last executing test programs: 3.175838153s ago: executing program 3 (id=6164): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000000c0)={0x0, 0x6, 0x201a}) 2.956290981s ago: executing program 0 (id=6169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.891970966s ago: executing program 3 (id=6170): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, 0x0}) 2.708337421s ago: executing program 3 (id=6174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="487000000661070008000a007a"], 0x28}}, 0x400c110) 2.707801791s ago: executing program 0 (id=6175): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:* 1'], 0x8) 2.498429858s ago: executing program 0 (id=6179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000080a01000000000000000000010000000900010073797a3000000000090002"], 0x4b0}}, 0x0) 2.450408401s ago: executing program 3 (id=6180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a6287c3a13a35e", 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.248490268s ago: executing program 0 (id=6184): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x160, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) 2.073809782s ago: executing program 0 (id=6187): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 1.899158316s ago: executing program 2 (id=6190): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000200)={0x0, [0x9, 0xffff1339, 0x5], [{0x0, 0x6}, {0x33, 0x88}, {0x1, 0xffff, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0xfffffefc}, {}, {0xea1, 0x9}, {0x0, 0xfff}, {}, {0x2}, {0x1, 0x8}, {0x0, 0x1}], 0x4}) 1.770103187s ago: executing program 4 (id=6192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000071f000/0x1000)=nil, 0x1000, 0x16) 1.694522863s ago: executing program 2 (id=6193): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1.575955182s ago: executing program 1 (id=6194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001180)=@newsa={0x144, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@remote, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@local, 0xfffffffc, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x61}, [@algo_aead={0x4c, 0x12, {{'authencesn(sha224-ce,pcbc(fcrypt-generic))\x00'}, 0x0, 0x80}}, @extra_flags={0x8, 0x18, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) 1.575750252s ago: executing program 2 (id=6195): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f00000000c0)=0x40, 0x4) 1.468017501s ago: executing program 1 (id=6196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x15, 0x28, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x93}}, 0x0) 1.436855263s ago: executing program 2 (id=6197): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"b9322b534f61cd1848a76d94f0ba2078"}}}}, 0x118) 1.318926493s ago: executing program 1 (id=6198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000004000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0xac}}, 0x2008c082) 1.286271046s ago: executing program 3 (id=6199): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0xffffffffffffffff, 0x0) 1.266900487s ago: executing program 2 (id=6200): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.11124181s ago: executing program 3 (id=6201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100021d9167204f17316a3f260102030109021200010000000009044976c2f0b8b84370"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 990.60718ms ago: executing program 2 (id=6202): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000040)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c000a33097e3c0554998cc9293afe2700615697304b94a3fa29f1ef3267d61c70a16251609bcc8c52a2b5910ff7dff1d13f9aac59b6447a040d7854d9d0961d7668dd1bb24fdc5902085b2331358709b13ce6ff3083c55d4fcf42eef8a3cdbf2881c4842113bc3c996fd04a4399e25f50a09b7af5dca0390fa320a606000000dde8e7c247b46963d1ebe47233d2e8e708dab7afe4aa69eccf1fe0f2b9739c07f2d28fc5da1b8b269817943302f9e69b78844eb7e466856fb3dbf07cbdecc9a7cf16001bd55e7435642bbc83a20deefa829e58364c7570d6bc94446efc868c1eabf570827fbf4590942d7a096a33f03cf8f738f2892068cf774abc98058c4c15de87ed72620039c900ed3a17399de0c49880925820bc9f5f2c69df38b542a5a4ade2401e49b980b5795c81d6a0"], 0x0, 0x4703, &(0x7f0000008f40)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 988.23441ms ago: executing program 1 (id=6203): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") 807.905584ms ago: executing program 4 (id=6204): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) 630.330399ms ago: executing program 1 (id=6205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[{0x408, 0x1, 0x1, "d3d0142e1eb6c2736bb5cac7f00d1da21aa536f443e0cb6a8b1822514e19762f7aa959193d702b82166ab8a1b509d8036fdc08275b310cfba2d358a4af633aa0dcaf343df1b782441d3bedc767b90724b9b213839509ae57707461455039796c0dfa569d11d7c9e80d876bf18cbe6ed5c178a8bd4328b1d8cbfc6a08cc6ab81baf60c1da39e5c35f1a54486e23996372fb9532aa0a4a975addc88064c749afd82f0ac6768d50fcbde817da22e1bdf8623e58a170c300615de4f0de2ca98243c8cdda8a749dd5eacbb15b510c6640585c7f60251c171b654519c86f06557d7bc8a2d558c706d4c17fd6740252145cb3f10a56eaa6e97fac7dbcdd6c749d9c5422d5d32237998ac5e35c1bf709c24033162ad0e73562b3551cf0a0952ef61a1fe72b8d7e80eab34b0d70ddb892a185987d9571948719f50c963eb2dc67c1071bd589520ddf0f156bd58131ee2a9c836fedbf423191c464a4a1d21c72ebcf39f4cb7ab7c3514de2b0efc810a713bddff23f3fb2359b84938f523d79671b74fd8ff647a0887497f920a8881e4d261b06002954cfa6d37745e02e112b2695930ec149f10a5753812bda5aee81b90f59fc831443ca16177cafd70c3ece75667d1545c20219f65b94ba368ed06975b22bd37bf5919b2f767f0539f21f5ce86ab809c671efd07de4121ab5b7ec873aa554e10fd294d6c9400bf464cd0885911618b3cd4397f67223485693f85e35f6c8da40e955a56e12bdbbdcbea9f0b02800fbd764811b47850ac7360c51ac6205561084929838fef6380e00090b6f24388103012b720d462728f3cb30bea32383fb1291799cfc419aff65f360651ae989d180e9b942bdd471504887d810579de463f9eddb0e71b1ab0732184c3b08ea62f52c330f6de899cb720cb016a5bcf61b1d244d01fed24fc8e4a5a3f5c37ce0c2fd8a55a7ddd9890c978af989fd69fef38e4f9a337bfb048ded5d30824bce50c60948d268910f9a6828ee4597e493a9bf0224ecea073baad639834593018b3b72421de4ee2b565376685c4365544668cb0b031b7cc207227b872ea97592806deb01ef04b93edc5a4c569107b24ce4e2a873d311150b9b38663624a9b378e83d62a04b1e08b62f2fe2af92a5a76f0442bc8f415334e3e141649d252c7b25191c685bd48b4d346e91c5fd0cd07fdf8071764dddb6f236c8f7ed11a8a048ed9c1097209866b34e6f1e7834892bd7bc8011f24c12b4ffe413a509d3039ea3c9b0ecccdb7e19d4079cef3296ba7e26bd19c07d037bc5b1a5df7c20e46819475558995ddc2440238b51e02fd8f9117976f46a0b5e80f942671f0b1ad1fc2f9b5c1adceac2c74466ae32bf56dacf0d1f4b5b766384e93b11a8434435ecbb7d98d55efbc53400b4e231a7c31f6e33a4ee1b20d9628d481d0e42fa"}], 0x408}}], 0x1, 0x4000010) 622.953199ms ago: executing program 4 (id=6206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000034000000030a01020000000000000000010000000900030073797a320000000008000a40000000040900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xac}}, 0x0) 494.2059ms ago: executing program 0 (id=6207): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 401.682737ms ago: executing program 4 (id=6208): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 361.769811ms ago: executing program 1 (id=6209): vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="17fc692fa860a6d1742ba9d5b3d82545c9bdb5b36305685debfe6ee0d080", 0x1e}], 0x1, 0xd) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0) 192.903514ms ago: executing program 4 (id=6210): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{}, 0xbf}) 0s ago: executing program 4 (id=6211): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): s (loop1): Can't find valid F2FS filesystem in 1th superblock [ 328.585930][T13648] EXT4-fs (loop0): invalid journal inode [ 328.625855][T13648] EXT4-fs (loop0): can't get journal size [ 328.645885][ T9079] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 328.662051][ T9079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.675751][T13635] F2FS-fs (loop1): invalid crc value [ 328.684388][T13648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 328.705811][T13635] F2FS-fs (loop1): Found nat_bits in checkpoint [ 328.728434][T13648] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz.0.4237: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 328.746166][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.781032][ T9079] usb 5-1: Product: syz [ 328.788089][T13635] F2FS-fs (loop1): recover fsync data on readonly fs [ 328.803272][ T9079] usb 5-1: Manufacturer: syz [ 328.807927][ T9079] usb 5-1: SerialNumber: syz [ 328.843072][T13635] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 328.850465][T13635] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 328.857162][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 328.892445][ T9079] usb 5-1: config 0 descriptor?? [ 328.903462][ T9079] hub 5-1:0.0: bad descriptor, ignoring hub [ 328.909458][ T9079] hub: probe of 5-1:0.0 failed with error -5 [ 328.944459][ T9079] f81232 5-1:0.0: f81534a converter detected [ 328.961264][T13635] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 329.108303][ T9079] usb 5-1: f81534a converter now attached to ttyUSB0 [ 329.337718][T13672] netlink: 'syz.3.4246': attribute type 10 has an invalid length. [ 329.443385][T12953] usb 5-1: USB disconnect, device number 16 [ 329.482011][T12953] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 329.513351][T12953] f81232 5-1:0.0: device disconnected [ 329.876317][T13688] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 329.920579][T13688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.275085][T13704] befs: (nbd0): No write support. Marking filesystem read-only [ 330.334126][ T1334] block nbd0: Attempted send on invalid socket [ 330.340362][ T1334] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.363123][T13704] befs: (nbd0): unable to read superblock [ 330.439511][T13709] loop2: detected capacity change from 0 to 512 [ 330.607997][T13712] loop3: detected capacity change from 0 to 1024 [ 330.642548][T13712] EXT4-fs: Ignoring removed orlov option [ 330.680594][T13712] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 330.731142][T13712] EXT4-fs (loop3): invalid journal inode [ 330.766078][T13712] EXT4-fs (loop3): can't get journal size [ 330.799503][T13712] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 330.854573][T13712] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.4268: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0) [ 330.927067][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 331.294785][T13741] befs: (nbd2): No write support. Marking filesystem read-only [ 331.295554][ T52] block nbd2: Attempted send on invalid socket [ 331.295595][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.295685][T13741] befs: (nbd2): unable to read superblock [ 331.351125][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 331.436686][T13747] autofs4:pid:13747:autofs_fill_super: called with bogus options [ 332.129894][T13777] autofs4:pid:13777:autofs_fill_super: called with bogus options [ 332.674132][T13801] loop1: detected capacity change from 0 to 128 [ 332.824364][T13801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 332.826916][T13773] loop2: detected capacity change from 0 to 32768 [ 332.847799][T13801] ext4 filesystem being mounted at /851/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.028589][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 333.555420][T13832] loop0: detected capacity change from 0 to 128 [ 333.632182][T13832] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 333.673529][T13832] ext4 filesystem being mounted at /862/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.814515][T13844] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 333.890934][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 334.117788][T13858] program syz.3.4336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.209962][T13855] loop4: detected capacity change from 0 to 4096 [ 334.226477][T13860] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4339'. [ 334.257857][T13855] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 334.369851][T13855] ntfs3: loop4: failed to convert "076c" to cp949 [ 334.396400][T13867] loop3: detected capacity change from 0 to 2048 [ 334.448010][T13870] xt_recent: Unsupported userspace flags (000000de) [ 334.463859][T13867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 334.472508][T13867] ext4 filesystem being mounted at /850/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.495901][T13873] x_tables: duplicate underflow at hook 2 [ 334.737881][T13867] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4341: bg 0: block 345: padding at end of block bitmap is not set [ 334.785575][T13882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4347'. [ 334.883061][T13867] EXT4-fs (loop3): Remounting filesystem read-only [ 335.057861][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 336.687106][T13924] loop1: detected capacity change from 0 to 32768 [ 336.897473][T13941] loop4: detected capacity change from 0 to 32768 [ 337.046952][T13941] XFS (loop4): Mounting V5 Filesystem [ 337.047162][T13930] loop2: detected capacity change from 0 to 40427 [ 337.061266][T13930] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 337.071110][T13930] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 337.081471][T13930] F2FS-fs (loop2): invalid crc value [ 337.090703][T13930] F2FS-fs (loop2): Found nat_bits in checkpoint [ 337.148731][T13941] XFS (loop4): Ending clean mount [ 337.254559][T13930] F2FS-fs (loop2): recover fsync data on readonly fs [ 337.293685][ T4266] XFS (loop4): Unmounting Filesystem [ 337.347345][T13930] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 337.393197][T13930] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 337.519767][T13980] loop0: detected capacity change from 0 to 2048 [ 337.542990][T13930] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 337.601185][T13982] loop1: detected capacity change from 0 to 512 [ 337.689472][T13980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 337.708603][T13980] ext4 filesystem being mounted at /877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.737121][T13982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 337.744739][T13980] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4391: bg 0: block 345: padding at end of block bitmap is not set [ 337.761613][T13982] ext4 filesystem being mounted at /866/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.917115][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 337.926949][T13980] EXT4-fs (loop0): Remounting filesystem read-only [ 338.098753][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 338.400798][T14010] xt_recent: Unsupported userspace flags (000000de) [ 338.482033][T14004] loop1: detected capacity change from 0 to 4096 [ 338.517248][T14004] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 338.591555][T14004] ntfs3: loop1: failed to convert "076c" to cp949 [ 339.626629][ T26] audit: type=1326 audit(1755834752.761:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14042 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 339.649088][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.702505][T14016] loop3: detected capacity change from 0 to 40427 [ 339.715084][ T26] audit: type=1326 audit(1755834752.761:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14042 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 339.738857][T14016] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 339.761904][T14016] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 339.791205][T14016] F2FS-fs (loop3): invalid crc value [ 339.833774][ T26] audit: type=1326 audit(1755834752.821:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14042 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 339.857094][ T26] audit: type=1326 audit(1755834752.821:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14042 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 339.880136][ T26] audit: type=1326 audit(1755834752.821:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14042 comm="syz.2.4416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 339.883916][T14016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 339.981637][T14051] loop2: detected capacity change from 0 to 256 [ 340.060090][T14051] FAT-fs (loop2): Directory bread(block 64) failed [ 340.086061][T14051] FAT-fs (loop2): Directory bread(block 65) failed [ 340.105463][T14016] F2FS-fs (loop3): recover fsync data on readonly fs [ 340.113415][T14051] FAT-fs (loop2): Directory bread(block 66) failed [ 340.128896][T14051] FAT-fs (loop2): Directory bread(block 67) failed [ 340.139244][T14012] loop0: detected capacity change from 0 to 65536 [ 340.148115][T14016] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 340.155989][T14016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 340.166394][T14051] FAT-fs (loop2): Directory bread(block 68) failed [ 340.183261][T14051] FAT-fs (loop2): Directory bread(block 69) failed [ 340.228788][T14051] FAT-fs (loop2): Directory bread(block 70) failed [ 340.263212][T14051] FAT-fs (loop2): Directory bread(block 71) failed [ 340.285348][T14051] FAT-fs (loop2): Directory bread(block 72) failed [ 340.313599][T14012] XFS (loop0): Mounting V5 Filesystem [ 340.341258][T14051] FAT-fs (loop2): Directory bread(block 73) failed [ 340.387721][T14012] XFS (loop0): Ending clean mount [ 340.395398][T14016] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 340.510402][T14073] IPv6: NLM_F_REPLACE set, but no existing node found! [ 340.574159][T14012] syz.0.4402 (14012) used greatest stack depth: 19680 bytes left [ 340.610560][ T4265] XFS (loop0): Unmounting Filesystem [ 341.315756][T14098] loop4: detected capacity change from 0 to 512 [ 341.459440][T14098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 341.473165][ T126] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 341.533206][T14098] ext4 filesystem being mounted at /884/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.649014][T14109] IPv6: NLM_F_REPLACE set, but no existing node found! [ 341.667491][ T126] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.693575][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.731330][ T126] usb 3-1: Product: syz [ 341.742998][ T126] usb 3-1: Manufacturer: syz [ 341.747787][ T126] usb 3-1: SerialNumber: syz [ 341.762234][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 341.766207][ T126] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.888365][T14118] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4446'. [ 341.948997][ T126] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.137458][T14127] QAT: Stopping all acceleration devices. [ 342.329261][T14133] loop4: detected capacity change from 0 to 256 [ 342.405876][T12954] usb 3-1: USB disconnect, device number 18 [ 342.484869][T14133] FAT-fs (loop4): Directory bread(block 64) failed [ 342.491471][T14133] FAT-fs (loop4): Directory bread(block 65) failed [ 342.563120][T14133] FAT-fs (loop4): Directory bread(block 66) failed [ 342.570425][T14133] FAT-fs (loop4): Directory bread(block 67) failed [ 342.592750][T14133] FAT-fs (loop4): Directory bread(block 68) failed [ 342.600712][T14143] loop3: detected capacity change from 0 to 64 [ 342.609216][T14133] FAT-fs (loop4): Directory bread(block 69) failed [ 342.616933][T14133] FAT-fs (loop4): Directory bread(block 70) failed [ 342.624563][T14133] FAT-fs (loop4): Directory bread(block 71) failed [ 342.631364][T14133] FAT-fs (loop4): Directory bread(block 72) failed [ 342.654019][T14133] FAT-fs (loop4): Directory bread(block 73) failed [ 342.846257][T14147] loop3: detected capacity change from 0 to 16 [ 342.853773][T12953] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 342.879227][T14147] erofs: (device loop3): mounted with root inode @ nid 36. [ 342.962580][T14147] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 343.023173][ T126] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 343.031409][ T126] ath9k_htc: Failed to initialize the device [ 343.064261][T12954] usb 3-1: ath9k_htc: USB layer deinitialized [ 343.071749][T12953] usb 1-1: Using ep0 maxpacket: 16 [ 343.079656][T12953] usb 1-1: config 0 has no interfaces? [ 343.098188][T12953] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 343.125346][T12953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.151191][T12953] usb 1-1: Product: syz [ 343.165509][T12953] usb 1-1: Manufacturer: syz [ 343.180230][T12953] usb 1-1: SerialNumber: syz [ 343.197696][T12953] r8152-cfgselector 1-1: config 0 descriptor?? [ 343.433804][T12953] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 343.538772][T14170] xt_bpf: check failed: parse error [ 343.657532][T12954] usb 1-1: USB disconnect, device number 11 [ 344.170779][T14196] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 344.503350][T12954] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 344.581429][T14216] QAT: Stopping all acceleration devices. [ 344.703173][T12954] usb 4-1: Using ep0 maxpacket: 32 [ 344.728805][T12954] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 344.763113][T12954] usb 4-1: config 0 has no interface number 0 [ 344.779578][T12954] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 344.811631][T12954] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024 [ 344.850977][T12954] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 344.893614][T12954] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 344.922087][T12954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.943363][T12954] usb 4-1: Product: syz [ 344.951705][T12954] usb 4-1: Manufacturer: syz [ 344.969171][T12954] usb 4-1: SerialNumber: syz [ 344.989433][T12954] usb 4-1: config 0 descriptor?? [ 345.011189][T14199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.023240][T14199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.313292][T12954] usb 4-1: USB disconnect, device number 17 [ 345.634670][T14249] loop0: detected capacity change from 0 to 16 [ 345.662465][T14249] erofs: (device loop0): mounted with root inode @ nid 36. [ 345.744095][T14249] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 345.855002][T14210] loop2: detected capacity change from 0 to 65536 [ 346.034593][T14210] XFS (loop2): Mounting V5 Filesystem [ 346.043101][T14267] loop1: detected capacity change from 0 to 64 [ 346.176943][T14210] XFS (loop2): Ending clean mount [ 346.278078][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4522'. [ 346.432008][ T4269] XFS (loop2): Unmounting Filesystem [ 346.856741][T14300] loop0: detected capacity change from 0 to 256 [ 346.953391][T14300] FAT-fs (loop0): Directory bread(block 64) failed [ 346.959978][T14300] FAT-fs (loop0): Directory bread(block 65) failed [ 347.053264][T14300] FAT-fs (loop0): Directory bread(block 66) failed [ 347.079504][T14308] loop4: detected capacity change from 0 to 128 [ 347.086161][T14300] FAT-fs (loop0): Directory bread(block 67) failed [ 347.092838][T14300] FAT-fs (loop0): Directory bread(block 68) failed [ 347.122203][T14308] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 347.143131][T14300] FAT-fs (loop0): Directory bread(block 69) failed [ 347.173288][T14300] FAT-fs (loop0): Directory bread(block 70) failed [ 347.179873][T14300] FAT-fs (loop0): Directory bread(block 71) failed [ 347.213344][T14300] FAT-fs (loop0): Directory bread(block 72) failed [ 347.230849][T14300] FAT-fs (loop0): Directory bread(block 73) failed [ 347.251044][ T4266] sysv_free_block: flc_count > flc_size [ 347.262788][T14312] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.273462][ T4266] sysv_free_block: flc_count > flc_size [ 347.280893][ T4266] sysv_free_block: flc_count > flc_size [ 347.283383][T14310] loop3: detected capacity change from 0 to 2048 [ 347.301546][ T4266] sysv_free_block: flc_count > flc_size [ 347.338309][ T4266] sysv_free_block: flc_count > flc_size [ 347.351866][ T4266] sysv_free_block: flc_count > flc_size [ 347.362145][ T4266] sysv_free_block: flc_count > flc_size [ 347.375975][T14314] xt_bpf: check failed: parse error [ 347.405081][ T4266] sysv_free_block: flc_count > flc_size [ 347.421608][ T4266] sysv_free_block: flc_count > flc_size [ 347.429446][T14310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.453229][ T4266] sysv_free_block: flc_count > flc_size [ 347.462878][ T4266] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 347.484743][T14310] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376) [ 347.557401][T14310] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has too big (65320) entry at pos 0 [ 348.283149][ T9079] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 348.483212][ T9079] usb 4-1: Using ep0 maxpacket: 16 [ 348.489959][ T9079] usb 4-1: config 0 has no interfaces? [ 348.515098][ T9079] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 348.553648][ T9079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.561688][ T9079] usb 4-1: Product: syz [ 348.584163][ T9079] usb 4-1: Manufacturer: syz [ 348.593629][ T9079] usb 4-1: SerialNumber: syz [ 348.619921][ T9079] r8152-cfgselector 4-1: config 0 descriptor?? [ 348.758497][T14368] loop4: detected capacity change from 0 to 24 [ 348.778820][T14370] netlink: 'syz.1.4567': attribute type 4 has an invalid length. [ 348.781306][T14368] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 348.830339][T14368] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 348.849131][ T9079] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 349.079478][ T126] usb 4-1: USB disconnect, device number 18 [ 349.185614][T14381] No such timeout policy "syz1" [ 349.503436][T14393] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4578'. [ 349.512523][T14393] 0X: renamed from caif0 [ 349.536912][T14397] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.559154][T14393] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 349.656503][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4582'. [ 349.679367][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4582'. [ 349.955614][T14411] loop2: detected capacity change from 0 to 2048 [ 350.029898][T14411] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 350.101550][T14411] UDF-fs: unknown compression code (0) [ 350.267479][T14427] loop0: detected capacity change from 0 to 512 [ 350.324091][T14427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 350.461344][T14427] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 350.513436][T14427] ext4 filesystem being mounted at /912/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.540672][T14427] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.4595: corrupted xattr block 19 [ 350.558696][T14442] loop2: detected capacity change from 0 to 512 [ 350.576838][T14427] EXT4-fs (loop0): Remounting filesystem read-only [ 350.586099][T14442] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 350.654932][T14442] EXT4-fs (loop2): 1 truncate cleaned up [ 350.668550][T14442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.031095][T14455] netlink: 'syz.4.4609': attribute type 4 has an invalid length. [ 351.220378][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 351.241008][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 351.885090][ T9080] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 351.964600][T14491] loop2: detected capacity change from 0 to 16 [ 352.012646][T14491] erofs: (device loop2): mounted with root inode @ nid 36. [ 352.087161][ T9080] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 352.107336][T14491] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 352.118693][ T9080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.137584][ T9080] usb 5-1: Product: syz [ 352.141801][ T9080] usb 5-1: Manufacturer: syz [ 352.161927][T14491] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 352.192460][ T9080] usb 5-1: SerialNumber: syz [ 352.208632][ T9080] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 352.246291][T14491] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 352.286203][ T26] audit: type=1800 audit(1755834765.421:97): pid=14491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4624" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 352.291846][ T9080] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.532606][ C0] usb 5-1: ath9k_htc: invalid pkt_len (ffd7) [ 352.605793][T14504] loop1: detected capacity change from 0 to 4096 [ 352.744775][T12954] usb 5-1: USB disconnect, device number 17 [ 353.151804][T14531] loop1: detected capacity change from 0 to 64 [ 353.191049][T14531] MINIX-fs: mounting file system with errors, running fsck is recommended [ 353.303035][T14531] Trying to free block not in datazone [ 353.309287][T14531] Trying to free block not in datazone [ 353.382998][T14531] Trying to free block not in datazone [ 353.388515][T14531] Trying to free block not in datazone [ 353.423303][ T9080] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 353.432566][T14531] Trying to free block not in datazone [ 353.433515][ T9080] ath9k_htc: Failed to initialize the device [ 353.441973][T14543] loop4: detected capacity change from 0 to 256 [ 353.467832][T14545] loop3: detected capacity change from 0 to 256 [ 353.474516][T14531] Trying to free block not in datazone [ 353.484581][T12954] usb 5-1: ath9k_htc: USB layer deinitialized [ 353.492146][T14531] Trying to free block not in datazone [ 353.521775][T14531] Trying to free block not in datazone [ 353.548464][T14543] FAT-fs (loop4): Directory bread(block 64) failed [ 353.592577][T14545] FAT-fs (loop3): Directory bread(block 64) failed [ 353.611187][T14543] FAT-fs (loop4): Directory bread(block 65) failed [ 353.630724][T14543] FAT-fs (loop4): Directory bread(block 66) failed [ 353.643179][T14545] FAT-fs (loop3): Directory bread(block 65) failed [ 353.681305][T14545] FAT-fs (loop3): Directory bread(block 66) failed [ 353.683953][T14543] FAT-fs (loop4): Directory bread(block 67) failed [ 353.721753][T14545] FAT-fs (loop3): Directory bread(block 67) failed [ 353.751895][T14543] FAT-fs (loop4): Directory bread(block 68) failed [ 353.762301][T14545] FAT-fs (loop3): Directory bread(block 68) failed [ 353.789759][T14543] FAT-fs (loop4): Directory bread(block 69) failed [ 353.792574][T14545] FAT-fs (loop3): Directory bread(block 69) failed [ 353.819969][T14543] FAT-fs (loop4): Directory bread(block 70) failed [ 353.841908][T14545] FAT-fs (loop3): Directory bread(block 70) failed [ 353.843067][T14543] FAT-fs (loop4): Directory bread(block 71) failed [ 353.855565][T14547] loop2: detected capacity change from 0 to 4096 [ 353.862133][T14545] FAT-fs (loop3): Directory bread(block 71) failed [ 353.889816][T14547] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 353.895502][T14543] FAT-fs (loop4): Directory bread(block 72) failed [ 353.904583][T14545] FAT-fs (loop3): Directory bread(block 72) failed [ 353.936657][T14545] FAT-fs (loop3): Directory bread(block 73) failed [ 353.951872][T14543] FAT-fs (loop4): Directory bread(block 73) failed [ 354.980755][T14578] xt_CT: No such helper "pptp" [ 355.092364][T14595] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4675'. [ 355.143824][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'. [ 355.408205][T14612] loop0: detected capacity change from 0 to 512 [ 355.541383][T14612] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 355.584892][T14612] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 355.715389][T14612] EXT4-fs (loop0): 1 truncate cleaned up [ 355.724657][T14612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 355.793704][T14612] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.4683: Logical block already allocated [ 355.921855][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 356.109471][T14645] loop4: detected capacity change from 0 to 512 [ 356.139322][T14645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.206522][T14645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 356.237211][T14645] ext4 filesystem being mounted at /935/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.288999][T14649] loop1: detected capacity change from 0 to 4096 [ 356.333889][T14645] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 356.345292][ T126] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 356.353374][T14645] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 356.411502][T14653] sctp: [Deprecated]: syz.0.4700 (pid 14653) Use of int in max_burst socket option. [ 356.411502][T14653] Use struct sctp_assoc_value instead [ 356.423033][T14645] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.4697: Failed to acquire dquot type 1 [ 356.503617][T14619] loop3: detected capacity change from 0 to 32768 [ 356.541573][T14655] netlink: 'syz.0.4701': attribute type 1 has an invalid length. [ 356.549686][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 356.557312][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.586449][ T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 356.626486][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 356.633746][ T126] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 356.652295][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.661453][ T126] usb 3-1: Product: syz [ 356.666196][ T126] usb 3-1: Manufacturer: syz [ 356.670901][ T126] usb 3-1: SerialNumber: syz [ 356.735986][ T126] usb 3-1: config 0 descriptor?? [ 357.062181][T14667] netlink: 'syz.4.4707': attribute type 13 has an invalid length. [ 357.179599][T12954] usb 3-1: USB disconnect, device number 19 [ 357.497038][T14687] loop0: detected capacity change from 0 to 8 [ 357.521737][T14687] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 357.546307][ T4768] udevd[4768]: incorrect cramfs checksum on /dev/loop0 [ 357.565095][T14687] cramfs: Error -3 while decompressing! [ 357.569191][T14690] loop3: detected capacity change from 0 to 256 [ 357.571220][T14687] cramfs: ffffffff96d721a8(26)->ffff88804d61d000(4096) [ 357.638158][T14687] cramfs: Error -3 while decompressing! [ 357.647243][T14687] cramfs: ffffffff96d721c2(26)->ffff88804e1f6000(4096) [ 357.668972][T14687] cramfs: Error -3 while decompressing! [ 357.670915][T14686] loop4: detected capacity change from 0 to 4096 [ 357.679117][T14687] cramfs: ffffffff96d721dc(16)->ffff88804e1f7000(4096) [ 357.724425][T14687] cramfs: Error -3 while decompressing! [ 357.730031][T14687] cramfs: ffffffff96d721a8(26)->ffff88804d61d000(4096) [ 357.819308][ T26] audit: type=1800 audit(1755834770.951:98): pid=14687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4717" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 357.940346][T14697] loop2: detected capacity change from 0 to 2048 [ 357.989925][T14699] loop1: detected capacity change from 0 to 2048 [ 358.016471][T14700] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.054509][T14697] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 358.140095][T14703] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.145997][T14697] Remounting filesystem read-only [ 358.151074][T14699] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 358.247085][T14699] Remounting filesystem read-only [ 358.247476][T14707] (syz.3.4726,14707,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 358.302841][ T4269] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 358.422289][T14707] (syz.3.4726,14707,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 358.761252][T14721] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 358.869158][T14725] loop3: detected capacity change from 0 to 2048 [ 358.930565][T14725] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 358.951392][T14727] loop0: detected capacity change from 0 to 4096 [ 359.005224][T14731] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.005468][T14725] syz.3.4733: attempt to access beyond end of device [ 359.005468][T14725] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 359.035360][T14732] loop1: detected capacity change from 0 to 256 [ 359.153592][T14732] FAT-fs (loop1): Directory bread(block 64) failed [ 359.160192][T14732] FAT-fs (loop1): Directory bread(block 65) failed [ 359.168384][T14725] syz.3.4733: attempt to access beyond end of device [ 359.168384][T14725] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 359.224334][T14725] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 359.233474][T14732] FAT-fs (loop1): Directory bread(block 66) failed [ 359.270571][T14732] FAT-fs (loop1): Directory bread(block 67) failed [ 359.321326][T14732] FAT-fs (loop1): Directory bread(block 68) failed [ 359.359493][T14732] FAT-fs (loop1): Directory bread(block 69) failed [ 359.374571][T14732] FAT-fs (loop1): Directory bread(block 70) failed [ 359.423037][T14732] FAT-fs (loop1): Directory bread(block 71) failed [ 359.439979][T14732] FAT-fs (loop1): Directory bread(block 72) failed [ 359.460139][T14732] FAT-fs (loop1): Directory bread(block 73) failed [ 359.461946][T14713] loop2: detected capacity change from 0 to 32768 [ 359.913267][ T4946] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 359.968862][T14748] loop3: detected capacity change from 0 to 4096 [ 360.040132][T14748] ntfs: volume version 3.1. [ 360.074530][T12954] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 360.123066][ T4946] usb 1-1: Using ep0 maxpacket: 32 [ 360.130221][ T4946] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 360.149965][T14752] loop4: detected capacity change from 0 to 8192 [ 360.163028][ T4946] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 360.203035][ T4946] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 360.258022][ T4946] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 360.273198][T12954] usb 3-1: Using ep0 maxpacket: 32 [ 360.280254][T12954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.289841][ T4946] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 360.341652][T12954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.355212][ T4946] usb 1-1: config 0 interface 0 has no altsetting 0 [ 360.388520][T12954] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.399486][ T4946] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 360.427052][T12954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.444591][ T4946] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 360.470679][T12954] usb 3-1: config 0 descriptor?? [ 360.474216][ T4946] usb 1-1: Product: syz [ 360.513466][ T4946] usb 1-1: Manufacturer: syz [ 360.518204][ T4946] usb 1-1: SerialNumber: syz [ 360.522594][T12954] hub 3-1:0.0: USB hub found [ 360.542793][ T4946] usb 1-1: config 0 descriptor?? [ 360.560688][ T4946] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 360.621166][ T4946] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 360.733867][T12954] hub 3-1:0.0: 31 ports detected [ 360.740651][T12954] hub 3-1:0.0: insufficient power available to use all downstream ports [ 360.783471][T14742] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 360.813483][ T4946] usb 1-1: USB disconnect, device number 12 [ 360.832209][ T4946] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 360.896752][T14773] netlink: 'syz.1.4758': attribute type 13 has an invalid length. [ 360.940560][T12954] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 360.953141][T12954] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 360.985039][T12954] usbhid 3-1:0.0: can't add hid device: -71 [ 360.991158][T12954] usbhid: probe of 3-1:0.0 failed with error -71 [ 361.043776][T12954] usb 3-1: USB disconnect, device number 20 [ 361.239852][T14783] loop3: detected capacity change from 0 to 4096 [ 361.361674][T14789] loop1: detected capacity change from 0 to 1024 [ 361.412058][T14783] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 361.464253][T14783] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 361.515922][T14789] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 361.553099][T14789] hfsplus: xattr searching failed [ 361.952493][T14806] loop3: detected capacity change from 0 to 4096 [ 361.969687][T14809] loop0: detected capacity change from 0 to 64 [ 362.017255][T14806] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 362.057542][T14806] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 362.086495][T14806] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 362.105083][T14806] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 362.158228][T14806] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 362.219975][T14806] ntfs: volume version 3.1. [ 362.241883][T14806] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 362.289689][T14806] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 362.342609][T14806] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 362.403779][T14806] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 362.461490][T14823] loop1: detected capacity change from 0 to 64 [ 362.514897][T14823] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 362.606837][T14823] syz.1.4783: attempt to access beyond end of device [ 362.606837][T14823] loop1: rw=0, sector=436207626, nr_sectors = 2 limit=64 [ 362.637244][T14825] loop2: detected capacity change from 0 to 512 [ 362.673195][T14823] Buffer I/O error on dev loop1, logical block 218103813, async page read [ 362.682509][T14823] syz.1.4783: attempt to access beyond end of device [ 362.682509][T14823] loop1: rw=0, sector=436207626, nr_sectors = 2 limit=64 [ 362.694543][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4786'. [ 362.704061][T14825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.788859][T14823] Buffer I/O error on dev loop1, logical block 218103813, async page read [ 362.817212][T14825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 362.833541][T14825] ext4 filesystem being mounted at /972/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.871607][T14825] __quota_error: 9 callbacks suppressed [ 362.871625][T14825] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 362.994072][T14825] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 363.052307][T14825] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.4784: Failed to acquire dquot type 1 [ 363.253366][T12954] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 363.269250][T14847] loop3: detected capacity change from 0 to 512 [ 363.270924][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 363.297657][T14847] EXT4-fs (loop3): orphan cleanup on readonly fs [ 363.298302][T14847] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 363.298530][T14847] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 363.298549][T14847] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.4794: Failed to acquire dquot type 1 [ 363.300188][T14847] EXT4-fs (loop3): 1 truncate cleaned up [ 363.320646][T14847] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 363.437466][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 363.447368][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'. [ 363.467103][T12954] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.483061][T12954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.498201][T12954] usb 1-1: Product: syz [ 363.506956][T12954] usb 1-1: Manufacturer: syz [ 363.517236][T12954] usb 1-1: SerialNumber: syz [ 363.545847][T12954] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 363.563931][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 363.654708][T12954] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 363.904584][ C1] usb 1-1: ath9k_htc: invalid pkt_len (ffd7) [ 363.982474][T14872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4806'. [ 364.066595][T14870] loop3: detected capacity change from 0 to 4096 [ 364.116598][T14870] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 364.145589][ T126] usb 1-1: USB disconnect, device number 13 [ 364.264421][T14870] ntfs3: loop3: no free space to extend mft [ 364.703151][T12954] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 364.718204][T14894] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 364.731327][T12954] ath9k_htc: Failed to initialize the device [ 364.743894][ T126] usb 1-1: ath9k_htc: USB layer deinitialized [ 364.783819][ T22] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 364.888766][T14905] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14905 comm: syz.1.4821) [ 364.933920][ T26] audit: type=1800 audit(1755834778.071:103): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4821" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=66667 res=0 errno=0 [ 364.965784][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.003117][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 365.014791][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 365.033847][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.063055][ T22] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 365.094621][ T22] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.144736][ T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.167882][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.194096][ T22] usb 4-1: Product: syz [ 365.203303][ T22] usb 4-1: Manufacturer: syz [ 365.213175][ T22] usb 4-1: SerialNumber: syz [ 365.453590][T14924] netlink: 'syz.1.4831': attribute type 9 has an invalid length. [ 365.470613][ T22] usb 4-1: USB disconnect, device number 19 [ 365.668489][T14935] loop0: detected capacity change from 0 to 128 [ 365.688591][T14937] loop1: detected capacity change from 0 to 256 [ 365.726860][ T4768] udevd[4768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.830182][T14937] FAT-fs (loop1): Directory bread(block 64) failed [ 365.853225][T14937] FAT-fs (loop1): Directory bread(block 65) failed [ 365.880886][T14937] FAT-fs (loop1): Directory bread(block 66) failed [ 365.898827][T14937] FAT-fs (loop1): Directory bread(block 67) failed [ 365.922458][T14937] FAT-fs (loop1): Directory bread(block 68) failed [ 365.931650][T14937] FAT-fs (loop1): Directory bread(block 69) failed [ 365.994240][T14937] FAT-fs (loop1): Directory bread(block 70) failed [ 366.000921][T14937] FAT-fs (loop1): Directory bread(block 71) failed [ 366.049232][T14937] FAT-fs (loop1): Directory bread(block 72) failed [ 366.083315][T14937] FAT-fs (loop1): Directory bread(block 73) failed [ 366.619440][T14970] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 366.661223][T14972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4855'. [ 366.801160][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4858'. [ 366.820790][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4858'. [ 367.153452][T14994] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 367.415484][T15008] netlink: 'syz.2.4871': attribute type 21 has an invalid length. [ 367.463214][T15008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4871'. [ 367.503932][T15008] netlink: 'syz.2.4871': attribute type 1 has an invalid length. [ 367.512057][T15010] netlink: 'syz.4.4872': attribute type 4 has an invalid length. [ 367.722311][T15022] loop3: detected capacity change from 0 to 128 [ 367.771619][T15022] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 367.920309][ T4274] sysv_free_block: flc_count > flc_size [ 367.943648][ T4274] sysv_free_block: flc_count > flc_size [ 367.981072][ T4274] sysv_free_block: flc_count > flc_size [ 368.003020][ T4274] sysv_free_block: flc_count > flc_size [ 368.023138][ T4274] sysv_free_block: flc_count > flc_size [ 368.043065][ T4274] sysv_free_block: flc_count > flc_size [ 368.048794][ T4274] sysv_free_block: flc_count > flc_size [ 368.076349][ T4274] sysv_free_block: flc_count > flc_size [ 368.081948][ T4274] sysv_free_block: flc_count > flc_size [ 368.093027][ T4274] sysv_free_block: flc_count > flc_size [ 368.104925][ T4274] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 368.352067][T15040] loop0: detected capacity change from 0 to 512 [ 368.470757][T15040] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 368.588432][T15040] EXT4-fs (loop0): 1 truncate cleaned up [ 368.595759][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4890'. [ 368.598784][T15040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 368.625398][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'. [ 368.815147][T15024] loop1: detected capacity change from 0 to 40427 [ 368.832586][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 368.868711][T15024] F2FS-fs (loop1): invalid crc value [ 368.925414][T15024] F2FS-fs (loop1): Found nat_bits in checkpoint [ 369.083913][T15024] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 369.413343][T15045] loop2: detected capacity change from 0 to 32768 [ 369.512696][T15077] No such timeout policy "syz1" [ 369.524489][T15045] XFS (loop2): Mounting V5 Filesystem [ 369.636789][T15045] XFS (loop2): Ending clean mount [ 369.793617][ T4269] XFS (loop2): Unmounting Filesystem [ 370.236224][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4917'. [ 370.353083][T15110] loop3: detected capacity change from 0 to 2048 [ 370.449656][T15110] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 370.528705][T15110] UDF-fs: unknown compression code (0) [ 371.488563][T15152] loop0: detected capacity change from 0 to 1024 [ 371.571779][T15128] loop3: detected capacity change from 0 to 32768 [ 371.629495][T15154] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 371.652346][T15128] ERROR: (device loop3): diAllocAG: numfree > numinos [ 371.652346][T15128] [ 371.688031][ T4294] hfsplus: b-tree write err: -5, ino 4 [ 371.699553][T15126] loop4: detected capacity change from 0 to 40427 [ 371.713303][T15128] ERROR: (device loop3): remounting filesystem as read-only [ 371.741434][T15128] ialloc: diAlloc returned -5! [ 371.762660][T15126] F2FS-fs (loop4): invalid crc value [ 371.860989][T15126] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.003530][T15126] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.101777][T15171] loop2: detected capacity change from 0 to 1024 [ 372.221123][T15171] syz.2.4943: attempt to access beyond end of device [ 372.221123][T15171] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 372.413189][T15171] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 372.461134][T15171] syz.2.4943: attempt to access beyond end of device [ 372.461134][T15171] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 372.518144][T15171] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 373.412211][T15221] loop2: detected capacity change from 0 to 64 [ 373.450333][T15221] MINIX-fs: mounting file system with errors, running fsck is recommended [ 373.523531][T15221] Trying to free block not in datazone [ 373.529355][T15221] Trying to free block not in datazone [ 373.601444][T15221] Trying to free block not in datazone [ 373.608928][T15226] loop0: detected capacity change from 0 to 1024 [ 373.623352][T15221] Trying to free block not in datazone [ 373.659602][T15221] Trying to free block not in datazone [ 373.662257][T15229] loop1: detected capacity change from 0 to 256 [ 373.703479][T15221] Trying to free block not in datazone [ 373.709019][T15221] Trying to free block not in datazone [ 373.739965][T15229] exfat: Deprecated parameter 'utf8' [ 373.773328][T15221] Trying to free block not in datazone [ 373.802826][T15229] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 374.212280][T15249] loop2: detected capacity change from 0 to 256 [ 374.363640][T15255] loop4: detected capacity change from 0 to 64 [ 374.688898][T15259] loop0: detected capacity change from 0 to 8192 [ 374.776926][T15259] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.827260][ T52] block nbd4: Attempted send on invalid socket [ 374.833769][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 374.914251][T15259] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 374.933925][T15259] FAT-fs (loop0): Filesystem has been set read-only [ 374.940892][T15259] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 374.949408][T15259] FAT-fs (loop0): error, clusters badly computed (3 != 2) [ 374.957075][T15259] FAT-fs (loop0): error, clusters badly computed (4 != 3) [ 375.246766][T15289] loop3: detected capacity change from 0 to 2048 [ 375.308566][T15295] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.328448][T15289] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 375.375236][T15289] Remounting filesystem read-only [ 375.493088][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 375.714777][ T22] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 375.752444][ T22] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 375.783261][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.839858][T15312] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.841510][ T22] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 375.982080][T15319] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5014'. [ 376.005774][T15318] netlink: 'syz.4.5015': attribute type 2 has an invalid length. [ 376.045059][T15318] netlink: 'syz.4.5015': attribute type 1 has an invalid length. [ 376.132246][T15325] loop1: detected capacity change from 0 to 1024 [ 376.139007][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5017'. [ 376.148696][T15324] netlink: 'syz.2.5017': attribute type 1 has an invalid length. [ 376.331380][ T4293] hfsplus: b-tree write err: -5, ino 4 [ 376.480486][T15339] loop2: detected capacity change from 0 to 24 [ 376.484103][T15337] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5024'. [ 376.503858][T15339] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 376.527870][T15339] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 376.731370][T15341] loop3: detected capacity change from 0 to 4096 [ 376.948938][ T22] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 376.957479][T15349] loop1: detected capacity change from 0 to 4096 [ 376.964124][T15349] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 377.023230][ T22] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 377.049667][ T22] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 377.085083][ T22] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 377.131691][ T22] usb 1-1: USB disconnect, device number 14 [ 377.153093][T15349] ntfs3: loop1: no free space to extend mft [ 377.649468][T15374] loop0: detected capacity change from 0 to 64 [ 378.080789][T15387] loop1: detected capacity change from 0 to 16 [ 378.133326][T15387] erofs: (device loop1): mounted with root inode @ nid 36. [ 378.329815][T15397] loop3: detected capacity change from 0 to 128 [ 378.360399][T15391] loop0: detected capacity change from 0 to 4096 [ 378.459249][T15391] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 378.545773][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.552155][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.582263][T15391] ntfs3: loop0: no free space to extend mft [ 378.606268][T15404] loop2: detected capacity change from 0 to 512 [ 378.648816][T15404] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 378.682766][T15404] EXT4-fs (loop2): orphan cleanup on readonly fs [ 378.710760][T15404] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.5064: Block bitmap for bg 0 marked uninitialized [ 378.742815][T15404] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 378.767230][T15404] EXT4-fs (loop2): 1 orphan inode deleted [ 378.810646][T15404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 378.956996][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 379.404725][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'. [ 379.492307][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5067'. [ 379.513282][T15405] loop1: detected capacity change from 0 to 32768 [ 379.620914][T15432] netlink: 'syz.3.5068': attribute type 8 has an invalid length. [ 379.859676][T15436] loop2: detected capacity change from 0 to 4096 [ 379.892459][T15436] ntfs: volume version 3.1. [ 379.955897][T15442] sctp: [Deprecated]: syz.0.5075 (pid 15442) Use of int in max_burst socket option deprecated. [ 379.955897][T15442] Use struct sctp_assoc_value instead [ 380.606003][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5085'. [ 380.757743][T15470] loop1: detected capacity change from 0 to 1024 [ 380.913510][T15470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 381.021853][T15470] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 381.208426][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 381.616212][T15499] nvme_fabrics: missing parameter 'transport=%s' [ 381.643209][T15499] nvme_fabrics: missing parameter 'nqn=%s' [ 381.686289][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5106'. [ 381.812624][T15472] loop2: detected capacity change from 0 to 40427 [ 381.819534][ T4946] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 381.881738][T15472] F2FS-fs (loop2): invalid crc value [ 381.889365][T15517] xt_CONNSECMARK: invalid mode: 0 [ 381.920462][T15472] F2FS-fs (loop2): Found nat_bits in checkpoint [ 382.043319][ T4946] usb 2-1: Using ep0 maxpacket: 32 [ 382.050335][ T4946] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 382.069681][ T4946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.100373][T15472] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 382.108066][ T4946] usb 2-1: config 0 has no interface number 0 [ 382.133020][ T4946] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.214530][ T4946] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 382.250597][ T4946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.283179][ T4946] usb 2-1: Product: syz [ 382.287507][ T4946] usb 2-1: Manufacturer: syz [ 382.292112][ T4946] usb 2-1: SerialNumber: syz [ 382.342144][ T4946] usb 2-1: config 0 descriptor?? [ 382.372214][ T4946] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 382.400195][ T4946] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 382.502786][T15532] loop0: detected capacity change from 0 to 8192 [ 382.513065][ T22] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 382.564445][ T4946] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 382.566596][T15532] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.587817][ T4946] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 382.707751][T15539] loop3: detected capacity change from 0 to 4096 [ 382.713254][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 382.724728][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.734729][T15539] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 382.781919][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.786633][ T4946] usb 2-1: USB disconnect, device number 11 [ 382.835649][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 382.878074][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.923520][ T22] usb 5-1: config 0 descriptor?? [ 382.941120][ T22] hub 5-1:0.0: USB hub found [ 383.013588][T15539] ntfs3: loop3: ino=5, "/" directory corrupted [ 383.144162][ T22] hub 5-1:0.0: 31 ports detected [ 383.153505][ T22] hub 5-1:0.0: insufficient power available to use all downstream ports [ 383.352261][ T22] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 383.370768][ T22] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 383.416689][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 383.422762][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 383.493902][ T22] usb 5-1: USB disconnect, device number 18 [ 383.695010][T15568] netlink: 'syz.3.5133': attribute type 5 has an invalid length. [ 384.330844][T15586] loop2: detected capacity change from 0 to 4096 [ 385.001903][T15613] device sit0 entered promiscuous mode [ 385.083977][T15618] loop0: detected capacity change from 0 to 2048 [ 385.090800][T15613] netlink: 'syz.1.5157': attribute type 1 has an invalid length. [ 385.142741][T15613] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5157'. [ 385.146648][T15618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.468136][T15626] xt_CT: No such helper "syz0" [ 385.549400][T15635] netlink: 'syz.0.5164': attribute type 5 has an invalid length. [ 385.614179][T15638] loop2: detected capacity change from 0 to 16 [ 385.660899][T15638] erofs: (device loop2): mounted with root inode @ nid 36. [ 385.811533][T15641] loop4: detected capacity change from 0 to 4096 [ 385.883901][ T26] audit: type=1326 audit(1755834799.021:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 385.906448][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.949783][T15641] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 386.000816][T15641] ntfs3: loop4: Failed to load $Extend. [ 386.043207][ T26] audit: type=1326 audit(1755834799.021:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 386.101264][T15641] ntfs3: loop4: ino=5, "/" directory corrupted [ 386.125224][T15655] netlink: 'syz.0.5175': attribute type 2 has an invalid length. [ 386.141009][ T26] audit: type=1326 audit(1755834799.051:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 386.236040][ T26] audit: type=1326 audit(1755834799.051:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 386.258583][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.362715][ T26] audit: type=1326 audit(1755834799.061:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.1.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 386.435994][T15667] netlink: 'syz.0.5182': attribute type 3 has an invalid length. [ 386.604078][T15673] netlink: 'syz.4.5184': attribute type 10 has an invalid length. [ 386.619871][T15675] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 386.695062][T15673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.720255][T15673] team0: Port device bond0 added [ 386.730526][ T9079] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 386.762403][T15681] tmpfs: Bad value for 'mpol' [ 386.768048][T15677] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 386.933151][ T9079] usb 3-1: Using ep0 maxpacket: 16 [ 386.940070][ T9079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3233, setting to 64 [ 386.975100][ T9079] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 386.996368][ T9079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.029511][ T9079] usb 3-1: Product: syz [ 387.037534][ T9079] usb 3-1: Manufacturer: syz [ 387.042172][ T9079] usb 3-1: SerialNumber: syz [ 387.084383][ T9079] usb 3-1: config 0 descriptor?? [ 387.211252][ T9079] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 387.302157][ T4293] usb 3-1: Failed to submit usb control message: -71 [ 387.302334][ T4334] usb 3-1: USB disconnect, device number 21 [ 387.319128][ T4293] usb 3-1: unable to send the bmi data to the device: -71 [ 387.341325][ T4293] usb 3-1: unable to get target info from device [ 387.383101][ T4293] usb 3-1: could not get target info (-71) [ 387.417098][ T4293] usb 3-1: could not probe fw (-71) [ 387.647765][T15718] netlink: 'syz.0.5204': attribute type 4 has an invalid length. [ 387.707565][ T4256] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 387.899784][ T4256] usb 5-1: Using ep0 maxpacket: 16 [ 387.912562][ T4256] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 387.947690][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 387.979528][ T4256] usb 5-1: Manufacturer: syz [ 387.988235][ T4256] usb 5-1: config 0 descriptor?? [ 388.050484][ T26] audit: type=1326 audit(1755834801.181:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.2.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 388.073008][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.117066][ T26] audit: type=1326 audit(1755834801.181:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.2.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 388.203878][ T4256] usb 5-1: Not enough endpoints found in device, aborting! [ 388.392432][ T26] audit: type=1326 audit(1755834801.181:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.2.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 388.397947][T15762] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5211'. [ 388.433753][ T22] usb 5-1: USB disconnect, device number 19 [ 388.562492][ T26] audit: type=1326 audit(1755834801.181:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15738 comm="syz.2.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 388.593772][T15762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5211'. [ 388.669860][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5211'. [ 388.734810][T15769] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 389.020104][T15783] loop3: detected capacity change from 0 to 256 [ 389.044198][T15783] exfat: Deprecated parameter 'utf8' [ 389.049663][T15783] exfat: Deprecated parameter 'utf8' [ 389.134017][T15783] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 389.285321][T15792] [U] v3f"S/4:XTzWtlW= [ 389.317596][T15792] [U] J"e:" [ 389.543062][ T22] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 389.741962][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5235'. [ 389.751493][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 389.760936][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 389.791188][ T22] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 389.818329][ T22] usb 3-1: Product: syz [ 389.843239][ T22] usb 3-1: Manufacturer: syz [ 389.847943][ T22] usb 3-1: SerialNumber: syz [ 389.872253][ T22] usb 3-1: config 0 descriptor?? [ 389.905694][ T22] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 390.315836][ T22] gspca_zc3xx: reg_r err -71 [ 390.320717][ T22] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 390.330335][T15835] loop1: detected capacity change from 0 to 1024 [ 390.354460][ T22] usb 3-1: USB disconnect, device number 22 [ 390.391801][T15835] EXT4-fs: inline encryption not supported [ 390.428589][T15835] EXT4-fs: Ignoring removed i_version option [ 390.526672][T15835] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.5247: lblock 2 mapped to illegal pblock 2 (length 1) [ 390.603633][T15835] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 390.611787][T15835] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.5247: lblock 0 mapped to illegal pblock 48 (length 1) [ 390.675956][T15835] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.5247: Failed to acquire dquot type 0 [ 390.702740][T15835] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 390.733765][T15835] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.5247: mark_inode_dirty error [ 390.782375][T15835] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 390.795158][T15835] EXT4-fs (loop1): 1 orphan inode deleted [ 390.807550][T15839] loop0: detected capacity change from 0 to 32768 [ 390.813386][T15835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.818959][T15845] loop3: detected capacity change from 0 to 4096 [ 390.824456][T15752] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 390.839914][T15839] ERROR: (device loop0): dbAlloc: unable to allocate blocks [ 390.839914][T15839] [ 390.864201][T15845] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 390.893527][T15752] __quota_error: 1 callbacks suppressed [ 390.893541][T15752] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 390.923007][T15752] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:9: Failed to release dquot type 0 [ 391.023378][T15835] EXT4-fs (loop1): unmounting filesystem. [ 391.054812][T15835] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.5247: Invalid inode table block 1 in block_group 0 [ 391.108816][T15835] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 391.149146][T15835] EXT4-fs error (device loop1): ext4_quota_off:7120: inode #3: comm syz.1.5247: mark_inode_dirty error [ 392.015661][T15888] loop2: detected capacity change from 0 to 64 [ 392.131972][T15891] loop3: detected capacity change from 0 to 512 [ 392.189755][T15893] loop0: detected capacity change from 0 to 256 [ 392.214535][T15893] exfat: Deprecated parameter 'utf8' [ 392.229658][T15891] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 392.246277][T15891] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 392.293191][T15891] System zones: 0-1, 15-15, 18-18, 34-34 [ 392.300543][T15893] exfat: Deprecated parameter 'namecase' [ 392.316571][T15893] exfat: Deprecated parameter 'namecase' [ 392.350753][T15891] EXT4-fs (loop3): orphan cleanup on readonly fs [ 392.383477][T15893] exfat: Deprecated parameter 'utf8' [ 392.390464][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5275'. [ 392.404456][T15891] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 392.421751][T15893] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 392.434705][T15891] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 392.440798][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5275'. [ 392.502775][T15891] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 392.531261][T15891] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.5272: bad orphan inode 16 [ 392.597221][T15891] ext4_test_bit(bit=15, block=18) = 1 [ 392.603284][T15891] is_bad_inode(inode)=0 [ 392.607471][T15891] NEXT_ORPHAN(inode)=0 [ 392.623878][T15891] max_ino=32 [ 392.633390][T15891] i_nlink=2 [ 392.640295][T15891] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 392.743353][T15891] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 392.848809][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 393.029827][T15923] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 393.031786][T15921] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5284'. [ 393.354075][T15928] loop1: detected capacity change from 0 to 4096 [ 393.360369][T15928] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 393.851216][T15950] loop2: detected capacity change from 0 to 8 [ 393.920468][T15950] SQUASHFS error: Failed to read block 0x6e6: -5 [ 393.949991][T15950] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 393.984417][T15950] SQUASHFS error: Unable to read directory block [631:26] [ 394.296885][T15958] loop1: detected capacity change from 0 to 4096 [ 394.407401][T15958] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 394.510497][T15958] ntfs3: loop1: Failed to load $Extend. [ 394.795137][ T4946] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 395.004922][ T4946] usb 1-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 395.035475][ T4946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.079427][ T4946] usb 1-1: config 0 descriptor?? [ 395.106585][ T4946] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 395.359046][T16009] netlink: 'syz.1.5321': attribute type 10 has an invalid length. [ 395.451690][T16009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.482834][T16009] team0: Port device bond0 added [ 395.508395][ T4946] gspca_sn9c20x: Write register 1001 failed -71 [ 395.525042][ T4946] gspca_sn9c20x: Device initialization failed [ 395.531234][ T4946] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 395.615907][ T4946] usb 1-1: USB disconnect, device number 15 [ 395.800528][ T26] audit: type=1400 audit(1755834808.931:113): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=16023 comm="syz.4.5325" [ 396.133514][T16039] loop3: detected capacity change from 0 to 64 [ 396.373110][T16050] netlink: 'syz.1.5336': attribute type 21 has an invalid length. [ 396.381404][T16049] netlink: zone id is out of range [ 396.433116][T16049] netlink: zone id is out of range [ 396.455927][T16052] netlink: 'syz.3.5338': attribute type 3 has an invalid length. [ 396.486002][T16052] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5338'. [ 396.681392][T16063] netlink: 'syz.1.5342': attribute type 3 has an invalid length. [ 396.761764][T16064] loop4: detected capacity change from 0 to 4096 [ 396.908378][T16074] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.940890][T16064] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 396.980492][T16064] Remounting filesystem read-only [ 397.133086][T16082] netlink: 'syz.1.5350': attribute type 11 has an invalid length. [ 398.030324][T16072] loop2: detected capacity change from 0 to 32768 [ 398.092777][T16072] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 398.092777][T16072] [ 398.206883][T16121] loop4: detected capacity change from 0 to 8 [ 398.255205][T16121] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 398.264563][ T7107] read_mapping_page failed! [ 398.271148][ T7107] ERROR: (device loop2): txCommit: [ 398.271148][ T7107] [ 398.303547][T16123] loop0: detected capacity change from 0 to 256 [ 398.311412][ T7107] jfs_write_inode: jfs_commit_inode failed! [ 398.384600][T16123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 398.435079][T16125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5369'. [ 398.952655][T16141] loop2: detected capacity change from 0 to 1024 [ 399.088841][T16111] loop3: detected capacity change from 0 to 40427 [ 399.130905][T16111] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 399.162008][ T51] hfsplus: b-tree write err: -5, ino 4 [ 399.173360][T16111] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 399.241633][T16111] F2FS-fs (loop3): invalid crc value [ 399.283443][T16111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 399.315096][T16150] loop2: detected capacity change from 0 to 128 [ 399.343068][T16150] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 399.382401][T16150] syz.2.5379: attempt to access beyond end of device [ 399.382401][T16150] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 399.439380][T16150] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 399.474139][T16111] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 399.508961][T16111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 399.624423][ T4269] sysv_free_block: flc_count > flc_size [ 399.630041][ T4269] sysv_free_block: flc_count > flc_size [ 399.653608][T16129] loop4: detected capacity change from 0 to 32768 [ 399.669833][ T4269] sysv_free_block: flc_count > flc_size [ 399.692500][ T4269] sysv_free_block: flc_count > flc_size [ 399.718686][ T4269] sysv_free_block: flc_count > flc_size [ 399.732038][ T4269] sysv_free_block: flc_count > flc_size [ 399.753082][ T4269] sysv_free_block: flc_count > flc_size [ 399.756508][T16129] XFS (loop4): Mounting V5 Filesystem [ 399.789536][T16167] loop0: detected capacity change from 0 to 136 [ 399.792954][ T4269] sysv_free_block: flc_count > flc_size [ 399.801403][ T4269] sysv_free_block: flc_count > flc_size [ 399.844055][T16167] Attempt to read inode for relocated directory [ 399.873141][ T4269] sysv_free_block: flc_count > flc_size [ 399.881232][ T4269] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 400.061428][T16129] XFS (loop4): Ending clean mount [ 400.100744][T16129] XFS (loop4): Quotacheck needed: Please wait. [ 400.229850][T16129] XFS (loop4): Quotacheck: Done. [ 400.265162][T16180] netlink: 'syz.1.5389': attribute type 21 has an invalid length. [ 400.293150][T16180] netlink: 'syz.1.5389': attribute type 1 has an invalid length. [ 400.357179][ T4266] XFS (loop4): Unmounting Filesystem [ 400.404776][T16184] loop2: detected capacity change from 0 to 1024 [ 400.977732][T16202] x_tables: duplicate entry at hook 1 [ 401.385679][T16221] cgroup: name respecified [ 401.618274][ T9079] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 401.829257][T16242] loop4: detected capacity change from 0 to 65 [ 401.843011][ T9079] usb 3-1: Using ep0 maxpacket: 16 [ 401.860962][ T9079] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.885971][ T9079] usb 3-1: config 0 has no interface number 0 [ 401.893361][T16242] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 401.905314][ T9079] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 401.936786][ T9079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.961801][ T9079] usb 3-1: Product: syz [ 401.979242][ T9079] usb 3-1: Manufacturer: syz [ 401.996936][ T9079] usb 3-1: SerialNumber: syz [ 402.039981][ T9079] usb 3-1: config 0 descriptor?? [ 402.072422][ T9079] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 402.352611][T16261] loop3: detected capacity change from 0 to 128 [ 402.412693][T16261] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 402.438414][T16261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.487275][ T9079] gspca_spca1528: reg_w err -71 [ 402.513711][ T9079] spca1528: probe of 3-1:0.1 failed with error -71 [ 402.540811][ T9079] usb 3-1: USB disconnect, device number 23 [ 403.488375][T16273] loop0: detected capacity change from 0 to 40427 [ 403.516935][T16273] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 403.525447][T16273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 403.586974][T16273] F2FS-fs (loop0): Found nat_bits in checkpoint [ 403.593242][ T4334] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 403.648199][T16308] loop4: detected capacity change from 0 to 256 [ 403.705163][T16273] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 403.724885][T16273] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 403.731077][T16308] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 403.773109][ T4334] usb 4-1: Using ep0 maxpacket: 16 [ 403.780213][ T4334] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 403.810947][ T4334] usb 4-1: config 0 has no interface number 0 [ 403.858914][ T4334] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 403.891908][ T4334] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 403.919553][ T4334] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 403.941894][ T4334] usb 4-1: Product: syz [ 403.968139][ T4334] usb 4-1: SerialNumber: syz [ 404.021686][ T4334] usb 4-1: config 0 descriptor?? [ 404.038811][ T4334] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input20 [ 404.158350][T16320] loop4: detected capacity change from 0 to 2048 [ 404.257182][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 404.267556][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 404.275292][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 404.293081][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 404.300746][ T22] usb 4-1: USB disconnect, device number 20 [ 404.314876][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 404.315498][T16320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 404.322208][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 404.343227][T16320] ext4 filesystem being mounted at /1095/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.363258][ T22] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 404.450465][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5462'. [ 404.507703][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 404.836058][T16344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5467'. [ 404.875811][T16348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5456'. [ 404.908068][T16344] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5467'. [ 404.993459][T16351] loop3: detected capacity change from 0 to 2048 [ 405.064395][T16351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.396174][T16369] Unsupported ieee802154 address type: 0 [ 405.403304][ T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 405.525587][T16375] 9pnet_fd: p9_fd_create_tcp (16375): problem binding to privport [ 405.631423][ T22] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 405.672510][ T22] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 405.711612][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.742532][ T22] usb 4-1: config 0 descriptor?? [ 405.804952][ T22] usb 4-1: bad CDC descriptors [ 405.824762][ T22] usb 4-1: bad CDC descriptors [ 406.010516][ T22] usb 4-1: USB disconnect, device number 21 [ 406.034565][T16391] loop2: detected capacity change from 0 to 4096 [ 406.139778][T16400] loop0: detected capacity change from 0 to 128 [ 406.180449][T16400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 406.315488][T16400] ext4 filesystem being mounted at /1083/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.366721][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 406.405983][T16410] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5497'. [ 406.789134][T16424] loop1: detected capacity change from 0 to 512 [ 406.887876][T16424] EXT4-fs error (device loop1): __ext4_fill_super:5402: inode #2: comm syz.1.5506: casefold flag without casefold feature [ 407.023918][T16424] EXT4-fs (loop1): get root inode failed [ 407.029627][T16424] EXT4-fs (loop1): mount failed [ 408.159006][T16488] loop3: detected capacity change from 0 to 64 [ 408.433313][T16497] loop2: detected capacity change from 0 to 128 [ 408.499976][T16497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 408.551538][T16497] hpfs: filesystem error: improperly stopped [ 408.583509][T16497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 408.585819][T16500] loop1: detected capacity change from 0 to 1024 [ 408.611805][T16497] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 408.716951][T16500] hfsplus: invalid xattr key length: 0 [ 408.885605][T16508] netlink: 'syz.4.5544': attribute type 1 has an invalid length. [ 408.930033][T16508] netlink: 'syz.4.5544': attribute type 2 has an invalid length. [ 408.959596][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5544'. [ 408.972721][T16513] netlink: 'syz.1.5547': attribute type 1 has an invalid length. [ 409.011726][T16513] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5547'. [ 409.053070][T16513] NCSI netlink: No device for ifindex 130997362 [ 409.267695][T16525] loop0: detected capacity change from 0 to 256 [ 409.372153][T16525] FAT-fs (loop0): Directory bread(block 64) failed [ 409.460238][T16525] FAT-fs (loop0): Directory bread(block 65) failed [ 409.483532][T16525] FAT-fs (loop0): Directory bread(block 66) failed [ 409.533148][T16525] FAT-fs (loop0): Directory bread(block 67) failed [ 409.539882][T16525] FAT-fs (loop0): Directory bread(block 68) failed [ 409.567330][T16525] FAT-fs (loop0): Directory bread(block 69) failed [ 409.587625][T16525] FAT-fs (loop0): Directory bread(block 70) failed [ 409.617921][T16525] FAT-fs (loop0): Directory bread(block 71) failed [ 409.646067][T16525] FAT-fs (loop0): Directory bread(block 72) failed [ 409.652729][T16525] FAT-fs (loop0): Directory bread(block 73) failed [ 409.740194][T16525] FAT-fs (loop0): Filesystem has been set read-only [ 409.748310][ T26] audit: type=1800 audit(1755834822.871:114): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5553" name="pids.current" dev="loop0" ino=1048658 res=0 errno=0 [ 409.777949][T16525] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 409.793175][ T9079] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 409.982409][ T9079] usb 4-1: Using ep0 maxpacket: 32 [ 409.990550][ T9079] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 410.002479][ T9079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.040455][ T9079] usb 4-1: config 0 descriptor?? [ 410.105368][ T9079] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 410.232285][T16551] loop0: detected capacity change from 0 to 128 [ 410.320008][T16529] loop4: detected capacity change from 0 to 40427 [ 410.365699][T16529] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 410.392430][T16553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5567'. [ 410.396218][T16529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 410.463557][T16529] F2FS-fs (loop4): invalid crc value [ 410.491141][ T9079] gspca_sunplus: reg_w_riv err -71 [ 410.504237][ T9079] sunplus: probe of 4-1:0.0 failed with error -71 [ 410.544139][ T9079] usb 4-1: USB disconnect, device number 22 [ 410.560426][T16529] F2FS-fs (loop4): Found nat_bits in checkpoint [ 410.712577][T16529] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 410.720147][T16529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 411.111799][T16571] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.5575'. [ 411.146225][T16545] loop1: detected capacity change from 0 to 40427 [ 411.174501][T16545] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 411.204335][T16545] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 411.245139][T16545] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 411.363976][T16545] F2FS-fs (loop1): invalid crc value [ 411.375055][T16545] F2FS-fs (loop1): Found nat_bits in checkpoint [ 411.398962][T16580] loop3: detected capacity change from 0 to 128 [ 411.549622][T16545] F2FS-fs (loop1): Start checkpoint disabled! [ 411.612063][T16545] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 411.643061][T16545] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 411.777946][T16589] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 412.608832][T16620] loop0: detected capacity change from 0 to 512 [ 412.630108][T16620] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 412.656111][T16620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 412.702809][T16620] System zones: 1-12 [ 412.714510][T16620] EXT4-fs (loop0): orphan cleanup on readonly fs [ 412.725219][T16620] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5596: invalid indirect mapped block 12 (level 1) [ 412.883094][T16620] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5596: invalid indirect mapped block 2 (level 2) [ 412.916647][T16620] EXT4-fs (loop0): 1 truncate cleaned up [ 412.922859][T16620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 413.055907][T16629] loop4: detected capacity change from 0 to 512 [ 413.066339][T16627] loop1: detected capacity change from 0 to 4096 [ 413.097699][T16629] EXT4-fs (loop4): Test dummy encryption mode enabled [ 413.145614][T16627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 413.158311][T16629] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 413.174338][T16629] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 413.216881][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 413.293078][T16629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 413.348693][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 413.361288][T16629] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 413.504642][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 413.687532][T16644] loop0: detected capacity change from 0 to 4096 [ 413.723097][ T9079] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 413.741128][T16644] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 413.796404][T16644] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 413.829215][T16649] netlink: 'syz.4.5609': attribute type 1 has an invalid length. [ 413.936754][ T9079] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.947476][T15752] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 413.952965][ T9079] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.992720][ T4265] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 413.992974][ T9079] usb 3-1: config 1 interface 1 has no altsetting 0 [ 414.065196][ T9079] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.093440][ T9079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.120057][ T9079] usb 3-1: Product: syz [ 414.143007][ T9079] usb 3-1: Manufacturer: syz [ 414.163325][ T9079] usb 3-1: SerialNumber: syz [ 414.193458][ T9079] usb 3-1: selecting invalid altsetting 1 [ 414.210540][ T9079] usb 3-1: selecting invalid altsetting 0 [ 414.216896][ T9079] usb 3-1: selecting invalid altsetting 0 [ 414.258364][ T9079] cdc_ncm 3-1:1.0: bind() failure [ 414.282760][ T9079] usb 3-1: selecting invalid altsetting 0 [ 414.309162][ T9079] usbtest: probe of 3-1:1.1 failed with error -22 [ 414.330830][T16659] loop4: detected capacity change from 0 to 2048 [ 414.398192][T16659] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.426646][T16663] loop1: detected capacity change from 0 to 64 [ 414.452773][ T9079] usb 3-1: USB disconnect, device number 24 [ 414.573845][ T26] audit: type=1326 audit(1755834827.711:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 414.596286][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.653491][ T26] audit: type=1326 audit(1755834827.721:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 414.770583][ T26] audit: type=1326 audit(1755834827.721:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 414.823898][ T26] audit: type=1326 audit(1755834827.721:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16664 comm="syz.0.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 414.986404][T16677] IPv6: sit2: Disabled Multicast RS [ 415.035367][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5624'. [ 415.285894][T16694] loop3: detected capacity change from 0 to 64 [ 415.390064][T16696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5632'. [ 415.624634][T16704] binfmt_misc: register: failed to install interpreter file ./file2 [ 415.723779][T16708] comedi comedi3: ni_at_a2150: I/O port conflict (0x6,28) [ 416.073069][ T4334] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 416.264619][ T4334] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.292992][ T4334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.319131][ T4334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 416.348789][ T4334] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 416.355812][T16738] xt_l2tp: invalid flags combination: 8 [ 416.362487][ T4334] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.377883][ T4334] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.403091][ T4334] usb 2-1: config 1 interface 1 has no altsetting 0 [ 416.425816][ T4334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.455441][ T4334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.489563][ T4334] usb 2-1: Product: syz [ 416.495158][ T4334] usb 2-1: Manufacturer: syz [ 416.533487][ T4334] usb 2-1: SerialNumber: syz [ 416.548321][T16712] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 416.636537][T16748] loop3: detected capacity change from 0 to 64 [ 416.860493][T16755] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5661'. [ 416.974375][ T9079] usb 2-1: USB disconnect, device number 12 [ 417.615223][T16785] loop4: detected capacity change from 0 to 4096 [ 417.637446][T16785] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 417.684042][T16785] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 417.721392][T16785] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 417.786625][T16794] binder: 16793:16794 ioctl c0306201 200000000340 returned -14 [ 417.823193][T16785] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 417.890228][T16785] ntfs: volume version 3.1. [ 418.041074][T16785] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 418.052280][T16785] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 418.127152][T16798] loop1: detected capacity change from 0 to 4096 [ 418.155800][T16798] ntfs: (device loop1): parse_options(): Unrecognized mount option y0x0000000000000000. [ 418.603108][ T9080] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 418.819411][ T9080] usb 1-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 418.858186][ T9080] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 418.887721][ T9080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.919613][ T9080] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 418.940095][ T9080] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 418.960353][ T9080] usb 1-1: Product: syz [ 418.973368][ T9080] usb 1-1: Manufacturer: syz [ 418.993075][ T9080] usb 1-1: SerialNumber: syz [ 419.023229][ T9080] usb 1-1: config 0 descriptor?? [ 419.461789][ T9080] usb 1-1: USB disconnect, device number 16 [ 419.873698][ T26] audit: type=1326 audit(1755834833.011:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 419.920278][T16876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5718'. [ 419.944951][ T26] audit: type=1326 audit(1755834833.041:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 420.047910][ T26] audit: type=1326 audit(1755834833.041:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 420.135987][ T26] audit: type=1326 audit(1755834833.041:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1f58ebe9 code=0x7ffc0000 [ 420.253066][ T26] audit: type=1326 audit(1755834833.311:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693a78ebe9 code=0x7ffc0000 [ 420.323003][ T26] audit: type=1326 audit(1755834833.321:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f693a78ebe9 code=0x7ffc0000 [ 420.422959][ T26] audit: type=1326 audit(1755834833.321:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693a78ebe9 code=0x7ffc0000 [ 420.506885][ T26] audit: type=1326 audit(1755834833.321:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16881 comm="syz.4.5723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f693a78ebe9 code=0x7ffc0000 [ 420.600027][T16894] loop2: detected capacity change from 0 to 4096 [ 420.641384][T16894] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 420.695970][T16865] loop3: detected capacity change from 0 to 32768 [ 420.696618][T16901] loop0: detected capacity change from 0 to 256 [ 420.731084][T16894] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 420.746811][T16901] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 420.819744][T16894] ntfs3: loop2: ino=5, "/" directory corrupted [ 420.908173][T16865] XFS (loop3): Mounting V5 Filesystem [ 421.109322][T16916] loop2: detected capacity change from 0 to 512 [ 421.155052][T16916] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 421.169956][T16865] XFS (loop3): Ending clean mount [ 421.186842][T16865] XFS (loop3): Quotacheck needed: Please wait. [ 421.237341][T16916] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.5734: iget: bad i_size value: 360287970189639680 [ 421.283320][T16865] XFS (loop3): Quotacheck: Done. [ 421.293103][T16916] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.5734: couldn't read orphan inode 15 (err -117) [ 421.353123][T16916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 421.428797][ T4274] XFS (loop3): Unmounting Filesystem [ 421.485146][T16916] EXT4-fs error (device loop2): ext4_get_first_dir_block:3591: inode #12: block 13: comm syz.2.5734: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 421.505964][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.636790][T16916] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.5734: directory missing '.' [ 421.646230][T16929] ipt_CLUSTERIP: bad num_local_nodes 32 [ 421.855128][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 422.058657][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5743'. [ 422.404172][T16949] binder: 16948:16949 ioctl 40046210 0 returned -14 [ 422.545858][T16955] netlink: 1033 bytes leftover after parsing attributes in process `syz.2.5752'. [ 422.571507][T16931] loop0: detected capacity change from 0 to 32768 [ 422.645250][T16931] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 423.533042][T16951] loop1: detected capacity change from 0 to 32768 [ 423.609117][T16951] [ 423.609117][T16951] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 423.609117][T16951] [ 423.635659][ T9089] kernel write not supported for file /2288/net/sockstat (pid: 9089 comm: kworker/0:17) [ 423.712260][T16951] JFS: metapage_get_blocks failed [ 423.759154][T16951] ERROR: (device loop1): release_metapage: write_one_page() failed [ 423.759154][T16951] [ 423.834764][T16951] ERROR: (device loop1): diWrite: ixpxd invalid [ 423.834764][T16951] [ 423.891659][T16951] ERROR: (device loop1): txCommit: [ 423.891659][T16951] [ 424.006225][T16997] loop4: detected capacity change from 0 to 64 [ 424.051308][ T4278] [ 424.051308][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 424.051308][ T4278] [ 424.065252][ T4278] [ 424.065252][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 424.065252][ T4278] [ 424.083485][T16997] Trying to free block not in datazone [ 424.089013][T16997] Trying to free block not in datazone [ 424.143065][T16997] Trying to free block not in datazone [ 424.169106][T16997] Trying to free block not in datazone [ 424.193027][T16997] minix_free_block (loop4:6): bit already cleared [ 424.220907][T16997] Trying to free block not in datazone [ 424.251417][T16997] Trying to free block not in datazone [ 424.288323][T17005] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5777'. [ 424.346882][T16969] loop3: detected capacity change from 0 to 40427 [ 424.362999][ T4334] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 424.377636][T16969] F2FS-fs (loop3): invalid crc value [ 424.443029][T16969] F2FS-fs (loop3): Found nat_bits in checkpoint [ 424.563072][ T4334] usb 1-1: Using ep0 maxpacket: 32 [ 424.578505][ T4334] usb 1-1: config index 0 descriptor too short (expected 26090, got 796) [ 424.591330][T16969] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 424.615935][ T4334] usb 1-1: config 231 has too many interfaces: 103, using maximum allowed: 32 [ 424.633486][T16969] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 424.645679][ T4334] usb 1-1: config 231 has an invalid descriptor of length 0, skipping remainder of the config [ 424.722956][ T4334] usb 1-1: config 231 has 0 interfaces, different from the descriptor's value: 103 [ 424.753363][ T4334] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 424.762701][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.764868][T16969] F2FS-fs (loop3): switch extent_cache option is not allowed [ 424.778389][ T4334] usb 1-1: Product: syz [ 424.778407][ T4334] usb 1-1: Manufacturer: syz [ 424.792599][ T4334] usb 1-1: SerialNumber: syz [ 424.942455][T17019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.949752][T17019] IPv6: NLM_F_CREATE should be set when creating new route [ 424.957061][T17019] IPv6: NLM_F_CREATE should be set when creating new route [ 425.022629][ T4334] usb 1-1: USB disconnect, device number 17 [ 425.418073][T17015] loop4: detected capacity change from 0 to 32768 [ 425.732754][T17036] netlink: 'syz.0.5792': attribute type 1 has an invalid length. [ 425.762276][T17036] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5792'. [ 426.220662][T17055] device batadv1 entered promiscuous mode [ 426.625352][T17065] loop2: detected capacity change from 0 to 4096 [ 426.928248][T17077] loop4: detected capacity change from 0 to 2048 [ 426.962019][T17047] loop1: detected capacity change from 0 to 32768 [ 427.017499][T17077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.034996][T17047] ERROR: (device loop1): diNewExt: no free extents [ 427.034996][T17047] [ 427.037425][T17047] ERROR: (device loop1): remounting filesystem as read-only [ 427.037465][T17047] ialloc: diAlloc returned -5! [ 427.804079][T17073] loop0: detected capacity change from 0 to 32768 [ 428.008246][T17073] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 428.217574][T17128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5832'. [ 428.229866][ T4265] XFS (loop0): Unmounting Filesystem [ 428.243116][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5831'. [ 428.283023][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5831'. [ 428.945542][T17154] netlink: 'syz.4.5844': attribute type 27 has an invalid length. [ 429.124066][T17162] loop0: detected capacity change from 0 to 1024 [ 429.171859][T17162] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 429.221919][T17167] loop3: detected capacity change from 0 to 512 [ 429.263502][T17167] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 429.349031][T17167] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.5852: iget: bad i_size value: 360287970189639680 [ 429.460163][T17167] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.5852: couldn't read orphan inode 15 (err -117) [ 429.519516][T17167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 429.551921][T17180] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.561752][T17167] EXT4-fs error (device loop3): ext4_get_first_dir_block:3591: inode #12: block 13: comm syz.3.5852: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 429.620960][T17167] EXT4-fs error (device loop3): ext4_get_first_dir_block:3594: inode #12: comm syz.3.5852: directory missing '.' [ 429.758279][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 429.775136][T17188] loop0: detected capacity change from 0 to 64 [ 429.889228][T17188] MINIX-fs: mounting file system with errors, running fsck is recommended [ 430.291115][T17208] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5871'. [ 430.452992][ T22] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 430.522382][T17219] comedi comedi2: pcl724: a I/O base address must be specified [ 430.647339][ T22] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 430.649219][T17223] netlink: 'syz.0.5879': attribute type 21 has an invalid length. [ 430.662989][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.672467][T17225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5878'. [ 430.682997][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 430.692550][T17225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5878'. [ 430.712838][ T22] usb 4-1: config 1 has no interface number 0 [ 430.719256][ T4334] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 430.737319][ T22] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 430.762995][ T22] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 430.819199][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.854182][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.862317][ T22] usb 4-1: Product: syz [ 430.894445][ T22] usb 4-1: Manufacturer: syz [ 430.899102][ T22] usb 4-1: SerialNumber: syz [ 430.905796][ T4334] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 430.916736][T17230] loop0: detected capacity change from 0 to 64 [ 430.923392][ T4334] usb 3-1: config 0 has no interface number 0 [ 430.967962][ T4334] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 430.985123][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.032986][ T4334] usb 3-1: Product: syz [ 431.047629][ T4334] usb 3-1: Manufacturer: syz [ 431.052312][ T4334] usb 3-1: SerialNumber: syz [ 431.095203][ T4334] usb 3-1: config 0 descriptor?? [ 431.105037][ T4334] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 431.114255][ T4334] dvb-usb: bulk message failed: -22 (4/0) [ 431.120357][ T4334] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 431.163242][ T4334] dvb-usb: bulk message failed: -22 (5/0) [ 431.195475][ T4334] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 431.220808][ T4334] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 431.235099][ T4334] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 431.307761][ T4334] usb 3-1: USB disconnect, device number 25 [ 431.421430][ T9089] usb 4-1: USB disconnect, device number 23 [ 431.476266][T17226] loop4: detected capacity change from 0 to 32768 [ 431.550669][T17226] XFS (loop4): Mounting V5 Filesystem [ 431.660672][T17226] XFS (loop4): Ending clean mount [ 431.672271][T17226] XFS (loop4): Quotacheck needed: Please wait. [ 431.780044][T17226] XFS (loop4): Quotacheck: Done. [ 431.876969][ T4266] XFS (loop4): Unmounting Filesystem [ 432.010362][T17240] loop1: detected capacity change from 0 to 32768 [ 432.037562][ T26] audit: type=1326 audit(1755834845.171:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 432.060970][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5893'. [ 432.118242][T17240] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 432.118242][T17240] [ 432.141459][ T26] audit: type=1326 audit(1755834845.211:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 432.181669][T17240] ERROR: (device loop1): remounting filesystem as read-only [ 432.204510][T17240] ialloc: diAlloc returned -5! [ 432.286018][ T26] audit: type=1326 audit(1755834845.221:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 432.370548][T17262] loop3: detected capacity change from 0 to 1764 [ 432.402992][ T26] audit: type=1326 audit(1755834845.221:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 432.533075][ T26] audit: type=1326 audit(1755834845.221:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17256 comm="syz.0.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c22b8ebe9 code=0x7ffc0000 [ 432.540074][T17268] x_tables: unsorted underflow at hook 1 [ 432.963133][T17284] netlink: 'syz.4.5902': attribute type 25 has an invalid length. [ 432.971042][T17284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5902'. [ 433.317392][T17299] loop3: detected capacity change from 0 to 1024 [ 434.391234][T17347] IPv6: Can't replace route, no match found [ 434.625439][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5941'. [ 435.083166][ T9079] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 435.286888][ T9079] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.321975][ T9079] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.351041][ T9079] usb 2-1: Product: syz [ 435.356578][ T26] audit: type=1326 audit(1755834848.491:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17393 comm="syz.2.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 435.389780][ T9079] usb 2-1: Manufacturer: syz [ 435.410040][ T9079] usb 2-1: SerialNumber: syz [ 435.444903][ T9079] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.494937][ T26] audit: type=1326 audit(1755834848.531:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17393 comm="syz.2.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 435.499629][ T9079] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.598819][ T26] audit: type=1326 audit(1755834848.531:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17393 comm="syz.2.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 435.600043][T17403] loop4: detected capacity change from 0 to 64 [ 435.721921][ T26] audit: type=1326 audit(1755834848.531:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17393 comm="syz.2.5967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0058ebe9 code=0x7ffc0000 [ 435.742808][T17406] vcan0 speed is unknown, defaulting to 1000 [ 435.744639][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.797439][T17403] hfs: request for non-existent node 16777216 in B*Tree [ 435.838710][T17403] hfs: request for non-existent node 16777216 in B*Tree [ 435.858809][T17406] vcan0 speed is unknown, defaulting to 1000 [ 435.869963][T17403] hfs: request for non-existent node 16777216 in B*Tree [ 435.885261][T17406] vcan0 speed is unknown, defaulting to 1000 [ 435.897586][T17403] hfs: request for non-existent node 16777216 in B*Tree [ 435.918940][T17403] hfs: request for non-existent node 16777216 in B*Tree [ 435.942138][ T9089] usb 2-1: USB disconnect, device number 13 [ 435.963148][T17403] hfs: request for non-existent node 16777216 in B*Tree [ 436.053173][ T9080] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 436.134548][ T9082] vcan0 speed is unknown, defaulting to 1000 [ 436.150206][T17406] infiniband syz1: set active [ 436.156543][T17406] infiniband syz1: added vcan0 [ 436.226666][T17406] RDS/IB: syz1: added [ 436.242025][T17406] smc: adding ib device syz1 with port count 1 [ 436.253022][ T9080] usb 4-1: Using ep0 maxpacket: 32 [ 436.259822][ T9080] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.282509][ T9080] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 436.292685][ T9080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.293449][T17406] smc: ib device syz1 port 1 has pnetid [ 436.315868][ T9080] usb 4-1: config 0 descriptor?? [ 436.333588][ T9080] usb 4-1: bad CDC descriptors [ 436.355636][ T9080] vcan0 speed is unknown, defaulting to 1000 [ 436.364646][T17406] vcan0 speed is unknown, defaulting to 1000 [ 436.388728][T17420] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5969'. [ 436.408197][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5969'. [ 436.427041][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5969'. [ 436.440681][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5969'. [ 436.529276][ T9080] usb 4-1: USB disconnect, device number 24 [ 436.548506][T17424] loop2: detected capacity change from 0 to 256 [ 436.582574][T17424] exfat: Deprecated parameter 'namecase' [ 436.601712][T17424] exfat: Deprecated parameter 'utf8' [ 436.640768][T17424] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 436.654437][T17428] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 436.654437][T17428] SȘȞZ6' [ 436.703005][ T9079] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 436.720422][ T9079] ath9k_htc: Failed to initialize the device [ 436.759167][T17406] vcan0 speed is unknown, defaulting to 1000 [ 436.769389][ T9089] usb 2-1: ath9k_htc: USB layer deinitialized [ 437.110654][T17406] vcan0 speed is unknown, defaulting to 1000 [ 437.216426][T17444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5979'. [ 437.416475][T17447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5983'. [ 437.480537][T17406] vcan0 speed is unknown, defaulting to 1000 [ 437.671776][T17456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5987'. [ 437.786549][T17432] loop4: detected capacity change from 0 to 32768 [ 437.809167][T17460] loop2: detected capacity change from 0 to 8 [ 437.864298][T17460] cramfs: Error -5 while decompressing! [ 437.868205][ T4455] udevd[4455]: incorrect cramfs checksum on /dev/loop2 [ 437.890114][T17460] cramfs: ffffffff96d721a8(26)->ffff8880684fa000(4096) [ 437.926921][T17460] cramfs: Error -5 while decompressing! [ 437.934566][T17406] vcan0 speed is unknown, defaulting to 1000 [ 437.950280][T17469] netlink: 'syz.3.5990': attribute type 10 has an invalid length. [ 437.993418][T17432] XFS (loop4): Mounting V5 Filesystem [ 438.000745][T17460] cramfs: ffffffff96d721c2(26)->ffff88804afda000(4096) [ 438.032515][T17469] device macvlan0 entered promiscuous mode [ 438.050810][T17460] cramfs: Error -3 while decompressing! [ 438.083805][ T4455] udevd[4455]: incorrect cramfs checksum on /dev/loop2 [ 438.104863][T17432] XFS (loop4): Ending clean mount [ 438.121416][T17460] cramfs: ffffffff96d721dc(16)->ffff88804df53000(4096) [ 438.151565][T17469] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 438.163741][T17460] cramfs: Error -5 while decompressing! [ 438.188322][T17460] cramfs: ffffffff96d721a8(26)->ffff8880684fa000(4096) [ 438.215504][ T4266] XFS (loop4): Unmounting Filesystem [ 438.949669][T17467] loop1: detected capacity change from 0 to 32768 [ 439.060218][T17467] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 439.151081][T17467] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0 [ 439.188799][T17467] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 439.213477][T17467] OCFS2: File system is now read-only. [ 439.222255][T17467] (syz.1.5991,17467,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 439.266034][T17467] (syz.1.5991,17467,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 439.311787][T17467] (syz.1.5991,17467,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 439.351425][T17467] (syz.1.5991,17467,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 439.386678][T17467] (syz.1.5991,17467,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 439.423355][T17467] (syz.1.5991,17467,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 439.462960][T17467] (syz.1.5991,17467,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 439.493857][T17467] (syz.1.5991,17467,1):ocfs2_mknod:385 ERROR: status = -30 [ 439.529314][T17467] (syz.1.5991,17467,1):ocfs2_mknod:502 ERROR: status = -30 [ 439.579040][T17467] (syz.1.5991,17467,1):ocfs2_mkdir:659 ERROR: status = -30 [ 439.756159][T17520] loop3: detected capacity change from 0 to 512 [ 439.767484][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 439.775443][T17520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 439.803791][T17522] loop2: detected capacity change from 0 to 64 [ 439.884638][T17522] overlayfs: filesystem on './file0' not supported [ 439.905202][T17520] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 439.954321][T17520] ext4 filesystem being mounted at /1168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.985667][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.992134][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.110959][T17496] loop0: detected capacity change from 0 to 32768 [ 440.117863][T17520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.141744][T17520] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 440.245332][T17496] XFS (loop0): Mounting V5 Filesystem [ 440.277220][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 440.441001][T17496] XFS (loop0): Ending clean mount [ 440.454152][T17543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6021'. [ 440.596358][ T4265] XFS (loop0): Unmounting Filesystem [ 440.664099][T17524] loop4: detected capacity change from 0 to 32768 [ 440.801201][T17524] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 440.801201][T17524] [ 440.891016][T17524] jfs_create: dtInsert returned -EIO [ 440.913102][T17524] ERROR: (device loop4): jfs_create: [ 440.913102][T17524] [ 441.117056][T17562] netlink: 'syz.2.6030': attribute type 3 has an invalid length. [ 441.166111][T17560] vcan0 speed is unknown, defaulting to 1000 [ 441.605924][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'. [ 441.643808][T17578] netlink: 'syz.2.6037': attribute type 1 has an invalid length. [ 441.868949][T17588] loop1: detected capacity change from 0 to 256 [ 442.098113][T17595] loop2: detected capacity change from 0 to 2048 [ 442.158827][T17595] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.490812][T17603] loop3: detected capacity change from 0 to 4096 [ 442.579077][T17603] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 442.584078][T17608] loop4: detected capacity change from 0 to 4096 [ 442.618552][T17608] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 442.644410][T17603] ntfs3: loop3: Failed to load $Extend. [ 442.767282][T17608] ntfs3: loop4: no free space to extend mft [ 442.840542][T17619] xt_cluster: node mask cannot exceed total number of nodes [ 442.903913][T17621] device geneve3 entered promiscuous mode [ 443.376525][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6066'. [ 443.377264][T17636] binder: 17635:17636 ioctl c018620c 200000000380 returned -22 [ 443.491124][T17643] loop1: detected capacity change from 0 to 256 [ 443.755738][T17649] netlink: 'syz.1.6071': attribute type 32 has an invalid length. [ 443.988831][T17657] loop1: detected capacity change from 0 to 1024 [ 444.196687][T17657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 444.231253][T17657] ext4 filesystem being mounted at /1230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.266460][T17674] netlink: 'syz.4.6081': attribute type 1 has an invalid length. [ 444.363888][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 444.559563][T17682] sctp: [Deprecated]: syz.1.6084 (pid 17682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.559563][T17682] Use struct sctp_sack_info instead [ 445.612732][T17705] loop2: detected capacity change from 0 to 16384 [ 445.721022][T17725] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.772070][T17726] loop4: detected capacity change from 0 to 128 [ 445.901474][T17726] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 445.961611][T17726] hpfs: filesystem error: improperly stopped [ 446.000161][T17726] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 446.026997][T17726] hpfs: You really don't want any checks? You are crazy... [ 446.061655][T17726] hpfs: hpfs_map_sector(): read error [ 446.100140][T17726] hpfs: code page support is disabled [ 446.132407][T17726] hpfs: hpfs_map_sector(): read error [ 446.163529][T17726] hpfs: hpfs_map_sector(): read error [ 446.169001][T17726] hpfs: filesystem error: unable to find root dir [ 446.201477][T17739] vcan0 speed is unknown, defaulting to 1000 [ 446.866802][T17764] netlink: 'syz.1.6125': attribute type 32 has an invalid length. [ 447.141736][T17776] ..: renamed from ipvlan0 [ 447.447577][T17788] device veth7 entered promiscuous mode [ 447.508098][T17789] ALSA: mixer_oss: invalid OSS volume 'u' [ 447.947739][T17801] vcan0 speed is unknown, defaulting to 1000 [ 448.169757][T17809] loop0: detected capacity change from 0 to 4096 [ 448.187643][T17809] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 448.338848][T17809] ntfs3: loop0: no free space to extend mft [ 448.367329][T17819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6152'. [ 448.399822][T17822] loop2: detected capacity change from 0 to 764 [ 448.494966][T17822] rock: directory entry would overflow storage [ 448.501226][T17822] rock: sig=0x4654, size=5, remaining=4 [ 449.623829][T17872] xt_policy: neither incoming nor outgoing policy selected [ 449.693144][T17874] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6179'. [ 449.875315][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6183'. [ 449.905338][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'. [ 449.948956][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6183'. [ 450.424969][T12954] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 450.634466][T12954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.662351][T12954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.686230][T12954] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.702430][T12954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.751113][T12954] usb 1-1: SerialNumber: syz [ 450.857355][T17912] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6198'. [ 450.965369][T12954] usb 1-1: 0:2 : does not exist [ 450.973586][T12954] usb 1-1: unit 5: unexpected type 0x03 [ 451.003589][T12954] usb 1-1: USB disconnect, device number 18 [ 451.244647][ T4768] udevd[4768]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.312155][T17926] netlink: 'syz.4.6204': attribute type 13 has an invalid length. [ 451.334062][T17926] device veth0_macvtap left promiscuous mode [ 451.343514][ T9089] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 451.358138][T17926] macvtap0: refused to change device tx_queue_len [ 451.563238][ T9089] usb 4-1: Using ep0 maxpacket: 32 [ 451.570211][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6206'. [ 451.570303][ T9089] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 451.615699][ T9089] usb 4-1: config 0 has no interface number 0 [ 451.630325][ T9089] usb 4-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30 [ 451.636055][T17923] loop2: detected capacity change from 0 to 32768 [ 451.652633][ T9089] usb 4-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 451.700891][ T9089] usb 4-1: config 0 interface 73 has no altsetting 0 [ 451.728987][T17923] (syz.2.6202,17923,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 451.757215][ T9089] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 451.788915][T17923] (syz.2.6202,17923,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 451.796795][ T9089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.807040][T17934] vcan0 speed is unknown, defaulting to 1000 [ 451.829209][ T9089] usb 4-1: Product: syz [ 451.839362][ T9089] usb 4-1: Manufacturer: syz [ 451.856938][T17923] JBD2: Ignoring recovery information on journal [ 451.869824][ T9089] usb 4-1: SerialNumber: syz [ 451.884136][ T9089] usb 4-1: config 0 descriptor?? [ 451.938816][T17923] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 452.086530][T17923] [ 452.088927][T17923] ====================================================== [ 452.096011][T17923] WARNING: possible circular locking dependency detected [ 452.102991][T12954] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 452.103072][T17923] 6.1.148-syzkaller #0 Not tainted [ 452.115753][T17923] ------------------------------------------------------ [ 452.122868][T17923] syz.2.6202/17923 is trying to acquire lock: [ 452.128946][T17923] ffff888068e91808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 452.142463][T17923] [ 452.142463][T17923] but task is already holding lock: [ 452.149842][T17923] ffff88805bf23120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 452.160780][T17923] [ 452.160780][T17923] which lock already depends on the new lock. [ 452.160780][T17923] [ 452.171218][T17923] [ 452.171218][T17923] the existing dependency chain (in reverse order) is: [ 452.180243][T17923] [ 452.180243][T17923] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 452.189128][T17923] down_write+0x36/0x60 [ 452.193875][T17923] ocfs2_lock_global_qf+0x1e5/0x270 [ 452.196987][T17946] loop0: detected capacity change from 0 to 4096 [ 452.199604][T17923] ocfs2_acquire_dquot+0x2a0/0xb10 [ 452.209880][T17946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.211623][T17923] dqget+0x778/0xeb0 [ 452.222749][T17923] ocfs2_setattr+0xf16/0x1cf0 [ 452.227963][T17923] notify_change+0xc74/0xf40 [ 452.233173][T17923] chown_common+0x486/0x620 [ 452.238199][T17923] do_fchownat+0x164/0x270 [ 452.243133][T17923] __x64_sys_fchownat+0xb1/0xc0 [ 452.248502][T17923] do_syscall_64+0x4c/0xa0 [ 452.253519][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.259925][T17923] [ 452.259925][T17923] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 452.270425][T17923] down_write+0x36/0x60 [ 452.275126][T17923] ocfs2_lock_global_qf+0x1c7/0x270 [ 452.280941][T17923] ocfs2_acquire_dquot+0x2a0/0xb10 [ 452.286562][T17923] dqget+0x778/0xeb0 [ 452.290964][T17923] ocfs2_setattr+0xf16/0x1cf0 [ 452.296183][T17923] notify_change+0xc74/0xf40 [ 452.301299][T17923] chown_common+0x486/0x620 [ 452.306320][T17923] do_fchownat+0x164/0x270 [ 452.311340][T17923] __x64_sys_fchownat+0xb1/0xc0 [ 452.316700][T17923] do_syscall_64+0x4c/0xa0 [ 452.321905][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.328430][T17923] [ 452.328430][T17923] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 452.336159][T17923] __mutex_lock+0x120/0xaf0 [ 452.341259][T17923] dquot_commit+0x5a/0x410 [ 452.346452][T17923] ext4_write_dquot+0x1f0/0x360 [ 452.351907][T17923] mark_all_dquot_dirty+0xf9/0x400 [ 452.357634][T17923] __dquot_free_space+0x7ec/0xbc0 [ 452.363173][T17923] ext4_free_blocks+0x1bab/0x2640 [ 452.368729][T17923] ext4_ext_remove_space+0x1dd3/0x4490 [ 452.374717][T17923] ext4_ext_truncate+0x211/0x370 [ 452.380264][T17923] ext4_truncate+0xa0b/0x1230 [ 452.385471][T17923] ext4_evict_inode+0xb35/0x1100 [ 452.391087][T17923] evict+0x485/0x870 [ 452.395494][T17923] __dentry_kill+0x431/0x650 [ 452.400598][T17923] dentry_kill+0xb8/0x290 [ 452.405480][T17923] dput+0xfa/0x1d0 [ 452.409855][T17923] do_renameat2+0x8ad/0xc70 [ 452.414882][T17923] __x64_sys_renameat2+0xce/0xe0 [ 452.420353][T17923] do_syscall_64+0x4c/0xa0 [ 452.425558][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.431984][T17923] [ 452.431984][T17923] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 452.439744][T17923] down_write+0x36/0x60 [ 452.444527][T17923] ext4_truncate+0x987/0x1230 [ 452.449910][T17923] ext4_setattr+0x10cb/0x19f0 [ 452.455301][T17923] notify_change+0xc74/0xf40 [ 452.460509][T17923] do_truncate+0x197/0x220 [ 452.465580][T17923] do_sys_ftruncate+0x312/0x3c0 [ 452.471022][T17923] do_syscall_64+0x4c/0xa0 [ 452.476489][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.482924][T17923] [ 452.482924][T17923] -> #3 (jbd2_handle){++++}-{0:0}: [ 452.490559][T17923] start_this_handle+0x1f49/0x2150 [ 452.496277][T17923] jbd2__journal_start+0x2b7/0x5a0 [ 452.501940][T17923] jbd2_journal_start+0x26/0x30 [ 452.507477][T17923] ocfs2_start_trans+0x372/0x6c0 [ 452.513048][T17923] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 452.519274][T17923] ocfs2_dismount_volume+0x1fc/0x930 [ 452.525072][T17923] generic_shutdown_super+0x130/0x340 [ 452.531131][T17923] kill_block_super+0x7c/0xe0 [ 452.536317][T17923] deactivate_locked_super+0x93/0xf0 [ 452.542200][T17923] cleanup_mnt+0x463/0x4f0 [ 452.547299][T17923] task_work_run+0x1ca/0x250 [ 452.552400][T17923] exit_to_user_mode_loop+0xe6/0x110 [ 452.558251][T17923] exit_to_user_mode_prepare+0xb1/0x140 [ 452.564479][T17923] syscall_exit_to_user_mode+0x16/0x40 [ 452.570450][T17923] do_syscall_64+0x58/0xa0 [ 452.575373][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.582130][T17923] [ 452.582130][T17923] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 452.590676][T17923] down_read+0x42/0x2d0 [ 452.595429][T17923] ocfs2_start_trans+0x366/0x6c0 [ 452.601054][T17923] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 452.607317][T17923] ocfs2_dismount_volume+0x1fc/0x930 [ 452.613565][T17923] generic_shutdown_super+0x130/0x340 [ 452.619456][T17923] kill_block_super+0x7c/0xe0 [ 452.624639][T17923] deactivate_locked_super+0x93/0xf0 [ 452.630620][T17923] cleanup_mnt+0x463/0x4f0 [ 452.635722][T17923] task_work_run+0x1ca/0x250 [ 452.640905][T17923] exit_to_user_mode_loop+0xe6/0x110 [ 452.646700][T17923] exit_to_user_mode_prepare+0xb1/0x140 [ 452.652794][T17923] syscall_exit_to_user_mode+0x16/0x40 [ 452.658765][T17923] do_syscall_64+0x58/0xa0 [ 452.663684][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.670192][T17923] [ 452.670192][T17923] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 452.677665][T17923] ocfs2_start_trans+0x267/0x6c0 [ 452.683210][T17923] ocfs2_mknod+0xe6a/0x2350 [ 452.688313][T17923] ocfs2_mkdir+0x1b6/0x4a0 [ 452.693239][T17923] vfs_mkdir+0x387/0x570 [ 452.698028][T17923] do_mkdirat+0x1d0/0x430 [ 452.702864][T17923] __x64_sys_mkdirat+0x85/0x90 [ 452.708142][T17923] do_syscall_64+0x4c/0xa0 [ 452.713064][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.719493][T17923] [ 452.719493][T17923] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 452.729998][T17923] __lock_acquire+0x2cf8/0x7c50 [ 452.735359][T17923] lock_acquire+0x1b4/0x490 [ 452.740371][T17923] down_write+0x36/0x60 [ 452.745033][T17923] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 452.751709][T17923] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 452.758690][T17923] ocfs2_lock_allocators+0x2f7/0x5b0 [ 452.764502][T17923] ocfs2_extend_allocation+0x394/0x1840 [ 452.770555][T17923] ocfs2_extend_no_holes+0x20b/0x490 [ 452.776347][T17923] ocfs2_acquire_dquot+0x5e8/0xb10 [ 452.781964][T17923] dqget+0x778/0xeb0 [ 452.786363][T17923] ocfs2_setattr+0xf16/0x1cf0 [ 452.791551][T17923] notify_change+0xc74/0xf40 [ 452.796651][T17923] chown_common+0x486/0x620 [ 452.801662][T17923] do_fchownat+0x164/0x270 [ 452.806586][T17923] __x64_sys_fchownat+0xb1/0xc0 [ 452.811956][T17923] do_syscall_64+0x4c/0xa0 [ 452.816889][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.823476][T17923] [ 452.823476][T17923] other info that might help us debug this: [ 452.823476][T17923] [ 452.833955][T17923] Chain exists of: [ 452.833955][T17923] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 452.833955][T17923] [ 452.854111][T17923] Possible unsafe locking scenario: [ 452.854111][T17923] [ 452.861552][T17923] CPU0 CPU1 [ 452.866985][T17923] ---- ---- [ 452.872641][T17923] lock(&ocfs2_quota_ip_alloc_sem_key); [ 452.878531][T17923] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 452.888437][T17923] lock(&ocfs2_quota_ip_alloc_sem_key); [ 452.896673][T17923] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 452.903969][T17923] [ 452.903969][T17923] *** DEADLOCK *** [ 452.903969][T17923] [ 452.912356][T17923] 5 locks held by syz.2.6202/17923: [ 452.917554][T17923] #0: ffff888074416460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 452.926784][T17923] #1: ffff88805bf22648 (&type->i_mutex_dir_key#20){++++}-{3:3}, at: chown_common+0x320/0x620 [ 452.937236][T17923] #2: ffff88805bdee0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 452.947257][T17923] #3: ffff88805bf23488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 452.960217][T17923] #4: ffff88805bf23120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 452.971785][T17923] [ 452.971785][T17923] stack backtrace: [ 452.977892][T17923] CPU: 0 PID: 17923 Comm: syz.2.6202 Not tainted 6.1.148-syzkaller #0 [ 452.986056][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.996394][T17923] Call Trace: [ 452.999671][T17923] [ 453.002592][T17923] dump_stack_lvl+0x168/0x22e [ 453.007280][T17923] ? load_image+0x3b0/0x3b0 [ 453.011892][T17923] ? show_regs_print_info+0x12/0x12 [ 453.017117][T17923] ? print_circular_bug+0x12b/0x1a0 [ 453.022335][T17923] check_noncircular+0x274/0x310 [ 453.027370][T17923] ? add_chain_block+0x940/0x940 [ 453.032421][T17923] ? lockdep_lock+0xdc/0x1e0 [ 453.037123][T17923] ? verify_lock_unused+0x140/0x140 [ 453.042655][T17923] ? lock_acquire+0x20f/0x490 [ 453.047336][T17923] ? _find_first_zero_bit+0xcf/0x100 [ 453.052756][T17923] __lock_acquire+0x2cf8/0x7c50 [ 453.057619][T17923] ? verify_lock_unused+0x140/0x140 [ 453.062912][T17923] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 453.068654][T17923] ? do_raw_spin_lock+0x11d/0x280 [ 453.073779][T17923] ? mutex_unlock+0x10/0x10 [ 453.078282][T17923] ? __rwlock_init+0x140/0x140 [ 453.083062][T17923] ? __rwlock_init+0x140/0x140 [ 453.087926][T17923] ? do_raw_spin_unlock+0x11d/0x230 [ 453.093163][T17923] lock_acquire+0x1b4/0x490 [ 453.097672][T17923] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 453.104087][T17923] ? __might_sleep+0xd0/0xd0 [ 453.108936][T17923] ? mark_lock+0x94/0x320 [ 453.113279][T17923] ? read_lock_is_recursive+0x10/0x10 [ 453.118903][T17923] ? mark_lock+0x94/0x320 [ 453.123227][T17923] ? __lock_acquire+0x13c0/0x7c50 [ 453.128244][T17923] ? lock_chain_count+0x20/0x20 [ 453.133100][T17923] down_write+0x36/0x60 [ 453.137249][T17923] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 453.143562][T17923] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 453.149792][T17923] ? _raw_spin_unlock+0x40/0x40 [ 453.154638][T17923] ? stack_trace_save+0x98/0xe0 [ 453.159491][T17923] ? verify_lock_unused+0x140/0x140 [ 453.164678][T17923] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 453.171336][T17923] ? kasan_set_track+0x60/0x70 [ 453.176204][T17923] ? kasan_set_track+0x4b/0x70 [ 453.180968][T17923] ? __kasan_kmalloc+0x8e/0xa0 [ 453.185823][T17923] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 453.192249][T17923] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 453.197715][T17923] ? ocfs2_extend_allocation+0x394/0x1840 [ 453.203429][T17923] ? ocfs2_extend_no_holes+0x20b/0x490 [ 453.208878][T17923] ? ocfs2_acquire_dquot+0x5e8/0xb10 [ 453.214147][T17923] ? dqget+0x778/0xeb0 [ 453.218225][T17923] ? ocfs2_setattr+0xf16/0x1cf0 [ 453.223084][T17923] ? notify_change+0xc74/0xf40 [ 453.227851][T17923] ? chown_common+0x486/0x620 [ 453.232606][T17923] ? do_fchownat+0x164/0x270 [ 453.237184][T17923] ? do_syscall_64+0x4c/0xa0 [ 453.241780][T17923] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.247866][T17923] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 453.253920][T17923] ? __lock_acquire+0x7c50/0x7c50 [ 453.258932][T17923] ? do_raw_spin_lock+0x11d/0x280 [ 453.263962][T17923] ? __rwlock_init+0x140/0x140 [ 453.268822][T17923] ? do_raw_spin_unlock+0x11d/0x230 [ 453.274011][T17923] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 453.280071][T17923] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 453.286402][T17923] ? ocfs2_reserve_clusters+0x30/0x30 [ 453.292027][T17923] ? rcu_is_watching+0x11/0xa0 [ 453.296780][T17923] ? ocfs2_num_free_extents+0x2fa/0x620 [ 453.302312][T17923] ? ocfs2_validate_extent_block+0x5e0/0x5e0 [ 453.308637][T17923] ? ocfs2_read_blocks_sync+0xc50/0xc50 [ 453.314178][T17923] ocfs2_lock_allocators+0x2f7/0x5b0 [ 453.319552][T17923] ? _ocfs2_clear_bit+0x30/0x30 [ 453.324500][T17923] ? ocfs2_read_inode_block+0x11a/0x180 [ 453.330040][T17923] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 453.336025][T17923] ? ocfs2_acquire_dquot+0x2e8/0xb10 [ 453.341297][T17923] ? ocfs2_setattr+0xf16/0x1cf0 [ 453.346219][T17923] ? notify_change+0xc74/0xf40 [ 453.350965][T17923] ? chown_common+0x486/0x620 [ 453.355670][T17923] ? __x64_sys_fchownat+0xb1/0xc0 [ 453.360709][T17923] ? do_syscall_64+0x4c/0xa0 [ 453.365468][T17923] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.371570][T17923] ocfs2_extend_allocation+0x394/0x1840 [ 453.377235][T17923] ? __lock_acquire+0x13c0/0x7c50 [ 453.382285][T17923] ? ocfs2_extend_no_holes+0x490/0x490 [ 453.387768][T17923] ? kasan_quarantine_put+0xd4/0x220 [ 453.393056][T17923] ? lockdep_hardirqs_on+0x94/0x140 [ 453.398243][T17923] ? slab_free_freelist_hook+0x131/0x1a0 [ 453.403864][T17923] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 453.409858][T17923] ? find_tree_dqentry+0xbb1/0xf30 [ 453.414972][T17923] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 453.420067][T17923] ocfs2_extend_no_holes+0x20b/0x490 [ 453.425340][T17923] ? ocfs2_zero_extend+0x2950/0x2950 [ 453.430618][T17923] ? do_raw_spin_unlock+0x11d/0x230 [ 453.435812][T17923] ? _raw_spin_unlock+0x24/0x40 [ 453.440651][T17923] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 453.445846][T17923] ocfs2_acquire_dquot+0x5e8/0xb10 [ 453.450946][T17923] ? ocfs2_destroy_dquot+0x40/0x40 [ 453.456063][T17923] ? percpu_counter_add_batch+0x13b/0x160 [ 453.461976][T17923] dqget+0x778/0xeb0 [ 453.465859][T17923] ocfs2_setattr+0xf16/0x1cf0 [ 453.470614][T17923] ? ocfs2_extend_allocation+0x1840/0x1840 [ 453.476418][T17923] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 453.482225][T17923] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 453.488561][T17923] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 453.494467][T17923] ? current_time+0x197/0x2b0 [ 453.499140][T17923] ? atime_needs_update+0x780/0x780 [ 453.504326][T17923] ? common_perm_cond+0x2ad/0x340 [ 453.509345][T17923] ? evm_inode_setattr+0x91/0x790 [ 453.514467][T17923] ? bpf_lsm_inode_setattr+0x5/0x10 [ 453.519682][T17923] ? security_inode_setattr+0xd8/0x140 [ 453.525131][T17923] ? try_break_deleg+0x79/0x120 [ 453.529977][T17923] ? ocfs2_extend_allocation+0x1840/0x1840 [ 453.535861][T17923] notify_change+0xc74/0xf40 [ 453.540440][T17923] chown_common+0x486/0x620 [ 453.544931][T17923] ? __ia32_sys_chmod+0x70/0x70 [ 453.549854][T17923] ? rcu_read_lock_any_held+0xb0/0x120 [ 453.555397][T17923] ? __mnt_want_write+0x21f/0x2a0 [ 453.560498][T17923] do_fchownat+0x164/0x270 [ 453.564994][T17923] ? chown_common+0x620/0x620 [ 453.569758][T17923] ? lock_chain_count+0x20/0x20 [ 453.574608][T17923] __x64_sys_fchownat+0xb1/0xc0 [ 453.579450][T17923] do_syscall_64+0x4c/0xa0 [ 453.583939][T17923] ? clear_bhb_loop+0x60/0xb0 [ 453.588605][T17923] ? clear_bhb_loop+0x60/0xb0 [ 453.593299][T17923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.599215][T17923] RIP: 0033:0x7fde0058ebe9 [ 453.603737][T17923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.623350][T17923] RSP: 002b:00007fde013ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 453.631846][T17923] RAX: ffffffffffffffda RBX: 00007fde007b5fa0 RCX: 00007fde0058ebe9 [ 453.639930][T17923] RDX: 000000000000ee01 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 453.647978][T17923] RBP: 00007fde00611e19 R08: 0000000000001000 R09: 0000000000000000 [ 453.655942][T17923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.663908][T17923] R13: 00007fde007b6038 R14: 00007fde007b5fa0 R15: 00007ffd3d3a7e38 [ 453.671873][T17923] [ 453.709015][ T9089] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 453.725212][T12954] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 453.727679][ T9089] gspca_stk1135: reg_w 0x2 err -71 [ 453.744028][T12954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.764114][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.772804][ T9089] gspca_stk1135: Sensor write failed [ 453.778435][T12954] usb 2-1: config 0 has no interface number 0 [ 453.780292][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.793145][ T9089] gspca_stk1135: Sensor write failed [ 453.798546][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.805568][ T9089] gspca_stk1135: Sensor read failed [ 453.806919][T12954] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 453.811053][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.826817][ T9089] gspca_stk1135: Sensor read failed [ 453.832265][ T9089] gspca_stk1135: Detected sensor type unknown (0x0) [ 453.839367][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.844286][T12954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.846042][ T9089] gspca_stk1135: Sensor read failed [ 453.859406][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.864469][T12954] usb 2-1: Product: syz [ 453.866089][ T9089] gspca_stk1135: Sensor read failed [ 453.869912][T12954] usb 2-1: Manufacturer: syz [ 453.869927][T12954] usb 2-1: SerialNumber: syz [ 453.884793][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.885045][T12954] usb 2-1: config 0 descriptor?? [ 453.891335][ T9089] gspca_stk1135: Sensor write failed [ 453.903001][ T9089] gspca_stk1135: serial bus timeout: status=0x00 [ 453.909616][ T9089] gspca_stk1135: Sensor write failed [ 453.915495][ T9089] stk1135: probe of 4-1:0.73 failed with error -71 [ 453.925000][ T9089] usb 4-1: USB disconnect, device number 25 [ 453.940121][T17946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 453.946806][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 454.024567][T17946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.045522][T17946] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 454.077701][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 454.134123][ T9080] usb 2-1: USB disconnect, device number 14