006000900000006000400f400000006000c0008000000060016"], 0x80}}, 0x0) 2.413402414s ago: executing program 1 (id=1768): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3b3, &(0x7f00000003c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl(r1, 0x1, &(0x7f0000000240)) 2.199799966s ago: executing program 3 (id=1772): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) recvfrom(r0, 0x0, 0xffffffffffffffe1, 0x0, &(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x3}}, 0x80) 2.115388734s ago: executing program 1 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000d40)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) 2.075073499s ago: executing program 3 (id=1775): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000008c0)=""/34, 0x22}], 0x1}, 0x12042) 2.005202096s ago: executing program 3 (id=1777): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/241) 1.914604035s ago: executing program 0 (id=1778): r0 = syz_io_uring_setup(0x2d77, &(0x7f0000000240)={0x0, 0x8f9d, 0x0, 0x2000002, 0x13b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 1.796605317s ago: executing program 0 (id=1779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x1, &(0x7f0000000140)=0x3}) 1.793678557s ago: executing program 1 (id=1790): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000002500)=ANY=[], 0x1, 0xa8f, &(0x7f0000001400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) getdents64(r0, &(0x7f0000000780)=""/44, 0x2c) 1.635629123s ago: executing program 0 (id=1782): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000940)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000980)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000009c0)=0xc) 1.544347253s ago: executing program 1 (id=1784): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4, 0x2, {0x6, 0x4}}}]}, 0x38}}, 0x0) 1.504845136s ago: executing program 0 (id=1785): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) 1.413661856s ago: executing program 0 (id=1786): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) recvfrom(r0, 0x0, 0xffffffffffffffe1, 0x0, &(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x3}}, 0x80) 1.357783311s ago: executing program 1 (id=1798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x14c98, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.330135894s ago: executing program 4 (id=1789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000007b80bdb2aa1b627d163b734a83dc77f4955103decba75e6eca0fb2577d7264d2fdf068b53ef891d2de2010000000000000056187b35709857568cb174c08c91a22106f531506ccc"], &(0x7f0000000000)='GPL\x00'}, 0x80) unshare(0x22060480) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000230018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.264999401s ago: executing program 2 (id=1792): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000680)="02155e65", 0x4, 0x2) 1.230296835s ago: executing program 4 (id=1793): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000808, &(0x7f00000000c0)=ANY=[@ANYBLOB='nls=cp936,part=0x0000000000000008,part=0x0000000000000000000000005,\x00'], 0x21, 0x5f9, &(0x7f0000000680)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f0000000240)) 1.218315266s ago: executing program 2 (id=1794): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}, 0x0, 0x0, 0x1}) 1.134148824s ago: executing program 4 (id=1795): ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x4, 0xcd06, 0x2, [0xffffffff, 0x5, 0x9, 0xb, 0xe16, 0x1]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) 1.0779555s ago: executing program 4 (id=1796): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000580)={0x0, 0x7470, 0x1, 0x8, 0xa0}, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000b40)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x0, 0x1}, 0x20) 1.005513107s ago: executing program 2 (id=1797): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x0, 0x3, 0x0, 0x0, {{0x153, 0x8, 0x6}, {0x2, 0x3}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x490b0}, 0x0) 1.004006568s ago: executing program 4 (id=1808): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xfe, 0x49e, &(0x7f0000000480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280), 0x2, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x15, 0x7, 0x40, "c4f061ed582cb94ddd33597818679634"}, 0x15, 0x2) 893.152789ms ago: executing program 2 (id=1799): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") 891.862189ms ago: executing program 2 (id=1800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 543.650045ms ago: executing program 0 (id=1801): r0 = socket$kcm(0x11, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc", 0x34}, {&(0x7f00000017c0)="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", 0xf26}], 0x2}, 0x2404c0d0) 543.509714ms ago: executing program 2 (id=1802): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setresuid(0xee01, 0xee00, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', 0x0, 0x0) 543.384165ms ago: executing program 4 (id=1803): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 3 (id=1804): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x8) write(r0, &(0x7f0000000400)='address_group grp1 0.0,0.0-255.255.255.255\naddress_groux grp1!::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff\nacl_group stream bind @grp1 0-655;5\n', 0x8d) kernel console output (not intermixed with test programs): [ T5694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.628503][ T5673] EXT4-fs (loop1): 1 orphan inode deleted [ 107.637898][ T5673] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 107.663063][ T155] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.700512][ T155] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 107.722003][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 107.848634][ T155] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.882158][ T155] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 107.897905][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 107.931713][ T4191] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 107.946747][ T4191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 107.970833][ T4191] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 108.018298][ T5719] netlink: 'syz.4.577': attribute type 12 has an invalid length. [ 108.043136][ T5719] netlink: 'syz.4.577': attribute type 29 has an invalid length. [ 108.077435][ T5719] netlink: 148 bytes leftover after parsing attributes in process `syz.4.577'. [ 108.117927][ T5719] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 108.135591][ T5719] netlink: 'syz.4.577': attribute type 2 has an invalid length. [ 108.267547][ T5704] loop3: detected capacity change from 0 to 32768 [ 108.382069][ T26] audit: type=1800 audit(1793122803.931:14): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.568" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 108.420559][ T5742] loop1: detected capacity change from 0 to 64 [ 108.868984][ T5735] loop0: detected capacity change from 0 to 32768 [ 108.899505][ T5735] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.586 (5735) [ 108.943003][ T5735] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 108.945298][ T5765] netlink: 'syz.2.598': attribute type 6 has an invalid length. [ 108.960690][ T5735] BTRFS info (device loop0): enabling ssd optimizations [ 108.994154][ T5735] BTRFS info (device loop0): not using ssd optimizations [ 109.020911][ T5735] BTRFS info (device loop0): turning off barriers [ 109.039472][ T5735] BTRFS info (device loop0): use no compression [ 109.055095][ T5735] BTRFS info (device loop0): using free space tree [ 109.075855][ T5735] BTRFS info (device loop0): has skinny extents [ 109.264167][ T5798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.520646][ T5768] loop3: detected capacity change from 0 to 32768 [ 109.706519][ T5768] XFS (loop3): Mounting V5 Filesystem [ 109.823433][ T5768] XFS (loop3): Ending clean mount [ 109.848212][ T5768] XFS (loop3): Quotacheck needed: Please wait. [ 109.891129][ T5833] loop0: detected capacity change from 0 to 64 [ 109.943831][ T5768] XFS (loop3): Quotacheck: Done. [ 109.967781][ T5832] loop2: detected capacity change from 0 to 4096 [ 110.043387][ T5838] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.171820][ T5832] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 110.217879][ T4263] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.234542][ T4197] XFS (loop3): Unmounting Filesystem [ 110.467798][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 110.593214][ T4263] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.622577][ T4263] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.652933][ T4263] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.678047][ T5859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.681551][ T4263] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.735256][ T4263] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.752848][ T4263] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 110.777512][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.813570][ T4263] usb 5-1: config 0 descriptor?? [ 110.999273][ T5878] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.085522][ T5878] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.113867][ T5876] hfsplus: xattr searching failed [ 111.126779][ T5876] hfsplus: xattr searching failed [ 111.127546][ T5878] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 111.136376][ T5876] hfsplus: xattr searching failed [ 111.186543][ T1241] hfsplus: bad catalog file entry [ 111.203148][ T1241] hfsplus: b-tree write err: -5, ino 3 [ 111.300246][ T4263] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 111.338078][ T4263] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 111.360174][ T4263] hid-thrustmaster 0003:044F:B65D.0003: item fetching failed at offset 2/5 [ 111.373052][ T5894] input: syz1 as /devices/virtual/input/input14 [ 111.386111][ T4263] hid-thrustmaster 0003:044F:B65D.0003: parse failed with error -22 [ 111.394949][ T4263] hid-thrustmaster: probe of 0003:044F:B65D.0003 failed with error -22 [ 111.549461][ T4427] usb 5-1: USB disconnect, device number 3 [ 111.799039][ T5892] F2FS-fs (loop1): invalid crc value [ 111.852477][ T5892] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.991167][ T5892] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.028183][ T5923] program syz.2.657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.100408][ T5899] set_capacity_and_notify: 3 callbacks suppressed [ 112.100424][ T5899] loop3: detected capacity change from 0 to 40427 [ 112.144367][ T5930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.144607][ T5899] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 112.228983][ T5899] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 112.243599][ T4191] attempt to access beyond end of device [ 112.243599][ T4191] loop1: rw=2049, want=45104, limit=40427 [ 112.268169][ T5935] loop4: detected capacity change from 0 to 1024 [ 112.290182][ T5899] F2FS-fs (loop3): invalid crc value [ 112.362102][ T5899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.476957][ T5899] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 112.484538][ T5899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.597735][ T4786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.837911][ T4786] usb 3-1: Using ep0 maxpacket: 32 [ 112.960999][ T4786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.996156][ T4786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.010715][ T5964] loop0: detected capacity change from 0 to 4096 [ 113.018751][ T4786] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.060867][ T4786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.089162][ T4786] usb 3-1: config 0 descriptor?? [ 113.097928][ T5967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.123963][ T5964] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 113.128921][ T4786] hub 3-1:0.0: USB hub found [ 113.137786][ T4254] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.341985][ T5962] loop4: detected capacity change from 0 to 32768 [ 113.409669][ T5962] XFS (loop4): Mounting V5 Filesystem [ 113.419762][ T4254] usb 2-1: Using ep0 maxpacket: 32 [ 113.427920][ T4786] hub 3-1:0.0: 3 ports detected [ 113.464429][ T5962] XFS (loop4): Ending clean mount [ 113.474030][ T5962] XFS (loop4): Quotacheck needed: Please wait. [ 113.522916][ T5962] XFS (loop4): Quotacheck: Done. [ 113.557829][ T4254] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.569118][ T4254] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.582730][ T4254] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.592863][ T4254] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 113.606503][ T4254] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.613490][ T4254] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 113.623942][ T4254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.635795][ T4254] usb 2-1: config 0 descriptor?? [ 113.637904][ T4786] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 113.658319][ T4786] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 113.761063][ T4190] XFS (loop4): Unmounting Filesystem [ 113.768073][ T4786] usbhid 3-1:0.0: can't add hid device: -71 [ 113.774081][ T4786] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.820733][ T4786] usb 3-1: USB disconnect, device number 3 [ 114.121839][ T5999] netlink: 260 bytes leftover after parsing attributes in process `syz.0.686'. [ 114.133906][ T4254] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 114.154458][ T4254] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 114.166321][ T6003] program syz.0.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.167947][ T4254] hid-thrustmaster 0003:044F:B65D.0004: item fetching failed at offset 2/5 [ 114.191153][ T4254] hid-thrustmaster 0003:044F:B65D.0004: parse failed with error -22 [ 114.201875][ T4254] hid-thrustmaster: probe of 0003:044F:B65D.0004 failed with error -22 [ 114.275544][ T6008] loop4: detected capacity change from 0 to 128 [ 114.378780][ T6008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.382477][ T4254] usb 2-1: USB disconnect, device number 5 [ 114.433554][ T6008] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.466034][ T6020] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 114.491116][ T6008] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 114.500355][ T6027] loop3: detected capacity change from 0 to 2048 [ 114.510858][ T6020] netlink: 17 bytes leftover after parsing attributes in process `syz.2.696'. [ 114.571771][ T6027] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 114.627212][ T6033] loop2: detected capacity change from 0 to 512 [ 114.646842][ T6037] loop0: detected capacity change from 0 to 128 [ 114.704184][ T6037] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.729863][ T6037] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.819872][ T6033] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 114.848541][ T6033] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.871741][ T6033] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.703: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 114.887233][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 114.905189][ T6033] EXT4-fs (loop2): Remounting filesystem read-only [ 114.920876][ T6033] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.703: corrupted inode contents [ 114.972216][ T6033] EXT4-fs (loop2): Remounting filesystem read-only [ 114.979491][ T6033] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.703: mark_inode_dirty error [ 114.997289][ T6033] EXT4-fs (loop2): Remounting filesystem read-only [ 115.004430][ T6033] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.703: corrupted inode contents [ 115.053918][ T6033] EXT4-fs (loop2): Remounting filesystem read-only [ 115.087980][ T6033] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.703: mark_inode_dirty error [ 115.139112][ T6033] EXT4-fs (loop2): Remounting filesystem read-only [ 115.144104][ T6054] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.213757][ T6058] netlink: 'syz.1.713': attribute type 4 has an invalid length. [ 115.242958][ T6058] netlink: 17 bytes leftover after parsing attributes in process `syz.1.713'. [ 115.340753][ T6070] loop2: detected capacity change from 0 to 164 [ 115.600911][ T6066] loop4: detected capacity change from 0 to 32768 [ 115.650044][ T6066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.716 (6066) [ 115.693172][ T6066] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 115.713382][ T6066] BTRFS info (device loop4): using free space tree [ 115.728354][ T6066] BTRFS info (device loop4): has skinny extents [ 115.860647][ T6066] BTRFS info (device loop4): enabling ssd optimizations [ 115.871928][ T6073] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 115.887707][ T6073] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 115.924234][ T6073] F2FS-fs (loop0): invalid crc value [ 115.968144][ T6073] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.165824][ T6073] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.190916][ T6073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 116.397759][ T6101] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 116.437347][ T6101] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.482807][ T6101] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 116.488167][ T6108] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 116.553243][ T6101] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.722: attempt to clear invalid blocks 2 len 1 [ 116.583761][ T6101] EXT4-fs (loop1): Remounting filesystem read-only [ 116.646187][ T6112] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.727: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.670667][ T6101] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 116.698962][ T6112] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 116.707126][ T6112] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.727: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.750028][ T6101] EXT4-fs (loop1): Remounting filesystem read-only [ 116.763909][ T6101] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.722: invalid indirect mapped block 1819239214 (level 0) [ 116.781847][ T6101] EXT4-fs (loop1): Remounting filesystem read-only [ 116.789755][ T6101] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.722: invalid indirect mapped block 1819239214 (level 1) [ 116.794625][ T6112] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 116.813782][ T6101] EXT4-fs (loop1): Remounting filesystem read-only [ 116.848752][ T6101] EXT4-fs (loop1): 1 truncate cleaned up [ 116.854450][ T6101] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 116.878195][ T6112] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.727: Failed to acquire dquot type 0 [ 116.945845][ T6112] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 116.980446][ T6112] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.727: mark_inode_dirty error [ 117.017680][ T6112] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 117.047817][ T6112] EXT4-fs (loop3): 1 orphan inode deleted [ 117.058139][ T6112] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 117.080713][ T377] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.081433][ T377] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 117.159044][ T6130] binder: 6129:6130 ioctl c0306201 200000000440 returned -14 [ 117.178053][ T377] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 117.376683][ T4197] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 117.422249][ T6122] set_capacity_and_notify: 4 callbacks suppressed [ 117.422263][ T6122] loop4: detected capacity change from 0 to 32768 [ 117.432153][ T6124] loop0: detected capacity change from 0 to 32768 [ 117.444022][ T4197] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 117.463950][ T4197] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 117.517010][ T26] audit: type=1800 audit(1793122813.061:15): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.721" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 117.870719][ T6153] loop3: detected capacity change from 0 to 164 [ 118.175217][ T6168] loop4: detected capacity change from 0 to 512 [ 118.237426][ T6168] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 118.311799][ T6168] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.338577][ T6168] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 118.350292][ T6182] loop1: detected capacity change from 0 to 128 [ 118.358183][ T6168] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.744: attempt to clear invalid blocks 2 len 1 [ 118.372204][ T6168] EXT4-fs (loop4): Remounting filesystem read-only [ 118.396950][ T6168] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 118.436285][ T6182] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.451161][ T6168] EXT4-fs (loop4): Remounting filesystem read-only [ 118.458766][ T6168] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.744: invalid indirect mapped block 1819239214 (level 0) [ 118.467947][ T6182] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.492202][ T6168] EXT4-fs (loop4): Remounting filesystem read-only [ 118.531968][ T6168] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.744: invalid indirect mapped block 1819239214 (level 1) [ 118.563485][ T6168] EXT4-fs (loop4): Remounting filesystem read-only [ 118.581858][ T6168] EXT4-fs (loop4): 1 truncate cleaned up [ 118.598764][ T6168] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 118.744789][ T6208] phram: not enough arguments [ 118.806710][ T6210] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.817016][ T6210] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.853759][ T4272] kernel write not supported for file /snd/seq (pid: 4272 comm: kworker/1:6) [ 118.918456][ T4427] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.001893][ T6229] loop1: detected capacity change from 0 to 512 [ 119.078170][ T6229] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 119.107498][ T6229] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.127738][ T1109] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.135501][ T6229] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.779: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 119.154419][ T6229] EXT4-fs (loop1): Remounting filesystem read-only [ 119.165584][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.779: corrupted inode contents [ 119.181079][ T6229] EXT4-fs (loop1): Remounting filesystem read-only [ 119.189486][ T6229] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #2: comm syz.1.779: mark_inode_dirty error [ 119.203730][ T6229] EXT4-fs (loop1): Remounting filesystem read-only [ 119.210969][ T6229] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.779: corrupted inode contents [ 119.225317][ T6229] EXT4-fs (loop1): Remounting filesystem read-only [ 119.235334][ T6229] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.779: mark_inode_dirty error [ 119.250938][ T6229] EXT4-fs (loop1): Remounting filesystem read-only [ 119.253591][ T6238] phram: not enough arguments [ 119.313784][ T4427] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.326110][ T4427] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 119.340662][ T4427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.432996][ T4427] as10x_usb: device has been detected [ 119.439509][ T4427] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 119.453364][ T6248] loop1: detected capacity change from 0 to 256 [ 119.488948][ T1109] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 119.494564][ T4427] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 119.506653][ T1109] usb 3-1: config 0 has no interface number 0 [ 119.535851][ T6252] loop3: detected capacity change from 0 to 1024 [ 119.546670][ T1109] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.615495][ T6252] EXT4-fs (loop3): Ignoring removed nobh option [ 119.632742][ T6252] EXT4-fs (loop3): Ignoring removed bh option [ 119.649659][ T6248] FAT-fs (loop1): Directory bread(block 64) failed [ 119.658089][ T4427] as10x_usb: error during firmware upload part1 [ 119.664751][ T4427] Registered device Abilis Systems DVB-Titan [ 119.683597][ T6248] FAT-fs (loop1): Directory bread(block 65) failed [ 119.697957][ T6248] FAT-fs (loop1): Directory bread(block 66) failed [ 119.704524][ T6248] FAT-fs (loop1): Directory bread(block 67) failed [ 119.721494][ T1109] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 119.731453][ T6248] FAT-fs (loop1): Directory bread(block 68) failed [ 119.740540][ T6252] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,noquota,sysvgroups,nobh,usrquota,nojournal_checksum,noload,bh,norecovery,,errors=continue. Quota mode: writeback. [ 119.759172][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.769518][ T6248] FAT-fs (loop1): Directory bread(block 69) failed [ 119.773056][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.776293][ T6248] FAT-fs (loop1): Directory bread(block 70) failed [ 119.791142][ T6248] FAT-fs (loop1): Directory bread(block 71) failed [ 119.794670][ T1109] usb 3-1: Product: syz [ 119.797857][ T6248] FAT-fs (loop1): Directory bread(block 72) failed [ 119.809597][ T6248] FAT-fs (loop1): Directory bread(block 73) failed [ 119.812605][ T1109] usb 3-1: Manufacturer: syz [ 119.841985][ T1109] usb 3-1: SerialNumber: syz [ 119.896580][ T1109] usb 3-1: config 0 descriptor?? [ 119.944040][ T1109] yurex 3-1:0.50: USB YUREX device now attached to Yurex #1 [ 119.954030][ T6265] loop4: detected capacity change from 0 to 512 [ 120.085582][ T6265] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 120.104233][ T6265] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.138885][ T6265] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 120.179605][ T1109] usb 3-1: USB disconnect, device number 4 [ 120.200137][ T1109] yurex 3-1:0.50: USB YUREX #1 now disconnected [ 120.212773][ T6265] EXT4-fs (loop4): Remounting filesystem read-only [ 120.218596][ T4272] usb 1-1: USB disconnect, device number 3 [ 120.235278][ T6276] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.795: corrupted inode contents [ 120.253786][ T6276] EXT4-fs (loop4): Remounting filesystem read-only [ 120.262030][ T6276] EXT4-fs error (device loop4): ext4_dirty_inode:6087: inode #2: comm syz.4.795: mark_inode_dirty error [ 120.288076][ T6276] EXT4-fs (loop4): Remounting filesystem read-only [ 120.294970][ T6276] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #2: comm syz.4.795: corrupted inode contents [ 120.346434][ T4272] Unregistered device Abilis Systems DVB-Titan [ 120.347066][ T6276] EXT4-fs (loop4): Remounting filesystem read-only [ 120.361555][ T4272] as10x_usb: device has been disconnected [ 120.419826][ T6276] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.795: mark_inode_dirty error [ 120.448012][ T6276] EXT4-fs (loop4): Remounting filesystem read-only [ 120.606104][ T6297] loop3: detected capacity change from 0 to 1024 [ 120.779103][ T6308] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.805140][ T6308] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.982349][ T6318] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 121.037372][ T6318] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.063040][ T6318] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.816: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.082550][ T6318] EXT4-fs (loop0): Remounting filesystem read-only [ 121.095407][ T6318] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.816: corrupted inode contents [ 121.109620][ T6318] EXT4-fs (loop0): Remounting filesystem read-only [ 121.116252][ T6318] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.816: mark_inode_dirty error [ 121.142930][ T6318] EXT4-fs (loop0): Remounting filesystem read-only [ 121.151583][ T6318] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.816: corrupted inode contents [ 121.165806][ T6318] EXT4-fs (loop0): Remounting filesystem read-only [ 121.172491][ T6318] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.816: mark_inode_dirty error [ 121.191351][ T6318] EXT4-fs (loop0): Remounting filesystem read-only [ 121.314141][ T6337] exfat: Deprecated parameter 'utf8' [ 121.333560][ T6337] exfat: Deprecated parameter 'namecase' [ 121.370957][ T6337] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 121.371797][ T6316] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16 [ 121.726884][ T6353] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.797886][ T6353] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.045934][ T6373] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 122.068961][ T6373] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.099091][ T6373] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.837: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 122.127507][ T6373] EXT4-fs (loop3): Remounting filesystem read-only [ 122.170504][ T6373] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.837: corrupted inode contents [ 122.193804][ T6373] EXT4-fs (loop3): Remounting filesystem read-only [ 122.231691][ T6373] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.837: mark_inode_dirty error [ 122.296755][ T6386] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 122.323988][ T6373] EXT4-fs (loop3): Remounting filesystem read-only [ 122.337484][ T6373] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.837: corrupted inode contents [ 122.359201][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.842'. [ 122.374706][ T6373] EXT4-fs (loop3): Remounting filesystem read-only [ 122.385257][ T6373] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.837: mark_inode_dirty error [ 122.403832][ T6397] program syz.1.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.437452][ T6373] EXT4-fs (loop3): Remounting filesystem read-only [ 122.524523][ T6403] set_capacity_and_notify: 5 callbacks suppressed [ 122.524539][ T6403] loop4: detected capacity change from 0 to 512 [ 122.556181][ T6405] loop1: detected capacity change from 0 to 1024 [ 122.582090][ T6407] md2: error: bitmap file must be a regular file [ 122.624999][ T6403] EXT4-fs (loop4): Ignoring removed nobh option [ 122.695486][ T6403] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 122.709427][ T6412] loop3: detected capacity change from 0 to 512 [ 122.739339][ T6405] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.761767][ T6403] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.852: invalid indirect mapped block 4278190080 (level 0) [ 122.773899][ T6412] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.817985][ T6403] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.852: invalid indirect mapped block 1 (level 1) [ 122.848702][ T6403] EXT4-fs (loop4): 1 truncate cleaned up [ 122.854393][ T6403] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,sb=0x0000000000000009,jqfmt=vfsv1,resgid=0x0000000000000000,nolazytime,nobh,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,,errors=continue. Quota mode: none. [ 122.857470][ T6405] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.883591][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.901421][ T6412] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.856: invalid indirect mapped block 256 (level 2) [ 122.942488][ T6403] EXT4-fs (loop4): shut down requested (1) [ 122.966531][ T6412] EXT4-fs (loop3): 2 truncates cleaned up [ 122.992793][ T6412] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 123.284172][ T6435] rnbd_client L125: Can't parse path ip:027.0.0.1*Ãú3°Æ;*\L 3ìc8’Q¥Î;•®.f¿O¥œ3æŒXFð©i]HÌ2î‡éoûW«£Ø£5+¿@çΰ=G]9jç""{@¡qï‹¥Êi¤ A7@—G:›r¦~1Œ¤7¶˜³Œtäêºé:Žø,: -22 [ 123.309509][ T4786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.331402][ T6438] loop0: detected capacity change from 0 to 512 [ 123.484016][ T6438] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback. [ 123.550491][ T6438] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.588158][ T6438] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #2: comm syz.0.866: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 123.611402][ T6438] EXT4-fs (loop0): Remounting filesystem read-only [ 123.640186][ T6464] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.866: corrupted inode contents [ 123.673375][ T6464] EXT4-fs (loop0): Remounting filesystem read-only [ 123.685250][ T6464] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.866: mark_inode_dirty error [ 123.687950][ T4786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 123.718407][ T4786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 123.731982][ T6464] EXT4-fs (loop0): Remounting filesystem read-only [ 123.742432][ T4786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 123.758107][ T6464] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.866: corrupted inode contents [ 123.770131][ T4786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 123.780512][ T4786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 123.790715][ T6234] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 123.806127][ T6464] EXT4-fs (loop0): Remounting filesystem read-only [ 123.812889][ T4263] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.820982][ T6464] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.866: mark_inode_dirty error [ 123.844058][ T6464] EXT4-fs (loop0): Remounting filesystem read-only [ 123.998233][ T4786] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 124.007358][ T4786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.027881][ T4786] usb 2-1: Product: syz [ 124.032170][ T4786] usb 2-1: Manufacturer: syz [ 124.036758][ T4786] usb 2-1: SerialNumber: syz [ 124.077968][ T6405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.085532][ T6405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.092961][ T6405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.100491][ T6405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.119813][ T4786] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 124.129417][ T4786] keyspan 2-1:1.0: unsupported endpoint type 0 [ 124.141174][ T4786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 124.154812][ T4786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 124.166752][ T4786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 124.179998][ T4263] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 124.184259][ T6476] loop0: detected capacity change from 0 to 32768 [ 124.189408][ T4786] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 124.203739][ T4263] usb 5-1: config 0 has no interface number 0 [ 124.210469][ T4263] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.213484][ T6476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.883 (6476) [ 124.328109][ T6476] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 124.364720][ T6476] BTRFS info (device loop0): force clearing of disk cache [ 124.388165][ T4263] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 124.389588][ T6476] BTRFS info (device loop0): metadata ratio 0 [ 124.405337][ T6476] BTRFS info (device loop0): enabling ssd optimizations [ 124.407282][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.412569][ T6476] BTRFS info (device loop0): using spread ssd allocation scheme [ 124.412592][ T6476] BTRFS info (device loop0): using free space tree [ 124.412606][ T6476] BTRFS info (device loop0): has skinny extents [ 124.449308][ T4263] usb 5-1: Product: syz [ 124.453945][ T4263] usb 5-1: Manufacturer: syz [ 124.463292][ T4263] usb 5-1: SerialNumber: syz [ 124.487274][ T4263] usb 5-1: config 0 descriptor?? [ 124.526611][ T6476] BTRFS info (device loop0): clearing free space tree [ 124.535152][ T6476] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.548909][ T6476] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.549088][ T4263] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 124.601023][ T6476] BTRFS info (device loop0): creating free space tree [ 124.613056][ T6476] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.626407][ T6476] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.676890][ T6501] loop2: detected capacity change from 0 to 1024 [ 124.789731][ T4427] usb 5-1: USB disconnect, device number 4 [ 124.812538][ T4427] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 125.236773][ T4427] usb 2-1: USB disconnect, device number 6 [ 125.264386][ T4427] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 125.354520][ T4427] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 125.396578][ T4427] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 125.428986][ T4427] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 125.452917][ T6522] loop1: detected capacity change from 0 to 1024 [ 125.455598][ T4427] keyspan 2-1:1.0: device disconnected [ 125.526407][ T6522] EXT4-fs (loop1): Ignoring removed nobh option [ 125.573803][ T6522] EXT4-fs (loop1): Ignoring removed bh option [ 125.643024][ T6522] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,noquota,sysvgroups,nobh,usrquota,nojournal_checksum,noload,bh,norecovery,,errors=continue. Quota mode: writeback. [ 125.645726][ T6512] loop3: detected capacity change from 0 to 32768 [ 125.821982][ T6512] XFS (loop3): Mounting V5 Filesystem [ 125.834855][ T6541] loop0: detected capacity change from 0 to 256 [ 125.854647][ T6541] exfat: Deprecated parameter 'utf8' [ 125.897863][ T6541] exfat: Deprecated parameter 'namecase' [ 125.950135][ T6541] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 125.970775][ T6512] XFS (loop3): Ending clean mount [ 126.041764][ T26] audit: type=1800 audit(1793122821.591:16): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.890" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 126.127294][ T4197] XFS (loop3): Unmounting Filesystem [ 126.211592][ T6558] loop1: detected capacity change from 0 to 128 [ 126.464472][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 126.524673][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 126.549290][ T6567] netlink: 'syz.4.909': attribute type 19 has an invalid length. [ 126.591959][ T6567] netlink: 'syz.4.909': attribute type 20 has an invalid length. [ 126.611474][ T6567] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.621144][ T6567] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.630187][ T6567] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.637734][ T4427] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.639016][ T6567] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.050302][ T4427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.064617][ T4427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.075023][ T4427] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 127.086423][ T4427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.104931][ T4427] usb 3-1: config 0 descriptor?? [ 127.125217][ T6516] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.468167][ T4430] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.487902][ T6516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.505101][ T6516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.516938][ T6516] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 127.532086][ T6516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.544411][ T6516] usb 1-1: config 0 descriptor?? [ 127.590408][ T4427] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x2 [ 127.613971][ T4427] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 127.859072][ T4430] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 127.871308][ T4430] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.886044][ T4430] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.893051][ T4430] usb 5-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 127.903319][ T4430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.912884][ T4430] usb 5-1: config 0 descriptor?? [ 128.008419][ T4427] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 128.016061][ T4427] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 128.027554][ T4427] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 128.031233][ T6516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 128.050659][ T4427] usb 3-1: USB disconnect, device number 5 [ 128.051404][ T6516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 128.065881][ T6516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 128.079379][ T6516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 128.091514][ T6516] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 128.126822][ T6516] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 128.143939][ T6655] fido_id[6655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 128.247889][ T6516] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 0 [ 128.257326][ T6516] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 128.266941][ T6516] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 128.276116][ T6516] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 128.285243][ T6516] playstation: probe of 0003:054C:0DF2.0006 failed with error -22 [ 128.288257][ T4272] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.399540][ T4430] chicony 0003:04F2:0418.0007: ignoring exceeding usage max [ 128.413276][ T4430] chicony 0003:04F2:0418.0007: No inputs registered, leaving [ 128.424410][ T4430] chicony 0003:04F2:0418.0007: hidraw0: USB HID v0.10 Joystick [HID 04f2:0418] on usb-dummy_hcd.4-1/input0 [ 128.484722][ T4430] usb 1-1: USB disconnect, device number 4 [ 128.604284][ T6516] usb 5-1: USB disconnect, device number 5 [ 128.636462][ T6661] loop1: detected capacity change from 0 to 1024 [ 128.693560][ T6661] EXT4-fs (loop1): Ignoring removed orlov option [ 128.700581][ T4272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.712412][ T4272] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 128.723107][ T4272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.745968][ T6661] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 128.801954][ T4272] as10x_usb: device has been detected [ 128.822746][ T4272] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 128.826404][ T6661] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 128.842247][ T4272] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 128.880649][ T4272] as10x_usb: error during firmware upload part1 [ 128.898854][ T4272] Registered device Abilis Systems DVB-Titan [ 128.959707][ T6659] loop2: detected capacity change from 0 to 32768 [ 129.075494][ T6659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.950 (6659) [ 129.096130][ T6659] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 129.155002][ T6659] BTRFS info (device loop2): force clearing of disk cache [ 129.176069][ T6659] BTRFS info (device loop2): metadata ratio 0 [ 129.196202][ T6659] BTRFS info (device loop2): enabling ssd optimizations [ 129.223899][ T6659] BTRFS info (device loop2): using spread ssd allocation scheme [ 129.243459][ T6659] BTRFS info (device loop2): using free space tree [ 129.257194][ T6677] loop1: detected capacity change from 0 to 512 [ 129.257913][ T6678] loop0: detected capacity change from 0 to 128 [ 129.276891][ T6659] BTRFS info (device loop2): has skinny extents [ 129.336780][ T6677] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.956: inode has both inline data and extents flags [ 129.352453][ T6677] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.956: couldn't read orphan inode 15 (err -117) [ 129.377211][ T6678] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 129.381718][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 129.503063][ T6659] BTRFS info (device loop2): clearing free space tree [ 129.514126][ T6659] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.527311][ T6659] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.561717][ T6659] BTRFS info (device loop2): creating free space tree [ 129.569663][ T6659] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.580267][ T6659] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.635753][ T6703] loop1: detected capacity change from 0 to 128 [ 129.663202][ T6514] usb 4-1: USB disconnect, device number 6 [ 129.664417][ T6702] loop0: detected capacity change from 0 to 1024 [ 129.690251][ T6514] Unregistered device Abilis Systems DVB-Titan [ 129.693003][ T6514] as10x_usb: device has been disconnected [ 129.734481][ T6676] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 129.740835][ T6703] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 129.822997][ T6703] hpfs: filesystem error: improperly stopped [ 129.838232][ T6703] hpfs: You really don't want any checks? You are crazy... [ 129.860141][ T6703] hpfs: hpfs_map_sector(): read error [ 129.875659][ T6703] hpfs: code page support is disabled [ 129.886030][ T6703] hpfs: filesystem error: map_dirent: not a directory [ 129.893939][ T6703] [ 129.896459][ T6703] hpfs: hpfs_map_4sectors(): unaligned read [ 129.903023][ T6703] hpfs: filesystem error: unable to find root dir [ 130.412239][ T6717] loop3: detected capacity change from 0 to 256 [ 130.438364][ T6717] exfat: Deprecated parameter 'utf8' [ 130.478142][ T6717] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 130.598336][ T6106] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.988334][ T6106] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.003636][ T6106] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.023113][ T6106] usb 5-1: config 1 has no interface number 0 [ 131.036604][ T6106] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 131.055614][ T6106] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 131.071547][ T6516] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.073583][ T6106] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.197901][ T6732] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 131.298398][ T6106] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.327074][ T6106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.364151][ T6106] usb 5-1: Product: syz [ 131.368642][ T6106] usb 5-1: Manufacturer: syz [ 131.373261][ T6106] usb 5-1: SerialNumber: syz [ 131.437914][ T6516] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.455068][ T6516] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 131.481464][ T6516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.559670][ T6516] as10x_usb: device has been detected [ 131.575697][ T6516] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 131.618468][ T6516] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 131.646513][ T6516] as10x_usb: error during firmware upload part1 [ 131.658285][ T6516] Registered device Abilis Systems DVB-Titan [ 131.731913][ T6770] loop0: detected capacity change from 0 to 1024 [ 131.794561][ T6770] UBIFS error (pid: 6770): cannot open "c:::", error -22 [ 132.068971][ T6764] loop3: detected capacity change from 0 to 40427 [ 132.124303][ T6764] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(0) [ 132.133594][ T6764] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 132.145513][ T6764] F2FS-fs (loop3): invalid crc value [ 132.153733][ T6764] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 132.211106][ T6764] F2FS-fs (loop3): Start checkpoint disabled! [ 132.226845][ T6764] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 132.234897][ T6764] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e7 [ 132.275681][ T1241] attempt to access beyond end of device [ 132.275681][ T1241] loop3: rw=2049, want=45112, limit=40427 [ 132.297787][ T6516] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.350537][ T6106] cdc_ncm 5-1:1.1: SET_NTB_FORMAT failed [ 132.378995][ T4449] usb 3-1: USB disconnect, device number 6 [ 132.388601][ T6106] cdc_ncm 5-1:1.1: bind() failure [ 132.413618][ T4449] Unregistered device Abilis Systems DVB-Titan [ 132.426172][ T4449] as10x_usb: device has been disconnected [ 132.448254][ T6106] usb 5-1: USB disconnect, device number 6 [ 132.476293][ T6785] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23 [ 132.547734][ T6516] usb 2-1: Using ep0 maxpacket: 16 [ 132.671761][ T6516] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.685062][ T6516] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.778710][ T6516] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 132.788478][ T6516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.796594][ T6516] usb 2-1: SerialNumber: syz [ 132.840045][ T6516] usb 2-1: 0:2 : does not exist [ 133.149351][ T6809] loop2: detected capacity change from 0 to 4096 [ 133.199980][ T6809] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 133.244917][ T6809] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.276832][ T6802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.999 (6802) [ 133.282598][ T6809] EXT4-fs (loop2): inline encryption not supported [ 133.344304][ T6802] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.358548][ T6809] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption=v1,inlinecrypt,sb=0x0000000000000004,noinit_itable,norecovery,minixdf,nolazytime,errors=remount-ro,nojournal_checksum,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 133.366177][ T6802] BTRFS info (device loop4): force clearing of disk cache [ 133.447968][ T6802] BTRFS info (device loop4): metadata ratio 0 [ 133.463073][ T6516] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 133.471253][ T6802] BTRFS info (device loop4): enabling ssd optimizations [ 133.486178][ T6802] BTRFS info (device loop4): using spread ssd allocation scheme [ 133.498401][ T6516] usb 2-1: USB disconnect, device number 7 [ 133.504437][ T6802] BTRFS info (device loop4): using free space tree [ 133.516610][ T6802] BTRFS info (device loop4): has skinny extents [ 133.723821][ T6830] set_capacity_and_notify: 1 callbacks suppressed [ 133.723836][ T6830] loop3: detected capacity change from 0 to 128 [ 133.741168][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.849317][ T6830] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 133.863077][ T6830] hpfs: filesystem error: improperly stopped [ 133.878049][ T6830] hpfs: You really don't want any checks? You are crazy... [ 133.937359][ T6830] hpfs: hpfs_map_sector(): read error [ 133.944305][ T6802] BTRFS info (device loop4): clearing free space tree [ 133.947865][ T6830] hpfs: code page support is disabled [ 133.955902][ T6802] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.975019][ T6802] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.975213][ T6830] hpfs: filesystem error: map_dirent: not a directory [ 134.004331][ T6830] [ 134.007162][ T6830] hpfs: hpfs_map_4sectors(): unaligned read [ 134.014480][ T6830] hpfs: filesystem error: unable to find root dir [ 134.028412][ T6802] BTRFS info (device loop4): creating free space tree [ 134.047280][ T6802] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.061790][ T6802] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.731043][ T6860] loop0: detected capacity change from 0 to 40427 [ 134.752827][ T6860] F2FS-fs (loop0): invalid crc value [ 134.816259][ T6860] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.826483][ T6874] loop2: detected capacity change from 0 to 1024 [ 134.931758][ T6874] UBIFS error (pid: 6874): cannot open "c:::", error -22 [ 134.966100][ T6860] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 135.034779][ T6860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 135.372398][ T6887] loop2: detected capacity change from 0 to 512 [ 135.423119][ T6890] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1028'. [ 135.807910][ T6900] device netdevsim0 entered promiscuous mode [ 135.840838][ T6896] loop2: detected capacity change from 0 to 4096 [ 135.841132][ T6900] batman_adv: batadv0: Adding interface: macvlan2 [ 135.879650][ T6900] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.942765][ T6896] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 135.970851][ T6896] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 136.005851][ T6896] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 136.017315][ T6900] batman_adv: batadv0: Interface activated: macvlan2 [ 136.032104][ T6891] loop1: detected capacity change from 0 to 32768 [ 136.070914][ T6891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1027 (6891) [ 136.086806][ T6896] ntfs: volume version 3.1. [ 136.118041][ T6896] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 136.127748][ T6896] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 136.184867][ T6891] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 136.196524][ T6896] ntfs: (device loop2): load_and_init_quota(): Failed to load $Quota/$Q index. [ 136.220824][ T6891] BTRFS info (device loop1): force clearing of disk cache [ 136.240089][ T6896] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 136.251270][ T6891] BTRFS info (device loop1): metadata ratio 0 [ 136.258095][ T6891] BTRFS info (device loop1): enabling ssd optimizations [ 136.287753][ T6891] BTRFS info (device loop1): using spread ssd allocation scheme [ 136.295448][ T6891] BTRFS info (device loop1): using free space tree [ 136.337789][ T6891] BTRFS info (device loop1): has skinny extents [ 136.515566][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.522553][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.563330][ T6891] BTRFS info (device loop1): clearing free space tree [ 136.571179][ T6891] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.581377][ T6891] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.622758][ T6891] BTRFS info (device loop1): creating free space tree [ 136.640135][ T6891] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 136.651555][ T6891] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 136.818723][ T6926] loop0: detected capacity change from 0 to 32768 [ 136.913945][ T6926] JBD2: Ignoring recovery information on journal [ 136.989867][ T6958] device veth0_to_bond entered promiscuous mode [ 136.996445][ T6958] device macsec1 entered promiscuous mode [ 137.089392][ T6926] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.373314][ T6923] loop4: detected capacity change from 0 to 40427 [ 137.415731][ T6923] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(0) [ 137.454763][ T6923] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.476329][ T6926] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 137.505741][ T6923] F2FS-fs (loop4): invalid crc value [ 137.521937][ T6926] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 137.542947][ T6926] OCFS2: Returning error to the calling process. [ 137.551532][ T6923] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 137.560947][ T6926] (syz.0.1044,6926,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 137.581940][ T6926] (syz.0.1044,6926,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 137.600223][ T6926] (syz.0.1044,6926,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 137.617970][ T6926] (syz.0.1044,6926,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 137.636778][ T6926] (syz.0.1044,6926,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 137.677916][ T6926] (syz.0.1044,6926,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 137.712777][ T6926] (syz.0.1044,6926,0):ocfs2_mknod_locked:641 ERROR: status = -5 [ 137.739778][ T6926] (syz.0.1044,6926,0):ocfs2_mknod:385 ERROR: status = -5 [ 137.765135][ T6926] (syz.0.1044,6926,0):ocfs2_mknod:504 ERROR: status = -5 [ 137.767080][ T6966] loop3: detected capacity change from 0 to 1024 [ 137.783688][ T6923] F2FS-fs (loop4): Start checkpoint disabled! [ 137.813405][ T6926] (syz.0.1044,6926,0):ocfs2_mkdir:661 ERROR: status = -5 [ 137.844594][ T6923] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.864392][ T6966] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.877550][ T6923] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e7 [ 137.963618][ T6926] (syz.0.1044,6926,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 137.977452][ T6966] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,dioread_nolock,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,init_itable,nogrpid,nodelalloc,grpjquota=,,errors=continue. Quota mode: none. [ 137.993249][ T6926] syz.0.1044 (6926) used greatest stack depth: 18240 bytes left [ 138.002277][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.041377][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 138.091890][ T155] attempt to access beyond end of device [ 138.091890][ T155] loop4: rw=2049, want=45112, limit=40427 [ 138.530614][ T6999] loop1: detected capacity change from 0 to 4096 [ 138.587375][ T6999] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 138.622920][ T6999] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.666245][ T6999] EXT4-fs (loop1): inline encryption not supported [ 138.707162][ T6999] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption=v1,inlinecrypt,sb=0x0000000000000004,noinit_itable,norecovery,minixdf,nolazytime,errors=remount-ro,nojournal_checksum,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 138.898336][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1079'. [ 139.062690][ T7032] set_capacity_and_notify: 1 callbacks suppressed [ 139.062706][ T7032] loop1: detected capacity change from 0 to 1024 [ 139.231288][ T7042] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 139.485297][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.516863][ T7042] device bridge_slave_1 left promiscuous mode [ 139.527423][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.645832][ T7053] loop4: detected capacity change from 0 to 4096 [ 139.667163][ T7053] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 139.682749][ T7042] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 139.707145][ T7053] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.738100][ T7053] EXT4-fs (loop4): inline encryption not supported [ 139.775312][ T7053] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption=v1,inlinecrypt,sb=0x0000000000000004,noinit_itable,norecovery,minixdf,nolazytime,errors=remount-ro,nojournal_checksum,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 139.802010][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.918439][ T7066] loop0: detected capacity change from 0 to 64 [ 140.055356][ T7066] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 140.159643][ T7075] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.1102'. [ 140.168491][ T7066] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 140.287766][ T7068] loop3: detected capacity change from 0 to 32768 [ 140.396269][ T7082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1107'. [ 140.407708][ T4786] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.430592][ T7068] JBD2: Ignoring recovery information on journal [ 140.518710][ T7068] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 140.625531][ T7068] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 140.649115][ T7068] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 140.662572][ T7068] OCFS2: Returning error to the calling process. [ 140.673094][ T7068] (syz.3.1100,7068,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 140.680346][ T7101] loop2: detected capacity change from 0 to 4096 [ 140.687524][ T7068] (syz.3.1100,7068,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 140.710727][ T7068] (syz.3.1100,7068,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 140.721224][ T7068] (syz.3.1100,7068,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 140.731948][ T7068] (syz.3.1100,7068,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 140.740521][ T7068] (syz.3.1100,7068,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 140.750095][ T7068] (syz.3.1100,7068,0):ocfs2_mknod_locked:641 ERROR: status = -5 [ 140.764345][ T7068] (syz.3.1100,7068,1):ocfs2_mknod:385 ERROR: status = -5 [ 140.769179][ T7104] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.783002][ T4786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.790311][ T7068] (syz.3.1100,7068,1):ocfs2_mknod:504 ERROR: status = -5 [ 140.794123][ T4786] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 140.810294][ T4786] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 140.829802][ T7068] (syz.3.1100,7068,1):ocfs2_mkdir:661 ERROR: status = -5 [ 140.839589][ T4786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.877878][ T4449] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.918292][ T4786] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 140.941888][ T7068] (syz.3.1100,7068,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 141.015992][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 141.035586][ T7112] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1118'. [ 141.157889][ T4449] usb 1-1: Using ep0 maxpacket: 16 [ 141.284596][ T7128] loop3: detected capacity change from 0 to 64 [ 141.291752][ T4449] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.323718][ T4449] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.364090][ T7128] Bad inode number on dev loop3: 2 is out of range [ 141.459438][ T4449] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 141.493773][ T4449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.494058][ T7132] block2mtd: illegal erase size [ 141.502300][ T4449] usb 1-1: SerialNumber: syz [ 141.532560][ T7134] sctp: [Deprecated]: syz.3.1130 (pid 7134) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.532560][ T7134] Use struct sctp_sack_info instead [ 141.595471][ T4449] usb 1-1: 0:2 : does not exist [ 141.636688][ T7126] loop2: detected capacity change from 0 to 32768 [ 141.684880][ T7126] (syz.2.1128,7126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.711465][ T7126] (syz.2.1128,7126,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 141.765689][ T7126] JBD2: Ignoring recovery information on journal [ 141.848046][ T1109] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.873470][ T7126] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 142.208276][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.230625][ T1109] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.254246][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.303089][ T1109] usb 2-1: config 0 descriptor?? [ 142.322733][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 142.489125][ T7145] loop3: detected capacity change from 0 to 131072 [ 142.620988][ T7145] F2FS-fs (loop3): invalid crc value [ 142.656587][ T7145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.686937][ T7145] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 142.720935][ T7145] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 142.737519][ T7145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 142.807817][ T4449] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 142.809108][ T1109] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 142.840854][ T1109] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input24 [ 142.866034][ T4449] usb 1-1: USB disconnect, device number 5 [ 142.925052][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.943466][ T7165] loop2: detected capacity change from 0 to 64 [ 142.992375][ T7165] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 143.033917][ T4265] usb 5-1: USB disconnect, device number 7 [ 143.057096][ T4265] idmouse 5-1:1.0: disconnected [ 143.059659][ T1109] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 143.085394][ T7165] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 143.278794][ T4449] usb 2-1: USB disconnect, device number 8 [ 143.624042][ T7179] loop4: detected capacity change from 0 to 512 [ 143.725220][ T7179] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.791234][ T7188] block2mtd: illegal erase size [ 143.979348][ T7201] EXT4-fs (loop4): Ignoring removed nobh option [ 144.018781][ T7205] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.047052][ T7192] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 144.063214][ T7201] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 144.064580][ T7192] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.138006][ T7201] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.489620][ T7223] set_capacity_and_notify: 3 callbacks suppressed [ 144.489639][ T7223] loop0: detected capacity change from 0 to 1024 [ 144.507877][ T4449] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.527269][ T7227] loop2: detected capacity change from 0 to 512 [ 144.611687][ T7227] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.612837][ T7223] hfsplus: b-tree write err: -5, ino 17 [ 144.679519][ T145] hfsplus: b-tree write err: -5, ino 4 [ 144.700510][ T145] hfsplus: b-tree write err: -5, ino 17 [ 144.749736][ T7238] program syz.4.1168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.871991][ T7246] loop3: detected capacity change from 0 to 512 [ 144.875610][ T7244] loop4: detected capacity change from 0 to 2048 [ 144.900591][ T7246] EXT4-fs (loop3): Ignoring removed nobh option [ 144.943516][ T4449] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.953697][ T4449] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 144.956827][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback. [ 144.980349][ T4449] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 144.989168][ T7246] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.030056][ T7250] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.064000][ T4449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.166127][ T4449] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 145.242903][ T7258] loop4: detected capacity change from 0 to 1024 [ 145.377841][ T4179] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.463926][ T7252] loop0: detected capacity change from 0 to 32768 [ 145.508002][ T7252] JBD2: Ignoring recovery information on journal [ 145.536039][ T7252] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.637749][ T4179] usb 3-1: Using ep0 maxpacket: 16 [ 145.651129][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 145.777908][ T4179] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.798736][ T4179] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.826864][ T4179] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 145.842104][ T4179] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.849526][ T4179] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 145.868132][ T4179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.880747][ T4179] usb 3-1: config 0 descriptor?? [ 146.256335][ T7273] loop3: detected capacity change from 0 to 1024 [ 146.282423][ T7277] loop0: detected capacity change from 0 to 16 [ 146.332395][ T7277] erofs: (device loop0): mounted with root inode @ nid 36. [ 146.410941][ T26] audit: type=1800 audit(1793122841.951:17): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1179" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 146.444367][ T7273] hfsplus: b-tree write err: -5, ino 17 [ 146.519212][ T1241] hfsplus: b-tree write err: -5, ino 4 [ 146.538807][ T1241] hfsplus: b-tree write err: -5, ino 17 [ 146.623628][ T4179] usb 3-1: USB disconnect, device number 7 [ 146.736686][ T7289] loop3: detected capacity change from 0 to 2048 [ 146.788966][ T7290] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.851622][ T7292] loop0: detected capacity change from 0 to 512 [ 146.946195][ T7292] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.194627][ T7279] JBD2: Ignoring recovery information on journal [ 147.217993][ T7294] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 147.260761][ T7294] JBD2: Ignoring recovery information on journal [ 147.272233][ T1109] usb 2-1: USB disconnect, device number 9 [ 147.292243][ T7300] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 147.304086][ T1109] idmouse 2-1:1.0: disconnected [ 147.327746][ T7300] UDF-fs: Scanning with blocksize 512 failed [ 147.356055][ T7300] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 147.376007][ T7279] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 147.424280][ T7300] UDF-fs: Scanning with blocksize 1024 failed [ 147.450593][ T7279] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 147.480488][ T7300] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 147.497077][ T7294] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 147.509425][ T7279] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 147.510300][ T7300] UDF-fs: Scanning with blocksize 2048 failed [ 147.534456][ T7279] OCFS2: Returning error to the calling process. [ 147.550047][ T7279] (syz.4.1176,7279,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 147.569999][ T7300] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 147.573244][ T7279] (syz.4.1176,7279,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 147.595232][ T7279] (syz.4.1176,7279,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 147.598490][ T7300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.604758][ T7279] (syz.4.1176,7279,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 147.623540][ T7279] (syz.4.1176,7279,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 147.636325][ T7279] (syz.4.1176,7279,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 147.649054][ T7279] (syz.4.1176,7279,1):ocfs2_mknod_locked:641 ERROR: status = -5 [ 147.657383][ T7279] (syz.4.1176,7279,1):ocfs2_mknod:385 ERROR: status = -5 [ 147.663891][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 147.665522][ T7279] (syz.4.1176,7279,1):ocfs2_mknod:504 ERROR: status = -5 [ 147.678150][ T7279] (syz.4.1176,7279,1):ocfs2_mkdir:661 ERROR: status = -5 [ 147.764782][ T7279] (syz.4.1176,7279,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 147.818413][ T4190] ocfs2: Unmounting device (7,4) on (node local) [ 148.096488][ T7330] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.230252][ T4449] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.411607][ T7329] (syz.1.1201,7329,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.431579][ T7329] (syz.1.1201,7329,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 148.457458][ T7329] JBD2: Ignoring recovery information on journal [ 148.498359][ T4449] usb 4-1: Using ep0 maxpacket: 32 [ 148.518046][ T1109] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 148.548313][ T7329] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.653483][ T4449] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 148.666881][ T4449] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.693429][ T4449] usb 4-1: config 0 descriptor?? [ 148.736060][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 148.767881][ T1109] usb 5-1: Using ep0 maxpacket: 32 [ 148.886134][ T7345] JBD2: Ignoring recovery information on journal [ 148.892984][ T1109] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 148.909421][ T1109] usb 5-1: config 0 interface 0 has no altsetting 0 [ 148.933904][ T1109] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 148.968291][ T4449] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 148.980820][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.983402][ T4449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.003382][ T7345] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.007297][ T1109] usb 5-1: config 0 descriptor?? [ 149.030096][ T4449] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 149.037363][ T4449] usb 4-1: media controller created [ 149.055910][ T4449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.103051][ T4200] ocfs2: Unmounting device (7,2) on (node local) [ 149.215861][ T7325] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 149.238036][ T4449] az6027: usb out operation failed. (-71) [ 149.267906][ T4449] az6027: usb out operation failed. (-71) [ 149.273913][ T4449] stb0899_attach: Driver disabled by Kconfig [ 149.283925][ T4449] az6027: no front-end attached [ 149.283925][ T4449] [ 149.318701][ T4449] az6027: usb out operation failed. (-71) [ 149.324654][ T4449] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 149.333867][ T4449] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 149.352947][ T4449] dvb-usb: schedule remote query interval to 400 msecs. [ 149.360477][ T4449] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 149.382300][ T4449] usb 4-1: USB disconnect, device number 7 [ 149.511198][ T1109] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 149.514174][ T4449] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 149.618195][ T4179] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.795905][ T7368] set_capacity_and_notify: 7 callbacks suppressed [ 149.795920][ T7368] loop0: detected capacity change from 0 to 32768 [ 149.862161][ T7368] XFS (loop0): Mounting V5 Filesystem [ 149.885956][ T7376] loop3: detected capacity change from 0 to 512 [ 149.910503][ T1109] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-71) [ 149.983411][ T1109] corsair-psu: probe of 0003:1B1C:1C09.000A failed with error -71 [ 150.004511][ T1109] usb 5-1: USB disconnect, device number 8 [ 150.017224][ T7368] XFS (loop0): Ending clean mount [ 150.019275][ T7376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.033210][ T7368] XFS (loop0): Quotacheck needed: Please wait. [ 150.035524][ T4179] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.083310][ T4179] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 150.120255][ T4179] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 150.146892][ T4179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.147266][ T7381] fido_id[7381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 150.249508][ T4179] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 150.283786][ T7368] XFS (loop0): Quotacheck: Done. [ 150.359189][ T7383] loop3: detected capacity change from 0 to 764 [ 150.448044][ T4201] XFS (loop0): Unmounting Filesystem [ 150.580186][ T7390] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 150.795651][ T7403] program syz.1.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.896636][ T7412] loop4: detected capacity change from 0 to 128 [ 150.955292][ T7412] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.973629][ T7412] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.005917][ T7412] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 151.186284][ T7432] loop4: detected capacity change from 0 to 1024 [ 151.289837][ T7441] team0: Device ip6tnl1 is of different type [ 151.370309][ T7444] loop1: detected capacity change from 0 to 1756 [ 151.478241][ T7444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 151.520571][ T7444] UDF-fs: Scanning with blocksize 512 failed [ 151.536550][ T7451] loop3: detected capacity change from 0 to 128 [ 151.562414][ T7444] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 151.580849][ T7444] UDF-fs: Scanning with blocksize 1024 failed [ 151.590457][ T7451] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.622393][ T7444] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 151.622767][ T7451] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.798220][ T26] audit: type=1400 audit(1793122847.341:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7460 comm="syz.4.1256" name="p" offset=69 [ 151.847313][ T7451] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 151.971681][ T7469] loop0: detected capacity change from 0 to 128 [ 152.091283][ T7469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.092532][ T7475] loop3: detected capacity change from 0 to 1024 [ 152.109211][ T7469] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.244793][ T7475] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 152.310899][ T7475] EXT4-fs error (device loop3): ext4_get_journal_inode:5187: inode #32: comm syz.3.1259: iget: special inode unallocated [ 152.344586][ T7475] EXT4-fs (loop3): no journal found [ 152.354098][ T7475] EXT4-fs (loop3): can't get journal size [ 152.368797][ T7475] EXT4-fs (loop3): filesystem is read-only [ 152.374750][ T7475] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 152.428301][ T7475] EXT4-fs (loop3): shut down requested (2) [ 152.434309][ T4778] usb 3-1: USB disconnect, device number 8 [ 152.483793][ T4778] idmouse 3-1:1.0: disconnected [ 152.964827][ T7488] loop3: detected capacity change from 0 to 1756 [ 152.983291][ T7493] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 153.054573][ T7488] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 153.093330][ T7488] UDF-fs: Scanning with blocksize 512 failed [ 153.154779][ T7488] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 153.174473][ T7488] UDF-fs: Scanning with blocksize 1024 failed [ 153.209592][ T7488] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 153.224585][ T4786] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.248173][ T4191] hfs: request for non-existent node 131072 in B*Tree [ 153.510679][ T7512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.553723][ T7512] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.556212][ T7521] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 153.598151][ T4786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.615918][ T4786] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 153.634604][ T4786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.668826][ T4786] usb 5-1: config 0 descriptor?? [ 153.827575][ T7530] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.843984][ T7530] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.956759][ T7549] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 154.169472][ T4786] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 154.196894][ T4786] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000B/input/input26 [ 154.298541][ T4786] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 154.346019][ T7576] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.367754][ T4778] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.407093][ T7576] attempt to access beyond end of device [ 154.407093][ T7576] loop2: rw=524288, want=33554432, limit=2048 [ 154.425700][ T7584] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.477698][ C0] keytouch 0003:0926:3333.000B: Event data for report 0 was too short (8 vs 2) [ 154.579837][ T7590] vivid-000: disconnect [ 154.597496][ T7589] vivid-000: reconnect [ 154.620534][ T4778] usb 1-1: Using ep0 maxpacket: 32 [ 154.650285][ T4179] usb 5-1: USB disconnect, device number 9 [ 154.738153][ T4778] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 154.763742][ T7596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.785506][ T4778] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.804351][ T4778] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 154.816977][ T4778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.820259][ T7596] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1316: invalid indirect mapped block 1023410176 (level 0) [ 154.838808][ T4778] usb 1-1: config 0 descriptor?? [ 154.848828][ T7596] EXT4-fs (loop1): Remounting filesystem read-only [ 154.868583][ T7596] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 154.884277][ T7596] EXT4-fs (loop1): Remounting filesystem read-only [ 154.893924][ T7596] EXT4-fs (loop1): 1 truncate cleaned up [ 154.900401][ T7596] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000007,jqfmt=vfsold,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 154.934673][ T7596] jffs2: notice: (7596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.014455][ T4191] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 155.323197][ T4778] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 155.397969][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.447545][ T7637] set_capacity_and_notify: 5 callbacks suppressed [ 155.447560][ T7637] loop1: detected capacity change from 0 to 1024 [ 155.740667][ T4778] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-71) [ 155.753764][ T4778] corsair-psu: probe of 0003:1B1C:1C09.000C failed with error -71 [ 155.768131][ T7] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 155.783477][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.814572][ T4778] usb 1-1: USB disconnect, device number 6 [ 155.894212][ T7] usb-storage 3-1:1.0: USB Mass Storage device detected [ 155.935588][ T7664] fido_id[7664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 155.956015][ T4786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.207758][ T4786] usb 4-1: Using ep0 maxpacket: 16 [ 156.208162][ T4272] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.311852][ T7673] netlink: 'syz.1.1348': attribute type 1 has an invalid length. [ 156.325567][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 156.335083][ T4786] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.350312][ T4786] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.360449][ T4786] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 156.373945][ T4786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.381191][ T4786] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 156.390898][ T4786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.405006][ T4786] usb 4-1: config 0 descriptor?? [ 156.430875][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 156.467724][ T4272] usb 5-1: Using ep0 maxpacket: 16 [ 156.487322][ T7682] loop1: detected capacity change from 0 to 64 [ 156.521735][ T7682] attempt to access beyond end of device [ 156.521735][ T7682] loop1: rw=0, want=655369, limit=64 [ 156.535979][ T7] scsi host1: usb-storage 3-1:1.0 [ 156.537933][ T7682] Buffer I/O error on dev loop1, logical block 655368, async page read [ 156.565095][ T7682] attempt to access beyond end of device [ 156.565095][ T7682] loop1: rw=0, want=655370, limit=64 [ 156.576747][ T7682] Buffer I/O error on dev loop1, logical block 655369, async page read [ 156.585842][ T7682] attempt to access beyond end of device [ 156.585842][ T7682] loop1: rw=0, want=655371, limit=64 [ 156.596456][ T7685] loop0: detected capacity change from 0 to 1024 [ 156.598543][ T7682] Buffer I/O error on dev loop1, logical block 655370, async page read [ 156.615174][ T4272] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 156.623585][ T4272] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.636400][ T7682] attempt to access beyond end of device [ 156.636400][ T7682] loop1: rw=0, want=655372, limit=64 [ 156.649013][ T4272] usb 5-1: config 0 has no interface number 0 [ 156.659613][ T7682] Buffer I/O error on dev loop1, logical block 655371, async page read [ 156.669221][ T7682] attempt to access beyond end of device [ 156.669221][ T7682] loop1: rw=0, want=655373, limit=64 [ 156.680618][ T7682] Buffer I/O error on dev loop1, logical block 655372, async page read [ 156.689300][ T7682] attempt to access beyond end of device [ 156.689300][ T7682] loop1: rw=0, want=655374, limit=64 [ 156.703302][ T7682] Buffer I/O error on dev loop1, logical block 655373, async page read [ 156.712849][ T7682] attempt to access beyond end of device [ 156.712849][ T7682] loop1: rw=0, want=655375, limit=64 [ 156.714934][ T4179] usb 3-1: USB disconnect, device number 9 [ 156.724086][ T7682] Buffer I/O error on dev loop1, logical block 655374, async page read [ 156.741788][ T7682] attempt to access beyond end of device [ 156.741788][ T7682] loop1: rw=0, want=655376, limit=64 [ 156.755617][ T7682] Buffer I/O error on dev loop1, logical block 655375, async page read [ 156.764568][ T7682] hfs: unable to open catalog tree [ 156.770230][ T7682] hfs: can't find a HFS filesystem on dev loop1 [ 156.847968][ T4272] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 156.862380][ T4272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.877473][ T4272] usb 5-1: Product: syz [ 156.882198][ T4272] usb 5-1: Manufacturer: syz [ 156.890035][ T4272] usb 5-1: SerialNumber: syz [ 156.894678][ T4786] hid (null): unknown global tag 0xd [ 156.894701][ T4786] hid (null): global environment stack underflow [ 156.919593][ T4786] hid (null): invalid report_count -877094555 [ 156.925738][ T4786] hid (null): bogus close delimiter [ 156.928578][ T4272] usb 5-1: config 0 descriptor?? [ 156.989984][ T4272] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 157.004116][ T4272] usb 5-1: No valid video chain found. [ 157.123397][ T4272] usb 4-1: USB disconnect, device number 8 [ 157.177701][ T4430] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.196891][ T4179] usb 5-1: USB disconnect, device number 10 [ 157.273869][ T7696] loop2: detected capacity change from 0 to 1024 [ 157.587914][ T4430] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.685798][ T4430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.697347][ T4430] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.728096][ T7696] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 157.748475][ T7696] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #32: comm syz.2.1358: iget: special inode unallocated [ 157.795564][ T7696] EXT4-fs (loop2): no journal found [ 157.804389][ T7696] EXT4-fs (loop2): can't get journal size [ 157.827013][ T7696] EXT4-fs (loop2): filesystem is read-only [ 157.837898][ T7696] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 157.881823][ T7696] EXT4-fs (loop2): shut down requested (2) [ 157.903952][ T4430] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 157.914529][ T4430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.935759][ T4430] usb 2-1: Product: syz [ 157.943511][ T4430] usb 2-1: Manufacturer: syz [ 157.948547][ T4430] usb 2-1: SerialNumber: syz [ 158.064234][ T7709] loop4: detected capacity change from 0 to 2048 [ 158.068806][ T4786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.145360][ T7709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.166844][ T7709] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.239314][ T7723] vivid-001: disconnect [ 158.258433][ T7721] vivid-001: reconnect [ 158.327746][ T4786] usb 4-1: Using ep0 maxpacket: 32 [ 158.447928][ T4786] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 158.474955][ T4786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.489149][ T4786] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 158.530121][ T4786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.566640][ T4786] usb 4-1: config 0 descriptor?? [ 158.622517][ T7745] loop2: detected capacity change from 0 to 16 [ 158.652525][ T7745] erofs: (device loop2): mounted with root inode @ nid 36. [ 158.886370][ T7754] maxtcpc: probe of 0-0005 failed with error -5 [ 158.897012][ T7754] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x05 [ 158.911091][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 159.062099][ T4786] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 159.208075][ T7682] comedi comedi1: reset error (fatal) [ 159.279133][ T4430] usb 2-1: USB disconnect, device number 10 [ 159.457867][ T4786] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-71) [ 159.472508][ T4786] corsair-psu: probe of 0003:1B1C:1C09.000E failed with error -71 [ 159.482754][ T4786] usb 4-1: USB disconnect, device number 9 [ 159.525130][ T4184] udevd[4184]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.539404][ T7777] fido_id[7777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 159.737713][ T4265] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.845408][ T7785] loop2: detected capacity change from 0 to 512 [ 159.864169][ T7787] vivid-003: disconnect [ 159.871767][ T7786] vivid-003: reconnect [ 159.890510][ T7785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.918017][ T7785] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1399: invalid indirect mapped block 1023410176 (level 0) [ 159.935660][ T7785] EXT4-fs (loop2): Remounting filesystem read-only [ 159.943008][ T7785] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 159.965693][ T7785] EXT4-fs (loop2): Remounting filesystem read-only [ 159.974701][ T7785] EXT4-fs (loop2): 1 truncate cleaned up [ 159.998252][ T7785] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000007,jqfmt=vfsold,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 160.011438][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 160.043401][ T7785] jffs2: notice: (7785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.163735][ T7800] loop0: detected capacity change from 0 to 512 [ 160.308915][ T4265] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 160.327657][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.347985][ T4265] usb 5-1: Product: syz [ 160.352246][ T4265] usb 5-1: Manufacturer: syz [ 160.372286][ T4265] usb 5-1: SerialNumber: syz [ 160.389796][ T4265] usb 5-1: config 0 descriptor?? [ 160.401861][ T7800] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.414365][ T7800] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1405: inode has both inline data and extents flags [ 160.427967][ T7819] syz.3.1411 uses obsolete (PF_INET,SOCK_PACKET) [ 160.447134][ T7800] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1405: couldn't read orphan inode 15 (err -117) [ 160.491304][ T7800] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 160.648297][ T4786] usb 5-1: USB disconnect, device number 11 [ 160.712612][ T7800] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 160.738502][ T7839] i2c i2c-0: Failed to register i2c client maxtcpc at 0x05 (-16) [ 160.745115][ T26] audit: type=1800 audit(1793122856.291:19): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1405" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 160.815509][ T7842] kvm [7841]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 161.228414][ T4265] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.283371][ T7877] i2c i2c-0: Failed to register i2c client maxtcpc at 0x05 (-16) [ 161.323228][ T7880] loop1: detected capacity change from 0 to 16 [ 161.392895][ T7880] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 161.527892][ T4265] usb 3-1: Using ep0 maxpacket: 16 [ 161.539739][ T7890] loop3: detected capacity change from 0 to 512 [ 161.556877][ T7894] sctp: [Deprecated]: syz.0.1437 (pid 7894) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.556877][ T7894] Use struct sctp_sack_info instead [ 161.652660][ T7890] EXT4-fs (loop3): Test dummy encryption mode enabled [ 161.662739][ T4265] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.691551][ T7890] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1449: inode has both inline data and extents flags [ 161.692951][ T4265] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.716200][ T4265] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 161.729701][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.736331][ T4265] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 161.745715][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.756152][ T4265] usb 3-1: config 0 descriptor?? [ 161.789712][ T7890] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1449: couldn't read orphan inode 15 (err -117) [ 161.806862][ T7890] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 161.854667][ T7913] program syz.1.1448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.896337][ T26] audit: type=1800 audit(1793122857.441:20): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1449" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 162.232003][ T4265] hid (null): unknown global tag 0xd [ 162.250567][ T4265] hid (null): global environment stack underflow [ 162.280552][ T4265] hid (null): invalid report_count -877094555 [ 162.306181][ T4265] hid (null): bogus close delimiter [ 162.321350][ T7937] loop1: detected capacity change from 0 to 8 [ 162.383617][ T7937] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 162.534934][ T4430] usb 3-1: USB disconnect, device number 10 [ 162.873575][ T7971] loop3: detected capacity change from 0 to 16 [ 162.890016][ T7971] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 163.160317][ T7995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1487'. [ 163.202071][ T8000] loop0: detected capacity change from 0 to 512 [ 163.275275][ T8008] sctp: [Deprecated]: syz.3.1493 (pid 8008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.275275][ T8008] Use struct sctp_sack_info instead [ 163.301755][ T8006] kvm [8005]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 163.345800][ T8000] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.361748][ T8000] ext4 filesystem being mounted at /346/. supports timestamps until 2038-01-19 (0x7fffffff) [ 163.453612][ T8000] EXT4-fs error (device loop0): ext4_get_first_dir_block:3610: inode #12: comm syz.0.1488: directory missing '.' [ 163.560219][ T8030] loop3: detected capacity change from 0 to 1024 [ 163.601929][ T8033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.621099][ T8030] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 163.653230][ T8030] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 163.662457][ T8030] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 163.975781][ T8058] tap0: tun_chr_ioctl cmd 1074025677 [ 163.991380][ T8058] tap0: linktype set to 805 [ 164.100486][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 164.176810][ T8077] usbip-vudc usbip-vudc.0: gadget not bound [ 164.734728][ T8120] loop2: detected capacity change from 0 to 1024 [ 164.833929][ T8100] loop3: detected capacity change from 0 to 32768 [ 164.963728][ T8100] XFS (loop3): Mounting V5 Filesystem [ 165.129579][ T8100] XFS (loop3): Ending clean mount [ 165.224237][ T4197] XFS (loop3): Unmounting Filesystem [ 165.275650][ T8163] loop1: detected capacity change from 0 to 1024 [ 165.339364][ T8168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1560'. [ 165.575582][ T9] hfsplus: b-tree write err: -5, ino 25 [ 165.594079][ T9] hfsplus: b-tree write err: -5, ino 4 [ 165.623957][ T9] hfsplus: b-tree write err: -5, ino 2 [ 165.670312][ T8179] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.803292][ T8185] usbip-vudc usbip-vudc.0: gadget not bound [ 166.061357][ T8206] loop4: detected capacity change from 0 to 1024 [ 166.296527][ T8224] input: syz1 as /devices/virtual/input/input27 [ 166.317996][ T8227] erofs: (device loop2): mounted with root inode @ nid 36. [ 166.343535][ T8227] overlayfs: failed to get metacopy (-117) [ 166.602806][ T8245] set_capacity_and_notify: 1 callbacks suppressed [ 166.602823][ T8245] loop2: detected capacity change from 0 to 256 [ 166.646950][ T8245] FAT-fs (loop2): Directory bread(block 1285) failed [ 166.650710][ T8244] loop0: detected capacity change from 0 to 2048 [ 166.662983][ T8245] FAT-fs (loop2): Directory bread(block 1286) failed [ 166.690385][ T8245] FAT-fs (loop2): Directory bread(block 1287) failed [ 166.719157][ T8245] FAT-fs (loop2): Directory bread(block 1288) failed [ 166.736491][ T8244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.756075][ T8245] FAT-fs (loop2): Directory bread(block 1285) failed [ 166.795842][ T8245] FAT-fs (loop2): Directory bread(block 1286) failed [ 166.808467][ T8245] FAT-fs (loop2): Directory bread(block 1287) failed [ 166.848018][ T8245] FAT-fs (loop2): Directory bread(block 1288) failed [ 166.848520][ T8256] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 166.867861][ T8245] FAT-fs (loop2): Directory bread(block 1285) failed [ 166.929135][ T8258] input: syz1 as /devices/virtual/input/input28 [ 167.023116][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 167.101917][ T8265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.150924][ T8269] binder: 8268:8269 ioctl 400c620e 200000000040 returned -22 [ 167.195092][ T8271] loop2: detected capacity change from 0 to 1024 [ 167.308930][ T8271] hfsplus: invalid length 1280 has been corrected to 255 [ 167.408758][ T8254] loop1: detected capacity change from 0 to 32768 [ 167.449138][ T8286] loop4: detected capacity change from 0 to 512 [ 167.525632][ T8254] JBD2: Ignoring recovery information on journal [ 167.649035][ T8286] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1615: iget: bad i_size value: 38620345925642 [ 167.717104][ T8286] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1615: couldn't read orphan inode 15 (err -117) [ 167.741429][ T8254] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.755582][ T8286] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 167.902065][ T155] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 167.922003][ T4191] ocfs2: Unmounting device (7,1) on (node local) [ 167.995023][ T155] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 168.045193][ T155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.045193][ T155] [ 168.072828][ T8325] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.090971][ T155] EXT4-fs (loop4): Total free blocks count 0 [ 168.097007][ T155] EXT4-fs (loop4): Free/Dirty block details [ 168.110334][ T155] EXT4-fs (loop4): free_blocks=0 [ 168.115576][ T155] EXT4-fs (loop4): dirty_blocks=1 [ 168.121292][ T155] EXT4-fs (loop4): Block reservation details [ 168.126507][ T8327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.139551][ T155] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 168.177221][ T8331] loop3: detected capacity change from 0 to 16 [ 168.260773][ T8331] erofs: (device loop3): mounted with root inode @ nid 36. [ 168.290138][ T8331] overlayfs: failed to get metacopy (-117) [ 168.339981][ T8337] loop2: detected capacity change from 0 to 256 [ 168.347265][ T8338] loop4: detected capacity change from 0 to 64 [ 168.390349][ T8338] attempt to access beyond end of device [ 168.390349][ T8338] loop4: rw=0, want=655369, limit=64 [ 168.401687][ T8338] Buffer I/O error on dev loop4, logical block 655368, async page read [ 168.410833][ T8338] attempt to access beyond end of device [ 168.410833][ T8338] loop4: rw=0, want=655370, limit=64 [ 168.422612][ T8338] Buffer I/O error on dev loop4, logical block 655369, async page read [ 168.431564][ T8338] attempt to access beyond end of device [ 168.431564][ T8338] loop4: rw=0, want=655371, limit=64 [ 168.442256][ T8340] loop3: detected capacity change from 0 to 1024 [ 168.443501][ T8338] Buffer I/O error on dev loop4, logical block 655370, async page read [ 168.467908][ T8337] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.493577][ T8338] attempt to access beyond end of device [ 168.493577][ T8338] loop4: rw=0, want=655372, limit=64 [ 168.505452][ T8337] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 168.512909][ T8338] Buffer I/O error on dev loop4, logical block 655371, async page read [ 168.527824][ T8338] attempt to access beyond end of device [ 168.527824][ T8338] loop4: rw=0, want=655373, limit=64 [ 168.539319][ T8338] Buffer I/O error on dev loop4, logical block 655372, async page read [ 168.548225][ T8338] attempt to access beyond end of device [ 168.548225][ T8338] loop4: rw=0, want=655374, limit=64 [ 168.561841][ T8338] Buffer I/O error on dev loop4, logical block 655373, async page read [ 168.588279][ T8338] attempt to access beyond end of device [ 168.588279][ T8338] loop4: rw=0, want=655375, limit=64 [ 168.611593][ T9] hfsplus: b-tree write err: -5, ino 25 [ 168.624015][ T9] hfsplus: b-tree write err: -5, ino 4 [ 168.627816][ T8338] Buffer I/O error on dev loop4, logical block 655374, async page read [ 168.637760][ T9] hfsplus: b-tree write err: -5, ino 2 [ 168.653071][ T8338] attempt to access beyond end of device [ 168.653071][ T8338] loop4: rw=0, want=655376, limit=64 [ 168.696248][ T8338] Buffer I/O error on dev loop4, logical block 655375, async page read [ 168.705166][ T8338] hfs: unable to open catalog tree [ 168.718084][ T8338] hfs: can't find a HFS filesystem on dev loop4 [ 168.888488][ T8353] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.143367][ T8377] netem: incorrect ge model size [ 169.159575][ T8377] netem: change failed [ 169.170767][ T4265] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.276345][ T8393] loop2: detected capacity change from 0 to 128 [ 169.286235][ T8395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 169.485109][ T8406] SQUASHFS error: lzo decompression failed, data probably corrupt [ 169.493853][ T8406] SQUASHFS error: Failed to read block 0x144: -5 [ 169.502502][ T8406] SQUASHFS error: Unable to read metadata cache entry [142] [ 169.510442][ T8406] SQUASHFS error: Unable to read inode 0x11f [ 169.567903][ T4430] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.618389][ T4265] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.697914][ T4431] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 169.719826][ T4265] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.731011][ T4265] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 169.865367][ T8421] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1672: iget: bad i_size value: 38620345925642 [ 169.884249][ T8421] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1672: couldn't read orphan inode 15 (err -117) [ 169.899826][ T4265] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 169.910448][ T8421] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 169.911188][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.936849][ T4265] usb 5-1: Product: syz [ 169.941926][ T4265] usb 5-1: Manufacturer: syz [ 169.947128][ T4265] usb 5-1: SerialNumber: syz [ 169.967584][ T4471] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 169.984176][ T4471] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 169.998920][ T4430] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.002899][ T4471] EXT4-fs (loop3): This should not happen!! Data will be lost [ 170.002899][ T4471] [ 170.009264][ T4430] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.024595][ T4471] EXT4-fs (loop3): Total free blocks count 0 [ 170.029463][ T4430] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.033993][ T4471] EXT4-fs (loop3): Free/Dirty block details [ 170.044166][ T4430] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.063520][ T4471] EXT4-fs (loop3): free_blocks=0 [ 170.074515][ T4471] EXT4-fs (loop3): dirty_blocks=1 [ 170.079969][ T4471] EXT4-fs (loop3): Block reservation details [ 170.081234][ T8424] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.086029][ T4471] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 170.120118][ T4431] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 170.133528][ T4431] usb 3-1: config 1 has no interface number 0 [ 170.140895][ T4431] usb 3-1: config 1 interface 105 has no altsetting 0 [ 170.218011][ T4430] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.233276][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.241972][ T4430] usb 1-1: Product: syz [ 170.246366][ T4430] usb 1-1: Manufacturer: syz [ 170.319492][ T4430] cdc_wdm 1-1:1.0: skipping garbage [ 170.324741][ T4430] cdc_wdm 1-1:1.0: skipping garbage [ 170.331233][ T8430] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.350032][ T4430] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 170.356283][ T4430] cdc_wdm 1-1:1.0: Unknown control protocol [ 170.363146][ T4431] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 170.372723][ T4431] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 170.390843][ T4431] usb 3-1: Product: syz [ 170.395491][ T4431] usb 3-1: Manufacturer: syz [ 170.400720][ T4431] usb 3-1: SerialNumber: syz [ 170.412359][ T8430] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 170.744465][ T4430] usb 1-1: USB disconnect, device number 7 [ 170.811532][ T8441] erofs: (device loop3): mounted with root inode @ nid 36. [ 170.826547][ T8441] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 170.857790][ T8441] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 170.866948][ T8441] attempt to access beyond end of device [ 170.866948][ T8441] loop3: rw=524288, want=34359738368, limit=16 [ 170.912465][ T8441] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 170.953787][ T8441] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 170.974663][ T26] audit: type=1800 audit(1793122866.521:21): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1680" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 171.108380][ T4431] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 171.125406][ T4431] aqc111: probe of 3-1:1.105 failed with error -71 [ 171.139927][ T4431] usb 3-1: USB disconnect, device number 11 [ 171.221411][ T8338] comedi comedi1: reset error (fatal) [ 171.251937][ T8457] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.282920][ T8457] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 171.313420][ T8459] netem: incorrect ge model size [ 171.322401][ T8459] netem: change failed [ 171.387883][ T4265] usb 5-1: USB disconnect, device number 12 [ 171.534083][ T8478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1697'. [ 171.670836][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.897399][ T4266] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 171.914036][ T8507] set_capacity_and_notify: 5 callbacks suppressed [ 171.914053][ T8507] loop3: detected capacity change from 0 to 128 [ 171.962700][ T4266] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.677313][ T8556] program syz.3.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.142771][ T4272] kernel read not supported for file /vga_arbiter (pid: 4272 comm: kworker/1:6) [ 173.526932][ T8605] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 173.541394][ T8607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.567854][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1752'. [ 173.815639][ T8622] loop4: detected capacity change from 0 to 16 [ 173.922891][ T8596] loop0: detected capacity change from 0 to 32768 [ 173.950381][ T8622] erofs: (device loop4): mounted with root inode @ nid 36. [ 173.973702][ T8596] JBD2: Ignoring recovery information on journal [ 173.984399][ T8622] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 174.014532][ T8596] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.057494][ T8622] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 174.102239][ T8622] attempt to access beyond end of device [ 174.102239][ T8622] loop4: rw=524288, want=34359738368, limit=16 [ 174.127461][ T4201] ocfs2: Unmounting device (7,0) on (node local) [ 174.147882][ T8622] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 174.172713][ T8622] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 174.187262][ T26] audit: type=1800 audit(1793122869.731:22): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1761" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 174.291891][ T8633] loop3: detected capacity change from 0 to 512 [ 174.443019][ T8633] EXT4-fs (loop3): 1 truncate cleaned up [ 174.484255][ T8633] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.513935][ T8644] loop1: detected capacity change from 0 to 512 [ 174.573914][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 174.761033][ T8656] loop2: detected capacity change from 0 to 512 [ 174.883170][ T8656] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.930895][ T8656] EXT4-fs (loop2): 1 truncate cleaned up [ 174.959755][ T8656] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,init_itable,quota,nogrpid,,errors=continue. Quota mode: writeback. [ 175.151435][ T8672] loop1: detected capacity change from 0 to 2048 [ 175.168100][ T4266] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.185459][ T8672] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 175.248585][ T8676] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.395636][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 175.408093][ T4266] usb 4-1: Using ep0 maxpacket: 16 [ 175.532376][ T4266] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 175.545457][ T4266] usb 4-1: config 0 has no interface number 0 [ 175.557408][ T4266] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.576596][ T4266] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.647037][ T8701] loop4: detected capacity change from 0 to 1024 [ 175.708071][ T4266] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.723652][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.753746][ T4266] usb 4-1: Product: syz [ 175.765867][ T4266] usb 4-1: SerialNumber: syz [ 175.808910][ T4266] usb 4-1: config 0 descriptor?? [ 175.861419][ T4266] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 175.863996][ T8712] loop4: detected capacity change from 0 to 512 [ 175.870843][ T4266] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input29 [ 175.933800][ T8712] EXT4-fs (loop4): 1 truncate cleaned up [ 175.981789][ T8712] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.098127][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 176.301169][ T4266] usb 4-1: USB disconnect, device number 10 [ 176.325133][ T4266] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 189.788035][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 189.788210][ T4430] Bluetooth: hci1: command 0x0406 tx timeout [ 189.794144][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 189.800157][ T4430] Bluetooth: hci3: command 0x0406 tx timeout [ 190.908459][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 197.952460][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.958828][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.907777][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.907819][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.347810][ T4786] Bluetooth: hci4: command 0x0406 tx timeout [ 259.392517][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.399312][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.908487][ T1241] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.909186][ T4471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.831740][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.838096][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.788138][ T27] INFO: task kworker/u4:3:377 blocked for more than 143 seconds. [ 329.795924][ T27] Not tainted syzkaller #0 [ 329.802883][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.811614][ T27] task:kworker/u4:3 state:D stack:22560 pid: 377 ppid: 2 flags:0x00004000 [ 329.820913][ T27] Workqueue: writeback wb_workfn (flush-8:0) [ 329.827049][ T27] Call Trace: [ 329.830597][ T27] [ 329.833638][ T27] __schedule+0x11c3/0x4350 [ 329.838374][ T27] ? lock_chain_count+0x20/0x20 [ 329.843579][ T27] ? release_firmware_map_entry+0x190/0x190 [ 329.849834][ T27] ? blk_check_plugged+0x250/0x250 [ 329.855344][ T27] ? kthread_data+0x4b/0xc0 [ 329.860220][ T27] schedule+0x11b/0x1e0 [ 329.864388][ T27] io_schedule+0x7c/0xd0 [ 329.868863][ T27] bit_wait_io+0xd/0xc0 [ 329.873037][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 329.878732][ T27] ? bit_wait+0xc0/0xc0 [ 329.883102][ T27] ? __wait_on_bit+0x170/0x170 [ 329.888274][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 329.893352][ T27] ? bit_waitqueue+0x30/0x30 [ 329.898096][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 329.903279][ T27] do_get_write_access+0x134/0xe40 [ 329.909269][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 329.915269][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 329.922092][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.928347][ T27] ? __might_sleep+0xf0/0xf0 [ 329.933010][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 329.938697][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 329.944165][ T27] ext4_ext_insert_extent+0x2be8/0x47d0 [ 329.950127][ T27] ? ext4_ext_search_right+0x386/0x840 [ 329.956129][ T27] ? ext4_ext_next_allocated_block+0x250/0x250 [ 329.962410][ T27] ? ext4_ext_find_goal+0xed/0x1d0 [ 329.967678][ T27] ext4_ext_map_blocks+0x191a/0x63d0 [ 329.972999][ T27] ? ext4_ext_release+0x10/0x10 [ 329.978376][ T27] ? rwsem_write_trylock+0x135/0x1c0 [ 329.983687][ T27] ? ext4_es_lookup_extent+0x5fd/0x9f0 [ 329.989188][ T27] ext4_map_blocks+0x97f/0x1a50 [ 329.994104][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 330.000826][ T27] ? ext4_issue_zeroout+0x250/0x250 [ 330.006096][ T27] ? ext4_inode_journal_mode+0x372/0x460 [ 330.012138][ T27] ext4_writepages+0x124a/0x2d40 [ 330.017105][ T27] ? ext4_readpage+0x2e0/0x2e0 [ 330.021966][ T27] ? __lock_acquire+0x13b3/0x7d40 [ 330.026997][ T27] ? verify_lock_unused+0x140/0x140 [ 330.032325][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.038874][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 330.043943][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 330.049013][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 330.054709][ T27] ? ext4_readpage+0x2e0/0x2e0 [ 330.059584][ T27] do_writepages+0x493/0x700 [ 330.064278][ T27] ? __writepage+0x130/0x130 [ 330.069259][ T27] ? writeback_sb_inodes+0x6b7/0x1750 [ 330.074688][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 330.079815][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 330.084871][ T27] __writeback_single_inode+0x153/0xda0 [ 330.090449][ T27] writeback_sb_inodes+0xaaa/0x1750 [ 330.095662][ T27] ? queue_io+0x530/0x530 [ 330.100518][ T27] ? __rwlock_init+0x140/0x140 [ 330.105312][ T27] __writeback_inodes_wb+0x12a/0x3f0 [ 330.111798][ T27] wb_writeback+0x45e/0xbc0 [ 330.116332][ T27] ? rcu_lock_release+0x20/0x20 [ 330.121540][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.127551][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 330.133042][ T27] ? mark_lock+0x94/0x320 [ 330.137365][ T27] ? cpumask_next+0xb3/0xd0 [ 330.141988][ T27] wb_workfn+0xb15/0xf20 [ 330.146244][ T27] ? inode_wait_for_writeback+0x220/0x220 [ 330.151997][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.158931][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 330.164003][ T27] ? read_lock_is_recursive+0x10/0x10 [ 330.169426][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 330.175325][ T27] ? _raw_spin_unlock+0x40/0x40 [ 330.180234][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 330.185436][ T27] process_one_work+0x867/0xff0 [ 330.190715][ T27] ? worker_detach_from_pool+0x240/0x240 [ 330.196350][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 330.201777][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 330.206817][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 330.212502][ T27] ? wq_worker_running+0x97/0x170 [ 330.217544][ T27] worker_thread+0xad7/0x12a0 [ 330.223374][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 330.229344][ T27] kthread+0x42e/0x520 [ 330.233496][ T27] ? rcu_lock_release+0x20/0x20 [ 330.238409][ T27] ? kthread_blkcg+0xd0/0xd0 [ 330.243022][ T27] ret_from_fork+0x1f/0x30 [ 330.248125][ T27] [ 330.251354][ T27] INFO: task jbd2/sda1-8:3524 blocked for more than 143 seconds. [ 330.259692][ T27] Not tainted syzkaller #0 [ 330.264637][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.273374][ T27] task:jbd2/sda1-8 state:D stack:25840 pid: 3524 ppid: 2 flags:0x00004000 [ 330.282850][ T27] Call Trace: [ 330.286120][ T27] [ 330.289073][ T27] __schedule+0x11c3/0x4350 [ 330.293595][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.299636][ T27] ? lock_chain_count+0x20/0x20 [ 330.304562][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 330.310184][ T27] ? release_firmware_map_entry+0x190/0x190 [ 330.316102][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 330.322028][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 330.327261][ T27] schedule+0x11b/0x1e0 [ 330.331787][ T27] io_schedule+0x7c/0xd0 [ 330.336176][ T27] bit_wait_io+0xd/0xc0 [ 330.340752][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 330.346254][ T27] ? bit_wait+0xc0/0xc0 [ 330.351761][ T27] ? __wait_on_bit+0x170/0x170 [ 330.356553][ T27] ? do_raw_write_lock+0x11a/0x260 [ 330.362282][ T27] ? bit_waitqueue+0x30/0x30 [ 330.366915][ T27] ? do_raw_read_unlock+0x39/0x70 [ 330.372473][ T27] jbd2_journal_commit_transaction+0x2f0b/0x5c30 [ 330.378898][ T27] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 330.385670][ T27] ? _raw_spin_unlock+0x40/0x40 [ 330.390556][ T27] ? rcu_is_watching+0x11/0xa0 [ 330.395408][ T27] ? __timer_delete_sync+0x1f5/0x290 [ 330.401213][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 330.406252][ T27] ? timer_delete_sync+0x20/0x20 [ 330.411238][ T27] ? do_raw_read_unlock+0x70/0x70 [ 330.416283][ T27] ? prepare_to_wait+0x1a8/0x1f0 [ 330.421337][ T27] kjournald2+0x45a/0x900 [ 330.425767][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 330.431477][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 330.437391][ T27] ? init_wait_entry+0xd0/0xd0 [ 330.442518][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 330.449433][ T27] ? __kthread_parkme+0x14e/0x1b0 [ 330.454494][ T27] kthread+0x42e/0x520 [ 330.460191][ T27] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 330.465788][ T27] ? kthread_blkcg+0xd0/0xd0 [ 330.470448][ T27] ret_from_fork+0x1f/0x30 [ 330.474886][ T27] [ 330.477990][ T27] INFO: task syz-executor:4176 blocked for more than 144 seconds. [ 330.485798][ T27] Not tainted syzkaller #0 [ 330.491244][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.499976][ T27] task:syz-executor state:D stack:22992 pid: 4176 ppid: 4175 flags:0x00004002 [ 330.509284][ T27] Call Trace: [ 330.512559][ T27] [ 330.515481][ T27] __schedule+0x11c3/0x4350 [ 330.520466][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.526500][ T27] ? lock_chain_count+0x20/0x20 [ 330.531406][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 330.536717][ T27] ? release_firmware_map_entry+0x190/0x190 [ 330.542665][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 330.549780][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 330.555059][ T27] schedule+0x11b/0x1e0 [ 330.559269][ T27] io_schedule+0x7c/0xd0 [ 330.563520][ T27] bit_wait_io+0xd/0xc0 [ 330.568145][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 330.573627][ T27] ? bit_wait+0xc0/0xc0 [ 330.578266][ T27] ? __wait_on_bit+0x170/0x170 [ 330.583044][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 330.588144][ T27] ? bit_waitqueue+0x30/0x30 [ 330.592744][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 330.597990][ T27] do_get_write_access+0x134/0xe40 [ 330.603126][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 330.609472][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 330.615623][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 330.621805][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 330.627123][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 330.632732][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 330.638699][ T27] ext4_dirty_inode+0xbf/0x100 [ 330.643472][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 330.649311][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 330.654351][ T27] generic_update_time+0x1cd/0x1f0 [ 330.661083][ T27] file_update_time+0x3c0/0x440 [ 330.665990][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 330.671842][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 330.676902][ T27] ? wp_page_shared+0x15b/0x6c0 [ 330.681868][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 330.688155][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 330.693202][ T27] do_page_mkwrite+0x168/0x3c0 [ 330.698415][ T27] wp_page_shared+0x163/0x6c0 [ 330.703115][ T27] handle_mm_fault+0x1fbd/0x4440 [ 330.708116][ T27] ? get_page+0xe0/0xe0 [ 330.712272][ T27] ? vmacache_find+0x238/0x590 [ 330.717091][ T27] ? find_vma+0xd2/0x230 [ 330.721372][ T27] do_user_addr_fault+0x494/0xc90 [ 330.726506][ T27] exc_page_fault+0x60/0x100 [ 330.731449][ T27] asm_exc_page_fault+0x22/0x30 [ 330.736320][ T27] RIP: 0033:0x7f311cb9fad6 [ 330.740799][ T27] RSP: 002b:00007ffc222cddd0 EFLAGS: 00010202 [ 330.746920][ T27] RAX: 00007f311ac7e000 RBX: 0000555568da8150 RCX: 0000000000000005 [ 330.754912][ T27] RDX: 000000000000143c RSI: 0000555568daf700 RDI: 0000000000000020 [ 330.763128][ T27] RBP: 00007ffc222ce2d0 R08: 0000555568daf7c0 R09: 0000000000000086 [ 330.772765][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc222ce110 [ 330.781083][ T27] R13: 00007ffc222cdf00 R14: 585858582e7a7973 R15: 00007ffc222cde50 [ 330.789836][ T27] [ 330.792942][ T27] INFO: task syz.1.1798:8690 blocked for more than 144 seconds. [ 330.801001][ T27] Not tainted syzkaller #0 [ 330.805961][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.814673][ T27] task:syz.1.1798 state:D stack:27664 pid: 8690 ppid: 4191 flags:0x00004004 [ 330.824193][ T27] Call Trace: [ 330.827479][ T27] [ 330.830491][ T27] __schedule+0x11c3/0x4350 [ 330.835013][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.841035][ T27] ? lock_chain_count+0x20/0x20 [ 330.845886][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 330.851516][ T27] ? release_firmware_map_entry+0x190/0x190 [ 330.857440][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 330.863364][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 330.868600][ T27] schedule+0x11b/0x1e0 [ 330.873185][ T27] io_schedule+0x7c/0xd0 [ 330.877566][ T27] bit_wait_io+0xd/0xc0 [ 330.882923][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 330.888430][ T27] ? bit_wait+0xc0/0xc0 [ 330.892594][ T27] ? __wait_on_bit+0x170/0x170 [ 330.897338][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 330.902421][ T27] ? bit_waitqueue+0x30/0x30 [ 330.907013][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 330.913840][ T27] do_get_write_access+0x134/0xe40 [ 330.919039][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 330.925085][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 330.931270][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 330.937432][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 330.943125][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 330.948725][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 330.954192][ T27] ext4_dirty_inode+0xbf/0x100 [ 330.959005][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 330.964811][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 330.970201][ T27] generic_update_time+0x1cd/0x1f0 [ 330.975834][ T27] file_update_time+0x3c0/0x440 [ 330.980765][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 330.985885][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 330.991175][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 330.996966][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 331.003621][ T27] ? count_memcg_event_mm+0x324/0x370 [ 331.010273][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 331.016444][ T27] ? verify_lock_unused+0x140/0x140 [ 331.021978][ T27] do_page_mkwrite+0x168/0x3c0 [ 331.026763][ T27] handle_mm_fault+0x1e47/0x4440 [ 331.032053][ T27] ? get_page+0xe0/0xe0 [ 331.036221][ T27] ? vmacache_find+0x238/0x590 [ 331.041570][ T27] ? find_vma+0xd2/0x230 [ 331.045828][ T27] do_user_addr_fault+0x494/0xc90 [ 331.050904][ T27] exc_page_fault+0x60/0x100 [ 331.055491][ T27] ? clear_bhb_loop+0x30/0x80 [ 331.060271][ T27] asm_exc_page_fault+0x22/0x30 [ 331.065124][ T27] RIP: 0033:0x7fb0b4524ba9 [ 331.077063][ T27] RSP: 002b:00007ffde901fb90 EFLAGS: 00010202 [ 331.083783][ T27] RAX: 0000001b32c21000 RBX: ffffffff83a7b185 RCX: 0000001b32c20ff8 [ 331.091952][ T27] RDX: 0000001b3262421c RSI: 0000000000000008 RDI: 00007fb0b5406720 [ 331.100713][ T27] RBP: 00000000000001af R08: 00007fb0b48c1000 R09: 00007fb0b48c3000 [ 331.109021][ T27] R10: 0000000083a7b189 R11: 0000000000000003 R12: 00007fb0b48d7038 [ 331.117019][ T27] R13: 0000000000000587 R14: ffffffff83a7bc8b R15: 00007fb0b5406720 [ 331.125044][ T27] ? tomoyo_write_log2+0x24b/0x920 [ 331.130508][ T27] ? tomoyo_init_log+0x15d5/0x1e90 [ 331.135623][ T27] [ 331.138688][ T27] INFO: task syz.2.1802:8718 blocked for more than 144 seconds. [ 331.146307][ T27] Not tainted syzkaller #0 [ 331.151408][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.160585][ T27] task:syz.2.1802 state:D stack:27664 pid: 8718 ppid: 4200 flags:0x00004004 [ 331.169837][ T27] Call Trace: [ 331.173114][ T27] [ 331.176029][ T27] __schedule+0x11c3/0x4350 [ 331.181038][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.187042][ T27] ? lock_chain_count+0x20/0x20 [ 331.192289][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 331.197577][ T27] ? release_firmware_map_entry+0x190/0x190 [ 331.203540][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 331.210202][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 331.215422][ T27] schedule+0x11b/0x1e0 [ 331.220269][ T27] io_schedule+0x7c/0xd0 [ 331.224530][ T27] bit_wait_io+0xd/0xc0 [ 331.229454][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 331.234927][ T27] ? bit_wait+0xc0/0xc0 [ 331.239416][ T27] ? __wait_on_bit+0x170/0x170 [ 331.244189][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 331.249520][ T27] ? bit_waitqueue+0x30/0x30 [ 331.254116][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 331.260178][ T27] do_get_write_access+0x134/0xe40 [ 331.265322][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 331.271342][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 331.277678][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 331.284277][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 331.290017][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 331.295571][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 331.301086][ T27] ext4_dirty_inode+0xbf/0x100 [ 331.305853][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 331.311785][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 331.316967][ T27] generic_update_time+0x1cd/0x1f0 [ 331.323171][ T27] file_update_time+0x3c0/0x440 [ 331.328102][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 331.333218][ T27] ? mark_lock+0x94/0x320 [ 331.337544][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 331.342687][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 331.348826][ T27] ? pte_alloc_one+0x287/0x310 [ 331.353598][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 331.359889][ T27] ? __rwlock_init+0x140/0x140 [ 331.364654][ T27] ? count_memcg_event_mm+0x324/0x370 [ 331.370047][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 331.375329][ T27] do_page_mkwrite+0x168/0x3c0 [ 331.380555][ T27] handle_mm_fault+0x1e47/0x4440 [ 331.385827][ T27] ? get_page+0xe0/0xe0 [ 331.390070][ T27] ? vmacache_find+0x4e3/0x590 [ 331.394843][ T27] ? vmacache_update+0xa0/0x100 [ 331.399741][ T27] ? find_vma+0x1df/0x230 [ 331.404086][ T27] do_user_addr_fault+0x494/0xc90 [ 331.409572][ T27] exc_page_fault+0x60/0x100 [ 331.414169][ T27] ? clear_bhb_loop+0x30/0x80 [ 331.418892][ T27] asm_exc_page_fault+0x22/0x30 [ 331.423739][ T27] RIP: 0033:0x7f54e4eb0ea3 [ 331.429380][ T27] RSP: 002b:00007fff882fcac0 EFLAGS: 00010246 [ 331.435467][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32764000 [ 331.443828][ T27] RDX: 0000001b32724000 RSI: 0000000000400000 RDI: 00007f54e522b708 [ 331.451847][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.459859][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 331.468313][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff882fcd50 [ 331.476304][ T27] [ 331.479391][ T27] INFO: task syz.4.1803:8719 blocked for more than 145 seconds. [ 331.487276][ T27] Not tainted syzkaller #0 [ 331.492545][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.501587][ T27] task:syz.4.1803 state:D stack:27664 pid: 8719 ppid: 4190 flags:0x00004004 [ 331.510866][ T27] Call Trace: [ 331.514144][ T27] [ 331.517077][ T27] __schedule+0x11c3/0x4350 [ 331.521620][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.527643][ T27] ? lock_chain_count+0x20/0x20 [ 331.532506][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 331.539479][ T27] ? release_firmware_map_entry+0x190/0x190 [ 331.545397][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 331.551400][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 331.556727][ T27] schedule+0x11b/0x1e0 [ 331.560951][ T27] io_schedule+0x7c/0xd0 [ 331.565216][ T27] bit_wait_io+0xd/0xc0 [ 331.569834][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 331.575312][ T27] ? bit_wait+0xc0/0xc0 [ 331.579503][ T27] ? __wait_on_bit+0x170/0x170 [ 331.584272][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 331.589610][ T27] ? bit_waitqueue+0x30/0x30 [ 331.594384][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 331.600078][ T27] do_get_write_access+0x134/0xe40 [ 331.605234][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 331.611240][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 331.617403][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 331.623584][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 331.629419][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 331.634992][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 331.640508][ T27] ext4_dirty_inode+0xbf/0x100 [ 331.645280][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 331.651361][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 331.656414][ T27] generic_update_time+0x1cd/0x1f0 [ 331.662190][ T27] file_update_time+0x3c0/0x440 [ 331.667085][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 331.672649][ T27] ? mark_lock+0x94/0x320 [ 331.676987][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 331.682074][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 331.687829][ T27] ? pte_alloc_one+0x287/0x310 [ 331.692901][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 331.699615][ T27] ? __rwlock_init+0x140/0x140 [ 331.704393][ T27] ? count_memcg_event_mm+0x324/0x370 [ 331.709808][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 331.715011][ T27] do_page_mkwrite+0x168/0x3c0 [ 331.719821][ T27] handle_mm_fault+0x1e47/0x4440 [ 331.724777][ T27] ? get_page+0xe0/0xe0 [ 331.729398][ T27] ? vmacache_find+0x4e3/0x590 [ 331.734171][ T27] ? vmacache_update+0xa0/0x100 [ 331.739071][ T27] ? find_vma+0x1df/0x230 [ 331.743409][ T27] do_user_addr_fault+0x494/0xc90 [ 331.748588][ T27] exc_page_fault+0x60/0x100 [ 331.753279][ T27] ? clear_bhb_loop+0x30/0x80 [ 331.759624][ T27] asm_exc_page_fault+0x22/0x30 [ 331.764496][ T27] RIP: 0033:0x7fc61d3c9ea3 [ 331.768985][ T27] RSP: 002b:00007ffe1e1943a0 EFLAGS: 00010246 [ 331.775059][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32964000 [ 331.783105][ T27] RDX: 0000001b32924000 RSI: 0000000000400000 RDI: 00007fc61d744708 [ 331.791379][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.799897][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 331.807941][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1e194630 [ 331.815935][ T27] [ 331.819431][ T27] INFO: task syz.0.1801:8720 blocked for more than 145 seconds. [ 331.827164][ T27] Not tainted syzkaller #0 [ 331.832396][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.841156][ T27] task:syz.0.1801 state:D stack:27664 pid: 8720 ppid: 4201 flags:0x00004004 [ 331.850655][ T27] Call Trace: [ 331.853926][ T27] [ 331.856840][ T27] __schedule+0x11c3/0x4350 [ 331.861394][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.867451][ T27] ? lock_chain_count+0x20/0x20 [ 331.872583][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 331.878210][ T27] ? release_firmware_map_entry+0x190/0x190 [ 331.884131][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 331.890881][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 331.896100][ T27] schedule+0x11b/0x1e0 [ 331.901089][ T27] io_schedule+0x7c/0xd0 [ 331.905355][ T27] bit_wait_io+0xd/0xc0 [ 331.909842][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 331.915308][ T27] ? bit_wait+0xc0/0xc0 [ 331.920258][ T27] ? __wait_on_bit+0x170/0x170 [ 331.925044][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 331.930113][ T27] ? bit_waitqueue+0x30/0x30 [ 331.934727][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 331.939971][ T27] do_get_write_access+0x134/0xe40 [ 331.945096][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 331.952701][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 331.958968][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 331.965258][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 331.970593][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 331.976159][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 331.982764][ T27] ext4_dirty_inode+0xbf/0x100 [ 331.987537][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 331.993374][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 331.998473][ T27] generic_update_time+0x1cd/0x1f0 [ 332.003918][ T27] file_update_time+0x3c0/0x440 [ 332.009212][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 332.014338][ T27] ? mark_lock+0x94/0x320 [ 332.018723][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 332.023758][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 332.030029][ T27] ? pte_alloc_one+0x287/0x310 [ 332.034812][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 332.041436][ T27] ? __rwlock_init+0x140/0x140 [ 332.046205][ T27] ? count_memcg_event_mm+0x324/0x370 [ 332.051601][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 332.056810][ T27] do_page_mkwrite+0x168/0x3c0 [ 332.061614][ T27] handle_mm_fault+0x1e47/0x4440 [ 332.066582][ T27] ? get_page+0xe0/0xe0 [ 332.071091][ T27] ? vmacache_find+0x4f0/0x590 [ 332.075851][ T27] ? vmacache_update+0xa0/0x100 [ 332.080750][ T27] ? find_vma+0x1df/0x230 [ 332.085082][ T27] do_user_addr_fault+0x494/0xc90 [ 332.090376][ T27] exc_page_fault+0x60/0x100 [ 332.094998][ T27] ? clear_bhb_loop+0x30/0x80 [ 332.100446][ T27] asm_exc_page_fault+0x22/0x30 [ 332.105640][ T27] RIP: 0033:0x7f973d581ea3 [ 332.110886][ T27] RSP: 002b:00007ffe44d5d2f0 EFLAGS: 00010246 [ 332.117042][ T27] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32564000 [ 332.125099][ T27] RDX: 0000001b32524000 RSI: 0000000000600000 RDI: 00007f973d8fc708 [ 332.133107][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.141467][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 332.149492][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe44d5d580 [ 332.157493][ T27] [ 332.160578][ T27] INFO: task syz.3.1804:8721 blocked for more than 145 seconds. [ 332.168673][ T27] Not tainted syzkaller #0 [ 332.173613][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.182312][ T27] task:syz.3.1804 state:D stack:27664 pid: 8721 ppid: 4197 flags:0x00004004 [ 332.191569][ T27] Call Trace: [ 332.194842][ T27] [ 332.199474][ T27] __schedule+0x11c3/0x4350 [ 332.204527][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 332.210592][ T27] ? lock_chain_count+0x20/0x20 [ 332.215452][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 332.220931][ T27] ? release_firmware_map_entry+0x190/0x190 [ 332.226842][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 332.233176][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 332.238460][ T27] schedule+0x11b/0x1e0 [ 332.242650][ T27] io_schedule+0x7c/0xd0 [ 332.246884][ T27] bit_wait_io+0xd/0xc0 [ 332.251103][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 332.256574][ T27] ? bit_wait+0xc0/0xc0 [ 332.261197][ T27] ? __wait_on_bit+0x170/0x170 [ 332.265978][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 332.271050][ T27] ? bit_waitqueue+0x30/0x30 [ 332.275649][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 332.280877][ T27] do_get_write_access+0x134/0xe40 [ 332.286028][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 332.292372][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 332.298594][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 332.304781][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 332.311003][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 332.316585][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 332.322591][ T27] ext4_dirty_inode+0xbf/0x100 [ 332.327410][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 332.333665][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 332.338760][ T27] generic_update_time+0x1cd/0x1f0 [ 332.343879][ T27] file_update_time+0x3c0/0x440 [ 332.348832][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 332.353957][ T27] ? mark_lock+0x94/0x320 [ 332.358763][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 332.363819][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 332.369583][ T27] ? pte_alloc_one+0x287/0x310 [ 332.374353][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 332.380681][ T27] ? __rwlock_init+0x140/0x140 [ 332.385447][ T27] ? count_memcg_event_mm+0x324/0x370 [ 332.391201][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 332.396416][ T27] do_page_mkwrite+0x168/0x3c0 [ 332.401228][ T27] handle_mm_fault+0x1e47/0x4440 [ 332.406176][ T27] ? get_page+0xe0/0xe0 [ 332.410839][ T27] ? vmacache_find+0x4f0/0x590 [ 332.415622][ T27] ? vmacache_update+0xa0/0x100 [ 332.421035][ T27] ? find_vma+0x1df/0x230 [ 332.425386][ T27] do_user_addr_fault+0x494/0xc90 [ 332.431136][ T27] exc_page_fault+0x60/0x100 [ 332.435748][ T27] ? clear_bhb_loop+0x30/0x80 [ 332.440786][ T27] asm_exc_page_fault+0x22/0x30 [ 332.445647][ T27] RIP: 0033:0x7f648b196ea3 [ 332.450478][ T27] RSP: 002b:00007ffc2039d000 EFLAGS: 00010246 [ 332.456552][ T27] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b32864000 [ 332.464583][ T27] RDX: 0000001b32824000 RSI: 0000000000400000 RDI: 00007f648b511708 [ 332.472603][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.481013][ T27] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 332.489049][ T27] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc2039d290 [ 332.497202][ T27] [ 332.500364][ T27] [ 332.500364][ T27] Showing all locks held in the system: [ 332.508449][ T27] 1 lock held by khungtaskd/27: [ 332.513673][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 332.523109][ T27] 6 locks held by kworker/u4:3/377: [ 332.529065][ T27] #0: ffff888019db0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 332.540110][ T27] #1: ffffc900030dfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 332.551954][ T27] #2: ffff88807f1940e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 332.562007][ T27] #3: ffff88807f196c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 332.572985][ T27] #4: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.582718][ T27] #5: ffff888076de6628 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50 [ 332.592610][ T27] 2 locks held by getty/3952: [ 332.597275][ T27] #0: ffff88807f0d1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 332.607542][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 332.618296][ T27] 3 locks held by syz-executor/4176: [ 332.623591][ T27] #0: ffff88807e38f128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 332.633827][ T27] #1: ffff88807f194558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 332.643888][ T27] #2: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.653940][ T27] 3 locks held by syz.1.1798/8690: [ 332.661185][ T27] #0: ffff88801786b228 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 332.671250][ T27] #1: ffff88807f194558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 332.681224][ T27] #2: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.690954][ T27] 3 locks held by syz.2.1802/8718: [ 332.696065][ T27] #0: ffff88801b7a4e28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 332.705993][ T27] #1: ffff88807f194558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 332.716635][ T27] #2: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.726863][ T27] 3 locks held by syz.4.1803/8719: [ 332.732101][ T27] #0: ffff88801f9b0128 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 332.742279][ T27] #1: ffff88807f194558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 332.752106][ T27] #2: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.761916][ T27] 3 locks held by syz.0.1801/8720: [ 332.767026][ T27] #0: ffff88801f9b2b28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 332.777282][ T27] #1: ffff88807f194558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 332.787778][ T27] #2: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.797476][ T27] 3 locks held by syz.3.1804/8721: [ 332.802632][ T27] #0: ffff8880783d0828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 332.812693][ T27] #1: ffff88807f194558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 332.823062][ T27] #2: ffff88807f1b2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 332.832832][ T27] [ 332.835150][ T27] ============================================= [ 332.835150][ T27] [ 332.843787][ T27] NMI backtrace for cpu 1 [ 332.848230][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 332.855431][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.865568][ T27] Call Trace: [ 332.868843][ T27] [ 332.871775][ T27] dump_stack_lvl+0x188/0x250 [ 332.876481][ T27] ? show_regs_print_info+0x20/0x20 [ 332.881679][ T27] ? load_image+0x410/0x410 [ 332.886183][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 332.891612][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 332.896737][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 332.901678][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 332.907816][ T27] ? _printk+0xda/0x130 [ 332.912000][ T27] ? load_image+0x410/0x410 [ 332.916507][ T27] ? load_image+0x410/0x410 [ 332.921002][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 332.927146][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 332.933121][ T27] watchdog+0xe1b/0xe60 [ 332.937289][ T27] kthread+0x42e/0x520 [ 332.941338][ T27] ? hungtask_pm_notify+0x40/0x40 [ 332.946341][ T27] ? kthread_blkcg+0xd0/0xd0 [ 332.950916][ T27] ret_from_fork+0x1f/0x30 [ 332.955413][ T27] [ 332.959290][ T27] Sending NMI from CPU 1 to CPUs 0: [ 332.964557][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 332.966187][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 332.980916][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 332.988134][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.998182][ T27] Call Trace: [ 333.001461][ T27] [ 333.004378][ T27] dump_stack_lvl+0x188/0x250 [ 333.009053][ T27] ? show_regs_print_info+0x20/0x20 [ 333.014242][ T27] ? load_image+0x410/0x410 [ 333.018792][ T27] panic+0x2f8/0x850 [ 333.022669][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 333.028309][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 333.032867][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 333.039006][ T27] watchdog+0xe5a/0xe60 [ 333.043152][ T27] kthread+0x42e/0x520 [ 333.047198][ T27] ? hungtask_pm_notify+0x40/0x40 [ 333.052206][ T27] ? kthread_blkcg+0xd0/0xd0 [ 333.056782][ T27] ret_from_fork+0x1f/0x30 [ 333.061219][ T27] [ 333.064673][ T27] Kernel Offset: disabled [ 333.069038][ T27] Rebooting in 86400 seconds..