last executing test programs: 4.125104936s ago: executing program 2 (id=2908): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x2, 0xffff7ffffffffffd}) 2.344939085s ago: executing program 2 (id=2936): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f00000002c0)={0x3, @win={{0x2, 0x400, 0x2}, 0x1, 0x0, &(0x7f0000000040)={{0x0, 0x3ff, 0x0, 0x4}}, 0x0, 0x0, 0x40}}) 1.317453378s ago: executing program 2 (id=2956): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000040)) 1.204822399s ago: executing program 2 (id=2958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 932.356507ms ago: executing program 0 (id=2964): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 889.241271ms ago: executing program 2 (id=2965): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000140)={[{@adinicb}, {@partition={'partition', 0x3d, 0xa8e2}}, {@utf8}, {@uid}, {@dmode={'dmode', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@gid_ignore}, {@fileset={'fileset', 0x3d, 0x8bd}}, {@adinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@gid_forget}, {@uid}, {@session}]}, 0x1, 0xc5d, &(0x7f0000000f40)="$eJzs3U1sHdd9N+D/GV2Kl/L7VkycKk4aBzdtkcqK5eorpmIV7lVNsw0gy0IoZheAVyKlXpgiCZJqZCNt6W666CJAUXSRFYHWKJCigdEUQZdM6wLJxosiq66IFjaCogu2CBCgQMBi5p4rXlKkLYsfouTnsanf3JlzZs6ZuZ6xBJ05AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABE/M7LF0+dTltsOPQQGgMA7IvLo187dWar5z8A8Ni6ut3v/wEAAAAAAAAAAAAAgIMiRRFPRorZy6tpvPrcUb/U7rt9Z2x4ZOtqA6mqeagqX/7UT585e+7Lzw+d7+al9vQH1N9tn41XR69ebLw0c2t2bnJ+fnKiMTbdvj4zMXnfe9hp/c1OVCegceu12xM3bsw3zjx3dsPmO4Pv9z9xbPDC0DMnn+6WHRseGRldL1LvLV974IZ0bDfC43AUcTJSPPu9n6ZWRBSx83NR399rv9lA1YkTVSfGhkeqjky1W9ML5cYr3RNRRDR6KjW752jraxG1vn3tw/aaEYtl88sGnyi7Nzrbmmtdm5psXGnNLbQX2jPTV1KntWV/GlHE+RSxFBEr/ffuri+KqEWK7xxdTdfyWz+q8/ClamDw9u0o9rCP96FsZ6MvYql4BK7ZAdYfRbwSKX72zvG4nu8z1b3mixGvlPmDiLfKfDEilV+McxHvbfE94tFUiyL+rLz+F1bTRHU/6N5XLn298dXpGzM9Zbv3lY/4fLjnTvGQng8Dm3Ltj/fjqAf83lSPIlrVHX813XMB9+cMAQAAAAAAAAAAAAAAALCFgSjiM5Hi5X/9g2pccVTj0o9eGPrdwf/fO2b8qQ/ZT1n2uYhYLO5vTO7hPDDwSrqS0kMeS/xxVo8i/jCP/3vzYTcGAAAAAAAAAAAAAAAAAADgY62In0SKF949npaid07x9vTNxtXWtanOrLDduX+7c6avra2tNVInmznHcy7mXMq5nHMlZxS5fs5mzvGcizmXci7nXMkZh3L9nM2c4zkXcy7lXM65kjNquX7OZs7xnIs5l3Iu51zJGQdk7l4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdJEUX8IlJ8+5urKVJENCPGo5PL/Q+7dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8f1I0fi95t11tYhI1b8dx8tfzkXzcJmfjOZQmS9G82LOVpW15psPof3sTF8q4seRor/+9t0Lnq9/X+fT3a9BvPWt9U+frXXyUHfj4Pv9Txw7emFo5PNPbbectmrAiUvt6dt3GmPDIyOjPatr+eif7Fk3mI9b7E7XiYj51994rTU1NTn34AvlV+ABq3ev5A6Ovp8LqfbINPVjtTCwG1/jrRaidjA6+DAWNt4n6g/j5sSeK5//70WK33z337oP/M7zvx7/r/Pp7hM+fv5H68//Fzbv6D6f/7XN9fLzv3wSbPX8f7Jn3Qv5/0b6ahH1hVuzfcci6vOvv3Gyfat1c/Lm5PS5U6e+MjT0lbOn+g5H1G+0pyZ7lnbldAEAAAAAAAAAAAAAAADsn1TEb0eK1o9XUyMi7lTjtQYvDD1z8ulDcagab7Vh3Paro1cvNl6auTU7Nzk/PznRGJtuX5+ZmLzfw9Wr4V5jwyN70pkPNbDH7R+ovzQz+/pc++bvL2y5/Uj94rX5hbnW9a03x0AUEc3eNSeqBo8Nj1SNnmq3pquqV7YcTP/R9aUi/j1SXD/XSF/I6/L4/80j/DeM/1/cvKNdHP//+SPr4/8+0VO0PGZKRfw8UvzGnz8VX6jaeSTuOWe53F9HihPnP5fLxeGyXLcNnfcKdEYGlmX/O1L8/S82lu2Oh3xyvezpj3RyHwHl9T8aKb7/p9+NX83rNr7/Yevrf2Tzjvbo/Q+f6ll3ZMP7CnbcdfL1PxkpXnzy7fi1as3/fuD7P7pvbDjeKbz+fo49uv6/3LNuMB/313er8wAAAAAAAAAAAI+wvlTE30SKH47U0vN53f38/b+JzTvao7//9emedRO7M1/Rhy7s+KQCAAAAwAHRl4r4SaS4ufD23THUG8d/94z//K318Z/DadPW6s/5fql6b8Bu/vlfr8F83PGddxsAAAAAAAAAAAAAAAAAAAAOlJSKeD7Ppz5ejeef2HY+9eVI8fJ/PpvLpWNlue488IPVr/XLM9MnL05NzdRjoXVtarIxOtu6PlnW/VSkWP2rz+W6RTW/ene++c4c7+tzsc9FipG/7ZbtzMXenZu8Mx94fW0t4nRZ9hOR4j/+bmPZPDV1nju62u+ZsuxfRopv/OPWZY+tlz1blv1upPjRNxrdskfKst33o356vexz12eKPbgqAAAAAAAAAAAAAAAAAAAAfNz0pSL+JFL8162lu2P58/z/fT0fK299q2e+/03uVPP8D1bz/2+3/CDz/1fvFVjc7qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB4SlHEG5Fi9vJqWu4vP3fUL7Wnb98ZGx7ZutpAqmoeqsqXP/XTZ86e+/LzQ+e7+cH1d9tn4tXRqxcbL83cmp2bnJ+fnGiMTbevz0xM3vcedlp/sxPVCWjceu32xI0b840zz53dsPnO4Pv9TxwbvDD0zMmnu2XHhkdGRnvK1Poe+Oj3SNusPxxF/EWkePZ7P00/7I8oYufn4kO+O3ttoOrEiaoTY8MjVUem2q3phXLjle6JKCIaPZWa3XO0D9diR5oRi2XzywafKLs3Otuaa12bmmxcac0ttBfaM9NXUqe1ZX8aUcT5FLEUESv99+6uL4p4LVJ85+hq+qf+iEPd8/Cly6NfO3Vm+3YUe9jH+1C2s9EXsVQ8AtfsAOuPIv4hUvzsnePxz/0Rtej8xBcjXinzBxFvRed6p/KLcS7ivS2+RzyaalHE/5TX/8Jqeqe/vB907yuXvt746vSNmZ6y3fvKI/982E8H/N5UjyJ+VN3xV9O/+O8aAAAAAAAAAAAAAAAA4AAp4lcixQvvHk/V+OC7Y4rb0zcbV1vXpjrD+rpj/7pjptfW1tYaqZPNnOM5F3Mu5VzOuZIzilw/Z7PM+traeP68mHMp53LOlZxxKNfP2cw5nnMx51LO5ZwrOaOW6+ds5hzPuZjzzdzP5fx5JWcckLF7AAAAAAAAAAAAAAAAAADA46Wo/knx7W+uprX+zvzS49HJZfOBPvb+LwAA//8XvPgY") symlink(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 816.839178ms ago: executing program 0 (id=2969): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x6}, 0x20) 697.45915ms ago: executing program 0 (id=2972): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0xfd, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) 672.431973ms ago: executing program 1 (id=2974): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [], [], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 636.721656ms ago: executing program 0 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000100001000190028bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="10000000404000001400030076657468315f746f5f7465616d0000000500110002000000c4001680c000018014000a00010001000000000001000000000000800c00050009000000050000001000020000000000be03000005000000280001"], 0x100}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) 585.787441ms ago: executing program 4 (id=2976): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) 562.323154ms ago: executing program 1 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a000000000000000000000014000500000000000000000000000000000000000c00090008"], 0x3c}}, 0x0) 561.749624ms ago: executing program 2 (id=2978): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af0102030109022400010000100009046e02025d60270009050202000002000109058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 527.943557ms ago: executing program 3 (id=2979): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a03000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000fff60800030011000001"], 0x54}}, 0x20004010) 457.205084ms ago: executing program 4 (id=2980): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000340)) 383.508381ms ago: executing program 3 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019300)=ANY=[@ANYBLOB="0a00000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa, r0, 0x4}, 0x38) 369.378433ms ago: executing program 0 (id=2982): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xac3, &(0x7f0000000e00)="$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") creat(&(0x7f0000000140)='./file2\x00', 0x100) 366.051503ms ago: executing program 4 (id=2983): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 364.616154ms ago: executing program 1 (id=2984): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee17688a2003208020700ecff3f02000000009a0a00d9485bbb6a880000d6c8db0000db0a0006018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700484f19b44e09f9315033bf79ac0000060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce6806d725d20f99c0899c4f14a4179f4cbf17a6e000", 0xb8) 299.46666ms ago: executing program 3 (id=2985): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 257.148805ms ago: executing program 1 (id=2986): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 185.418012ms ago: executing program 3 (id=2987): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000185780)=[{0x8000001, 0x0, 0x0, 0x0, 0x3}]}) 185.215282ms ago: executing program 4 (id=2988): r0 = socket(0xa, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0x205fffff) 184.885042ms ago: executing program 1 (id=2989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="00cf87dc6d8b947ab1a56284d0fc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 184.383942ms ago: executing program 3 (id=2990): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 106.371509ms ago: executing program 4 (id=2991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) 82.448402ms ago: executing program 3 (id=2992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in6=@local, @in=@multicast2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}]}]}, 0xec}}, 0x0) 55.220254ms ago: executing program 4 (id=2993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x2, 0x1, 0x400000200, 0x2}) 163.16µs ago: executing program 0 (id=2994): personality(0x1bb2baf3005ac137) uname(&(0x7f0000000080)=""/185) 0s ago: executing program 1 (id=2995): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) kernel console output (not intermixed with test programs): oop0): Directory bread(block 68) failed [ 110.983521][ T7195] FAT-fs (loop0): Directory bread(block 69) failed [ 111.008000][ T7195] FAT-fs (loop0): Directory bread(block 70) failed [ 111.022767][ T7195] FAT-fs (loop0): Directory bread(block 71) failed [ 111.029669][ T6267] usb 3-1: USB disconnect, device number 9 [ 111.033713][ T7195] FAT-fs (loop0): Directory bread(block 72) failed [ 111.058248][ T7195] FAT-fs (loop0): Directory bread(block 73) failed [ 111.534774][ T7230] loop3: detected capacity change from 0 to 256 [ 111.614498][ T7230] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 111.658133][ T7235] netlink: 'syz.4.1330': attribute type 30 has an invalid length. [ 112.149681][ T7253] loop2: detected capacity change from 0 to 4096 [ 112.187964][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.206813][ T7269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.274591][ T7253] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 112.379781][ T7253] ntfs3: loop2: failed to convert "c46c" to macinuit [ 112.395930][ T7279] device vlan0 entered promiscuous mode [ 112.504450][ T7288] netlink: 'syz.4.1353': attribute type 1 has an invalid length. [ 112.532404][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'. [ 112.583081][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 112.609527][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 112.874144][ T7315] loop1: detected capacity change from 0 to 256 [ 112.918453][ T7309] loop0: detected capacity change from 0 to 4096 [ 113.005071][ T7323] loop4: detected capacity change from 0 to 764 [ 113.049639][ T7309] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.149387][ T7323] rock: directory entry would overflow storage [ 113.180900][ T7323] rock: sig=0x4654, size=5, remaining=4 [ 113.235128][ T7323] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 113.235184][ T7323] overlayfs: missing 'lowerdir' [ 113.387374][ T4184] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 113.389458][ T4184] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 113.484736][ T7343] ip6t_srh: unknown srh match flags 4000 [ 113.668581][ T7351] ip6t_srh: unknown srh invflags 4000 [ 113.701294][ T7353] xt_HMARK: spi-set and port-set can't be combined [ 113.759482][ T7357] loop0: detected capacity change from 0 to 64 [ 113.864221][ T7360] loop4: detected capacity change from 0 to 512 [ 113.880979][ T7361] SET target dimension over the limit! [ 113.935223][ T7360] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 113.957390][ T7365] netlink: 'syz.3.1394': attribute type 1 has an invalid length. [ 114.062177][ T7360] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 114.140485][ T7360] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.350642][ T6267] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.379119][ T7391] loop1: detected capacity change from 0 to 1024 [ 114.588473][ T7401] SET target dimension over the limit! [ 114.629424][ T6267] usb 1-1: Using ep0 maxpacket: 16 [ 114.668802][ T7406] tmpfs: Bad value for 'mpol' [ 114.760604][ T6267] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.780271][ T6267] usb 1-1: config 0 has no interfaces? [ 114.980882][ T6267] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 114.990491][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.993916][ T7393] loop2: detected capacity change from 0 to 32768 [ 114.998613][ T6267] usb 1-1: Product: syz [ 114.998631][ T6267] usb 1-1: Manufacturer: syz [ 115.046249][ T6267] usb 1-1: SerialNumber: syz [ 115.056108][ T6267] r8152-cfgselector 1-1: config 0 descriptor?? [ 115.088212][ T7433] dlm: Unknown command passed to DLM device : 132 [ 115.088212][ T7433] [ 115.136017][ T7431] loop4: detected capacity change from 0 to 1024 [ 115.198958][ T7393] JBD2: Ignoring recovery information on journal [ 115.313839][ T7393] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.331823][ T6267] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 115.401813][ T25] audit: type=1800 audit(1763499896.630:11): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1419" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 115.486405][ T4279] hfsplus: b-tree write err: -5, ino 4 [ 115.507259][ T7393] (syz.2.1406,7393,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 115.532355][ T7393] (syz.2.1406,7393,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 115.570351][ T7393] (syz.2.1406,7393,1):ocfs2_mknod:298 ERROR: status = -2 [ 115.598261][ T7393] (syz.2.1406,7393,1):ocfs2_mknod:502 ERROR: status = -2 [ 115.602840][ T4173] usb 1-1: USB disconnect, device number 9 [ 115.630435][ T7393] (syz.2.1406,7393,1):ocfs2_create:676 ERROR: status = -2 [ 115.745385][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 115.828550][ T7456] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 115.882788][ T7456] device veth0_vlan left promiscuous mode [ 115.942296][ T7456] device veth0_vlan entered promiscuous mode [ 115.959870][ T7456] team0: Device veth0_vlan failed to register rx_handler [ 116.090353][ T7456] syz.1.1428 (7456) used greatest stack depth: 19840 bytes left [ 116.222829][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 116.242641][ T7466] loop1: detected capacity change from 0 to 128 [ 116.388393][ T7466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.415862][ T7450] loop4: detected capacity change from 0 to 40427 [ 116.425192][ T7466] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.463214][ T7450] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.471136][ T7450] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.484393][ T7466] binder: Bad value for 'stats' [ 116.576393][ T7450] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.586827][ T7486] rtc_cmos 00:00: Alarms can be up to one day in the future [ 116.771987][ T7450] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.779091][ T7450] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.917378][ T7504] No such timeout policy "syz0" [ 116.998289][ T7450] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 117.241839][ T7520] loop2: detected capacity change from 0 to 2048 [ 117.268470][ T7526] loop0: detected capacity change from 0 to 164 [ 117.528679][ T7532] loop2: detected capacity change from 0 to 1024 [ 117.598869][ T7532] hfsplus: bad catalog entry type [ 117.733086][ T7542] loop4: detected capacity change from 0 to 4096 [ 117.787135][ T7542] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 117.798645][ T7554] loop3: detected capacity change from 0 to 256 [ 117.833355][ T7548] loop0: detected capacity change from 0 to 4096 [ 117.894276][ T7548] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 118.588907][ T7574] xt_cgroup: path and classid specified [ 118.665421][ T4249] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 118.734162][ T7550] loop1: detected capacity change from 0 to 32768 [ 118.736777][ T7552] loop2: detected capacity change from 0 to 32768 [ 118.989617][ T7552] XFS (loop2): Mounting V5 Filesystem [ 119.040608][ T4249] usb 4-1: config 0 has an invalid interface number: 152 but max is 0 [ 119.048824][ T4249] usb 4-1: config 0 has no interface number 0 [ 119.064991][ T4249] usb 4-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 119.082967][ T4249] usb 4-1: config 0 interface 152 has no altsetting 0 [ 119.227326][ T7552] XFS (loop2): Ending clean mount [ 119.240556][ T4249] usb 4-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 119.263243][ T4173] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.269952][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.290299][ T4249] usb 4-1: Product: syz [ 119.294497][ T4249] usb 4-1: Manufacturer: syz [ 119.299189][ T4249] usb 4-1: SerialNumber: syz [ 119.327610][ T4249] usb 4-1: config 0 descriptor?? [ 119.341542][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 119.360650][ T7569] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.390311][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1501'. [ 119.427393][ T4194] XFS (loop2): Unmounting Filesystem [ 119.620543][ T4249] cdc_subset: probe of 4-1:0.152 failed with error -71 [ 119.656184][ T4249] usb 4-1: USB disconnect, device number 10 [ 119.720646][ T4173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.751361][ T4173] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.771648][ T4173] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.855568][ T7635] loop1: detected capacity change from 0 to 1024 [ 119.908816][ T25] audit: type=1800 audit(1763499901.130:12): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1510" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 119.962932][ T4298] hfsplus: b-tree write err: -5, ino 4 [ 120.020435][ T4173] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 120.029545][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.081290][ T7646] x_tables: unsorted underflow at hook 2 [ 120.101120][ T4173] usb 5-1: Product: syz [ 120.105663][ T4173] usb 5-1: Manufacturer: syz [ 120.122913][ T4173] usb 5-1: SerialNumber: syz [ 120.177986][ T4173] usb 5-1: config 0 descriptor?? [ 120.470414][ T4525] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 120.478252][ T4173] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 120.488272][ T4173] usb 5-1: No valid video chain found. [ 120.510655][ T4173] usb 5-1: USB disconnect, device number 9 [ 120.604007][ T7670] loop1: detected capacity change from 0 to 4096 [ 120.704124][ T7670] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 120.748910][ T7670] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 120.770610][ T4525] usb 3-1: Using ep0 maxpacket: 8 [ 120.817075][ T7670] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 120.870289][ T7670] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 120.910794][ T4525] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 120.920913][ T7670] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 120.930876][ T4525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.978901][ T7670] ntfs: volume version 3.1. [ 121.002145][ T7670] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 121.081006][ T7670] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 121.136979][ T7704] loop3: detected capacity change from 0 to 164 [ 121.144086][ T7670] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 121.160718][ T4525] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 121.171300][ T7670] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 121.180079][ T4525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.190335][ T7670] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 121.240462][ T4525] usb 3-1: Product: syz [ 121.248147][ T4525] usb 3-1: Manufacturer: syz [ 121.257327][ T4525] usb 3-1: SerialNumber: syz [ 121.266526][ T4525] usb 3-1: config 0 descriptor?? [ 121.302307][ T7682] loop0: detected capacity change from 0 to 32768 [ 121.331951][ T4525] powermate: probe of 3-1:0.0 failed with error -5 [ 121.369610][ T7682] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1533 (7682) [ 121.477814][ T7682] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 121.491252][ T7682] BTRFS info (device loop0): setting nodatacow, compression disabled [ 121.505456][ T7682] BTRFS info (device loop0): turning off barriers [ 121.512873][ T7682] BTRFS info (device loop0): ignoring data csums [ 121.520184][ T7716] loop1: detected capacity change from 0 to 128 [ 121.538415][ T7682] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.564444][ T4525] usb 3-1: USB disconnect, device number 10 [ 121.566549][ T7682] BTRFS info (device loop0): trying to use backup root at mount time [ 121.629844][ T7682] BTRFS info (device loop0): setting datacow [ 121.652051][ T7682] BTRFS info (device loop0): turning on async discard [ 121.672247][ T7682] BTRFS info (device loop0): setting nodatacow, compression disabled [ 121.718755][ T7682] BTRFS info (device loop0): enabling auto defrag [ 121.736882][ T7682] BTRFS info (device loop0): using free space tree [ 121.745600][ T7682] BTRFS info (device loop0): has skinny extents [ 121.829250][ T7728] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1554'. [ 122.078184][ T7682] BTRFS info (device loop0): enabling ssd optimizations [ 122.147791][ T7765] loop2: detected capacity change from 0 to 256 [ 122.247179][ T7765] exfat: Deprecated parameter 'utf8' [ 122.269786][ T7765] exfat: Deprecated parameter 'namecase' [ 122.401372][ T7765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 122.708063][ T7793] loop4: detected capacity change from 0 to 16 [ 122.759758][ T7793] erofs: (device loop4): mounted with root inode @ nid 36. [ 122.779008][ T7796] binder: 7795:7796 ioctl c018620c 200000000080 returned -22 [ 122.796681][ T7793] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.825162][ T7793] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 122.885001][ T7798] loop1: detected capacity change from 0 to 128 [ 122.888860][ T7793] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 122.956448][ T7798] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 123.020717][ T7798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.164499][ T7808] xt_TCPMSS: Only works on TCP SYN packets [ 123.281283][ T7815] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 123.299172][ T7816] overlayfs: conflicting options: nfs_export=on,index=off [ 123.429004][ T7824] trusted_key: encrypted_key: keylen parameter is missing [ 123.508912][ T7828] loop0: detected capacity change from 0 to 256 [ 123.669013][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 123.700766][ T4723] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 123.765786][ T7840] device sit0 entered promiscuous mode [ 123.787728][ T7840] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 123.845420][ T7840] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1601'. [ 123.866101][ T7842] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 123.944908][ T7846] capability: warning: `syz.0.1602' uses 32-bit capabilities (legacy support in use) [ 124.029509][ T7842] team0: Device veth0_vlan failed to register rx_handler [ 124.063236][ T7852] loop2: detected capacity change from 0 to 64 [ 124.070647][ T4723] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 124.078864][ T4723] usb 2-1: config 0 has no interface number 0 [ 124.087493][ T4723] usb 2-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 124.099640][ T4723] usb 2-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 124.115158][ T4723] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 124.130486][ T4723] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.300671][ T4723] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 124.324012][ T4723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.347949][ T4723] usb 2-1: Product: syz [ 124.374894][ T4723] usb 2-1: Manufacturer: syz [ 124.394476][ T4723] usb 2-1: SerialNumber: syz [ 124.417882][ T4723] usb 2-1: config 0 descriptor?? [ 124.460608][ T7825] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.481341][ T4723] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 124.488783][ T7864] netlink: 'syz.3.1613': attribute type 13 has an invalid length. [ 124.747231][ T7877] loop2: detected capacity change from 0 to 512 [ 124.749497][ T7789] usb 2-1: USB disconnect, device number 12 [ 124.782390][ T7878] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1617'. [ 124.828493][ T7877] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 124.830808][ T7878] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 124.859324][ T7877] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.884694][ T7877] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.895003][ T7877] EXT4-fs (loop2): Mount option "journal_async_commit" incompatible with ext3 [ 124.914551][ T4525] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 125.065825][ T7888] netlink: 'syz.0.1623': attribute type 1 has an invalid length. [ 125.187073][ T7892] loop0: detected capacity change from 0 to 4096 [ 125.350696][ T4173] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.359321][ T4525] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.369724][ T7894] loop0: detected capacity change from 0 to 512 [ 125.399915][ T7894] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 125.399915][ T7894] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 125.399915][ T7894] [ 125.460867][ T7894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.467584][ T4525] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.502608][ T4525] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.504694][ T7894] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.581928][ T7894] EXT4-fs error (device loop0): ext4_fill_super:4841: inode #2: comm syz.0.1626: inode has both inline data and extents flags [ 125.621027][ T7894] EXT4-fs (loop0): get root inode failed [ 125.628432][ T7890] loop4: detected capacity change from 0 to 32768 [ 125.636113][ T7894] EXT4-fs (loop0): mount failed [ 125.692358][ T7890] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 125.710556][ T4525] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.723177][ T4525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.741920][ T7896] loop1: detected capacity change from 0 to 32768 [ 125.755657][ T4173] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 125.763862][ T4525] usb 4-1: Product: syz [ 125.768118][ T4525] usb 4-1: Manufacturer: syz [ 125.772920][ T4173] usb 3-1: config 0 has no interface number 0 [ 125.779406][ T4173] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 125.790879][ T4525] usb 4-1: SerialNumber: syz [ 125.796707][ T4173] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 125.868731][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 125.970693][ T4173] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 126.007898][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.016259][ T7904] netlink: 'syz.1.1630': attribute type 3 has an invalid length. [ 126.030657][ T4173] usb 3-1: Product: syz [ 126.035030][ T7904] netlink: 'syz.1.1630': attribute type 3 has an invalid length. [ 126.050432][ T4173] usb 3-1: Manufacturer: syz [ 126.055417][ T4173] usb 3-1: SerialNumber: syz [ 126.082115][ T4173] usb 3-1: config 0 descriptor?? [ 126.110654][ T7877] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.143277][ T4173] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 126.151578][ T7905] loop0: detected capacity change from 0 to 4096 [ 126.219547][ T7905] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 126.290626][ T4525] usb 4-1: cannot find UAC_HEADER [ 126.310849][ T7905] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 126.334764][ T4525] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 126.355233][ T4535] usb 3-1: USB disconnect, device number 11 [ 126.372359][ T4525] usb 4-1: USB disconnect, device number 11 [ 126.398128][ T4535] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 126.412569][ T4489] udevd[4489]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.470507][ T4173] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 126.540411][ T4529] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 126.773396][ T7927] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 126.810462][ T4529] usb 5-1: Using ep0 maxpacket: 16 [ 126.846835][ T7931] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 126.870492][ T4173] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 126.879647][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.956386][ T4173] usb 2-1: config 0 descriptor?? [ 127.017738][ T4173] usb 2-1: selecting invalid altsetting 3 [ 127.037245][ T4173] comedi comedi5: could not set alternate setting 3 in high speed [ 127.055624][ T4173] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 127.087886][ T4173] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 127.135844][ T4529] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 127.170783][ T4529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.197537][ T4529] usb 5-1: Product: syz [ 127.212474][ T4529] usb 5-1: Manufacturer: syz [ 127.217196][ T4529] usb 5-1: SerialNumber: syz [ 127.239351][ T4529] usb 5-1: config 0 descriptor?? [ 127.250993][ T26] usb 2-1: USB disconnect, device number 13 [ 127.254116][ T7953] loop2: detected capacity change from 0 to 1024 [ 127.318015][ T7959] loop0: detected capacity change from 0 to 64 [ 127.340646][ T4529] as10x_usb: device has been detected [ 127.354912][ T4529] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 127.399411][ T300] hfsplus: b-tree write err: -5, ino 4 [ 127.419387][ T4529] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 127.514380][ T4529] as10x_usb: error during firmware upload part1 [ 127.521680][ T4529] Registered device Sky IT Digital Key (green led) [ 127.560661][ T7789] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 127.726906][ T7969] loop2: detected capacity change from 0 to 16 [ 127.800580][ T7969] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.828794][ T7969] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 127.850300][ T7789] usb 4-1: Using ep0 maxpacket: 16 [ 127.854541][ T7975] loop0: detected capacity change from 0 to 256 [ 127.863982][ T4198] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -20 in[4096, 0] out[8192] [ 127.902450][ T7969] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -20 in[4096, 0] out[4096] [ 127.924060][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 127.924073][ T25] audit: type=1800 audit(1763499909.150:13): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1662" name="file3" dev="loop2" ino=9895604650073 res=0 errno=0 [ 128.000525][ T7789] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 128.011690][ T7975] FAT-fs (loop0): Directory bread(block 64) failed [ 128.018959][ T7789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.045565][ T7789] usb 4-1: config 0 has no interface number 0 [ 128.057644][ T7975] FAT-fs (loop0): Directory bread(block 65) failed [ 128.088900][ T7982] netlink: 'syz.1.1668': attribute type 4 has an invalid length. [ 128.097516][ T7975] FAT-fs (loop0): Directory bread(block 66) failed [ 128.110818][ T7975] FAT-fs (loop0): Directory bread(block 67) failed [ 128.117654][ T7982] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1668'. [ 128.130585][ T7975] FAT-fs (loop0): Directory bread(block 68) failed [ 128.137184][ T7975] FAT-fs (loop0): Directory bread(block 69) failed [ 128.164370][ T7975] FAT-fs (loop0): Directory bread(block 70) failed [ 128.190678][ T7975] FAT-fs (loop0): Directory bread(block 71) failed [ 128.218549][ T7975] FAT-fs (loop0): Directory bread(block 72) failed [ 128.230658][ T7789] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 128.260119][ T7975] FAT-fs (loop0): Directory bread(block 73) failed [ 128.266872][ T7789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.285222][ T7789] usb 4-1: Product: syz [ 128.289419][ T7789] usb 4-1: Manufacturer: syz [ 128.320404][ T7789] usb 4-1: SerialNumber: syz [ 128.332396][ T7789] usb 4-1: config 0 descriptor?? [ 128.382177][ T7789] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 128.390907][ T4529] usb 5-1: USB disconnect, device number 10 [ 128.398421][ T7789] usb 4-1: No valid video chain found. [ 128.435726][ T4529] Unregistered device Sky IT Digital Key (green led) [ 128.437686][ T4529] as10x_usb: device has been disconnected [ 128.604931][ T7789] usb 4-1: USB disconnect, device number 12 [ 128.630425][ T26] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 128.638159][ T7786] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 128.674060][ T7988] loop0: detected capacity change from 0 to 32768 [ 128.793345][ T7988] (syz.0.1671,7988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.808501][ T7988] (syz.0.1671,7988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.832957][ T7988] JBD2: Ignoring recovery information on journal [ 128.879299][ T7988] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 128.889103][ T7786] usb 2-1: Using ep0 maxpacket: 8 [ 128.919351][ T7988] (syz.0.1671,7988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xdf97dca5. Applying ECC. [ 129.000700][ T26] usb 3-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 129.018845][ T7988] (syz.0.1671,7988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118. Applying ECC. [ 129.020803][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 129.043236][ T7988] (syz.0.1671,7988,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0x45d1f118 [ 129.064424][ T7786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.068292][ T7988] (syz.0.1671,7988,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 129.093422][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 129.097748][ T7988] (syz.0.1671,7988,0):ocfs2_quota_read:201 ERROR: status = -5 [ 129.115394][ T7988] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 3 [ 129.125747][ T7988] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 129.135795][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 129.136013][ T7988] (syz.0.1671,7988,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 129.164949][ T25] audit: type=1326 audit(1763499910.390:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.4.1674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e6e1616c9 code=0x0 [ 129.193275][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.200971][ T7988] (syz.0.1671,7988,0):ocfs2_mknod:314 ERROR: status = -5 [ 129.208646][ T26] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.217369][ T7998] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 129.229854][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.238558][ T7988] (syz.0.1671,7988,0):ocfs2_mknod:502 ERROR: status = -5 [ 129.239940][ T26] usb 3-1: config 0 descriptor?? [ 129.259310][ T7988] (syz.0.1671,7988,1):ocfs2_mkdir:659 ERROR: status = -5 [ 129.266519][ T25] audit: type=1326 audit(1763499910.480:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.4.1674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f0e6e1616c9 code=0x0 [ 129.410371][ T26] rc_core: IR keymap rc-hauppauge not found [ 129.416521][ T26] Registered IR keymap rc-empty [ 129.422569][ T7786] usb 2-1: string descriptor 0 read error: -22 [ 129.429474][ T7786] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 129.448169][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 129.452530][ T7786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.476152][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.499405][ T8003] loop3: detected capacity change from 0 to 4096 [ 129.530319][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.561616][ T26] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 129.600983][ T26] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 129.620096][ T8003] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 129.652972][ T8003] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 129.692507][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.699305][ T8006] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 129.718026][ T8003] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 129.749542][ T8003] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 129.763528][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.781266][ T8003] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 129.819264][ T8003] ntfs: volume version 3.1. [ 129.824157][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.840628][ T8006] device veth0_vlan left promiscuous mode [ 129.880405][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.892167][ T8006] device veth0_vlan entered promiscuous mode [ 129.917632][ T8006] team0: Device veth0_vlan failed to register rx_handler [ 129.930388][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 129.980452][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 130.001035][ T7786] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 130.037297][ T7786] asix 2-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 130.050302][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 130.087952][ T8008] autofs4:pid:8008:autofs_fill_super: called with bogus options [ 130.095657][ T7786] asix: probe of 2-1:7.0 failed with error -71 [ 130.102814][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 130.129013][ T7786] usb 2-1: USB disconnect, device number 14 [ 130.150351][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 130.210390][ T26] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 130.215442][ T8012] netlink: 'syz.3.1681': attribute type 5 has an invalid length. [ 130.242151][ T26] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 130.275976][ T26] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 130.285860][ T8012] device  entered promiscuous mode [ 130.311351][ T26] usb 3-1: USB disconnect, device number 12 [ 130.315115][ T8016] binder: 8015:8016 ioctl c018620c 200000000080 returned -22 [ 130.477359][ T8022] netlink: 'syz.3.1686': attribute type 21 has an invalid length. [ 130.500541][ T8022] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1686'. [ 130.586211][ T8022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1686'. [ 130.597031][ T8028] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.757451][ T8035] loop0: detected capacity change from 0 to 256 [ 131.229502][ T8060] device bridge1 entered promiscuous mode [ 131.246981][ T8062] loop3: detected capacity change from 0 to 16 [ 131.284113][ T8054] loop0: detected capacity change from 0 to 4096 [ 131.334034][ T8054] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 131.371397][ T8062] erofs: (device loop3): mounted with root inode @ nid 36. [ 131.416940][ T8062] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 46 [ 131.428181][ T8071] loop2: detected capacity change from 0 to 256 [ 131.486406][ T8054] ntfs3: loop0: failed to convert "c46c" to cp1255 [ 131.544546][ T8071] FAT-fs (loop2): Directory bread(block 64) failed [ 131.562470][ T8071] FAT-fs (loop2): Directory bread(block 65) failed [ 131.590523][ T8071] FAT-fs (loop2): Directory bread(block 66) failed [ 131.602833][ T8071] FAT-fs (loop2): Directory bread(block 67) failed [ 131.624308][ T8077] loop3: detected capacity change from 0 to 256 [ 131.637960][ T8071] FAT-fs (loop2): Directory bread(block 68) failed [ 131.691025][ T8071] FAT-fs (loop2): Directory bread(block 69) failed [ 131.716090][ T8071] FAT-fs (loop2): Directory bread(block 70) failed [ 131.750387][ T8071] FAT-fs (loop2): Directory bread(block 71) failed [ 131.757010][ T8071] FAT-fs (loop2): Directory bread(block 72) failed [ 131.800669][ T8071] FAT-fs (loop2): Directory bread(block 73) failed [ 132.132475][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1724'. [ 132.143240][ T8097] loop1: detected capacity change from 0 to 512 [ 132.197225][ T8097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.341864][ T8097] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1723: inode has both inline data and extents flags [ 132.445586][ T8097] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1723: couldn't read orphan inode 15 (err -117) [ 132.502285][ T8097] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.542301][ T8119] xt_connbytes: Forcing CT accounting to be enabled [ 132.582098][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.588438][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849888][ T8134] netlink: 'syz.2.1739': attribute type 10 has an invalid length. [ 132.897336][ T8134] batman_adv: batadv0: Interface deactivated: vlan1 [ 132.974581][ T8134] device veth0_vlan left promiscuous mode [ 133.023852][ T8134] device veth0_vlan entered promiscuous mode [ 133.110726][ T8134] batman_adv: batadv0: Interface activated: vlan1 [ 133.130762][ T8134] team0: Device veth0_vlan failed to register rx_handler [ 133.170291][ T4529] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.193958][ T8134] batman_adv: batadv0: Interface deactivated: vlan1 [ 133.304465][ T8141] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1743'. [ 133.450261][ T4529] usb 5-1: Using ep0 maxpacket: 32 [ 133.513595][ T8139] loop1: detected capacity change from 0 to 32768 [ 133.526394][ T8141] device hsr_slave_1 left promiscuous mode [ 133.557112][ T8139] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.1741 (8139) [ 133.574498][ T4529] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 133.585700][ T4529] usb 5-1: config 0 has no interface number 0 [ 133.596208][ T8153] loop2: detected capacity change from 0 to 4096 [ 133.623903][ T8139] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 133.667372][ T8139] BTRFS info (device loop1): enabling ssd optimizations [ 133.674635][ T7789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 133.700801][ T8139] BTRFS info (device loop1): not using ssd optimizations [ 133.708089][ T8139] BTRFS info (device loop1): turning off barriers [ 133.735864][ T8139] BTRFS info (device loop1): using free space tree [ 133.763886][ T8139] BTRFS info (device loop1): has skinny extents [ 133.769002][ T8156] loop0: detected capacity change from 0 to 128 [ 133.791272][ T4529] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 133.810706][ T4529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.837890][ T4529] usb 5-1: Product: syz [ 133.886821][ T4529] usb 5-1: Manufacturer: syz [ 133.906966][ T4529] usb 5-1: SerialNumber: syz [ 133.920406][ T7789] usb 4-1: Using ep0 maxpacket: 8 [ 133.930638][ T8156] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 133.949305][ T8156] FAT-fs (loop0): Filesystem has been set read-only [ 133.950021][ T4529] usb 5-1: config 0 descriptor?? [ 134.012635][ T4529] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 134.050288][ T7789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 134.064197][ T4529] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 134.074057][ T8176] loop0: detected capacity change from 0 to 164 [ 134.143623][ T8178] loop2: detected capacity change from 0 to 1024 [ 134.195916][ T8176] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 134.210928][ T7789] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 134.240301][ T4529] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 134.247027][ T7789] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 134.309085][ T7789] usb 4-1: Product: syz [ 134.337630][ T7789] usb 4-1: Manufacturer: syz [ 134.343176][ T7789] usb 4-1: SerialNumber: syz [ 134.480916][ T4529] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 134.517193][ T4529] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 134.536492][ T4529] usb 5-1: USB disconnect, device number 11 [ 134.549148][ T4529] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 134.610371][ T7789] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 134.630708][ T7789] visor: probe of 4-1:1.0 failed with error -71 [ 134.659316][ T7789] usb 4-1: USB disconnect, device number 13 [ 134.758704][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 134.862813][ T8192] i2c i2c-0: Invalid block write size 33 [ 134.863943][ T8193] loop2: detected capacity change from 0 to 22 [ 134.901470][ T8193] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 134.920076][ T8193] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.035752][ T8203] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1763'. [ 135.364332][ T8223] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.664042][ T8247] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1786'. [ 135.823506][ T8247] device hsr_slave_1 left promiscuous mode [ 136.290945][ T8270] loop1: detected capacity change from 0 to 8192 [ 136.375394][ T8270] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2194) [ 136.402582][ T8270] FAT-fs (loop1): Filesystem has been set read-only [ 136.521067][ T4182] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 2194) [ 136.525583][ T8287] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.936505][ T8255] loop4: detected capacity change from 0 to 40427 [ 136.963967][ T8273] loop2: detected capacity change from 0 to 32768 [ 136.996927][ T8307] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1815'. [ 137.004080][ T8255] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 137.020999][ T8255] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.054723][ T8273] JBD2: Ignoring recovery information on journal [ 137.054923][ T8309] xt_connbytes: Forcing CT accounting to be enabled [ 137.066649][ T8255] F2FS-fs (loop4): invalid crc value [ 137.119401][ T8273] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.147713][ T8273] ocfs2: Unmounting device (7,2) on (node local) [ 137.155849][ T8255] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.382213][ T8255] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.389841][ T8255] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 137.533353][ T8255] attempt to access beyond end of device [ 137.533353][ T8255] loop4: rw=0, want=45072, limit=40427 [ 137.541535][ T8332] loop0: detected capacity change from 0 to 8 [ 137.749968][ T8338] loop2: detected capacity change from 0 to 1024 [ 137.840658][ T8342] overlayfs: missing 'lowerdir' [ 137.971018][ T8346] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 138.038082][ T8346] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1832'. [ 138.076429][ T8346] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 138.184547][ T8312] loop3: detected capacity change from 0 to 32768 [ 138.255164][ T8312] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 138.255164][ T8312] [ 138.305814][ T8312] ERROR: (device loop3): remounting filesystem as read-only [ 138.336981][ T8312] jfs_lookup: dtSearch returned -5 [ 138.408791][ T8358] loop0: detected capacity change from 0 to 8192 [ 138.492205][ T8358] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 138.536078][ T8358] REISERFS (device loop0): using ordered data mode [ 138.573507][ T8358] reiserfs: using flush barriers [ 138.670549][ T8358] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.778466][ T8358] REISERFS (device loop0): checking transaction log (loop0) [ 138.871700][ T8358] REISERFS (device loop0): Using r5 hash to sort names [ 138.878889][ T8358] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 138.971254][ T8358] REISERFS warning (device loop0): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 139.410291][ T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.476469][ T4529] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 139.496728][ T8394] loop4: detected capacity change from 0 to 40427 [ 139.572318][ T8394] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 139.608279][ T8394] F2FS-fs (loop4): invalid crc value [ 139.620042][ T8394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.728579][ T8394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.820878][ T13] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 139.829242][ T13] usb 4-1: config 0 has no interface number 0 [ 139.836405][ T13] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 139.847751][ T13] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.859254][ T8438] program syz.2.1876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.920576][ T4529] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.939100][ T4529] usb 2-1: config 220 has an invalid descriptor of length 95, skipping remainder of the config [ 139.960181][ T4529] usb 2-1: config 220 has no interface number 2 [ 139.967031][ T4529] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.982460][ T4529] usb 2-1: config 220 interface 0 has no altsetting 0 [ 139.989253][ T4529] usb 2-1: config 220 interface 76 has no altsetting 0 [ 139.996318][ T4529] usb 2-1: config 220 interface 1 has no altsetting 0 [ 140.045715][ T13] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 140.056288][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.077726][ T13] usb 4-1: Product: syz [ 140.087673][ T13] usb 4-1: Manufacturer: syz [ 140.108542][ T13] usb 4-1: SerialNumber: syz [ 140.139415][ T13] usb 4-1: config 0 descriptor?? [ 140.170687][ T8405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.191720][ T13] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 140.222542][ T4529] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.236333][ T4529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.245034][ T13] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 140.257807][ T4529] usb 2-1: Product: syz [ 140.265081][ T4529] usb 2-1: Manufacturer: syz [ 140.269794][ T4529] usb 2-1: SerialNumber: syz [ 140.440681][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 140.453290][ T8464] loop0: detected capacity change from 0 to 64 [ 140.489484][ T8468] program syz.4.1890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.626690][ T4525] usb 4-1: USB disconnect, device number 14 [ 140.689136][ T4525] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 140.719018][ T4525] cyberjack 4-1:0.69: device disconnected [ 140.740794][ T4529] usb 2-1: selecting invalid altsetting 0 [ 140.747003][ T4529] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 140.751058][ T8474] loop4: detected capacity change from 0 to 4096 [ 140.760380][ T4529] usb 2-1: No valid video chain found. [ 140.794873][ T8474] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 140.813878][ T4529] usb 2-1: selecting invalid altsetting 0 [ 140.830274][ T4529] usbtest: probe of 2-1:220.1 failed with error -22 [ 140.876248][ T4529] usb 2-1: USB disconnect, device number 15 [ 141.415373][ T8478] loop2: detected capacity change from 0 to 32768 [ 141.476285][ T8478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1895 (8478) [ 141.533730][ T8478] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.587288][ T8478] BTRFS info (device loop2): force clearing of disk cache [ 141.604641][ T8478] BTRFS info (device loop2): enabling auto defrag [ 141.620819][ T4529] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.629137][ T8478] BTRFS info (device loop2): max_inline at 0 [ 141.655695][ T8478] BTRFS info (device loop2): enabling disk space caching [ 141.692843][ T8478] BTRFS info (device loop2): disk space caching is enabled [ 141.725287][ T8478] BTRFS info (device loop2): has skinny extents [ 141.758078][ T8523] IPv6: sit1: Disabled Multicast RS [ 141.853083][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1921'. [ 141.937800][ T8544] program syz.3.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.018262][ T8553] loop0: detected capacity change from 0 to 256 [ 142.021621][ T4529] usb 2-1: descriptor type invalid, skip [ 142.079970][ T8553] FAT-fs (loop0): Directory bread(block 64) failed [ 142.088315][ T8553] FAT-fs (loop0): Directory bread(block 65) failed [ 142.095437][ T8553] FAT-fs (loop0): Directory bread(block 66) failed [ 142.097809][ T8478] BTRFS info (device loop2): enabling ssd optimizations [ 142.102650][ T8553] FAT-fs (loop0): Directory bread(block 67) failed [ 142.116410][ T4529] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.127358][ T4529] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 142.138392][ T8553] FAT-fs (loop0): Directory bread(block 68) failed [ 142.139572][ T8478] BTRFS info (device loop2): clearing free space tree [ 142.153034][ T8478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.167054][ T8478] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.177062][ T8553] FAT-fs (loop0): Directory bread(block 69) failed [ 142.222442][ T8561] device geneve2 entered promiscuous mode [ 142.251235][ T8553] FAT-fs (loop0): Directory bread(block 70) failed [ 142.287910][ T8553] FAT-fs (loop0): Directory bread(block 71) failed [ 142.300752][ T4529] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.330649][ T4529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.338701][ T4529] usb 2-1: Product: syz [ 142.343344][ T8553] FAT-fs (loop0): Directory bread(block 72) failed [ 142.349894][ T8553] FAT-fs (loop0): Directory bread(block 73) failed [ 142.363517][ T4529] usb 2-1: Manufacturer: syz [ 142.368141][ T4529] usb 2-1: SerialNumber: syz [ 142.467156][ T4529] usb 2-1: config 0 descriptor?? [ 142.655618][ T8575] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 142.831819][ T8579] netlink: 'syz.3.1936': attribute type 7 has an invalid length. [ 142.936127][ T6034] usb 2-1: USB disconnect, device number 16 [ 143.224987][ T8602] netlink: 'syz.0.1945': attribute type 30 has an invalid length. [ 143.247939][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1945'. [ 143.284446][ T8602] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 143.316303][ T8602] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 143.346137][ T8600] loop2: detected capacity change from 0 to 4096 [ 143.423784][ T8600] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 143.522905][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1954'. [ 143.592900][ T8600] ntfs3: loop2: failed to convert "c46c" to cp865 [ 143.603112][ T13] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 143.712087][ T8626] loop1: detected capacity change from 0 to 64 [ 143.900364][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 143.973606][ T8638] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1965'. [ 143.997335][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 144.041693][ T13] usb 4-1: config 2 has an invalid interface number: 241 but max is 0 [ 144.063108][ T13] usb 4-1: config 2 has no interface number 0 [ 144.102408][ T13] usb 4-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.147532][ T13] usb 4-1: config 2 interface 241 has no altsetting 0 [ 144.330803][ T13] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 144.368191][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.387115][ T13] usb 4-1: Product: syz [ 144.407446][ T13] usb 4-1: Manufacturer: syz [ 144.437847][ T13] usb 4-1: SerialNumber: syz [ 144.506074][ T8630] loop0: detected capacity change from 0 to 40427 [ 144.508901][ T13] ti_usb_3410_5052 4-1:2.241: TI USB 3410 1 port adapter converter detected [ 144.535000][ T13] ti_usb_3410_5052 4-1:2.241: missing endpoints [ 144.577909][ T8630] F2FS-fs (loop0): invalid crc value [ 144.663530][ T8630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.784506][ T4525] usb 4-1: USB disconnect, device number 15 [ 144.809808][ T8630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 144.873856][ T8646] loop1: detected capacity change from 0 to 32768 [ 144.874716][ T8674] loop4: detected capacity change from 0 to 256 [ 144.900576][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.925368][ T8646] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.1967 (8646) [ 144.941034][ T8674] exfat: Deprecated parameter 'utf8' [ 144.946367][ T8674] exfat: Deprecated parameter 'utf8' [ 144.968527][ T8674] exfat: Deprecated parameter 'namecase' [ 144.983163][ T8646] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 144.994768][ T8646] BTRFS info (device loop1): enabling ssd optimizations [ 145.003088][ T8646] BTRFS info (device loop1): turning off barriers [ 145.010375][ T8646] BTRFS info (device loop1): using free space tree [ 145.017239][ T8646] BTRFS info (device loop1): has skinny extents [ 145.022066][ T8674] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 145.180307][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 145.330387][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.350735][ T13] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 145.364191][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.405815][ T13] usb 3-1: config 0 descriptor?? [ 145.440283][ T8580] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.452395][ T13] gspca_main: spca501-2.14.0 probing 0000:0000 [ 145.700797][ T8580] usb 5-1: Using ep0 maxpacket: 8 [ 145.813878][ T8708] loop1: detected capacity change from 0 to 2048 [ 145.880449][ T13] gspca_spca501: reg write: error -71 [ 145.884187][ T8708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.888752][ T13] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 145.929129][ T13] spca501: probe of 3-1:0.0 failed with error -22 [ 145.967566][ T13] usb 3-1: USB disconnect, device number 13 [ 145.983032][ T8580] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 146.021113][ T8580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.049451][ T8580] usb 5-1: Product: syz [ 146.059096][ T8580] usb 5-1: Manufacturer: syz [ 146.076041][ T8580] usb 5-1: SerialNumber: syz [ 146.096637][ T8580] usb 5-1: config 0 descriptor?? [ 146.200171][ T8703] loop3: detected capacity change from 0 to 32768 [ 146.218817][ T8701] loop0: detected capacity change from 0 to 40427 [ 146.290934][ T8701] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 146.318918][ T8701] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 146.337277][ T8703] XFS (loop3): Mounting V5 Filesystem [ 146.346561][ T8701] F2FS-fs (loop0): invalid crc value [ 146.360464][ T8580] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 146.412701][ T8701] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.526157][ T8701] F2FS-fs (loop0): Start checkpoint disabled! [ 146.580648][ T8580] usb write operation failed. (-71) [ 146.605581][ T8701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 146.613800][ T8703] XFS (loop3): Ending clean mount [ 146.619767][ T8738] tmpfs: Bad value for 'mpol' [ 146.630555][ T8580] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.647401][ T8739] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 146.671968][ T8580] dvbdev: DVB: registering new adapter (Terratec H7) [ 146.689582][ T8580] usb 5-1: media controller created [ 146.710291][ T8739] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1995'. [ 146.742263][ T4183] XFS (loop3): Unmounting Filesystem [ 146.766243][ T8580] usb read operation failed. (-71) [ 146.790350][ T8580] usb write operation failed. (-71) [ 146.813112][ T8580] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 146.876978][ T8580] usb 5-1: USB disconnect, device number 12 [ 146.974613][ T4298] attempt to access beyond end of device [ 146.974613][ T4298] loop0: rw=2049, want=40976, limit=40427 [ 147.358887][ T8760] loop2: detected capacity change from 0 to 4096 [ 147.446970][ T8760] __ntfs_error: 5 callbacks suppressed [ 147.446988][ T8760] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 147.531604][ T8760] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.604509][ T8760] ntfs: volume version 3.1. [ 147.643073][ T8760] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 147.719398][ T8760] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 147.781342][ T8760] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 147.837185][ T8760] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 147.910513][ T8760] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 147.960408][ T8760] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 148.079364][ T8793] loop4: detected capacity change from 0 to 4096 [ 148.170344][ T8793] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 148.356493][ T8793] ntfs3: loop4: failed to convert "c46c" to cp857 [ 148.516419][ T8827] loop4: detected capacity change from 0 to 256 [ 148.622596][ T8831] loop0: detected capacity change from 0 to 64 [ 148.631039][ T8827] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 149.084928][ T8853] device gtp0 entered promiscuous mode [ 149.155240][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 149.267463][ T8805] loop3: detected capacity change from 0 to 40427 [ 149.344729][ T8805] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.365388][ T8805] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.401031][ T8879] loop2: detected capacity change from 0 to 512 [ 149.431559][ T8805] F2FS-fs (loop3): invalid crc value [ 149.493146][ T8805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.554092][ T8879] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2066: bg 0: block 328: padding at end of block bitmap is not set [ 149.623029][ T8805] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.630085][ T8805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.716509][ T8879] EXT4-fs (loop2): Remounting filesystem read-only [ 149.730460][ T8879] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 149.780897][ T8879] EXT4-fs (loop2): Remounting filesystem read-only [ 149.818922][ T8879] EXT4-fs (loop2): 1 orphan inode deleted [ 149.824897][ T8879] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,max_dir_size_kb=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 149.848181][ T8879] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.985374][ T8905] loop0: detected capacity change from 0 to 4096 [ 150.009355][ T8912] loop4: detected capacity change from 0 to 8 [ 150.039488][ T8912] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 150.054689][ T4489] udevd[4489]: incorrect cramfs checksum on /dev/loop4 [ 150.101684][ T8912] cramfs: Error -5 while decompressing! [ 150.107705][ T8912] cramfs: ffffffff961f1088(18)->ffff888067893000(4096) [ 150.113396][ T8905] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 150.164759][ T4489] udevd[4489]: incorrect cramfs checksum on /dev/loop4 [ 150.190319][ T8912] cramfs: Error -5 while decompressing! [ 150.210342][ T8912] cramfs: ffffffff961f1088(18)->ffff888067893000(4096) [ 150.227660][ T8905] ntfs3: loop0: ino=5, "/" directory corrupted [ 150.378270][ T8921] device vti0 entered promiscuous mode [ 150.398071][ T4184] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 150.405434][ T4184] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 150.406926][ T8923] loop1: detected capacity change from 0 to 1024 [ 150.487166][ T8923] hfsplus: invalid catalog entry type in lookup [ 150.602090][ T8927] loop2: detected capacity change from 0 to 4096 [ 150.704058][ T8933] loop0: detected capacity change from 0 to 2048 [ 150.801041][ T8941] loop4: detected capacity change from 0 to 128 [ 150.856733][ T8943] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.904413][ T8933] NILFS (loop0): error -2 truncating bmap (ino=16) [ 151.062169][ T8950] loop0: detected capacity change from 0 to 512 [ 151.084862][ T8956] loop3: detected capacity change from 0 to 256 [ 151.202938][ T8956] FAT-fs (loop3): Directory bread(block 64) failed [ 151.209535][ T8956] FAT-fs (loop3): Directory bread(block 65) failed [ 151.233870][ T8950] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,resuid=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 151.339369][ T8956] FAT-fs (loop3): Directory bread(block 66) failed [ 151.346600][ T8950] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.386628][ T8956] FAT-fs (loop3): Directory bread(block 67) failed [ 151.426735][ T8956] FAT-fs (loop3): Directory bread(block 68) failed [ 151.516251][ T8956] FAT-fs (loop3): Directory bread(block 69) failed [ 151.547129][ T8956] FAT-fs (loop3): Directory bread(block 70) failed [ 151.594099][ T8956] FAT-fs (loop3): Directory bread(block 71) failed [ 151.626758][ T8956] FAT-fs (loop3): Directory bread(block 72) failed [ 151.680511][ T8956] FAT-fs (loop3): Directory bread(block 73) failed [ 151.686550][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2112'. [ 151.697407][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 151.772139][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 151.921660][ T8960] loop1: detected capacity change from 0 to 32768 [ 151.997814][ T8998] loop3: detected capacity change from 0 to 164 [ 152.014161][ T8997] libceph: resolve '. [ 152.014161][ T8997] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 152.014161][ T8997] ' (ret=-3): failed [ 152.124662][ T8998] Unsupported NM flag settings (240) [ 152.547523][ T9023] netlink: 'syz.2.2131': attribute type 28 has an invalid length. [ 152.618256][ T9026] loop0: detected capacity change from 0 to 1764 [ 152.701389][ T9033] loop4: detected capacity change from 0 to 512 [ 152.747389][ T9033] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.799636][ T9033] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2135: invalid indirect mapped block 4294967295 (level 1) [ 152.800919][ T9026] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 152.847998][ T9033] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2135: invalid indirect mapped block 4294967295 (level 1) [ 152.883910][ T9033] EXT4-fs (loop4): 2 truncates cleaned up [ 152.909206][ T9033] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,nobarrier,auto_da_alloc=0x0000000000000002,nombcache,,errors=continue. Quota mode: writeback. [ 152.984979][ T9043] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 153.060684][ T9043] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2139'. [ 153.269282][ T9051] loop0: detected capacity change from 0 to 4096 [ 153.371182][ T9051] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.411301][ T9051] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 153.449797][ T9068] netlink: 'syz.3.2151': attribute type 21 has an invalid length. [ 153.473146][ T9069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.498624][ T9068] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2151'. [ 153.536896][ T9051] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 153.570455][ T4535] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 153.586477][ T9051] Remounting filesystem read-only [ 153.610492][ T8709] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.850540][ T8709] usb 3-1: Using ep0 maxpacket: 16 [ 153.958200][ T4535] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 153.976635][ T4535] usb 2-1: config 0 has no interface number 0 [ 153.984140][ T4535] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 153.994812][ T4535] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.099326][ T9106] netlink: 'syz.3.2169': attribute type 10 has an invalid length. [ 154.111702][ T9106] device macvlan0 entered promiscuous mode [ 154.130622][ T8709] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 154.136847][ T9106] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 154.140333][ T8709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.157558][ T8709] usb 3-1: Product: syz [ 154.170799][ T4227] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.188716][ T8709] usb 3-1: Manufacturer: syz [ 154.197740][ T8709] usb 3-1: SerialNumber: syz [ 154.211903][ T8709] usb 3-1: config 0 descriptor?? [ 154.253326][ T8709] as10x_usb: device has been detected [ 154.270686][ T8709] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 154.276307][ T4535] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 154.294742][ T8709] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 154.306230][ T4535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.309466][ T8709] as10x_usb: error during firmware upload part1 [ 154.320109][ T4535] usb 2-1: Product: syz [ 154.324830][ T4535] usb 2-1: Manufacturer: syz [ 154.333963][ T8709] Registered device Sky IT Digital Key (green led) [ 154.354082][ T4535] usb 2-1: SerialNumber: syz [ 154.390527][ T4535] usb 2-1: config 0 descriptor?? [ 154.395906][ T9116] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2174'. [ 154.410645][ T9057] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.431562][ T4535] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 154.480598][ T4535] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 154.574184][ T4227] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 154.592398][ T9126] loop4: detected capacity change from 0 to 64 [ 154.592691][ T4227] usb 1-1: config 0 has no interface number 0 [ 154.627432][ T4227] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 154.685562][ T4227] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.720379][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 154.875964][ T4227] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 154.890514][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.908909][ T4227] usb 1-1: Product: syz [ 154.927720][ T4227] usb 1-1: Manufacturer: syz [ 154.942719][ T4227] usb 1-1: SerialNumber: syz [ 154.954503][ T4227] usb 1-1: config 0 descriptor?? [ 154.960916][ T6033] usb 2-1: USB disconnect, device number 17 [ 154.976691][ T9091] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 154.988016][ T6033] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 155.010390][ T4227] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 155.045084][ T6033] cyberjack 2-1:0.69: device disconnected [ 155.063132][ T4227] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 155.169418][ T9124] loop3: detected capacity change from 0 to 40427 [ 155.212239][ T9124] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 155.250685][ T9124] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 155.293732][ T4535] usb 3-1: USB disconnect, device number 14 [ 155.312688][ T9124] F2FS-fs (loop3): invalid crc value [ 155.320073][ T9124] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.323916][ T4535] Unregistered device Sky IT Digital Key (green led) [ 155.341028][ T4535] as10x_usb: device has been disconnected [ 155.375339][ T9124] F2FS-fs (loop3): Start checkpoint disabled! [ 155.386426][ T9124] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 155.541693][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 155.551654][ T4298] attempt to access beyond end of device [ 155.551654][ T4298] loop3: rw=2049, want=40976, limit=40427 [ 155.580897][ T4525] usb 1-1: USB disconnect, device number 10 [ 155.596830][ T4525] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 155.613264][ T4525] cyberjack 1-1:0.69: device disconnected [ 155.830283][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 155.970636][ T13] usb 5-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 155.979131][ T9165] autofs4:pid:9165:autofs_fill_super: called with bogus options [ 155.996743][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.089508][ T9173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.108122][ T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 156.137308][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.156221][ T13] usb 5-1: SerialNumber: syz [ 156.237791][ T13] usb 5-1: 0:2 : does not exist [ 156.356714][ T9193] device netdevsim0 entered promiscuous mode [ 156.391946][ T9193] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 156.437361][ T13] usb 5-1: USB disconnect, device number 13 [ 156.560128][ T9201] IPv6: sit1: Disabled Multicast RS [ 156.591746][ T4525] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 156.627537][ T9205] loop1: detected capacity change from 0 to 1024 [ 156.677907][ T9205] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 156.677907][ T9205] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 156.677907][ T9205] [ 156.711733][ T9205] EXT4-fs (loop1): Ignoring removed bh option [ 156.737463][ T9211] loop0: detected capacity change from 0 to 1024 [ 156.773582][ T9205] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,journal_ioprio=0x0000000000000000,barrier,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 156.793881][ T9216] lo speed is unknown, defaulting to 1000 [ 156.818718][ T9216] vxcan1 speed is unknown, defaulting to 1000 [ 156.825201][ T9211] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 156.850492][ T4525] usb 4-1: Using ep0 maxpacket: 16 [ 157.105126][ T9226] loop4: detected capacity change from 0 to 8 [ 157.118809][ T9228] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2225'. [ 157.180483][ T4525] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 157.212601][ T4525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.244102][ T4525] usb 4-1: Product: syz [ 157.261984][ T9226] SQUASHFS error: lzo decompression failed, data probably corrupt [ 157.279415][ T4525] usb 4-1: Manufacturer: syz [ 157.283943][ T9235] netlink: 'syz.1.2229': attribute type 4 has an invalid length. [ 157.288673][ T9226] SQUASHFS error: Failed to read block 0x1c0: -5 [ 157.296955][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'. [ 157.320517][ T4525] usb 4-1: SerialNumber: syz [ 157.326065][ T9226] SQUASHFS error: Unable to read metadata cache entry [1be] [ 157.333292][ T9236] fuse: blksize only supported for fuseblk [ 157.334315][ T4525] usb 4-1: config 0 descriptor?? [ 157.413909][ T4525] as10x_usb: device has been detected [ 157.419641][ T4525] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 157.510957][ T4525] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 157.561476][ T4525] as10x_usb: error during firmware upload part1 [ 157.567784][ T4525] Registered device Sky IT Digital Key (green led) [ 157.861810][ T4535] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.944704][ T9268] loop4: detected capacity change from 0 to 256 [ 158.067169][ T9268] FAT-fs (loop4): Directory bread(block 64) failed [ 158.109922][ T9268] FAT-fs (loop4): Directory bread(block 65) failed [ 158.145666][ T9268] FAT-fs (loop4): Directory bread(block 66) failed [ 158.155905][ T9268] FAT-fs (loop4): Directory bread(block 67) failed [ 158.196828][ T9268] FAT-fs (loop4): Directory bread(block 68) failed [ 158.204332][ T9268] FAT-fs (loop4): Directory bread(block 69) failed [ 158.222786][ T9268] FAT-fs (loop4): Directory bread(block 70) failed [ 158.229450][ T9268] FAT-fs (loop4): Directory bread(block 71) failed [ 158.236466][ T4535] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 158.245562][ T4535] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.273365][ T9268] FAT-fs (loop4): Directory bread(block 72) failed [ 158.279929][ T9268] FAT-fs (loop4): Directory bread(block 73) failed [ 158.289850][ T4535] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.326412][ T4535] usb 3-1: config 1 has no interface number 1 [ 158.333156][ T4535] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 158.340560][ T8709] Bluetooth: hci4: command 0x0405 tx timeout [ 158.371262][ T4535] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 158.387793][ T4535] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 158.514593][ T6033] usb 4-1: USB disconnect, device number 16 [ 158.566371][ T6033] Unregistered device Sky IT Digital Key (green led) [ 158.570505][ T6033] as10x_usb: device has been disconnected [ 158.610645][ T4535] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.630682][ T4535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.639397][ T4535] usb 3-1: Product: syz [ 158.651488][ T4535] usb 3-1: Manufacturer: syz [ 158.657900][ T4535] usb 3-1: SerialNumber: syz [ 158.809036][ T9276] loop1: detected capacity change from 0 to 32768 [ 158.924681][ T9276] XFS (loop1): Mounting V5 Filesystem [ 158.930956][ T9274] loop0: detected capacity change from 0 to 40427 [ 158.977187][ T9274] F2FS-fs (loop0): build fault injection attr: rate: 4, type: 0x1ffff [ 159.000424][ T9274] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 159.045950][ T9274] F2FS-fs (loop0): invalid crc value [ 159.051680][ T4535] usb 3-1: MIDIStreaming interface descriptor not found [ 159.110333][ T4535] usb 3-1: USB disconnect, device number 15 [ 159.153966][ T9274] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440 [ 159.170035][ T9274] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 159.182322][ T9274] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.256813][ T9276] XFS (loop1): Ending clean mount [ 159.277595][ T9276] XFS: no-recovery mounts must be read-only. [ 159.294938][ T9274] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 159.370571][ T9274] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0xa30 [ 159.388928][ T4182] XFS (loop1): Unmounting Filesystem [ 159.454482][ T9280] loop4: detected capacity change from 0 to 32768 [ 159.474818][ T9274] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x440 [ 159.477143][ T4543] udevd[4543]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.591687][ T9274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.625459][ T9280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2252 (9280) [ 159.688548][ T9280] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 159.720503][ T9280] BTRFS info (device loop4): force clearing of disk cache [ 159.727676][ T9280] BTRFS info (device loop4): enabling auto defrag [ 159.746939][ T9274] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd6/0x560 [ 159.787759][ T9280] BTRFS info (device loop4): max_inline at 0 [ 159.797854][ T9280] BTRFS info (device loop4): enabling disk space caching [ 159.828571][ T9280] BTRFS info (device loop4): disk space caching is enabled [ 159.870859][ T9280] BTRFS info (device loop4): has skinny extents [ 159.881107][ T4184] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x66/0x1b0 [ 160.318885][ T9343] [U]  [ 160.369277][ T9280] BTRFS info (device loop4): enabling ssd optimizations [ 160.467963][ T9354] loop0: detected capacity change from 0 to 1024 [ 160.481127][ T9280] BTRFS info (device loop4): clearing free space tree [ 160.487973][ T9280] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.520268][ T9280] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.638001][ T9354] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 160.824986][ T9375] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 160.841084][ T9375] batman_adv: batadv0: Adding interface: wlan0 [ 160.910394][ T9375] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.935573][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.033958][ T9382] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2288'. [ 161.059611][ T9375] batman_adv: batadv0: Interface activated: wlan0 [ 161.090452][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2288'. [ 161.110693][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2288'. [ 161.260588][ T9388] loop2: detected capacity change from 0 to 256 [ 161.379706][ T9388] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 161.908010][ T9380] loop1: detected capacity change from 0 to 32768 [ 161.930379][ T9407] loop0: detected capacity change from 0 to 1024 [ 161.953756][ T9415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2301'. [ 161.994670][ T9415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2301'. [ 162.051184][ T9380] XFS: attr2 mount option is deprecated. [ 162.120073][ T9380] XFS (loop1): Mounting V5 Filesystem [ 162.292815][ T9380] XFS (loop1): Ending clean mount [ 162.354180][ T9380] XFS (loop1): Quotacheck needed: Please wait. [ 162.434020][ T9380] XFS (loop1): Quotacheck: Done. [ 162.580827][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2317'. [ 162.611172][ T4182] XFS (loop1): Unmounting Filesystem [ 162.659133][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2317'. [ 162.673817][ T9459] loop0: detected capacity change from 0 to 1024 [ 162.676443][ T9455] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2317'. [ 163.148942][ T9487] loop3: detected capacity change from 0 to 256 [ 163.193205][ T9490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2336'. [ 163.218317][ T9490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2336'. [ 163.297031][ T9487] FAT-fs (loop3): Directory bread(block 64) failed [ 163.331289][ T9487] FAT-fs (loop3): Directory bread(block 65) failed [ 163.350811][ T9487] FAT-fs (loop3): Directory bread(block 66) failed [ 163.357365][ T9487] FAT-fs (loop3): Directory bread(block 67) failed [ 163.380457][ T9487] FAT-fs (loop3): Directory bread(block 68) failed [ 163.390617][ T9487] FAT-fs (loop3): Directory bread(block 69) failed [ 163.397298][ T9487] FAT-fs (loop3): Directory bread(block 70) failed [ 163.424389][ T9487] FAT-fs (loop3): Directory bread(block 71) failed [ 163.443249][ T9487] FAT-fs (loop3): Directory bread(block 72) failed [ 163.449909][ T9487] FAT-fs (loop3): Directory bread(block 73) failed [ 163.490404][ T9395] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.536491][ T9503] loop4: detected capacity change from 0 to 2048 [ 163.621831][ T9503] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.655314][ T4200] udevd[4200]: incorrect nilfs2 checksum on /dev/loop4 [ 163.736089][ T4200] udevd[4200]: incorrect nilfs2 checksum on /dev/loop4 [ 163.744798][ T9507] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.783546][ T9509] loop1: detected capacity change from 0 to 1024 [ 163.815403][ T9503] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 163.832152][ T9503] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 163.870813][ T9395] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 163.894629][ T9395] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 163.918628][ T9503] Remounting filesystem read-only [ 163.947138][ T9503] NILFS (loop4): error -5 truncating bmap (ino=15) [ 164.000333][ T9395] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 164.032786][ T9395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.037495][ T9514] loop3: detected capacity change from 0 to 164 [ 164.094132][ T9493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.126598][ T9516] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 164.146453][ T9496] loop2: detected capacity change from 0 to 32768 [ 164.180849][ T9514] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 164.257558][ T9522] Unknown options in mask b7f2 [ 164.279553][ T9525] netlink: 'syz.1.2352': attribute type 2 has an invalid length. [ 164.291240][ T9525] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 164.314372][ T9526] kAFS: unparsable volume name [ 164.387297][ T9530] loop4: detected capacity change from 0 to 512 [ 164.440118][ T9496] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 164.590466][ T9395] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 164.605612][ T9530] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 164.624332][ T9395] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 164.640338][ T9530] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 164.707393][ T9530] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 164.733757][ T9395] usb 1-1: USB disconnect, device number 11 [ 164.740314][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 164.778411][ T9530] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 164.803866][ T9530] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 164.819856][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 164.845152][ T9530] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.865806][ T9530] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2354: bg 0: block 34: padding at end of block bitmap is not set [ 164.910758][ T9530] Quota error (device loop4): write_blk: dquota write failed [ 164.934231][ T9530] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 164.992121][ T9530] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.2354: Failed to acquire dquot type 1 [ 165.079654][ T9530] EXT4-fs (loop4): 1 truncate cleaned up [ 165.123334][ T9530] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 165.282758][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.290330][ T9530] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.298252][ T9530] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 165.358462][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.391389][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.546578][ T9584] loop1: detected capacity change from 0 to 24 [ 165.626109][ T9584] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 165.679914][ T9584] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 165.706773][ T9584] romfs: read error for inode 0x70040 [ 166.047576][ T9617] ksmbd: Unknown IPC event: 12, ignore. [ 166.132826][ T9623] __nla_validate_parse: 1 callbacks suppressed [ 166.132841][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 166.388482][ T9637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.447629][ T9640] kAFS: No cell specified [ 166.469925][ T9643] loop2: detected capacity change from 0 to 64 [ 166.539259][ T9645] ..: renamed from ipvlan0 [ 166.585337][ T9643] hfs: request for non-existent node -117440513 in B*Tree [ 166.623263][ T9643] hfs: request for non-existent node -117440513 in B*Tree [ 166.767462][ T9601] loop4: detected capacity change from 0 to 32768 [ 166.822935][ T9661] netlink: 'syz.3.2415': attribute type 30 has an invalid length. [ 166.887401][ T9672] binder: 9669:9672 unknown command 1077961712 [ 166.887424][ T9672] binder: 9669:9672 ioctl c0306201 200000000480 returned -22 [ 166.962508][ T9678] loop1: detected capacity change from 0 to 1024 [ 166.974190][ T9601] XFS (loop4): Mounting V5 Filesystem [ 167.045322][ T9678] hfsplus: xattr searching failed [ 167.090438][ T4227] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 167.186372][ T9601] XFS (loop4): Ending clean mount [ 167.238622][ T9601] XFS (loop4): Quotacheck needed: Please wait. [ 167.305705][ T9601] XFS (loop4): Quotacheck: Done. [ 167.330894][ T4227] usb 3-1: Using ep0 maxpacket: 16 [ 167.368406][ T4189] XFS (loop4): Unmounting Filesystem [ 167.457557][ T4227] usb 3-1: config 1 has an invalid interface number: 57 but max is 0 [ 167.477322][ T4227] usb 3-1: config 1 has no interface number 0 [ 167.499795][ T9692] xt_CT: No such helper "syz0" [ 167.517324][ T4227] usb 3-1: config 1 interface 57 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 167.546117][ T4227] usb 3-1: config 1 interface 57 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 167.565934][ T4227] usb 3-1: config 1 interface 57 has no altsetting 0 [ 167.730766][ T4227] usb 3-1: New USB device found, idVendor=045e, idProduct=0439, bcdDevice=72.31 [ 167.758433][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.778742][ T4227] usb 3-1: Product: syz [ 167.787202][ T4227] usb 3-1: Manufacturer: syz [ 167.807475][ T4227] usb 3-1: SerialNumber: syz [ 167.840607][ T9663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.857794][ T9663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.901423][ T4227] ipaq 3-1:1.57: PocketPC PDA converter detected [ 168.137760][ T4227] usb 3-1: PocketPC PDA converter now attached to ttyUSB0 [ 168.269859][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2453'. [ 168.295496][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2453'. [ 168.347935][ T8580] usb 3-1: USB disconnect, device number 16 [ 168.367250][ T8580] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 168.391480][ T8580] ipaq 3-1:1.57: device disconnected [ 168.596861][ T9752] loop3: detected capacity change from 0 to 8192 [ 168.749423][ T9752] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 168.774654][ T9752] REISERFS (device loop3): using ordered data mode [ 168.829511][ T9752] reiserfs: using flush barriers [ 168.863646][ T9752] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.880904][ T9752] REISERFS (device loop3): checking transaction log (loop3) [ 168.939979][ T9752] REISERFS (device loop3): Using r5 hash to sort names [ 168.970831][ T9752] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 169.106542][ T9796] loop1: detected capacity change from 0 to 256 [ 169.248259][ T9804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 169.259356][ T9796] FAT-fs (loop1): Directory bread(block 64) failed [ 169.297317][ T9796] FAT-fs (loop1): Directory bread(block 65) failed [ 169.356404][ T9796] FAT-fs (loop1): Directory bread(block 66) failed [ 169.388918][ T9796] FAT-fs (loop1): Directory bread(block 67) failed [ 169.424107][ T9796] FAT-fs (loop1): Directory bread(block 68) failed [ 169.468876][ T9796] FAT-fs (loop1): Directory bread(block 69) failed [ 169.500580][ T9796] FAT-fs (loop1): Directory bread(block 70) failed [ 169.523236][ T9796] FAT-fs (loop1): Directory bread(block 71) failed [ 169.540099][ T9796] FAT-fs (loop1): Directory bread(block 72) failed [ 169.578556][ T9796] FAT-fs (loop1): Directory bread(block 73) failed [ 169.723743][ T9829] lo speed is unknown, defaulting to 1000 [ 169.737261][ T9832] loop4: detected capacity change from 0 to 128 [ 169.753873][ T9829] vxcan1 speed is unknown, defaulting to 1000 [ 169.849876][ T9832] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.894445][ T9832] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.944575][ T9832] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 169.983719][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 169.992937][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 170.008914][ T9849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2502'. [ 170.046188][ T9832] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 170.108030][ T9855] overlayfs: unrecognized mount option "\{\" or missing value [ 170.132613][ T9854] loop0: detected capacity change from 0 to 2048 [ 170.243351][ T9854] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.267177][ T9867] loop2: detected capacity change from 0 to 256 [ 170.497965][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2517'. [ 170.507327][ T8709] Bluetooth: hci4: command 0x0406 tx timeout [ 170.510388][ T9395] Bluetooth: hci3: command 0x0406 tx timeout [ 170.520804][ T8709] Bluetooth: hci1: command 0x0406 tx timeout [ 170.527554][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2518'. [ 170.548099][ T9395] Bluetooth: hci2: command 0x0406 tx timeout [ 170.564239][ T9395] Bluetooth: hci0: command 0x0406 tx timeout [ 170.670861][ T9891] (unnamed net_device) (uninitialized): option mode: invalid value (8) [ 170.841320][ T9903] lo speed is unknown, defaulting to 1000 [ 170.873022][ T9903] vxcan1 speed is unknown, defaulting to 1000 [ 170.919045][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2531'. [ 171.135621][ T9921] loop1: detected capacity change from 0 to 2048 [ 171.258085][ T9921] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.284432][ T9933] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.380455][ T9938] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.449875][ T9921] attempt to access beyond end of device [ 171.449875][ T9921] loop1: rw=0, want=262218, limit=2048 [ 171.470918][ T9921] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 171.649278][ T9956] NILFS (nullb0): couldn't find nilfs on the device [ 171.671996][ T9954] loop0: detected capacity change from 0 to 512 [ 171.716435][ T9954] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 171.725143][ T9952] loop2: detected capacity change from 0 to 4096 [ 171.740493][ T9954] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 171.758282][ T9954] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 171.791863][ T9954] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 171.810044][ T9954] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 171.833315][ T9952] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 171.836652][ T9954] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.862034][ T9954] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2552: bg 0: block 34: padding at end of block bitmap is not set [ 171.886465][ T9954] Quota error (device loop0): write_blk: dquota write failed [ 171.894119][ T9954] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 171.904838][ T9954] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.2552: Failed to acquire dquot type 1 [ 171.926910][ T9954] EXT4-fs (loop0): 1 truncate cleaned up [ 171.944603][ T9967] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 171.953605][ T9952] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 171.989072][ T9954] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 172.011460][ T9952] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 172.080371][ T9952] ntfs: (device loop2): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 172.135238][ T9952] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 172.179021][ T9952] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 172.310087][ T9952] ntfs: volume version 3.1. [ 172.330013][ T9954] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 172.356479][ T9952] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 172.393157][ T9954] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 172.410386][ T4530] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 172.426600][ T9952] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 172.711427][ T9985] loop3: detected capacity change from 0 to 4096 [ 172.769872][ T9985] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 172.870484][ T4530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 172.903318][ T4530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.948365][ T4530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 173.017118][ T4530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 173.060925][ T9985] ntfs3: loop3: MftZone: unavailable [ 173.230611][ T4530] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 173.262680][ T4530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.310319][ T4530] usb 5-1: Product: syz [ 173.314507][ T4530] usb 5-1: Manufacturer: syz [ 173.341780][ T4530] usb 5-1: SerialNumber: syz [ 173.375463][ T4530] usb 5-1: config 0 descriptor?? [ 173.649961][T10030] __nla_validate_parse: 1 callbacks suppressed [ 173.649978][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 173.680434][ T4530] adutux 5-1:0.0: Could not retrieve serial number [ 173.687884][ T4530] adutux: probe of 5-1:0.0 failed with error -5 [ 173.835612][T10038] loop2: detected capacity change from 0 to 1024 [ 173.845915][T10041] loop1: detected capacity change from 0 to 256 [ 173.890781][ T4530] usb 5-1: USB disconnect, device number 14 [ 174.007641][T10048] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2597'. [ 174.030490][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 174.046237][ T4826] hfsplus: b-tree write err: -5, ino 4 [ 174.110647][T10048] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2597'. [ 174.139707][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 174.172224][T10048] netlink: 'syz.3.2597': attribute type 2 has an invalid length. [ 174.210298][T10048] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2597'. [ 174.313057][T10060] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2602'. [ 174.362323][T10062] CIFS: VFS: Malformed UNC in devname [ 174.440440][ T8580] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 174.542690][T10076] loop3: detected capacity change from 0 to 8 [ 174.676896][T10082] IPv6: NLM_F_REPLACE set, but no existing node found! [ 174.700285][ T8580] usb 2-1: Using ep0 maxpacket: 8 [ 174.728497][T10085] loop3: detected capacity change from 0 to 256 [ 174.746353][T10086] kAFS: unable to lookup cell ' [ 174.746353][T10086] $)-.ײfYǝa2s [ 174.746353][T10086] ' [ 174.991368][ T8580] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 175.019680][ T8580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.056681][ T8580] usb 2-1: Product: syz [ 175.068176][ T8580] usb 2-1: Manufacturer: syz [ 175.073205][T10103] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 175.090310][T10100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2623'. [ 175.093526][ T8580] usb 2-1: SerialNumber: syz [ 175.138282][T10105] loop2: detected capacity change from 0 to 256 [ 175.154020][T10094] loop4: detected capacity change from 0 to 4096 [ 175.241762][T10105] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 175.286298][T10105] FAT-fs (loop2): Filesystem has been set read-only [ 175.291310][T10094] ntfs: volume version 3.1. [ 175.640409][ T8580] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 175.681248][ T8580] mxuport: probe of 2-1:254.0 failed with error -5 [ 175.731563][ T8580] usb 2-1: USB disconnect, device number 18 [ 175.738772][T10130] loop3: detected capacity change from 0 to 16 [ 175.739715][T10131] loop0: detected capacity change from 0 to 512 [ 175.750298][ T6033] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 175.779943][T10130] erofs: (device loop3): mounted with root inode @ nid 36. [ 175.834490][T10130] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 175.861670][T10131] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noauto_da_alloc,. Quota mode: writeback. [ 175.950440][T10131] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.000310][ T6033] usb 3-1: Using ep0 maxpacket: 32 [ 176.074307][T10131] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.2638: Failed to acquire dquot type 0 [ 176.130596][T10131] EXT4-fs (loop0): Remounting filesystem read-only [ 176.160598][ T6033] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.236542][T10146] loop4: detected capacity change from 0 to 64 [ 176.252028][ T6033] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 176.268383][ T6033] usb 3-1: config 7 has no interface number 0 [ 176.278394][ T6033] usb 3-1: config 7 interface 187 has no altsetting 0 [ 176.440686][ T6033] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 176.470538][ T6033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.484488][ T6033] usb 3-1: Product: syz [ 176.488676][ T6033] usb 3-1: Manufacturer: syz [ 176.493829][ T6033] usb 3-1: SerialNumber: syz [ 176.589360][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 176.760491][ T6033] usb 3-1: Limiting number of CPorts to U8_MAX [ 176.769880][ T6033] usb 3-1: Not enough endpoints found in device, aborting! [ 176.873923][T10182] netlink: 'syz.1.2662': attribute type 10 has an invalid length. [ 176.907767][T10186] loop4: detected capacity change from 0 to 256 [ 176.924928][T10182] team0: Device hsr_slave_0 failed to register rx_handler [ 176.953617][T10184] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 177.015443][ T4530] usb 3-1: USB disconnect, device number 17 [ 177.623173][T10219] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.636586][T10226] loop2: detected capacity change from 0 to 64 [ 177.676370][T10219] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.798827][T10224] device syz_tun entered promiscuous mode [ 177.928097][T10238] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.2690'. [ 178.572964][T10270] loop3: detected capacity change from 0 to 2048 [ 178.685617][T10270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.756019][T10280] loop4: detected capacity change from 0 to 136 [ 178.883957][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2713'. [ 179.049034][T10289] loop4: detected capacity change from 0 to 8 [ 179.361037][T10308] netlink: 'syz.0.2725': attribute type 29 has an invalid length. [ 179.389656][T10309] loop4: detected capacity change from 0 to 1024 [ 179.396809][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 179.435924][T10308] netlink: 'syz.0.2725': attribute type 29 has an invalid length. [ 179.448467][T10312] loop3: detected capacity change from 0 to 1024 [ 179.454543][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2725'. [ 179.526737][T10312] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 2: comm syz.3.2726: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.559000][T10309] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 179.605172][T10309] hfsplus: xattr searching failed [ 179.657490][T10309] attempt to access beyond end of device [ 179.657490][T10309] loop4: rw=0, want=917506, limit=1024 [ 179.744916][T10312] __quota_error: 16 callbacks suppressed [ 179.744931][T10312] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 179.776297][T10309] Buffer I/O error on dev loop4, logical block 458752, async page read [ 179.806808][T10312] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 48: comm syz.3.2726: lblock 0 mapped to illegal pblock 48 (length 1) [ 179.822673][T10309] hfsplus: unable to mark blocks free: error -5 [ 179.890352][T10309] hfsplus: can't free extent [ 179.897844][T10241] loop1: detected capacity change from 0 to 65536 [ 179.927467][T10322] loop2: detected capacity change from 0 to 8 [ 179.938988][T10312] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 179.961795][T10312] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.2726: Failed to acquire dquot type 0 [ 179.988978][T10312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 180.062992][T10312] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #11: comm syz.3.2726: mark_inode_dirty error [ 180.149154][T10312] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 180.200529][T10312] EXT4-fs (loop3): 1 orphan inode deleted [ 180.215029][T10312] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 180.244036][ T3003] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.275731][T10241] XFS (loop1): Mounting V5 Filesystem [ 180.321931][ T3003] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 180.330908][ T25] audit: type=1800 audit(1763499961.560:17): pid=10322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2730" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 180.378453][ T3003] EXT4-fs error (device loop3): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 180.489098][ T3003] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.558018][T10241] XFS (loop1): Ending clean mount [ 180.573279][ T3003] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 180.668199][ T3003] EXT4-fs error (device loop3): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0 [ 180.747519][ T4183] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 180.792039][ T4183] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 180.802023][ T4182] XFS (loop1): Unmounting Filesystem [ 180.863761][ T4183] EXT4-fs error (device loop3): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 180.951576][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2748'. [ 181.107749][T10365] sctp: [Deprecated]: syz.3.2741 (pid 10365) Use of int in max_burst socket option deprecated. [ 181.107749][T10365] Use struct sctp_assoc_value instead [ 181.789333][T10397] loop2: detected capacity change from 0 to 256 [ 182.180340][ T4530] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 182.244690][T10419] loop3: detected capacity change from 0 to 256 [ 182.413195][T10419] FAT-fs (loop3): Directory bread(block 64) failed [ 182.426144][T10419] FAT-fs (loop3): Directory bread(block 65) failed [ 182.434625][T10419] FAT-fs (loop3): Directory bread(block 66) failed [ 182.446994][T10419] FAT-fs (loop3): Directory bread(block 67) failed [ 182.457936][T10419] FAT-fs (loop3): Directory bread(block 68) failed [ 182.471903][T10419] FAT-fs (loop3): Directory bread(block 69) failed [ 182.478580][T10419] FAT-fs (loop3): Directory bread(block 70) failed [ 182.492721][T10419] FAT-fs (loop3): Directory bread(block 71) failed [ 182.499548][T10419] FAT-fs (loop3): Directory bread(block 72) failed [ 182.517035][T10419] FAT-fs (loop3): Directory bread(block 73) failed [ 182.550423][ T4530] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 182.581117][ T4530] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.752724][ T4530] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.770278][ T4530] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.800278][ T4530] usb 2-1: Product: syz [ 182.804523][ T4530] usb 2-1: Manufacturer: syz [ 182.809119][ T4530] usb 2-1: SerialNumber: syz [ 182.821138][T10421] loop3: detected capacity change from 0 to 4096 [ 182.829143][ T4530] usb 2-1: config 0 descriptor?? [ 182.851225][T10421] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid end of sector marker. [ 182.876042][ T4530] usb 2-1: selecting invalid altsetting 0 [ 182.937905][T10421] ntfs: volume version 3.1. [ 183.008321][T10421] ntfs: (device loop3): parse_options(): Unrecognized mount option 184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM). [ 183.127680][ T4530] usb 2-1: USB disconnect, device number 19 [ 183.416660][T10443] loop2: detected capacity change from 0 to 256 [ 183.501417][T10443] FAT-fs (loop2): Directory bread(block 64) failed [ 183.510080][T10443] FAT-fs (loop2): Directory bread(block 65) failed [ 183.520517][T10443] FAT-fs (loop2): Directory bread(block 66) failed [ 183.527074][T10443] FAT-fs (loop2): Directory bread(block 67) failed [ 183.553178][T10443] FAT-fs (loop2): Directory bread(block 68) failed [ 183.559738][T10443] FAT-fs (loop2): Directory bread(block 69) failed [ 183.567401][T10443] FAT-fs (loop2): Directory bread(block 70) failed [ 183.587205][T10443] FAT-fs (loop2): Directory bread(block 71) failed [ 183.600148][T10443] FAT-fs (loop2): Directory bread(block 72) failed [ 183.619321][T10443] FAT-fs (loop2): Directory bread(block 73) failed [ 183.630386][ T6033] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 183.648195][T10450] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.857901][T10454] x_tables: duplicate entry at hook 1 [ 183.951968][T10457] smb3: Bad value for 'uid' [ 184.132253][ T25] audit: type=1400 audit(1763499965.360:18): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10467 comm="syz.2.2799" [ 184.150550][ T6033] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 184.204265][ T6033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.216847][T10472] loop2: detected capacity change from 0 to 256 [ 184.230587][ T8181] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 184.240174][ T6033] usb 1-1: Product: syz [ 184.248020][ T6033] usb 1-1: Manufacturer: syz [ 184.252804][ T6033] usb 1-1: SerialNumber: syz [ 184.317347][ T6033] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 184.331478][T10472] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.356927][T10472] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 184.369292][T10472] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 184.373545][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.403222][T10472] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805fa81b60 iblock : 16, err : -5) [ 184.415256][T10472] exFAT-fs (loop2): Filesystem has been set read-only [ 184.510334][ T8181] usb 4-1: Using ep0 maxpacket: 8 [ 184.779783][T10490] loop2: detected capacity change from 0 to 64 [ 184.840523][ T8181] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 184.854950][ T8181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.865861][ T8181] usb 4-1: Product: syz [ 184.870048][ T8181] usb 4-1: Manufacturer: syz [ 184.870606][T10492] netlink: 'syz.4.2811': attribute type 1 has an invalid length. [ 184.879075][ T8181] usb 4-1: SerialNumber: syz [ 184.889809][ T8181] usb 4-1: config 0 descriptor?? [ 184.921278][ T6033] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 184.950701][ T4530] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 185.067348][T10501] loop4: detected capacity change from 0 to 64 [ 185.098318][T10503] netlink: 'syz.2.2815': attribute type 3 has an invalid length. [ 185.240646][ T4530] usb 2-1: Using ep0 maxpacket: 32 [ 185.335648][T10514] loop4: detected capacity change from 0 to 1024 [ 185.347469][T10514] EXT4-fs (loop4): Ignoring removed nobh option [ 185.354187][ T8181] usb 4-1: USB disconnect, device number 17 [ 185.359587][T10514] EXT4-fs (loop4): Ignoring removed bh option [ 185.370690][ T4530] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 185.376246][T10514] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.380265][ T4530] usb 2-1: config 0 has no interface number 0 [ 185.409599][ T4530] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.417261][ T8709] usb 1-1: USB disconnect, device number 12 [ 185.422525][ T4530] usb 2-1: config 0 interface 85 has no altsetting 0 [ 185.490152][T10514] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 185.624509][ T4530] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 185.637497][ T4530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.645848][ T4530] usb 2-1: Product: syz [ 185.650567][ T4530] usb 2-1: Manufacturer: syz [ 185.655174][ T4530] usb 2-1: SerialNumber: syz [ 185.663618][T10526] loop2: detected capacity change from 0 to 8192 [ 185.686619][ T4530] usb 2-1: config 0 descriptor?? [ 185.689855][ T4200] udevd[4200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.724233][T10526] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 185.735220][T10526] REISERFS (device loop2): using ordered data mode [ 185.743752][T10526] reiserfs: using flush barriers [ 185.749985][T10526] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.766947][T10526] REISERFS (device loop2): checking transaction log (loop2) [ 185.990453][T10526] REISERFS (device loop2): Using tea hash to sort names [ 186.003997][T10526] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 186.036648][T10535] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.160379][ T4530] appletouch 2-1:0.85: Failed to request geyser raw mode [ 186.167599][ T4530] appletouch: probe of 2-1:0.85 failed with error -5 [ 186.207438][T10542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.260357][ T6033] usb 1-1: Service connection timeout for: 256 [ 186.269913][ T4530] usb 2-1: USB disconnect, device number 20 [ 186.296088][ T6033] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 186.342889][ T6033] ath9k_htc: Failed to initialize the device [ 186.387605][ T8709] usb 1-1: ath9k_htc: USB layer deinitialized [ 186.848687][T10582] loop1: detected capacity change from 0 to 8 [ 186.958645][T10582] SQUASHFS error: xz decompression failed, data probably corrupt [ 186.999222][T10582] SQUASHFS error: Failed to read block 0x108: -5 [ 187.035385][T10582] SQUASHFS error: Unable to read metadata cache entry [106] [ 187.056136][T10595] ufs: Invalid option: "0(eLd9(@ 8L)uH\dKzLVR<%5rƌze ~I2~ [ 187.056136][T10595] r0Rpyh:Y [ 187.056136][T10595] O\zY" or missing value [ 187.059418][T10592] loop2: detected capacity change from 0 to 1764 [ 187.090510][T10582] SQUASHFS error: Unable to read inode 0x11f [ 187.117293][T10595] ufs: wrong mount options [ 187.189964][T10592] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 187.406173][T10606] loop4: detected capacity change from 0 to 1024 [ 187.512542][T10606] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 187.565194][T10622] loop0: detected capacity change from 0 to 512 [ 187.573957][T10606] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 187.588735][T10606] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.644453][T10606] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,sysvgroups,journal_ioprio=0x0000000000000004,noauto_da_alloc,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,bsddf,,errors=continue. Quota mode: writeback. [ 187.755415][T10622] EXT4-fs (loop0): orphan cleanup on readonly fs [ 187.779665][T10622] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.2869: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 187.816995][T10622] EXT4-fs error (device loop0): ext4_quota_enable:6420: comm syz.0.2869: Bad quota inode: 4, type: 1 [ 187.841638][T10622] EXT4-fs warning (device loop0): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.866322][T10622] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 187.873296][T10622] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.893336][T10622] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 187.905780][T10642] netlink: 'syz.1.2878': attribute type 1 has an invalid length. [ 187.913926][T10622] EXT4-fs warning (device loop0): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 187.913940][ T6033] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 187.962829][T10642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2878'. [ 188.220276][ T6033] usb 4-1: Using ep0 maxpacket: 16 [ 188.340589][ T6033] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.356576][ T6033] usb 4-1: config 0 has no interface number 0 [ 188.540689][ T6033] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 188.561216][T10684] MTD: Couldn't look up './file0': -15 [ 188.563849][ T6033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.595414][ T6033] usb 4-1: Product: syz [ 188.599601][ T6033] usb 4-1: Manufacturer: syz [ 188.640765][ T6033] usb 4-1: SerialNumber: syz [ 188.651455][ T6033] usb 4-1: config 0 descriptor?? [ 188.692428][ T6033] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 189.034998][T10713] loop4: detected capacity change from 0 to 1024 [ 189.129671][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2916'. [ 189.130359][ T6033] gspca_spca1528: reg_w err -71 [ 189.190320][ T6033] spca1528: probe of 4-1:0.1 failed with error -71 [ 189.208853][ T6033] usb 4-1: USB disconnect, device number 18 [ 189.274772][T10725] loop0: detected capacity change from 0 to 512 [ 189.350427][T10707] loop2: detected capacity change from 0 to 32768 [ 189.753659][T10707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2908 (10707) [ 189.770556][T10725] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 189.770556][T10725] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 189.770556][T10725] [ 189.799329][T10725] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.852793][T10707] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 189.887092][T10725] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 189.896983][T10707] BTRFS info (device loop2): using free space tree [ 190.002448][T10707] BTRFS info (device loop2): has skinny extents [ 190.050681][ T8580] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 190.058608][T10725] EXT4-fs (loop0): 1 truncate cleaned up [ 190.081044][ T4826] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 190.115244][ T4826] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:7: Failed to release dquot type 1 [ 190.147683][T10725] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,nodiscard,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 190.215328][T10754] loop1: detected capacity change from 0 to 1024 [ 190.310477][ T8580] usb 4-1: Using ep0 maxpacket: 8 [ 190.342716][T10707] BTRFS info (device loop2): enabling ssd optimizations [ 190.430359][ T8580] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 190.438548][ T8580] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.501006][ T8580] usb 4-1: config 0 has no interface number 0 [ 190.507135][ T8580] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 190.530303][ T8709] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 190.580514][ T8580] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 190.596273][ T8580] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 190.606698][ T8580] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 190.667752][T10778] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 190.801207][ T8580] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 190.834438][ T8580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.853319][ T8580] usb 4-1: Product: syz [ 190.857642][ T8580] usb 4-1: Manufacturer: syz [ 190.886954][ T8580] usb 4-1: SerialNumber: syz [ 190.892058][ T8709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 190.924761][ T8580] usb 4-1: config 0 descriptor?? [ 190.929883][ T8709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.940672][T10727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.947717][T10727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.956728][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 191.155139][ T8709] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.170255][ T8709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.206196][ T8709] usb 5-1: Product: syz [ 191.224502][ T8709] usb 5-1: Manufacturer: syz [ 191.229128][ T8709] usb 5-1: SerialNumber: syz [ 191.421132][ T8580] usb 4-1: NFC: intf ffff888060863000 id ffffffff8c94ad60 [ 191.477942][T10821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2954'. [ 191.494205][ T8580] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 191.500285][T10821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2954'. [ 191.509752][ T8580] usb 4-1: USB disconnect, device number 19 [ 191.518341][ T8580] usb 4-1: NFC: intf ffff888060863000 [ 191.557550][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'. [ 191.592565][ T8709] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 191.605969][ T8709] usb 5-1: found format II with max.bitrate = 3, frame size=7 [ 191.628056][ T8709] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 191.670400][ T8709] usb 5-1: found format II with max.bitrate = 3, frame size=7 [ 191.803024][ T8709] usb 5-1: USB disconnect, device number 15 [ 192.087168][T10844] loop2: detected capacity change from 0 to 2048 [ 192.179681][T10844] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.270814][T10862] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 192.315191][T10865] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2975'. [ 192.390774][T10865] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 192.554275][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2983'. [ 192.589377][T10881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2983'. [ 192.629745][T10883] loop0: detected capacity change from 0 to 2048 [ 192.720485][ T4720] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 192.777153][T10893] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.788421][T10883] NILFS (loop0): error -2 truncating bmap (ino=16) [ 192.865983][T10893] ------------[ cut here ]------------ [ 192.872364][T10893] WARNING: CPU: 0 PID: 10893 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 192.881894][T10893] Modules linked in: [ 192.885795][T10893] CPU: 0 PID: 10893 Comm: segctord Not tainted syzkaller #0 [ 192.893122][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.903250][T10893] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 192.909242][T10893] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 03 c8 6e fe e8 6e 76 f7 fd e9 b8 fc ff ff e8 f4 c7 6e fe <0f> 0b e9 16 fc ff ff e8 e8 c7 6e fe e8 53 76 f7 fd e9 74 fe ff ff [ 192.929051][T10893] RSP: 0018:ffffc900034bf390 EFLAGS: 00010293 [ 192.935164][T10893] RAX: ffffffff8309041c RBX: ffff88801f27a1a0 RCX: ffff8880272d3b80 [ 192.943174][T10893] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 192.951263][T10893] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100bf78eaf [ 192.959252][T10893] R10: ffffed100bf78eaf R11: 1ffff1100bf78eae R12: ffff8880272d5308 [ 192.967281][T10893] R13: ffff8880404ce9e0 R14: 00000000003f0002 R15: ffff88801f5769b0 [ 192.975292][T10893] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 192.984293][T10893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.990902][T10893] CR2: 000055557c6585c8 CR3: 0000000063ff0000 CR4: 00000000003506f0 [ 192.998889][T10893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.006910][T10893] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.014913][T10893] Call Trace: [ 193.018196][T10893] [ 193.021180][T10893] nilfs_dat_commit_update+0x24/0x40 [ 193.026440][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 193.026471][T10893] nilfs_btree_commit_update_v+0x93/0x400 [ 193.041076][T10893] nilfs_btree_propagate+0x974/0xd40 [ 193.046382][T10893] nilfs_bmap_propagate+0x70/0x120 [ 193.051660][T10893] nilfs_segctor_apply_buffers+0x15d/0x320 [ 193.057476][T10893] ? nilfs_collect_file_data+0xc0/0xc0 [ 193.063003][T10893] nilfs_segctor_scan_file+0x75f/0x960 [ 193.063801][T10912] loop3: detected capacity change from 0 to 64 [ 193.068472][T10893] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 193.068523][T10893] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 193.087717][T10893] ? rcu_is_watching+0x11/0xa0 [ 193.090721][ T4720] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 193.092547][T10893] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 193.106646][T10893] ? nilfs_transaction_unlock+0x220/0x220 [ 193.112408][T10893] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 193.114120][ T4720] usb 3-1: config 0 has no interface number 0 [ 193.118582][T10893] ? clear_nonspinnable+0x60/0x60 [ 193.118608][T10893] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 193.118630][T10893] ? __lock_acquire+0x7c60/0x7c60 [ 193.118649][T10893] ? __rwlock_init+0x140/0x140 [ 193.118667][T10893] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 193.118689][T10893] ? do_raw_spin_unlock+0x11d/0x230 [ 193.118710][T10893] ? _raw_spin_unlock+0x24/0x40 [ 193.118728][T10893] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 193.118750][T10893] nilfs_segctor_construct+0x17b/0x690 [ 193.118778][T10893] nilfs_segctor_thread+0x50a/0x1120 [ 193.118823][T10893] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 193.118842][T10893] ? nilfs_iput_work_func+0x70/0x70 [ 193.118862][T10893] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 193.118881][T10893] ? _raw_spin_unlock+0x40/0x40 [ 193.118897][T10893] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 193.118913][T10893] ? init_wait_entry+0xd0/0xd0 [ 193.160113][ T4720] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.161512][T10893] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 193.161542][T10893] ? __kthread_parkme+0x157/0x1b0 [ 193.161570][T10893] kthread+0x436/0x520 [ 193.161587][T10893] ? nilfs_iput_work_func+0x70/0x70 [ 193.198671][ T4720] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.199586][T10893] ? kthread_blkcg+0xd0/0xd0 [ 193.199613][T10893] ret_from_fork+0x1f/0x30 [ 193.199645][T10893] [ 193.228772][ T4720] usb 3-1: config 0 interface 110 has no altsetting 0 [ 193.231149][T10893] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 193.231163][T10893] CPU: 0 PID: 10893 Comm: segctord Not tainted syzkaller #0 [ 193.231179][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.231188][T10893] Call Trace: [ 193.231194][T10893] [ 193.231202][T10893] dump_stack_lvl+0x168/0x230 [ 193.231229][T10893] ? show_regs_print_info+0x20/0x20 [ 193.231248][T10893] ? load_image+0x3b0/0x3b0 [ 193.314149][T10893] panic+0x2c9/0x7f0 [ 193.318061][T10893] ? bpf_jit_dump+0xd0/0xd0 [ 193.322670][T10893] ? ret_from_fork+0x1f/0x30 [ 193.327356][T10893] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 193.332734][T10893] __warn+0x248/0x2b0 [ 193.336720][T10893] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 193.342098][T10893] report_bug+0x1b7/0x2e0 [ 193.346441][T10893] handle_bug+0x3a/0x70 [ 193.350619][T10893] exc_invalid_op+0x16/0x40 [ 193.355128][T10893] asm_exc_invalid_op+0x16/0x20 [ 193.359982][T10893] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 193.365954][T10893] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a8 4c 03 00 e8 03 c8 6e fe e8 6e 76 f7 fd e9 b8 fc ff ff e8 f4 c7 6e fe <0f> 0b e9 16 fc ff ff e8 e8 c7 6e fe e8 53 76 f7 fd e9 74 fe ff ff [ 193.385546][T10893] RSP: 0018:ffffc900034bf390 EFLAGS: 00010293 [ 193.391604][T10893] RAX: ffffffff8309041c RBX: ffff88801f27a1a0 RCX: ffff8880272d3b80 [ 193.399575][T10893] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 193.407530][T10893] RBP: 0000000000000003 R08: dffffc0000000000 R09: ffffed100bf78eaf [ 193.410657][ T4720] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 193.415501][T10893] R10: ffffed100bf78eaf R11: 1ffff1100bf78eae R12: ffff8880272d5308 [ 193.431643][ T4720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.432459][T10893] R13: ffff8880404ce9e0 R14: 00000000003f0002 R15: ffff88801f5769b0 [ 193.446026][ T4720] usb 3-1: Product: syz [ 193.448384][T10893] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 193.448423][T10893] nilfs_dat_commit_update+0x24/0x40 [ 193.455101][ T4720] usb 3-1: Manufacturer: syz [ 193.457898][T10893] nilfs_btree_commit_update_v+0x93/0x400 [ 193.457932][T10893] nilfs_btree_propagate+0x974/0xd40 [ 193.468503][ T4720] usb 3-1: SerialNumber: syz [ 193.473454][T10893] nilfs_bmap_propagate+0x70/0x120 [ 193.473483][T10893] nilfs_segctor_apply_buffers+0x15d/0x320 [ 193.473504][T10893] ? nilfs_collect_file_data+0xc0/0xc0 [ 193.473523][T10893] nilfs_segctor_scan_file+0x75f/0x960 [ 193.473548][T10893] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 193.473581][T10893] ? nilfs_segbuf_extend_segsum+0x25d/0x360 [ 193.473601][T10893] ? rcu_is_watching+0x11/0xa0 [ 193.473619][T10893] nilfs_segctor_do_construct+0x1c09/0x6be0 [ 193.487056][ T4720] usb 3-1: config 0 descriptor?? [ 193.488595][T10893] ? nilfs_transaction_unlock+0x220/0x220 [ 193.539369][T10893] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 193.545527][T10893] ? clear_nonspinnable+0x60/0x60 [ 193.550563][T10893] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 193.556024][T10893] ? __lock_acquire+0x7c60/0x7c60 [ 193.561060][T10893] ? __rwlock_init+0x140/0x140 [ 193.565822][T10893] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 193.571974][T10893] ? do_raw_spin_unlock+0x11d/0x230 [ 193.577154][T10893] ? _raw_spin_unlock+0x24/0x40 [ 193.581986][T10893] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 193.587448][T10893] nilfs_segctor_construct+0x17b/0x690 [ 193.592892][T10893] nilfs_segctor_thread+0x50a/0x1120 [ 193.598170][T10893] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 193.604049][T10893] ? nilfs_iput_work_func+0x70/0x70 [ 193.609248][T10893] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 193.615121][T10893] ? _raw_spin_unlock+0x40/0x40 [ 193.619950][T10893] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 193.625828][T10893] ? init_wait_entry+0xd0/0xd0 [ 193.630595][T10893] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 193.636473][T10893] ? __kthread_parkme+0x157/0x1b0 [ 193.641488][T10893] kthread+0x436/0x520 [ 193.645558][T10893] ? nilfs_iput_work_func+0x70/0x70 [ 193.650752][T10893] ? kthread_blkcg+0xd0/0xd0 [ 193.655330][T10893] ret_from_fork+0x1f/0x30 [ 193.659733][T10893] [ 193.662934][T10893] Kernel Offset: disabled [ 193.667533][T10893] Rebooting in 86400 seconds..