last executing test programs: 3.496259353s ago: executing program 1 (id=1801): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x30) fcntl$getownex(r0, 0x40a, 0x0) 3.393679221s ago: executing program 1 (id=1805): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="0000820000000000180036"], 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 3.277544739s ago: executing program 1 (id=1807): r0 = fanotify_init(0xf00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r0, 0x1, 0x4800003a, r1, 0x0) 3.177872517s ago: executing program 1 (id=1809): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0x13, 0x2, "fc19"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.842141851s ago: executing program 4 (id=1812): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x1a, {"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", 0x1000}}, 0x1006) 2.680729404s ago: executing program 4 (id=1814): syz_clone(0x1800, &(0x7f0000000000)="52749fabb7d780fdf64b43fbe17ce6d7421769a77dda08fa19b0fb3217786ead2aa17a82886c8bf13b3dda28d4635b6f6d7fea54d5e7c75acbf38cae3759ef1e8ee06b8522a01f51d5ef6515cc95ac139c7499ec55a73c586133a6b7a70f", 0x5e, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.406258984s ago: executing program 2 (id=1820): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kexec_load(0x0, 0x10, &(0x7f00000001c0)=[{0x0}], 0x0) 2.04823323s ago: executing program 2 (id=1825): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 1.855972474s ago: executing program 0 (id=1831): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000d00)=ANY=[@ANYBLOB='iocharset=maciceland,gid=', @ANYRESHEX=0x0, @ANYBLOB="0000002417", @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,fmask=00000000000000000177777,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=iso8859-7,utf8,errors=continue,\x00'], 0x1, 0x152d, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x116) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.823503556s ago: executing program 2 (id=1832): unshare(0x400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x208001, 0x0) fchown(r0, 0x0, 0x0) 1.722760733s ago: executing program 0 (id=1833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000002c0), 0x4, r0}, 0x38) 1.62879489s ago: executing program 0 (id=1835): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 1.62865479s ago: executing program 2 (id=1836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 1.606775442s ago: executing program 2 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) 1.521001438s ago: executing program 2 (id=1838): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x4, "29907427"}, @local=@item_4={0x3, 0x2, 0x4, "f494df01"}]}}, 0x0}, 0x0) 1.49778672s ago: executing program 0 (id=1839): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) 1.273154186s ago: executing program 3 (id=1843): mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000000000,privport']) 1.264405917s ago: executing program 3 (id=1844): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) 1.193254552s ago: executing program 3 (id=1845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) 1.112949148s ago: executing program 3 (id=1846): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000340), 0x82, 0x1518, &(0x7f0000000440)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 991.867487ms ago: executing program 3 (id=1847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000f"], 0x0) 972.351399ms ago: executing program 1 (id=1848): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f000000cb40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/105, 0x69) 913.147743ms ago: executing program 4 (id=1849): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 821.68756ms ago: executing program 3 (id=1850): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 800.201051ms ago: executing program 4 (id=1851): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000001c0)={[{@acl}, {@user_xattr}]}, 0xfc, 0x480, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000004000"]) 317.136066ms ago: executing program 4 (id=1852): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000d40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x240088d1) 215.288234ms ago: executing program 4 (id=1853): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000400)={[{@errors_remount}, {@noquota}, {@nouid32}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@barrier}, {@delalloc}, {@quota}]}, 0x10, 0x4c6, &(0x7f0000000ec0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 114.169561ms ago: executing program 0 (id=1854): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0xc0104307, &(0x7f0000000100)={'sit0\x00', 0x0}) 5.234759ms ago: executing program 1 (id=1855): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) 0s ago: executing program 0 (id=1856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x00', 0x102}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) kernel console output (not intermixed with test programs): fined" name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loop4): Mounting V5 Filesystem [ 99.246394][ T5373] XFS (loop4): Ending clean mount [ 99.248531][ T5373] XFS (loop4): Quotacheck needed: Please wait. [ 99.318646][ T5373] XFS (loop4): Quotacheck: Done. [ 99.485281][ T5430] loop1: detected capacity change from 0 to 1024 [ 99.518272][ T4179] XFS (loop4): Unmounting Filesystem [ 99.685549][ T5436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.101078][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.263299][ T5461] tipc: Started in network mode [ 100.277285][ T5461] tipc: Node identity , cluster identity 4711 [ 100.291174][ T5461] tipc: Failed to obtain node identity [ 100.296778][ T5461] tipc: Enabling of bearer rejected, failed to enable media [ 100.340252][ T5463] loop4: detected capacity change from 0 to 2048 [ 100.538684][ T21] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.563229][ T21] usb 4-1: config 0 has no interface number 0 [ 100.573315][ T21] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.588637][ T21] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.601920][ T21] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 100.629430][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.658715][ T5448] loop2: detected capacity change from 0 to 40427 [ 100.662788][ T21] usb 4-1: config 0 descriptor?? [ 100.771396][ T5448] F2FS-fs (loop2): invalid crc value [ 100.819284][ T5448] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.839171][ T5455] loop1: detected capacity change from 0 to 40427 [ 100.941799][ T5448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.984741][ T5455] F2FS-fs (loop1): invalid crc value [ 100.991697][ T5474] attempt to access beyond end of device [ 100.991697][ T5474] loop2: rw=2049, want=45104, limit=40427 [ 101.039054][ T5455] F2FS-fs (loop1): Found nat_bits in checkpoint [ 101.135696][ T21] uclogic 0003:5543:0522.0006: No inputs registered, leaving [ 101.174806][ T21] uclogic 0003:5543:0522.0006: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input1 [ 101.209349][ T5455] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 101.270851][ T26] audit: type=1800 audit(1738959496.201:6): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.445" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 101.309527][ T4174] attempt to access beyond end of device [ 101.309527][ T4174] loop1: rw=2049, want=45104, limit=40427 [ 101.359795][ T21] usb 4-1: USB disconnect, device number 2 [ 101.619988][ T5479] loop4: detected capacity change from 0 to 32768 [ 101.999466][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 102.135735][ T5500] sp0: Synchronizing with TNC [ 102.175238][ T5504] loop3: detected capacity change from 0 to 512 [ 102.245810][ T5504] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 102.272474][ T5504] UDF-fs: Scanning with blocksize 512 failed [ 102.276360][ T5504] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 102.276393][ T5504] UDF-fs: Scanning with blocksize 1024 failed [ 102.280469][ T5504] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 102.316151][ T5504] UDF-fs: Scanning with blocksize 2048 failed [ 102.318342][ T5504] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 102.373002][ T5504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.391963][ T5511] loop1: detected capacity change from 0 to 256 [ 102.452657][ T5511] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 103.238666][ T5531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 103.394479][ T5527] loop4: detected capacity change from 0 to 32768 [ 103.463621][ T5517] loop3: detected capacity change from 0 to 32768 [ 103.505182][ T5517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.469 (5517) [ 103.597601][ T5527] XFS (loop4): Mounting V5 Filesystem [ 103.601777][ T5517] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 103.641921][ T5529] loop2: detected capacity change from 0 to 32768 [ 103.671122][ T5517] BTRFS info (device loop3): using free space tree [ 103.687281][ T5517] BTRFS info (device loop3): has skinny extents [ 103.789186][ T5529] XFS (loop2): Mounting V5 Filesystem [ 103.802186][ T5527] XFS (loop4): Ending clean mount [ 103.832110][ T5527] XFS (loop4): Quotacheck needed: Please wait. [ 103.974560][ T5529] XFS (loop2): Ending clean mount [ 104.007102][ T5517] BTRFS info (device loop3): enabling ssd optimizations [ 104.032460][ T5527] XFS (loop4): Quotacheck: Done. [ 104.056948][ T5529] XFS (loop2): Quotacheck needed: Please wait. [ 104.271096][ T4206] Bluetooth: hci4: command 0x0411 tx timeout [ 104.371089][ T5529] XFS (loop2): Quotacheck: Done. [ 104.474472][ T4179] XFS (loop4): Unmounting Filesystem [ 104.496391][ T4167] XFS (loop2): Unmounting Filesystem [ 104.499429][ T5533] loop1: detected capacity change from 0 to 32768 [ 104.730667][ T5533] XFS (loop1): Mounting V5 Filesystem [ 104.999321][ T5533] XFS (loop1): Ending clean mount [ 105.032497][ T5533] XFS (loop1): Quotacheck needed: Please wait. [ 105.045421][ T5595] loop3: detected capacity change from 0 to 128 [ 105.103505][ T5595] affs: Error parsing options [ 105.192038][ T5533] XFS (loop1): Quotacheck: Done. [ 105.408895][ T4174] XFS (loop1): Unmounting Filesystem [ 105.621178][ T5605] sp0: Synchronizing with TNC [ 106.318722][ T5631] loop2: detected capacity change from 0 to 4096 [ 106.630243][ T4968] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.655656][ T5626] loop3: detected capacity change from 0 to 40427 [ 106.691042][ T4214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.764868][ T5626] F2FS-fs (loop3): invalid crc value [ 106.787085][ T5626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.810673][ T5644] loop2: detected capacity change from 0 to 512 [ 106.867932][ T5626] F2FS-fs (loop3): Start checkpoint disabled! [ 106.891478][ T4968] usb 2-1: Using ep0 maxpacket: 16 [ 106.899388][ T5626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 106.931342][ T5644] EXT4-fs (loop2): Ignoring removed bh option [ 106.965214][ T5644] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 106.975630][ T5644] EXT4-fs (loop2): invalid journal inode [ 107.001144][ T5644] EXT4-fs (loop2): can't get journal size [ 107.028891][ T5644] EXT4-fs (loop2): 1 truncate cleaned up [ 107.040740][ T5644] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,bh,resuid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none. [ 107.063763][ T9] attempt to access beyond end of device [ 107.063763][ T9] loop3: rw=2049, want=40976, limit=40427 [ 107.105878][ T26] audit: type=1800 audit(1738959502.041:7): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.509" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 107.131800][ T4214] usb 5-1: config 0 has an invalid interface number: 14 but max is 0 [ 107.146890][ T4214] usb 5-1: config 0 has no interface number 0 [ 107.181342][ T4968] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 107.183151][ T4214] usb 5-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=d9.f6 [ 107.192783][ T4968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.208280][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.228138][ T4968] usb 2-1: Product: syz [ 107.242892][ T4968] usb 2-1: Manufacturer: syz [ 107.247545][ T4968] usb 2-1: SerialNumber: syz [ 107.271126][ T4214] usb 5-1: config 0 descriptor?? [ 107.272911][ T4968] usb 2-1: config 0 descriptor?? [ 107.342946][ T4968] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 107.560766][ T5658] ptrace attach of "./syz-executor exec"[4168] was attempted by "\x22ÿE‚ŠüGIÚ\x0d UEBä¿hP‘ÿ()J» ªhˆü\x0b*ò%Åh7 Tûãù“\x07È”§Ý PU<Äú¿DP‘ÿ()A» ªDˆü—\x0c*ò%%i7 T•\x0c‘ÿRAEþ£¤í€ªR!òŒAþ#¥4퀪Ò!ò_&¨È””¡Ý PU&Dþo*ò%·Ón ¨º=DþËù’²´\x1b ªÊ†ÈÿAEþ£äÚ\x0d Uw„ȹ \x22ÿQRŽv@U¹ù¿3¨È”ÜI» êÎù/Tä?JÊÓn ¨*\x22ÿ‚ŠüGIÚ\x0d UBä¿bP‘ÿ(©H» ªbˆüW\x0a*ò%•h7 TU\x0a‘ÿÊAEþ£¤2퀪Ê!ò_%¨È”T¡Ý PU%Dþ«ù’ª´\x1b ªª†Èµ \x22ÿQRv@Uµù¯Tä?JªÓn ¨ª\x22ÿ5‚ŠüGI\x0dÚ\x0d U5Bä¿fP‘ÿ(©I» ªfˆü×\x0a*ò%µh7 TÕ\x0a‘ÿ»‚ŠüGÉ]´\x1b ªî\x0a‘ÿÚAM—ù_jþ!µi7 TÕ‘ÿ:AÅú?JêÐn ¨ª\x22ÿuƒŠüGI]Ú\x0d UuCä¿^P‘ÿ(©G» ª^ˆü×*ò%õi7 TÕ‘ÿAEþ£¤í€ª!òß0¨È”4¤Ý PÕ0Dþ\x1bù’F´\x1b ª…Èã \x22ÿQÒ˜v@UãùoTä?JšÐn ¨j\x22ÿMƒŠüGISÚ\x0d UMCäÿî \x22ÿQr7퀪»Cä¿YP‘ÿ(iF» ªYˆü7*ò%Íi7 T5‘ÿAEþ£¤í€ª!òOP‘ÿ(¹‡v@Õ=!òß2¨È”´¤Ý PÕ2Dþï\x0d*ò%÷Òn ¨º÷·ü§ÉúÕóß*¨È”´¢Ý PÕ*Äú¿uP‘ÿ(iM» ªuˆü·\x09*ò%mh7 Tµ\x09‘ÿ¶AEþ£¤-퀪¶!òß.¨È”´£Ý PÕ.Dþï\x0b*ò%÷Ñn ¨º/DþÛ\x07ù’ö´\x1b ªÚ‡È‡ \x22ÿQÒv@U‡ùïTä?J: [ 107.571742][ T4214] snd-usb-audio: probe of 5-1:0.14 failed with error -2 [ 107.589569][ T4214] usb 5-1: USB disconnect, device number 5 [ 107.696978][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.777116][ T4968] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 107.824557][ T4289] udevd[4289]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.14/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.011404][ T4968] usb 2-1: USB disconnect, device number 4 [ 108.029344][ T4968] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 108.049049][ T4968] visor 2-1:0.0: device disconnected [ 108.224350][ T5686] loop4: detected capacity change from 0 to 1024 [ 108.251181][ T4214] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.280955][ T5686] EXT4-fs (loop4): Ignoring removed nobh option [ 108.287335][ T5686] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 108.287335][ T5686] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 108.287335][ T5686] [ 108.385905][ T5675] loop3: detected capacity change from 0 to 32768 [ 108.393496][ T5686] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,barrier=0x000000000000624a,norecovery,debug_want_extra_isize=0x0000000000000080,nobh,nodelalloc,acl,nouser_xattr,,errors=continue. Quota mode: none. [ 108.505963][ T5675] JBD2: Ignoring recovery information on journal [ 108.620289][ T5675] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 108.673421][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.706958][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.717651][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.725556][ T4214] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 108.733324][ T5697] loop4: detected capacity change from 0 to 4096 [ 108.737197][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.761744][ T4214] usb 1-1: config 0 descriptor?? [ 108.833545][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 108.835197][ T5703] loop1: detected capacity change from 0 to 512 [ 108.862721][ T5697] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 108.880130][ T5703] EXT4-fs (loop1): Ignoring removed nobh option [ 108.911138][ T5697] ntfs3: loop4: Failed to load $MFT. [ 108.921505][ T5703] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none. [ 108.974125][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 109.103376][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.145742][ T1107] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 109.185675][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.247966][ T4214] elo 0003:04E7:0030.0007: item fetching failed at offset 3/7 [ 109.270100][ T1107] usb 3-1: config 0 descriptor?? [ 109.277399][ T4214] elo 0003:04E7:0030.0007: parse failed [ 109.293496][ T4214] elo: probe of 0003:04E7:0030.0007 failed with error -22 [ 109.382170][ T5721] loop4: detected capacity change from 0 to 512 [ 109.430235][ T5723] netlink: 666 bytes leftover after parsing attributes in process `syz.3.542'. [ 109.469482][ T4544] usb 1-1: USB disconnect, device number 5 [ 109.499762][ T5721] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 109.499815][ T5725] sp0: Synchronizing with TNC [ 109.512334][ T5721] EXT4-fs (loop4): Ignoring removed orlov option [ 109.518787][ T5721] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 109.546778][ T5721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c198, mo2=0002] [ 109.584543][ T5721] System zones: 1-12 [ 109.590213][ T5721] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.541: corrupted in-inode xattr [ 109.606442][ T5721] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.541: couldn't read orphan inode 15 (err -117) [ 109.627417][ T5721] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,orlov,debug,noload,minixdf,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 109.747634][ T4543] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.766712][ T5730] loop4: detected capacity change from 0 to 16 [ 109.777347][ T1107] wacom 0003:056A:0026.0008: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 109.810644][ T1107] wacom 0003:056A:0026.0008: hidraw0: USB HID v0.03 Device [HID 056a:0026] on usb-dummy_hcd.2-1/input0 [ 109.839326][ T1107] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0026.0008/input/input6 [ 109.864403][ T5730] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.931726][ T5734] loop3: detected capacity change from 0 to 512 [ 109.993135][ T5734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 110.012448][ T4543] usb 2-1: Using ep0 maxpacket: 16 [ 110.048489][ T5734] System zones: 0-2, 18-18, 34-34 [ 110.062945][ T1107] usb 3-1: USB disconnect, device number 3 [ 110.120276][ T5734] EXT4-fs (loop3): orphan cleanup on readonly fs [ 110.192934][ T5734] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 110.238945][ T5734] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 110.252389][ T5734] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz.3.547: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.279634][ T5734] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.547: couldn't read orphan inode 13 (err -117) [ 110.301003][ T5734] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,lazytime,debug,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 110.347138][ T4543] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 110.360949][ T4543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.377985][ T5734] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 110.387441][ T4543] usb 2-1: Product: syz [ 110.402802][ T4543] usb 2-1: Manufacturer: syz [ 110.409119][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.553'. [ 110.413008][ T4543] usb 2-1: SerialNumber: syz [ 110.429455][ T5734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 110.449784][ T4543] r8152-cfgselector 2-1: config 0 descriptor?? [ 110.538266][ T5734] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 110.636370][ T5752] loop4: detected capacity change from 0 to 1024 [ 110.737826][ T26] audit: type=1804 audit(1738959505.671:8): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.555" name="/newroot/115/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 110.742206][ T5752] hfsplus: xattr searching failed [ 110.822020][ T26] audit: type=1800 audit(1738959505.741:9): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.555" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 110.903249][ T5760] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 110.913633][ T5760] netlink: 'syz.3.559': attribute type 8 has an invalid length. [ 110.924433][ T5760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 110.934314][ T4543] r8152-cfgselector 2-1: Unknown version 0x0000 [ 110.941612][ T4543] r8152-cfgselector 2-1: bad CDC descriptors [ 110.977465][ T9] hfsplus: b-tree write err: -5, ino 4 [ 111.001423][ T4543] r8152-cfgselector 2-1: Unknown version 0x0000 [ 111.021517][ T4543] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 111.359113][ T5773] netlink: 1 bytes leftover after parsing attributes in process `syz.3.565'. [ 111.536060][ T5781] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 111.679902][ T5786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.570'. [ 111.795912][ T5762] loop2: detected capacity change from 0 to 32768 [ 111.818971][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 111.881824][ T5762] XFS: attr2 mount option is deprecated. [ 111.892299][ T5762] XFS: ikeep mount option is deprecated. [ 111.916140][ T5762] XFS: noikeep mount option is deprecated. [ 111.953208][ T5800] program syz.3.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.185844][ T5762] XFS (loop2): Mounting V5 Filesystem [ 112.315155][ T5762] XFS (loop2): Ending clean mount [ 112.327187][ T5762] XFS (loop2): Quotacheck needed: Please wait. [ 112.448164][ T5762] XFS (loop2): Quotacheck: Done. [ 112.503296][ T4167] XFS (loop2): Unmounting Filesystem [ 113.320040][ T5828] loop3: detected capacity change from 0 to 32768 [ 113.492502][ T5828] XFS (loop3): Mounting V5 Filesystem [ 113.762421][ T5828] XFS (loop3): Ending clean mount [ 114.080417][ T4169] XFS (loop3): Unmounting Filesystem [ 114.556822][ T5928] loop2: detected capacity change from 0 to 8192 [ 114.841144][ T4954] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.076254][ T1107] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.101129][ T4954] usb 5-1: Using ep0 maxpacket: 16 [ 115.122708][ T5968] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 115.228056][ T4954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.262980][ T4954] usb 5-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 115.273124][ T4954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.292325][ T4954] usb 5-1: config 0 descriptor?? [ 115.340061][ T5954] loop1: detected capacity change from 0 to 32768 [ 115.346693][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 115.473928][ T5954] XFS (loop1): Mounting V5 Filesystem [ 115.481350][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.497904][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.510084][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.523239][ T1107] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 115.532606][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.545516][ T1107] usb 4-1: config 0 descriptor?? [ 115.628343][ T5954] XFS (loop1): Ending clean mount [ 115.700807][ T4174] XFS (loop1): Unmounting Filesystem [ 115.779728][ T4954] wacom 0003:056A:0026.0009: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 115.802780][ T4954] wacom 0003:056A:0026.0009: hidraw0: USB HID v0.03 Device [HID 056a:0026] on usb-dummy_hcd.4-1/input0 [ 115.830612][ T5992] process 'syz.2.645' launched '/dev/fd/3' with NULL argv: empty string added [ 115.841318][ T4954] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0026.0009/input/input9 [ 115.918617][ T5998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.647'. [ 115.943609][ T5998] tipc: Invalid UDP bearer configuration [ 115.943651][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 116.014747][ T4954] usb 5-1: USB disconnect, device number 6 [ 116.042038][ T1107] ryos 0003:1E7D:31CE.000A: collection stack underflow [ 116.050123][ T1107] ryos 0003:1E7D:31CE.000A: item 0 2 0 12 parsing failed [ 116.087685][ T1107] ryos 0003:1E7D:31CE.000A: parse failed [ 116.095358][ T1107] ryos: probe of 0003:1E7D:31CE.000A failed with error -22 [ 116.255509][ T4214] usb 4-1: USB disconnect, device number 3 [ 116.385090][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.622275][ T6034] loop4: detected capacity change from 0 to 4096 [ 116.655317][ T6034] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 116.730344][ T6034] ntfs3: loop4: ino=5, "/" directory corrupted [ 116.813641][ T1107] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 116.834174][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.963605][ T1107] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 116.988732][ T1107] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.008829][ T1107] usb 3-1: Manufacturer: syz [ 117.021871][ T1107] usb 3-1: config 0 descriptor?? [ 117.108717][ T6048] loop3: detected capacity change from 0 to 1024 [ 117.180264][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 117.201519][ T6048] EXT4-fs (loop3): Ignoring removed orlov option [ 117.202269][ T1107] rc_core: IR keymap rc-hauppauge not found [ 117.207913][ T6048] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 117.239049][ T1107] Registered IR keymap rc-empty [ 117.272121][ T1107] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 117.304578][ T6048] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 117.317862][ T1107] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 117.443402][ T6068] tipc: MTU too low for tipc bearer [ 117.560498][ T6075] loop1: detected capacity change from 0 to 256 [ 117.644751][ T6075] FAT-fs (loop1): Directory bread(block 64) failed [ 117.674219][ T6075] FAT-fs (loop1): Directory bread(block 65) failed [ 117.681801][ T6075] FAT-fs (loop1): Directory bread(block 66) failed [ 117.706233][ T6075] FAT-fs (loop1): Directory bread(block 67) failed [ 117.728504][ T6075] FAT-fs (loop1): Directory bread(block 68) failed [ 117.755589][ T6075] FAT-fs (loop1): Directory bread(block 69) failed [ 117.782837][ T6075] FAT-fs (loop1): Directory bread(block 70) failed [ 117.789452][ T6075] FAT-fs (loop1): Directory bread(block 71) failed [ 117.834807][ T6075] FAT-fs (loop1): Directory bread(block 72) failed [ 117.874575][ T6075] FAT-fs (loop1): Directory bread(block 73) failed [ 117.888768][ T4214] usb 3-1: USB disconnect, device number 4 [ 118.335309][ T6108] loop1: detected capacity change from 0 to 1024 [ 118.421180][ T4214] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 118.437424][ T6108] hfsplus: bad catalog entry type [ 118.474954][ T6114] loop2: detected capacity change from 0 to 1024 [ 118.508174][ T3030] hfsplus: b-tree write err: -5, ino 4 [ 118.551501][ T4954] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.658168][ T6124] loop1: detected capacity change from 0 to 8 [ 118.709410][ T6126] netlink: zone id is out of range [ 118.716576][ T6114] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.729652][ T6114] EXT4-fs (loop2): inline encryption not supported [ 118.737158][ T6126] netlink: zone id is out of range [ 118.747953][ T6126] netlink: zone id is out of range [ 118.765356][ T6114] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 118.791783][ T6126] netlink: zone id is out of range [ 118.797010][ T6126] netlink: zone id is out of range [ 118.802877][ T6126] netlink: zone id is out of range [ 118.808000][ T6126] netlink: zone id is out of range [ 118.813757][ T6126] netlink: zone id is out of range [ 118.818893][ T6126] netlink: zone id is out of range [ 118.824589][ T6126] netlink: zone id is out of range [ 118.841050][ T4954] usb 4-1: Using ep0 maxpacket: 16 [ 118.861335][ T4214] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 118.876573][ T6131] loop1: detected capacity change from 0 to 128 [ 118.883720][ T4214] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.890371][ T4214] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 118.899830][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.910112][ T4214] usb 5-1: config 0 descriptor?? [ 118.941276][ T6102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 118.961208][ T4954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 119.004467][ T4954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 119.070977][ T4954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 119.241372][ T4954] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 119.264620][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.293765][ T4954] usb 4-1: Product: syz [ 119.297978][ T4954] usb 4-1: Manufacturer: syz [ 119.334253][ T4954] usb 4-1: SerialNumber: syz [ 119.402262][ T4954] usb 4-1: config 0 descriptor?? [ 119.431366][ T6106] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 119.453255][ T4954] mceusb 4-1:0.0: mceusb_dev_probe: device setup failed! [ 119.476418][ T4954] mceusb: probe of 4-1:0.0 failed with error -12 [ 119.711472][ T4954] usb 4-1: USB disconnect, device number 4 [ 120.070903][ C1] sched: RT throttling activated [ 120.079548][ T6154] loop2: detected capacity change from 0 to 256 [ 120.174804][ T6137] loop1: detected capacity change from 0 to 32768 [ 120.347757][ T6154] FAT-fs (loop2): Directory bread(block 64) failed [ 120.365728][ T4214] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x0 [ 120.373342][ T4214] konepure 0003:1E7D:2DB4.000B: item fetching failed at offset 3/5 [ 120.383299][ T4214] konepure 0003:1E7D:2DB4.000B: parse failed [ 120.389477][ T4214] konepure: probe of 0003:1E7D:2DB4.000B failed with error -22 [ 120.418237][ T6137] XFS (loop1): Mounting V5 Filesystem [ 120.440704][ T4954] usb 5-1: USB disconnect, device number 7 [ 120.484359][ T6154] FAT-fs (loop2): Directory bread(block 65) failed [ 120.508334][ T6154] FAT-fs (loop2): Directory bread(block 66) failed [ 120.547292][ T6154] FAT-fs (loop2): Directory bread(block 67) failed [ 120.584234][ T6154] FAT-fs (loop2): Directory bread(block 68) failed [ 120.592658][ T6137] XFS (loop1): Ending clean mount [ 120.624166][ T6137] XFS (loop1): Quotacheck needed: Please wait. [ 120.652638][ T6154] FAT-fs (loop2): Directory bread(block 69) failed [ 120.659323][ T6154] FAT-fs (loop2): Directory bread(block 70) failed [ 120.723739][ T6137] XFS (loop1): Quotacheck: Done. [ 120.740335][ T6154] FAT-fs (loop2): Directory bread(block 71) failed [ 120.750544][ T6154] FAT-fs (loop2): Directory bread(block 72) failed [ 120.770817][ T6154] FAT-fs (loop2): Directory bread(block 73) failed [ 120.874949][ T4174] XFS (loop1): Unmounting Filesystem [ 121.518792][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 121.674785][ T6216] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 121.725884][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 122.791953][ T4214] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.834185][ T6240] loop2: detected capacity change from 0 to 40427 [ 122.873549][ T6231] loop3: detected capacity change from 0 to 40427 [ 122.919192][ T6231] F2FS-fs (loop3): invalid crc value [ 122.935686][ T6240] F2FS-fs (loop2): invalid crc value [ 122.969156][ T6231] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.983624][ T6240] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.995281][ T6248] loop4: detected capacity change from 0 to 32768 [ 123.071406][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 123.081259][ T4543] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.082146][ T6231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 123.099703][ T6240] F2FS-fs (loop2): Start checkpoint disabled! [ 123.108702][ T6240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 123.201537][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.201777][ T6248] JBD2: Ignoring recovery information on journal [ 123.227767][ T4214] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 123.245749][ T4169] attempt to access beyond end of device [ 123.245749][ T4169] loop3: rw=2049, want=45104, limit=40427 [ 123.249865][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.266301][ T3030] attempt to access beyond end of device [ 123.266301][ T3030] loop2: rw=2049, want=40976, limit=40427 [ 123.339588][ T6248] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.347034][ T4214] usb 2-1: config 0 descriptor?? [ 123.403432][ T6248] (syz.4.760,6248,1):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 123.439383][ T6248] (syz.4.760,6248,1):ocfs2_group_add:503 ERROR: status = -22 [ 123.481334][ T4543] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.494417][ T4543] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.508576][ T4179] ocfs2: Unmounting device (7,4) on (node local) [ 123.516013][ T4543] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 123.531119][ T4543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.552232][ T4543] usb 1-1: config 0 descriptor?? [ 123.861768][ T4214] wacom 0003:056A:0026.000C: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 123.923310][ T4214] wacom 0003:056A:0026.000C: hidraw0: USB HID v0.03 Device [HID 056a:0026] on usb-dummy_hcd.1-1/input0 [ 123.957786][ T4214] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0026.000C/input/input14 [ 124.026690][ T4543] hid-alps 0003:044E:1215.000D: unknown main item tag 0x0 [ 124.040980][ T4543] hid-alps 0003:044E:1215.000D: unknown main item tag 0x0 [ 124.059870][ T4543] hid-alps 0003:044E:1215.000D: unknown main item tag 0x0 [ 124.071559][ T4214] usb 2-1: USB disconnect, device number 6 [ 124.091018][ T4543] hid-alps 0003:044E:1215.000D: unknown main item tag 0x0 [ 124.108858][ T4543] hid-alps 0003:044E:1215.000D: hidraw0: USB HID v0.0e Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 124.149958][ T6278] net_ratelimit: 191 callbacks suppressed [ 124.149975][ T6278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.246038][ T4543] usb 1-1: USB disconnect, device number 6 [ 124.440551][ T6271] loop3: detected capacity change from 0 to 32768 [ 124.544126][ T6271] ERROR: (device loop3): diWrite: ixpxd invalid [ 124.544126][ T6271] [ 124.584735][ T6271] ERROR: (device loop3): remounting filesystem as read-only [ 124.613160][ T6271] ERROR: (device loop3): txCommit: [ 124.613160][ T6271] [ 124.899079][ T6304] tmpfs: Bad value for 'mpol' [ 125.032671][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 125.253071][ T6317] devtmpfs: Too few inodes for current use [ 125.525641][ T6295] loop4: detected capacity change from 0 to 32768 [ 125.961158][ T4215] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.167803][ T6351] loop1: detected capacity change from 0 to 64 [ 126.331246][ T4215] usb 3-1: config 0 has an invalid interface number: 14 but max is 0 [ 126.348778][ T4215] usb 3-1: config 0 has no interface number 0 [ 126.361182][ T4215] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=d9.f6 [ 126.375617][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.393545][ T4215] usb 3-1: config 0 descriptor?? [ 126.451272][ T4214] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.525458][ T4215] snd-usb-audio: probe of 3-1:0.14 failed with error -2 [ 126.576855][ T4430] udevd[4430]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.14/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.698916][ T4215] usb 3-1: USB disconnect, device number 5 [ 126.731043][ T4214] usb 5-1: Using ep0 maxpacket: 32 [ 126.887540][ T4214] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 126.899184][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.928722][ T4214] usb 5-1: config 0 descriptor?? [ 126.966107][ T6357] loop3: detected capacity change from 0 to 40427 [ 126.984894][ T6362] loop1: detected capacity change from 0 to 32768 [ 126.989453][ T4214] gspca_main: sq930x-2.14.0 probing 041e:403c [ 127.035840][ T6362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.809 (6362) [ 127.089494][ T6357] F2FS-fs (loop3): invalid crc value [ 127.102545][ T6362] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 127.128371][ T6357] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.131330][ T6362] BTRFS info (device loop1): using free space tree [ 127.161272][ T6362] BTRFS info (device loop1): has skinny extents [ 127.336681][ T6357] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.489139][ T6362] BTRFS info (device loop1): enabling ssd optimizations [ 127.712677][ T4214] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 127.719670][ T4214] sq930x: probe of 5-1:0.0 failed with error -71 [ 127.781527][ T4214] usb 5-1: USB disconnect, device number 8 [ 127.872545][ T9] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 128.674898][ T6433] loop3: detected capacity change from 0 to 1024 [ 128.732027][ T6433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0003] [ 128.760617][ T6433] System zones: 0-1, 3-36 [ 128.786609][ T6433] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,delalloc,nodelalloc,acl,bsddf,debug,,errors=continue. Quota mode: writeback. [ 128.863820][ T6433] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.3.834: corrupted in-inode xattr [ 129.172034][ T6450] loop4: detected capacity change from 0 to 1024 [ 129.291276][ T6457] loop3: detected capacity change from 0 to 512 [ 129.361947][ T3030] hfsplus: b-tree write err: -5, ino 4 [ 129.363073][ T6427] loop2: detected capacity change from 0 to 32768 [ 129.413254][ T6457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.430271][ T6457] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.529189][ T6461] loop4: detected capacity change from 0 to 4096 [ 129.565054][ T6461] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 129.683767][ T6461] ntfs: (device loop4): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 129.713167][ T6461] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 129.785500][ T6461] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 129.845001][ T6461] ntfs: volume version 3.1. [ 129.864071][ T6461] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 129.882476][ T6461] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 129.907238][ T6461] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 129.990174][ T6473] loop2: detected capacity change from 0 to 128 [ 130.096258][ T6473] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 130.220740][ T6473] sysv_free_block: getblk() failed [ 130.231155][ T6473] sysv_free_block: getblk() failed [ 130.237398][ T6473] sysv_free_block: getblk() failed [ 130.258990][ T6473] sysv_free_block: getblk() failed [ 130.284915][ T6473] sysv_free_block: getblk() failed [ 130.300459][ T6473] sysv_free_block: getblk() failed [ 130.324509][ T6473] sysv_free_block: getblk() failed [ 130.343381][ T6473] sysv_free_block: getblk() failed [ 130.366656][ T6473] sysv_free_block: getblk() failed [ 130.383144][ T6473] sysv_free_block: getblk() failed [ 130.401583][ T6473] sysv_free_block: getblk() failed [ 130.418793][ T6473] sysv_free_block: getblk() failed [ 130.436380][ T6473] sysv_free_block: getblk() failed [ 130.442152][ T4545] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.459895][ T6473] sysv_free_block: getblk() failed [ 130.476257][ T6473] sysv_free_block: getblk() failed [ 130.487935][ T6473] sysv_free_block: getblk() failed [ 130.501643][ T6473] sysv_free_block: getblk() failed [ 130.514013][ T6473] sysv_free_block: getblk() failed [ 130.522738][ T6473] sysv_free_block: getblk() failed [ 130.528285][ T6473] sysv_free_block: getblk() failed [ 130.537844][ T6473] sysv_free_block: getblk() failed [ 130.544605][ T6473] sysv_free_block: getblk() failed [ 130.550010][ T6473] sysv_free_block: getblk() failed [ 130.556599][ T6473] sysv_free_block: getblk() failed [ 130.568737][ T6473] sysv_free_block: getblk() failed [ 130.577509][ T6473] sysv_free_block: getblk() failed [ 130.586288][ T6473] sysv_free_block: getblk() failed [ 130.597205][ T6473] sysv_free_block: getblk() failed [ 130.608380][ T6473] sysv_free_block: getblk() failed [ 130.618984][ T6473] sysv_free_block: getblk() failed [ 130.626835][ T6473] sysv_free_block: getblk() failed [ 130.633603][ T6473] sysv_free_block: getblk() failed [ 130.639979][ T6473] sysv_free_block: getblk() failed [ 130.646636][ T6473] sysv_free_block: getblk() failed [ 130.652900][ T6473] sysv_free_block: getblk() failed [ 130.660387][ T6473] sysv_free_block: getblk() failed [ 130.675164][ T6473] sysv_free_block: trying to free block not in datazone [ 130.721118][ T4545] usb 2-1: Using ep0 maxpacket: 16 [ 130.781874][ T4167] sysv_free_block: getblk() failed [ 130.794001][ T4167] sysv_free_block: getblk() failed [ 130.800832][ T4167] sysv_free_block: trying to free block not in datazone [ 130.812071][ T4167] sysv_free_block: getblk() failed [ 130.820106][ T4167] sysv_free_block: getblk() failed [ 130.832402][ T4167] sysv_free_block: getblk() failed [ 130.842132][ T4167] sysv_free_block: getblk() failed [ 130.851433][ T4545] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.871577][ T4167] sysv_free_block: getblk() failed [ 130.876774][ T4167] sysv_free_block: getblk() failed [ 130.882574][ T4545] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.893047][ T4167] sysv_free_block: getblk() failed [ 130.898648][ T4545] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.915960][ T4167] sysv_free_block: getblk() failed [ 130.921476][ T4167] sysv_free_block: getblk() failed [ 130.928672][ T4545] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.935835][ T4167] sysv_free_block: getblk() failed [ 130.941681][ T4167] sysv_free_block: getblk() failed [ 130.947738][ T4167] sysv_free_block: getblk() failed [ 130.953450][ T4545] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 130.962912][ T4167] sysv_free_block: getblk() failed [ 130.968069][ T4167] sysv_free_block: getblk() failed [ 130.973688][ T4545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.983999][ T4545] usb 2-1: config 0 descriptor?? [ 130.992043][ T4167] sysv_free_block: getblk() failed [ 130.997213][ T4167] sysv_free_block: getblk() failed [ 131.003369][ T4167] sysv_free_block: getblk() failed [ 131.008746][ T4167] sysv_free_block: getblk() failed [ 131.014416][ T4167] sysv_free_block: trying to free block not in datazone [ 131.026208][ T4167] sysv_free_block: trying to free block not in datazone [ 131.033644][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 131.236511][ T6511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.868'. [ 131.317556][ T6509] loop2: detected capacity change from 0 to 8192 [ 131.412539][ T6509] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 131.441056][ T6509] REISERFS (device loop2): using ordered data mode [ 131.457901][ T6509] reiserfs: using flush barriers [ 131.466958][ T4545] hid-generic 0003:045E:05DA.000E: unbalanced collection at end of report description [ 131.496614][ T4545] hid-generic: probe of 0003:045E:05DA.000E failed with error -22 [ 131.525331][ T6509] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.552449][ T6509] REISERFS (device loop2): checking transaction log (loop2) [ 131.577411][ T6509] REISERFS (device loop2): Using r5 hash to sort names [ 131.678664][ T4545] usb 2-1: USB disconnect, device number 7 [ 131.930538][ T6532] loop2: detected capacity change from 0 to 1024 [ 131.956214][ T6536] loop3: detected capacity change from 0 to 256 [ 132.055246][ T6536] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 132.251684][ T4592] hfsplus: b-tree write err: -5, ino 4 [ 132.721995][ T6564] program syz.1.894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.834577][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.841032][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.059658][ T6541] loop3: detected capacity change from 0 to 32768 [ 133.141340][ T6552] loop2: detected capacity change from 0 to 32768 [ 133.161047][ T4215] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.197980][ T6541] ea_get: invalid extended attribute [ 133.258426][ T6581] ea_get: invalid extended attribute [ 133.287963][ T26] audit: type=1800 audit(1738959528.221:10): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.882" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 133.404586][ T4215] usb 5-1: Using ep0 maxpacket: 8 [ 133.535118][ T4215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.566183][ T4215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.606853][ T4215] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 133.627418][ T6571] loop1: detected capacity change from 0 to 32768 [ 133.647770][ T4215] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 133.667305][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.695270][ T4215] usb 5-1: config 0 descriptor?? [ 133.931340][ T6595] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.119262][ T6595] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.202899][ T4215] logitech 0003:046D:CA03.000F: item fetching failed at offset 15/69 [ 134.224280][ T4215] logitech 0003:046D:CA03.000F: parse failed [ 134.233593][ T4215] logitech: probe of 0003:046D:CA03.000F failed with error -22 [ 134.302785][ T6595] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.348670][ T6619] loop1: detected capacity change from 0 to 512 [ 134.417090][ T6619] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 134.432427][ T4968] usb 5-1: USB disconnect, device number 9 [ 134.438486][ T6619] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 134.473893][ T6619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 134.476698][ T6595] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.488238][ T6619] System zones: 1-12 [ 134.509476][ T6619] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.921: corrupted in-inode xattr [ 134.530182][ T6619] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.921: couldn't read orphan inode 15 (err -117) [ 134.550372][ T6619] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 134.566854][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 134.590798][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 134.718865][ T6595] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.746831][ T6595] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.799761][ T6595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.852592][ T6595] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.274952][ T6660] loop2: detected capacity change from 0 to 256 [ 135.313380][ T6663] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 135.412427][ T6660] FAT-fs (loop2): Directory bread(block 64) failed [ 135.419032][ T6660] FAT-fs (loop2): Directory bread(block 65) failed [ 135.449337][ T6660] FAT-fs (loop2): Directory bread(block 66) failed [ 135.478260][ T6660] FAT-fs (loop2): Directory bread(block 67) failed [ 135.503707][ T6660] FAT-fs (loop2): Directory bread(block 68) failed [ 135.510299][ T6660] FAT-fs (loop2): Directory bread(block 69) failed [ 135.537778][ T6660] FAT-fs (loop2): Directory bread(block 70) failed [ 135.565540][ T6660] FAT-fs (loop2): Directory bread(block 71) failed [ 135.582766][ T6660] FAT-fs (loop2): Directory bread(block 72) failed [ 135.613827][ T6660] FAT-fs (loop2): Directory bread(block 73) failed [ 135.757701][ T26] audit: type=1800 audit(1738959530.691:11): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.941" name="file1" dev="loop2" ino=1048652 res=0 errno=0 [ 135.788324][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.792430][ T6660] 9pnet: p9_fd_create_unix (6660): problem connecting socket: ./file1: -111 [ 136.293825][ T6720] loop2: detected capacity change from 0 to 128 [ 136.344446][ T6720] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 136.400360][ T6720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.402373][ T6727] loop3: detected capacity change from 0 to 64 [ 136.746424][ T6735] loop2: detected capacity change from 0 to 4096 [ 136.976973][ T26] audit: type=1800 audit(1738959531.911:12): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.973" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 137.414001][ T6758] loop3: detected capacity change from 0 to 512 [ 137.577232][ T6758] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec018, mo2=0001] [ 137.595075][ T6766] loop1: detected capacity change from 0 to 256 [ 137.617497][ T6758] System zones: 0-2, 18-18, 34-34 [ 137.650561][ T6758] EXT4-fs (loop3): 1 orphan inode deleted [ 137.663249][ T6758] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,debug,bsddf,quota,user_xattr,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,,errors=continue. Quota mode: writeback. [ 137.683574][ T6766] exfat: Deprecated parameter 'namecase' [ 137.700079][ T6758] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.719800][ T6766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x40dea5f2, utbl_chksum : 0xe619d30d) [ 138.928292][ T6786] loop4: detected capacity change from 0 to 32768 [ 138.993384][ T6786] XFS: ikeep mount option is deprecated. [ 139.010626][ T6808] loop1: detected capacity change from 0 to 4096 [ 139.058704][ T6800] loop3: detected capacity change from 0 to 32768 [ 139.078783][ T6792] loop2: detected capacity change from 0 to 32768 [ 139.096212][ T6786] XFS (loop4): Mounting V5 Filesystem [ 139.127772][ T6808] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.290097][ T6786] XFS (loop4): Ending clean mount [ 139.332982][ T6786] XFS (loop4): Quotacheck needed: Please wait. [ 139.424659][ T6786] XFS (loop4): Quotacheck: Done. [ 139.658226][ T4179] XFS (loop4): Unmounting Filesystem [ 139.979581][ T6830] loop3: detected capacity change from 0 to 4096 [ 140.020492][ T6831] loop2: detected capacity change from 0 to 4096 [ 140.154845][ T6830] ntfs: (device loop3): parse_options(): NLS character set iso88 not found. Using previous one maccenteuro. [ 140.234133][ T6830] ntfs: volume version 3.1. [ 140.306114][ T6830] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 140.381091][ T6830] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 140.826135][ T4206] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.053767][ T6875] loop2: detected capacity change from 0 to 1024 [ 141.085967][ T4206] usb 5-1: Using ep0 maxpacket: 16 [ 141.211190][ T4206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.244472][ T154] hfsplus: b-tree write err: -5, ino 4 [ 141.261079][ T4206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.284959][ T4206] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.308863][ T4206] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.327663][ T4206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.342634][ T4206] usb 5-1: config 0 descriptor?? [ 141.574300][ T6873] loop3: detected capacity change from 0 to 32768 [ 141.659066][ T6873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1035 (6873) [ 141.714043][ T6901] loop1: detected capacity change from 0 to 64 [ 141.743755][ T6873] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 141.761133][ T6873] BTRFS info (device loop3): setting nodatacow, compression disabled [ 141.779913][ T6901] hfs: unable to locate alternate MDB [ 141.802066][ T6901] hfs: continuing without an alternate MDB [ 141.810454][ T6873] BTRFS info (device loop3): max_inline at 0 [ 141.834609][ T6873] BTRFS info (device loop3): enabling disk space caching [ 141.836534][ T4206] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 141.853182][ T6873] BTRFS info (device loop3): setting datasum, datacow enabled [ 141.881965][ T4206] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 141.906587][ T4206] microsoft 0003:045E:07DA.0010: no inputs found [ 141.913136][ T6873] BTRFS info (device loop3): turning on flush-on-commit [ 141.913172][ T6873] BTRFS info (device loop3): doing ref verification [ 141.913193][ T6873] BTRFS info (device loop3): force clearing of disk cache [ 141.913252][ T6873] BTRFS info (device loop3): enabling ssd optimizations [ 141.913271][ T6873] BTRFS info (device loop3): turning off barriers [ 141.913309][ T6873] BTRFS info (device loop3): max_inline at 4096 [ 141.913329][ T6873] BTRFS info (device loop3): disk space caching is enabled [ 141.913346][ T6873] BTRFS info (device loop3): has skinny extents [ 142.100207][ T4206] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 142.118482][ T6931] loop2: detected capacity change from 0 to 1024 [ 142.147783][ T6873] BTRFS info (device loop3): clearing free space tree [ 142.188637][ T4206] usb 5-1: USB disconnect, device number 10 [ 142.198013][ T6873] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.225189][ T6873] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.255087][ T6931] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 142.352229][ T6931] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,bsddf,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,mb_optimize_scan=0x0000000000000001,dioread_lock,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 142.641781][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1062'. [ 142.866601][ T6950] loop1: detected capacity change from 0 to 2048 [ 142.937198][ T6950] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 142.981471][ T6950] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 143.029268][ T6956] loop4: detected capacity change from 0 to 64 [ 143.044929][ T6950] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.159162][ T6958] program syz.2.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.198051][ T6954] loop3: detected capacity change from 0 to 4096 [ 143.323209][ T6954] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 143.374662][ T6962] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1069'. [ 143.421995][ T6954] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 143.497353][ T6954] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 143.518276][ T6954] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 143.583372][ T6954] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 143.622316][ T6965] loop4: detected capacity change from 0 to 4096 [ 143.640515][ T6954] ntfs: volume version 3.1. [ 143.657368][ T6954] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 143.700653][ T6954] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 143.715872][ T6965] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 143.753488][ T6954] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 143.793559][ T6980] loop1: detected capacity change from 0 to 764 [ 143.877120][ T6954] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 143.933552][ T6954] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 144.086240][ T6984] loop2: detected capacity change from 0 to 4096 [ 144.264134][ T6984] ntfs: volume version 3.1. [ 144.331280][ T6993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.515561][ T6993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.779498][ T6993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.914135][ T6993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.017862][ T6993] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.049034][ T6993] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.070095][ T6993] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.109633][ T6993] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.229500][ T7036] loop2: detected capacity change from 0 to 256 [ 145.258132][ T7035] loop1: detected capacity change from 0 to 512 [ 145.315729][ T7035] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1100: iget: bad extended attribute block 1 [ 145.344448][ T7036] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.390175][ T7035] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1100: couldn't read orphan inode 15 (err -117) [ 145.429188][ T7035] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000005,bsddf,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none. [ 145.515172][ T7046] loop3: detected capacity change from 0 to 4096 [ 145.673569][ T7054] qrtr: Invalid version 192 [ 145.771494][ T7059] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.914205][ T7065] sp0: Synchronizing with TNC [ 146.313620][ T7079] loop2: detected capacity change from 0 to 2048 [ 146.423168][ T7079] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.458779][ T7079] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.550323][ T7099] loop4: detected capacity change from 0 to 8192 [ 146.561438][ T5273] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.841208][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 146.915822][ T7106] loop2: detected capacity change from 0 to 512 [ 146.961198][ T5273] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 146.979657][ T5273] usb 1-1: config 4 has no interface number 0 [ 146.986699][ T5273] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.009174][ T7106] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 147.024963][ T7106] UDF-fs: Scanning with blocksize 512 failed [ 147.037511][ T7110] loop4: detected capacity change from 0 to 2048 [ 147.044212][ T5273] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.055770][ T7106] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 147.067151][ T5273] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.080296][ T7106] UDF-fs: Scanning with blocksize 1024 failed [ 147.089908][ T7106] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 147.103931][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.116300][ T7106] UDF-fs: Scanning with blocksize 2048 failed [ 147.127815][ T7110] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 147.140337][ T7106] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 147.142233][ T7110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.162181][ T7106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.192525][ T5273] hub 1-1:4.128: USB hub found [ 147.346052][ T7098] loop1: detected capacity change from 0 to 32768 [ 147.407818][ T7093] loop3: detected capacity change from 0 to 40427 [ 147.416071][ T5273] hub 1-1:4.128: 2 ports detected [ 147.426322][ T5273] hub 1-1:4.128: Using single TT (err -22) [ 147.488425][ T7098] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 147.532542][ T7093] F2FS-fs (loop3): invalid crc value [ 147.555798][ T7116] loop4: detected capacity change from 0 to 4096 [ 147.621858][ T7118] loop2: detected capacity change from 0 to 4096 [ 147.631344][ T5273] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 147.642653][ T7093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.659375][ T5273] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 147.682478][ T7116] ntfs: volume version 3.1. [ 147.703625][ T4174] ocfs2: Unmounting device (7,1) on (node local) [ 147.711899][ T5273] usb 1-1: USB disconnect, device number 7 [ 147.783558][ T7118] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 147.821245][ T7093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 147.885960][ T7118] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 147.949251][ T7118] ntfs3: loop2: Failed to load $Extend. [ 148.111733][ T4169] attempt to access beyond end of device [ 148.111733][ T4169] loop3: rw=2051, want=45064, limit=40427 [ 148.160293][ T4169] attempt to access beyond end of device [ 148.160293][ T4169] loop3: rw=2051, want=131072, limit=40427 [ 148.225192][ T4169] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 148.225246][ T4169] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 148.302257][ T7128] loop1: detected capacity change from 0 to 8192 [ 148.404676][ T7128] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 148.481397][ T7128] REISERFS (device loop1): using ordered data mode [ 148.487961][ T7128] reiserfs: using flush barriers [ 148.518057][ T7143] loop4: detected capacity change from 0 to 8192 [ 148.564116][ T7143] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 148.582710][ T7143] REISERFS (device loop4): using journaled data mode [ 148.589593][ T7128] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.647613][ T7143] reiserfs: using flush barriers [ 148.678053][ T7128] REISERFS (device loop1): checking transaction log (loop1) [ 148.703626][ T7143] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.720752][ T7128] REISERFS (device loop1): Using r5 hash to sort names [ 148.788924][ T7143] REISERFS (device loop4): checking transaction log (loop4) [ 148.812910][ T7128] REISERFS (device loop1): using 3.5.x disk format [ 148.850336][ T7143] REISERFS (device loop4): Using r5 hash to sort names [ 148.858742][ T7128] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 148.877377][ T7143] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 148.899059][ T7143] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 149.092520][ T7160] loop3: detected capacity change from 0 to 4096 [ 149.169525][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 149.207030][ T7160] __ntfs_error: 10 callbacks suppressed [ 149.207048][ T7160] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 149.261871][ T7160] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 149.301409][ T7160] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 149.327771][ T7160] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 149.380782][ T7160] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 149.391167][ T4967] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.442057][ T7160] ntfs: volume version 3.1. [ 149.453455][ T7160] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 149.478334][ T7160] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 149.509117][ T7176] loop4: detected capacity change from 0 to 764 [ 149.516427][ T7160] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 149.557231][ T7160] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 149.581014][ T7160] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 149.761207][ T4967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.792733][ T4967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.818649][ T4967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.847744][ T7182] loop4: detected capacity change from 0 to 4096 [ 149.847944][ T4967] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.876557][ T4967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.921819][ T4967] usb 3-1: config 0 descriptor?? [ 149.953175][ T7187] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.061115][ T5273] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.064481][ T7182] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 150.121596][ T7182] Remounting filesystem read-only [ 150.192939][ T4179] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 150.201496][ T4179] NILFS (loop4): discard dirty block: blocknr=23, size=4096 [ 150.219311][ T4179] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 150.229435][ T4179] NILFS (loop4): discard dirty block: blocknr=24, size=4096 [ 150.249085][ T4179] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 150.266713][ T4179] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 150.404356][ T4967] plantronics 0003:047F:FFFF.0011: unbalanced collection at end of report description [ 150.421184][ T5273] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 150.433648][ T7197] tipc: Started in network mode [ 150.438543][ T7197] tipc: Node identity 7, cluster identity 4711 [ 150.446626][ T4967] plantronics 0003:047F:FFFF.0011: parse failed [ 150.453674][ T5273] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.468224][ T4967] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 150.477186][ T7197] tipc: Node number set to 7 [ 150.482268][ T5273] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.497748][ T7197] tipc: Cannot configure node identity twice [ 150.508819][ T5273] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.529704][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.604274][ T5273] usb 2-1: invalid MIDI out EP 0 [ 150.610826][ T7203] sp0: Synchronizing with TNC [ 150.618973][ T7203] sp0: Found TNC [ 150.639730][ T7202] [U] è` [ 150.664368][ T4967] usb 3-1: USB disconnect, device number 6 [ 150.715563][ T5273] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 150.761217][ T4541] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.777211][ T4430] udevd[4430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.819249][ T5273] usb 2-1: USB disconnect, device number 8 [ 151.031032][ T4541] usb 5-1: Using ep0 maxpacket: 32 [ 151.057492][ T7193] loop3: detected capacity change from 0 to 65536 [ 151.171676][ T4541] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 151.179806][ T4541] usb 5-1: config 0 has no interface number 0 [ 151.205209][ T7193] XFS (loop3): Mounting V5 Filesystem [ 151.293024][ T7193] XFS (loop3): Ending clean mount [ 151.391632][ T4541] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 151.402311][ T4541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.410344][ T4541] usb 5-1: Product: syz [ 151.415105][ T4541] usb 5-1: Manufacturer: syz [ 151.419744][ T4541] usb 5-1: SerialNumber: syz [ 151.438623][ T4541] usb 5-1: config 0 descriptor?? [ 151.474974][ T4169] XFS (loop3): Unmounting Filesystem [ 151.492110][ T4541] smsc95xx v2.0.0 [ 151.517444][ T7220] loop2: detected capacity change from 0 to 8192 [ 151.648868][ T7220] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 151.678465][ T7220] REISERFS (device loop2): using ordered data mode [ 151.730943][ T7220] reiserfs: using flush barriers [ 151.773600][ T7220] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.825966][ T7220] REISERFS (device loop2): checking transaction log (loop2) [ 152.033779][ T7220] REISERFS (device loop2): Using tea hash to sort names [ 152.047988][ T7220] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 152.131250][ T4541] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 152.161096][ T4541] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 152.189878][ T7234] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 152.201282][ T4541] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 152.225817][ T4541] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 152.264634][ T4541] usb 5-1: USB disconnect, device number 11 [ 152.718289][ T7247] loop2: detected capacity change from 0 to 512 [ 152.739565][ T7249] loop4: detected capacity change from 0 to 64 [ 152.877839][ T7247] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,nouid32,acl,,errors=continue. Quota mode: writeback. [ 152.905032][ T7257] loop1: detected capacity change from 0 to 4096 [ 152.923912][ T7247] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.967038][ T7236] loop3: detected capacity change from 0 to 32768 [ 153.016512][ T7236] (syz.3.1183,7236,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.074809][ T7236] (syz.3.1183,7236,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.083179][ T7263] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.134160][ T7257] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 153.171620][ T7257] Remounting filesystem read-only [ 153.211405][ T7236] JBD2: Ignoring recovery information on journal [ 153.345679][ T4174] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 153.373647][ T4174] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 153.376460][ T7236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.381846][ T4174] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 153.398480][ T4174] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 153.406234][ T4174] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 153.413674][ T4174] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 153.480482][ T7268] loop4: detected capacity change from 0 to 4096 [ 153.543887][ T7278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.583706][ T7268] ntfs: volume version 3.1. [ 153.606738][ T7282] sp0: Synchronizing with TNC [ 153.641528][ T7283] sp0: Found TNC [ 153.648021][ T7281] [U] è` [ 153.746642][ T7286] netlink: 'syz.2.1207': attribute type 8 has an invalid length. [ 153.766961][ T7286] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 153.789791][ T7286] netlink: 199776 bytes leftover after parsing attributes in process `syz.2.1207'. [ 153.882826][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 153.915210][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 153.926272][ T7290] loop4: detected capacity change from 0 to 512 [ 154.052565][ T7294] loop1: detected capacity change from 0 to 16 [ 154.102426][ T7290] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1208: invalid indirect mapped block 256 (level 2) [ 154.167971][ T7292] loop2: detected capacity change from 0 to 4096 [ 154.201735][ T7294] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.269442][ T7290] EXT4-fs (loop4): 2 truncates cleaned up [ 154.310983][ T7290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.390199][ T7298] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.035425][ T7313] loop1: detected capacity change from 0 to 4096 [ 155.129989][ T7313] __ntfs_error: 16 callbacks suppressed [ 155.130007][ T7313] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 155.185148][ T7327] x_tables: ip_tables: udp match: only valid for protocol 17 [ 155.229013][ T7313] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 155.291419][ T7313] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 155.335647][ T7313] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 155.384208][ T7313] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 155.447729][ T7313] ntfs: volume version 3.1. [ 155.511185][ T7313] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 155.547007][ T7313] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 155.580988][ T7313] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 155.631483][ T7313] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 155.665926][ T7313] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 155.988720][ T7354] loop4: detected capacity change from 0 to 8192 [ 156.075255][ T7354] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 156.092851][ T7354] REISERFS (device loop4): using ordered data mode [ 156.099521][ T7354] reiserfs: using flush barriers [ 156.111743][ T7354] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.115846][ T7367] loop3: detected capacity change from 0 to 2048 [ 156.172067][ T7354] REISERFS (device loop4): checking transaction log (loop4) [ 156.236297][ T4459] udevd[4459]: incorrect nilfs2 checksum on /dev/loop3 [ 156.262495][ T7354] REISERFS (device loop4): Using r5 hash to sort names [ 156.269418][ T7354] REISERFS (device loop4): using 3.5.x disk format [ 156.291477][ T7354] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 156.493351][ T7367] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.621085][ T7380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.834967][ T7379] loop1: detected capacity change from 0 to 8192 [ 157.014731][ T7379] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 157.072547][ T7395] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 157.080146][ T7379] REISERFS (device loop1): using ordered data mode [ 157.086297][ T7362] loop2: detected capacity change from 0 to 32768 [ 157.137500][ T7379] reiserfs: using flush barriers [ 157.181189][ T7379] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.188608][ T7362] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 157.264893][ T7379] REISERFS (device loop1): checking transaction log (loop1) [ 157.284866][ T7401] loop4: detected capacity change from 0 to 64 [ 157.302277][ T7362] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 157.391734][ T7362] gfs2: fsid=syz:syz.0: no journals! [ 157.641087][ T4954] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 157.658374][ T7379] REISERFS (device loop1): Using tea hash to sort names [ 157.675278][ T7411] loop4: detected capacity change from 0 to 256 [ 157.688177][ T7379] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 157.762363][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 157.794929][ T7411] FAT-fs (loop4): Directory bread(block 64) failed [ 157.823916][ T7411] FAT-fs (loop4): Directory bread(block 65) failed [ 157.830560][ T7411] FAT-fs (loop4): Directory bread(block 66) failed [ 157.848140][ T7411] FAT-fs (loop4): Directory bread(block 67) failed [ 157.859388][ T7411] FAT-fs (loop4): Directory bread(block 68) failed [ 157.871928][ T7411] FAT-fs (loop4): Directory bread(block 69) failed [ 157.889988][ T7411] FAT-fs (loop4): Directory bread(block 70) failed [ 157.896702][ T7411] FAT-fs (loop4): Directory bread(block 71) failed [ 157.910268][ T7411] FAT-fs (loop4): Directory bread(block 72) failed [ 157.924644][ T7411] FAT-fs (loop4): Directory bread(block 73) failed [ 158.221454][ T4954] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 158.230584][ T4954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.260953][ T4954] usb 4-1: Product: syz [ 158.271454][ T4954] usb 4-1: Manufacturer: syz [ 158.276096][ T4954] usb 4-1: SerialNumber: syz [ 158.339845][ T4954] usb 4-1: config 0 descriptor?? [ 158.393123][ T4954] usb 4-1: selecting invalid altsetting 1 [ 158.398994][ T4954] technisat-usb2: could not set alternate setting to 0 [ 158.543213][ T7427] loop4: detected capacity change from 0 to 256 [ 158.611250][ T4954] technisat-usb2: firmware version: 0.0 [ 158.616185][ T7427] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 158.617196][ T4954] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 158.857978][ T4954] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 158.979471][ T4954] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 159.057000][ T4954] usb 4-1: USB disconnect, device number 5 [ 159.277158][ T7441] loop4: detected capacity change from 0 to 8192 [ 159.361253][ T7446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.399889][ T7441] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 159.429848][ T7441] REISERFS (device loop4): using ordered data mode [ 159.436621][ T7441] reiserfs: using flush barriers [ 159.443081][ T7441] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 159.573970][ T7441] REISERFS (device loop4): checking transaction log (loop4) [ 159.681071][ T7455] loop2: detected capacity change from 0 to 1024 [ 159.758607][ T7425] loop1: detected capacity change from 0 to 40427 [ 159.840469][ T7425] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 159.876912][ T7425] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.897749][ T7455] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.912811][ T7425] F2FS-fs (loop1): invalid crc value [ 159.953838][ T7441] REISERFS (device loop4): Using tea hash to sort names [ 159.974155][ T7441] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 159.989078][ T7425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.063300][ T7469] loop3: detected capacity change from 0 to 64 [ 160.305322][ T7425] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.323128][ T7425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.655740][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 160.695758][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 161.046765][ T7494] loop3: detected capacity change from 0 to 4096 [ 161.121143][ T7507] loop4: detected capacity change from 0 to 4096 [ 161.203077][ T7494] __ntfs_warning: 2 callbacks suppressed [ 161.203097][ T7494] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 161.260101][ T7507] NILFS (loop4): invalid segment: Checksum error in segment payload [ 161.310975][ T7507] NILFS (loop4): trying rollback from an earlier position [ 161.323949][ T7507] NILFS (loop4): recovery complete [ 161.336638][ T7516] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.568618][ T7494] ntfs: volume version 3.1. [ 161.794685][ T7494] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp855. You might want to try to use the mount option nls=utf8. [ 161.819049][ T7527] loop4: detected capacity change from 0 to 736 [ 161.919238][ T7494] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 162.011218][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 162.039001][ T7535] loop1: detected capacity change from 0 to 1024 [ 162.052743][ T7527] rock: directory entry would overflow storage [ 162.059547][ T7527] rock: sig=0x3b10, size=4, remaining=3 [ 162.066228][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 162.100803][ T7533] netlink: 'syz.0.1312': attribute type 18 has an invalid length. [ 162.156117][ T7535] EXT4-fs (loop1): Ignoring removed orlov option [ 162.191095][ T7538] loop2: detected capacity change from 0 to 256 [ 162.209540][ T7535] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,discard,nojournal_checksum,orlov,. Quota mode: none. [ 162.250940][ T26] audit: type=1800 audit(1738959557.171:13): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1313" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 162.271076][ T7535] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #11: comm syz.1.1313: directory missing '..' [ 162.419640][ T7535] EXT4-fs (loop1): Remounting filesystem read-only [ 162.587790][ T7551] loop2: detected capacity change from 0 to 512 [ 162.730329][ T7559] loop1: detected capacity change from 0 to 1024 [ 162.768464][ T7551] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,grpjquota=,minixdf,,errors=continue. Quota mode: writeback. [ 162.803818][ T7566] usb usb1: usbfs: process 7566 (syz.4.1325) did not claim interface 0 before use [ 162.826547][ T7559] EXT4-fs (loop1): Ignoring removed oldalloc option [ 162.846785][ T7551] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.868481][ T7559] EXT4-fs (loop1): Ignoring removed bh option [ 162.875069][ T7566] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.907080][ T7559] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.962034][ T7559] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 162.987647][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.070076][ T7559] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.1321: Allocating blocks 257-513 which overlap fs metadata [ 163.293938][ T7580] loop4: detected capacity change from 0 to 64 [ 163.420080][ T7580] hfs: request for non-existent node 56 in B*Tree [ 163.457804][ T7580] hfs: request for non-existent node 56 in B*Tree [ 163.507146][ T7580] hfs: request for non-existent node 57 in B*Tree [ 163.527226][ T7580] hfs: request for non-existent node 57 in B*Tree [ 163.780558][ T7597] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.854804][ T7599] sp0: Synchronizing with TNC [ 163.880449][ T7598] [U] è` [ 164.053455][ T7607] loop3: detected capacity change from 0 to 512 [ 164.164620][ T7607] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1344: corrupted in-inode xattr [ 164.201919][ T7607] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1344: couldn't read orphan inode 15 (err -117) [ 164.226134][ T7577] loop2: detected capacity change from 0 to 40427 [ 164.257394][ T7607] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.294582][ T7591] loop1: detected capacity change from 0 to 32768 [ 164.360730][ T7577] F2FS-fs (loop2): invalid crc value [ 164.408275][ T7577] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.571643][ T7577] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.690977][ T4167] attempt to access beyond end of device [ 164.690977][ T4167] loop2: rw=2049, want=45104, limit=40427 [ 164.733432][ T263] block nbd0: Attempted send on invalid socket [ 164.742761][ T263] blk_update_request: I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.758146][ T263] block nbd0: Attempted send on invalid socket [ 164.764676][ T263] blk_update_request: I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.775546][ T263] Buffer I/O error on dev nbd0p9, logical block 1, async page read [ 164.785633][ T7601] loop4: detected capacity change from 0 to 32768 [ 165.086387][ T7633] loop3: detected capacity change from 0 to 4096 [ 165.215963][ T7633] ntfs: volume version 3.1. [ 165.767749][ T7664] loop3: detected capacity change from 0 to 256 [ 165.847932][ T7669] loop4: detected capacity change from 0 to 2048 [ 165.882250][ T7664] exfat: Deprecated parameter 'utf8' [ 165.902388][ T7664] exfat: Deprecated parameter 'namecase' [ 165.963476][ T7678] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.990527][ T7664] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 166.003259][ T7676] loop2: detected capacity change from 0 to 2048 [ 166.115446][ T7676] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.130740][ T4459] udevd[4459]: incorrect nilfs2 checksum on /dev/loop2 [ 166.179353][ T7681] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.540957][ T4545] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 166.584070][ T7673] loop1: detected capacity change from 0 to 32768 [ 166.646914][ T7698] netlink: 'syz.0.1386': attribute type 29 has an invalid length. [ 166.661672][ T7673] XFS (loop1): Mounting V5 Filesystem [ 166.667508][ T7698] netlink: 'syz.0.1386': attribute type 29 has an invalid length. [ 166.688486][ T7698] netlink: 'syz.0.1386': attribute type 29 has an invalid length. [ 166.832584][ T7673] XFS (loop1): Ending clean mount [ 166.847671][ T7673] XFS (loop1): Quotacheck needed: Please wait. [ 166.929862][ T7673] XFS (loop1): Quotacheck: Done. [ 166.935149][ T7690] loop2: detected capacity change from 0 to 40427 [ 166.942327][ T4545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.959537][ T4545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.969989][ T4545] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 166.981336][ T4545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.993411][ T4545] usb 5-1: config 0 descriptor?? [ 167.010766][ T4174] XFS (loop1): Unmounting Filesystem [ 167.072658][ T7690] F2FS-fs (loop2): invalid crc value [ 167.090320][ T7690] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.171430][ T7690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.305456][ T7725] loop3: detected capacity change from 0 to 256 [ 167.322347][ T4167] attempt to access beyond end of device [ 167.322347][ T4167] loop2: rw=2049, want=45104, limit=40427 [ 167.498858][ T4545] hid-generic 0003:05AC:4262.0012: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.4-1/input0 [ 167.695169][ T4545] usb 5-1: USB disconnect, device number 12 [ 168.109539][ T7753] netlink: 'syz.3.1407': attribute type 29 has an invalid length. [ 168.141455][ T7753] netlink: 'syz.3.1407': attribute type 29 has an invalid length. [ 168.153600][ T7753] netlink: 'syz.3.1407': attribute type 29 has an invalid length. [ 168.393242][ T7765] loop2: detected capacity change from 0 to 512 [ 168.478115][ T7730] loop1: detected capacity change from 0 to 40427 [ 168.489094][ T7765] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 168.709266][ T7730] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.834167][ T7780] loop4: detected capacity change from 0 to 512 [ 168.871101][ T7730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.977731][ T7780] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.001437][ T7780] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 169.008576][ T7780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 169.008670][ T7780] System zones: 0-2, 18-18, 34-34 [ 169.060103][ T4174] attempt to access beyond end of device [ 169.060103][ T4174] loop1: rw=2049, want=45104, limit=40427 [ 169.159686][ T7780] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 169.184943][ T7780] EXT4-fs (loop4): 1 truncate cleaned up [ 169.184977][ T7780] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000004,,errors=continue. Quota mode: none. [ 169.248410][ T26] audit: type=1800 audit(1738959564.181:14): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1418" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 169.574150][ T7760] loop3: detected capacity change from 0 to 65536 [ 169.580480][ T7787] loop4: detected capacity change from 0 to 512 [ 169.679985][ T7787] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 169.694113][ T7787] EXT4-fs (loop4): Test dummy encryption mode enabled [ 169.758314][ T7787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0003] [ 169.784252][ T7787] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1421: inode #13: comm syz.4.1421: iget: illegal inode # [ 169.821766][ T7787] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1421: couldn't read orphan inode 13 (err -117) [ 169.848922][ T7760] XFS (loop3): Mounting V5 Filesystem [ 169.858341][ T7787] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000000222a,delalloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 169.901089][ T6951] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.991555][ T7760] XFS (loop3): Ending clean mount [ 169.993230][ T7760] XFS (loop3): Quotacheck needed: Please wait. [ 170.022187][ T7787] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.1421: resize_inode disabled but reserved GDT blocks non-zero [ 170.098453][ T7760] XFS (loop3): Quotacheck: Done. [ 170.246910][ T4169] XFS (loop3): Unmounting Filesystem [ 170.261486][ T6951] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 170.316505][ T6951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.357599][ T6951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.421085][ T6951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 170.458916][ T6951] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 170.481186][ T6951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.523206][ T6951] usb 3-1: config 0 descriptor?? [ 171.004090][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.016004][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.027554][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.036169][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.048170][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.056807][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.069342][ T6951] kye 0003:0458:5015.0013: unknown main item tag 0x0 [ 171.102483][ T6951] kye 0003:0458:5015.0013: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 171.124363][ T6951] kye 0003:0458:5015.0013: tablet-enabling feature report not found [ 171.135348][ T6951] kye 0003:0458:5015.0013: tablet enabling failed [ 171.209381][ T4967] usb 3-1: USB disconnect, device number 7 [ 171.333399][ T6951] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.447569][ T7852] loop3: detected capacity change from 0 to 1764 [ 171.527994][ T7852] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 171.590971][ T6951] usb 2-1: Using ep0 maxpacket: 8 [ 171.597534][ T7860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1451'. [ 171.711514][ T6951] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 171.719938][ T6951] usb 2-1: config 1 has no interface number 0 [ 171.734476][ T7866] loop3: detected capacity change from 0 to 256 [ 171.749668][ T6951] usb 2-1: too many endpoints for config 1 interface 7 altsetting 0: 237, using maximum allowed: 30 [ 171.774484][ T6951] usb 2-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 237 [ 171.818037][ T7866] exfat: Deprecated parameter 'utf8' [ 171.848693][ T7866] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 171.966951][ T6951] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 171.991250][ T6951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.999433][ T6951] usb 2-1: Product: syz [ 172.014638][ T6951] usb 2-1: Manufacturer: syz [ 172.019293][ T6951] usb 2-1: SerialNumber: syz [ 172.305899][ T6951] usblp 2-1:1.7: usblp0: USB Bidirectional printer dev 9 if 7 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 172.569896][ T7909] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 172.574997][ T6951] usb 2-1: USB disconnect, device number 9 [ 172.593080][ T7909] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.1473'. [ 172.623123][ T6951] usblp0: removed [ 172.908730][ T7923] loop3: detected capacity change from 0 to 64 [ 172.945665][ T7927] loop2: detected capacity change from 0 to 8 [ 173.012065][ T7927] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 173.323687][ T7941] loop1: detected capacity change from 0 to 24 [ 173.410066][ T7947] loop3: detected capacity change from 0 to 64 [ 173.415021][ T7945] loop2: detected capacity change from 0 to 256 [ 173.451892][ T7945] exfat: Deprecated parameter 'utf8' [ 173.457333][ T7945] exfat: Deprecated parameter 'utf8' [ 173.463183][ T7945] exfat: Deprecated parameter 'utf8' [ 173.522257][ T7945] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 173.931777][ T7963] loop4: detected capacity change from 0 to 2048 [ 174.046341][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 174.046369][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 174.071898][ T7963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.072023][ T7963] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.219584][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 174.297524][ T7985] loop1: detected capacity change from 0 to 256 [ 174.382213][ T7985] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 174.396027][ T7993] loop2: detected capacity change from 0 to 256 [ 174.415539][ T7985] FAT-fs (loop1): Filesystem has been set read-only [ 174.471305][ T7997] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1515'. [ 174.495910][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1515'. [ 174.537511][ T7993] FAT-fs (loop2): Directory bread(block 64) failed [ 174.556818][ T7993] FAT-fs (loop2): Directory bread(block 65) failed [ 174.626070][ T7993] FAT-fs (loop2): Directory bread(block 66) failed [ 174.670170][ T7993] FAT-fs (loop2): Directory bread(block 67) failed [ 174.706312][ T7993] FAT-fs (loop2): Directory bread(block 68) failed [ 174.727029][ T7993] FAT-fs (loop2): Directory bread(block 69) failed [ 174.774602][ T7993] FAT-fs (loop2): Directory bread(block 70) failed [ 174.804371][ T8010] loop3: detected capacity change from 0 to 1024 [ 174.807628][ T7993] FAT-fs (loop2): Directory bread(block 71) failed [ 174.830535][ T7993] FAT-fs (loop2): Directory bread(block 72) failed [ 174.848189][ T7993] FAT-fs (loop2): Directory bread(block 73) failed [ 174.961306][ T8014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1524'. [ 175.062097][ T1173] hfsplus: b-tree write err: -5, ino 4 [ 175.295602][ T8020] loop4: detected capacity change from 0 to 4096 [ 175.397037][ T8020] ntfs: volume version 3.1. [ 175.418136][ T8020] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 175.434548][ T8020] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 175.452385][ T8020] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 175.504407][ T8020] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 175.518567][ T8020] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 175.566835][ T8038] loop3: detected capacity change from 0 to 4096 [ 175.663575][ T8042] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 175.688265][ T8038] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 175.816493][ T8046] loop4: detected capacity change from 0 to 128 [ 175.841834][ T8044] loop2: detected capacity change from 0 to 4096 [ 175.887910][ T4169] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 175.895334][ T4169] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 175.914477][ T4169] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 176.054950][ T8050] loop3: detected capacity change from 0 to 256 [ 176.093073][ T8050] exfat: Deprecated parameter 'namecase' [ 176.129578][ T8050] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 176.455880][ T8064] loop4: detected capacity change from 0 to 2048 [ 176.530055][ T8068] loop3: detected capacity change from 0 to 4096 [ 176.560052][ T8064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.780964][ T4954] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.826628][ T26] audit: type=1107 audit(1738959571.761:15): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 176.859175][ T8076] loop2: detected capacity change from 0 to 4096 [ 176.920616][ T8076] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 177.074688][ T8085] loop4: detected capacity change from 0 to 4096 [ 177.091106][ T4167] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 177.111831][ T4167] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 177.133218][ T4167] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 177.171215][ T4954] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 177.178664][ T8085] ntfs: volume version 3.1. [ 177.196874][ T4954] usb 2-1: config 0 has no interface number 0 [ 177.221000][ T4954] usb 2-1: config 0 interface 79 has no altsetting 0 [ 177.431008][ T4954] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 177.440203][ T4954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.489129][ T4954] usb 2-1: Product: syz [ 177.501408][ T4954] usb 2-1: Manufacturer: syz [ 177.507971][ T4954] usb 2-1: SerialNumber: syz [ 177.524084][ T4954] usb 2-1: config 0 descriptor?? [ 177.529619][ T8105] nfs4: Unexpected value for 'tcp' [ 177.563132][ T4954] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 177.581684][ T4954] dvb-usb: bulk message failed: -22 (2/0) [ 177.620745][ T4954] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 177.676938][ T8111] loop3: detected capacity change from 0 to 64 [ 177.691525][ T4954] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 177.711378][ T4954] usb 2-1: media controller created [ 177.726793][ T4954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.780018][ T4954] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 177.803978][ T4954] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 178.034126][ T4954] rc_core: IR keymap rc-dtt200u not found [ 178.042321][ T4954] Registered IR keymap rc-empty [ 178.077525][ T4954] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 178.127951][ T4954] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 178.194354][ T8131] loop4: detected capacity change from 0 to 256 [ 178.210348][ T4954] dvb-usb: schedule remote query interval to 300 msecs. [ 178.226264][ T4954] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 178.274680][ T4954] usb 2-1: USB disconnect, device number 10 [ 178.291980][ T8131] exfat: Deprecated parameter 'utf8' [ 178.301970][ T8131] exfat: Deprecated parameter 'utf8' [ 178.324052][ T8131] exfat: Deprecated parameter 'utf8' [ 178.339673][ T8131] exfat: Deprecated parameter 'utf8' [ 178.416827][ T8131] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 178.431629][ T4954] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 178.813205][ T8161] loop2: detected capacity change from 0 to 64 [ 178.848471][ T8164] loop1: detected capacity change from 0 to 64 [ 179.017879][ T8170] loop4: detected capacity change from 0 to 64 [ 179.331200][ T8187] loop3: detected capacity change from 0 to 256 [ 179.364895][ T8189] loop4: detected capacity change from 0 to 64 [ 179.404957][ T8193] loop1: detected capacity change from 0 to 16 [ 179.430146][ T8187] FAT-fs (loop3): Directory bread(block 64) failed [ 179.437210][ T8187] FAT-fs (loop3): Directory bread(block 65) failed [ 179.437556][ T8195] loop2: detected capacity change from 0 to 512 [ 179.452317][ T8187] FAT-fs (loop3): Directory bread(block 66) failed [ 179.458902][ T8187] FAT-fs (loop3): Directory bread(block 67) failed [ 179.473289][ T8187] FAT-fs (loop3): Directory bread(block 68) failed [ 179.480028][ T8187] FAT-fs (loop3): Directory bread(block 69) failed [ 179.497717][ T8189] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 179.511148][ T8193] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.512824][ T8187] FAT-fs (loop3): Directory bread(block 70) failed [ 179.530585][ T8187] FAT-fs (loop3): Directory bread(block 71) failed [ 179.537744][ T8187] FAT-fs (loop3): Directory bread(block 72) failed [ 179.545900][ T8187] FAT-fs (loop3): Directory bread(block 73) failed [ 179.564294][ T8189] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 179.571683][ T8193] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel [ 179.616268][ T8193] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 179.658135][ T8195] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1599: corrupted inode contents [ 179.716898][ T8195] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.1599: mark_inode_dirty error [ 179.834372][ T8195] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.1599: corrupted inode contents [ 179.906231][ T8195] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1599: mark_inode_dirty error [ 179.997795][ T8195] Quota error (device loop2): write_blk: dquota write failed [ 180.064513][ T8195] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 180.105511][ T8195] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1599: Failed to acquire dquot type 0 [ 180.169454][ T8195] EXT4-fs (loop2): 1 orphan inode deleted [ 180.200451][ T8195] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.251203][ T8195] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.291868][ T8221] device dummy0 entered promiscuous mode [ 180.316810][ T8221] device dummy0 left promiscuous mode [ 180.626855][ T8241] loop4: detected capacity change from 0 to 16 [ 180.700199][ T8241] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.814623][ T8242] loop2: detected capacity change from 0 to 4096 [ 180.901816][ T8242] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 180.973524][ T8242] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 181.047182][ T8242] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 181.091171][ T8242] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 181.121027][ T8242] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 181.180321][ T8242] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 181.213047][ T8265] loop1: detected capacity change from 0 to 64 [ 181.245133][ T8242] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 181.264592][ T8242] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 181.291549][ T8242] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 181.308625][ T8242] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 181.350237][ T8242] ntfs: volume version 3.1. [ 181.546745][ T8276] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.643021][ T8253] loop3: detected capacity change from 0 to 32768 [ 181.772280][ T8253] ea_get: invalid extended attribute [ 181.772379][ T8253] ffff8880746595b0: 04 00 00 00 .... [ 181.850816][ T8282] loop2: detected capacity change from 0 to 4096 [ 181.882265][ T8286] loop4: detected capacity change from 0 to 256 [ 181.923165][ T8286] exfat: Deprecated parameter 'namecase' [ 181.938677][ T8287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.987920][ T8286] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 182.199322][ T8293] loop1: detected capacity change from 0 to 164 [ 182.276272][ T8293] Unable to read rock-ridge attributes [ 182.363918][ T8302] loop3: detected capacity change from 0 to 256 [ 182.403380][ T8306] loop4: detected capacity change from 0 to 764 [ 182.469784][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 182.484294][ T8306] rock: directory entry would overflow storage [ 182.485160][ T8302] FAT-fs (loop3): Directory bread(block 64) failed [ 182.490688][ T8306] rock: sig=0x4654, size=5, remaining=4 [ 182.513228][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1651'. [ 182.517879][ T8302] FAT-fs (loop3): Directory bread(block 65) failed [ 182.547000][ T8302] FAT-fs (loop3): Directory bread(block 66) failed [ 182.575739][ T8302] FAT-fs (loop3): Directory bread(block 67) failed [ 182.604077][ T8302] FAT-fs (loop3): Directory bread(block 68) failed [ 182.653590][ T8302] FAT-fs (loop3): Directory bread(block 69) failed [ 182.688376][ T8302] FAT-fs (loop3): Directory bread(block 70) failed [ 182.699944][ T8302] FAT-fs (loop3): Directory bread(block 71) failed [ 182.713703][ T8302] FAT-fs (loop3): Directory bread(block 72) failed [ 182.720396][ T8302] FAT-fs (loop3): Directory bread(block 73) failed [ 182.746375][ T8311] loop4: detected capacity change from 0 to 2048 [ 182.795782][ T8311] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.880202][ T8315] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.060277][ T8304] loop2: detected capacity change from 0 to 32768 [ 183.127023][ T8304] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1650 (8304) [ 183.213388][ T8304] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 183.241351][ T8304] BTRFS info (device loop2): using free space tree [ 183.257672][ T8304] BTRFS info (device loop2): has skinny extents [ 183.506806][ T8340] loop1: detected capacity change from 0 to 4096 [ 183.637550][ T8304] BTRFS info (device loop2): enabling ssd optimizations [ 183.674156][ T8340] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 183.722798][ T8325] loop4: detected capacity change from 0 to 32768 [ 183.767836][ T8356] loop3: detected capacity change from 0 to 4096 [ 184.126245][ T8325] XFS (loop4): Mounting V5 Filesystem [ 184.363149][ T8325] XFS (loop4): Ending clean mount [ 184.408805][ T8325] XFS (loop4): Quotacheck needed: Please wait. [ 184.546110][ T8325] XFS (loop4): Quotacheck: Done. [ 184.635329][ T8389] sp0: Synchronizing with TNC [ 184.712557][ T8395] loop2: detected capacity change from 0 to 512 [ 184.729016][ T4179] XFS (loop4): Unmounting Filesystem [ 184.788021][ T8395] EXT4-fs (loop2): Ignoring removed orlov option [ 185.000417][ T8395] EXT4-fs (loop2): 1 orphan inode deleted [ 185.028374][ T8395] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 185.048790][ T8395] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.095955][ T4967] kernel write not supported for file /input/mice (pid: 4967 comm: kworker/0:13) [ 185.739357][ T8441] loop1: detected capacity change from 0 to 1024 [ 185.902332][ T8441] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,max_dir_size_kb=0x000000000000007f,nolazytime,noload,min_batch_time=0x0000000000000005,acl,,errors=continue. Quota mode: none. [ 185.923998][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.048622][ T8453] loop4: detected capacity change from 0 to 128 [ 186.116286][ T8435] loop2: detected capacity change from 0 to 32768 [ 186.124003][ T4541] Bluetooth: hci2: command 0x0406 tx timeout [ 186.139429][ T4541] Bluetooth: hci0: command 0x0406 tx timeout [ 186.151070][ T4541] Bluetooth: hci1: command 0x0406 tx timeout [ 186.169802][ T4541] Bluetooth: hci3: command 0x0406 tx timeout [ 186.460625][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 186.500961][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 186.524047][ T8465] netlink: 'syz.2.1713': attribute type 11 has an invalid length. [ 186.747571][ T8474] loop4: detected capacity change from 0 to 1764 [ 186.974230][ T8484] loop2: detected capacity change from 0 to 256 [ 187.046165][ T8486] trusted_key: encrypted_key: keylen parameter is missing [ 187.068502][ T8484] exfat: Deprecated parameter 'namecase' [ 187.126548][ T8484] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 187.139753][ T8460] loop3: detected capacity change from 0 to 32768 [ 187.296590][ T8460] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 187.328559][ T8494] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1726'. [ 187.443396][ T8494] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 187.520711][ T8499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1727'. [ 187.532506][ T8488] loop4: detected capacity change from 0 to 32768 [ 187.566144][ T4169] ocfs2: Unmounting device (7,3) on (node local) [ 187.868369][ T8514] loop3: detected capacity change from 0 to 256 [ 187.942286][ T8514] exfat: Deprecated parameter 'utf8' [ 187.958112][ T8514] exfat: Deprecated parameter 'utf8' [ 187.985012][ T8514] exfat: Deprecated parameter 'utf8' [ 188.216755][ T8514] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 188.239646][ T8523] loop2: detected capacity change from 0 to 512 [ 188.317305][ T8525] loop4: detected capacity change from 0 to 1024 [ 188.415618][ T8523] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.497053][ T8525] hfsplus: bad catalog entry type [ 188.520410][ T8523] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 188.534835][ T8523] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1739: attempt to clear invalid blocks 2 len 1 [ 188.553375][ T8523] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 188.572268][ T8523] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1739: invalid indirect mapped block 1819239214 (level 0) [ 188.586844][ T8523] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1739: invalid indirect mapped block 1819239214 (level 1) [ 188.638027][ T1173] hfsplus: b-tree write err: -5, ino 4 [ 188.678664][ T8523] EXT4-fs (loop2): 1 truncate cleaned up [ 188.684543][ T8523] EXT4-fs (loop2): mounted filesystem without journal. Opts: dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 188.766678][ T8523] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 189.034901][ T8544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 189.087918][ T8543] loop1: detected capacity change from 0 to 2048 [ 189.114851][ T8541] loop2: detected capacity change from 0 to 4096 [ 189.174859][ T8541] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 189.213761][ T8548] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.249208][ T8541] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 189.271308][ T8550] loop3: detected capacity change from 0 to 64 [ 189.282506][ T8541] ntfs3: loop2: Failed to load $Extend. [ 189.498640][ T8535] loop4: detected capacity change from 0 to 32768 [ 189.709697][ T8535] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 189.740060][ T8535] (syz.4.1742,8535,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 189.809716][ T4179] ocfs2: Unmounting device (7,4) on (node local) [ 189.949509][ T8577] loop2: detected capacity change from 0 to 256 [ 190.681610][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 190.799825][ T8614] loop2: detected capacity change from 0 to 8192 [ 190.835644][ T8614] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 190.922376][ T8614] REISERFS (device loop2): using ordered data mode [ 190.929229][ T8614] reiserfs: using flush barriers [ 190.935706][ T8614] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.959594][ T8614] REISERFS (device loop2): checking transaction log (loop2) [ 190.994240][ T8614] REISERFS (device loop2): Using rupasov hash to sort names [ 191.002251][ T8614] REISERFS (device loop2): using 3.5.x disk format [ 191.009020][ T8614] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 191.027683][ T8614] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 191.039118][ T8614] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 191.070825][ T8614] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 191.153113][ T8637] netlink: 'syz.1.1791': attribute type 4 has an invalid length. [ 191.233864][ T8641] trusted_key: encrypted_key: key trusted:syz not found [ 191.338930][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 191.411527][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 191.457866][ T8644] netlink: 'syz.0.1796': attribute type 11 has an invalid length. [ 191.630055][ T8656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1800'. [ 191.699986][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 191.724265][ T8666] Zero length message leads to an empty skb [ 191.862317][ T8662] loop2: detected capacity change from 0 to 8192 [ 191.943569][ T8662] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 192.023690][ T8662] REISERFS (device loop2): using ordered data mode [ 192.053820][ T8662] reiserfs: using flush barriers [ 192.074396][ T8662] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.141333][ T8662] REISERFS (device loop2): checking transaction log (loop2) [ 192.175630][ T8679] binder: 8678:8679 ioctl c00c620f 400000000180 returned -22 [ 192.188725][ T8663] loop3: detected capacity change from 0 to 32768 [ 192.195548][ T4541] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.417121][ T8662] REISERFS (device loop2): Using tea hash to sort names [ 192.445963][ T8662] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 192.474645][ T4541] usb 2-1: Using ep0 maxpacket: 8 [ 192.651055][ T4545] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 192.787138][ T4541] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 192.802276][ T4541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.816751][ T4541] usb 2-1: Product: syz [ 192.835003][ T4541] usb 2-1: Manufacturer: syz [ 192.839656][ T4541] usb 2-1: SerialNumber: syz [ 192.877787][ T4541] usb 2-1: config 0 descriptor?? [ 192.933281][ T4541] gspca_main: sq930x-2.14.0 probing 2770:930c [ 193.029600][ T8712] loop2: detected capacity change from 0 to 1024 [ 193.071216][ T4545] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 193.082799][ T4545] usb 5-1: config 0 has no interface number 0 [ 193.088958][ T4545] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.099866][ T4545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.111031][ T4545] usb 5-1: config 0 descriptor?? [ 193.162589][ T4545] cp210x 5-1:0.15: cp210x converter detected [ 193.167319][ T8721] tipc: Enabled bearer , priority 10 [ 193.200372][ T8723] loop3: detected capacity change from 0 to 1024 [ 193.239963][ T144] hfsplus: b-tree write err: -5, ino 4 [ 193.328174][ T8723] hfsplus: bad catalog entry type [ 193.386265][ T1173] hfsplus: b-tree write err: -5, ino 4 [ 193.601333][ T4545] cp210x 5-1:0.15: failed to get vendor val 0x000e size 3: -71 [ 193.621132][ T4541] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 193.629560][ T4545] usb 5-1: cp210x converter now attached to ttyUSB0 [ 193.660944][ T4545] usb 5-1: USB disconnect, device number 13 [ 193.687025][ T4545] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.720442][ T4545] cp210x 5-1:0.15: device disconnected [ 193.765234][ T8749] 9pnet: p9_fd_create_tcp (8749): problem connecting socket to 127.0.0.1 [ 193.830203][ T8751] mmap: syz.3.1844 (8751): VmData 54235136 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 193.841227][ T5273] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.874354][ T4541] gspca_sq930x: Sensor ov9630 not yet treated [ 193.880517][ T4541] sq930x: probe of 2-1:0.0 failed with error -22 [ 193.913584][ T4541] usb 2-1: USB disconnect, device number 11 [ 193.945599][ T8755] loop3: detected capacity change from 0 to 256 [ 194.017484][ T8755] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3c79996a, utbl_chksum : 0xe619d30d) [ 194.211351][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.245949][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.276934][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.283294][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.292381][ T5273] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 194.312229][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.335553][ T5273] usb 3-1: config 0 descriptor?? [ 194.346638][ T8764] loop4: detected capacity change from 0 to 512 [ 194.466164][ T8764] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1851: invalid indirect mapped block 10 (level 1) [ 194.510603][ T8764] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1851: invalid indirect mapped block 8 (level 1) [ 194.555388][ T8764] EXT4-fs (loop4): 1 truncate cleaned up [ 194.576774][ T8764] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 194.725467][ T8765] loop3: detected capacity change from 0 to 40427 [ 194.748786][ T8757] loop1: detected capacity change from 0 to 32768 [ 194.812315][ T8757] [ 194.812315][ T8757] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.812315][ T8757] [ 194.815635][ T8765] F2FS-fs (loop3): invalid crc value [ 194.827284][ T5273] cypress 0003:04B4:DE61.0014: item fetching failed at offset 5/7 [ 194.869624][ T5273] cypress 0003:04B4:DE61.0014: parse failed [ 194.886200][ T5273] cypress: probe of 0003:04B4:DE61.0014 failed with error -22 [ 194.915985][ T8765] F2FS-fs (loop3): Found nat_bits in checkpoint [ 194.921394][ T8757] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 194.921394][ T8757] [ 194.930635][ T8773] loop4: detected capacity change from 0 to 512 [ 194.959907][ T8757] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 195.008710][ T4592] [ 195.008710][ T4592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.008710][ T4592] [ 195.021238][ T4592] [ 195.021238][ T4592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.021238][ T4592] [ 195.023698][ T8765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 195.036113][ T5273] usb 3-1: USB disconnect, device number 8 [ 195.069924][ T4174] [ 195.069924][ T4174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.069924][ T4174] [ 195.086303][ T4174] [ 195.086303][ T4174] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.086303][ T4174] [ 195.103921][ T276] ================================================================== [ 195.108628][ T8773] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2932: inode #16: comm syz.4.1853: corrupted xattr block 8 [ 195.112008][ T276] BUG: KASAN: use-after-free in __lock_acquire+0x74/0x1ff0 [ 195.112038][ T276] Read of size 8 at addr ffff88807a7998d8 by task jfsCommit/276 [ 195.112055][ T276] [ 195.112060][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted 5.15.178-syzkaller #0 [ 195.112081][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 195.112105][ T276] Call Trace: [ 195.112112][ T276] [ 195.112120][ T276] dump_stack_lvl+0x1e3/0x2d0 [ 195.112145][ T276] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 195.112165][ T276] ? _printk+0xd1/0x120 [ 195.112189][ T276] ? __wake_up_klogd+0xcc/0x100 [ 195.112211][ T276] ? panic+0x860/0x860 [ 195.112231][ T276] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 195.112255][ T276] ? do_raw_spin_unlock+0x137/0x8b0 [ 195.199628][ T276] print_address_description+0x63/0x3b0 [ 195.205205][ T276] ? __lock_acquire+0x74/0x1ff0 [ 195.207046][ T8773] EXT4-fs (loop4): Remounting filesystem read-only [ 195.210072][ T276] kasan_report+0x16b/0x1c0 [ 195.221072][ T276] ? __lock_acquire+0x74/0x1ff0 [ 195.225942][ T276] __lock_acquire+0x74/0x1ff0 [ 195.230644][ T276] lock_acquire+0x1db/0x4f0 [ 195.230939][ T8773] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 195.235159][ T276] ? __mutex_lock_common+0x46d/0x25a0 [ 195.248044][ T8773] EXT4-fs (loop4): 1 orphan inode deleted [ 195.249537][ T276] ? read_lock_is_recursive+0x10/0x10 [ 195.257255][ T8773] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000005,barrier,delalloc,quota,. Quota mode: writeback. [ 195.260609][ T276] ? mutex_spin_on_owner+0x35d/0x370 [ 195.288797][ T276] ? schedule+0x132/0x1f0 [ 195.293146][ T276] ? preempt_count_add+0x8f/0x180 [ 195.298191][ T276] _raw_spin_lock+0x2a/0x40 [ 195.298306][ T8773] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.302706][ T276] ? __mutex_lock_common+0x46d/0x25a0 [ 195.302732][ T276] __mutex_lock_common+0x46d/0x25a0 [ 195.302758][ T276] ? jfs_syncpt+0x22/0x90 [ 195.302781][ T276] ? mutex_lock_io_nested+0x60/0x60 [ 195.333239][ T276] ? do_raw_spin_unlock+0x137/0x8b0 [ 195.338482][ T276] mutex_lock_nested+0x17/0x20 [ 195.343264][ T276] jfs_syncpt+0x22/0x90 [ 195.347445][ T276] txEnd+0x30b/0x560 [ 195.351364][ T276] jfs_lazycommit+0x60d/0xc30 [ 195.356066][ T276] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 195.361984][ T276] ? lockdep_hardirqs_on+0x94/0x130 [ 195.367206][ T276] ? txFreelock+0x580/0x580 [ 195.371729][ T276] ? sched_dynamic_update+0x240/0x240 [ 195.377125][ T276] kthread+0x3f6/0x4f0 [ 195.381224][ T276] ? txFreelock+0x580/0x580 [ 195.385742][ T276] ? kthread_blkcg+0xd0/0xd0 [ 195.390344][ T276] ret_from_fork+0x1f/0x30 [ 195.394782][ T276] [ 195.397808][ T276] [ 195.400138][ T276] Allocated by task 8757: [ 195.404466][ T276] ____kasan_kmalloc+0xba/0xf0 [ 195.409245][ T276] kmem_cache_alloc_trace+0x143/0x290 [ 195.414640][ T276] lmLogOpen+0x314/0x1030 [ 195.418983][ T276] jfs_mount_rw+0xe3/0x640 [ 195.423410][ T276] jfs_fill_super+0x69f/0xc70 [ 195.428100][ T276] mount_bdev+0x2c9/0x3f0 [ 195.432467][ T276] legacy_get_tree+0xeb/0x180 [ 195.437158][ T276] vfs_get_tree+0x88/0x270 [ 195.441682][ T276] do_new_mount+0x2ba/0xb40 [ 195.446200][ T276] __se_sys_mount+0x2d5/0x3c0 [ 195.450891][ T276] do_syscall_64+0x3b/0xb0 [ 195.455326][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.461238][ T276] [ 195.463572][ T276] Freed by task 4174: [ 195.465353][ T8765] ODEBUG: Out of memory. ODEBUG disabled [ 195.467550][ T276] kasan_set_track+0x4b/0x80 [ 195.467575][ T276] kasan_set_free_info+0x1f/0x40 [ 195.467595][ T276] ____kasan_slab_free+0xd8/0x120 [ 195.467610][ T276] slab_free_freelist_hook+0xdd/0x160 [ 195.467630][ T276] kfree+0xf1/0x270 [ 195.467647][ T276] lmLogClose+0x29d/0x530 [ 195.501795][ T276] jfs_umount+0x298/0x370 [ 195.506139][ T276] jfs_put_super+0x86/0x180 [ 195.510650][ T276] generic_shutdown_super+0x130/0x310 [ 195.516032][ T276] kill_block_super+0x7a/0xe0 [ 195.520719][ T276] deactivate_locked_super+0xa0/0x110 [ 195.526096][ T276] cleanup_mnt+0x44e/0x500 [ 195.530523][ T276] task_work_run+0x129/0x1a0 [ 195.535125][ T276] exit_to_user_mode_loop+0x106/0x130 [ 195.540509][ T276] exit_to_user_mode_prepare+0xb1/0x140 [ 195.546059][ T276] syscall_exit_to_user_mode+0x5d/0x240 [ 195.551619][ T276] do_syscall_64+0x47/0xb0 [ 195.556063][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.562084][ T276] [ 195.564422][ T276] Last potentially related work creation: [ 195.570139][ T276] kasan_save_stack+0x36/0x60 [ 195.574832][ T276] kasan_record_aux_stack+0xba/0x100 [ 195.580128][ T276] kvfree_call_rcu+0x118/0x8a0 [ 195.584903][ T276] neigh_periodic_work+0x3cb/0xc40 [ 195.590028][ T276] process_one_work+0x8a1/0x10c0 [ 195.594980][ T276] worker_thread+0xaca/0x1280 [ 195.599675][ T276] kthread+0x3f6/0x4f0 [ 195.603760][ T276] ret_from_fork+0x1f/0x30 [ 195.608193][ T276] [ 195.610529][ T276] The buggy address belongs to the object at ffff88807a799800 [ 195.610529][ T276] which belongs to the cache kmalloc-1k of size 1024 [ 195.624597][ T276] The buggy address is located 216 bytes inside of [ 195.624597][ T276] 1024-byte region [ffff88807a799800, ffff88807a799c00) [ 195.637974][ T276] The buggy address belongs to the page: [ 195.643616][ T276] page:ffffea0001e9e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a798 [ 195.653793][ T276] head:ffffea0001e9e600 order:3 compound_mapcount:0 compound_pincount:0 [ 195.662135][ T276] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 195.665197][ T8765] syz.3.1850 (8765): drop_caches: 2 [ 195.670144][ T276] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 195.670164][ T276] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 195.670175][ T276] page dumped because: kasan: bad access detected [ 195.670196][ T276] page_owner tracks the page as allocated [ 195.670203][ T276] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3838, ts 39438462937, free_ts 39433168153 [ 195.722230][ T276] get_page_from_freelist+0x3b78/0x3d40 [ 195.727783][ T276] __alloc_pages+0x272/0x700 [ 195.732390][ T276] new_slab+0xbb/0x4b0 [ 195.736459][ T276] ___slab_alloc+0x6f6/0xe10 [ 195.741040][ T276] __kmalloc+0x1c9/0x300 [ 195.745277][ T276] ___neigh_create+0x6be/0x2220 [ 195.750222][ T276] ip6_finish_output2+0x11c5/0x15a0 [ 195.755420][ T276] ip6_send_skb+0x1aa/0x390 [ 195.760096][ T276] rawv6_push_pending_frames+0x749/0x9a0 [ 195.765731][ T276] rawv6_sendmsg+0x171d/0x2100 [ 195.770502][ T276] ____sys_sendmsg+0x59e/0x8f0 [ 195.775270][ T276] ___sys_sendmsg+0x252/0x2e0 [ 195.779963][ T276] __se_sys_sendmsg+0x19a/0x260 [ 195.784809][ T276] do_syscall_64+0x3b/0xb0 [ 195.789222][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.795202][ T276] page last free stack trace: [ 195.799866][ T276] free_unref_page_prepare+0xc34/0xcf0 [ 195.805322][ T276] free_unref_page+0x95/0x2d0 [ 195.809993][ T276] __unfreeze_partials+0x1b7/0x210 [ 195.815107][ T276] put_cpu_partial+0x132/0x1a0 [ 195.819877][ T276] ___cache_free+0xe3/0x100 [ 195.824374][ T276] qlist_free_all+0x36/0x90 [ 195.828871][ T276] kasan_quarantine_reduce+0x162/0x180 [ 195.834325][ T276] __kasan_slab_alloc+0x2f/0xc0 [ 195.839171][ T276] slab_post_alloc_hook+0x53/0x380 [ 195.844281][ T276] kmem_cache_alloc_node+0x121/0x2c0 [ 195.849568][ T276] __alloc_skb+0xdd/0x590 [ 195.853894][ T276] alloc_skb_with_frags+0xa3/0x780 [ 195.859000][ T276] sock_alloc_send_pskb+0x915/0xa50 [ 195.864192][ T276] unix_dgram_sendmsg+0x6fd/0x2090 [ 195.869310][ T276] sock_write_iter+0x39b/0x530 [ 195.874069][ T276] do_iter_readv_writev+0x594/0x7a0 [ 195.879268][ T276] [ 195.881586][ T276] Memory state around the buggy address: [ 195.887207][ T276] ffff88807a799780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 195.895259][ T276] ffff88807a799800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.903411][ T276] >ffff88807a799880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.911479][ T276] ^ [ 195.918403][ T276] ffff88807a799900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.926457][ T276] ffff88807a799980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 195.934506][ T276] ================================================================== [ 195.942555][ T276] Disabling lock debugging due to kernel taint [ 195.948704][ T276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 195.955887][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B 5.15.178-syzkaller #0 [ 195.965245][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 195.975302][ T276] Call Trace: [ 195.978592][ T276] [ 195.981514][ T276] dump_stack_lvl+0x1e3/0x2d0 [ 195.986189][ T276] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 195.991818][ T276] ? panic+0x860/0x860 [ 195.995881][ T276] ? rcu_is_watching+0x11/0xa0 [ 196.000636][ T276] ? lock_release+0xb9/0x9a0 [ 196.005224][ T276] panic+0x318/0x860 [ 196.009118][ T276] ? check_panic_on_warn+0x1d/0xa0 [ 196.014223][ T276] ? fb_is_primary_device+0xd0/0xd0 [ 196.019416][ T276] ? do_raw_spin_unlock+0x137/0x8b0 [ 196.024613][ T276] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 196.030511][ T276] ? _raw_spin_unlock+0x40/0x40 [ 196.035364][ T276] check_panic_on_warn+0x7e/0xa0 [ 196.040303][ T276] ? __lock_acquire+0x74/0x1ff0 [ 196.045146][ T276] end_report+0x6d/0xf0 [ 196.049299][ T276] kasan_report+0x18e/0x1c0 [ 196.053797][ T276] ? __lock_acquire+0x74/0x1ff0 [ 196.058644][ T276] __lock_acquire+0x74/0x1ff0 [ 196.063324][ T276] lock_acquire+0x1db/0x4f0 [ 196.067820][ T276] ? __mutex_lock_common+0x46d/0x25a0 [ 196.073190][ T276] ? read_lock_is_recursive+0x10/0x10 [ 196.078595][ T276] ? mutex_spin_on_owner+0x35d/0x370 [ 196.083879][ T276] ? schedule+0x132/0x1f0 [ 196.088204][ T276] ? preempt_count_add+0x8f/0x180 [ 196.093225][ T276] _raw_spin_lock+0x2a/0x40 [ 196.097730][ T276] ? __mutex_lock_common+0x46d/0x25a0 [ 196.103098][ T276] __mutex_lock_common+0x46d/0x25a0 [ 196.108297][ T276] ? jfs_syncpt+0x22/0x90 [ 196.112631][ T276] ? mutex_lock_io_nested+0x60/0x60 [ 196.117825][ T276] ? do_raw_spin_unlock+0x137/0x8b0 [ 196.123020][ T276] mutex_lock_nested+0x17/0x20 [ 196.127778][ T276] jfs_syncpt+0x22/0x90 [ 196.131933][ T276] txEnd+0x30b/0x560 [ 196.135830][ T276] jfs_lazycommit+0x60d/0xc30 [ 196.140505][ T276] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 196.146397][ T276] ? lockdep_hardirqs_on+0x94/0x130 [ 196.151623][ T276] ? txFreelock+0x580/0x580 [ 196.156123][ T276] ? sched_dynamic_update+0x240/0x240 [ 196.161494][ T276] kthread+0x3f6/0x4f0 [ 196.165560][ T276] ? txFreelock+0x580/0x580 [ 196.170146][ T276] ? kthread_blkcg+0xd0/0xd0 [ 196.174729][ T276] ret_from_fork+0x1f/0x30 [ 196.179147][ T276] [ 196.182410][ T276] Kernel Offset: disabled [ 196.186760][ T276] Rebooting in 86400 seconds..