last executing test programs: 2.767023008s ago: executing program 4 (id=12005): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xcb}, {&(0x7f0000000400)="ec487517fecd894af18ce18fbf", 0xd}], 0x2}, 0x0) 2.55382651s ago: executing program 2 (id=12008): mlockall(0x5) munlockall() 2.547660161s ago: executing program 4 (id=12019): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x4, 0x9836, &(0x7f0000009b80)="$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") setxattr$incfs_id(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) 2.099527177s ago: executing program 1 (id=12012): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x10, 0x19, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) 1.995934183s ago: executing program 2 (id=12017): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.924267858s ago: executing program 1 (id=12021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 1.87717663s ago: executing program 2 (id=12023): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000280)="503bfde51b25", 0x6}], 0x1) 1.813587694s ago: executing program 1 (id=12024): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@nodiscard}, {@noflush_merge}, {@background_gc_off}, {@alloc_mode_reuse}, {@compress_chksum}, {@disable_roll_forward}, {@adaptive_mode}, {@flush_merge}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@whint_mode_fs}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.750060018s ago: executing program 4 (id=12026): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000029000b0027bd700000000000020000001800018014"], 0x2c}}, 0x0) 1.661622033s ago: executing program 2 (id=12028): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.605807876s ago: executing program 2 (id=12029): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x124) 1.337423332s ago: executing program 2 (id=12033): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0xd9, 0x1fffffffffffffff, 0x1000000000003, 0x400, 0xffffffffffff3dce, 0x7b, 0x6, 0x3}) 997.511082ms ago: executing program 0 (id=12035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000000980)="2b20322a4843b397737ea49da6aa", 0x0, 0xeffe, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 814.017763ms ago: executing program 4 (id=12038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x5}, @in6={0xa, 0x4e24, 0x3, @empty, 0x4}], 0x38) 781.337125ms ago: executing program 3 (id=12039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 747.267857ms ago: executing program 4 (id=12040): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) 656.843122ms ago: executing program 3 (id=12041): r0 = io_uring_setup(0x2d08, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0) 656.230092ms ago: executing program 0 (id=12042): open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000340)) 620.451364ms ago: executing program 4 (id=12043): getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a"], 0x0) 501.317351ms ago: executing program 3 (id=12044): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) 500.777971ms ago: executing program 0 (id=12045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x64, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @private0}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) 482.473042ms ago: executing program 3 (id=12046): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x10, 0x19, 0x100, &(0x7f00000000c0)="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"}) 453.770454ms ago: executing program 0 (id=12047): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000160000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 381.779478ms ago: executing program 1 (id=12048): setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 358.949559ms ago: executing program 0 (id=12049): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x8927, &(0x7f0000000100)) 179.5186ms ago: executing program 3 (id=12050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.855108ms ago: executing program 1 (id=12051): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x48}}, 0x0) 29.935919ms ago: executing program 3 (id=12052): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x59, 0x10, @scatter={0x1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/195, 0xc3}]}, &(0x7f0000000240)="128d926c58ce", 0x0, 0x0, 0x1, 0x0, 0x0}) 12.8185ms ago: executing program 1 (id=12053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2410288}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x80, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "dc7c3cccc1e10b17489215dcd0b16c8663defbd85220cbdf4a9d188970eb3df9cef0b7d4c50c838607825cb4708158a6219d430b782bec37ae5e2b2753ad4569c5d4489ab5d7aeaecfa5fb55ecc5765afa265669c648ffa4cec6f7"}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x25}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x188}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10002b}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x7c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xffffffffffffffeb, 0x8, "0f55f3c17ebc9121317081bee91a8cd9891c196e7ad11199a4b792b034efdad379c2e666fa9d7e9cd06eee0100e717905f1ff6d9"}]}, @NFT_MSG_NEWCHAIN={0x130, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "07160411023b4bee4b2af453bb9696981254029cb960e1ed27d5e93ae98e9b38f0c0f17953974b041b084dc50666d9ff6f61f97e9dc1e8e268a9466b13e954ed0cc7afe621e48b816cfa5eaeb830b5af1a8ff9812f1bd7d6b674211ba407f1d2e3903f3d52283c1b899ae141fa9dde0820503319e70dc285d4449951a6482f09bbed779485ec9db017df4ed64bedc152f4a3e44dcaf7ae5e7b02a8c07267b46d7d46dc16d87131873898ea6d801b142b01fae706b81c73c1c93aa92f176f5a3f476c93540efb777cef"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xddd7f24ffadd011b}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x27}, @NFTA_SET_DESC={0x46, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x17}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x334}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) 0s ago: executing program 0 (id=12054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000085000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 839.629322][T26739] loop2: detected capacity change from 0 to 1024 [ 839.726533][T26739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 839.766927][T26739] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #11: comm syz.2.10081: directory missing '..' [ 839.804967][T12742] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 839.868033][T12527] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 839.889551][T12530] usb 5-1: Using ep0 maxpacket: 16 [ 839.954934][T26754] loop2: detected capacity change from 0 to 1764 [ 840.156829][T12530] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 840.176921][T12530] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 840.197344][T12530] usb 5-1: Product: syz [ 840.210329][T12530] usb 5-1: SerialNumber: syz [ 840.222344][T12530] usb 5-1: config 0 descriptor?? [ 840.231787][T12742] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 840.240848][T12742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.279334][T12527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 840.291336][T12530] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 840.314200][T12530] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 840.321440][T12527] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 840.335436][T12530] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 840.340330][T12742] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 840.342352][T12530] dvb_usb_af9035: probe of 5-1:0.0 failed with error -22 [ 840.509640][T12527] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 840.518718][T12527] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.545306][T12527] usb 2-1: Product: syz [ 840.551626][T12746] usb 5-1: USB disconnect, device number 70 [ 840.555408][T12527] usb 2-1: Manufacturer: syz [ 840.576457][T12527] usb 2-1: SerialNumber: syz [ 840.588409][T12527] usb 2-1: config 0 descriptor?? [ 840.798156][T12742] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 840.806300][T12742] pac7311: probe of 4-1:2.0 failed with error -71 [ 840.827233][T12742] usb 4-1: USB disconnect, device number 66 [ 840.833296][T12745] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 840.900383][T12527] usb 2-1: USB disconnect, device number 71 [ 840.932028][T26806] dlm: non-version read from control device 8192 [ 841.037100][T26812] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 841.161024][ T5476] udevd[5476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.400406][T12530] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 841.439708][T12745] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 841.459671][T12745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.482243][T12745] usb 3-1: Product: syz [ 841.492196][T12745] usb 3-1: Manufacturer: syz [ 841.513630][T12745] usb 3-1: SerialNumber: syz [ 841.525375][T12745] usb 3-1: config 0 descriptor?? [ 841.591084][T26840] loop1: detected capacity change from 0 to 4096 [ 841.670712][T26840] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 841.679690][T26840] ntfs3: loop1: Failed to load $Extend. [ 841.803122][T12530] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.824556][T12745] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v139 fw v114.61.103 (1 channels) [ 841.900815][T26860] syz.1.10135 uses old SIOCAX25GETINFO [ 841.963449][T12527] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 841.997092][T12530] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 841.998175][T26866] loop1: detected capacity change from 0 to 16 [ 842.017996][T12530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.031042][T26866] erofs: (device loop1): mounted with root inode @ nid 36. [ 842.036162][T12530] usb 1-1: Product: syz [ 842.043806][T12530] usb 1-1: Manufacturer: syz [ 842.048493][T12530] usb 1-1: SerialNumber: syz [ 842.059697][T12745] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 842.073200][T26866] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 842.091705][T12745] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 842.099229][T26870] loop4: detected capacity change from 0 to 256 [ 842.139529][T26870] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3c1d951c, utbl_chksum : 0xe619d30d) [ 842.209200][T12745] peak_usb: probe of 3-1:0.0 failed with error -71 [ 842.237302][T12745] usb 3-1: USB disconnect, device number 60 [ 842.279121][T26874] loop4: detected capacity change from 0 to 256 [ 842.352754][T12527] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 842.369499][T12527] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 842.388343][T12527] usb 4-1: config 0 interface 0 has no altsetting 0 [ 842.417112][T26874] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 842.463704][T26886] loop1: detected capacity change from 0 to 16 [ 842.566282][T26890] loop4: detected capacity change from 0 to 512 [ 842.572831][T12527] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 842.586629][T26886] erofs: (device loop1): mounted with root inode @ nid 36. [ 842.598695][T26886] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 842.601041][T12527] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 842.615510][T12530] cdc_ncm 1-1:1.0: bind() failure [ 842.632889][T12527] usb 4-1: Product: syz [ 842.637508][T12530] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 842.644130][T12527] usb 4-1: Manufacturer: syz [ 842.649353][T12527] usb 4-1: SerialNumber: syz [ 842.659285][T26892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.668960][T12530] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 842.685278][T12527] usb 4-1: config 0 descriptor?? [ 842.691029][T12530] usbtest: probe of 1-1:1.1 failed with error -71 [ 842.714202][T12530] usb 1-1: USB disconnect, device number 74 [ 842.729656][T26890] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 842.742643][T12527] hub 4-1:0.0: bad descriptor, ignoring hub [ 842.755421][T12527] hub: probe of 4-1:0.0 failed with error -5 [ 842.774120][T12527] usb 4-1: selecting invalid altsetting 0 [ 842.798891][T26890] ext4 filesystem being mounted at /1941/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.102281][T26914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10161'. [ 843.182673][T12742] usb 4-1: USB disconnect, device number 67 [ 843.496818][T26940] netlink: 'syz.2.10175': attribute type 3 has an invalid length. [ 843.599076][T12530] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 843.794097][T26932] set_capacity_and_notify: 2 callbacks suppressed [ 843.794111][T26932] loop4: detected capacity change from 0 to 32768 [ 843.983893][T12530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 843.993578][T12530] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 844.079516][T26971] netlink: 'syz.2.10188': attribute type 9 has an invalid length. [ 844.087855][T26971] netlink: 'syz.2.10188': attribute type 7 has an invalid length. [ 844.096005][T26971] netlink: 'syz.2.10188': attribute type 8 has an invalid length. [ 844.111554][T12530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 844.170794][T12530] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 844.229619][T12530] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 844.238696][T12530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.301260][T26932] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 844.309038][T26981] comedi comedi0: comedi_parport: I/O port conflict (0x3,3) [ 844.311853][T12530] usb 2-1: config 0 descriptor?? [ 844.399415][ T4523] XFS (loop4): Unmounting Filesystem [ 844.625262][T12530] hdpvr 2-1:0.0: firmware version 0x0 dated [ 844.631291][T12530] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 844.692519][T27000] device sit0 entered promiscuous mode [ 844.738921][T27000] netlink: 'syz.3.10202': attribute type 1 has an invalid length. [ 844.768190][T27000] netlink: 'syz.3.10202': attribute type 3 has an invalid length. [ 844.865370][T12530] hdpvr 2-1:0.0: device init failed [ 844.888532][T12530] hdpvr: probe of 2-1:0.0 failed with error -12 [ 844.926321][T12530] usb 2-1: USB disconnect, device number 72 [ 844.945825][T27008] loop3: detected capacity change from 0 to 256 [ 844.999827][T27008] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 845.087399][T27008] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 845.151353][T27008] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 845.238248][T27022] xt_CT: No such helper "syz0" [ 845.674344][T27059] loop1: detected capacity change from 0 to 16 [ 845.699293][T27059] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x3e7468d6, 0x5438428d expected [ 845.717981][T27063] loop4: detected capacity change from 0 to 1024 [ 845.770642][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10235'. [ 845.785621][T27071] SET target dimension over the limit! [ 845.795870][T27070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10235'. [ 845.839986][T27059] CIFS mount error: No usable UNC path provided in device string! [ 845.839986][T27059] [ 845.893794][T27059] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 845.905070][ T1172] hfsplus: b-tree write err: -5, ino 4 [ 845.991032][T27085] loop3: detected capacity change from 0 to 1024 [ 846.305619][T27112] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10258'. [ 846.328534][T27116] netlink: 'syz.2.10256': attribute type 8 has an invalid length. [ 846.346187][T27112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10258'. [ 846.355243][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10258'. [ 846.367954][T27116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.409000][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10258'. [ 846.483409][T27123] loop4: detected capacity change from 0 to 2048 [ 846.580392][T27123] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 846.609337][T27121] loop1: detected capacity change from 0 to 4096 [ 846.621219][T27123] UDF-fs: Scanning with blocksize 512 failed [ 846.657787][T27123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.704018][T27121] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 846.756439][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10267'. [ 846.811436][T27135] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 846.864685][T27121] ntfs3: loop1: failed to convert "c46c" to cp1255 [ 846.872121][T27109] loop3: detected capacity change from 0 to 32768 [ 846.888582][T27135] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 846.900278][T27135] device bridge2 entered promiscuous mode [ 846.963651][T27109] JBD2: Ignoring recovery information on journal [ 847.114672][T27109] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 847.175343][T27109] ocfs2: Unmounting device (7,3) on (node local) [ 847.187773][T27157] netlink: 'syz.4.10276': attribute type 6 has an invalid length. [ 847.415308][T12527] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 847.658592][T27170] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10284'. [ 847.712142][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10284'. [ 847.815640][T12527] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 847.851212][T12527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.891569][T12527] usb 3-1: config 0 descriptor?? [ 848.414576][T12527] usb 3-1: Cannot set MAC address [ 848.419733][T12527] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 848.467810][T12527] usb 3-1: USB disconnect, device number 61 [ 848.667790][T27219] loop1: detected capacity change from 0 to 4096 [ 848.719463][T27219] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 848.796341][T27219] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 848.919011][T27245] PM: Enabling pm_trace changes system date and time during resume. [ 848.919011][T27245] PM: Correct system time has to be restored manually after resume. [ 849.117156][T27258] __nla_validate_parse: 2 callbacks suppressed [ 849.117172][T27258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10325'. [ 849.316542][T27277] loop4: detected capacity change from 0 to 1024 [ 849.402831][T27287] tmpfs: Bad value for 'mpol' [ 849.482572][T27277] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 849.518799][T27277] hfsplus: xattr search failed [ 849.525378][T27277] attempt to access beyond end of device [ 849.525378][T27277] loop4: rw=0, want=917506, limit=1024 [ 849.598387][T27277] Buffer I/O error on dev loop4, logical block 458752, async page read [ 849.613124][T27303] tmpfs: Bad value for 'mpol' [ 849.628090][T27277] hfsplus: unable to mark blocks free: error -5 [ 849.656068][T27277] hfsplus: can't free extent [ 849.777548][T27317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10356'. [ 849.797986][ T4632] hfsplus: b-tree write err: -5, ino 4 [ 849.939194][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10364'. [ 850.189200][T27349] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.10373'. [ 850.231184][T27341] loop2: detected capacity change from 0 to 4096 [ 850.290810][ T13] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 850.316183][T27341] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 850.419067][T12745] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 850.424445][T27341] ntfs3: loop2: failed to convert "c46c" to cp437 [ 850.503091][T27351] loop3: detected capacity change from 0 to 1024 [ 850.561007][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 850.685710][T27333] loop1: detected capacity change from 0 to 32768 [ 850.697092][T12745] usb 1-1: Using ep0 maxpacket: 8 [ 850.742017][T27357] netlink: 256 bytes leftover after parsing attributes in process `syz.3.10377'. [ 850.758976][T27357] unsupported nlmsg_type 40 [ 850.857588][T12745] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 850.868283][ T13] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 850.876619][T12745] usb 1-1: config 0 has no interface number 0 [ 850.887548][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.897005][T12745] usb 1-1: config 0 interface 60 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 850.939506][ T13] usb 5-1: Product: syz [ 850.949018][ T13] usb 5-1: Manufacturer: syz [ 850.951078][T12745] usb 1-1: config 0 interface 60 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 850.968153][ T13] usb 5-1: SerialNumber: syz [ 850.997177][T27333] XFS (loop1): Mounting V5 Filesystem [ 851.016328][ T13] r8152-cfgselector 5-1: config 0 descriptor?? [ 851.094822][T27333] XFS (loop1): Ending clean mount [ 851.211011][T12745] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=68.09 [ 851.225288][T12745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.233507][T12745] usb 1-1: Product: syz [ 851.237680][T12745] usb 1-1: Manufacturer: syz [ 851.243163][T12745] usb 1-1: SerialNumber: syz [ 851.258482][T12745] usb 1-1: config 0 descriptor?? [ 851.271594][ T4515] XFS (loop1): Unmounting Filesystem [ 851.321645][T12745] as10x_usb: device has been detected [ 851.328216][T12745] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 851.371189][T12745] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 851.389876][T12745] as10x_usb: error during firmware upload part1 [ 851.397429][T12745] Registered device Abilis Systems DVB-Titan [ 851.434233][T27393] loop2: detected capacity change from 0 to 256 [ 851.539070][T12745] usb 1-1: USB disconnect, device number 75 [ 851.557800][T12745] Unregistered device Abilis Systems DVB-Titan [ 851.567595][T12745] as10x_usb: device has been disconnected [ 851.573697][ T13] r8152-cfgselector 5-1: Unknown version 0x0000 [ 851.595061][ T13] r8152-cfgselector 5-1: bad CDC descriptors [ 851.595091][T12746] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 851.627117][ T13] r8152-cfgselector 5-1: Unknown version 0x0000 [ 851.646315][ T13] r8152-cfgselector 5-1: USB disconnect, device number 71 [ 851.830344][T12527] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 851.894352][T12746] usb 4-1: Using ep0 maxpacket: 16 [ 851.901187][T27414] loop1: detected capacity change from 0 to 512 [ 851.958094][T27414] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 851.976417][T27414] ext4 filesystem being mounted at /2023/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.106325][T27421] [U] vÔ3¸Âfůľ"SçÁ/Éę4:ĂXTz“Wˇt‘’lWµ«= [ 852.118436][T27421] [U] J"—e:ŔĆ" [ 852.133798][T27421] [U] [ 852.211764][T27427] loop4: detected capacity change from 0 to 2048 [ 852.240476][T12527] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 852.251218][T12527] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.258020][T12746] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 852.285385][T12527] usb 3-1: config 0 has no interface number 0 [ 852.292633][T12746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.299719][T12527] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 852.304075][T27433] loop1: detected capacity change from 0 to 256 [ 852.337669][T12527] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 852.349547][T27436] x_tables: duplicate entry at hook 3 [ 852.361025][T12746] usb 4-1: Product: syz [ 852.367565][T27427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 852.374338][T12527] usb 3-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.386253][T12746] usb 4-1: Manufacturer: syz [ 852.395999][T12527] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 852.407788][T12527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.418570][T12746] usb 4-1: SerialNumber: syz [ 852.423181][T27439] netlink: 'syz.0.10410': attribute type 30 has an invalid length. [ 852.433471][T12527] usb 3-1: config 0 descriptor?? [ 852.473307][T12527] xbox_remote_probe: Unexpected endpoint_in [ 852.520525][T12746] usb 4-1: config 0 descriptor?? [ 852.587644][T12746] as10x_usb: device has been detected [ 852.598489][T12746] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 852.647354][T27444] loop1: detected capacity change from 0 to 1024 [ 852.670745][T12746] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 852.691817][ T13] usb 3-1: USB disconnect, device number 62 [ 852.717825][T12746] as10x_usb: error during firmware upload part1 [ 852.726697][T27444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 852.736024][T12746] Registered device Sky IT Digital Key (green led) [ 853.101218][T27460] netlink: 'syz.1.10419': attribute type 2 has an invalid length. [ 853.142214][T27460] netlink: 'syz.1.10419': attribute type 1 has an invalid length. [ 853.172149][T27463] netlink: 'syz.4.10422': attribute type 4 has an invalid length. [ 853.191581][T27463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10422'. [ 853.237087][T27466] loop1: detected capacity change from 0 to 1024 [ 853.324569][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10425'. [ 853.335629][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10425'. [ 853.375896][T27471] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 853.387177][T27466] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 853.405137][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10425'. [ 853.408240][T27466] hfsplus: xattr search failed [ 853.429753][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10425'. [ 853.438995][T27466] attempt to access beyond end of device [ 853.438995][T27466] loop1: rw=0, want=917506, limit=1024 [ 853.439072][T27466] Buffer I/O error on dev loop1, logical block 458752, async page read [ 853.439120][T27466] hfsplus: unable to mark blocks free: error -5 [ 853.491567][T27466] hfsplus: can't free extent [ 853.499143][T27469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 853.664034][ T4632] hfsplus: b-tree write err: -5, ino 4 [ 853.751855][ T13] usb 4-1: USB disconnect, device number 68 [ 853.769784][ T13] Unregistered device Sky IT Digital Key (green led) [ 853.783586][ T13] as10x_usb: device has been disconnected [ 853.989626][T12527] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 854.305935][T27491] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.10436 (27491) [ 854.412788][T27505] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,stripe=0x0000000000001200,quota,,errors=continue. Quota mode: writeback. [ 854.439186][T27491] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 854.447867][T27491] BTRFS info (device loop2): using free space tree [ 854.455013][T12527] usb 1-1: unable to get BOS descriptor or descriptor too short [ 854.522912][T27505] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz.1.10443: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 854.542561][T27491] BTRFS info (device loop2): has skinny extents [ 854.572000][T12527] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 854.602845][T12527] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 854.635279][T12527] usb 1-1: config 1 interface 0 has no altsetting 1 [ 854.800736][T27538] set_capacity_and_notify: 5 callbacks suppressed [ 854.800750][T27538] loop3: detected capacity change from 0 to 8 [ 854.813913][T12527] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 854.839505][T12527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.877970][T12527] usb 1-1: Product: syz [ 854.912657][T12527] usb 1-1: Manufacturer: syz [ 854.917590][T12527] usb 1-1: SerialNumber: syz [ 854.934940][T27491] BTRFS info (device loop2): enabling ssd optimizations [ 854.945946][T27549] loop1: detected capacity change from 0 to 736 [ 854.990643][T12527] smsusb:smsusb_probe: board id=8, interface number 0 [ 855.208383][T12527] smsusb:smsusb_probe: Device initialized with return code -19 [ 855.244941][T27549] rock: directory entry would overflow storage [ 855.258220][ T5476] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5476) [ 855.296188][T27549] rock: sig=0x3b10, size=4, remaining=3 [ 855.419192][T27566] loop4: detected capacity change from 0 to 16 [ 855.557251][ T4620] usb 1-1: USB disconnect, device number 76 [ 855.622165][T27566] erofs: (device loop4): mounted with root inode @ nid 36. [ 855.684640][T27574] xt_recent: hitcount (4294901760) is larger than allowed maximum (255) [ 855.689288][T27566] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 855.790452][ T4518] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 7514 in[4096, 0] out[8192] [ 855.830317][T27566] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 7514 in[4096, 0] out[8192] [ 855.995986][ T26] audit: type=1800 audit(2000527826.621:49): pid=27566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10461" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 856.435394][T27614] No such timeout policy "syz1" [ 856.547538][T27624] loop3: detected capacity change from 0 to 64 [ 856.837716][T27644] loop3: detected capacity change from 0 to 128 [ 856.901914][T27644] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 856.945990][T27654] x_tables: ip_tables: osf match: only valid for protocol 6 [ 857.021348][ T4516] sysv_free_block: flc_count > flc_size [ 857.041455][ T4516] sysv_free_block: flc_count > flc_size [ 857.058581][ T4516] sysv_free_block: flc_count > flc_size [ 857.064177][ T4516] sysv_free_block: flc_count > flc_size [ 857.101370][ T4516] sysv_free_block: flc_count > flc_size [ 857.118281][ T4516] sysv_free_block: flc_count > flc_size [ 857.143196][ T4516] sysv_free_block: flc_count > flc_size [ 857.151826][ T4516] sysv_free_block: flc_count > flc_size [ 857.195008][ T4516] sysv_free_block: flc_count > flc_size [ 857.221914][ T4516] sysv_free_block: flc_count > flc_size [ 857.264982][ T4516] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 857.566963][T27642] loop4: detected capacity change from 0 to 32768 [ 857.696492][T27687] loop1: detected capacity change from 0 to 512 [ 857.768634][T27642] XFS (loop4): Mounting V5 Filesystem [ 857.923743][T27687] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 857.972327][T27642] XFS (loop4): Ending clean mount [ 858.006346][T27642] XFS (loop4): Quotacheck needed: Please wait. [ 858.012076][T27687] ext4 filesystem being mounted at /2064/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.148320][T27642] XFS (loop4): Quotacheck: Done. [ 858.211051][T27723] netlink: 'syz.3.10535': attribute type 13 has an invalid length. [ 858.279535][ T4523] XFS (loop4): Unmounting Filesystem [ 858.408057][T27728] netlink: 'syz.3.10537': attribute type 10 has an invalid length. [ 858.466302][T27728] team0: Device veth1_macvtap failed to register rx_handler [ 859.024102][T27760] loop3: detected capacity change from 0 to 64 [ 859.031509][T27759] loop1: detected capacity change from 0 to 1024 [ 859.250748][T27770] __nla_validate_parse: 81 callbacks suppressed [ 859.250764][T27770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10557'. [ 859.388742][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10560'. [ 859.702885][T27796] loop1: detected capacity change from 0 to 512 [ 859.744523][T27800] netlink: 'syz.3.10571': attribute type 21 has an invalid length. [ 859.896625][T27796] EXT4-fs (loop1): orphan cleanup on readonly fs [ 860.008712][T27796] EXT4-fs error (device loop1): ext4_quota_enable:6442: inode #15: comm syz.1.10569: iget: bad i_size value: 360287970189639690 [ 860.083284][T27796] EXT4-fs error (device loop1): ext4_quota_enable:6445: comm syz.1.10569: Bad quota inode: 15, type: 2 [ 860.134761][T27796] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 860.205096][T27796] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 860.230036][T27796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 860.328285][T27796] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.10569: deleted inode referenced: 12 [ 860.403790][T27827] netlink: 'syz.4.10584': attribute type 32 has an invalid length. [ 860.479769][T27830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10586'. [ 860.651174][T27838] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10590'. [ 860.958081][T27863] openvswitch: netlink: Actions may not be safe on all matching packets [ 861.077204][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10605'. [ 861.266031][T27881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10610'. [ 861.718420][ T4620] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 861.856257][T27913] set_capacity_and_notify: 1 callbacks suppressed [ 861.856271][T27913] loop1: detected capacity change from 0 to 4096 [ 861.954867][T27913] ntfs3: Invalid value for gid. [ 861.996439][ T4620] usb 1-1: Using ep0 maxpacket: 8 [ 862.124894][ T4620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.213656][T27935] loop3: detected capacity change from 0 to 4096 [ 862.273959][T27935] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 862.327992][ T4620] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 862.337108][ T4620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.385623][ T4620] usb 1-1: Product: syz [ 862.418933][ T4620] usb 1-1: Manufacturer: syz [ 862.423575][ T4620] usb 1-1: SerialNumber: syz [ 862.451554][ T4620] usb 1-1: config 0 descriptor?? [ 862.474513][T27721] syz.2.10533 (27721): drop_caches: 3 [ 862.481558][T27945] device erspan1 entered promiscuous mode [ 862.511539][ T4620] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 862.520755][ T4620] usb 1-1: selecting invalid altsetting 1 [ 862.867288][T27966] loop3: detected capacity change from 0 to 128 [ 862.901046][T27970] loop2: detected capacity change from 0 to 256 [ 862.984075][ T4620] usb 1-1: USB disconnect, device number 77 [ 863.022735][T27939] loop1: detected capacity change from 0 to 32768 [ 863.153779][T27980] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.172637][T27939] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 863.280906][T27984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10659'. [ 863.345429][ T4515] ocfs2: Unmounting device (7,1) on (node local) [ 863.599853][ T4506] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 863.788045][T28014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10674'. [ 863.896740][T28021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10678'. [ 863.985346][ T4506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 864.002344][T28027] netlink: 'syz.1.10680': attribute type 32 has an invalid length. [ 864.010586][ T4506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 864.023899][ T4506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 864.046728][T28031] netlink: 'syz.0.10681': attribute type 5 has an invalid length. [ 864.063256][ T4506] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 864.095452][ T4506] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 864.126082][T27992] loop4: detected capacity change from 0 to 40427 [ 864.134650][ T4506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.163783][ T4506] usb 3-1: config 0 descriptor?? [ 864.193041][T27992] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 864.229847][T27992] F2FS-fs (loop4): invalid crc value [ 864.269089][T27992] F2FS-fs (loop4): Found nat_bits in checkpoint [ 864.401043][T27992] F2FS-fs (loop4): recover fsync data on readonly fs [ 864.443718][T27992] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 864.455234][ T4506] hdpvr 3-1:0.0: firmware version 0x1e dated [ 864.470892][T28056] loop1: detected capacity change from 0 to 256 [ 864.487516][T27992] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 864.502264][T27992] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 864.527002][T28058] affs: No valid root block on device nbd3 [ 864.609459][T28056] FAT-fs (loop1): Directory bread(block 64) failed [ 864.631005][T28056] FAT-fs (loop1): Directory bread(block 65) failed [ 864.668902][T28056] FAT-fs (loop1): Directory bread(block 66) failed [ 864.690339][ T4506] hdpvr 3-1:0.0: device init failed [ 864.695725][ T4506] hdpvr: probe of 3-1:0.0 failed with error -12 [ 864.697123][T28056] FAT-fs (loop1): Directory bread(block 67) failed [ 864.724285][T28065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10693'. [ 864.733689][ T4506] usb 3-1: USB disconnect, device number 63 [ 864.739740][T28056] FAT-fs (loop1): Directory bread(block 68) failed [ 864.750555][T28056] FAT-fs (loop1): Directory bread(block 69) failed [ 864.790924][T28056] FAT-fs (loop1): Directory bread(block 70) failed [ 864.798632][T28056] FAT-fs (loop1): Directory bread(block 71) failed [ 864.808085][T28056] FAT-fs (loop1): Directory bread(block 72) failed [ 864.814950][T28056] FAT-fs (loop1): Directory bread(block 73) failed [ 865.054694][T28076] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10700'. [ 865.101507][T28080] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10702'. [ 865.111374][T28080] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 865.246148][T12742] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 865.319920][T28097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.365388][T28101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10711'. [ 865.524466][T12742] usb 4-1: Using ep0 maxpacket: 16 [ 865.586382][T28113] vivid-001: ================= START STATUS ================= [ 865.631322][T28113] vivid-001: Enable Output Cropping: true [ 865.631430][T28113] vivid-001: Enable Output Composing: true [ 865.631452][T28113] vivid-001: Enable Output Scaler: true [ 865.631473][T28113] vivid-001: Tx RGB Quantization Range: Automatic [ 865.631494][T28113] vivid-001: Transmit Mode: HDMI [ 865.631515][T28113] vivid-001: Display Present: true inactive [ 865.631541][T28113] vivid-001: Hotplug Present: 0x00000001 [ 865.631563][T28113] vivid-001: RxSense Present: 0x00000001 [ 865.631582][T28113] vivid-001: EDID Present: 0x00000001 [ 865.631604][T28113] vivid-001: ================== END STATUS ================== [ 865.740786][T28120] loop2: detected capacity change from 0 to 1024 [ 865.866558][T12742] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 865.882157][T12742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.911958][T12742] usb 4-1: Product: syz [ 865.922750][T12742] usb 4-1: Manufacturer: syz [ 865.944332][T12742] usb 4-1: SerialNumber: syz [ 865.988994][T12742] usb 4-1: config 0 descriptor?? [ 866.014114][T28130] loop4: detected capacity change from 0 to 8192 [ 866.042591][T12742] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 866.130799][T28130] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 866.172913][T28130] REISERFS (device loop4): using ordered data mode [ 866.212604][T28130] reiserfs: using flush barriers [ 866.243811][T28130] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 866.261826][T28130] REISERFS (device loop4): checking transaction log (loop4) [ 866.302958][T28154] loop1: detected capacity change from 0 to 164 [ 866.318506][T12745] usb 4-1: USB disconnect, device number 69 [ 866.361930][T28156] device ~˙ entered promiscuous mode [ 866.409255][T28130] REISERFS (device loop4): Using tea hash to sort names [ 866.411324][ T4506] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 866.421889][T28130] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 866.442589][T28154] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 866.476644][T28154] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 866.511769][T28154] Symlink component flag not implemented [ 866.534613][T28154] Symlink component flag not implemented [ 866.705018][ T4506] usb 3-1: Using ep0 maxpacket: 8 [ 866.735291][T28166] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 867.001484][ T4506] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 867.022764][ T4506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.030782][ T4506] usb 3-1: Product: syz [ 867.047503][ T4506] usb 3-1: Manufacturer: syz [ 867.056451][ T4506] usb 3-1: SerialNumber: syz [ 867.062873][ T4506] usb 3-1: config 0 descriptor?? [ 867.081854][T28174] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 867.160610][ T4506] cdc_ether 3-1:0.0: skipping garbage [ 867.166028][ T4506] cdc_ether 3-1:0.0: skipping garbage [ 867.212816][ T4506] usb 3-1: bad CDC descriptors [ 867.238358][ T4506] usb 3-1: unsupported MDLM descriptors [ 867.275481][ T4506] cdc_acm 3-1:0.0: skipping garbage [ 867.290898][ T4506] cdc_acm 3-1:0.0: skipping garbage [ 867.403728][ T4506] usb 3-1: USB disconnect, device number 64 [ 867.427004][T12745] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 867.473325][T28211] set_capacity_and_notify: 1 callbacks suppressed [ 867.473339][T28211] loop3: detected capacity change from 0 to 1024 [ 867.563968][T28211] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 867.593271][T28215] loop4: detected capacity change from 0 to 4096 [ 867.631854][T28218] netlink: 'syz.1.10768': attribute type 9 has an invalid length. [ 867.639744][T28218] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.10768'. [ 867.702819][T28222] loop1: detected capacity change from 0 to 256 [ 867.733946][T28215] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 867.819730][T28222] FAT-fs (loop1): Directory bread(block 64) failed [ 867.844796][T28222] FAT-fs (loop1): Directory bread(block 65) failed [ 867.851477][T28222] FAT-fs (loop1): Directory bread(block 66) failed [ 867.858431][T12745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 867.870188][T12745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 867.897259][T28222] FAT-fs (loop1): Directory bread(block 67) failed [ 867.905189][T28222] FAT-fs (loop1): Directory bread(block 68) failed [ 867.924062][T28222] FAT-fs (loop1): Directory bread(block 69) failed [ 867.935526][T28222] FAT-fs (loop1): Directory bread(block 70) failed [ 867.946888][T28222] FAT-fs (loop1): Directory bread(block 71) failed [ 867.955125][T28222] FAT-fs (loop1): Directory bread(block 72) failed [ 867.966577][T28222] FAT-fs (loop1): Directory bread(block 73) failed [ 868.047197][T12745] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 868.081731][T12745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.114073][T12745] usb 1-1: Product: syz [ 868.118264][T12745] usb 1-1: Manufacturer: syz [ 868.158602][T12745] usb 1-1: SerialNumber: syz [ 868.197649][T12745] usb 1-1: config 0 descriptor?? [ 868.226596][T28245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.236958][T28248] loop2: detected capacity change from 0 to 512 [ 868.252596][T12745] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 868.365622][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10786'. [ 868.387644][T28260] loop3: detected capacity change from 0 to 256 [ 868.394839][T28255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10786'. [ 868.397147][T28248] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 868.411395][T28255] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 868.425542][T28248] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 868.435652][T28248] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.10781: Failed to acquire dquot type 1 [ 868.603662][T28248] EXT4-fs (loop2): 1 truncate cleaned up [ 868.609336][T28248] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,sysvgroups,,errors=continue. Quota mode: writeback. [ 868.657242][T12745] usb 1-1: USB disconnect, device number 78 [ 868.703923][T28248] ext4 filesystem being mounted at /2037/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.769049][T28248] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 868.769819][T28272] loop3: detected capacity change from 0 to 2048 [ 868.797943][T28248] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 868.807760][T28248] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.10781: Failed to acquire dquot type 1 [ 868.825822][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10793'. [ 868.853304][T28277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 868.954892][ T4620] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 869.192384][T28292] device batadv0 entered promiscuous mode [ 869.207062][T28292] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 869.222785][ T4620] usb 5-1: Using ep0 maxpacket: 16 [ 869.241986][T28289] loop2: detected capacity change from 0 to 4096 [ 869.302385][T28299] xt_hashlimit: max too large, truncated to 1048576 [ 869.404379][T28289] ntfs: (device loop2): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 869.493439][T28301] loop3: detected capacity change from 0 to 4096 [ 869.504326][T28289] ntfs: volume version 3.1. [ 869.522375][ T4620] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 869.528565][T28306] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10808'. [ 869.531437][ T4620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.541294][T28306] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 869.586122][ T4620] usb 5-1: Product: syz [ 869.603490][ T4620] usb 5-1: Manufacturer: syz [ 869.635725][ T4620] usb 5-1: SerialNumber: syz [ 869.658241][ T4620] usb 5-1: config 0 descriptor?? [ 869.726362][T28301] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 869.737542][T28310] loop1: detected capacity change from 0 to 256 [ 869.746168][ T4620] as10x_usb: device has been detected [ 869.753212][T28301] ntfs3: loop3: Failed to load $Extend. [ 869.762784][ T4620] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 869.843111][T28310] FAT-fs (loop1): Directory bread(block 64) failed [ 869.851252][ T4620] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 869.881123][T28310] FAT-fs (loop1): Directory bread(block 65) failed [ 869.890201][T28316] netlink: 'syz.0.10813': attribute type 32 has an invalid length. [ 869.909675][T28310] FAT-fs (loop1): Directory bread(block 66) failed [ 869.928897][ T4620] as10x_usb: error during firmware upload part1 [ 869.935204][ T4620] Registered device Sky IT Digital Key (green led) [ 869.939462][T28310] FAT-fs (loop1): Directory bread(block 67) failed [ 870.028643][T28310] FAT-fs (loop1): Directory bread(block 68) failed [ 870.083491][T28310] FAT-fs (loop1): Directory bread(block 69) failed [ 870.106949][T28310] FAT-fs (loop1): Directory bread(block 70) failed [ 870.161260][T28328] netlink: 'syz.3.10816': attribute type 1 has an invalid length. [ 870.186650][T28310] FAT-fs (loop1): Directory bread(block 71) failed [ 870.228808][T28310] FAT-fs (loop1): Directory bread(block 72) failed [ 870.235407][T28310] FAT-fs (loop1): Directory bread(block 73) failed [ 870.237762][T28331] xt_TPROXY: Can be used only with -p tcp or -p udp [ 870.270297][T28333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10821'. [ 870.845661][T28366] loop2: detected capacity change from 0 to 1024 [ 870.875740][T12530] usb 5-1: USB disconnect, device number 72 [ 870.923034][T12530] Unregistered device Sky IT Digital Key (green led) [ 870.926733][T12530] as10x_usb: device has been disconnected [ 870.927659][T28366] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 871.006129][T28366] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 871.019579][T28366] System zones: 0-1, 4-36, 102-102 [ 871.026022][T28366] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 871.174836][T28383] xt_TCPMSS: Only works on TCP SYN packets [ 871.346343][T28389] ipt_CLUSTERIP: Please specify destination IP [ 871.688523][T28417] Cannot find del_set index 3 as target [ 872.105017][T28442] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 872.110611][T28448] FAT-fs (loop2): Directory bread(block 64) failed [ 872.148310][T28448] FAT-fs (loop2): Directory bread(block 65) failed [ 872.161848][T28448] FAT-fs (loop2): Directory bread(block 66) failed [ 872.174599][T28448] FAT-fs (loop2): Directory bread(block 67) failed [ 872.194138][T28448] FAT-fs (loop2): Directory bread(block 68) failed [ 872.208934][T28448] FAT-fs (loop2): Directory bread(block 69) failed [ 872.215861][T28448] FAT-fs (loop2): Directory bread(block 70) failed [ 872.241697][T28448] FAT-fs (loop2): Directory bread(block 71) failed [ 872.262464][T28462] 9pnet: p9_fd_create_unix (28462): problem connecting socket: ./file0: -30 [ 872.280050][T28448] FAT-fs (loop2): Directory bread(block 72) failed [ 872.287739][T28448] FAT-fs (loop2): Directory bread(block 73) failed [ 872.366461][T28470] exfat: Deprecated parameter 'namecase' [ 872.463234][T28470] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 872.511566][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10893'. [ 872.764895][T28501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10903'. [ 872.800079][T28501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10903'. [ 873.106124][T28528] set_capacity_and_notify: 6 callbacks suppressed [ 873.106139][T28528] loop4: detected capacity change from 0 to 64 [ 873.165568][T28519] loop3: detected capacity change from 0 to 8192 [ 873.263408][T28519] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 873.274577][T28519] REISERFS (device loop3): using ordered data mode [ 873.295912][T28519] reiserfs: using flush barriers [ 873.306478][T12746] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 873.315527][T28519] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 873.338021][T28535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10921'. [ 873.348952][T28519] REISERFS (device loop3): checking transaction log (loop3) [ 873.433269][T28537] loop4: detected capacity change from 0 to 256 [ 873.668868][T28519] REISERFS (device loop3): Using tea hash to sort names [ 873.678445][T28519] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 873.744904][T12746] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 873.755047][T12746] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 873.820275][T12746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.917660][T12746] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 874.190200][T28565] Cannot find add_set index 2 as target [ 874.276101][T28567] loop1: detected capacity change from 0 to 256 [ 874.387014][T28571] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10939'. [ 874.410974][T28567] FAT-fs (loop1): Directory bread(block 64) failed [ 874.451771][T28567] FAT-fs (loop1): Directory bread(block 65) failed [ 874.505205][T28567] FAT-fs (loop1): Directory bread(block 66) failed [ 874.569971][T28567] FAT-fs (loop1): Directory bread(block 67) failed [ 874.574408][T28578] loop3: detected capacity change from 0 to 512 [ 874.614149][T28567] FAT-fs (loop1): Directory bread(block 68) failed [ 874.650227][T28583] comedi comedi1: pcl812: I/O port conflict (0x1,16) [ 874.653510][T28567] FAT-fs (loop1): Directory bread(block 69) failed [ 874.678864][T28578] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 874.711188][T28567] FAT-fs (loop1): Directory bread(block 70) failed [ 874.726539][T28578] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 874.736475][T28578] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.10941: Failed to acquire dquot type 1 [ 874.748453][T28567] FAT-fs (loop1): Directory bread(block 71) failed [ 874.758328][T28567] FAT-fs (loop1): Directory bread(block 72) failed [ 874.765792][T28567] FAT-fs (loop1): Directory bread(block 73) failed [ 874.825696][T28578] EXT4-fs (loop3): 1 truncate cleaned up [ 874.826776][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10948'. [ 874.888583][T28578] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,sysvgroups,,errors=continue. Quota mode: writeback. [ 874.904204][T28594] loop4: detected capacity change from 0 to 1764 [ 874.984844][T28598] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10949'. [ 874.995192][T28578] ext4 filesystem being mounted at /2185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 875.045940][T28578] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 875.077471][T12746] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 875.125604][T28604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10952'. [ 875.145365][T28578] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 875.176889][T28578] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.10941: Failed to acquire dquot type 1 [ 875.228622][T28587] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 875.316311][T12746] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 875.326843][T12746] stv0680 3-1:4.0: last error: 70, command = 0x88 [ 875.335244][T12746] usb 3-1: USB disconnect, device number 65 [ 875.737036][T28627] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.754603][T12746] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 875.758204][T28627] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.814266][T28605] loop1: detected capacity change from 0 to 32768 [ 876.123970][T28645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10972'. [ 876.158999][T28645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10972'. [ 876.171470][T12746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 876.203508][T12746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.224410][T12746] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 876.244599][T12746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.245242][T28648] loop3: detected capacity change from 0 to 4096 [ 876.298335][T12746] usb 1-1: config 0 descriptor?? [ 876.322761][T28648] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 876.364796][T12746] hub 1-1:0.0: USB hub found [ 876.574209][T28660] loop4: detected capacity change from 0 to 4096 [ 876.588662][T12746] hub 1-1:0.0: 1 port detected [ 876.608436][T28660] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 876.623900][T28658] loop2: detected capacity change from 0 to 8192 [ 876.672528][T28658] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 876.693477][T28658] REISERFS (device loop2): using ordered data mode [ 876.706107][T28658] reiserfs: using flush barriers [ 876.749850][T28658] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 876.770379][T28658] REISERFS (device loop2): checking transaction log (loop2) [ 876.779992][T28660] ntfs3: loop4: failed to convert "c46c" to cp1250 [ 876.791484][ T4506] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 876.812844][T12746] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 876.819249][T12746] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 876.941213][T12746] usbhid 1-1:0.0: can't add hid device: -71 [ 876.947205][T12746] usbhid: probe of 1-1:0.0 failed with error -71 [ 876.995413][T12746] usb 1-1: USB disconnect, device number 79 [ 877.047995][ T4506] usb 2-1: Using ep0 maxpacket: 16 [ 877.069963][T28658] REISERFS (device loop2): Using tea hash to sort names [ 877.077220][T28658] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 877.156648][T28685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10992'. [ 877.176437][ T4506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.209781][ T4506] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.40 [ 877.225859][ T4506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.250646][ T4506] usb 2-1: config 0 descriptor?? [ 877.309186][T28693] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0 [ 877.317058][ T4506] s2255 2-1:0.0: Could not find bulk-in endpoint [ 877.330002][ T4506] Sensoray 2255 driver load failed: 0xfffffff4 [ 877.336202][ T4506] s2255: probe of 2-1:0.0 failed with error -12 [ 877.453077][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10999'. [ 877.505813][T28706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11002'. [ 877.636024][ T4506] usbhid 2-1:0.0: can't add hid device: -71 [ 877.642117][ T4506] usbhid: probe of 2-1:0.0 failed with error -71 [ 877.694570][ T4506] usb 2-1: USB disconnect, device number 73 [ 877.820898][T28729] overlayfs: conflicting options: nfs_export=on,index=off [ 877.920522][T28733] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.926537][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.959377][T28733] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.047999][T28737] device ip6gre1 entered promiscuous mode [ 878.155229][T28745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11021'. [ 878.221720][T28748] netlink: 'syz.4.11023': attribute type 2 has an invalid length. [ 878.240552][T12742] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 878.263056][T28748] netlink: 'syz.4.11023': attribute type 1 has an invalid length. [ 878.655372][T28771] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 878.773893][T28751] infiniband syz1: set active [ 878.785289][T28775] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.813639][T28751] infiniband syz1: added bond0 [ 878.860989][T28751] RDS/IB: syz1: added [ 878.865636][T12742] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 878.875909][T12742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.883567][T28751] smc: adding ib device syz1 with port count 1 [ 878.884005][T12742] usb 4-1: Product: syz [ 878.894420][T12742] usb 4-1: Manufacturer: syz [ 878.899197][T12742] usb 4-1: SerialNumber: syz [ 878.902834][T28751] smc: ib device syz1 port 1 has pnetid [ 878.919057][T28779] device bridge_slave_0 entered promiscuous mode [ 878.967303][T12742] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 879.213603][ T26] audit: type=1400 audit(2000527848.342:50): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=28787 comm="syz.0.11042" [ 879.375996][T28800] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11048'. [ 879.437320][T28803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11049'. [ 879.560407][T28808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11052'. [ 879.755420][T12745] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 880.097623][T28837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11066'. [ 880.257516][T12742] usb 4-1: USB disconnect, device number 70 [ 880.642440][T28867] loop4: detected capacity change from 0 to 256 [ 880.765649][T28867] FAT-fs (loop4): Directory bread(block 64) failed [ 880.798017][T28867] FAT-fs (loop4): Directory bread(block 65) failed [ 880.809875][T28867] FAT-fs (loop4): Directory bread(block 66) failed [ 880.832508][T28867] FAT-fs (loop4): Directory bread(block 67) failed [ 880.864499][T28867] FAT-fs (loop4): Directory bread(block 68) failed [ 880.888456][T28879] loop3: detected capacity change from 0 to 64 [ 880.921682][T28867] FAT-fs (loop4): Directory bread(block 69) failed [ 880.928122][T28882] loop2: detected capacity change from 0 to 512 [ 880.937959][T28867] FAT-fs (loop4): Directory bread(block 70) failed [ 880.939120][T12745] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 880.980205][T12745] ath9k_htc: Failed to initialize the device [ 880.996841][T12742] usb 4-1: ath9k_htc: USB layer deinitialized [ 881.001583][T28867] FAT-fs (loop4): Directory bread(block 71) failed [ 881.036666][T28882] EXT4-fs (loop2): orphan cleanup on readonly fs [ 881.046146][T28867] FAT-fs (loop4): Directory bread(block 72) failed [ 881.052697][T28867] FAT-fs (loop4): Directory bread(block 73) failed [ 881.068741][T28882] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.11087: inode has both inline data and extents flags [ 881.099716][T28882] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.11087: couldn't read orphan inode 15 (err -117) [ 881.194026][T28882] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,delalloc,,errors=continue. Quota mode: none. [ 881.819553][T28916] loop1: detected capacity change from 0 to 4096 [ 881.911571][T28916] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 882.119406][T28894] loop3: detected capacity change from 0 to 32768 [ 882.201742][T28894] XFS: noikeep mount option is deprecated. [ 882.274511][T28944] netlink: 'syz.4.11117': attribute type 10 has an invalid length. [ 882.287981][T28946] (syz.0.11116,28946,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 882.346051][T28894] XFS (loop3): Mounting V5 Filesystem [ 882.366209][T28944] batman_adv: batadv0: Adding interface: wlan0 [ 882.372206][T28946] (syz.0.11116,28946,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 882.381046][T28944] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.406179][ C1] vkms_vblank_simulate: vblank timer overrun [ 882.425192][T28944] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 882.543782][T28894] XFS (loop3): Ending clean mount [ 882.656703][T28894] XFS (loop3): Quotacheck needed: Please wait. [ 882.812759][T28976] loop1: detected capacity change from 0 to 256 [ 882.836448][T28894] XFS (loop3): Quotacheck: Done. [ 882.937384][ T4516] XFS (loop3): Unmounting Filesystem [ 882.961438][T28976] FAT-fs (loop1): Directory bread(block 64) failed [ 882.998617][T28976] FAT-fs (loop1): Directory bread(block 65) failed [ 883.034411][T28976] FAT-fs (loop1): Directory bread(block 66) failed [ 883.049879][T28983] loop2: detected capacity change from 0 to 256 [ 883.067091][T28976] FAT-fs (loop1): Directory bread(block 67) failed [ 883.073709][T28976] FAT-fs (loop1): Directory bread(block 68) failed [ 883.107968][T28976] FAT-fs (loop1): Directory bread(block 69) failed [ 883.115007][T28976] FAT-fs (loop1): Directory bread(block 70) failed [ 883.130708][T28976] FAT-fs (loop1): Directory bread(block 71) failed [ 883.138451][T28976] FAT-fs (loop1): Directory bread(block 72) failed [ 883.145430][T28976] FAT-fs (loop1): Directory bread(block 73) failed [ 883.203202][T28983] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 883.728833][T29005] __nla_validate_parse: 4 callbacks suppressed [ 883.728849][T29005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11142'. [ 883.799438][T29005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.277701][T28988] syz.4.11135 (28988): drop_caches: 3 [ 884.285137][ T4506] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 884.598029][T29040] loop4: detected capacity change from 0 to 4096 [ 884.638016][ T4506] usb 3-1: not running at top speed; connect to a high speed hub [ 884.676547][T29040] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 884.742502][ T4506] usb 3-1: config index 0 descriptor too short (expected 2322, got 18) [ 884.762091][ T4506] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 884.765054][T29058] tipc: Trying to set illegal importance in message [ 884.808267][ T4506] usb 3-1: config 95 has no interface number 0 [ 884.841453][ T4506] usb 3-1: config 95 interface 1 has no altsetting 0 [ 884.945416][T29040] ntfs3: loop4: failed to convert "c46c" to maccyrillic [ 884.979675][T29065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11172'. [ 885.129703][ T4506] usb 3-1: string descriptor 0 read error: -22 [ 885.136007][ T4506] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 885.183039][ T4506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.226091][T12533] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 885.266465][T29061] syz.1.11168 (29061): drop_caches: 3 [ 885.441498][T29077] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11178'. [ 885.768949][ T4506] usb 3-1: USB disconnect, device number 66 [ 885.782258][T12533] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 885.791954][T12533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.831210][T12533] usb 4-1: Product: syz [ 885.838900][T12533] usb 4-1: Manufacturer: syz [ 885.862189][T12533] usb 4-1: SerialNumber: syz [ 885.874247][T12533] usb 4-1: config 0 descriptor?? [ 885.924527][T12533] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 885.987089][T29097] xt_NFQUEUE: number of total queues is 0 [ 886.372309][T12745] usb 4-1: USB disconnect, device number 71 [ 886.486388][T29123] loop1: detected capacity change from 0 to 512 [ 886.581856][T29123] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 886.611081][T29123] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 886.632059][T29129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11204'. [ 886.643485][T29123] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 886.713579][T29134] netlink: 120 bytes leftover after parsing attributes in process `syz.4.11206'. [ 886.742486][T29123] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 886.754490][T29123] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 886.761124][T29129] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11204'. [ 886.772231][T29123] EXT4-fs (loop1): orphan cleanup on readonly fs [ 886.796728][T29123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11201: bg 0: block 34: padding at end of block bitmap is not set [ 886.837342][T29123] Quota error (device loop1): write_blk: dquota write failed [ 886.860003][T29123] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 886.892742][T29123] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.11201: Failed to acquire dquot type 1 [ 887.011892][T29123] EXT4-fs (loop1): 1 truncate cleaned up [ 887.031787][T29123] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback. [ 887.157912][T29146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11212'. [ 887.182412][T29143] loop4: detected capacity change from 0 to 1764 [ 887.221714][T29148] tmpfs: Bad value for 'mpol' [ 887.313121][T29143] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 887.489481][T29120] loop2: detected capacity change from 0 to 32768 [ 887.562605][T29120] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 887.562780][T29160] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 887.608658][T29120] BTRFS info (device loop2): using free space tree [ 887.643082][T29164] loop1: detected capacity change from 0 to 8 [ 887.649976][T29120] BTRFS info (device loop2): has skinny extents [ 887.664028][T29164] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 887.674621][ T5537] udevd[5537]: incorrect cramfs checksum on /dev/loop1 [ 887.686069][T29164] cramfs: Error -5 while decompressing! [ 887.691630][T29164] cramfs: ffffffff964040a8(26)->ffff88806ba4b000(4096) [ 887.759468][T29164] cramfs: Error -3 while decompressing! [ 887.765042][T29164] cramfs: ffffffff964040c2(26)->ffff888072f53000(4096) [ 887.772351][T29164] cramfs: Error -3 while decompressing! [ 887.773556][ T5537] udevd[5537]: incorrect cramfs checksum on /dev/loop1 [ 887.777898][T29164] cramfs: ffffffff964040dc(16)->ffff88806bbd0000(4096) [ 887.777988][T29164] cramfs: Error -5 while decompressing! [ 887.777998][T29164] cramfs: ffffffff964040a8(26)->ffff88806ba4b000(4096) [ 887.949062][T29192] loop1: detected capacity change from 0 to 64 [ 888.039979][T29120] BTRFS info (device loop2): enabling ssd optimizations [ 888.374189][ T4689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4689) [ 888.582574][ T21] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 888.871200][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 889.031643][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.082309][T29217] loop1: detected capacity change from 0 to 40427 [ 889.155167][T29217] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 889.175920][T29217] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 889.197299][T29245] netlink: 'syz.3.11249': attribute type 1 has an invalid length. [ 889.210607][T29217] F2FS-fs (loop1): invalid crc value [ 889.245371][ T21] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 889.276083][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.277113][T29217] F2FS-fs (loop1): Found nat_bits in checkpoint [ 889.294386][ T21] usb 1-1: Product: syz [ 889.318470][ T21] usb 1-1: Manufacturer: syz [ 889.334183][ T21] usb 1-1: SerialNumber: syz [ 889.371250][ T21] usb 1-1: config 0 descriptor?? [ 889.417435][ T21] usb 1-1: bad CDC descriptors [ 889.422599][ T21] usb 1-1: unsupported MDLM descriptors [ 889.449415][T29217] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 889.465826][T29217] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 889.612894][T29273] loop2: detected capacity change from 0 to 256 [ 889.683862][T13906] usb 1-1: USB disconnect, device number 80 [ 889.887601][T29285] loop4: detected capacity change from 0 to 8 [ 889.933465][T29287] loop3: detected capacity change from 0 to 1024 [ 889.951488][T29285] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 889.985538][ T4689] udevd[4689]: incorrect cramfs checksum on /dev/loop4 [ 890.009389][T29293] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 890.300155][T29311] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 890.301935][T29307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11277'. [ 890.356358][T29311] overlayfs: missing 'lowerdir' [ 890.877332][T29351] loop4: detected capacity change from 0 to 1024 [ 890.989435][T29351] hfsplus: xattr searching failed [ 891.183961][T29361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 891.693739][T29349] XFS (loop3): Mounting V5 Filesystem [ 891.697010][T29377] SQUASHFS error: lzo decompression failed, data probably corrupt [ 891.742811][T29377] SQUASHFS error: Failed to read block 0x144: -5 [ 891.750390][T29377] SQUASHFS error: Unable to read metadata cache entry [142] [ 891.750851][T29380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 891.759207][T29377] SQUASHFS error: Unable to read directory block [142:26] [ 891.965709][T29349] XFS (loop3): Ending clean mount [ 892.006972][T29349] XFS (loop3): Quotacheck needed: Please wait. [ 892.171954][T29410] openvswitch: netlink: Actions may not be safe on all matching packets [ 892.234296][T29349] XFS (loop3): Quotacheck: Done. [ 892.347738][ T4516] XFS (loop3): Unmounting Filesystem [ 892.363643][T29424] set_capacity_and_notify: 4 callbacks suppressed [ 892.363657][T29424] loop2: detected capacity change from 0 to 256 [ 892.500943][T29424] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 892.513746][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11338'. [ 892.547046][T29430] netlink: 'syz.1.11335': attribute type 11 has an invalid length. [ 892.566691][T29424] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 892.569896][T29430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11335'. [ 892.646383][T29424] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 892.679011][T29434] netlink: 'syz.0.11339': attribute type 4 has an invalid length. [ 892.693099][T29434] netlink: 236 bytes leftover after parsing attributes in process `syz.0.11339'. [ 893.210233][T29460] loop1: detected capacity change from 0 to 1024 [ 893.222083][T13906] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 893.479367][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11362'. [ 893.522342][T29483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 893.614392][T13906] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 893.640324][T13906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.668876][T13906] usb 5-1: config 0 has no interface number 0 [ 893.786991][T29502] ipt_CLUSTERIP: bad num_local_nodes 18 [ 893.863605][T13906] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 893.863635][T13906] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 893.863655][T13906] usb 5-1: Product: syz [ 893.863669][T13906] usb 5-1: Manufacturer: syz [ 893.863683][T13906] usb 5-1: SerialNumber: syz [ 893.868595][T13906] usb 5-1: config 0 descriptor?? [ 893.908557][T13906] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 893.908631][T13906] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 893.908677][T13906] usb 5-1: Failed to create links for entity 1 [ 893.908693][T13906] usb 5-1: Failed to register entities (-22). [ 894.137137][T13906] usb 5-1: USB disconnect, device number 73 [ 894.208487][T29524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11382'. [ 894.782453][T29550] netlink: 'syz.2.11394': attribute type 3 has an invalid length. [ 894.793870][T29552] loop4: detected capacity change from 0 to 64 [ 894.999257][T29564] netlink: 'syz.0.11404': attribute type 1 has an invalid length. [ 895.021298][T29566] loop2: detected capacity change from 0 to 256 [ 895.061057][T29566] exfat: Deprecated parameter 'utf8' [ 895.066417][T29566] exfat: Deprecated parameter 'utf8' [ 895.086069][T29568] ptrace attach of "./syz-executor exec"[4516] was attempted by ""[29568] [ 895.149909][T29566] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 895.231758][T29575] SET target dimension over the limit! [ 895.668921][T29597] loop4: detected capacity change from 0 to 4096 [ 895.767458][T29597] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 895.883915][T12537] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 896.017983][T29629] netlink: 'syz.0.11435': attribute type 5 has an invalid length. [ 896.028882][T29629] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11435'. [ 896.038275][ T4523] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 896.060373][ T4523] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 896.098006][ T4523] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 896.140427][T12537] usb 4-1: Using ep0 maxpacket: 32 [ 896.164882][T29637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11439'. [ 896.174119][T29637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11439'. [ 896.268792][T12537] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.284772][T29643] ipt_ECN: cannot use operation on non-tcp rule [ 896.300638][T12537] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 896.342824][T12537] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 896.407623][T12537] usb 4-1: config 0 interface 0 has no altsetting 0 [ 896.435992][T12537] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 896.464819][T12537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.501198][T12537] usb 4-1: config 0 descriptor?? [ 896.856657][ T4620] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 896.878127][T12537] usbhid 4-1:0.0: can't add hid device: -71 [ 896.888780][T12537] usbhid: probe of 4-1:0.0 failed with error -71 [ 896.910167][T13906] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 896.937645][T29685] loop4: detected capacity change from 0 to 256 [ 896.952042][T12537] usb 4-1: USB disconnect, device number 72 [ 897.043202][T29685] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 897.064766][T29685] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 897.091073][T29685] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 897.134787][ T4620] usb 3-1: Using ep0 maxpacket: 16 [ 897.187929][T13906] usb 2-1: Using ep0 maxpacket: 32 [ 897.262867][ T4620] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 897.311969][T29691] loop4: detected capacity change from 0 to 1024 [ 897.327095][ T4620] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 897.346789][ T4620] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 897.369750][T13906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 897.390729][T29691] EXT4-fs (loop4): Ignoring removed bh option [ 897.393884][ T4620] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 897.425423][T29691] EXT4-fs (loop4): inline encryption not supported [ 897.442145][ T4620] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 897.446872][T29691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 897.465828][ T4620] usb 3-1: config 0 has no interface number 0 [ 897.466809][T29695] loop3: detected capacity change from 0 to 256 [ 897.481221][T13906] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 897.502685][T13906] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 897.520684][ T4620] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 897.528271][T29691] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.11464: lblock 2 mapped to illegal pblock 2 (length 1) [ 897.538229][T13906] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 897.563594][T29691] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 897.615143][ T4620] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 897.647700][T29691] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.11464: lblock 0 mapped to illegal pblock 48 (length 1) [ 897.669462][T13906] usb 2-1: config 128 has no interface number 0 [ 897.690363][ T4620] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 897.711171][T13906] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 897.733966][T29691] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 897.747117][ T4620] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.765142][T29691] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.11464: Failed to acquire dquot type 0 [ 897.784008][T13906] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 897.815826][ T4620] usb 3-1: config 0 interface 125 has no altsetting 0 [ 897.840088][T13906] usb 2-1: config 128 interface 127 has no altsetting 0 [ 897.851293][T29691] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 897.868896][ T4620] usb 3-1: config 0 interface 125 has no altsetting 2 [ 897.893920][T29691] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.11464: mark_inode_dirty error [ 897.947635][T29691] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 898.002552][T29691] EXT4-fs (loop4): 1 orphan inode deleted [ 898.008320][T29691] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 898.028262][ T9] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 898.045176][T13906] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 898.064629][ T4620] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 898.073843][T13906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.094576][ T4620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.107412][T13906] usb 2-1: Product: syz [ 898.111597][T13906] usb 2-1: Manufacturer: syz [ 898.132113][ T4620] usb 3-1: Product: syz [ 898.148444][ T4620] usb 3-1: Manufacturer: syz [ 898.160633][T13906] usb 2-1: SerialNumber: syz [ 898.166273][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 898.172067][ T4620] usb 3-1: SerialNumber: syz [ 898.207293][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 898.221320][ T4620] usb 3-1: config 0 descriptor?? [ 898.238548][ T9] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm kworker/u4:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 898.270169][ T4620] usb 3-1: selecting invalid altsetting 2 [ 898.299644][ T9] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 898.321647][ T9] EXT4-fs error (device loop4): ext4_write_dquot:6214: comm kworker/u4:0: Failed to commit dquot type 0 [ 898.384564][ T9] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 898.426314][ T4523] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 898.454550][ T4523] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 898.482565][ T4523] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 898.634693][T13906] usb 2-1: USB disconnect, device number 74 [ 898.737913][ C0] usb 3-1: async_complete: urb error -71 [ 898.743643][ C0] usb 3-1: async_complete: urb error -71 [ 898.749348][ C0] usb 3-1: async_complete: urb error -71 [ 898.755158][ T4620] get_1284_register: usb error -71 [ 898.760382][ T4620] uss720: probe of 3-1:0.125 failed with error -71 [ 898.774034][ T4620] usb 3-1: USB disconnect, device number 67 [ 898.841224][T29711] loop3: detected capacity change from 0 to 32768 [ 898.947510][T29711] attempt to access beyond end of device [ 898.947510][T29711] loop3: rw=1, want=4680040, limit=32768 [ 898.948669][ T5537] udevd[5537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.984036][T29711] metapage_write_end_io: I/O error [ 899.056275][T29711] blkno = 8ed2c, nblocks = 1 [ 899.114120][T29711] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 899.114120][T29711] [ 899.148847][T29711] ERROR: (device loop3): remounting filesystem as read-only [ 899.188673][T29711] blkno = 8ed2c, nblocks = 1 [ 899.194395][T29711] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 899.194395][T29711] [ 899.335729][ T277] blkno = 8ed2c, nblocks = 4 [ 899.340582][ T277] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 899.340582][ T277] [ 899.388542][ T4516] attempt to access beyond end of device [ 899.388542][ T4516] loop3: rw=1, want=4680040, limit=32768 [ 899.432896][ T4516] metapage_write_end_io: I/O error [ 899.438444][ T4516] JFS: metapage_get_blocks failed [ 899.448468][T29761] loop2: detected capacity change from 0 to 256 [ 899.498144][ T4516] JFS: metapage_get_blocks failed [ 899.503713][ T4516] JFS: metapage_get_blocks failed [ 899.521840][ T4516] JFS: metapage_get_blocks failed [ 899.550218][T29765] loop4: detected capacity change from 0 to 256 [ 899.606727][T29761] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 899.675508][T29765] FAT-fs (loop4): Directory bread(block 64) failed [ 899.705729][T29765] FAT-fs (loop4): Directory bread(block 65) failed [ 899.738483][T29767] block device autoloading is deprecated and will be removed. [ 899.766523][T29765] FAT-fs (loop4): Directory bread(block 66) failed [ 899.773134][T29765] FAT-fs (loop4): Directory bread(block 67) failed [ 899.805262][T29765] FAT-fs (loop4): Directory bread(block 68) failed [ 899.838811][T29765] FAT-fs (loop4): Directory bread(block 69) failed [ 899.846031][T29765] FAT-fs (loop4): Directory bread(block 70) failed [ 899.886549][T29765] FAT-fs (loop4): Directory bread(block 71) failed [ 899.907543][T29769] loop2: detected capacity change from 0 to 64 [ 899.914481][T29765] FAT-fs (loop4): Directory bread(block 72) failed [ 899.931905][T29765] FAT-fs (loop4): Directory bread(block 73) failed [ 900.023480][T29769] Trying to free block not in datazone [ 900.273314][T29776] libceph: resolve '400' (ret=-3): failed [ 900.608791][ T21] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 900.646195][T29801] loop4: detected capacity change from 0 to 736 [ 900.692852][T29805] loop3: detected capacity change from 0 to 128 [ 900.767919][T29805] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 900.863450][T29805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 900.897445][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 900.941377][ T21] usb 3-1: too many configurations: 15, using maximum allowed: 8 [ 901.111637][T29821] loop1: detected capacity change from 0 to 512 [ 901.194920][T29821] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 901.272933][T29821] EXT4-fs error (device loop1): ext4_xattr_block_list:713: inode #15: comm syz.1.11528: corrupted xattr block 13 [ 901.361740][T14715] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 901.725751][T29858] loop1: detected capacity change from 0 to 512 [ 901.747109][T29860] netlink: 'syz.0.11555': attribute type 21 has an invalid length. [ 901.785609][T29860] IPv6: NLM_F_CREATE should be specified when creating new route [ 901.848296][T29858] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 901.876935][T29858] EXT4-fs (loop1): orphan cleanup on readonly fs [ 901.901090][T29858] Quota error (device loop1): v2_read_file_info: Free block number too big (0 >= 0). [ 901.911856][T29858] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 901.930534][ T21] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 901.939728][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.945182][T29858] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 901.948371][ T21] usb 3-1: Product: syz [ 901.955283][T29858] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.11545: bg 0: block 40: padding at end of block bitmap is not set [ 901.959150][ T21] usb 3-1: Manufacturer: syz [ 901.978325][ T21] usb 3-1: SerialNumber: syz [ 901.999674][ T21] usb 3-1: config 0 descriptor?? [ 902.020954][T29858] EXT4-fs (loop1): Remounting filesystem read-only [ 902.030911][T14715] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 902.041759][T14715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.046197][T29858] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 902.049763][T14715] usb 4-1: Product: syz [ 902.049781][T14715] usb 4-1: Manufacturer: syz [ 902.049794][T14715] usb 4-1: SerialNumber: syz [ 902.077867][T29858] EXT4-fs (loop1): Remounting filesystem read-only [ 902.085521][T14715] usb 4-1: config 0 descriptor?? [ 902.090768][T29858] EXT4-fs (loop1): 1 truncate cleaned up [ 902.096890][T29858] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,errors=remount-ro,noinit_itable,. Quota mode: writeback. [ 902.149424][T14715] ch341 4-1:0.0: ch341-uart converter detected [ 902.330740][ T21] mdc800 3-1:0.0: probe fails -> wrong Number of Configuration [ 902.354540][ T21] usb 3-1: USB disconnect, device number 68 [ 902.374081][T14715] usb 4-1: short control message received (0 < 2) [ 902.383477][T14715] usb 4-1: failed to receive control message: -5 [ 902.389855][T14715] ch341-uart: probe of ttyUSB0 failed with error -5 [ 902.449644][T29881] dlm: no local IP address has been set [ 902.456025][T29881] dlm: cannot start dlm midcomms -107 [ 902.635295][ T21] usb 4-1: USB disconnect, device number 73 [ 902.647030][ T21] ch341 4-1:0.0: device disconnected [ 902.795571][T29903] loop4: detected capacity change from 0 to 1024 [ 902.973726][ T154] hfsplus: b-tree write err: -5, ino 4 [ 903.160594][T29920] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 903.322655][T29921] loop2: detected capacity change from 0 to 4096 [ 903.357224][T29937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11581'. [ 903.398803][T29937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11581'. [ 903.399131][T29921] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 903.519801][T29921] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 903.565095][T29921] ntfs3: loop2: failed to convert "c46c" to cp863 [ 903.676870][T13906] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 903.965426][T13906] usb 1-1: Using ep0 maxpacket: 8 [ 904.040207][T12537] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 904.076639][T29967] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 904.093903][T13906] usb 1-1: config 2 has an invalid interface number: 241 but max is 0 [ 904.102212][T29967] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 904.113752][T13906] usb 1-1: config 2 has no interface number 0 [ 904.121504][T13906] usb 1-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 904.160902][T29975] FAT-fs (loop4): Directory bread(block 64) failed [ 904.166678][T29967] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 904.179480][T29967] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 904.185602][T29975] FAT-fs (loop4): Directory bread(block 65) failed [ 904.208667][T13906] usb 1-1: config 2 interface 241 has no altsetting 0 [ 904.218316][T29967] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 904.229184][T29975] FAT-fs (loop4): Directory bread(block 66) failed [ 904.238223][T29967] ntfs: volume version 3.1. [ 904.246590][T29967] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 904.254390][T29975] FAT-fs (loop4): Directory bread(block 67) failed [ 904.260873][T29967] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 904.287404][T29975] FAT-fs (loop4): Directory bread(block 68) failed [ 904.288444][T29967] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 904.293952][T29975] FAT-fs (loop4): Directory bread(block 69) failed [ 904.305457][T29967] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 904.311875][T12537] usb 2-1: Using ep0 maxpacket: 16 [ 904.330206][T29967] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 904.382731][T29975] FAT-fs (loop4): Directory bread(block 70) failed [ 904.389289][T29975] FAT-fs (loop4): Directory bread(block 71) failed [ 904.396170][T13906] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 904.405929][T13906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.421918][T13906] usb 1-1: Product: syz [ 904.426656][T13906] usb 1-1: Manufacturer: syz [ 904.431254][T13906] usb 1-1: SerialNumber: syz [ 904.436400][T29975] FAT-fs (loop4): Directory bread(block 72) failed [ 904.445376][T29975] FAT-fs (loop4): Directory bread(block 73) failed [ 904.467971][T12537] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 904.479881][T13906] ti_usb_3410_5052 1-1:2.241: TI USB 3410 1 port adapter converter detected [ 904.505610][T13906] ti_usb_3410_5052 1-1:2.241: missing endpoints [ 904.512744][T12537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.550026][T12537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 904.582516][T12537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 904.625352][T12537] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.668226][T29969] set_capacity_and_notify: 3 callbacks suppressed [ 904.668241][T29969] loop2: detected capacity change from 0 to 40427 [ 904.735301][T12537] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 904.741364][T29969] F2FS-fs (loop2): invalid crc value [ 904.759945][T12537] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 904.788576][T12537] usb 2-1: Manufacturer: syz [ 904.797279][T12537] usb 2-1: config 0 descriptor?? [ 904.810037][T29969] F2FS-fs (loop2): Found nat_bits in checkpoint [ 904.818124][ T13] usb 1-1: USB disconnect, device number 81 [ 904.851226][T29988] loop4: detected capacity change from 0 to 512 [ 904.928722][T29969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 904.948075][T29988] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 905.033831][T29988] EXT4-fs error (device loop4): ext4_xattr_block_list:713: inode #15: comm syz.4.11607: corrupted xattr block 13 [ 905.079973][T12745] usb 2-1: USB disconnect, device number 75 [ 905.622440][T12745] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 905.784641][T30046] loop3: detected capacity change from 0 to 64 [ 905.885264][T30046] attempt to access beyond end of device [ 905.885264][T30046] loop3: rw=0, want=2060, limit=64 [ 905.912388][T30046] Buffer I/O error on dev loop3, logical block 1029, async page read [ 905.945430][T30046] attempt to access beyond end of device [ 905.945430][T30046] loop3: rw=0, want=2060, limit=64 [ 905.959478][T30056] netlink: 'syz.1.11639': attribute type 2 has an invalid length. [ 905.984442][T30046] Buffer I/O error on dev loop3, logical block 1029, async page read [ 906.082166][T12745] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.115049][T12745] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.232181][T30074] loop3: detected capacity change from 0 to 64 [ 906.328183][T12745] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 906.343950][T30074] minix_free_block (loop3:21): bit already cleared [ 906.352047][T30074] Trying to free block not in datazone [ 906.373107][T12745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.394248][T12745] usb 5-1: Product: syz [ 906.403537][T12745] usb 5-1: Manufacturer: syz [ 906.435473][T12745] usb 5-1: SerialNumber: syz [ 906.446232][T14715] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 906.494278][T30086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11655'. [ 906.521341][T12745] cdc_ncm 5-1:1.0: skipping garbage [ 906.526577][T12745] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 906.561520][T12745] cdc_ncm 5-1:1.0: bind() failure [ 906.580963][T12745] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 906.613446][T12745] cdc_ncm 5-1:1.1: bind() failure [ 906.698121][T30095] device bond4 entered promiscuous mode [ 906.734185][T14715] usb 3-1: Using ep0 maxpacket: 16 [ 906.760220][T12742] usb 5-1: USB disconnect, device number 74 [ 906.791217][T30103] SET target dimension over the limit! [ 906.874643][T14715] usb 3-1: config 0 has no interfaces? [ 907.063076][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11671'. [ 907.076323][T14715] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 907.090173][T14715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.094903][T30124] netlink: 'syz.1.11671': attribute type 1 has an invalid length. [ 907.131983][T14715] usb 3-1: Product: syz [ 907.155204][T30124] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11671'. [ 907.156632][T14715] usb 3-1: Manufacturer: syz [ 907.180564][T14715] usb 3-1: SerialNumber: syz [ 907.217334][T14715] r8152-cfgselector 3-1: config 0 descriptor?? [ 907.297515][T30136] openvswitch: netlink: Message has 8 unknown bytes. [ 907.335867][T30136] openvswitch: netlink: Actions may not be safe on all matching packets [ 907.516073][T14715] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 907.675095][T30161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11692'. [ 907.708431][T30164] netlink: 766 bytes leftover after parsing attributes in process `syz.1.11691'. [ 907.758692][T14715] usb 3-1: USB disconnect, device number 69 [ 908.009227][T30176] loop3: detected capacity change from 0 to 4096 [ 908.067811][T30188] netlink: 'syz.0.11702': attribute type 29 has an invalid length. [ 908.079733][T30188] netlink: 'syz.0.11702': attribute type 3 has an invalid length. [ 908.101551][T30176] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 908.120987][T30188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11702'. [ 908.616526][T30224] loop2: detected capacity change from 0 to 128 [ 908.622924][T30221] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11720'. [ 908.684414][T30224] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 908.774717][ T4521] sysv_free_block: flc_count > flc_size [ 908.775913][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11728'. [ 908.801956][ T4521] sysv_free_block: flc_count > flc_size [ 908.814449][T30236] device bridge_slave_1 left promiscuous mode [ 908.826756][T30236] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.843511][T30230] loop4: detected capacity change from 0 to 4096 [ 908.846506][ T4521] sysv_free_block: flc_count > flc_size [ 908.856147][ T4521] sysv_free_block: flc_count > flc_size [ 908.869501][ T4521] sysv_free_block: flc_count > flc_size [ 908.888496][T30236] device bridge_slave_0 left promiscuous mode [ 908.890664][ T4521] sysv_free_block: flc_count > flc_size [ 908.900401][ T4521] sysv_free_block: flc_count > flc_size [ 908.900581][T30236] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.906337][ T4521] sysv_free_block: flc_count > flc_size [ 908.918636][ T4521] sysv_free_block: flc_count > flc_size [ 908.924183][ T4521] sysv_free_block: flc_count > flc_size [ 908.935007][ T4521] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 908.956015][T30230] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 909.109683][T30230] ntfs3: loop4: failed to convert "c46c" to iso8859-14 [ 909.187965][T30249] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.543166][T30267] loop1: detected capacity change from 0 to 4096 [ 909.647006][T30267] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 909.715461][T30267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 909.728119][T30290] loop3: detected capacity change from 0 to 64 [ 909.874203][T12745] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 909.910417][T30302] ip6t_srh: unknown srh match flags 4001 [ 909.929425][T30300] ieee802154 phy1 wpan1: encryption failed: -22 [ 910.294039][T12745] usb 5-1: config 0 has an invalid interface number: 174 but max is 0 [ 910.302495][T12745] usb 5-1: config 0 has no interface number 0 [ 910.330010][T12745] usb 5-1: config 0 interface 174 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 910.389190][T12745] usb 5-1: New USB device found, idVendor=07c9, idProduct=b010, bcdDevice=92.d3 [ 910.451774][T12745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.460217][T30328] netlink: 'syz.1.11774': attribute type 12 has an invalid length. [ 910.501590][T12745] usb 5-1: config 0 descriptor?? [ 910.626182][T30333] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 910.783793][T30337] netlink: 'syz.1.11778': attribute type 1 has an invalid length. [ 910.832456][T30337] netlink: 'syz.1.11778': attribute type 2 has an invalid length. [ 910.839109][T12745] kaweth 5-1:0.174: Firmware present in device. [ 910.970710][T30345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11781'. [ 910.981740][T30344] loop1: detected capacity change from 0 to 256 [ 910.991680][T30315] loop2: detected capacity change from 0 to 32768 [ 911.042389][T12745] kaweth 5-1:0.174: Error reading configuration (-71), no net device created [ 911.053948][T12745] kaweth: probe of 5-1:0.174 failed with error -5 [ 911.084464][T30344] FAT-fs (loop1): Unrecognized mount option "nonum‡ail=0" or missing value [ 911.120139][T12745] usb 5-1: USB disconnect, device number 75 [ 911.167250][T30344] devtmpfs: Unknown parameter 'shortname' [ 911.179912][T30315] XFS (loop2): Mounting V5 Filesystem [ 911.185444][ T13] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 911.319257][T30315] XFS (loop2): Ending clean mount [ 911.411035][ T4521] XFS (loop2): Unmounting Filesystem [ 911.769771][ T13] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 911.801912][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.809964][ T13] usb 4-1: Product: syz [ 911.844098][ T13] usb 4-1: Manufacturer: syz [ 911.865607][ T13] usb 4-1: SerialNumber: syz [ 911.920025][ T13] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 912.012512][T30403] loop1: detected capacity change from 0 to 128 [ 912.133794][T30403] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 912.298574][T30423] tipc: Can't bind to reserved service type 0 [ 912.592361][ T13] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 912.616236][T30436] loop1: detected capacity change from 0 to 4096 [ 912.637882][T30444] loop2: detected capacity change from 0 to 512 [ 912.728206][T30436] __ntfs_error: 6 callbacks suppressed [ 912.728221][T30436] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 912.773394][T30436] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 912.794870][T30444] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 912.828195][T30436] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 912.867859][T30436] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 912.882098][T30436] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 912.882707][T30444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.11827: bg 0: block 18: invalid block bitmap [ 912.908878][T30436] ntfs: volume version 3.1. [ 912.929333][T30436] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 912.949682][T30436] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 912.974632][T30436] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 913.018188][T30436] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 913.035469][T14715] usb 4-1: USB disconnect, device number 74 [ 913.042795][T30436] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 913.154583][T30465] loop4: detected capacity change from 0 to 1024 [ 913.169800][T12537] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 913.246680][T30465] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 913.289740][T30465] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: inode #32: comm syz.4.11837: iget: special inode unallocated [ 913.334833][T30465] EXT4-fs (loop4): no journal found [ 913.340081][T30465] EXT4-fs (loop4): can't get journal size [ 913.347715][T30465] EXT4-fs (loop4): filesystem is read-only [ 913.353911][T30465] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 913.357724][T30473] loop2: detected capacity change from 0 to 1764 [ 913.382292][T30465] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.11837: bad inode number: 12 [ 913.421639][T30473] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 913.565265][T12537] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.586501][ T21] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 913.608993][T12537] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 913.733943][T30484] loop3: detected capacity change from 0 to 4096 [ 913.832462][T12537] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.852577][T30484] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 913.864343][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 913.873385][T12537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.887280][T12537] usb 1-1: Product: syz [ 913.891465][T12537] usb 1-1: Manufacturer: syz [ 913.896794][T12537] usb 1-1: SerialNumber: syz [ 913.928513][ T13] usb 4-1: Service connection timeout for: 256 [ 913.946841][ T13] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 913.956241][T12537] cdc_ncm 1-1:1.0: skipping garbage [ 913.966468][T12537] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 913.977563][ T13] ath9k_htc: Failed to initialize the device [ 913.984132][T12537] cdc_ncm 1-1:1.0: bind() failure [ 913.995093][T14715] usb 4-1: ath9k_htc: USB layer deinitialized [ 914.001032][T12537] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 914.009876][T30484] ntfs3: loop3: failed to convert "c46c" to euc-jp [ 914.016966][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 914.026081][T12537] cdc_ncm 1-1:1.1: bind() failure [ 914.061998][T30481] loop4: detected capacity change from 0 to 32768 [ 914.177554][T30494] loop2: detected capacity change from 0 to 8192 [ 914.195886][T12537] usb 1-1: USB disconnect, device number 82 [ 914.227972][ T21] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 914.237100][ T21] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 914.245505][ T21] usb 2-1: Product: syz [ 914.260911][ T21] usb 2-1: Manufacturer: syz [ 914.271110][ T21] usb 2-1: SerialNumber: syz [ 914.334956][T30494] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 914.366837][T30494] REISERFS (device loop2): using ordered data mode [ 914.373497][T30494] reiserfs: using flush barriers [ 914.392097][T30494] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 914.449547][T30494] REISERFS (device loop2): checking transaction log (loop2) [ 914.471805][T30511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11858'. [ 914.560274][T30494] REISERFS (device loop2): Using rupasov hash to sort names [ 914.570228][ T21] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 914.592186][ T21] usb 2-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 914.607274][T30494] REISERFS (device loop2): using 3.5.x disk format [ 914.609220][ T21] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 914.629548][ T21] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 914.638864][T30494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 914.650318][T30494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 914.675671][T30494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 914.696588][T30494] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 914.749671][T30494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 914.763436][T30494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 914.793545][T30494] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 914.807126][ T21] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 914.819083][ T21] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 914.831250][ T21] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 914.850280][ T21] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 914.893584][ T21] usb 2-1: USB disconnect, device number 76 [ 914.982687][ T21] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 915.006810][ T21] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 915.058577][ T21] visor 2-1:1.0: device disconnected [ 915.394824][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11877'. [ 915.517743][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11881'. [ 915.778901][T30528] JBD2: Ignoring recovery information on journal [ 915.835433][T30570] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 915.902552][T30570] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.11886: bg 0: block 18: invalid block bitmap [ 915.971729][T30528] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 916.066591][T12537] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 916.164289][ T4523] ocfs2: Unmounting device (7,4) on (node local) [ 916.250345][T30594] cgroup: No subsys list or none specified [ 916.323037][T12537] usb 3-1: Using ep0 maxpacket: 16 [ 916.398645][T30602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11900'. [ 916.451509][T12537] usb 3-1: config 0 has no interfaces? [ 916.536979][T12537] usb 3-1: config 0 has no interfaces? [ 916.545730][T30612] netlink: 'syz.4.11903': attribute type 3 has an invalid length. [ 916.590584][T30612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11903'. [ 916.622531][T12537] usb 3-1: config 0 has no interfaces? [ 916.673896][T30620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11907'. [ 916.686500][T12537] usb 3-1: string descriptor 0 read error: -71 [ 916.692738][T12537] usb 3-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 916.713138][T14715] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 916.717214][T12537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.749787][T30624] set_capacity_and_notify: 2 callbacks suppressed [ 916.749801][T30624] loop1: detected capacity change from 0 to 256 [ 916.769835][T12537] usb 3-1: rejected 3 configurations due to insufficient available bus power [ 916.793811][T12537] usb 3-1: no configuration chosen from 3 choices [ 916.834502][T12537] usb 3-1: USB disconnect, device number 70 [ 916.858914][T30624] FAT-fs (loop1): Directory bread(block 64) failed [ 916.865494][T30624] FAT-fs (loop1): Directory bread(block 65) failed [ 916.892998][T30624] FAT-fs (loop1): Directory bread(block 66) failed [ 916.899568][T30624] FAT-fs (loop1): Directory bread(block 67) failed [ 916.950215][T30624] FAT-fs (loop1): Directory bread(block 68) failed [ 916.957653][T30624] FAT-fs (loop1): Directory bread(block 69) failed [ 916.964838][T30624] FAT-fs (loop1): Directory bread(block 70) failed [ 916.971361][T30624] FAT-fs (loop1): Directory bread(block 71) failed [ 916.985759][T30624] FAT-fs (loop1): Directory bread(block 72) failed [ 916.992462][T30624] FAT-fs (loop1): Directory bread(block 73) failed [ 917.039340][T14715] usb 4-1: Using ep0 maxpacket: 8 [ 917.189561][T14715] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 917.200187][T14715] usb 4-1: config 0 has no interface number 0 [ 917.206294][T14715] usb 4-1: config 0 interface 96 has no altsetting 0 [ 917.206461][T13906] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 917.384653][T14715] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 917.424041][T14715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.453697][T14715] usb 4-1: Product: syz [ 917.458048][T14715] usb 4-1: Manufacturer: syz [ 917.470696][T14715] usb 4-1: SerialNumber: syz [ 917.492031][T14715] usb 4-1: config 0 descriptor?? [ 917.499130][T13906] usb 5-1: Using ep0 maxpacket: 8 [ 917.554528][T14715] usbhid 4-1:0.96: couldn't find an input interrupt endpoint [ 917.633997][T13906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 917.710924][T30657] loop2: detected capacity change from 0 to 4096 [ 917.769804][T12742] usb 4-1: USB disconnect, device number 75 [ 917.815608][T30669] Scaler: ================= START STATUS ================= [ 917.825999][T13906] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 917.859745][T30669] Scaler: ================== END STATUS ================== [ 917.861847][T30657] ntfs: volume version 3.1. [ 917.867683][T13906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.888211][T13906] usb 5-1: Product: syz [ 917.905431][T13906] usb 5-1: Manufacturer: syz [ 917.910070][T13906] usb 5-1: SerialNumber: syz [ 917.941156][T13906] usb 5-1: config 0 descriptor?? [ 918.225081][ T4620] usb 5-1: USB disconnect, device number 76 [ 918.650915][T14715] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 918.684547][T30694] tc_dump_action: action bad kind [ 918.771877][T30696] loop2: detected capacity change from 0 to 1024 [ 918.828969][T30696] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 918.828969][T30696] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 918.828969][T30696] [ 918.858707][T30696] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 918.876763][T30696] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,noacl,max_batch_time=0x00000000000002f1,lazytime,jqfmt=vfsold,grpquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 918.980148][T14715] usb 1-1: Using ep0 maxpacket: 8 [ 919.023670][T30708] loop1: detected capacity change from 0 to 16 [ 919.035868][T30711] loop4: detected capacity change from 0 to 256 [ 919.063177][ T4620] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 919.098022][T30708] erofs: (device loop1): mounted with root inode @ nid 36. [ 919.126950][T30711] FAT-fs (loop4): Directory bread(block 64) failed [ 919.134846][T14715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 919.156997][T14715] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 919.161651][T30711] FAT-fs (loop4): Directory bread(block 65) failed [ 919.199197][T14715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 919.216219][T30711] FAT-fs (loop4): Directory bread(block 66) failed [ 919.230864][T30711] FAT-fs (loop4): Directory bread(block 67) failed [ 919.244466][T30711] FAT-fs (loop4): Directory bread(block 68) failed [ 919.261980][T30711] FAT-fs (loop4): Directory bread(block 69) failed [ 919.272824][T30711] FAT-fs (loop4): Directory bread(block 70) failed [ 919.312169][T30711] FAT-fs (loop4): Directory bread(block 71) failed [ 919.334496][T30711] FAT-fs (loop4): Directory bread(block 72) failed [ 919.341893][T30711] FAT-fs (loop4): Directory bread(block 73) failed [ 919.359059][ T4620] usb 4-1: Using ep0 maxpacket: 16 [ 919.402304][T14715] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 919.411369][T14715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.428672][T14715] usb 1-1: Product: syz [ 919.434122][T14715] usb 1-1: Manufacturer: syz [ 919.438725][T14715] usb 1-1: SerialNumber: syz [ 919.488473][ T4620] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 919.506579][T14715] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 919.516389][T30709] loop2: detected capacity change from 0 to 32768 [ 919.523027][ T4620] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 919.531670][ T4620] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 919.542531][ T4620] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 919.564264][ T4620] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 919.573947][ T4620] usb 4-1: config 0 has no interface number 0 [ 919.580309][ T4620] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 919.591937][ T4620] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 919.602722][ T4620] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 919.613602][ T4620] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 919.627121][ T4620] usb 4-1: config 0 interface 125 has no altsetting 0 [ 919.634006][ T4620] usb 4-1: config 0 interface 125 has no altsetting 2 [ 919.658196][T30709] attempt to access beyond end of device [ 919.658196][T30709] loop2: rw=1, want=4680040, limit=32768 [ 919.679101][T30709] metapage_write_end_io: I/O error [ 919.687652][T30709] blkno = 8ed2c, nblocks = 1 [ 919.697656][T30709] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 919.697656][T30709] [ 919.736551][T30709] ERROR: (device loop2): remounting filesystem as read-only [ 919.762925][T30709] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 919.762925][T30709] [ 919.787488][ T13] usb 1-1: USB disconnect, device number 83 [ 919.803038][T30709] ERROR: (device loop2): duplicateIXtree: [ 919.803038][T30709] [ 919.816793][ T4620] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 919.835561][ T4620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.854663][ T4620] usb 4-1: Product: syz [ 919.861453][ T4620] usb 4-1: Manufacturer: syz [ 919.869698][ T4620] usb 4-1: SerialNumber: syz [ 919.880163][ T4620] usb 4-1: config 0 descriptor?? [ 919.887547][ T276] blkno = 8ed2c, nblocks = 4 [ 919.892146][ T276] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 919.892146][ T276] [ 919.927252][ T4620] usb 4-1: selecting invalid altsetting 2 [ 919.937436][ T4521] attempt to access beyond end of device [ 919.937436][ T4521] loop2: rw=1, want=4680040, limit=32768 [ 919.951376][T30719] loop4: detected capacity change from 0 to 1024 [ 919.953437][T30713] loop1: detected capacity change from 0 to 40427 [ 919.958092][ T4521] metapage_write_end_io: I/O error [ 919.970300][ T4521] JFS: metapage_get_blocks failed [ 919.975338][ T4521] JFS: metapage_get_blocks failed [ 919.980522][ T4521] JFS: metapage_get_blocks failed [ 919.985539][ T4521] JFS: metapage_get_blocks failed [ 920.005502][T30713] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 920.016395][T30713] F2FS-fs (loop1): invalid crc value [ 920.024474][T30713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 920.049693][T30713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 920.395907][ C0] usb 4-1: async_complete: urb error -71 [ 920.401671][ C0] usb 4-1: async_complete: urb error -71 [ 920.407408][ C0] usb 4-1: async_complete: urb error -71 [ 920.413296][ T4620] get_1284_register: usb error -71 [ 920.418523][ T4620] uss720: probe of 4-1:0.125 failed with error -71 [ 920.428528][ T4620] usb 4-1: USB disconnect, device number 76 [ 920.621086][T30737] netlink: 'syz.2.11955': attribute type 1 has an invalid length. [ 920.639940][T30737] netlink: 244 bytes leftover after parsing attributes in process `syz.2.11955'. [ 920.737990][ T13] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 920.820604][T30741] loop2: detected capacity change from 0 to 4096 [ 920.827848][T30728] loop1: detected capacity change from 0 to 32768 [ 920.843166][T30741] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 920.870242][T30741] ntfs3: loop2: failed to convert "c46c" to iso8859-4 [ 921.133736][ T13] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 921.176070][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 921.254924][T30753] __ntfs_error: 23 callbacks suppressed [ 921.254942][T30753] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 921.335068][T30753] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 921.390912][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 921.413247][ T13] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 921.422120][T30753] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 921.439900][ T13] usb 1-1: Product: syz [ 921.469036][ T13] usb 1-1: Manufacturer: syz [ 921.473666][ T13] usb 1-1: SerialNumber: syz [ 921.476163][T30753] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 921.514354][ T13] usb 1-1: config 0 descriptor?? [ 921.527615][T30753] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 921.574689][ T13] usb 1-1: selecting invalid altsetting 0 [ 921.588388][T30753] ntfs: volume version 3.1. [ 921.599737][T30753] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 921.622480][T30753] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 921.651700][T30753] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 921.668418][T30753] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 921.709715][T30753] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 921.745616][T30776] netlink: 'syz.1.11980': attribute type 4 has an invalid length. [ 921.794089][T30750] JBD2: Ignoring recovery information on journal [ 921.868869][T30750] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 921.947845][T30732] usb 1-1: selecting invalid altsetting 0 [ 921.954229][T30732] usb 1-1: 0:0: usb_set_interface failed (-22) [ 921.981350][ T4521] ocfs2: Unmounting device (7,2) on (node local) [ 922.055880][ T21] usb 1-1: USB disconnect, device number 84 [ 922.200967][T30793] device bond1 entered promiscuous mode [ 922.207050][T30793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.207063][T30796] set_capacity_and_notify: 2 callbacks suppressed [ 922.207074][T30796] loop2: detected capacity change from 0 to 16 [ 922.436123][T30811] netlink: 'syz.4.11995': attribute type 30 has an invalid length. [ 922.447746][T30796] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 11417) [ 922.466610][T30811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11995'. [ 922.929567][T30832] netlink: 'syz.4.12005': attribute type 28 has an invalid length. [ 922.937514][T30832] netlink: 'syz.4.12005': attribute type 29 has an invalid length. [ 922.971741][T30813] loop3: detected capacity change from 0 to 32768 [ 922.982675][T30832] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12005'. [ 923.113959][T30813] JBD2: Ignoring recovery information on journal [ 923.333580][T30813] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 923.356384][T30849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12010'. [ 923.445753][T30840] loop4: detected capacity change from 0 to 32768 [ 923.556036][T30860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 923.622829][T30840] XFS (loop4): Mounting V5 Filesystem [ 923.642294][ T4516] ocfs2: Unmounting device (7,3) on (node local) [ 923.812120][T30840] XFS (loop4): Ending clean mount [ 923.870259][ T4523] XFS (loop4): Unmounting Filesystem [ 924.055904][T30890] loop2: detected capacity change from 0 to 164 [ 924.314729][T30897] loop3: detected capacity change from 0 to 1024 [ 924.746080][T30879] loop1: detected capacity change from 0 to 40427 [ 924.762038][T30907] netlink: 'syz.4.12026': attribute type 1 has an invalid length. [ 924.855876][T30879] F2FS-fs (loop1): invalid crc value [ 924.889348][T30879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 925.040529][T30879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 925.224915][T30930] netlink: 'syz.0.12047': attribute type 4 has an invalid length. [ 925.229367][T30899] loop2: detected capacity change from 0 to 32768 [ 925.289835][T30899] (syz.2.12033,30899,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 925.314291][T12537] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 925.347574][T30899] (syz.2.12033,30899,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 925.440967][T30899] JBD2: Ignoring recovery information on journal [ 925.525178][T30899] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 925.629262][T30945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12053'. [ 925.644452][T30899] [ 925.646801][T30899] ====================================================== [ 925.653806][T30899] WARNING: possible circular locking dependency detected [ 925.660821][T30899] syzkaller #0 Not tainted [ 925.665228][T30899] ------------------------------------------------------ [ 925.672227][T30899] syz.2.12033/30899 is trying to acquire lock: [ 925.678359][T30899] ffff88807bda2650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x688/0xb10 [ 925.687762][T30899] [ 925.687762][T30899] but task is already holding lock: [ 925.695212][T30899] ffff8880568722e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 925.706076][T30899] [ 925.706076][T30899] which lock already depends on the new lock. [ 925.706076][T30899] [ 925.716461][T30899] [ 925.716461][T30899] the existing dependency chain (in reverse order) is: [ 925.725467][T30899] [ 925.725467][T30899] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 925.734306][T30899] down_write+0x38/0x60 [ 925.738973][T30899] ocfs2_lock_global_qf+0x1fe/0x290 [ 925.744674][T30899] ocfs2_acquire_dquot+0x29d/0xb10 [ 925.750289][T30899] dqget+0x778/0xeb0 [ 925.754690][T30899] dquot_set_dqblk+0x27/0xf90 [ 925.759868][T30899] quota_setquota+0x4d6/0x590 [ 925.765045][T30899] __se_sys_quotactl+0x28b/0x6f0 [ 925.770486][T30899] do_syscall_64+0x4c/0xa0 [ 925.775408][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 925.781895][T30899] [ 925.781895][T30899] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 925.792385][T30899] down_write+0x38/0x60 [ 925.797045][T30899] ocfs2_lock_global_qf+0x1d7/0x290 [ 925.802744][T30899] ocfs2_acquire_dquot+0x29d/0xb10 [ 925.808356][T30899] dqget+0x778/0xeb0 [ 925.812757][T30899] dquot_set_dqblk+0x27/0xf90 [ 925.817935][T30899] quota_setquota+0x4d6/0x590 [ 925.823219][T30899] __se_sys_quotactl+0x28b/0x6f0 [ 925.828657][T30899] do_syscall_64+0x4c/0xa0 [ 925.833576][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 925.840053][T30899] [ 925.840053][T30899] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 925.847671][T30899] __mutex_lock_common+0x1e3/0x2400 [ 925.853372][T30899] mutex_lock_nested+0x17/0x20 [ 925.858638][T30899] dquot_commit+0x5a/0x410 [ 925.863556][T30899] ext4_write_dquot+0x1f0/0x360 [ 925.868906][T30899] mark_all_dquot_dirty+0xf9/0x400 [ 925.874520][T30899] __dquot_alloc_space+0x5d0/0xe20 [ 925.880131][T30899] ext4_mb_new_blocks+0xf81/0x4980 [ 925.885743][T30899] ext4_ext_map_blocks+0x191c/0x6580 [ 925.891529][T30899] ext4_map_blocks+0x98e/0x1b30 [ 925.896879][T30899] _ext4_get_block+0x1e7/0x540 [ 925.902139][T30899] ext4_block_write_begin+0x61b/0x1220 [ 925.908097][T30899] ext4_write_begin+0x6c8/0x15d0 [ 925.913621][T30899] ext4_da_write_begin+0x43b/0xb40 [ 925.919234][T30899] __page_symlink+0x102/0x200 [ 925.924847][T30899] ext4_symlink+0x8bd/0xca0 [ 925.929848][T30899] vfs_symlink+0x247/0x3d0 [ 925.934851][T30899] do_symlinkat+0x1ab/0x6b0 [ 925.939852][T30899] __x64_sys_symlink+0x7a/0x90 [ 925.945113][T30899] do_syscall_64+0x4c/0xa0 [ 925.950027][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 925.956416][T30899] [ 925.956416][T30899] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 925.964058][T30899] down_write+0x38/0x60 [ 925.968713][T30899] ext4_truncate+0x97f/0x10f0 [ 925.973890][T30899] ext4_setattr+0xffe/0x19e0 [ 925.978983][T30899] notify_change+0xbcd/0xee0 [ 925.984074][T30899] do_truncate+0x1ac/0x240 [ 925.988990][T30899] do_sys_ftruncate+0x31b/0x3d0 [ 925.994339][T30899] do_syscall_64+0x4c/0xa0 [ 925.999436][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 926.005928][T30899] [ 926.005928][T30899] -> #2 (jbd2_handle){++++}-{0:0}: [ 926.013211][T30899] jbd2_log_wait_commit+0x168/0x4c0 [ 926.018922][T30899] jbd2_journal_stop+0x818/0xd20 [ 926.024361][T30899] ocfs2_commit_trans+0xc2/0x240 [ 926.029807][T30899] ocfs2_complete_local_alloc_recovery+0x2d4/0x580 [ 926.036896][T30899] ocfs2_complete_recovery+0x6f5/0x2120 [ 926.042945][T30899] process_one_work+0x85f/0x1010 [ 926.048383][T30899] worker_thread+0xaa6/0x1290 [ 926.053560][T30899] kthread+0x436/0x520 [ 926.058127][T30899] ret_from_fork+0x1f/0x30 [ 926.063040][T30899] [ 926.063040][T30899] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 926.071523][T30899] down_read+0x44/0x2e0 [ 926.076188][T30899] ocfs2_start_trans+0x3a6/0x6f0 [ 926.081712][T30899] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 926.087931][T30899] ocfs2_dismount_volume+0x1e1/0x8a0 [ 926.093719][T30899] generic_shutdown_super+0x130/0x300 [ 926.099590][T30899] kill_block_super+0x7c/0xe0 [ 926.104862][T30899] deactivate_locked_super+0x93/0xf0 [ 926.110658][T30899] cleanup_mnt+0x42d/0x4e0 [ 926.115594][T30899] task_work_run+0x125/0x1a0 [ 926.120683][T30899] exit_to_user_mode_loop+0x10f/0x130 [ 926.126556][T30899] exit_to_user_mode_prepare+0xee/0x180 [ 926.132624][T30899] syscall_exit_to_user_mode+0x16/0x40 [ 926.138603][T30899] do_syscall_64+0x58/0xa0 [ 926.143530][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 926.149924][T30899] [ 926.149924][T30899] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 926.157385][T30899] __lock_acquire+0x2c42/0x7d10 [ 926.162737][T30899] lock_acquire+0x19e/0x400 [ 926.167748][T30899] ocfs2_start_trans+0x2a7/0x6f0 [ 926.173185][T30899] ocfs2_acquire_dquot+0x688/0xb10 [ 926.178795][T30899] dqget+0x778/0xeb0 [ 926.183191][T30899] dquot_set_dqblk+0x27/0xf90 [ 926.188366][T30899] quota_setquota+0x4d6/0x590 [ 926.193538][T30899] __se_sys_quotactl+0x28b/0x6f0 [ 926.198973][T30899] do_syscall_64+0x4c/0xa0 [ 926.203884][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 926.210273][T30899] [ 926.210273][T30899] other info that might help us debug this: [ 926.210273][T30899] [ 926.220476][T30899] Chain exists of: [ 926.220476][T30899] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 926.220476][T30899] [ 926.237398][T30899] Possible unsafe locking scenario: [ 926.237398][T30899] [ 926.244824][T30899] CPU0 CPU1 [ 926.250172][T30899] ---- ---- [ 926.255514][T30899] lock(&ocfs2_quota_ip_alloc_sem_key); [ 926.261145][T30899] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 926.270933][T30899] lock(&ocfs2_quota_ip_alloc_sem_key); [ 926.279082][T30899] lock(sb_internal#3); [ 926.283314][T30899] [ 926.283314][T30899] *** DEADLOCK *** [ 926.283314][T30899] [ 926.291431][T30899] 4 locks held by syz.2.12033/30899: [ 926.296692][T30899] #0: ffff88807bda20e0 (&type->s_umount_key#100){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 926.306948][T30899] #1: ffff888072b3c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28b/0xb10 [ 926.316924][T30899] #2: ffff888056872648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 926.329942][T30899] #3: ffff8880568722e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 926.341217][T30899] [ 926.341217][T30899] stack backtrace: [ 926.347084][T30899] CPU: 1 PID: 30899 Comm: syz.2.12033 Not tainted syzkaller #0 [ 926.354603][T30899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 926.364636][T30899] Call Trace: [ 926.367896][T30899] [ 926.370806][T30899] dump_stack_lvl+0x188/0x250 [ 926.375466][T30899] ? load_image+0x400/0x400 [ 926.379951][T30899] ? show_regs_print_info+0x20/0x20 [ 926.385144][T30899] ? print_circular_bug+0x12b/0x1a0 [ 926.390330][T30899] check_noncircular+0x296/0x330 [ 926.395243][T30899] ? add_chain_block+0x940/0x940 [ 926.400156][T30899] ? lockdep_lock+0xf1/0x1f0 [ 926.404730][T30899] ? mark_lock+0x94/0x320 [ 926.409036][T30899] __lock_acquire+0x2c42/0x7d10 [ 926.413869][T30899] ? verify_lock_unused+0x140/0x140 [ 926.419053][T30899] ? verify_lock_unused+0x140/0x140 [ 926.424226][T30899] ? quota_setquota+0x4d6/0x590 [ 926.429058][T30899] ? verify_lock_unused+0x140/0x140 [ 926.434759][T30899] lock_acquire+0x19e/0x400 [ 926.439247][T30899] ? ocfs2_acquire_dquot+0x688/0xb10 [ 926.444517][T30899] ? __might_sleep+0xf0/0xf0 [ 926.449088][T30899] ? do_raw_spin_lock+0x128/0x2f0 [ 926.454099][T30899] ? read_lock_is_recursive+0x10/0x10 [ 926.459450][T30899] ? __rwlock_init+0x140/0x140 [ 926.464196][T30899] ? do_raw_spin_unlock+0x11d/0x230 [ 926.469374][T30899] ocfs2_start_trans+0x2a7/0x6f0 [ 926.474290][T30899] ? ocfs2_acquire_dquot+0x688/0xb10 [ 926.479566][T30899] ? ocfs2_recovery_exit+0x50/0x50 [ 926.484651][T30899] ? do_raw_spin_unlock+0x11d/0x230 [ 926.489824][T30899] ? _raw_spin_unlock+0x24/0x40 [ 926.494654][T30899] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 926.499832][T30899] ocfs2_acquire_dquot+0x688/0xb10 [ 926.504924][T30899] ? ocfs2_destroy_dquot+0x40/0x40 [ 926.510015][T30899] dqget+0x778/0xeb0 [ 926.513890][T30899] dquot_set_dqblk+0x27/0xf90 [ 926.518552][T30899] quota_setquota+0x4d6/0x590 [ 926.523205][T30899] ? quota_getnextquota+0x4a0/0x4a0 [ 926.528383][T30899] ? bpf_lsm_capable+0x5/0x10 [ 926.533130][T30899] ? do_quotactl+0x4f3/0x710 [ 926.537704][T30899] __se_sys_quotactl+0x28b/0x6f0 [ 926.542887][T30899] ? __x64_sys_quotactl+0xa0/0xa0 [ 926.547891][T30899] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 926.553952][T30899] ? lock_chain_count+0x20/0x20 [ 926.558781][T30899] ? vtime_user_exit+0x2c8/0x3e0 [ 926.563702][T30899] ? lockdep_hardirqs_on+0x94/0x140 [ 926.568879][T30899] do_syscall_64+0x4c/0xa0 [ 926.573272][T30899] ? clear_bhb_loop+0x30/0x80 [ 926.577929][T30899] ? clear_bhb_loop+0x30/0x80 [ 926.582713][T30899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 926.588584][T30899] RIP: 0033:0x7f2d0d3cccb9 [ 926.593162][T30899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.612832][T30899] RSP: 002b:00007f2d0b628028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 926.621229][T30899] RAX: ffffffffffffffda RBX: 00007f2d0d647fa0 RCX: 00007f2d0d3cccb9 [ 926.629181][T30899] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffff80000800 [ 926.637130][T30899] RBP: 00007f2d0d43abf7 R08: 0000000000000000 R09: 0000000000000000 [ 926.645078][T30899] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 926.653114][T30899] R13: 00007f2d0d648038 R14: 00007f2d0d647fa0 R15: 00007ffe6a6646a8 [ 926.661069][T30899] [ 926.664145][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.675534][T30945] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12053'. [ 926.695857][T30945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12053'. [ 926.724695][T30945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12053'. [ 926.739398][ T4521] ocfs2: Unmounting device (7,2) on (node local) [ 926.782372][T12537] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 926.791252][T12537] usb 5-1: config 0 has no interface number 1 [ 926.797328][T12537] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 926.807549][T12537] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 926.916881][T12537] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 926.925938][T12537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 926.934215][T12537] usb 5-1: SerialNumber: syz [ 926.939843][T12537] usb 5-1: config 0 descriptor?? [ 926.982001][T12537] usb 5-1: Found UVC 0.00 device (0002:0000) [ 926.989051][T12537] usb 5-1: No valid video chain found. [ 927.198707][T12537] usb 5-1: USB disconnect, device number 77