last executing test programs: 3.916754421s ago: executing program 2 (id=1833): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000018}) 3.501350675s ago: executing program 2 (id=1835): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="3b000000010002", 0x7) 3.438325247s ago: executing program 2 (id=1837): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_4={0x3, 0x1, 0x2, "3a3c803d"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @global=@item_012={0x2, 0x1, 0xa, "40eb"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 3.281309105s ago: executing program 3 (id=1838): io_setup(0x2, &(0x7f0000000180)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) io_destroy(r0) 3.052090486s ago: executing program 3 (id=1839): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "3c8dde86"}, @local=@item_012={0x1, 0x2, 0xa, '['}]}}, 0x0}, 0x0) 2.557463714s ago: executing program 1 (id=1841): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x300}) 1.577927999s ago: executing program 1 (id=1843): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x5, 0xfffffffffffffffa, 0x0, 0xffffffff}) 1.381134904s ago: executing program 1 (id=1845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.328929353s ago: executing program 2 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x858) 1.209428864s ago: executing program 2 (id=1847): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 1.102076804s ago: executing program 0 (id=1848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.038736255s ago: executing program 2 (id=1849): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x4422, &(0x7f0000004480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x2) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.038232585s ago: executing program 3 (id=1850): timer_create(0x2, 0x0, &(0x7f00000008c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000d00)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_delete(r0) 913.391167ms ago: executing program 1 (id=1851): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff7910000000000000c3704c000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xb, &(0x7f00000002c0)=""/177}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 875.643534ms ago: executing program 3 (id=1852): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x6, @sliced={0x7f, [0x11d, 0x4, 0x1, 0x8, 0xa08, 0x8, 0x3, 0x101, 0x3, 0x63, 0x5, 0x3, 0x289, 0x1, 0x101, 0x6, 0x8, 0x1, 0xc, 0x10, 0x4b, 0x5, 0x4, 0x6b79, 0x3, 0x4, 0x0, 0x7fff, 0xab7, 0x0, 0xea5c, 0x3fb, 0x8, 0x9, 0x9, 0x7, 0xb9, 0x0, 0xfffe, 0x40, 0x1, 0x3, 0x3, 0x3, 0x6, 0xb7, 0x1, 0x8], 0x5}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30000000001400058008"], 0xe8}}, 0x0) 797.546438ms ago: executing program 0 (id=1853): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) 669.466581ms ago: executing program 1 (id=1854): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x3000000, &(0x7f0000000240)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "851aa049"}}, {}, {@part={'part', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x6}}, {@force}, {}, {@nls={'nls', 0x3d, 'iso8859-7'}}]}, 0x44, 0x70b, &(0x7f0000000300)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFatQIGkhsLyVBQiJUCHyoUCQuvS6J01heu5HtIidCZAsUuMEJ5dBDK2QOPaEekIo4IMoZCYkryj0S94gDi2Z2dr0/9nq3/kvT55Fm55uZ7+edNzPf/sXaAD63Ft+IyUYksXjh9a10+8F2tf5gu7raLkfEVEQUIoqtVSRrEcknEVejtcQX0p15d8le47z68OP3zt//sNraKuZLVr8wrN2O5pARGvkSsxExka/HVNyrv+vx2kB/98bqOunEnSbsXDtxcNKaAxrjNB/hvgUed/ciJiZ32V+JOBUR0/nrgMhnh8Ixh3foxprlAAAA4PE0sV+Fpx/Fo9iKmeMJBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4MSes3A5N8KbTLs5G0f/+/lO9LlUonHO9wX93n+Ls3jykQAAAAAAAAABjR98eq/VH+xf3ZR/EotmKmvb+ZZN/5v5RtnM4en4q3YyOWYj0uxlbUYjM2Yz3mIyZnujosbdU2N9fnB1v+LtKWzWbzXt5yISIqAy0X9gi0MNZpAQAAAAAAAMDn1c9iMWZOOggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiWREy0Vtlyul2uRKEYEdMRUUrrNSL+0i5/lv31pAMAAACAo1fO1zPJ/1qFZpK9538+e98/HW/HWmzGcmxGPZbiRiQfRP6uv/DPRrX+YLu6mi6DHX/nP2PFkfUYERPxzh4jz2U1znRaLMb34odxIWbjWqzHcvw4arEZSzEb5fQkohZJVMqtTy8q7Th3j/dqz9a1/tjO9m2/mEVSjpuxnMV2Ma6XovWxSXYO6Zgvdo32p1JE34jvpNlJvp0bMUc3uv69fpt/LpNrPj1iH0ejkp35ZCcjc2nu82w8Mzz3Y14n/SPNR6HzGdTpnVHSzf6R2jn/0Tg5P9VaTacPv+zN+WEb86O0/kwsRCG/+iKe78357ZfvP9vb+Cv/+tu1W4W1lVs3Ny4c4SkdxOx+FSbbhf5MVLsy8cLwqy/PRD3NRGP0TEz275geteXRKuXZyKaiEWfL72alWrzUdQm+FTdiKS7HXMzHlZiLb8ZCVDtXWLqc6clrsbram5PsXisMzm/lIcGf+3JXpV/tU/l4pXl5piuv3TNdJb8csj1XfxNzXVffs8OvvrGfBdLxv5iX0zF+3nnGeRxUsiz1zs3t6J4bnokPmunjRn1tZf1W7faI453P1+lt+27v3Pz70aPuf3Y/DOn1ks64xWwry0m5fb2kx57rRNubr1L+jUurXWHg2JnOsUrMxHL8YM87tZS/hhvsqXXshe5j/96ZOUv565v2sZ5XOfFW1LNXIX32naoBOGanXjlVKj8s/6P8fvkX5Vvl16dfm7oy9aVSTP69+OeJPxb+UPhW8kq8Hz+NmZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngQbd+6u1Or1pfVOIab79xy0UNpzrOGFKOxbZ/up0TqMSsTwsZK8UNq9zlMRcchpObrCy78+UPNy/5m2f2HpoIF9FBFD6pQOfO7J2NfY2IU0D4fSYbPZSmq2pzkxRvNiu9XudYqxMR0rtaS4yx03tXMXRGWlVv9vs6d5ObpuGeAJd2lz9faljTt3v7a8Wntz6c2ltYUrl69crn5j/uuXbi7Xl+ZajycdJXAUNu7cndhl98Av3QIAAAAAAAAAAACPj/x//29+6j9mKO5Tp7S+sfvIZ4/7VAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPqMU3YrIRSczPXZxLtx9sV+vp0i7v1CxGRCEikp9EJJ9EXI3WEpWu7pK9xnn14cfvnb//YXWnr2K7fmFYu9E08iVmI2IiX+9vapduBvu73tVf41OFl3TOME3YuXbi4KT9PwAA//+FhvXF") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) getdents64(r0, &(0x7f0000000080)=""/203, 0xcb) 638.906026ms ago: executing program 0 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 638.603456ms ago: executing program 3 (id=1856): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x81, 0x0, 0x2, 0x203}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$sysctl(r0, &(0x7f00000000c0)='6\x00', 0x2) 458.795188ms ago: executing program 0 (id=1857): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000001040)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 458.464869ms ago: executing program 3 (id=1858): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x100, 0x80) 393.21659ms ago: executing program 1 (id=1859): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0x7, 0x5, {0x5, 0x23, "b1b564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 207.177214ms ago: executing program 0 (id=1860): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c failed! [ 220.438159][ T8459] blkno = 50400, nblocks = 400 [ 220.459704][ T8459] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 220.459704][ T8459] [ 220.468227][ T8455] loop1: detected capacity change from 0 to 40427 [ 220.500862][ T8455] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 220.533779][ T8455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 220.564450][ T8455] F2FS-fs (loop1): invalid crc value [ 220.596420][ T8455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.779937][ T8455] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 220.797078][ T8455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.979728][ T5767] syz-executor: attempt to access beyond end of device [ 220.979728][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.998247][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 221.099879][ T8475] mkiss: ax0: crc mode is auto. [ 222.153780][ T8505] loop3: detected capacity change from 0 to 512 [ 222.535834][ T8515] loop3: detected capacity change from 0 to 764 [ 222.614099][ T8515] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 222.708917][ T8517] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[8517] [ 223.110789][ T8499] loop1: detected capacity change from 0 to 40427 [ 223.132927][ T8499] F2FS-fs (loop1): invalid crc value [ 223.147189][ T8499] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.227327][ T2133] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.311229][ T8499] F2FS-fs (loop1): Start checkpoint disabled! [ 223.339486][ T8513] loop0: detected capacity change from 0 to 40427 [ 223.360939][ T8499] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 223.362381][ T8513] F2FS-fs (loop0): invalid crc value [ 223.401134][ T8513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.439578][ T2133] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.473719][ T2133] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.524827][ T2133] usb 3-1: config 0 interface 0 has no altsetting 0 [ 223.554985][ T2133] usb 3-1: New USB device found, idVendor=1a34, idProduct=08fb, bcdDevice= 0.00 [ 223.586407][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.638181][ T2133] usb 3-1: config 0 descriptor?? [ 223.657499][ T8513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.701888][ T8532] loop3: detected capacity change from 0 to 2048 [ 223.729898][ T8532] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.793148][ T8535] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.839161][ T8513] syz.0.1055: attempt to access beyond end of device [ 223.839161][ T8513] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.893641][ T8513] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 223.934306][ T28] audit: type=1800 audit(1776081305.220:11): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1060" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 224.114687][ T2133] hid-generic 0003:1A34:08FB.000B: item fetching failed at offset 0/1 [ 224.170094][ T2133] hid-generic: probe of 0003:1A34:08FB.000B failed with error -22 [ 224.354534][ T1187] usb 3-1: USB disconnect, device number 7 [ 224.750176][ T8549] loop3: detected capacity change from 0 to 4096 [ 224.782187][ T8549] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 224.896624][ T8549] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 224.943087][ T8553] loop0: detected capacity change from 0 to 4096 [ 225.008629][ T8553] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 225.069133][ T8553] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 225.122974][ T8553] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 225.161923][ T5769] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 225.198050][ T8553] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 225.225762][ T8559] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 225.266481][ T8553] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 225.306251][ T8553] ntfs: volume version 3.1. [ 225.333418][ T8553] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 225.378865][ T8553] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 225.400079][ T8553] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 225.445758][ T8553] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 226.108398][ T8583] loop0: detected capacity change from 0 to 512 [ 226.157574][ T8583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.198485][ T8583] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.635425][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.902035][ T8598] loop0: detected capacity change from 0 to 256 [ 226.953256][ T8600] loop1: detected capacity change from 0 to 512 [ 226.983258][ T8598] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 227.010005][ T8600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.025064][ T8600] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.140951][ T8600] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm syz.1.1091: bg 0: bad block bitmap checksum [ 227.360611][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.612767][ T8616] loop0: detected capacity change from 0 to 128 [ 227.659880][ T8616] EXT4-fs (loop0): Test dummy encryption mode enabled [ 227.698254][ T8616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 227.798079][ T8616] System zones: 1-3, 19-19, 35-36 [ 227.820568][ T8616] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 227.902966][ T8616] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.943790][ T8616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.182671][ T8630] loop2: detected capacity change from 0 to 2048 [ 228.274752][ T8630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.425000][ T8640] bond0: option packets_per_slave: invalid value (65536) [ 228.433438][ T8640] bond0: option packets_per_slave: allowed values 0 - 65535 [ 228.561483][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.027263][ T8658] loop1: detected capacity change from 0 to 256 [ 229.037112][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'. [ 229.060230][ T8658] exfat: Deprecated parameter 'namecase' [ 229.066041][ T8658] exfat: Deprecated parameter 'utf8' [ 229.168566][ T8658] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 229.225778][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 229.225797][ T28] audit: type=1326 audit(1776081310.510:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 229.262409][ T28] audit: type=1326 audit(1776081310.550:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 229.296445][ T8662] loop0: detected capacity change from 0 to 256 [ 229.320162][ T28] audit: type=1326 audit(1776081310.580:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 229.387327][ T28] audit: type=1326 audit(1776081310.580:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 229.413395][ T28] audit: type=1326 audit(1776081310.580:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 229.438602][ T28] audit: type=1326 audit(1776081310.580:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 229.461398][ T28] audit: type=1326 audit(1776081310.580:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa05f39c582 code=0x7ffc0000 [ 229.518932][ T28] audit: type=1326 audit(1776081310.580:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa05f35d04e code=0x7ffc0000 [ 229.549023][ T8662] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 229.560210][ T8662] FAT-fs (loop0): Filesystem has been set read-only [ 229.587878][ T28] audit: type=1326 audit(1776081310.580:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa05f39c647 code=0x7ffc0000 [ 229.625854][ T28] audit: type=1326 audit(1776081310.580:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05f35d04e code=0x7ffc0000 [ 229.924289][ T8656] loop3: detected capacity change from 0 to 32768 [ 229.957169][ T8656] JBD2: Ignoring recovery information on journal [ 230.024061][ T8656] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 230.068526][ T5820] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 230.242310][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 230.269243][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.315079][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 230.343841][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.381559][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 230.394634][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.415704][ T5820] usb 2-1: config 0 descriptor?? [ 230.428129][ T8670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 230.478904][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.791130][ T8687] loop3: detected capacity change from 0 to 512 [ 230.818243][ T8687] EXT4-fs: Ignoring removed nobh option [ 230.846766][ T8687] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 230.880012][ T8687] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 230.897216][ T8687] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.1130: inode has both inline data and extents flags [ 230.911414][ T8687] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1130: couldn't read orphan inode 13 (err -117) [ 230.927163][ T8687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.927526][ T5820] logitech-hidpp-device 0003:046D:C081.000C: ignoring exceeding usage max [ 230.984489][ T8687] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 231.030999][ T5820] logitech-hidpp-device 0003:046D:C081.000C: item fetching failed at offset 24/40 [ 231.079746][ T5820] logitech-hidpp-device 0003:046D:C081.000C: hidpp_probe:parse failed [ 231.097193][ T5820] logitech-hidpp-device: probe of 0003:046D:C081.000C failed with error -22 [ 231.112796][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.140052][ T5820] usb 2-1: USB disconnect, device number 14 [ 231.814671][ T8712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1141'. [ 232.347674][ T8724] loop3: detected capacity change from 0 to 4096 [ 232.355419][ T8724] EXT4-fs: Ignoring removed orlov option [ 232.363548][ T8724] EXT4-fs (loop3): Test dummy encryption mode enabled [ 232.391941][ T8724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.451537][ T8724] fs-verity (loop3, inode 13): Unknown hash algorithm number: 0 [ 232.560231][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.127195][ T8748] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1157'. [ 233.136380][ T8748] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1157'. [ 233.306509][ T8754] netlink: 'syz.1.1160': attribute type 5 has an invalid length. [ 233.316067][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 233.338537][ T8756] loop0: detected capacity change from 0 to 64 [ 233.551571][ T8760] loop1: detected capacity change from 0 to 256 [ 234.084662][ T8777] loop3: detected capacity change from 0 to 256 [ 234.108207][ T8777] exfat: Deprecated parameter 'namecase' [ 234.225009][ T8777] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 234.243213][ T8781] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1173'. [ 234.947585][ T8803] netlink: 'syz.2.1184': attribute type 5 has an invalid length. [ 235.174910][ T8813] loop1: detected capacity change from 0 to 64 [ 235.509865][ T8821] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 235.527630][ T8823] netlink: 'syz.0.1192': attribute type 11 has an invalid length. [ 235.750905][ T8829] vcan0: MTU too low for tipc bearer [ 235.756355][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 235.985603][ T8809] loop2: detected capacity change from 0 to 32768 [ 236.027415][ T8809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1189 (8809) [ 236.083531][ T8809] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.120330][ T8809] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 236.156361][ T8809] BTRFS info (device loop2): setting nodatasum [ 236.173397][ T8809] BTRFS info (device loop2): force zlib compression, level 3 [ 236.193201][ T8809] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 236.221409][ T8809] BTRFS info (device loop2): use lzo compression, level 0 [ 236.234162][ T8809] BTRFS info (device loop2): turning on flush-on-commit [ 236.242253][ T8809] BTRFS info (device loop2): enabling auto defrag [ 236.250673][ T8809] BTRFS info (device loop2): max_inline at 4096 [ 236.265710][ T8809] BTRFS info (device loop2): using free space tree [ 236.282294][ T8835] loop3: detected capacity change from 0 to 4096 [ 236.377691][ T8848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.422622][ T8854] loop1: detected capacity change from 0 to 64 [ 236.532985][ T8809] BTRFS info (device loop2): enabling ssd optimizations [ 236.555135][ T8835] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 236.621006][ T8835] Remounting filesystem read-only [ 236.757441][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 236.790186][ T5769] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 236.827191][ T5769] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 236.855738][ T5769] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 236.878594][ T8828] loop0: detected capacity change from 0 to 40427 [ 236.887965][ T5769] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 236.895005][ T5769] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 236.925086][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.935504][ T8828] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 236.969490][ T5769] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 236.983250][ T8828] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.024315][ T5769] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 237.034029][ T8828] F2FS-fs (loop0): invalid crc value [ 237.067884][ T8861] CUSE: unknown device info "€" [ 237.072870][ T8861] CUSE: unknown device info "" [ 237.080568][ T8861] CUSE: unknown device info "" [ 237.086333][ T8861] CUSE: unknown device info "" [ 237.093553][ T8861] CUSE: zero length info key specified [ 237.099553][ T5769] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 237.125681][ T8828] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.133942][ T5769] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 237.178997][ T5769] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 237.198140][ T5769] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 237.205360][ T5769] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 237.286017][ T8828] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 237.312722][ T8828] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 237.585451][ T8869] loop1: detected capacity change from 0 to 4096 [ 237.621683][ T5786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5786) [ 237.666937][ T8869] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 237.789129][ T8874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 238.611468][ T5773] Bluetooth: hci1: unexpected event for opcode 0x203d [ 238.955607][ T8899] loop0: detected capacity change from 0 to 512 [ 239.050499][ T8899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.138717][ T8899] ext4 filesystem being mounted at /300/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.151553][ T8906] loop3: detected capacity change from 0 to 1024 [ 239.225422][ T8881] loop2: detected capacity change from 0 to 40427 [ 239.265156][ T8881] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 239.299306][ T8899] EXT4-fs: Ignoring removed orlov option [ 239.305096][ T8899] EXT4-fs: Ignoring removed bh option [ 239.311363][ T8881] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 239.333667][ T8899] EXT4-fs: can't change dax mount option while remounting [ 239.347604][ T8881] F2FS-fs (loop2): invalid crc value [ 239.365693][ T8908] loop1: detected capacity change from 0 to 16 [ 239.403539][ T8908] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.474157][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.495356][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 239.495375][ T28] audit: type=1800 audit(1776081320.780:48): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1223" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 239.659827][ T8881] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 239.683670][ T8881] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.782435][ T8915] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1224'. [ 239.961657][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 240.594564][ T8937] loop1: detected capacity change from 0 to 512 [ 240.641694][ T8937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.674409][ T8937] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 240.702875][ T8937] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 240.726632][ T8937] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 240.758023][ T8937] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 240.766314][ T8937] EXT4-fs (loop1): orphan cleanup on readonly fs [ 240.780609][ T8937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1236: bg 0: block 34: padding at end of block bitmap is not set [ 240.805259][ T8937] Quota error (device loop1): write_blk: dquota write failed [ 240.813291][ T8937] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 240.823436][ T8937] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1236: Failed to acquire dquot type 1 [ 240.868092][ T8937] EXT4-fs (loop1): 1 truncate cleaned up [ 240.908344][ T8937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.958844][ T8937] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.106631][ T8948] loop2: detected capacity change from 0 to 128 [ 241.275579][ T8950] loop3: detected capacity change from 0 to 4096 [ 241.308124][ T8928] loop0: detected capacity change from 0 to 40427 [ 241.331677][ T8953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.342917][ T8928] F2FS-fs (loop0): Corrupted extension count (33554469 + 1 > 64) [ 241.396771][ T8928] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 241.443727][ T8928] F2FS-fs (loop0): invalid crc value [ 241.541560][ T8950] NILFS (loop3): bad btree node (ino=18446744073709486081, blocknr=1024): level = 0, flags = 0x0, nchildren = 0 [ 241.588623][ T8950] NILFS (loop3): error -5 preparing GC: cannot read source blocks [ 241.760176][ T8958] program syz.2.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.780755][ T8928] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 241.794973][ T8928] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 241.981249][ T8928] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 242.029265][ T8928] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 242.065457][ T8960] loop1: detected capacity change from 0 to 4096 [ 242.517450][ T8970] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 242.546961][ T8971] mmap: syz.3.1250 (8971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.727996][ T5767] sysv_free_block: flc_count > flc_size [ 242.747323][ T5767] sysv_free_block: flc_count > flc_size [ 242.752964][ T5767] sysv_free_block: flc_count > flc_size [ 242.772740][ T5767] sysv_free_block: flc_count > flc_size [ 242.797192][ T5767] sysv_free_block: flc_count > flc_size [ 242.808974][ T5767] sysv_free_block: flc_count > flc_size [ 242.814609][ T5767] sysv_free_block: flc_count > flc_size [ 242.850057][ T5767] sysv_free_block: flc_count > flc_size [ 242.855708][ T5767] sysv_free_block: flc_count > flc_size [ 242.897147][ T5767] sysv_free_block: flc_count > flc_size [ 242.919877][ T5767] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 242.998345][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 243.113306][ T8965] set_capacity_and_notify: 1 callbacks suppressed [ 243.113324][ T8965] loop2: detected capacity change from 0 to 32768 [ 243.183944][ T8965] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.300689][ T8965] XFS (loop2): Ending clean mount [ 243.314552][ T8965] XFS (loop2): Quotacheck needed: Please wait. [ 243.430016][ T8965] XFS (loop2): Quotacheck: Done. [ 243.652369][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.285382][ T9010] loop3: detected capacity change from 0 to 1024 [ 244.392927][ T28] audit: type=1800 audit(1776081325.680:49): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1264" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 244.859685][ T9018] loop1: detected capacity change from 0 to 2048 [ 244.933744][ T9018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.011880][ T9008] loop2: detected capacity change from 0 to 32768 [ 245.044765][ T5820] Process accounting resumed [ 245.067240][ T9008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1259 (9008) [ 245.113279][ T9008] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.147297][ T9008] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 245.161952][ T9008] BTRFS info (device loop2): force clearing of disk cache [ 245.169623][ T9008] BTRFS info (device loop2): metadata ratio 0 [ 245.177763][ T9008] BTRFS info (device loop2): enabling ssd optimizations [ 245.193190][ T9008] BTRFS info (device loop2): using spread ssd allocation scheme [ 245.210651][ T9008] BTRFS info (device loop2): using free space tree [ 245.381516][ T9008] BTRFS info (device loop2): auto enabling async discard [ 245.403649][ T9016] loop3: detected capacity change from 0 to 32768 [ 245.412665][ T9008] BTRFS info (device loop2): rebuilding free space tree [ 245.423477][ T9014] loop0: detected capacity change from 0 to 32768 [ 245.495124][ T9014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1266 (9014) [ 245.526966][ T9016] JBD2: Ignoring recovery information on journal [ 245.596415][ T9014] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.667497][ T9014] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 245.729283][ T9014] BTRFS info (device loop0): setting nodatasum [ 245.735558][ T9014] BTRFS info (device loop0): force zlib compression, level 3 [ 245.759678][ T9016] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 245.784334][ T9014] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 245.836952][ T9014] BTRFS info (device loop0): use lzo compression, level 0 [ 245.864604][ T9014] BTRFS info (device loop0): turning on flush-on-commit [ 245.887040][ T9014] BTRFS info (device loop0): enabling auto defrag [ 245.893609][ T9014] BTRFS info (device loop0): max_inline at 4096 [ 245.921140][ T9014] BTRFS info (device loop0): using free space tree [ 246.150608][ T9014] BTRFS info (device loop0): enabling ssd optimizations [ 246.252561][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 246.275761][ T28] audit: type=1800 audit(1776081327.560:50): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1266" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 246.369294][ T5768] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.395846][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 246.434001][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.011886][ T5786] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5786) [ 247.119186][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 247.252853][ T9074] loop2: detected capacity change from 0 to 256 [ 247.334904][ T9074] FAT-fs (loop2): Directory bread(block 1285) failed [ 247.366952][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 247.408643][ T8] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 247.427282][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.456510][ T9074] FAT-fs (loop2): Directory bread(block 1285) failed [ 247.487849][ T8] usb 2-1: config 0 descriptor?? [ 247.640474][ T8] as10x_usb: device has been detected [ 247.646756][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 247.788889][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 248.051581][ T8] as10x_usb: error during firmware upload part1 [ 248.103233][ T8] Registered device nBox DVB-T Dongle [ 248.150162][ T8] usb 2-1: USB disconnect, device number 15 [ 248.293739][ T8] Unregistered device nBox DVB-T Dongle [ 248.337817][ T8] as10x_usb: device has been disconnected [ 248.727489][ T2133] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 248.851078][ T9105] loop2: detected capacity change from 0 to 4096 [ 248.917711][ T9105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.951203][ T2133] usb 4-1: Using ep0 maxpacket: 16 [ 248.961789][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.986003][ T2133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.017064][ T2133] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 249.026605][ T2133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.091697][ T2133] usb 4-1: config 0 descriptor?? [ 249.124056][ T9105] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1290: corrupted inode contents [ 249.153230][ T9105] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #15: comm syz.2.1290: mark_inode_dirty error [ 249.170720][ T9105] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1290: corrupted inode contents [ 249.184833][ T9105] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1290: mark_inode_dirty error [ 249.206319][ T9105] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1290: corrupted inode contents [ 249.223824][ T9105] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1290: mark_inode_dirty error [ 249.241799][ T9105] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1290: corrupted inode contents [ 249.268915][ T9105] EXT4-fs error (device loop2): ext4_truncate:4301: inode #15: comm syz.2.1290: mark_inode_dirty error [ 249.285461][ T9105] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem [ 249.300295][ T9114] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.1290: corrupted inode contents [ 249.418074][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.533776][ T2133] hid-multitouch 0003:1FD2:6007.000D: item fetching failed at offset 1/5 [ 249.574174][ T2133] hid-multitouch: probe of 0003:1FD2:6007.000D failed with error -22 [ 249.579035][ T9107] loop1: detected capacity change from 0 to 32768 [ 249.634166][ T9118] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 249.780070][ T9] usb 4-1: USB disconnect, device number 7 [ 250.064050][ T9127] loop2: detected capacity change from 0 to 1024 [ 250.149181][ T9129] program syz.0.1299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.177819][ T9127] hfsplus: bad catalog entry type [ 250.195289][ T9131] loop1: detected capacity change from 0 to 512 [ 250.295493][ T9131] EXT4-fs (loop1): 1 truncate cleaned up [ 250.309130][ T49] hfsplus: b-tree write err: -5, ino 25 [ 250.316221][ T49] hfsplus: b-tree write err: -5, ino 4 [ 250.338364][ T9131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.377408][ T49] hfsplus: b-tree write err: -5, ino 2 [ 250.582240][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.626300][ T9135] loop0: detected capacity change from 0 to 4096 [ 250.677861][ T9135] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 250.874226][ T9147] loop2: detected capacity change from 0 to 1024 [ 251.294091][ T12] hfsplus: b-tree write err: -5, ino 25 [ 251.312780][ T9158] tmpfs: Cannot disable swap on remount [ 251.327335][ T12] hfsplus: b-tree write err: -5, ino 4 [ 251.335641][ T9154] loop0: detected capacity change from 0 to 4096 [ 251.347228][ T12] hfsplus: b-tree write err: -5, ino 2 [ 251.379702][ T9154] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 251.487747][ T9154] ntfs: volume version 3.1. [ 251.688283][ T9154] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 251.874181][ T9168] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 252.100180][ T9172] ipvlan2: entered promiscuous mode [ 252.182947][ T9157] loop3: detected capacity change from 0 to 32768 [ 252.202656][ T9176] loop1: detected capacity change from 0 to 1024 [ 252.215599][ T9157] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1310 (9157) [ 252.256274][ T9157] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.296123][ T9157] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 252.335160][ T9157] BTRFS info (device loop3): setting nodatacow, compression disabled [ 252.369906][ T9157] BTRFS info (device loop3): force clearing of disk cache [ 252.398910][ T9157] BTRFS info (device loop3): enabling ssd optimizations [ 252.405967][ T9157] BTRFS info (device loop3): using spread ssd allocation scheme [ 252.429223][ T4232] hfsplus: b-tree write err: -5, ino 25 [ 252.451535][ T9157] BTRFS info (device loop3): turning off barriers [ 252.456245][ T4232] hfsplus: b-tree write err: -5, ino 4 [ 252.465191][ T4232] hfsplus: b-tree write err: -5, ino 2 [ 252.487302][ T9157] BTRFS info (device loop3): disabling free space tree [ 252.496957][ T9157] BTRFS info (device loop3): not using ssd optimizations [ 252.531452][ T9157] BTRFS info (device loop3): not using spread ssd allocation scheme [ 252.665448][ T9157] BTRFS info (device loop3): rebuilding free space tree [ 252.753593][ T9196] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1324'. [ 252.813738][ T9157] BTRFS info (device loop3): disabling free space tree [ 252.825329][ T9157] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.870482][ T9157] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.899052][ T9203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 252.913646][ T9204] loop2: detected capacity change from 0 to 2048 [ 253.047036][ T9205] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.197492][ T5769] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.760221][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 254.204484][ T9239] loop1: detected capacity change from 0 to 64 [ 254.398755][ T9243] loop3: detected capacity change from 0 to 4096 [ 254.424712][ T9245] loop2: detected capacity change from 0 to 1024 [ 254.523450][ T9249] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.622541][ T34] hfsplus: b-tree write err: -5, ino 25 [ 254.639755][ T34] hfsplus: b-tree write err: -5, ino 4 [ 254.653518][ T34] hfsplus: b-tree write err: -5, ino 2 [ 254.672250][ T34] hfsplus: b-tree write err: -5, ino 26 [ 255.324771][ T9273] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1358'. [ 255.398242][ T28] audit: type=1326 audit(1776081336.680:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9274 comm="syz.0.1360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa05f39c819 code=0x0 [ 255.419937][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.440685][ T9277] loop3: detected capacity change from 0 to 64 [ 255.821344][ T9283] loop3: detected capacity change from 0 to 4096 [ 256.000568][ T9283] ntfs3: loop3: failed to convert "0080" to cp852 [ 256.013665][ T9268] loop2: detected capacity change from 0 to 32768 [ 256.022065][ T9283] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.080950][ T9268] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 256.090404][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.097343][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.296645][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1366'. [ 256.403302][ T9268] XFS (loop2): Ending clean mount [ 256.444770][ T9268] XFS (loop2): Quotacheck needed: Please wait. [ 256.456048][ T9300] loop0: detected capacity change from 0 to 256 [ 256.491658][ T9300] exfat: Deprecated parameter 'namecase' [ 256.600420][ T9268] XFS (loop2): Quotacheck: Done. [ 256.642687][ T9300] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x31c160c0, utbl_chksum : 0xe619d30d) [ 256.707373][ T5768] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 257.172025][ T9316] tipc: Started in network mode [ 257.197261][ T9316] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 257.214373][ T9316] tipc: Enabled bearer , priority 10 [ 257.418113][ T9325] loop3: detected capacity change from 0 to 16 [ 257.424346][ T9325] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 257.680925][ T9332] loop0: detected capacity change from 0 to 256 [ 257.681980][ T9332] exfat: Deprecated parameter 'utf8' [ 257.682094][ T9332] exfat: Deprecated parameter 'utf8' [ 257.735252][ T9332] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 257.855431][ T9336] dvmrp12: entered allmulticast mode [ 257.860860][ T9335] dvmrp12: left allmulticast mode [ 258.244731][ T9344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.327990][ T27] tipc: Node number set to 9480874 [ 258.335458][ T9346] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 258.398916][ T9346] CIFS mount error: No usable UNC path provided in device string! [ 258.398916][ T9346] [ 258.421152][ T9346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.664713][ T9360] loop1: detected capacity change from 0 to 1024 [ 258.698058][ T9360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.868327][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.174045][ T9374] EXT4-fs: Ignoring removed orlov option [ 259.210430][ T9374] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 259.265853][ T9374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.295533][ T9368] set_capacity_and_notify: 1 callbacks suppressed [ 259.295551][ T9368] loop2: detected capacity change from 0 to 32768 [ 259.316264][ T9368] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 259.472885][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.485787][ T5784] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 259.751790][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1406'. [ 260.137249][ T27] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 260.315735][ T9390] loop3: detected capacity change from 0 to 32768 [ 260.336972][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 260.355278][ T27] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 260.368910][ T27] usb 2-1: config 0 has no interface number 0 [ 260.376058][ T27] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 260.387965][ T27] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 260.406416][ T27] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 260.416154][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.418156][ T9390] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 260.425830][ T27] usb 2-1: Product: syz [ 260.437526][ T27] usb 2-1: Manufacturer: syz [ 260.442187][ T27] usb 2-1: SerialNumber: syz [ 260.455881][ T27] usb 2-1: config 0 descriptor?? [ 260.539755][ T8] kernel write not supported for file /sysvipc/sem (pid: 8 comm: kworker/0:0) [ 260.577253][ T9390] XFS (loop3): Ending clean mount [ 260.604143][ T9390] XFS (loop3): Quotacheck needed: Please wait. [ 260.705894][ T27] radio-si470x 2-1:0.35: this is not a si470x device. [ 260.725770][ T9390] XFS (loop3): Quotacheck: Done. [ 260.759641][ T27] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 260.803655][ T9410] loop2: detected capacity change from 0 to 1024 [ 260.813929][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 260.922925][ T4257] hfsplus: b-tree write err: -5, ino 25 [ 260.929914][ T4257] hfsplus: b-tree write err: -5, ino 4 [ 260.935635][ T4257] hfsplus: b-tree write err: -5, ino 2 [ 260.963623][ T27] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 261.013975][ T27] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 261.049373][ T27] usb 2-1: USB disconnect, device number 16 [ 261.056453][ T27] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 261.204507][ T9414] loop2: detected capacity change from 0 to 1024 [ 261.213655][ T9417] No buffer was provided with the request [ 261.246619][ T9414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.279756][ T9414] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.384904][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.488861][ T9423] loop0: detected capacity change from 0 to 128 [ 261.496214][ T9423] EXT4-fs: Ignoring removed nobh option [ 261.540524][ T9423] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.553348][ T9423] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 261.621895][ T9423] EXT4-fs warning (device loop0): ext4_group_extend:1868: can't shrink FS - resize aborted [ 261.696310][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.730192][ T9430] loop2: detected capacity change from 0 to 64 [ 261.787322][ T9432] loop0: detected capacity change from 0 to 512 [ 261.800710][ T9432] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.828412][ T9430] syz.2.1424: attempt to access beyond end of device [ 261.828412][ T9430] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 261.839730][ T9432] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 261.889356][ T9430] Buffer I/O error on dev loop2, logical block 512, async page read [ 261.907323][ T9430] syz.2.1424: attempt to access beyond end of device [ 261.907323][ T9430] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 261.931614][ T9432] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.1425: Invalid block bitmap block 0 in block_group 0 [ 261.951639][ T9430] Buffer I/O error on dev loop2, logical block 56576, async page read [ 262.021362][ T9432] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 262.068634][ T9432] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.1425: attempt to clear invalid blocks 983261 len 1 [ 262.117976][ T9436] loop1: detected capacity change from 0 to 8192 [ 262.139882][ T9436] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.168707][ T9432] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.1425: Invalid inode table block 0 in block_group 0 [ 262.207997][ T9432] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 262.227689][ T9436] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 262.238991][ T9432] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 262.272744][ T9436] REISERFS (device loop1): using ordered data mode [ 262.288666][ T9432] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.1425: Invalid inode table block 0 in block_group 0 [ 262.306904][ T9436] reiserfs: using flush barriers [ 262.340245][ T9436] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.366432][ T9432] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 262.390969][ T9436] REISERFS (device loop1): checking transaction log (loop1) [ 262.403997][ T9432] EXT4-fs error (device loop0): ext4_truncate:4301: inode #11: comm syz.0.1425: mark_inode_dirty error [ 262.447967][ T9432] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 262.457803][ T9436] REISERFS (device loop1): Using r5 hash to sort names [ 262.465230][ T9436] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 262.475533][ T9432] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz.0.1425: Invalid inode table block 0 in block_group 0 [ 262.491092][ T9432] EXT4-fs (loop0): 1 truncate cleaned up [ 262.503850][ T9432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.761314][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.316478][ T9460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1435'. [ 263.342036][ T9457] loop0: detected capacity change from 0 to 1024 [ 263.418460][ T9457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.515642][ T5771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 263.539960][ T5771] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 263.624493][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.811832][ T9475] loop3: detected capacity change from 0 to 736 [ 263.971268][ T9475] iso9660: Corrupted directory entry in block 1 of inode 1483 [ 264.190546][ T9484] exfat: Deprecated parameter 'utf8' [ 264.195955][ T9484] exfat: Deprecated parameter 'utf8' [ 264.260845][ T9484] exfat: Deprecated parameter 'namecase' [ 264.302463][ T9484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 264.723824][ T9478] set_capacity_and_notify: 1 callbacks suppressed [ 264.723841][ T9478] loop2: detected capacity change from 0 to 32768 [ 264.792927][ T9478] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 264.808045][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 264.829749][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1452'. [ 264.929919][ T9478] XFS (loop2): Ending clean mount [ 265.104143][ T5768] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.164211][ T9482] loop0: detected capacity change from 0 to 32768 [ 265.221555][ T9482] XFS: attr2 mount option is deprecated. [ 265.301019][ T9482] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.521825][ T9482] XFS (loop0): Ending clean mount [ 265.547654][ T9482] XFS (loop0): Quotacheck needed: Please wait. [ 265.703681][ T9482] XFS (loop0): Quotacheck: Done. [ 265.839546][ T9526] loop1: detected capacity change from 0 to 1024 [ 265.847306][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.870346][ T9526] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.897779][ T9526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.921427][ T9526] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 265.948978][ T9526] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #11: comm syz.1.1461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 265.972816][ T9526] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1461: couldn't read orphan inode 11 (err -117) [ 265.973204][ T9528] loop2: detected capacity change from 0 to 8192 [ 265.992412][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 266.020881][ T9526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.034759][ T9528] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 266.052704][ T9528] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 266.063036][ T9528] REISERFS (device loop2): using ordered data mode [ 266.070309][ T9528] reiserfs: using flush barriers [ 266.117393][ T9528] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 266.149051][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.188850][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 266.215421][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.245039][ T9528] REISERFS (device loop2): checking transaction log (loop2) [ 266.252515][ T9] usb 4-1: config 0 has no interface number 0 [ 266.259112][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.281160][ T9528] REISERFS (device loop2): Using tea hash to sort names [ 266.292228][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.305362][ T9528] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 266.326303][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.343769][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.352315][ T9] usb 4-1: Product: syz [ 266.356533][ T9] usb 4-1: SerialNumber: syz [ 266.377846][ T9] usb 4-1: config 0 descriptor?? [ 266.386644][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 266.421318][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input14 [ 266.449955][ T9533] macsec1: entered promiscuous mode [ 266.464831][ T9533] macsec1: entered allmulticast mode [ 266.646874][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.656997][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.664377][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.671612][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.678940][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.686284][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.693533][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.702666][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.711250][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.719152][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 266.731226][ T9] usb 4-1: USB disconnect, device number 8 [ 266.731300][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 266.759099][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 267.332339][ T9549] loop1: detected capacity change from 0 to 4096 [ 267.356375][ T9549] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 267.369029][ T5814] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.470471][ T9549] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 267.481251][ T9553] loop0: detected capacity change from 0 to 4096 [ 267.569345][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.595211][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.627028][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 267.632665][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 267.666917][ T5814] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 267.696629][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.729220][ T5814] usb 3-1: config 0 descriptor?? [ 267.862398][ T8] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 267.883021][ T8] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 267.916466][ T8] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 267.941112][ T8] usb 4-1: config 220 has no interface number 2 [ 267.951760][ T8] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 267.970153][ T8] usb 4-1: config 220 interface 0 has no altsetting 0 [ 267.978369][ T8] usb 4-1: config 220 interface 76 has no altsetting 0 [ 267.985306][ T8] usb 4-1: config 220 interface 1 has no altsetting 0 [ 268.000559][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 268.033152][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.046477][ T8] usb 4-1: Product: syz [ 268.054823][ T8] usb 4-1: Manufacturer: syz [ 268.061998][ T8] usb 4-1: SerialNumber: syz [ 268.169104][ T5814] uclogic 0003:28BD:0055.000E: interface is invalid, ignoring [ 268.196073][ T9561] loop1: detected capacity change from 0 to 1024 [ 268.310232][ T8] usb 4-1: selecting invalid altsetting 0 [ 268.327777][ T8] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 268.344634][ T8] usb 4-1: No valid video chain found. [ 268.362830][ T2133] usb 3-1: USB disconnect, device number 8 [ 268.401978][ T34] hfsplus: b-tree write err: -5, ino 25 [ 268.405734][ T8] usb 4-1: selecting invalid altsetting 0 [ 268.422725][ T8] usbtest: probe of 4-1:220.1 failed with error -22 [ 268.433551][ T34] hfsplus: b-tree write err: -5, ino 4 [ 268.444433][ T8] usb 4-1: USB disconnect, device number 9 [ 268.455069][ T34] hfsplus: b-tree write err: -5, ino 2 [ 268.479013][ T34] hfsplus: b-tree write err: -5, ino 26 [ 268.691146][ T9565] loop1: detected capacity change from 0 to 2048 [ 268.706748][ T9565] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 268.723090][ T9559] loop0: detected capacity change from 0 to 32768 [ 268.737781][ T9565] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 268.762832][ T9565] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 268.782811][ T9559] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 268.789291][ T9565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.868892][ T9559] XFS (loop0): Ending clean mount [ 269.026088][ T9575] loop3: detected capacity change from 0 to 1024 [ 269.120742][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.163693][ T9577] syz.2.1481 uses obsolete (PF_INET,SOCK_PACKET) [ 269.225941][ T34] hfsplus: b-tree write err: -5, ino 25 [ 269.263468][ T34] hfsplus: b-tree write err: -5, ino 4 [ 269.277507][ T34] hfsplus: b-tree write err: -5, ino 2 [ 269.481534][ T9577] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 269.534493][ T9577] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 269.594092][ T9577] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 269.644208][ T9577] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 269.696201][ T9577] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 269.718007][ T9577] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 269.757313][ T9584] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.811881][ T9577] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 269.820802][ T9577] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 269.857906][ T9577] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 269.866765][ T9577] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 269.987675][ T9577] ntfs: volume version 3.1. [ 270.520720][ T9581] set_capacity_and_notify: 2 callbacks suppressed [ 270.520739][ T9581] loop1: detected capacity change from 0 to 32768 [ 270.787594][ T9600] netlink: 'syz.2.1491': attribute type 1 has an invalid length. [ 270.816946][ T9600] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1491'. [ 270.867013][ T9586] loop0: detected capacity change from 0 to 32768 [ 270.926166][ T9586] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 270.926166][ T9586] [ 270.955245][ T9586] ERROR: (device loop0): remounting filesystem as read-only [ 270.988759][ T9586] syz.0.1482: attempt to access beyond end of device [ 270.988759][ T9586] loop0: rw=34817, sector=4680704, nr_sectors = 968 limit=32768 [ 271.046075][ T112] blkno = 8ed80, nblocks = 79 [ 271.052367][ T112] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 271.052367][ T112] [ 271.393119][ T9610] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1492'. [ 271.419826][ T9610] 0: renamed from hsr_slave_1 (while UP) [ 271.433548][ T9610] 0: entered allmulticast mode [ 271.447556][ T9610] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 272.360937][ T9632] loop3: detected capacity change from 0 to 256 [ 272.491354][ T9632] FAT-fs (loop3): Directory bread(block 64) failed [ 272.513181][ T9632] FAT-fs (loop3): Directory bread(block 65) failed [ 272.527079][ T9632] FAT-fs (loop3): Directory bread(block 66) failed [ 272.557308][ T9632] FAT-fs (loop3): Directory bread(block 67) failed [ 272.564048][ T9632] FAT-fs (loop3): Directory bread(block 68) failed [ 272.623848][ T9632] FAT-fs (loop3): Directory bread(block 69) failed [ 272.651636][ T9632] FAT-fs (loop3): Directory bread(block 70) failed [ 272.681323][ T9632] FAT-fs (loop3): Directory bread(block 71) failed [ 272.713536][ T9632] FAT-fs (loop3): Directory bread(block 72) failed [ 272.730938][ T9632] FAT-fs (loop3): Directory bread(block 73) failed [ 272.777497][ T9638] loop1: detected capacity change from 0 to 4096 [ 272.793434][ T9638] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 272.893841][ T9638] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 273.225932][ T9646] loop2: detected capacity change from 0 to 1024 [ 273.283589][ T9646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.396982][ T9646] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 273.495527][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.646752][ T9660] loop2: detected capacity change from 0 to 128 [ 273.661416][ T9660] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 273.680419][ T9660] hpfs: filesystem error: improperly stopped [ 273.686614][ T9660] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 273.705689][ T9660] hpfs: You really don't want any checks? You are crazy... [ 273.720207][ T9660] hpfs: hpfs_map_sector(): read error [ 273.725835][ T9660] hpfs: code page support is disabled [ 273.732406][ T9660] hpfs: hpfs_map_4sectors(): unaligned read [ 273.742285][ T9660] hpfs: hpfs_map_4sectors(): unaligned read [ 273.761085][ T9660] hpfs: filesystem error: unable to find root dir [ 273.948359][ T9664] loop2: detected capacity change from 0 to 128 [ 273.964063][ T9664] EXT4-fs (loop2): Test dummy encryption mode enabled [ 273.983004][ T9664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 274.006484][ T9664] System zones: 1-3, 19-19, 35-36 [ 274.041527][ T9664] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 274.082471][ T9664] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.144481][ T9664] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.215360][ T9669] loop1: detected capacity change from 0 to 1764 [ 274.471630][ T9671] loop2: detected capacity change from 0 to 512 [ 274.531444][ T9671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.571770][ T9677] loop1: detected capacity change from 0 to 512 [ 274.612129][ T9677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.624969][ T9677] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.661847][ T9671] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 45 (only 1 groups) [ 274.772015][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.803981][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.973205][ T9682] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 275.004220][ T9686] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.059914][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 275.059931][ T28] audit: type=1800 audit(1776081356.350:59): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1527" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 275.565967][ T9701] tipc: Enabled bearer , priority 10 [ 275.645854][ T9699] set_capacity_and_notify: 1 callbacks suppressed [ 275.645872][ T9699] loop2: detected capacity change from 0 to 4096 [ 275.778051][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 275.790634][ T9699] ntfs3: loop2: ino=5, "/" directory corrupted [ 275.833206][ T9699] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 275.861440][ T9699] ntfs3: loop2: ino=5, "/" directory corrupted [ 276.139026][ T9711] CUSE: info not properly terminated [ 276.320806][ T9717] loop1: detected capacity change from 0 to 2048 [ 276.386882][ T9717] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.417847][ T5784] udevd[5784]: incorrect nilfs2 checksum on /dev/loop1 [ 276.453913][ T9723] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.580399][ T28] audit: type=1800 audit(1776081357.870:60): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1543" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 276.676994][ T27] tipc: Node number set to 1 [ 276.992120][ T9731] loop1: detected capacity change from 0 to 1024 [ 277.019411][ T9731] hfsplus: invalid btree flag [ 277.025206][ T9731] hfsplus: failed to load extents file [ 277.098941][ T5786] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.209265][ T9714] loop3: detected capacity change from 0 to 40427 [ 277.258079][ T9714] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 277.264524][ T9714] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 277.310607][ T9714] F2FS-fs (loop3): invalid crc value [ 277.607547][ T9714] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 277.618382][ T9727] loop2: detected capacity change from 0 to 32768 [ 277.640644][ T9714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 277.653179][ T28] audit: type=1326 audit(1776081358.940:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9744 comm="syz.0.1554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa05f39c819 code=0x0 [ 277.782094][ T9727] find_entry called with index = 0 [ 277.797558][ T9727] find_entry called with index = 0 [ 277.806372][ T5769] syz-executor: attempt to access beyond end of device [ 277.806372][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 277.847284][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 277.864599][ T9727] find_entry called with index >= next_index [ 277.887015][ T9727] find_entry called with index >= next_index [ 277.893144][ T9727] find_entry called with index >= next_index [ 278.362506][ T9740] loop1: detected capacity change from 0 to 32768 [ 278.370999][ T9740] XFS: attr2 mount option is deprecated. [ 278.399140][ T9740] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.434791][ T9748] loop3: detected capacity change from 0 to 4096 [ 278.444461][ T9748] EXT4-fs: Ignoring removed bh option [ 278.537696][ T9740] XFS (loop1): Ending clean mount [ 278.546688][ T9748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.579943][ T2133] IPVS: starting estimator thread 0... [ 278.615684][ T9740] XFS (loop1): Quotacheck needed: Please wait. [ 278.636505][ T9748] EXT4-fs error (device loop3): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.3.1555: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 278.711680][ T9748] EXT4-fs (loop3): Remounting filesystem read-only [ 278.735312][ T9763] IPVS: using max 19 ests per chain, 45600 per kthread [ 278.743760][ T9740] XFS (loop1): Quotacheck: Done. [ 278.845422][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.923957][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 279.107614][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 279.295429][ T9767] loop0: detected capacity change from 0 to 32768 [ 279.319264][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 279.324836][ T9767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1558 (9767) [ 279.349189][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.365656][ T8] usb 3-1: config 0 has no interface number 0 [ 279.380304][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 279.398820][ T9767] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 279.410375][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.421551][ T8] usb 3-1: Product: syz [ 279.425790][ T8] usb 3-1: Manufacturer: syz [ 279.430692][ T9767] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 279.440073][ T8] usb 3-1: SerialNumber: syz [ 279.446008][ T9767] BTRFS info (device loop0): enabling auto defrag [ 279.459357][ T8] usb 3-1: config 0 descriptor?? [ 279.466097][ T9767] BTRFS info (device loop0): use no compression [ 279.479083][ T8] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 279.489005][ T9767] BTRFS info (device loop0): force clearing of disk cache [ 279.496289][ T9767] BTRFS info (device loop0): max_inline at 4096 [ 279.506432][ T8] usb 3-1: selecting invalid altsetting 1 [ 279.512990][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 279.520942][ T9767] BTRFS info (device loop0): disabling free space tree [ 279.535585][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.548519][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 279.557660][ T8] usb 3-1: media controller created [ 279.584022][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.702457][ T9767] BTRFS info (device loop0): enabling ssd optimizations [ 279.726694][ T9767] BTRFS info (device loop0): auto enabling async discard [ 279.749402][ T9767] BTRFS info (device loop0): rebuilding free space tree [ 279.799892][ T9767] BTRFS info (device loop0): disabling free space tree [ 279.832062][ T9767] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 279.865009][ T9767] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 279.973978][ T5771] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 280.340834][ T5786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (5786) [ 280.722920][ T8] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 280.758289][ T9766] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 280.764430][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 280.810203][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 280.931927][ T8] usb 3-1: USB disconnect, device number 9 [ 281.220315][ T9820] loop3: detected capacity change from 0 to 256 [ 281.283136][ T9820] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 281.381393][ T28] audit: type=1800 audit(1776081362.670:62): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1577" name="file1" dev="loop3" ino=1048678 res=0 errno=0 [ 281.948598][ T9815] loop0: detected capacity change from 0 to 32768 [ 282.165892][ T9822] loop1: detected capacity change from 0 to 32768 [ 282.234100][ T9833] loop0: detected capacity change from 0 to 256 [ 282.274890][ T9833] exfat: Deprecated parameter 'utf8' [ 282.283538][ T9822] JFS: metapage_get_blocks failed [ 282.298089][ T9833] exfat: Deprecated parameter 'utf8' [ 282.303615][ T9833] exfat: Deprecated parameter 'utf8' [ 282.312606][ T9822] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 282.312606][ T9822] [ 282.359650][ T9822] ERROR: (device loop1): remounting filesystem as read-only [ 282.371136][ T9833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 282.549208][ T113] blkno = 5002c, nblocks = 1 [ 282.554022][ T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 282.554022][ T113] [ 282.616517][ T5814] IPVS: starting estimator thread 0... [ 282.737985][ T9839] IPVS: using max 20 ests per chain, 48000 per kthread [ 282.802089][ T9826] loop2: detected capacity change from 0 to 32768 [ 282.814600][ T9843] loop3: detected capacity change from 0 to 64 [ 282.901315][ T9826] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 283.011964][ T9826] XFS (loop2): Ending clean mount [ 283.046226][ T9826] XFS (loop2): Quotacheck needed: Please wait. [ 283.182431][ T9826] XFS (loop2): Quotacheck: Done. [ 283.280460][ T28] audit: type=1800 audit(1776081364.560:63): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1580" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 283.565847][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 284.149044][ T9870] loop2: detected capacity change from 0 to 128 [ 284.182410][ T9870] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.226549][ T9870] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.237883][ T5814] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 284.355039][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.438210][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 284.458198][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.485818][ T9855] loop3: detected capacity change from 0 to 40427 [ 284.486646][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.531292][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.552865][ T9855] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 284.578242][ T9855] F2FS-fs (loop3): invalid crc value [ 284.585579][ T5814] usb 2-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 284.600686][ T9855] F2FS-fs (loop3): Found nat_bits in checkpoint [ 284.620796][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.673002][ T5814] usb 2-1: config 0 descriptor?? [ 284.752945][ T9855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 284.961669][ T5769] syz-executor: attempt to access beyond end of device [ 284.961669][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.991104][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 285.167202][ T5814] hid-generic 0003:045E:FC40.000F: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.1-1/input0 [ 285.358466][ T27] usb 2-1: USB disconnect, device number 17 [ 285.744507][ T9900] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 285.758049][ T9900] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1604'. [ 285.767745][ T9900] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1604'. [ 285.834594][ T9889] loop0: detected capacity change from 0 to 32768 [ 285.867324][ T9889] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1602 (9889) [ 285.900041][ T9889] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 285.926303][ T9889] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 285.941928][ T9889] BTRFS info (device loop0): force clearing of disk cache [ 285.966249][ T9889] BTRFS info (device loop0): setting nodatasum [ 285.974199][ T9889] BTRFS info (device loop0): force zlib compression, level 3 [ 285.988055][ T9889] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 286.009102][ T9889] BTRFS info (device loop0): use lzo compression, level 0 [ 286.026750][ T9889] BTRFS info (device loop0): turning on flush-on-commit [ 286.049654][ T9889] BTRFS info (device loop0): enabling auto defrag [ 286.077424][ T9889] BTRFS info (device loop0): disabling auto defrag [ 286.093978][ T9889] BTRFS info (device loop0): using free space tree [ 286.174480][ T9889] BTRFS info (device loop0): enabling ssd optimizations [ 286.198733][ T9889] BTRFS info (device loop0): rebuilding free space tree [ 286.219762][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 286.229129][ T9925] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 286.229129][ T9925] The task syz.2.1612 (9925) triggered the difference, watch for misbehavior. [ 286.344816][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 286.437234][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 286.445456][ T8] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 286.456992][ T8] usb 4-1: config 0 has no interface number 0 [ 286.470640][ T8] usb 4-1: config 0 interface 184 has no altsetting 0 [ 286.504668][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 286.527159][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.535294][ T8] usb 4-1: Product: syz [ 286.557057][ T8] usb 4-1: Manufacturer: syz [ 286.561758][ T8] usb 4-1: SerialNumber: syz [ 286.568393][ T2133] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 286.585380][ T8] usb 4-1: config 0 descriptor?? [ 286.605250][ T8] smsc75xx v1.0.0 [ 286.770529][ T2133] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 286.780244][ T2133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.825295][ T2133] usb 2-1: config 0 descriptor?? [ 286.851324][ T2133] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 287.074908][ T9937] loop0: detected capacity change from 0 to 1024 [ 287.085436][ T9937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.169295][ T9937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.224358][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 287.271879][ T2133] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 287.302728][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 287.319928][ T2133] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 287.331175][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.336740][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 287.385263][ T8] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 287.410961][ T8] usb 4-1: USB disconnect, device number 10 [ 287.472596][ T2133] usb 2-1: USB disconnect, device number 18 [ 287.521147][ T9948] loop2: detected capacity change from 0 to 512 [ 287.533383][ T9948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 287.549961][ T9948] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1621: bad orphan inode 131083 [ 287.562852][ T9948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.584857][ T28] audit: type=1800 audit(1776081368.870:64): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1621" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 287.656089][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.050843][ T2133] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 288.270339][ T2133] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 288.299938][ T2133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.337384][ T2133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.352614][ T2133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 288.376797][ T2133] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 288.396534][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.435481][ T2133] usb 3-1: config 0 descriptor?? [ 288.878654][ T2133] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 288.896506][ T2133] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 288.926119][ T2133] holtek_kbd 0003:04D9:A055.0010: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 289.079707][ T8] usb 3-1: USB disconnect, device number 10 [ 289.196457][ T9968] loop3: detected capacity change from 0 to 32768 [ 289.273925][ T9968] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 289.273925][ T9968] [ 289.300220][ T9968] ERROR: (device loop3): remounting filesystem as read-only [ 289.500445][ T9989] CUSE: unknown device info "" [ 289.510495][ T9989] CUSE: unknown device info "" [ 289.515470][ T9989] CUSE: unknown device info "" [ 289.537013][ T9989] CUSE: unknown device info "" [ 289.541962][ T9989] CUSE: unknown device info "ÿ" [ 289.586935][ T9989] CUSE: unknown device info "" [ 289.627096][ T9989] CUSE: unknown device info "" [ 289.632074][ T9989] CUSE: unknown device info "ÿ" [ 289.666957][ T9989] CUSE: DEVNAME unspecified [ 289.712358][ T9981] loop0: detected capacity change from 0 to 32768 [ 289.735616][ T9981] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1636 (9981) [ 289.783873][ T9981] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 289.802532][ T9993] loop1: detected capacity change from 0 to 1024 [ 289.829612][ T9981] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 289.857758][ T9981] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 289.878385][ T9981] BTRFS info (device loop0): use zstd compression, level 3 [ 289.885707][ T9981] BTRFS info (device loop0): using free space tree [ 290.010460][ T12] hfsplus: b-tree write err: -5, ino 25 [ 290.021099][ T12] hfsplus: b-tree write err: -5, ino 4 [ 290.026764][ T12] hfsplus: b-tree write err: -5, ino 2 [ 290.087190][ T9981] BTRFS info (device loop0): enabling ssd optimizations [ 290.094283][ T9981] BTRFS info (device loop0): auto enabling async discard [ 290.421394][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 290.421963][T10023] loop1: detected capacity change from 0 to 1024 [ 290.533069][T10023] hfsplus: bad catalog entry type [ 290.621904][ T12] hfsplus: b-tree write err: -5, ino 25 [ 290.646531][ T12] hfsplus: b-tree write err: -5, ino 4 [ 290.673127][ T12] hfsplus: b-tree write err: -5, ino 2 [ 291.769077][T10062] loop3: detected capacity change from 0 to 16 [ 291.788607][T10062] erofs: (device loop3): mounted with root inode @ nid 36. [ 291.850796][T10062] overlayfs: failed to get redirect (-117) [ 292.203499][T10074] loop3: detected capacity change from 0 to 1024 [ 292.348087][ T4232] hfsplus: b-tree write err: -5, ino 25 [ 292.359358][ T4232] hfsplus: b-tree write err: -5, ino 4 [ 292.377091][ T4232] hfsplus: b-tree write err: -5, ino 2 [ 292.548297][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 292.558235][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 292.606111][T10086] loop0: detected capacity change from 0 to 512 [ 292.653831][T10091] loop3: detected capacity change from 0 to 256 [ 292.687603][T10086] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1677: invalid indirect mapped block 4294967295 (level 1) [ 292.705453][T10086] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1677: invalid indirect mapped block 4294967295 (level 1) [ 292.739710][T10086] EXT4-fs (loop0): 2 truncates cleaned up [ 292.764342][T10091] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 292.802965][T10086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.003890][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.023487][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 293.497120][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 293.650554][T10116] autofs4:pid:10116:autofs_fill_super: called with bogus options [ 293.708382][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 293.728398][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.746195][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.758698][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.768894][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 293.786898][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.832622][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 293.846159][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 293.865139][ T9] usb 2-1: Manufacturer: syz [ 293.898571][ T9] usb 2-1: config 0 descriptor?? [ 294.237537][ T5820] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 294.247001][ T9] rc_core: IR keymap rc-hauppauge not found [ 294.252986][ T9] Registered IR keymap rc-empty [ 294.267055][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.317370][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.352714][ T28] audit: type=1326 audit(1776081375.640:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.378078][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 294.395295][ T28] audit: type=1326 audit(1776081375.640:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.423666][ T28] audit: type=1326 audit(1776081375.680:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.427604][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 294.448599][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 294.474251][ T28] audit: type=1326 audit(1776081375.680:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.506048][ T5820] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 294.527330][ T28] audit: type=1326 audit(1776081375.680:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.527544][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.550461][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.589687][ T28] audit: type=1326 audit(1776081375.760:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.612693][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.620598][ T28] audit: type=1326 audit(1776081375.760:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.654085][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.678826][ T5820] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 294.687077][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.714618][ T28] audit: type=1326 audit(1776081375.760:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.738516][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.745954][ T28] audit: type=1326 audit(1776081375.790:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.769784][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.809558][ T28] audit: type=1326 audit(1776081375.790:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10134 comm="syz.3.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff601b9c819 code=0x7ffc0000 [ 294.832424][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.878874][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.907549][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.937086][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 294.951969][T10128] loop0: detected capacity change from 0 to 32768 [ 294.968833][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 294.974293][T10128] XFS: noikeep mount option is deprecated. [ 294.987107][T10128] XFS: attr2 mount option is deprecated. [ 295.006950][T10128] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 295.016305][T10128] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.020099][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 295.094771][ T9] usb 2-1: USB disconnect, device number 19 [ 295.116959][T10128] XFS (loop0): Ending clean mount [ 295.151447][T10128] XFS (loop0): Quotacheck needed: Please wait. [ 295.340616][ T2133] usb 3-1: USB disconnect, device number 11 [ 295.365919][T10128] XFS (loop0): Quotacheck: Done. [ 295.529450][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.902249][T10139] loop3: detected capacity change from 0 to 40427 [ 295.952839][T10139] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 296.006907][T10139] F2FS-fs (loop3): invalid crc value [ 296.064448][T10139] F2FS-fs (loop3): Found nat_bits in checkpoint [ 296.250410][T10139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.339045][ T5769] syz-executor: attempt to access beyond end of device [ 296.339045][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.371806][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 296.551639][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'. [ 296.692932][T10173] loop0: detected capacity change from 0 to 64 [ 296.961404][T10181] loop2: detected capacity change from 0 to 8 [ 297.137763][T10181] SQUASHFS error: Failed to read block 0x2d0: -5 [ 297.144220][T10181] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 297.155822][T10181] SQUASHFS error: Unable to read directory block [2ce:0] [ 297.447970][T10191] loop2: detected capacity change from 0 to 2048 [ 297.485368][T10191] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.716947][ T5814] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 297.776028][T10203] loop1: detected capacity change from 0 to 1024 [ 297.784630][T10203] EXT4-fs: Ignoring removed orlov option [ 297.831509][T10203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.927125][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 297.941522][ T5814] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 297.950057][ T5814] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 297.954108][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.961410][ T5814] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 297.982049][ T5814] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 297.996338][ T5814] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.008597][ T5814] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 298.020068][ T5814] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 298.040348][ T5814] usb 4-1: Product: syz [ 298.044621][ T5814] usb 4-1: Manufacturer: syz [ 298.051133][ T5814] usb 4-1: SerialNumber: syz [ 298.064446][ T5814] usb 4-1: config 0 descriptor?? [ 298.105617][ T5814] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 298.146375][ T5814] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 298.356125][ T5814] usb 4-1: USB disconnect, device number 11 [ 298.369572][ T5814] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 298.425974][T10208] loop2: detected capacity change from 0 to 32768 [ 298.462846][T10208] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 298.520405][T10208] XFS (loop2): Ending clean mount [ 298.577439][ T5768] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 299.105086][T10229] loop1: detected capacity change from 0 to 16 [ 299.116301][T10229] erofs: (device loop1): mounted with root inode @ nid 36. [ 299.118406][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 299.150976][T10229] syz.1.1734: attempt to access beyond end of device [ 299.150976][T10229] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 299.192372][T10229] syz.1.1734: attempt to access beyond end of device [ 299.192372][T10229] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 299.337041][ T2133] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.347368][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.362927][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.381742][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.394875][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.408827][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.427946][ T27] usb 3-1: config 0 descriptor?? [ 299.527011][ T2133] usb 4-1: Using ep0 maxpacket: 16 [ 299.549461][ T2133] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 299.563723][ T2133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.574059][ T2133] usb 4-1: Product: syz [ 299.595118][ T2133] usb 4-1: Manufacturer: syz [ 299.602717][ T2133] usb 4-1: SerialNumber: syz [ 299.613986][ T2133] usb 4-1: config 0 descriptor?? [ 299.624700][T10237] vivid-002: disconnect [ 299.634294][ T2133] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 299.645000][T10236] vivid-002: reconnect [ 299.734465][T10239] loop1: detected capacity change from 0 to 512 [ 299.756478][T10239] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.812065][T10239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.831919][T10239] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.861232][ T27] plantronics 0003:047F:FFFF.0011: unbalanced delimiter at end of report description [ 299.893342][ T27] plantronics 0003:047F:FFFF.0011: parse failed [ 299.902809][ T28] audit: type=1800 audit(1776081381.190:75): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1739" name=0AF301 dev="loop1" ino=18 res=0 errno=0 [ 299.909797][ T27] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 299.986522][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.082948][ T27] usb 3-1: USB disconnect, device number 12 [ 300.255885][ T2133] ssu100: probe of 4-1:0.0 failed with error -71 [ 300.271456][ T2133] usb 4-1: USB disconnect, device number 12 [ 300.279971][ T5786] udevd[5786]: setting owner of /dev/bus/usb/004/012 to uid=0, gid=0 failed: No such file or directory [ 300.467087][ T5814] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 300.646967][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 300.666614][ T5814] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 300.684274][ T5814] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 300.721093][ T5814] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 300.732724][ T5814] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 300.748365][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.758026][ T5814] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 300.777000][ T5814] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 300.792617][T10250] loop0: detected capacity change from 0 to 2048 [ 300.811264][ T5814] usb 2-1: Product: syz [ 300.816778][ T5814] usb 2-1: Manufacturer: syz [ 300.821842][ T5814] usb 2-1: SerialNumber: syz [ 300.835732][T10250] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 300.847952][ T5814] usb 2-1: config 0 descriptor?? [ 300.878421][T10250] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 300.882797][ T5814] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 300.927284][T10250] UDF-fs: Scanning with blocksize 512 failed [ 300.940003][ T5814] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 300.961476][T10250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.048917][ T28] audit: type=1800 audit(1776081382.340:76): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1743" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 301.107672][T10252] loop2: detected capacity change from 0 to 4096 [ 301.139672][T10252] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 301.158612][T10252] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 301.211801][ T8] usb 2-1: USB disconnect, device number 20 [ 301.226182][T10256] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.248208][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 301.604787][T10261] loop3: detected capacity change from 0 to 4096 [ 301.689104][T10261] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 301.713868][T10261] ntfs3: loop3: Failed to load $Extend (-22). [ 301.723811][T10261] ntfs3: loop3: Failed to initialize $Extend. [ 301.963895][T10271] loop0: detected capacity change from 0 to 16 [ 301.989258][T10271] erofs: (device loop0): mounted with root inode @ nid 36. [ 302.309736][T10278] loop3: detected capacity change from 0 to 4096 [ 302.354253][T10278] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 302.376461][ T28] audit: type=1326 audit(1776081383.660:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 302.419774][T10278] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 302.474616][ T28] audit: type=1326 audit(1776081383.660:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05f39c819 code=0x7ffc0000 [ 302.476081][T10278] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 302.519462][T10263] loop2: detected capacity change from 0 to 32768 [ 302.570047][ T28] audit: type=1326 audit(1776081383.690:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.0.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05f35d04e code=0x7ffc0000 [ 302.605766][T10278] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 302.619497][T10278] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 302.638540][T10278] ntfs: volume version 3.1. [ 302.664836][T10263] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 302.954263][T10300] loop0: detected capacity change from 0 to 64 [ 303.003934][T10263] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 303.065463][T10300] hfs: bad catalog entry type 65409 [ 303.075736][T10263] XFS (loop2): Starting recovery (logdev: internal) [ 303.159117][T10263] XFS (loop2): Ending recovery (logdev: internal) [ 303.400824][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 303.766748][T10283] loop1: detected capacity change from 0 to 40427 [ 303.837247][T10283] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 303.844311][T10283] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 303.908570][T10283] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 303.937626][T10283] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 303.979554][T10283] F2FS-fs (loop1): invalid crc value [ 304.022782][T10283] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.218607][T10326] netlink: 'syz.0.1772': attribute type 5 has an invalid length. [ 304.226603][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1772'. [ 304.250117][T10283] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 304.266972][T10283] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 304.440504][ T5767] syz-executor: attempt to access beyond end of device [ 304.440504][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.480685][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 304.684790][T10314] loop3: detected capacity change from 0 to 32768 [ 304.724456][T10314] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1770 (10314) [ 304.767805][T10314] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 304.787156][T10314] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 304.807318][T10314] BTRFS info (device loop3): turning on async discard [ 304.814208][T10314] BTRFS info (device loop3): using free space tree [ 304.967513][T10314] BTRFS info (device loop3): enabling ssd optimizations [ 305.087684][T10325] loop2: detected capacity change from 0 to 32768 [ 305.134663][T10325] (syz.2.1773,10325,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.189906][T10325] (syz.2.1773,10325,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.256700][ T5769] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 305.350305][T10325] JBD2: Ignoring recovery information on journal [ 305.540009][T10325] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 305.576942][T10325] (syz.2.1773,10325,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 305.735054][T10358] loop3: detected capacity change from 0 to 512 [ 305.763303][T10358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.809680][T10358] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 305.891044][T10358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 305.941624][T10358] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 305.977092][T10358] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 306.002652][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 306.010498][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 306.117618][T10358] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 306.160290][T10361] loop1: detected capacity change from 0 to 2048 [ 306.260273][T10361] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 306.275377][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.318834][T10361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.447146][T10363] netlink: 'syz.3.1783': attribute type 5 has an invalid length. [ 306.469501][T10353] loop0: detected capacity change from 0 to 40427 [ 306.492280][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1783'. [ 306.530458][T10353] F2FS-fs (loop0): invalid crc value [ 306.613089][T10353] F2FS-fs (loop0): Found nat_bits in checkpoint [ 306.803762][T10372] loop2: detected capacity change from 0 to 1024 [ 306.811910][T10353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.837040][T10372] hfsplus: found bad thread record in catalog [ 306.891520][ T4232] hfsplus: b-tree write err: -5, ino 25 [ 306.902460][ T4232] hfsplus: b-tree write err: -5, ino 4 [ 306.916002][ T4232] hfsplus: b-tree write err: -5, ino 2 [ 306.979798][ T5771] syz-executor: attempt to access beyond end of device [ 306.979798][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 307.032091][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 307.158623][ T27] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 307.370430][ T27] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 307.423757][ T27] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 307.447375][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.468213][ T27] usb 4-1: Product: syz [ 307.472517][ T27] usb 4-1: Manufacturer: syz [ 307.482207][ T27] usb 4-1: SerialNumber: syz [ 307.737510][ T27] usb 4-1: selecting invalid altsetting 1 [ 307.858310][T10393] loop0: detected capacity change from 0 to 1764 [ 307.883786][T10393] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 307.924066][ T27] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 307.924189][ T27] dvb_usb_lmedm04: probe of 4-1:2.0 failed with error -22 [ 308.065897][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 308.103476][T10397] ipvlan2: entered allmulticast mode [ 308.109155][T10397] veth0_vlan: entered allmulticast mode [ 308.142852][ T27] usb 4-1: USB disconnect, device number 13 [ 308.221059][T10387] loop1: detected capacity change from 0 to 32768 [ 308.267082][T10387] JBD2: Ignoring recovery information on journal [ 308.356411][T10387] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 308.671380][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 309.043867][T10423] loop1: detected capacity change from 0 to 1024 [ 309.067550][T10424] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1809'. [ 309.087498][T10425] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1807'. [ 309.130312][T10424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1809'. [ 309.133891][T10427] loop0: detected capacity change from 0 to 1024 [ 309.169690][T10427] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 309.197951][T10423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 309.257534][T10427] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1810: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.282936][T10423] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.347927][T10427] __quota_error: 16 callbacks suppressed [ 309.347943][T10427] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 309.377041][T10427] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1810: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.399577][T10423] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1808: bg 0: block 112: padding at end of block bitmap is not set [ 309.460849][T10435] loop2: detected capacity change from 0 to 64 [ 309.468708][T10427] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 309.505018][T10427] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1810: Failed to acquire dquot type 0 [ 309.552397][T10435] Trying to free block not in datazone [ 309.571156][T10437] loop3: detected capacity change from 0 to 512 [ 309.586728][T10427] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 309.610561][T10427] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1810: mark_inode_dirty error [ 309.624131][T10427] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 309.630271][T10437] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1813: bad orphan inode 13 [ 309.645299][T10427] EXT4-fs (loop0): 1 orphan inode deleted [ 309.666023][ T49] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.683362][T10427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.696163][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 309.706723][T10437] ext4_test_bit(bit=12, block=4) = 1 [ 309.781655][T10437] is_bad_inode(inode)=0 [ 309.785915][T10437] NEXT_ORPHAN(inode)=0 [ 309.795299][ T49] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 309.821608][T10437] max_ino=32 [ 309.824905][T10437] i_nlink=1 [ 309.851472][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 309.867294][T10437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.929537][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.956983][ T34] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.999614][T10437] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.1813: Hash code is SIPHASH, but hash not in dirent [ 310.046946][ T34] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 310.076988][T10437] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1813: Corrupt directory, running e2fsck is recommended [ 310.089919][ T34] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 310.124932][ T5771] EXT4-fs error (device loop0): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 310.153946][T10437] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.1813: path /460/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 310.200071][T10437] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.1813: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 310.227102][ T5771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 310.239210][ T5771] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 310.352555][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.594285][T10452] loop3: detected capacity change from 0 to 1764 [ 310.758772][T10442] loop2: detected capacity change from 0 to 32768 [ 310.780451][T10442] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1815 (10442) [ 310.829344][T10442] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 310.859551][T10442] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 310.882456][T10442] BTRFS info (device loop2): setting nodatasum [ 310.893706][T10442] BTRFS info (device loop2): force zlib compression, level 3 [ 310.909828][T10459] loop3: detected capacity change from 0 to 512 [ 310.911998][T10442] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 310.946986][T10442] BTRFS info (device loop2): use lzo compression, level 0 [ 310.966553][T10442] BTRFS info (device loop2): turning on flush-on-commit [ 310.978463][T10442] BTRFS info (device loop2): enabling auto defrag [ 310.988814][T10442] BTRFS info (device loop2): max_inline at 4096 [ 310.995526][T10442] BTRFS info (device loop2): using free space tree [ 311.104219][T10459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.136658][T10442] BTRFS info (device loop2): enabling ssd optimizations [ 311.159387][T10459] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.271048][T10459] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1821: corrupted xattr block 33: invalid header [ 311.380661][T10459] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1821: corrupted xattr block 33: invalid header [ 311.458274][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.483163][T10459] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 311.676526][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.754181][T10492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 311.984331][T10496] loop3: detected capacity change from 0 to 1024 [ 312.008180][T10496] EXT4-fs: Ignoring removed nobh option [ 312.040469][T10496] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 312.096632][T10496] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 312.147058][T10496] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 312.170630][T10498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1831'. [ 312.204208][T10498] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1831'. [ 312.236326][T10498] tipc: Started in network mode [ 312.251843][T10498] tipc: Node identity ffffffff, cluster identity 4711 [ 312.263978][T10498] tipc: Node number set to 4294967295 [ 312.556982][ T5778] Bluetooth: hci2: command 0x0401 tx timeout [ 312.895020][T10494] JBD2: Ignoring recovery information on journal [ 312.921012][T10490] set_capacity_and_notify: 1 callbacks suppressed [ 312.921030][T10490] loop1: detected capacity change from 0 to 32768 [ 312.987126][T10490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1828 (10490) [ 313.098817][T10494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 313.143449][T10490] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.177182][T10490] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 313.196353][T10490] BTRFS info (device loop1): setting nodatasum [ 313.212140][T10490] BTRFS info (device loop1): force zlib compression, level 3 [ 313.225061][T10490] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 313.228197][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 313.243378][T10490] BTRFS info (device loop1): use lzo compression, level 0 [ 313.266990][T10490] BTRFS info (device loop1): turning on flush-on-commit [ 313.282787][T10490] BTRFS info (device loop1): enabling auto defrag [ 313.293071][T10490] BTRFS info (device loop1): max_inline at 4096 [ 313.328753][T10490] BTRFS info (device loop1): using free space tree [ 313.353552][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 313.448330][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 313.479929][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.497421][T10490] BTRFS info (device loop1): enabling ssd optimizations [ 313.534825][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.567596][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.613242][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 313.646638][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.666996][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 313.689635][ T8] usb 3-1: config 0 descriptor?? [ 313.797847][ T5767] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.876062][T10539] loop0: detected capacity change from 0 to 1024 [ 313.914466][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 313.934528][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.947878][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.960228][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 313.969488][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.011962][ T9] usb 4-1: config 0 descriptor?? [ 314.061086][T10539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.192371][T10539] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 314.199322][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0012/input/input16 [ 314.232602][T10539] EXT4-fs warning (device loop0): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 314.337587][ T8] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 314.406273][ T8] usb 3-1: USB disconnect, device number 13 [ 314.479387][ T9] ntrig 0003:1B96:0008.0013: nested delimiters [ 314.485647][ T9] ntrig 0003:1B96:0008.0013: item 0 1 2 10 parsing failed [ 314.521946][ T9] ntrig 0003:1B96:0008.0013: parse failed [ 314.528596][ T9] ntrig: probe of 0003:1B96:0008.0013 failed with error -22 [ 314.551576][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.612763][T10542] fido_id[10542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 314.683435][ T27] usb 4-1: USB disconnect, device number 14 [ 314.814866][T10548] loop1: detected capacity change from 0 to 512 [ 314.824678][T10548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 314.869926][T10548] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.1843: bad orphan inode 131083 [ 314.910429][T10548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.960323][T10552] loop0: detected capacity change from 0 to 128 [ 314.985565][T10552] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.024618][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.044250][T10552] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.275056][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.574368][T10568] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 315.773811][T10572] loop1: detected capacity change from 0 to 1024 [ 315.822068][T10572] hfsplus: bad catalog entry type [ 315.937374][ T12] hfsplus: b-tree write err: -5, ino 25 [ 315.948624][ T12] hfsplus: b-tree write err: -5, ino 4 [ 315.972192][ T12] hfsplus: b-tree write err: -5, ino 2 [ 316.237060][T10561] loop2: detected capacity change from 0 to 32768 [ 316.303731][T10561] JBD2: Ignoring recovery information on journal [ 316.389624][T10561] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 316.405919][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 316.450522][T10561] [ 316.452924][T10561] ====================================================== [ 316.459984][T10561] WARNING: possible circular locking dependency detected [ 316.467047][T10561] syzkaller #0 Not tainted [ 316.471494][T10561] ------------------------------------------------------ [ 316.478545][T10561] syz.2.1849/10561 is trying to acquire lock: [ 316.484660][T10561] ffff8880607689d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 316.497978][T10561] [ 316.497978][T10561] but task is already holding lock: [ 316.505389][T10561] ffff88805d2edc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 316.514948][T10561] [ 316.514948][T10561] which lock already depends on the new lock. [ 316.514948][T10561] [ 316.525376][T10561] [ 316.525376][T10561] the existing dependency chain (in reverse order) is: [ 316.534434][T10561] [ 316.534434][T10561] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 316.542303][T10561] down_read+0x46/0x2e0 [ 316.547015][T10561] ocfs2_init_acl+0x30a/0x770 [ 316.552232][T10561] ocfs2_mknod+0x140f/0x2300 [ 316.557368][T10561] ocfs2_create+0x196/0x430 [ 316.562599][T10561] path_openat+0x12a0/0x3230 [ 316.567742][T10561] do_filp_open+0x1f5/0x430 [ 316.572788][T10561] do_sys_openat2+0x134/0x1d0 [ 316.578019][T10561] __x64_sys_openat+0x139/0x160 [ 316.583420][T10561] do_syscall_64+0x55/0xa0 [ 316.588379][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.594825][T10561] [ 316.594825][T10561] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 316.603364][T10561] down_read+0x46/0x2e0 [ 316.608066][T10561] ocfs2_start_trans+0x3a8/0x6f0 [ 316.613544][T10561] ocfs2_setattr+0x10b6/0x1bc0 [ 316.618859][T10561] notify_change+0xb0d/0xe10 [ 316.623993][T10561] chown_common+0x413/0x5d0 [ 316.629043][T10561] do_fchownat+0x14b/0x240 [ 316.634036][T10561] __x64_sys_lchown+0x85/0x90 [ 316.639260][T10561] do_syscall_64+0x55/0xa0 [ 316.644215][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.650660][T10561] [ 316.650660][T10561] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 316.658206][T10561] ocfs2_start_trans+0x2a9/0x6f0 [ 316.663722][T10561] ocfs2_mknod+0xf1d/0x2300 [ 316.668786][T10561] ocfs2_create+0x196/0x430 [ 316.673846][T10561] path_openat+0x12a0/0x3230 [ 316.679330][T10561] do_filp_open+0x1f5/0x430 [ 316.684375][T10561] do_sys_openat2+0x134/0x1d0 [ 316.689604][T10561] __x64_sys_openat+0x139/0x160 [ 316.695000][T10561] do_syscall_64+0x55/0xa0 [ 316.700306][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.706778][T10561] [ 316.706778][T10561] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 316.717334][T10561] down_write+0x97/0x200 [ 316.722125][T10561] ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 316.728821][T10561] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 316.735696][T10561] ocfs2_mknod+0xebb/0x2300 [ 316.740790][T10561] ocfs2_create+0x196/0x430 [ 316.745834][T10561] path_openat+0x12a0/0x3230 [ 316.750976][T10561] do_filp_open+0x1f5/0x430 [ 316.756017][T10561] do_sys_openat2+0x134/0x1d0 [ 316.761241][T10561] __x64_sys_openat+0x139/0x160 [ 316.766637][T10561] do_syscall_64+0x55/0xa0 [ 316.771596][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.778041][T10561] [ 316.778041][T10561] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 316.788600][T10561] __lock_acquire+0x2df1/0x7d40 [ 316.794025][T10561] lock_acquire+0x19e/0x420 [ 316.799073][T10561] down_write+0x97/0x200 [ 316.803854][T10561] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 316.810293][T10561] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 316.817180][T10561] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 316.823394][T10561] ocfs2_xattr_set+0xc3f/0x13e0 [ 316.828794][T10561] ocfs2_set_acl+0x4e1/0x590 [ 316.833927][T10561] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 316.839404][T10561] vfs_set_acl+0x803/0xa60 [ 316.844365][T10561] do_set_acl+0xf5/0x180 [ 316.849144][T10561] path_setxattr+0x41d/0x5d0 [ 316.854281][T10561] __x64_sys_setxattr+0xbb/0xd0 [ 316.859686][T10561] do_syscall_64+0x55/0xa0 [ 316.864673][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.871123][T10561] [ 316.871123][T10561] other info that might help us debug this: [ 316.871123][T10561] [ 316.881373][T10561] Chain exists of: [ 316.881373][T10561] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 316.881373][T10561] [ 316.898358][T10561] Possible unsafe locking scenario: [ 316.898358][T10561] [ 316.905925][T10561] CPU0 CPU1 [ 316.911320][T10561] ---- ---- [ 316.916707][T10561] lock(&oi->ip_xattr_sem); [ 316.921319][T10561] lock(&journal->j_trans_barrier); [ 316.929235][T10561] lock(&oi->ip_xattr_sem); [ 316.936366][T10561] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 316.943785][T10561] [ 316.943785][T10561] *** DEADLOCK *** [ 316.943785][T10561] [ 316.951954][T10561] 3 locks held by syz.2.1849/10561: [ 316.957180][T10561] #0: ffff888078d1c418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 316.966481][T10561] #1: ffff88805d2edf58 (&type->i_mutex_dir_key#16){++++}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 316.976713][T10561] #2: ffff88805d2edc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 316.986678][T10561] [ 316.986678][T10561] stack backtrace: [ 316.992637][T10561] CPU: 1 PID: 10561 Comm: syz.2.1849 Not tainted syzkaller #0 [ 317.000149][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 317.010250][T10561] Call Trace: [ 317.013566][T10561] [ 317.016519][T10561] dump_stack_lvl+0x18c/0x250 [ 317.021237][T10561] ? load_image+0x420/0x420 [ 317.025770][T10561] ? show_regs_print_info+0x20/0x20 [ 317.031005][T10561] ? print_circular_bug+0x12b/0x1a0 [ 317.036233][T10561] check_noncircular+0x2fc/0x400 [ 317.041202][T10561] ? look_up_lock_class+0x75/0x140 [ 317.046344][T10561] ? print_deadlock_bug+0x5d0/0x5d0 [ 317.051570][T10561] ? lockdep_lock+0xf5/0x230 [ 317.056196][T10561] ? _find_first_zero_bit+0xd3/0x100 [ 317.061516][T10561] __lock_acquire+0x2df1/0x7d40 [ 317.066439][T10561] ? __lock_acquire+0x7d40/0x7d40 [ 317.071521][T10561] ? verify_lock_unused+0x140/0x140 [ 317.076781][T10561] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 317.082530][T10561] ? do_raw_spin_lock+0x11f/0x2c0 [ 317.087593][T10561] ? mutex_unlock+0x10/0x10 [ 317.092132][T10561] lock_acquire+0x19e/0x420 [ 317.096685][T10561] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 317.102804][T10561] ? ocfs2_get_system_file_inode+0x202/0x850 [ 317.108830][T10561] ? __might_sleep+0xe0/0xe0 [ 317.113458][T10561] ? read_lock_is_recursive+0x20/0x20 [ 317.118861][T10561] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 317.125039][T10561] ? verify_lock_unused+0x140/0x140 [ 317.130262][T10561] ? check_noncircular+0x18a/0x400 [ 317.135426][T10561] down_write+0x97/0x200 [ 317.139738][T10561] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 317.145847][T10561] ? down_read_killable+0x340/0x340 [ 317.151099][T10561] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 317.157076][T10561] ? mark_lock+0x94/0x320 [ 317.161457][T10561] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 317.167472][T10561] ? lock_chain_count+0x20/0x20 [ 317.172362][T10561] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 317.178302][T10561] ? lockdep_hardirqs_on+0x98/0x150 [ 317.183548][T10561] ? ocfs2_block_group_search+0x470/0x470 [ 317.189317][T10561] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 317.195259][T10561] ? _raw_spin_unlock+0x40/0x40 [ 317.200159][T10561] ? stack_trace_save+0xaa/0x100 [ 317.205136][T10561] ? stack_trace_snprint+0xf0/0xf0 [ 317.210285][T10561] ? __stack_depot_save+0x560/0x630 [ 317.215528][T10561] ? kasan_set_track+0x5f/0x70 [ 317.220323][T10561] ? kasan_set_track+0x4e/0x70 [ 317.225122][T10561] ? __kasan_kmalloc+0x8f/0xa0 [ 317.229918][T10561] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 317.236453][T10561] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 317.242298][T10561] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 317.247358][T10561] ? ocfs2_set_acl+0x4e1/0x590 [ 317.252146][T10561] ? ocfs2_iop_set_acl+0x1b2/0x2b0 [ 317.257287][T10561] ? vfs_set_acl+0x803/0xa60 [ 317.261903][T10561] ? do_set_acl+0xf5/0x180 [ 317.266350][T10561] ? path_setxattr+0x41d/0x5d0 [ 317.271148][T10561] ? __x64_sys_setxattr+0xbb/0xd0 [ 317.276205][T10561] ? do_syscall_64+0x55/0xa0 [ 317.280868][T10561] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.287004][T10561] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 317.293379][T10561] ? ocfs2_init_steal_slots+0x160/0x160 [ 317.298964][T10561] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 317.304651][T10561] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 317.310329][T10561] ? ocfs2_xattr_set+0xc05/0x13e0 [ 317.315402][T10561] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 317.321504][T10561] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 317.327784][T10561] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 317.333734][T10561] ? down_write+0x16e/0x200 [ 317.338288][T10561] ? down_read_killable+0x340/0x340 [ 317.343530][T10561] ? up_write+0x1c3/0x410 [ 317.347894][T10561] ocfs2_xattr_set+0xc3f/0x13e0 [ 317.352807][T10561] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 317.358571][T10561] ? __kasan_kmalloc+0x8f/0xa0 [ 317.363381][T10561] ? ocfs2_set_acl+0x11e/0x590 [ 317.368193][T10561] ? ocfs2_iop_set_acl+0x1b2/0x2b0 [ 317.373376][T10561] ? vfs_set_acl+0x803/0xa60 [ 317.378019][T10561] ? path_setxattr+0x41d/0x5d0 [ 317.382815][T10561] ? do_syscall_64+0x55/0xa0 [ 317.387456][T10561] ? ocfs2_set_acl+0x11e/0x590 [ 317.392249][T10561] ? rcu_is_watching+0x15/0xb0 [ 317.397055][T10561] ? ocfs2_set_acl+0x11e/0x590 [ 317.401848][T10561] ? __kmalloc+0xe2/0x230 [ 317.406235][T10561] ? ocfs2_inode_lock_atime+0x530/0x530 [ 317.411843][T10561] ocfs2_set_acl+0x4e1/0x590 [ 317.416475][T10561] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 317.421447][T10561] ? ocfs2_xattr_get+0x260/0x260 [ 317.426405][T10561] ? evm_inode_set_acl+0xbc/0x430 [ 317.431461][T10561] ? down_read_killable+0x340/0x340 [ 317.436693][T10561] ? evm_revalidate_status+0x4f/0xb0 [ 317.442000][T10561] ? posix_acl_valid+0x352/0x3d0 [ 317.446973][T10561] vfs_set_acl+0x803/0xa60 [ 317.451414][T10561] do_set_acl+0xf5/0x180 [ 317.455689][T10561] path_setxattr+0x41d/0x5d0 [ 317.460330][T10561] ? simple_xattrs_free+0x150/0x150 [ 317.465574][T10561] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 317.471587][T10561] ? lock_chain_count+0x20/0x20 [ 317.476471][T10561] __x64_sys_setxattr+0xbb/0xd0 [ 317.481358][T10561] do_syscall_64+0x55/0xa0 [ 317.485799][T10561] ? clear_bhb_loop+0x40/0x90 [ 317.490700][T10561] ? clear_bhb_loop+0x40/0x90 [ 317.495420][T10561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.501356][T10561] RIP: 0033:0x7f9b3f39c819 [ 317.505814][T10561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.525449][T10561] RSP: 002b:00007f9b4031b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 317.533918][T10561] RAX: ffffffffffffffda RBX: 00007f9b3f615fa0 RCX: 00007f9b3f39c819 [ 317.542028][T10561] RDX: 00002000000003c0 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 317.550033][T10561] RBP: 00007f9b3f432c91 R08: 0000000000000002 R09: 0000000000000000 [ 317.558041][T10561] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 317.566053][T10561] R13: 00007f9b3f616038 R14: 00007f9b3f615fa0 R15: 00007fff7ad81978 [ 317.574108][T10561] [ 317.598903][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.605288][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.678130][T10578] loop3: detected capacity change from 0 to 32768 [ 317.711372][T10578] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.741717][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 317.787091][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 317.799617][ T9] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 317.803855][T10578] XFS (loop3): Ending clean mount [ 317.808295][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.824204][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.834122][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 317.844080][T10578] XFS (loop3): Quotacheck needed: Please wait. [ 317.851477][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.870216][T10578] XFS (loop3): Quotacheck: Done. [ 317.879743][ T9] usb 2-1: config 0 descriptor?? [ 317.953734][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.318986][ T9] logitech 0003:046D:C29C.0014: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 318.515524][ T9] logitech 0003:046D:C29C.0014: no inputs found [ 318.531991][ T9] usb 2-1: USB disconnect, device number 21