last executing test programs: 4.710226695s ago: executing program 1 (id=1130): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x17, 0x3, "d37d5f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.330393417s ago: executing program 4 (id=1136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0x7, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x8}]}}) 4.183152409s ago: executing program 4 (id=1138): r0 = syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x1117, &(0x7f00000024c0)="$eJzs2cFq1FAUBuD/JqPtbiTug6ALF1JaxgewC4XZutWNSEGwqw4Iiq/hG/gWvoJ25b50r4uCSyESM3GqDKh0KgjfB8k9OcnJyV3emwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvknwqyfUqacZclaQkbXs8P03Sjvlr7+sqJQ8P5ov7R7MHiyT198fLo6T0VX1Zmr2b282smTV7zd17+7c+LF6+ev7k8PDgaPmakjYnZxudRRlP9flc2WgPAAAA+G91FzbNmxd/0unqJfUHAAAAfmfT+wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6ubruJmDKokJWnb4/lpknZN3ZV/9H0AAADAxZVUeTxdlx+2AVbu5OO0/Mj345fSx7t5u6YeAAAAWHn27qfLbmsZnP+//rUb9Ovu25kM6/Lt4d6NTLKzM8TLIZ/3kzrJ7i+9Ts5ePx2P0tXJ1uXMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBv7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//YwzhLg==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000007480)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff020447cd9caded4abf65767e9dbbd7b5841a8ce3eb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e00"/240, @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 3.666683392s ago: executing program 4 (id=1141): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000a80)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.357981792s ago: executing program 1 (id=1154): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x40040) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 2.197868035s ago: executing program 0 (id=1156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x38}, 0x1, 0xffffffff00000003}, 0x0) 2.104665893s ago: executing program 0 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a00000000000000400000000000402d00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a"], 0x6c}}, 0x0) 2.030963489s ago: executing program 1 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000006d00010000000000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000000000001800348014003580"], 0x38}, 0x4}, 0x0) 2.013627451s ago: executing program 0 (id=1159): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000140)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000001800)=@IORING_OP_LINKAT={0x27, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9c, 0x400, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.89870713s ago: executing program 0 (id=1161): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x30, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x30}}, 0x0) 1.877004472s ago: executing program 1 (id=1162): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1b0000001a005f3803000000000000008004000000000000000000", 0x1b) 1.803347599s ago: executing program 0 (id=1164): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x4}}]}, 0x24}}, 0x0) 1.775400121s ago: executing program 1 (id=1165): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}]}}) syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f0000004900)='./file0\x00', 0x0, &(0x7f0000000140)={[{@barrier={'barrier', 0x3d, 0x1000000}}, {@usrquota}, {}, {}, {}, {@heartbeat_global}]}, 0x1, 0x48a6, &(0x7f0000009240)="$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") 1.67260875s ago: executing program 0 (id=1167): syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c800030100008009040000000101"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$proc_mixer(0xffffff9c, &(0x7f00000004c0)='/proc/asound/card3/oss_mixer\x00', 0x1e1240, 0x0) 1.278065534s ago: executing program 4 (id=1169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nolazytime}, {@block_validity}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x10000}}, {@nolazytime}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000f80)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000000)='./file1\x00') 943.488361ms ago: executing program 3 (id=1170): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) fanotify_init(0x1200, 0x0) 911.616814ms ago: executing program 4 (id=1171): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="529374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff}) 889.341025ms ago: executing program 1 (id=1172): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x70, 0x3a, 0xc0, 0x20, 0x458, 0x7006, 0x6991, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc7, 0x76, 0x98}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 766.090716ms ago: executing program 4 (id=1173): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 731.869029ms ago: executing program 3 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, r1, 0x1, 0x0, 0x0, {{0x21, 0x0, 0x11}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x30, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x5c}}, 0x0) 694.263492ms ago: executing program 3 (id=1175): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0xa008}, {r0, 0xde863e4478df46a5}], 0x2, 0x0, 0x0, 0x0) 630.002117ms ago: executing program 3 (id=1176): capget(0x0, &(0x7f0000000180)={0x0, 0x0, 0x7, 0x0, 0x81}) r0 = add_key$user(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)="f2000c67926c47a8a3", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 583.178081ms ago: executing program 3 (id=1178): syz_mount_image$hfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x100001c, &(0x7f0000000340), 0x1, 0x2e5, &(0x7f0000000700)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') 426.259174ms ago: executing program 3 (id=1181): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x6611) 315.973893ms ago: executing program 2 (id=1184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x40046208, 0x0) 252.631249ms ago: executing program 2 (id=1185): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) 252.218499ms ago: executing program 2 (id=1186): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x792e, &(0x7f0000000780), &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x23ded4039fddc3bd, @fd=r0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 252.050839ms ago: executing program 2 (id=1187): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000000), 0x4) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 38.693147ms ago: executing program 2 (id=1188): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x2e, 0x2, {{0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0x0, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x8}, {0x0, 0x3, 0xe}, {0x0, 0x3, 0x1}, {0x0, 0x3, 0x29d0a754}, {0x0, 0x3, 0x1}, {0x0, 0x3, 0xffffffff}, {0x0, 0x3, 0x1}, {0x0, 0x3, 0x7fff}, {0x0, 0x3, 0x6}, {0x0, 0x3, 0x10}, {0x0, 0x3, 0x8000}, {0x0, 0x3, 0x3a6}]}, @TCA_MQPRIO_MIN_RATE64={0x0, 0x3, 0x0, 0x1, [{0x0, 0x3, 0x4000000000009}, {0x0, 0x3, 0x6}, {0x0, 0x3, 0xfffffffeffffffff}, {0x0, 0x3, 0xfe59}, {0x0, 0x3, 0x4}]}, @TCA_MQPRIO_MODE={0x0, 0x1, 0x1}, @TCA_MQPRIO_SHAPER, @TCA_MQPRIO_MODE]}}}]}, 0x88}}, 0x0) 0s ago: executing program 2 (id=1189): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x41, 0x0, 0x0) kernel console output (not intermixed with test programs): 3][ T2987] usb 4-1: config 0 has no interface number 0 [ 71.144030][ T2987] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 71.156011][ T3619] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 71.166828][ T4358] tap0: tun_chr_ioctl cmd 1074812118 [ 71.180116][ T144] usb 2-1: config 0 descriptor?? [ 71.190051][ T2987] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.212848][ T4360] loop2: detected capacity change from 0 to 64 [ 71.229780][ T4353] syz.0.235 (4353) used greatest stack depth: 19320 bytes left [ 71.381342][ T2987] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 71.390415][ T2987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.401437][ T144] usb 2-1: can't set config #0, error -71 [ 71.405365][ T2987] usb 4-1: Product: syz [ 71.413479][ T2987] usb 4-1: Manufacturer: syz [ 71.418097][ T2987] usb 4-1: SerialNumber: syz [ 71.429565][ T2987] usb 4-1: config 0 descriptor?? [ 71.446140][ T4330] usb 2-1: USB disconnect, device number 5 [ 71.572857][ T4375] sp0: Synchronizing with TNC [ 71.586208][ T4374] [U] è [ 71.611298][ T4331] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.775877][ T4371] loop0: detected capacity change from 0 to 32768 [ 71.821781][ T4371] XFS: noikeep mount option is deprecated. [ 71.898488][ T4371] XFS (loop0): Mounting V5 Filesystem [ 71.924250][ T4385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.971283][ T4331] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 71.976299][ T4388] loop2: detected capacity change from 0 to 64 [ 71.996576][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.037884][ T4331] usb 5-1: config 0 descriptor?? [ 72.076479][ T4371] XFS (loop0): Ending clean mount [ 72.087296][ T4371] XFS (loop0): Quotacheck needed: Please wait. [ 72.108776][ T4331] cp210x 5-1:0.0: cp210x converter detected [ 72.150154][ T4371] XFS (loop0): Quotacheck: Done. [ 72.150602][ T3619] usb 4-1: USB disconnect, device number 3 [ 72.210635][ T3569] XFS (loop0): Unmounting Filesystem [ 72.551192][ T4331] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 72.601295][ T4331] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 72.638860][ T4331] usb 5-1: cp210x converter now attached to ttyUSB0 [ 72.689384][ T4406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 72.817633][ T4330] usb 5-1: USB disconnect, device number 3 [ 72.839382][ T4330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 72.868991][ T4330] cp210x 5-1:0.0: device disconnected [ 73.051312][ T3619] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 73.081567][ T4402] loop2: detected capacity change from 0 to 32768 [ 73.093123][ T4414] loop1: detected capacity change from 0 to 8192 [ 73.180256][ T4414] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 73.201855][ T4402] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 73.210271][ T4414] REISERFS (device loop1): using ordered data mode [ 73.227620][ T4414] reiserfs: using flush barriers [ 73.242619][ T4414] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.250639][ T4423] loop3: detected capacity change from 0 to 4096 [ 73.266288][ T4414] REISERFS (device loop1): checking transaction log (loop1) [ 73.279152][ T4414] REISERFS (device loop1): Using r5 hash to sort names [ 73.292431][ T4414] REISERFS (device loop1): using 3.5.x disk format [ 73.302856][ T4423] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 73.306392][ T3619] usb 1-1: Using ep0 maxpacket: 16 [ 73.337599][ T4414] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 73.366725][ T4423] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 73.389189][ T3572] ocfs2: Unmounting device (7,2) on (node local) [ 73.444701][ T4423] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 73.483360][ T4423] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 73.521237][ T3619] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.540821][ T3619] usb 1-1: config 0 has no interface number 0 [ 73.571186][ T3619] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.574124][ T4423] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 73.597898][ T3619] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.629236][ T4423] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 73.634674][ T3619] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 73.694298][ T4423] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 73.699561][ T4435] loop4: detected capacity change from 0 to 64 [ 73.716778][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.722813][ T4423] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 73.733433][ T3619] usb 1-1: config 0 descriptor?? [ 73.770432][ T4423] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 73.815382][ T4423] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 73.865241][ T3573] hfs: node 4:3 still has 1 user(s)! [ 73.879446][ T4423] ntfs: volume version 3.1. [ 74.338044][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 74.349136][ T4456] openvswitch: netlink: Key type 9760 is out of range max 29 [ 74.441230][ T4330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.462210][ T3619] uclogic 0003:28BD:0071.0004: pen parameters not found [ 74.469913][ T3619] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 74.587502][ T4466] tipc: Started in network mode [ 74.593007][ T4466] tipc: Node identity type_len, cluster identity 4711 [ 74.600042][ T4466] tipc: Enabling of bearer rejected, failed to enable media [ 74.688471][ T4468] loop1: detected capacity change from 0 to 8192 [ 74.728382][ T4468] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 74.746230][ T2987] usb 1-1: USB disconnect, device number 4 [ 74.749281][ T4468] REISERFS (device loop1): using ordered data mode [ 74.760023][ T4468] reiserfs: using flush barriers [ 74.773669][ T4468] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 74.790354][ T4468] REISERFS (device loop1): checking transaction log (loop1) [ 74.811464][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.827655][ T4468] REISERFS (device loop1): Using r5 hash to sort names [ 74.849784][ T4468] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 74.871394][ T4330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.885943][ T4468] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 74.889279][ T4330] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 74.925213][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.941100][ T3619] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.966485][ T4330] usb 4-1: config 0 descriptor?? [ 75.029598][ T4477] loop4: detected capacity change from 0 to 16 [ 75.123585][ T4477] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.190988][ T4479] netlink: 'syz.1.289': attribute type 11 has an invalid length. [ 75.198921][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 75.319273][ T4487] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 75.341493][ T3619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 75.364598][ T3619] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 75.385475][ T3619] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.435981][ T4488] loop0: detected capacity change from 0 to 4096 [ 75.455380][ T4330] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 75.491436][ T3619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.527232][ T4488] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 75.536466][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.550552][ T3619] usb 3-1: SerialNumber: syz [ 75.584290][ T4470] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 75.679748][ T144] ntfs3: loop0: ino=1b, Internal error [ 75.693000][ T144] ntfs3: loop0: ntfs3_write_inode r=1b failed, -22. [ 75.699906][ T3569] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 75.714910][ T3569] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 75.726203][ T3569] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 75.831696][ T4470] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 75.881232][ T4330] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 75.889363][ T4330] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 75.910962][ T4330] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 75.919531][ T4490] loop4: detected capacity change from 0 to 32768 [ 75.937898][ T4330] usb 4-1: USB disconnect, device number 4 [ 76.059750][ T4494] loop1: detected capacity change from 0 to 32768 [ 76.107686][ T4494] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.295 (4494) [ 76.146853][ T23] cfg80211: failed to load regulatory.db [ 76.195915][ T4494] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 76.212192][ T4494] BTRFS info (device loop1): using free space tree [ 76.239734][ T4494] BTRFS info (device loop1): has skinny extents [ 76.301519][ T3619] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 76.371110][ T3770] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.450840][ T4520] loop3: detected capacity change from 0 to 1024 [ 76.457540][ T4494] BTRFS info (device loop1): enabling ssd optimizations [ 76.553706][ T3619] usb 3-1: USB disconnect, device number 2 [ 76.771333][ T3770] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.912041][ T3770] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.923721][ T3770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.946671][ T3770] usb 1-1: SerialNumber: syz [ 77.038509][ T144] hfsplus: b-tree write err: -5, ino 4 [ 77.075260][ T4534] netlink: 'syz.1.300': attribute type 6 has an invalid length. [ 77.244311][ T4543] capability: warning: `syz.1.305' uses deprecated v2 capabilities in a way that may be insecure [ 77.336430][ T4543] program syz.1.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.585658][ T4566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 77.606015][ T4566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 77.720007][ T4571] loop4: detected capacity change from 0 to 512 [ 77.800015][ T4571] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 77.800015][ T4571] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 77.800015][ T4571] [ 77.870855][ T4571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.914175][ T4571] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.945032][ T3770] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 77.966823][ T4571] EXT4-fs (loop4): 1 orphan inode deleted [ 77.977874][ T3770] usb 1-1: USB disconnect, device number 5 [ 77.991090][ T4571] EXT4-fs (loop4): 1 truncate cleaned up [ 77.996773][ T4571] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 78.097870][ T4554] loop2: detected capacity change from 0 to 32768 [ 78.120529][ T4571] EXT4-fs (loop4): shut down requested (2) [ 78.206041][ T4554] (syz.2.311,4554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.227224][ T4586] loop3: detected capacity change from 0 to 4096 [ 78.255028][ T4554] (syz.2.311,4554,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.304159][ T4554] JBD2: Ignoring recovery information on journal [ 78.365167][ T4586] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 78.517074][ T4581] loop1: detected capacity change from 0 to 32768 [ 78.517122][ T4554] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 78.573917][ T4581] XFS: ikeep mount option is deprecated. [ 78.625008][ T4601] loop0: detected capacity change from 0 to 4096 [ 78.678259][ T4581] XFS (loop1): Mounting V5 Filesystem [ 78.688310][ T4608] loop4: detected capacity change from 0 to 512 [ 78.738936][ T4608] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.777564][ T4614] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.894711][ T4608] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.334: invalid indirect mapped block 4294967295 (level 1) [ 78.907861][ T4581] XFS (loop1): Ending clean mount [ 78.918753][ T4608] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.334: invalid indirect mapped block 4294967295 (level 1) [ 78.921865][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 78.921878][ T26] audit: type=1800 audit(1729521043.102:3): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.332" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 78.942076][ T4608] EXT4-fs (loop4): 2 truncates cleaned up [ 78.965548][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 78.983715][ T4581] XFS (loop1): Quotacheck needed: Please wait. [ 78.984079][ T3572] ocfs2: Unmounting device (7,2) on (node local) [ 79.039252][ T4601] syz.0.332 (4601) used greatest stack depth: 18896 bytes left [ 79.055214][ T4608] EXT4-fs (loop4): shut down requested (2) [ 79.080309][ T4581] XFS (loop1): Quotacheck: Done. [ 79.143742][ T26] audit: type=1800 audit(1729521043.312:4): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.324" name="bus" dev="loop1" ino=9290 res=0 errno=0 [ 79.215515][ T3571] XFS (loop1): Unmounting Filesystem [ 79.452974][ T4637] netlink: 164320 bytes leftover after parsing attributes in process `syz.0.344'. [ 79.480909][ T4637] netlink: del zone limit has 4 unknown bytes [ 79.667206][ T4646] loop2: detected capacity change from 0 to 128 [ 79.777164][ T4646] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 79.819529][ T4646] sysv_free_block: trying to free block not in datazone [ 79.919164][ T3770] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 79.939031][ T3572] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 80.201342][ T3770] usb 4-1: Using ep0 maxpacket: 16 [ 80.331470][ T3770] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.360348][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.381181][ T3770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.404302][ T4641] loop4: detected capacity change from 0 to 32768 [ 80.411415][ T3770] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.436464][ T3770] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.514205][ T4671] tipc: Started in network mode [ 80.521745][ T4671] tipc: Node identity 7f000001, cluster identity 4711 [ 80.531549][ T4671] tipc: Enabled bearer , priority 10 [ 80.538606][ T4641] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 80.571228][ T3770] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.584964][ T3770] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 80.600704][ T3770] usb 4-1: Manufacturer: syz [ 80.612752][ T3770] usb 4-1: config 0 descriptor?? [ 80.665326][ T3573] ocfs2: Unmounting device (7,4) on (node local) [ 80.722967][ T4684] loop1: detected capacity change from 0 to 256 [ 80.804339][ T3777] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.963531][ T4695] loop1: detected capacity change from 0 to 64 [ 81.011268][ T3770] rc_core: IR keymap rc-hauppauge not found [ 81.017334][ T3770] Registered IR keymap rc-empty [ 81.030055][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.046614][ T4697] loop4: detected capacity change from 0 to 1024 [ 81.074334][ T3777] usb 3-1: Using ep0 maxpacket: 16 [ 81.079593][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.123279][ T3770] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 81.139439][ T4697] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 81.158410][ T3770] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 81.187455][ T4697] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000001,discard,i_version,debug_want_extra_isize=0x0000000000000040,jqfmt=vfsold,barrier=0x0000000000000006,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 81.222361][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.241622][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.270243][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.290492][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.310178][ T4704] netlink: 612 bytes leftover after parsing attributes in process `syz.1.370'. [ 81.311445][ T3777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.334514][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.348334][ T3777] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.359125][ T3777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.378764][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.410559][ T3777] usb 3-1: config 0 descriptor?? [ 81.418113][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.471166][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.479106][ T4690] loop0: detected capacity change from 0 to 32768 [ 81.528137][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.536215][ T3773] tipc: Node number set to 2130706433 [ 81.563953][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.573908][ T4690] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.367 (4690) [ 81.621282][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.627376][ T4690] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 81.661381][ T3770] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.686996][ T4717] Zero length message leads to an empty skb [ 81.702754][ T3770] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 81.709150][ T4690] BTRFS info (device loop0): use zlib compression, level 3 [ 81.724367][ T3770] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.741825][ T4690] BTRFS info (device loop0): using free space tree [ 81.754983][ T3770] usb 4-1: USB disconnect, device number 5 [ 81.787605][ T4690] BTRFS info (device loop0): has skinny extents [ 81.847608][ T4717] team0: Port device team_slave_0 removed [ 81.885157][ T4717] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 81.939526][ T3777] HID 045e:07da: Invalid code 65791 type 1 [ 81.967198][ T3777] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input10 [ 82.017563][ T3777] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 82.105249][ T4690] BTRFS info (device loop0): enabling ssd optimizations [ 82.263891][ T3777] usb 3-1: USB disconnect, device number 3 [ 82.696085][ T4732] loop4: detected capacity change from 0 to 32768 [ 82.920646][ T4734] loop1: detected capacity change from 0 to 32768 [ 82.999595][ T4734] JBD2: Ignoring recovery information on journal [ 83.064906][ T4734] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 83.164139][ T4750] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.227552][ T4754] loop2: detected capacity change from 0 to 32768 [ 83.270488][ T3571] ocfs2: Unmounting device (7,1) on (node local) [ 83.284337][ T4754] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.383 (4754) [ 83.338936][ T4754] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 83.368003][ T4754] BTRFS info (device loop2): using free space tree [ 83.401696][ T4754] BTRFS info (device loop2): has skinny extents [ 83.414172][ T4750] usb 4-1: Using ep0 maxpacket: 8 [ 83.531398][ T4750] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.559938][ T4750] usb 4-1: config 0 has no interface number 0 [ 83.668710][ T4754] BTRFS info (device loop2): enabling ssd optimizations [ 83.673927][ T4761] loop0: detected capacity change from 0 to 32768 [ 83.697219][ T4787] loop4: detected capacity change from 0 to 512 [ 83.750585][ T4761] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 83.750585][ T4761] [ 83.763264][ T4750] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 83.796326][ T4761] ERROR: (device loop0): remounting filesystem as read-only [ 83.879137][ T4750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.899058][ T4761] ERROR: (device loop0): jfs_unlink: [ 83.899058][ T4761] [ 83.926681][ T4750] usb 4-1: Product: syz [ 83.930986][ T4750] usb 4-1: Manufacturer: syz [ 83.932253][ T4761] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 83.932253][ T4761] [ 83.939340][ T4750] usb 4-1: SerialNumber: syz [ 83.965649][ T4787] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 83.993567][ T4750] usb 4-1: config 0 descriptor?? [ 84.030751][ T3586] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (3586) [ 84.044804][ T4787] EXT4-fs (loop4): 1 truncate cleaned up [ 84.050468][ T4787] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 84.080720][ T4750] usb 4-1: selecting invalid altsetting 2 [ 84.091328][ T4750] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 84.206164][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 84.258488][ T4331] usb 4-1: USB disconnect, device number 6 [ 84.407542][ T4802] loop4: detected capacity change from 0 to 512 [ 84.520499][ T4802] EXT4-fs (loop4): Ignoring removed bh option [ 84.555646][ T4802] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.394: inode #11614: comm syz.4.394: iget: illegal inode # [ 84.579552][ T4802] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.394: error while reading EA inode 11614 err=-117 [ 84.622139][ T4802] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 84.651438][ T4802] EXT4-fs (loop4): 1 truncate cleaned up [ 84.657341][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,sb=0x0000000000009050,debug_want_extra_isize=0x000000000000005e,barrier=0x0000000000000008,delalloc,jqfmt=vfsv0,usrjquota=,,errors=continue. Quota mode: none. [ 84.764641][ T4750] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.817582][ T4797] loop2: detected capacity change from 0 to 32768 [ 84.881390][ T4815] loop3: detected capacity change from 0 to 1024 [ 84.983822][ T4797] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 84.993067][ T4797] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 85.011461][ T4797] XFS (loop2): Mounting V5 Filesystem [ 85.141313][ T4750] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.163525][ T4836] loop0: detected capacity change from 0 to 4096 [ 85.183073][ T4750] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.196355][ T4750] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.206595][ T4750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.207883][ T4797] XFS (loop2): Ending clean mount [ 85.232231][ T4809] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.283757][ T4797] XFS (loop2): Quotacheck needed: Please wait. [ 85.297471][ T4836] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 85.384044][ T4797] XFS (loop2): Quotacheck: Done. [ 85.451346][ T4836] ntfs3: loop0: failed to convert "c46c" to cp874 [ 85.495886][ T3572] XFS (loop2): Unmounting Filesystem [ 85.581837][ T4848] kvm [4847]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 85.679439][ T4855] loop3: detected capacity change from 0 to 64 [ 86.023592][ T4870] ubi0: attaching mtd0 [ 86.084128][ T4870] ubi0: scanning is finished [ 86.122296][ T4870] ubi0: empty MTD device detected [ 86.269611][ T4870] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 86.277150][ T4870] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 86.289875][ T4870] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 86.297305][ T4870] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 86.315945][ T4870] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 86.331450][ T3767] usb 2-1: USB disconnect, device number 6 [ 86.346339][ T4870] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 86.384537][ T4870] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4207718799 [ 86.451072][ T4870] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 86.488088][ T4885] ubi0: background thread "ubi_bgt0d" started, PID 4885 [ 86.497117][ T4872] ubi: mtd0 is already attached to ubi0 [ 86.638121][ T4897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 86.681099][ T4865] loop0: detected capacity change from 0 to 32768 [ 86.816559][ T4865] JBD2: Ignoring recovery information on journal [ 86.903185][ T4865] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.072490][ T3569] ocfs2: Unmounting device (7,0) on (node local) [ 87.111340][ T3767] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.301315][ T3774] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.336689][ T4929] loop1: detected capacity change from 0 to 1024 [ 87.381158][ T4929] EXT4-fs (loop1): Ignoring removed orlov option [ 87.387537][ T4929] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 87.525217][ T4936] loop0: detected capacity change from 0 to 4096 [ 87.529194][ T4929] EXT4-fs (loop1): Test dummy encryption mode enabled [ 87.531996][ T3767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.553850][ T4929] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,orlov,nomblk_io_submit,test_dummy_encryption,nojournal_checksum,grpquota,auto_da_alloc=0x0000000000000ae8,discard,,errors=continue. Quota mode: writeback. [ 87.555238][ T3767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.577658][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.681504][ T4936] NILFS (loop0): invalid segment: Checksum error in segment payload [ 87.689956][ T4936] NILFS (loop0): trying rollback from an earlier position [ 87.702088][ T3767] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 87.711442][ T3767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.731295][ T3774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.743544][ T3774] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 87.754346][ T3767] usb 5-1: config 0 descriptor?? [ 87.767930][ T4947] loop1: detected capacity change from 0 to 16 [ 87.773441][ T3774] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 87.784762][ T3774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.794132][ T4936] NILFS (loop0): recovery complete [ 87.812264][ T3774] usb 3-1: config 0 descriptor?? [ 87.816856][ T4947] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 87.818066][ T4948] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.005852][ T4950] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.075755][ T4945] loop3: detected capacity change from 0 to 32768 [ 88.113148][ T4953] netlink: 'syz.0.452': attribute type 10 has an invalid length. [ 88.147974][ T4953] team0: Port device netdevsim0 added [ 88.165653][ T26] audit: type=1800 audit(1729521052.352:5): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.450" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 88.252929][ T3767] hid (null): usage index exceeded [ 88.256950][ T3767] lg-g15 0003:046D:C222.0007: ignoring exceeding usage max [ 88.258246][ T3767] lg-g15 0003:046D:C222.0007: ignoring exceeding usage max [ 88.258265][ T3767] lg-g15 0003:046D:C222.0007: usage index exceeded [ 88.258279][ T3767] lg-g15 0003:046D:C222.0007: item 0 0 2 2 parsing failed [ 88.258669][ T3767] lg-g15: probe of 0003:046D:C222.0007 failed with error -22 [ 88.467503][ T4751] usb 5-1: USB disconnect, device number 4 [ 88.541340][ T3774] Bluetooth: Can't get version to change to load ram patch err [ 88.548925][ T3774] Bluetooth: Loading sysconfig file failed [ 88.576056][ T3774] ath3k: probe of 3-1:0.0 failed with error -71 [ 88.585066][ T3774] usb 3-1: USB disconnect, device number 4 [ 88.659380][ T4979] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.697209][ T4981] mmap: syz.0.465 (4981) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 88.727781][ T4983] loop1: detected capacity change from 0 to 2048 [ 88.763169][ T4985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.467'. [ 88.867739][ T4994] Â: renamed from pim6reg1 [ 88.907757][ T4983] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.047904][ T4983] EXT4-fs (loop1): shut down requested (2) [ 89.275934][ T5016] loop4: detected capacity change from 0 to 128 [ 89.331463][ T5018] device batadv_slave_1 entered promiscuous mode [ 89.339494][ T5017] device batadv_slave_1 left promiscuous mode [ 89.387039][ T5016] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 89.421139][ T5016] FAT-fs (loop4): Filesystem has been set read-only [ 89.626550][ T4751] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.684261][ T5002] loop0: detected capacity change from 0 to 32768 [ 89.829801][ T5002] XFS (loop0): Mounting V5 Filesystem [ 89.927459][ T5002] XFS (loop0): Ending clean mount [ 89.953110][ T5002] XFS (loop0): Quotacheck needed: Please wait. [ 90.001453][ T4751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.001681][ T5026] loop3: detected capacity change from 0 to 40427 [ 90.030758][ T4751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.046272][ T4751] usb 2-1: New USB device found, idVendor=056a, idProduct=012c, bcdDevice= 0.00 [ 90.055451][ T4751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.071425][ T4751] usb 2-1: config 0 descriptor?? [ 90.081924][ T5026] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 90.089018][ T5026] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.091392][ T5002] XFS (loop0): Quotacheck: Done. [ 90.111692][ T5026] F2FS-fs (loop3): invalid crc value [ 90.132891][ T5026] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.232443][ T5026] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 90.253433][ T5026] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.263928][ T5026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.320415][ T3569] XFS (loop0): Unmounting Filesystem [ 90.343541][ T5023] loop2: detected capacity change from 0 to 40427 [ 90.348779][ T3570] attempt to access beyond end of device [ 90.348779][ T3570] loop3: rw=2049, want=40968, limit=40427 [ 90.451752][ T5023] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 90.487231][ T5023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 90.518490][ T5023] F2FS-fs (loop2): invalid crc value [ 90.529142][ T5023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.581574][ T4751] wacom 0003:056A:012C.0008: hidraw0: USB HID v0.00 Device [HID 056a:012c] on usb-dummy_hcd.1-1/input0 [ 90.677047][ T5023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.703735][ T5023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.769171][ T4751] usb 2-1: USB disconnect, device number 7 [ 90.860990][ T3572] attempt to access beyond end of device [ 90.860990][ T3572] loop2: rw=2049, want=45104, limit=40427 [ 91.136545][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 91.185421][ T5069] nbd: socks must be embedded in a SOCK_ITEM attr [ 91.289350][ T5073] ODEBUG: Out of memory. ODEBUG disabled [ 91.551212][ T3767] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.644731][ T5091] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 91.722640][ T5095] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 91.831331][ T3767] usb 4-1: Using ep0 maxpacket: 16 [ 91.926144][ T5107] loop4: detected capacity change from 0 to 16 [ 91.946455][ T5107] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 91.986157][ T3767] usb 4-1: config 0 has no interfaces? [ 92.155326][ T5083] loop1: detected capacity change from 0 to 40427 [ 92.169894][ T5114] loop2: detected capacity change from 0 to 1 [ 92.211766][ T3767] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.234578][ T5114] attempt to access beyond end of device [ 92.234578][ T5114] loop2: rw=2048, want=8, limit=1 [ 92.239219][ T5083] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 92.258461][ T3767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.266058][ T5114] SQUASHFS error: Failed to read block 0x0: -5 [ 92.282241][ T3767] usb 4-1: Product: syz [ 92.293145][ T3767] usb 4-1: Manufacturer: syz [ 92.298268][ T5083] F2FS-fs (loop1): invalid crc value [ 92.308702][ T3767] usb 4-1: SerialNumber: syz [ 92.308867][ T5114] unable to read squashfs_super_block [ 92.329615][ T5083] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.345038][ T3767] usb 4-1: config 0 descriptor?? [ 92.507929][ T5083] F2FS-fs (loop1): recover fsync data on readonly fs [ 92.518854][ T5083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.614168][ T5083] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 92.614285][ T5083] F2FS-fs (loop1): switch extent_cache option is not allowed [ 92.632170][ T5075] device geneve0 entered promiscuous mode [ 92.635006][ T5128] loop0: detected capacity change from 0 to 256 [ 92.638485][ T3755] usb 4-1: USB disconnect, device number 7 [ 92.716140][ T5128] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 93.106559][ T5122] loop4: detected capacity change from 0 to 32768 [ 93.450945][ T5157] loop3: detected capacity change from 0 to 64 [ 93.463323][ T5148] loop0: detected capacity change from 0 to 8192 [ 93.517187][ T5148] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 93.537810][ T5148] REISERFS (device loop0): using ordered data mode [ 93.545093][ T5148] reiserfs: using flush barriers [ 93.554077][ T5148] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.590729][ T5148] REISERFS (device loop0): checking transaction log (loop0) [ 93.613533][ T5148] REISERFS (device loop0): Using tea hash to sort names [ 93.620981][ T5148] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 93.790949][ T5170] input: syz0 as /devices/virtual/input/input15 [ 93.901349][ T3755] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.977636][ T5180] loop1: detected capacity change from 0 to 256 [ 94.087862][ T5180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 94.324373][ T3755] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.348095][ T3755] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.379678][ T3755] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.403556][ T3755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.481562][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.874354][ T5201] loop1: detected capacity change from 0 to 4096 [ 94.898493][ T5179] loop3: detected capacity change from 0 to 32768 [ 94.939799][ T5183] loop4: detected capacity change from 0 to 32768 [ 94.989021][ T5201] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 95.048139][ T5183] XFS (loop4): Mounting V5 Filesystem [ 95.156532][ T5201] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 95.192265][ T4752] usb 3-1: USB disconnect, device number 5 [ 95.260322][ T5183] XFS (loop4): Ending clean mount [ 95.348758][ T5201] ntfs3: loop1: ino=1e, "file1" Internal error [ 95.369998][ T5201] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 95.403876][ T3573] XFS (loop4): Unmounting Filesystem [ 95.680009][ T5194] loop0: detected capacity change from 0 to 32768 [ 95.754209][ T5194] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 95.825754][ T5194] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.172649][ T5194] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 96.216917][ T3755] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.257248][ T3755] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.369772][ T5224] loop4: detected capacity change from 0 to 512 [ 96.505004][ T5224] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.559: invalid indirect mapped block 256 (level 2) [ 96.615482][ T5224] EXT4-fs (loop4): 2 truncates cleaned up [ 96.625916][ T3755] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 368ms [ 96.675543][ T5224] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.716074][ T3755] gfs2: fsid=syz:syz.0: jid=0: Done [ 96.723751][ T5216] loop2: detected capacity change from 0 to 131072 [ 96.778929][ T5216] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 96.788655][ T5216] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.793799][ T5194] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 96.799680][ T5216] F2FS-fs (loop2): invalid crc value [ 96.831777][ T5216] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.884844][ T5216] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.891942][ T5216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 97.332510][ T5240] mkiss: ax0: crc mode is auto. [ 97.459149][ T5212] loop3: detected capacity change from 0 to 40427 [ 97.612363][ T4751] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.629556][ T5212] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.643115][ T4751] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.788635][ T5228] loop1: detected capacity change from 0 to 32768 [ 97.843444][ T5212] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.992093][ T3570] attempt to access beyond end of device [ 97.992093][ T3570] loop3: rw=2049, want=45104, limit=40427 [ 98.013427][ T5228] XFS (loop1): Mounting V5 Filesystem [ 98.273416][ T5228] XFS (loop1): Ending clean mount [ 98.295952][ T5228] XFS (loop1): Quotacheck needed: Please wait. [ 98.364521][ T5228] XFS (loop1): Quotacheck: Done. [ 98.491206][ T3571] XFS (loop1): Unmounting Filesystem [ 98.517391][ T5263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.785741][ T5250] loop4: detected capacity change from 0 to 40427 [ 98.865329][ T5250] F2FS-fs (loop4): Invalid segment count (0) [ 98.885687][ T5250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.910652][ T5274] loop2: detected capacity change from 0 to 2048 [ 98.931810][ T5250] F2FS-fs (loop4): invalid crc value [ 98.963174][ T5250] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.019185][ T5281] loop3: detected capacity change from 0 to 1764 [ 99.091327][ T5286] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.113243][ T5250] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.120297][ T5250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.237124][ T5292] syz_tun: refused to change device tx_queue_len [ 99.256084][ T5292] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 99.636268][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 99.726193][ T5304] loop1: detected capacity change from 0 to 4096 [ 99.761221][ T4751] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.911440][ T5290] loop0: detected capacity change from 0 to 32768 [ 99.925367][ T5304] ntfs: volume version 3.1. [ 100.011260][ T4751] usb 4-1: Using ep0 maxpacket: 16 [ 100.015576][ T5314] loop4: detected capacity change from 0 to 4096 [ 100.051819][ T5314] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 100.131391][ T4751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.163648][ T5314] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 100.174595][ T4751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.214744][ T4751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.244511][ T5314] ntfs3: loop4: ino=1e, "file1" Internal error [ 100.256360][ T4751] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.264627][ T5314] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 100.321077][ T4751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.343002][ T4751] usb 4-1: config 0 descriptor?? [ 100.678593][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 100.805238][ T5369] loop1: detected capacity change from 0 to 64 [ 100.817285][ T4751] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 100.835669][ T4751] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 100.866571][ T4751] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 100.888821][ T4751] microsoft 0003:045E:07DA.000A: no inputs found [ 100.924017][ T4751] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 101.070568][ T5377] sch_fq: defrate 0 ignored. [ 101.083036][ T4751] usb 4-1: USB disconnect, device number 8 [ 101.309849][ T5381] loop1: detected capacity change from 0 to 8192 [ 101.390235][ T5381] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 101.403334][ T5381] REISERFS (device loop1): using ordered data mode [ 101.410724][ T5381] reiserfs: using flush barriers [ 101.421190][ T5381] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.498029][ T5381] REISERFS (device loop1): checking transaction log (loop1) [ 101.527315][ T5367] loop2: detected capacity change from 0 to 40427 [ 101.563465][ T5381] REISERFS (device loop1): Using r5 hash to sort names [ 101.570605][ T5381] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 101.597877][ T5367] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 101.631230][ T5367] F2FS-fs (loop2): invalid crc value [ 101.656869][ T5367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.681745][ T5403] netlink: 108 bytes leftover after parsing attributes in process `syz.3.629'. [ 101.737948][ T5405] loop3: detected capacity change from 0 to 64 [ 101.755514][ T5367] F2FS-fs (loop2): recover fsync data on readonly fs [ 101.784439][ T5367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.852296][ T4751] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.870720][ T5367] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 101.886897][ T5367] F2FS-fs (loop2): switch extent_cache option is not allowed [ 101.960337][ T5409] tipc: New replicast peer: 255.255.255.255 [ 101.967511][ T5409] tipc: Enabled bearer , priority 10 [ 101.997938][ T5411] loop3: detected capacity change from 0 to 1024 [ 102.101132][ T4751] usb 1-1: Using ep0 maxpacket: 8 [ 102.221311][ T4751] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 102.239799][ T4751] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.261154][ T4751] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.298649][ T4751] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.305265][ T5423] loop2: detected capacity change from 0 to 512 [ 102.313239][ T4751] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.374973][ T4751] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.399738][ T4751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.681252][ T4751] usb 1-1: GET_CAPABILITIES returned 0 [ 102.686773][ T4751] usbtmc 1-1:16.0: can't read capabilities [ 102.789362][ T5448] loop1: detected capacity change from 0 to 4096 [ 102.826865][ T5461] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 102.913825][ T4751] usb 1-1: USB disconnect, device number 6 [ 102.918740][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.948574][ T5469] process 'syz.4.660' launched './file1' with NULL argv: empty string added [ 103.039173][ T5472] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 103.067847][ T5472] syzkaller0: linktype set to 823 [ 103.305275][ T5490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.366313][ T5496] loop4: detected capacity change from 0 to 64 [ 103.386410][ T4331] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 103.507596][ T5496] attempt to access beyond end of device [ 103.507596][ T5496] loop4: rw=0, want=131604, limit=64 [ 103.526459][ T5496] Buffer I/O error on dev loop4, logical block 65801, async page read [ 103.548011][ T5496] Trying to free block not in datazone [ 103.560245][ T5496] Trying to free block not in datazone [ 103.686512][ T5510] loop0: detected capacity change from 0 to 256 [ 103.752560][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.774016][ T5510] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 103.791151][ T4331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.821128][ T4331] usb 4-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 103.830221][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.868542][ T5521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.883075][ T4331] usb 4-1: config 0 descriptor?? [ 103.956959][ T5492] loop2: detected capacity change from 0 to 32768 [ 104.016819][ T5492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.670 (5492) [ 104.086088][ T5492] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 104.101760][ T5492] BTRFS info (device loop2): setting nodatacow, compression disabled [ 104.109906][ T5492] BTRFS info (device loop2): max_inline at 0 [ 104.129770][ T5492] BTRFS info (device loop2): enabling disk space caching [ 104.159866][ T5492] BTRFS info (device loop2): turning off barriers [ 104.171145][ T5492] BTRFS info (device loop2): turning on flush-on-commit [ 104.178113][ T5492] BTRFS info (device loop2): doing ref verification [ 104.211678][ T5492] BTRFS info (device loop2): force clearing of disk cache [ 104.218871][ T5492] BTRFS info (device loop2): enabling ssd optimizations [ 104.251121][ T5492] BTRFS info (device loop2): max_inline at 4096 [ 104.257485][ T5492] BTRFS info (device loop2): disk space caching is enabled [ 104.273701][ T5492] BTRFS info (device loop2): has skinny extents [ 104.364119][ T4331] wacom 0003:056A:033C.000B: unknown main item tag 0x7 [ 104.376697][ T4331] wacom 0003:056A:033C.000B: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 104.417668][ T4331] wacom 0003:056A:033C.000B: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.3-1/input0 [ 104.468875][ T4331] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:033C.000B/input/input17 [ 104.521275][ T5528] loop4: detected capacity change from 0 to 32768 [ 104.549866][ T5492] BTRFS info (device loop2): clearing free space tree [ 104.558480][ T5524] loop1: detected capacity change from 0 to 32768 [ 104.564715][ T5492] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.587369][ T5492] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.594401][ T4331] usb 4-1: USB disconnect, device number 9 [ 104.727215][ T5528] XFS (loop4): Mounting V5 Filesystem [ 104.853620][ T5528] XFS (loop4): Ending clean mount [ 104.938553][ T5560] loop0: detected capacity change from 0 to 512 [ 105.037465][ T5560] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.127233][ T5560] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.134072][ T5563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 105.162776][ T5565] netlink: 'syz.3.694': attribute type 2 has an invalid length. [ 105.215626][ T5560] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.692: Allocating blocks 41-42 which overlap fs metadata [ 105.258115][ T5570] loop1: detected capacity change from 0 to 1024 [ 105.273000][ T5560] EXT4-fs (loop0): Remounting filesystem read-only [ 105.281813][ T3573] XFS (loop4): Unmounting Filesystem [ 105.288716][ T5560] Quota error (device loop0): write_blk: dquota write failed [ 105.299098][ T5560] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 105.322814][ T5560] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.692: Failed to acquire dquot type 0 [ 105.334930][ T5560] EXT4-fs (loop0): Remounting filesystem read-only [ 105.348084][ T5560] EXT4-fs (loop0): 1 truncate cleaned up [ 105.409267][ T5560] EXT4-fs (loop0): pa ffff888024d93460: logic 1, phys. 41, len 23 [ 105.417704][ T5560] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 22, pa_free 23 [ 105.439966][ T5560] EXT4-fs (loop0): Remounting filesystem read-only [ 105.460869][ T5560] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x000000000000000a,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 105.853263][ T5585] loop1: detected capacity change from 0 to 2048 [ 105.991147][ T5585] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000401,errors=remount-ro,. Quota mode: none. [ 106.204128][ T3636] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.255357][ T3636] EXT4-fs (loop1): Remounting filesystem read-only [ 106.321202][ T3692] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.353200][ T5587] loop2: detected capacity change from 0 to 32768 [ 106.398945][ T5617] loop1: detected capacity change from 0 to 2048 [ 106.436192][ T5587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.703 (5587) [ 106.465931][ T5617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.493157][ T5622] loop0: detected capacity change from 0 to 128 [ 106.505341][ T5587] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 106.527427][ T26] audit: type=1800 audit(1729521070.712:6): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.710" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 106.540354][ T5587] BTRFS info (device loop2): use no compression [ 106.564632][ T5587] BTRFS info (device loop2): force zlib compression, level 3 [ 106.572527][ T5587] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 106.581115][ T3648] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.584806][ T5587] BTRFS info (device loop2): use lzo compression, level 0 [ 106.597176][ T5587] BTRFS info (device loop2): turning on flush-on-commit [ 106.605361][ T5587] BTRFS info (device loop2): enabling auto defrag [ 106.612280][ T5587] BTRFS info (device loop2): using free space tree [ 106.628924][ T5587] BTRFS info (device loop2): has skinny extents [ 106.635562][ T3692] usb 5-1: Using ep0 maxpacket: 8 [ 106.753326][ T5630] loop0: detected capacity change from 0 to 512 [ 106.759811][ T3692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.800601][ T5630] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.718: attempt to clear invalid blocks 2 len 1 [ 106.818548][ T5630] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 106.839277][ T5630] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.718: invalid indirect mapped block 1819239214 (level 0) [ 106.853266][ T3648] usb 4-1: Using ep0 maxpacket: 8 [ 106.860189][ T5630] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.718: invalid indirect mapped block 1819239214 (level 1) [ 106.889697][ T5630] EXT4-fs (loop0): 1 truncate cleaned up [ 106.896798][ T5630] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.907570][ T5587] BTRFS info (device loop2): enabling ssd optimizations [ 106.930576][ T5630] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.718: Unrecognised inode hash code 20 [ 106.943592][ T5630] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.718: Corrupt directory, running e2fsck is recommended [ 106.981154][ T3648] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 106.991430][ T3692] usb 5-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=3c.93 [ 106.993608][ T3648] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.000500][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.010319][ T3648] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.030122][ T3648] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.051800][ T3648] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.066350][ T3648] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.076491][ T3648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.119053][ T3692] usb 5-1: Product: syz [ 107.134581][ T3692] usb 5-1: Manufacturer: syz [ 107.160075][ T3692] usb 5-1: SerialNumber: syz [ 107.205881][ T3692] usb 5-1: config 0 descriptor?? [ 107.215607][ T5658] loop0: detected capacity change from 0 to 2048 [ 107.283089][ T3692] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009 [ 107.375813][ T3648] usb 4-1: GET_CAPABILITIES returned 0 [ 107.381692][ T3648] usbtmc 4-1:16.0: can't read capabilities [ 107.417442][ T5658] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.498178][ T5658] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 107.581430][ T5658] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 107.617633][ T5658] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.617633][ T5658] [ 107.643176][ T5658] EXT4-fs (loop0): Total free blocks count 0 [ 107.643340][ T3755] usb 4-1: USB disconnect, device number 10 [ 107.649280][ T5658] EXT4-fs (loop0): Free/Dirty block details [ 107.661748][ T5658] EXT4-fs (loop0): free_blocks=2415919104 [ 107.667762][ T5658] EXT4-fs (loop0): dirty_blocks=16 [ 107.675235][ T5658] EXT4-fs (loop0): Block reservation details [ 107.685042][ T5658] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 107.697708][ T5670] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 107.712529][ T5670] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.712529][ T5670] [ 107.959142][ T5683] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.047166][ T3648] kernel write not supported for file /snd/seq (pid: 3648 comm: kworker/1:7) [ 108.144262][ T3692] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 108.151785][ T3692] gspca_pac7302: probe of 5-1:0.0 failed with error -71 [ 108.160608][ T3692] usb 5-1: USB disconnect, device number 5 [ 108.200291][ T5687] loop0: detected capacity change from 0 to 4096 [ 108.239841][ T5689] SET target dimension over the limit! [ 108.289559][ T5678] loop2: detected capacity change from 0 to 32768 [ 108.299694][ T5687] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 108.326503][ T5693] loop3: detected capacity change from 0 to 128 [ 108.385827][ T5678] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.401177][ T5678] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.465193][ T5678] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 108.482159][ T5693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.510621][ T3692] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 108.517510][ T3692] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 108.550966][ T5693] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.655215][ T3692] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 108.679624][ T3692] gfs2: fsid=syz:syz.0: jid=0: Done [ 108.689946][ T5678] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 108.705505][ T5693] overlayfs: upper fs needs to support d_type. [ 108.793631][ T5693] overlayfs: Failed to create volatile/dirty file. [ 108.938787][ T5706] loop0: detected capacity change from 0 to 2048 [ 109.070338][ T5691] loop1: detected capacity change from 0 to 32768 [ 109.100977][ T5709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.120183][ T5706] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 109.172915][ T5706] Remounting filesystem read-only [ 109.291371][ T5704] loop4: detected capacity change from 0 to 32768 [ 109.303594][ T5691] XFS (loop1): Mounting V5 Filesystem [ 109.402968][ T5704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.742 (5704) [ 109.446046][ T5691] XFS (loop1): Ending clean mount [ 109.451998][ T5721] loop3: detected capacity change from 0 to 4096 [ 109.453068][ T5691] XFS (loop1): Quotacheck needed: Please wait. [ 109.489418][ T5721] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 109.498799][ T5704] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 109.508624][ T5704] BTRFS info (device loop4): using free space tree [ 109.515871][ T5704] BTRFS info (device loop4): has skinny extents [ 109.554349][ T5691] XFS (loop1): Quotacheck: Done. [ 109.800760][ T5704] BTRFS info (device loop4): enabling ssd optimizations [ 109.854755][ T3571] XFS (loop1): Unmounting Filesystem [ 110.301095][ T3758] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.418997][ T5756] loop3: detected capacity change from 0 to 32768 [ 110.562483][ T3758] usb 1-1: Using ep0 maxpacket: 32 [ 110.701922][ T3758] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 110.710213][ T3758] usb 1-1: config 0 has no interface number 0 [ 110.717427][ T5781] loop2: detected capacity change from 0 to 2048 [ 110.739065][ T3758] usb 1-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 110.751879][ T3758] usb 1-1: config 0 interface 113 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.824073][ T5781] EXT4-fs (loop2): Ignoring removed bh option [ 110.831135][ T5781] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 110.838469][ T5781] EXT4-fs (loop2): Ignoring removed nobh option [ 110.901895][ T5781] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 110.971299][ T3758] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 110.972914][ T5781] EXT4-fs error (device loop2): ext4_remount:5855: comm syz.2.766: Abort forced by user [ 110.980360][ T3758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.980386][ T3758] usb 1-1: Product: syz [ 110.980401][ T3758] usb 1-1: Manufacturer: syz [ 111.022275][ T5781] EXT4-fs (loop2): Remounting filesystem read-only [ 111.065802][ T3758] usb 1-1: SerialNumber: syz [ 111.088484][ T5779] loop1: detected capacity change from 0 to 32768 [ 111.099721][ T3758] usb 1-1: config 0 descriptor?? [ 111.139056][ T5758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.203978][ T5779] XFS (loop1): Mounting V5 Filesystem [ 111.213486][ T3758] net1080: probe of 1-1:0.113 failed with error -22 [ 111.295125][ T5783] loop4: detected capacity change from 0 to 32768 [ 111.338843][ T5798] loop2: detected capacity change from 0 to 256 [ 111.341514][ T5779] XFS (loop1): Ending clean mount [ 111.361836][ T5783] XFS: ikeep mount option is deprecated. [ 111.362674][ T5798] exfat: Bad value for 'time_offset' [ 111.447347][ T5779] UBIFS error (pid: 5779): cannot open "./file0", error -22 [ 111.467671][ T3758] usb 1-1: USB disconnect, device number 7 [ 111.555559][ T3571] XFS (loop1): Unmounting Filesystem [ 111.559283][ T5783] XFS (loop4): Mounting V5 Filesystem [ 111.642733][ T5811] loop2: detected capacity change from 0 to 2048 [ 111.660633][ T5816] netlink: 68 bytes leftover after parsing attributes in process `syz.3.773'. [ 111.707704][ T5783] XFS (loop4): Ending clean mount [ 111.736035][ T5783] XFS (loop4): Quotacheck needed: Please wait. [ 111.772083][ T5811] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 111.882757][ T5783] XFS (loop4): Quotacheck: Done. [ 111.942965][ T5820] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.050446][ T3573] XFS (loop4): Unmounting Filesystem [ 112.174736][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 112.427671][ T5819] loop3: detected capacity change from 0 to 32768 [ 113.115629][ T5851] loop3: detected capacity change from 0 to 16 [ 113.187956][ T5851] erofs: (device loop3): mounted with root inode @ nid 36. [ 113.223567][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 113.224991][ T5826] loop0: detected capacity change from 0 to 32768 [ 113.414466][ T3771] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.465881][ T5866] loop1: detected capacity change from 0 to 128 [ 113.550604][ T5870] loop3: detected capacity change from 0 to 4096 [ 113.582513][ T5866] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 113.633604][ T5866] UBIFS error (pid: 5866): cannot open "./file0", error -22 [ 113.648139][ T5871] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.700213][ T3571] sysv_free_block: trying to free block not in datazone [ 113.722126][ T3571] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 113.777422][ T26] audit: type=1800 audit(1729521077.962:7): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 113.867170][ T3771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.921426][ T3771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.961750][ T3771] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 113.970828][ T3771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.002752][ T5880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 114.051804][ T3771] usb 5-1: config 0 descriptor?? [ 114.083849][ T5884] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 114.219354][ T5891] loop0: detected capacity change from 0 to 8 [ 114.243285][ T5894] loop1: detected capacity change from 0 to 47 [ 114.249085][ T5893] loop3: detected capacity change from 0 to 512 [ 114.274464][ T5891] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 114.341596][ T5893] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.805: attempt to clear invalid blocks 2 len 1 [ 114.436158][ T5893] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 114.457982][ T5893] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.805: invalid indirect mapped block 1819239214 (level 0) [ 114.487366][ T5893] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.805: invalid indirect mapped block 1819239214 (level 1) [ 114.509215][ T5893] EXT4-fs (loop3): 1 truncate cleaned up [ 114.515312][ T5893] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.579795][ T5897] loop0: detected capacity change from 0 to 64 [ 114.641978][ T5893] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.805: Unrecognised inode hash code 20 [ 114.681191][ T5893] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.805: Corrupt directory, running e2fsck is recommended [ 114.849901][ T5868] loop2: detected capacity change from 0 to 65536 [ 114.951444][ T3771] hid-led: probe of 0003:0FC5:B080.000C failed with error -71 [ 114.979275][ T5868] XFS (loop2): Mounting V5 Filesystem [ 114.995175][ T3771] usb 5-1: USB disconnect, device number 6 [ 115.138346][ T5868] XFS (loop2): Ending clean mount [ 115.143579][ T4331] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.260052][ T3572] XFS (loop2): Unmounting Filesystem [ 115.329631][ T5906] loop1: detected capacity change from 0 to 32768 [ 115.411205][ T4331] usb 1-1: Using ep0 maxpacket: 16 [ 115.551421][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.572144][ T4331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.633835][ T5923] loop4: detected capacity change from 0 to 128 [ 115.701301][ T4331] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 115.714779][ T4331] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 115.741201][ T4331] usb 1-1: Product: syz [ 115.745379][ T4331] usb 1-1: Manufacturer: syz [ 115.776650][ T4331] usb 1-1: config 0 descriptor?? [ 115.874241][ T5929] loop4: detected capacity change from 0 to 512 [ 115.933979][ T5929] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 115.994852][ T5929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.820: inode #1: comm syz.4.820: iget: illegal inode # [ 116.052094][ T5929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.820: error while reading EA inode 1 err=-117 [ 116.067767][ T5929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.820: inode #1: comm syz.4.820: iget: illegal inode # [ 116.098270][ T5929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.820: error while reading EA inode 1 err=-117 [ 116.145485][ T5929] EXT4-fs (loop4): 1 orphan inode deleted [ 116.161329][ T5929] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 116.272940][ T4331] kovaplus 0003:1E7D:2D50.000D: item fetching failed at offset 5/7 [ 116.289793][ T5939] loop3: detected capacity change from 0 to 512 [ 116.298798][ T4331] kovaplus 0003:1E7D:2D50.000D: parse failed [ 116.305293][ T4331] kovaplus: probe of 0003:1E7D:2D50.000D failed with error -22 [ 116.377292][ T5927] loop2: detected capacity change from 0 to 32768 [ 116.410090][ T5939] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.443577][ T5939] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 116.460370][ T5939] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.541256][ T5939] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 116.563349][ T3771] usb 1-1: USB disconnect, device number 8 [ 116.641189][ T5939] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 116.654169][ T5939] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.743858][ T5952] loop4: detected capacity change from 0 to 512 [ 116.915310][ T5952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.828: inode #1: comm syz.4.828: iget: illegal inode # [ 116.974432][ T5941] loop1: detected capacity change from 0 to 32768 [ 116.991705][ T5952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.828: error while reading EA inode 1 err=-117 [ 117.011980][ T5952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.828: inode #1: comm syz.4.828: iget: illegal inode # [ 117.023506][ T5963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.833'. [ 117.033165][ T5952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.828: error while reading EA inode 1 err=-117 [ 117.089807][ T5952] EXT4-fs (loop4): 1 orphan inode deleted [ 117.099091][ T5952] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 117.129786][ T5970] loop2: detected capacity change from 0 to 512 [ 117.129993][ T5972] loop0: detected capacity change from 0 to 256 [ 117.234263][ T5952] EXT4-fs (loop4): shut down requested (2) [ 117.263152][ T5970] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 117.283529][ T5972] FAT-fs (loop0): Directory bread(block 64) failed [ 117.290111][ T5972] FAT-fs (loop0): Directory bread(block 65) failed [ 117.297568][ T5972] FAT-fs (loop0): Directory bread(block 66) failed [ 117.304615][ T5972] FAT-fs (loop0): Directory bread(block 67) failed [ 117.312111][ T5972] FAT-fs (loop0): Directory bread(block 68) failed [ 117.318655][ T5972] FAT-fs (loop0): Directory bread(block 69) failed [ 117.320880][ T5970] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.326179][ T5972] FAT-fs (loop0): Directory bread(block 70) failed [ 117.342537][ T5972] FAT-fs (loop0): Directory bread(block 71) failed [ 117.349112][ T5972] FAT-fs (loop0): Directory bread(block 72) failed [ 117.353102][ T5941] XFS (loop1): Mounting V5 Filesystem [ 117.357017][ T5972] FAT-fs (loop0): Directory bread(block 73) failed [ 117.562687][ T5941] XFS (loop1): Ending clean mount [ 117.732043][ T3571] XFS (loop1): Unmounting Filesystem [ 117.743740][ T5995] loop2: detected capacity change from 0 to 256 [ 117.830225][ T5995] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000006) [ 117.885186][ T5995] FAT-fs (loop2): Filesystem has been set read-only [ 117.906980][ T5993] loop0: detected capacity change from 0 to 4096 [ 118.004214][ T5993] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 118.100495][ T5988] loop3: detected capacity change from 0 to 32768 [ 118.119152][ T5993] ntfs3: loop0: mft corrupted [ 118.123969][ T5993] ntfs3: loop0: Failed to load $Extend. [ 118.256563][ T5988] XFS (loop3): Mounting V5 Filesystem [ 118.266985][ T5991] loop4: detected capacity change from 0 to 32768 [ 118.358212][ T5988] XFS (loop3): Ending clean mount [ 118.401177][ T6012] loop0: detected capacity change from 0 to 1024 [ 118.460756][ T3570] XFS (loop3): Unmounting Filesystem [ 118.511282][ T3758] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 118.530520][ T6012] hfsplus: bad catalog entry type [ 118.564362][ T6018] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 118.651662][ T145] hfsplus: b-tree write err: -5, ino 4 [ 118.855840][ T6027] sch_tbf: burst 3 is lower than device team0 mtu (1514) ! [ 118.931375][ T3758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.971315][ T3758] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 118.990728][ T3758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.020817][ T3758] usb 2-1: config 0 descriptor?? [ 119.378634][ T6022] loop0: detected capacity change from 0 to 32768 [ 119.468129][ T6022] JBD2: Ignoring recovery information on journal [ 119.501171][ T3760] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.533693][ T3758] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 119.542018][ T3758] elecom 0003:056E:00E6.000E: unknown main item tag 0x0 [ 119.549017][ T3758] elecom 0003:056E:00E6.000E: unknown main item tag 0x1 [ 119.556813][ T3758] elecom 0003:056E:00E6.000E: unexpected long global item [ 119.564560][ T3758] elecom: probe of 0003:056E:00E6.000E failed with error -22 [ 119.675779][ T6022] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.734527][ T3617] usb 2-1: USB disconnect, device number 8 [ 119.771254][ T3760] usb 5-1: Using ep0 maxpacket: 8 [ 119.867443][ T3569] ocfs2: Unmounting device (7,0) on (node local) [ 119.907079][ T6051] loop2: detected capacity change from 0 to 40427 [ 119.913791][ T3760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.001233][ T3760] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 120.008830][ T3760] usb 5-1: can't read configurations, error -71 [ 120.019665][ T6051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.031147][ T3692] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.049078][ T6069] netlink: 'syz.0.872': attribute type 46 has an invalid length. [ 120.064130][ T6069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.872'. [ 120.083932][ T6051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.111055][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'. [ 120.175506][ T3572] attempt to access beyond end of device [ 120.175506][ T3572] loop2: rw=2049, want=45104, limit=40427 [ 120.395233][ T6080] loop4: detected capacity change from 0 to 128 [ 120.421174][ T4331] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.470780][ T6080] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.481643][ T3692] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.508163][ T3692] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.539102][ T6080] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.570913][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.579658][ T3692] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.594769][ T3692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.652140][ T6064] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.661270][ T4331] usb 1-1: Using ep0 maxpacket: 32 [ 120.784896][ T4331] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 120.793551][ T4331] usb 1-1: config 0 has no interface number 0 [ 120.799664][ T4331] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 120.804800][ T6082] loop2: detected capacity change from 0 to 32768 [ 120.815778][ T4331] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 120.853470][ T4331] usb 1-1: config 0 interface 126 has no altsetting 0 [ 120.879181][ T6082] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.875 (6082) [ 120.919414][ T6082] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 120.956091][ T6082] BTRFS info (device loop2): enabling auto defrag [ 120.960814][ T3617] usb 4-1: USB disconnect, device number 11 [ 120.965393][ T6082] BTRFS info (device loop2): max_inline at 0 [ 120.975456][ T6082] BTRFS info (device loop2): enabling ssd optimizations [ 120.978705][ T6089] loop4: detected capacity change from 0 to 1024 [ 120.982785][ T6082] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 121.009099][ T6082] BTRFS info (device loop2): use lzo compression, level 0 [ 121.019323][ T6082] BTRFS info (device loop2): using free space tree [ 121.026466][ T4331] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 121.049731][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.057904][ T6082] BTRFS info (device loop2): has skinny extents [ 121.071291][ T4331] usb 1-1: Product: syz [ 121.075482][ T4331] usb 1-1: Manufacturer: syz [ 121.087204][ T6089] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 121.111731][ T4331] usb 1-1: SerialNumber: syz [ 121.122115][ T4331] usb 1-1: config 0 descriptor?? [ 121.141495][ T6074] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.166698][ T6074] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.181086][ T6089] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 121.420471][ T6120] No such timeout policy "syz0" [ 121.629552][ T4331] ir_usb 1-1:0.126: IR Dongle converter detected [ 121.846851][ T4331] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 121.951138][ T4750] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.001442][ T4751] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 122.075953][ T3692] usb 1-1: USB disconnect, device number 9 [ 122.095724][ T3692] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 122.107475][ T3692] ir_usb 1-1:0.126: device disconnected [ 122.166863][ T6149] loop1: detected capacity change from 0 to 64 [ 122.201145][ T4750] usb 5-1: Using ep0 maxpacket: 16 [ 122.249744][ T6149] hfs: keylen 1794 too large [ 122.289747][ T3571] hfs: node 4:3 still has 1 user(s)! [ 122.321329][ T4750] usb 5-1: config 0 has no interfaces? [ 122.340134][ T6138] loop2: detected capacity change from 0 to 40427 [ 122.371243][ T4751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.391081][ T6138] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 122.399848][ T6138] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.419635][ T4751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.481809][ T4750] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.496798][ T6138] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.503626][ T4750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.512529][ T4751] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.531301][ T4751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.540432][ T4750] usb 5-1: Product: syz [ 122.550588][ T4751] usb 4-1: SerialNumber: syz [ 122.555486][ T4750] usb 5-1: Manufacturer: syz [ 122.560099][ T4750] usb 5-1: SerialNumber: syz [ 122.589020][ T4750] usb 5-1: config 0 descriptor?? [ 122.589283][ T6162] loop1: detected capacity change from 0 to 64 [ 122.625126][ T6138] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.633844][ T6138] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.845303][ T6170] netlink: 'syz.1.904': attribute type 46 has an invalid length. [ 122.854022][ T4750] usb 5-1: USB disconnect, device number 9 [ 122.884306][ T4751] usb 4-1: 0:2 : does not exist [ 122.887696][ T6170] netlink: 2 bytes leftover after parsing attributes in process `syz.1.904'. [ 122.918523][ T6173] loop0: detected capacity change from 0 to 256 [ 122.972633][ T6173] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 122.993568][ T4751] usb 4-1: USB disconnect, device number 12 [ 123.011385][ T6175] sctp: [Deprecated]: syz.1.908 (pid 6175) Use of int in max_burst socket option deprecated. [ 123.011385][ T6175] Use struct sctp_assoc_value instead [ 123.020414][ T6173] exFAT-fs (loop0): error, invalid size(size(4096) > aligned(9223372036854777344) [ 123.020414][ T6173] [ 123.096774][ T6173] exFAT-fs (loop0): Filesystem has been set read-only [ 123.107028][ T5173] udevd[5173]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.149899][ T6177] loop1: detected capacity change from 0 to 64 [ 123.491568][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'. [ 123.515790][ T6195] loop3: detected capacity change from 0 to 512 [ 123.614358][ T6195] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 123.644203][ T6195] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 123.831505][ T26] audit: type=1800 audit(1729521088.022:8): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.917" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 123.956111][ T6188] loop2: detected capacity change from 0 to 32768 [ 124.087999][ T6188] XFS (loop2): Mounting V5 Filesystem [ 124.281508][ T6188] XFS (loop2): Ending clean mount [ 124.294075][ T6243] loop0: detected capacity change from 0 to 512 [ 124.321670][ T4750] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.349436][ T6243] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.375642][ T3572] XFS (loop2): Unmounting Filesystem [ 124.487918][ T6243] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.935: invalid indirect mapped block 4294967295 (level 1) [ 124.581102][ T4750] usb 5-1: Using ep0 maxpacket: 8 [ 124.590192][ T6243] EXT4-fs (loop0): Remounting filesystem read-only [ 124.620712][ T6243] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.935: invalid indirect mapped block 4294967295 (level 1) [ 124.657028][ T6243] EXT4-fs (loop0): Remounting filesystem read-only [ 124.661442][ T3648] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.666448][ T6243] EXT4-fs (loop0): 2 truncates cleaned up [ 124.678895][ T6243] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 124.701373][ T4750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 124.731471][ T4750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 124.773133][ T4750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.811483][ T4750] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.825307][ T6247] loop3: detected capacity change from 0 to 32768 [ 124.841174][ T4750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 124.861249][ T4750] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 124.884042][ T4750] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 124.890345][ T6247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.937 (6247) [ 124.901217][ T4750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.952623][ T4750] usb 5-1: config 0 descriptor?? [ 124.981360][ T6227] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 125.051333][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.066113][ T3585] Bluetooth: hci5: urb ffff88801b595d00 submission failed (90) [ 125.078383][ T3648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.089722][ T3648] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 125.099154][ T3648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.109631][ T6247] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 125.110144][ T3648] usb 2-1: config 0 descriptor?? [ 125.161629][ T6247] BTRFS info (device loop3): using free space tree [ 125.168276][ T6247] BTRFS info (device loop3): has skinny extents [ 125.264899][ T3617] usb 5-1: USB disconnect, device number 10 [ 125.295063][ T6262] loop2: detected capacity change from 0 to 4096 [ 125.367650][ T6262] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 125.448505][ T6262] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.582194][ T6247] BTRFS info (device loop3): enabling ssd optimizations [ 125.604296][ T3648] wacom 0003:056A:0027.000F: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 125.686622][ T3648] wacom 0003:056A:0027.000F: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 125.692284][ T6286] loop0: detected capacity change from 0 to 256 [ 125.743990][ T3648] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.000F/input/input20 [ 125.814802][ T6286] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 125.844619][ T3648] usb 2-1: USB disconnect, device number 9 [ 126.419382][ T6303] loop3: detected capacity change from 0 to 128 [ 126.512083][ T6303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.577512][ T6303] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.601777][ T26] audit: type=1800 audit(1729521090.792:9): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.952" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 126.640889][ T6312] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 126.761228][ T6317] loop4: detected capacity change from 0 to 512 [ 126.768806][ T6312] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.842729][ T6317] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 126.928145][ T6317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.958: inode #1: comm syz.4.958: iget: illegal inode # [ 127.054734][ T6317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.958: error while reading EA inode 1 err=-117 [ 127.121955][ T6317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.958: inode #1: comm syz.4.958: iget: illegal inode # [ 127.141419][ T6291] loop2: detected capacity change from 0 to 32768 [ 127.160646][ T6317] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.958: error while reading EA inode 1 err=-117 [ 127.189791][ T6291] XFS: attr2 mount option is deprecated. [ 127.207072][ T6317] EXT4-fs (loop4): 1 orphan inode deleted [ 127.219268][ T6317] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nombcache,mblk_io_submit,,errors=continue. Quota mode: none. [ 127.244262][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.346084][ T6291] XFS (loop2): Mounting V5 Filesystem [ 127.564050][ T6291] XFS (loop2): Ending clean mount [ 127.586737][ T6291] XFS (loop2): Quotacheck needed: Please wait. [ 127.634114][ T6322] loop3: detected capacity change from 0 to 32768 [ 127.635592][ T3631] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 127.711250][ T3631] XFS (loop2): Unmount and run xfs_repair [ 127.722952][ T3631] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 127.739285][ T3631] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 127.749800][ T3631] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 127.754135][ T6322] XFS (loop3): Mounting V5 Filesystem [ 127.764443][ T3631] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 127.783966][ T3631] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 127.795747][ T3631] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 127.806577][ T3631] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.817152][ T3631] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.826374][ T3631] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 127.835949][ T3631] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 127.850637][ T6291] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 127.973235][ T6314] loop1: detected capacity change from 0 to 32768 [ 128.013012][ T3572] XFS (loop2): Unmounting Filesystem [ 128.020706][ T6314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.956 (6314) [ 128.112419][ T6322] XFS (loop3): Ending clean mount [ 128.129296][ T6314] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 128.221180][ T6314] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 128.249570][ T6314] BTRFS info (device loop1): trying to use backup root at mount time [ 128.309357][ T6314] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 128.361143][ T6314] BTRFS info (device loop1): trying to use backup root at mount time [ 128.369367][ T6314] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 128.385418][ T6314] BTRFS info (device loop1): force zstd compression, level 3 [ 128.395227][ T3570] XFS (loop3): Unmounting Filesystem [ 128.400488][ T6314] BTRFS info (device loop1): using free space tree [ 128.412763][ T6314] BTRFS info (device loop1): has skinny extents [ 128.742225][ T6314] BTRFS info (device loop1): enabling ssd optimizations [ 128.828645][ T26] audit: type=1800 audit(1729521093.012:10): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 128.900177][ T6413] loop2: detected capacity change from 0 to 256 [ 129.011939][ T6413] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.505087][ T6397] loop0: detected capacity change from 0 to 32768 [ 129.585365][ T6397] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.977 (6397) [ 129.660253][ T6429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.672957][ T6397] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 129.691543][ T6397] BTRFS info (device loop0): metadata ratio 0 [ 129.716914][ T6397] BTRFS info (device loop0): using free space tree [ 129.740136][ T6397] BTRFS info (device loop0): has skinny extents [ 129.908736][ T6429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.917173][ T6397] BTRFS info (device loop0): enabling ssd optimizations [ 130.023060][ T6429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.118240][ T6429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.567012][ T6429] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.636546][ T6429] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.661076][ T6461] loop4: detected capacity change from 0 to 32768 [ 130.669573][ T6429] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.690504][ T6429] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.714993][ T6461] (syz.4.991,6461,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf4927ff0, computed 0x8f9f6e3c. Applying ECC. [ 130.789075][ T6461] (syz.4.991,6461,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xf4927ff0, computed 0xef15bdf [ 130.835188][ T6461] (syz.4.991,6461,0):ocfs2_verify_volume:2384 ERROR: status = -5 [ 130.854345][ T6461] (syz.4.991,6461,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 130.912421][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1002'. [ 130.913159][ T6480] loop1: detected capacity change from 0 to 1024 [ 130.934450][ T6461] (syz.4.991,6461,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 131.000687][ T6480] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 131.044190][ T6480] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #32: comm syz.1.999: iget: special inode unallocated [ 131.151468][ T6480] EXT4-fs (loop1): no journal found [ 131.156715][ T6480] EXT4-fs (loop1): can't get journal size [ 131.190002][ T6505] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.223326][ T6480] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.999: iget: special inode unallocated [ 131.351738][ T6480] EXT4-fs (loop1): failed to initialize system zone (-117) [ 131.351816][ T6480] EXT4-fs (loop1): mount failed [ 131.551451][ T6522] loop4: detected capacity change from 0 to 256 [ 131.639172][ T6522] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d) [ 131.695786][ T6527] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1013'. [ 131.720251][ T26] audit: type=1800 audit(1729521095.902:11): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1012" name="file2" dev="loop4" ino=1048618 res=0 errno=0 [ 131.764784][ T6522] exFAT-fs (loop4): hint_cluster is invalid (17) [ 131.817450][ T6522] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 131.866902][ T6522] exFAT-fs (loop4): Filesystem has been set read-only [ 131.938350][ T26] audit: type=1804 audit(1729521096.122:12): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1012" name="/newroot/210/file0/file2" dev="loop4" ino=1048618 res=1 errno=0 [ 132.028968][ T6540] loop1: detected capacity change from 0 to 256 [ 132.131121][ T3762] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.178501][ T6546] loop4: detected capacity change from 0 to 512 [ 132.265697][ T6546] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.293843][ T6555] loop1: detected capacity change from 0 to 164 [ 132.306780][ T6546] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.337642][ T6519] loop0: detected capacity change from 0 to 32768 [ 132.366202][ T6555] isofs: isofs_export_get_parent(): child directory not normalized! [ 132.387001][ T6546] EXT4-fs (loop4): 1 orphan inode deleted [ 132.406037][ T6546] EXT4-fs (loop4): 1 truncate cleaned up [ 132.410241][ T6562] netlink: 'syz.2.1023': attribute type 10 has an invalid length. [ 132.413882][ T3762] usb 4-1: Using ep0 maxpacket: 8 [ 132.427117][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.441132][ T6546] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 132.472493][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.478774][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.509773][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.516905][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.542995][ T6546] EXT4-fs error (device loop4): ext4_lookup:1858: inode #16: comm syz.4.1018: iget: bad extra_isize 42 (inode size 256) [ 132.626863][ T3762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.638780][ T6562] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 132.638938][ T6546] EXT4-fs (loop4): Remounting filesystem read-only [ 132.647483][ T3762] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 132.647509][ T3762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.656578][ T3762] usb 4-1: config 0 descriptor?? [ 132.690123][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.709637][ T6566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 132.868288][ T6573] loop4: detected capacity change from 0 to 512 [ 132.912431][ T6571] loop2: detected capacity change from 0 to 4096 [ 132.932357][ T6573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 132.939740][ T3762] usb 4-1: USB disconnect, device number 13 [ 132.940352][ T6573] System zones: 1-12 [ 132.966853][ T6571] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 132.982284][ T6573] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1026: bg 0: block 131: padding at end of block bitmap is not set [ 133.021212][ T6571] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 133.043134][ T6573] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 133.054020][ T6573] EXT4-fs (loop4): 1 truncate cleaned up [ 133.059754][ T6573] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,grpquota,i_version,data_err=ignore,,errors=continue. Quota mode: writeback. [ 133.328483][ T6588] loop4: detected capacity change from 0 to 1024 [ 133.422126][ T6588] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 133.485094][ T6588] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 133.643063][ T6603] loop2: detected capacity change from 0 to 128 [ 133.956129][ T6596] loop0: detected capacity change from 0 to 32768 [ 133.975685][ T6614] netlink: 'syz.4.1044': attribute type 10 has an invalid length. [ 134.014381][ T6596] XFS: ikeep mount option is deprecated. [ 134.142829][ T6596] XFS (loop0): Mounting V5 Filesystem [ 134.246598][ T6642] netlink: 'syz.4.1053': attribute type 10 has an invalid length. [ 134.261403][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.268760][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.284791][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.291897][ T6642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.301244][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.308317][ T6642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.394260][ T6596] XFS (loop0): Ending clean mount [ 134.403654][ T6642] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.411566][ T6596] XFS (loop0): Quotacheck needed: Please wait. [ 134.412546][ T3762] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 134.479017][ T6596] XFS (loop0): Quotacheck: Done. [ 134.539403][ T3569] XFS (loop0): Unmounting Filesystem [ 134.696598][ T3762] usb 4-1: Using ep0 maxpacket: 32 [ 134.831404][ T3762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.873917][ T3762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.896145][ T3762] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 134.911078][ T3762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.931166][ T3762] usb 4-1: config 0 descriptor?? [ 135.027982][ T6670] loop4: detected capacity change from 0 to 4096 [ 135.149397][ T6679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.283458][ T6650] loop1: detected capacity change from 0 to 32768 [ 135.318502][ T6680] loop2: detected capacity change from 0 to 8192 [ 135.351934][ T6680] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 135.362771][ T6680] REISERFS (device loop2): using ordered data mode [ 135.369904][ T6680] reiserfs: using flush barriers [ 135.385966][ T6680] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.404351][ T3762] savu 0003:1E7D:2D5A.0010: unbalanced collection at end of report description [ 135.414384][ T6692] loop0: detected capacity change from 0 to 128 [ 135.434369][ T3762] savu 0003:1E7D:2D5A.0010: parse failed [ 135.441644][ T6680] REISERFS (device loop2): checking transaction log (loop2) [ 135.456576][ T3762] savu: probe of 0003:1E7D:2D5A.0010 failed with error -22 [ 135.484617][ T6680] REISERFS (device loop2): Using r5 hash to sort names [ 135.497648][ T6650] XFS (loop1): Mounting V5 Filesystem [ 135.503765][ T6680] REISERFS (device loop2): using 3.5.x disk format [ 135.510590][ T6680] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 135.636907][ T6650] XFS (loop1): Ending clean mount [ 135.649281][ T6650] XFS (loop1): Quotacheck needed: Please wait. [ 135.661249][ T4529] usb 4-1: USB disconnect, device number 14 [ 135.748724][ T6650] XFS (loop1): Quotacheck: Done. [ 135.915206][ T3571] XFS (loop1): Unmounting Filesystem [ 135.990490][ T6706] loop2: detected capacity change from 0 to 512 [ 136.086328][ T6701] loop4: detected capacity change from 0 to 4096 [ 136.119834][ T6706] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 136.142652][ T6706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1076: inode #1: comm syz.2.1076: iget: illegal inode # [ 136.276734][ T6701] ntfs: volume version 3.1. [ 136.287269][ T6706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1076: error while reading EA inode 1 err=-117 [ 136.295427][ T6704] loop0: detected capacity change from 0 to 32768 [ 136.374465][ T6704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1077 (6704) [ 136.417698][ T6706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1076: inode #1: comm syz.2.1076: iget: illegal inode # [ 136.450475][ T6706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1076: error while reading EA inode 1 err=-117 [ 136.489529][ T6704] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 136.517012][ T6704] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.532659][ T6706] EXT4-fs (loop2): 1 orphan inode deleted [ 136.538424][ T6706] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nombcache,mblk_io_submit,,errors=continue. Quota mode: none. [ 136.571215][ T6704] BTRFS info (device loop0): trying to use backup root at mount time [ 136.603486][ T6704] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 136.637556][ T6704] BTRFS info (device loop0): trying to use backup root at mount time [ 136.661374][ T6704] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 136.709668][ T6704] BTRFS info (device loop0): force zstd compression, level 3 [ 136.756453][ T6704] BTRFS info (device loop0): using free space tree [ 136.799148][ T6704] BTRFS info (device loop0): has skinny extents [ 136.838577][ T6720] ALSA: mixer_oss: invalid OSS volume 'MIÚ2ĉ›q½œ™á&<,sóã ”cñãC' [ 137.027706][ T6733] loop4: detected capacity change from 0 to 128 [ 137.149491][ T6716] loop1: detected capacity change from 0 to 32768 [ 137.176257][ T6704] BTRFS info (device loop0): enabling ssd optimizations [ 137.287120][ T26] audit: type=1800 audit(1729521101.472:13): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1077" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 137.314964][ T6716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1079 (6716) [ 137.411305][ T6716] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 137.421689][ T6716] BTRFS info (device loop1): using free space tree [ 137.447385][ T6716] BTRFS info (device loop1): has skinny extents [ 137.503331][ T6758] loop4: detected capacity change from 0 to 64 [ 137.951835][ T6716] BTRFS info (device loop1): enabling ssd optimizations [ 138.067695][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 138.579368][ T6795] loop4: detected capacity change from 0 to 8192 [ 138.683610][ T6807] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1105'. [ 138.775134][ T6795] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 138.822454][ T6795] REISERFS (device loop4): using ordered data mode [ 138.828986][ T6795] reiserfs: using flush barriers [ 138.905502][ T6795] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.991438][ T6795] REISERFS (device loop4): checking transaction log (loop4) [ 139.012477][ T6795] REISERFS (device loop4): Using r5 hash to sort names [ 139.020337][ T6832] netlink: 'syz.1.1115': attribute type 8 has an invalid length. [ 139.058950][ T6795] reiserfs: enabling write barrier flush mode [ 139.112279][ T6795] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 139.126663][ T6838] Invalid ELF header magic: != ELF [ 139.151096][ T3765] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 139.361768][ T6853] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.461886][ T6856] capability: warning: `syz.4.1123' uses 32-bit capabilities (legacy support in use) [ 139.516649][ T3765] usb 3-1: not running at top speed; connect to a high speed hub [ 139.616686][ T3765] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 139.627591][ T3758] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.635520][ T6853] vhci_hcd: default hub control req: 6012 v0002 i0006 l0 [ 139.648521][ T3765] usb 3-1: config 95 has no interface number 0 [ 139.655950][ T3765] usb 3-1: config 95 interface 1 has no altsetting 0 [ 139.921310][ T3758] usb 1-1: Using ep0 maxpacket: 8 [ 139.941691][ T3765] usb 3-1: string descriptor 0 read error: -22 [ 139.951763][ T3765] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 139.960964][ T3765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.036332][ T6872] loop3: detected capacity change from 0 to 2048 [ 140.071763][ T3758] usb 1-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 140.091197][ T3692] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.101167][ T3758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.111754][ T3758] usb 1-1: config 0 descriptor?? [ 140.122489][ T6872] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.162346][ T3758] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 140.342353][ T6886] loop3: detected capacity change from 0 to 512 [ 140.361184][ T3692] usb 2-1: Using ep0 maxpacket: 32 [ 140.371385][ T3758] usb 1-1: Detected FT8U232AM [ 140.377030][ T3758] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 140.424628][ T6886] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 140.441188][ T6886] UDF-fs: Scanning with blocksize 512 failed [ 140.451113][ T6886] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 140.469143][ T6888] loop4: detected capacity change from 0 to 8192 [ 140.477313][ T4750] usb 3-1: USB disconnect, device number 6 [ 140.484240][ T6886] UDF-fs: Scanning with blocksize 1024 failed [ 140.492326][ T3692] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 140.493091][ T6886] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 140.510550][ T3692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.514652][ T6886] UDF-fs: Scanning with blocksize 2048 failed [ 140.520913][ T3692] usb 2-1: config 0 descriptor?? [ 140.527406][ T6886] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 140.543403][ T6886] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.593413][ T6888] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 140.595431][ T3765] usb 1-1: USB disconnect, device number 10 [ 140.606588][ T6888] REISERFS (device loop4): using ordered data mode [ 140.618194][ T6888] reiserfs: using flush barriers [ 140.626000][ T3765] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 140.627738][ T6888] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.652787][ T6888] REISERFS (device loop4): checking transaction log (loop4) [ 140.655314][ T3765] ftdi_sio 1-1:0.0: device disconnected [ 140.670502][ T6888] REISERFS (device loop4): Using r5 hash to sort names [ 140.691825][ T6888] reiserfs: enabling write barrier flush mode [ 140.729812][ T6888] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 140.791321][ T3692] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 140.817285][ T3692] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.846269][ T3692] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 140.853819][ T3692] usb 2-1: media controller created [ 140.873993][ T3692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.281206][ T4750] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.298270][ T6900] loop2: detected capacity change from 0 to 32768 [ 141.410821][ T6900] non-latin1 character 0xffff found in JFS file name [ 141.428550][ T6900] mount with iocharset=utf8 to access [ 141.481407][ T3692] az6027: usb out operation failed. (-71) [ 141.487668][ T3692] stb0899_attach: Driver disabled by Kconfig [ 141.511217][ T3692] az6027: no front-end attached [ 141.511217][ T3692] [ 141.531454][ T3692] az6027: usb out operation failed. (-71) [ 141.537207][ T3692] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 141.562115][ T3692] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 141.592156][ T3692] dvb-usb: schedule remote query interval to 400 msecs. [ 141.599119][ T3692] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 141.623184][ T3692] usb 2-1: USB disconnect, device number 10 [ 141.651408][ T4750] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 141.668672][ T4750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.696446][ T4750] usb 5-1: config 0 descriptor?? [ 141.757476][ T4750] gspca_main: spca508-2.14.0 probing 8086:0110 [ 141.767477][ T3692] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 141.799762][ T6910] sch_fq: defrate 0 ignored. [ 141.910671][ T6916] loop3: detected capacity change from 0 to 190 [ 141.982975][ T6916] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 142.021950][ T6916] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 142.030906][ T6916] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 142.051524][ T3771] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.059477][ T6916] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 142.077979][ T6916] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 142.126836][ T6916] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 142.144836][ T6920] loop1: detected capacity change from 0 to 256 [ 142.152004][ T6916] ntfs: (device loop3): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 142.167833][ T6916] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 142.181432][ T6916] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 142.205650][ T6916] ntfs: volume version 3.1. [ 142.213640][ T6920] exfat: Deprecated parameter 'utf8' [ 142.218953][ T6920] exfat: Deprecated parameter 'utf8' [ 142.225485][ T6916] attempt to access beyond end of device [ 142.225485][ T6916] loop3: rw=0, want=560, limit=190 [ 142.233658][ T6920] exfat: Deprecated parameter 'utf8' [ 142.277475][ T6920] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 142.295548][ T6916] attempt to access beyond end of device [ 142.295548][ T6916] loop3: rw=0, want=568, limit=190 [ 142.306871][ T3771] usb 3-1: Using ep0 maxpacket: 8 [ 142.346391][ T6916] __ntfs_error: 7 callbacks suppressed [ 142.346405][ T6916] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x46. [ 142.362798][ T6920] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 142.376300][ T6920] exFAT-fs (loop1): Filesystem has been set read-only [ 142.396313][ T6916] attempt to access beyond end of device [ 142.396313][ T6916] loop3: rw=0, want=568, limit=190 [ 142.409897][ T6926] tipc: Started in network mode [ 142.415153][ T6926] tipc: Node identity :, cluster identity 4711 [ 142.418256][ T6916] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x46. [ 142.428620][ T6926] tipc: Enabling of bearer rejected, failed to enable media [ 142.481391][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.505647][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.529195][ T3771] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 142.547258][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.578448][ T3771] usb 3-1: config 0 descriptor?? [ 142.624843][ T4750] gspca_spca508: reg_read err -71 [ 142.646241][ T4750] gspca_spca508: reg_read err -71 [ 142.691212][ T4750] gspca_spca508: reg write: error -71 [ 142.699077][ T4750] spca508: probe of 5-1:0.0 failed with error -71 [ 142.726730][ T4750] usb 5-1: USB disconnect, device number 11 [ 142.865579][ T6944] loop3: detected capacity change from 0 to 8192 [ 142.923424][ T6944] REISERFS warning (device loop3): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 143.050069][ T6943] loop1: detected capacity change from 0 to 32768 [ 143.063163][ T3771] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 143.121207][ T3765] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.136470][ T6949] loop3: detected capacity change from 0 to 512 [ 143.147367][ T6943] (syz.1.1165,6943,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf4927ff0, computed 0x8f9f6e3c. Applying ECC. [ 143.151874][ T3771] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf3 found [ 143.167585][ T6943] (syz.1.1165,6943,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xf4927ff0, computed 0xef15bdf [ 143.179656][ T3771] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf4 found [ 143.196140][ T6943] (syz.1.1165,6943,1):ocfs2_verify_volume:2384 ERROR: status = -5 [ 143.206582][ T6943] (syz.1.1165,6943,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 143.206936][ T6951] loop4: detected capacity change from 0 to 512 [ 143.219414][ T6943] (syz.1.1165,6943,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 143.273807][ T6951] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.298663][ T4750] usb 3-1: USB disconnect, device number 7 [ 143.310245][ T6949] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.311542][ T6951] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1169: invalid indirect mapped block 4294967295 (level 0) [ 143.321725][ T6949] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.399614][ T6949] EXT4-fs error (device loop3): ext4_get_first_dir_block:3617: inode #12: block 31: comm syz.3.1168: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 143.421457][ T3765] usb 1-1: Using ep0 maxpacket: 8 [ 143.429377][ T6951] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.1169: invalid indirect mapped block 4294967295 (level 1) [ 143.450336][ T6951] EXT4-fs (loop4): 1 orphan inode deleted [ 143.453677][ T6949] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.1168: directory missing '..' [ 143.469076][ T6951] EXT4-fs (loop4): 1 truncate cleaned up [ 143.475081][ T6951] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,max_batch_time=0x0000000000000001,nolazytime,block_validity,block_validity,init_itable=0x0000000000010000,nolazytime,,errors=continue. Quota mode: none. [ 143.540302][ T6951] EXT4-fs (loop4): shut down requested (2) [ 143.621341][ T3765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.724475][ T3765] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.741136][ T3765] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.861103][ T4750] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 143.876289][ T6973] loop3: detected capacity change from 0 to 64 [ 143.904486][ T6975] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 143.910434][ T6975] syzkaller0: linktype set to 0 [ 143.931337][ T3765] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.940466][ T3765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.948522][ T3765] usb 1-1: Product: syz [ 143.952799][ T3765] usb 1-1: Manufacturer: syz [ 143.957428][ T3765] usb 1-1: SerialNumber: syz [ 143.982638][ T4525] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.111116][ T4750] usb 2-1: Using ep0 maxpacket: 32 [ 144.130873][ T6981] loop3: detected capacity change from 0 to 512 [ 144.231200][ T4750] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 144.241444][ T4750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.251564][ T4750] usb 2-1: config 0 descriptor?? [ 144.253996][ T6981] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.275491][ T6981] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.288468][ T3765] usb 1-1: cannot find UAC_HEADER [ 144.293875][ T4750] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 144.322562][ T6981] EXT4-fs (loop3): 1 orphan inode deleted [ 144.328554][ T6981] EXT4-fs (loop3): 1 truncate cleaned up [ 144.336849][ T3765] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 144.341533][ T6981] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 144.349110][ T3765] usb 1-1: USB disconnect, device number 11 [ 144.387993][ T5173] udevd[5173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.445715][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1188'. [ 144.483386][ T6981] EXT4-fs error (device loop3): ext4_lookup:1858: inode #16: comm syz.3.1181: iget: bad extra_isize 42 (inode size 256) [ 144.501393][ T4525] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.511760][ T4525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.515042][ T6981] EXT4-fs (loop3): Remounting filesystem read-only [ 144.519782][ T4525] usb 5-1: Product: syz [ 144.534303][ T6981] ------------[ cut here ]------------ [ 144.537890][ T4525] usb 5-1: Manufacturer: syz [ 144.539770][ T6981] WARNING: CPU: 0 PID: 6981 at kernel/locking/lockdep.c:896 look_up_lock_class+0xa0/0x120 [ 144.545446][ T4525] usb 5-1: SerialNumber: syz [ 144.554216][ T6981] Modules linked in: [ 144.554231][ T6981] CPU: 0 PID: 6981 Comm: syz.3.1181 Not tainted 5.15.168-syzkaller #0 [ 144.554254][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.554267][ T6981] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 144.554295][ T6981] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 2f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 a7 09 d2 f9 48 c7 c7 80 4b 8b 8a 89 de e8 89 cf fe [ 144.554319][ T6981] RSP: 0018:ffffc900032a76b0 EFLAGS: 00010006 [ 144.554337][ T6981] RAX: ffffffff902d2fc0 RBX: ffffffff901aa240 RCX: ffff88801db13b80 [ 144.554354][ T6981] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880755c5c30 [ 144.613149][ T4525] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 144.620324][ T6981] RBP: ffffc900032a77b0 R08: 0000000000000001 R09: 0000000000000000 [ 144.620345][ T6981] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 144.620360][ T6981] R13: 1ffff92000654ee4 R14: ffff8880755c5c30 R15: ffffffff96991c81 [ 144.620378][ T6981] FS: 00007fb62201b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 144.651090][ T6467] kernel write not supported for file /video4 (pid: 6467 comm: kworker/1:19) [ 144.652359][ T6981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.684557][ T6981] CR2: 0000555586ab1808 CR3: 0000000028371000 CR4: 00000000003506f0 [ 144.692542][ T6981] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.700583][ T6981] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.708591][ T6981] Call Trace: [ 144.711884][ T6981] [ 144.714824][ T6981] ? __warn+0x15b/0x300 [ 144.718992][ T6981] ? look_up_lock_class+0xa0/0x120 [ 144.724110][ T6981] ? report_bug+0x1b7/0x2e0 [ 144.728630][ T6981] ? handle_bug+0x3d/0x70 [ 144.732966][ T6981] ? exc_invalid_op+0x16/0x40 [ 144.737652][ T6981] ? asm_exc_invalid_op+0x16/0x20 [ 144.742694][ T6981] ? look_up_lock_class+0xa0/0x120 [ 144.747821][ T6981] register_lock_class+0x100/0x9a0 [ 144.752950][ T6981] ? is_dynamic_key+0x1f0/0x1f0 [ 144.757811][ T6981] ? is_dynamic_key+0x1f0/0x1f0 [ 144.762669][ T6981] ? mark_lock+0x98/0x340 [ 144.767021][ T6981] __lock_acquire+0xd7/0x1ff0 [ 144.771704][ T6981] lock_acquire+0x1db/0x4f0 [ 144.776253][ T6981] ? ext4_ioctl+0x3dec/0x5b80 [ 144.780969][ T6981] ? read_lock_is_recursive+0x10/0x10 [ 144.786378][ T6981] ? __might_sleep+0xc0/0xc0 [ 144.791047][ T6981] ? rwsem_write_trylock+0x166/0x210 [ 144.796354][ T6981] ? clear_nonspinnable+0x60/0x60 [ 144.801393][ T6981] down_write_nested+0x3b/0x60 [ 144.806165][ T6981] ? ext4_ioctl+0x3dec/0x5b80 [ 144.810825][ T6981] ext4_ioctl+0x3dec/0x5b80 [ 144.815322][ T6981] ? do_vfs_ioctl+0x1b66/0x2b70 [ 144.820163][ T6981] ? ext4_fileattr_set+0x1750/0x1750 [ 144.825438][ T6981] ? __x64_compat_sys_ioctl+0x80/0x80 [ 144.830795][ T6981] ? __lock_acquire+0x1ff0/0x1ff0 [ 144.835811][ T6981] ? slab_free_freelist_hook+0xdd/0x160 [ 144.841372][ T6981] ? tomoyo_path_number_perm+0x648/0x810 [ 144.847031][ T6981] ? kfree+0xf1/0x270 [ 144.851007][ T6981] ? tomoyo_path_number_perm+0x6ab/0x810 [ 144.856672][ T6981] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 144.862156][ T6981] ? __fget_files+0x413/0x480 [ 144.866835][ T6981] ? bpf_lsm_file_ioctl+0x5/0x10 [ 144.871755][ T6981] ? security_file_ioctl+0x7d/0xa0 [ 144.876860][ T6981] ? ext4_fileattr_set+0x1750/0x1750 [ 144.882152][ T6981] __se_sys_ioctl+0xf1/0x160 [ 144.886731][ T6981] do_syscall_64+0x3b/0xb0 [ 144.891143][ T6981] ? clear_bhb_loop+0x15/0x70 [ 144.895817][ T6981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.901710][ T6981] RIP: 0033:0x7fb623ba2ff9 [ 144.906124][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.925731][ T6981] RSP: 002b:00007fb62201b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.934176][ T6981] RAX: ffffffffffffffda RBX: 00007fb623d5af80 RCX: 00007fb623ba2ff9 [ 144.942145][ T6981] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 144.950103][ T6981] RBP: 00007fb623c15296 R08: 0000000000000000 R09: 0000000000000000 [ 144.958066][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.966043][ T6981] R13: 0000000000000000 R14: 00007fb623d5af80 R15: 00007ffe4b2ea168 [ 144.974013][ T6981] [ 144.977075][ T6981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 144.984351][ T6981] CPU: 0 PID: 6981 Comm: syz.3.1181 Not tainted 5.15.168-syzkaller #0 [ 144.992506][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.002570][ T6981] Call Trace: [ 145.005846][ T6981] [ 145.008765][ T6981] dump_stack_lvl+0x1e3/0x2d0 [ 145.013436][ T6981] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 145.019056][ T6981] ? panic+0x860/0x860 [ 145.023156][ T6981] ? look_up_lock_class+0x70/0x120 [ 145.028279][ T6981] ? look_up_lock_class+0x70/0x120 [ 145.033382][ T6981] panic+0x318/0x860 [ 145.037268][ T6981] ? __warn+0x16a/0x300 [ 145.041601][ T6981] ? fb_is_primary_device+0xd0/0xd0 [ 145.046787][ T6981] ? look_up_lock_class+0xa0/0x120 [ 145.051208][ T4750] gspca_sunplus: reg_w_riv err -110 [ 145.051900][ T6981] __warn+0x2b2/0x300 [ 145.057461][ T4750] sunplus: probe of 2-1:0.0 failed with error -110 [ 145.061049][ T6981] ? look_up_lock_class+0xa0/0x120 [ 145.061088][ T6981] report_bug+0x1b7/0x2e0 [ 145.061116][ T6981] handle_bug+0x3d/0x70 [ 145.061137][ T6981] exc_invalid_op+0x16/0x40 [ 145.085655][ T6981] asm_exc_invalid_op+0x16/0x20 [ 145.090504][ T6981] RIP: 0010:look_up_lock_class+0xa0/0x120 [ 145.096229][ T6981] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 2f 2d 90 49 39 06 74 2a <0f> 0b eb 26 e8 a7 09 d2 f9 48 c7 c7 80 4b 8b 8a 89 de e8 89 cf fe [ 145.115827][ T6981] RSP: 0018:ffffc900032a76b0 EFLAGS: 00010006 [ 145.121874][ T6981] RAX: ffffffff902d2fc0 RBX: ffffffff901aa240 RCX: ffff88801db13b80 [ 145.129829][ T6981] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880755c5c30 [ 145.137821][ T6981] RBP: ffffc900032a77b0 R08: 0000000000000001 R09: 0000000000000000 [ 145.145775][ T6981] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 145.153727][ T6981] R13: 1ffff92000654ee4 R14: ffff8880755c5c30 R15: ffffffff96991c81 [ 145.161706][ T6981] register_lock_class+0x100/0x9a0 [ 145.166807][ T6981] ? is_dynamic_key+0x1f0/0x1f0 [ 145.171647][ T6981] ? is_dynamic_key+0x1f0/0x1f0 [ 145.176496][ T6981] ? mark_lock+0x98/0x340 [ 145.180817][ T6981] __lock_acquire+0xd7/0x1ff0 [ 145.185495][ T6981] lock_acquire+0x1db/0x4f0 [ 145.190007][ T6981] ? ext4_ioctl+0x3dec/0x5b80 [ 145.194701][ T6981] ? read_lock_is_recursive+0x10/0x10 [ 145.200060][ T6981] ? __might_sleep+0xc0/0xc0 [ 145.204638][ T6981] ? rwsem_write_trylock+0x166/0x210 [ 145.209925][ T6981] ? clear_nonspinnable+0x60/0x60 [ 145.214961][ T6981] down_write_nested+0x3b/0x60 [ 145.219850][ T6981] ? ext4_ioctl+0x3dec/0x5b80 [ 145.224517][ T6981] ext4_ioctl+0x3dec/0x5b80 [ 145.229011][ T6981] ? do_vfs_ioctl+0x1b66/0x2b70 [ 145.233846][ T6981] ? ext4_fileattr_set+0x1750/0x1750 [ 145.239112][ T6981] ? __x64_compat_sys_ioctl+0x80/0x80 [ 145.244465][ T6981] ? __lock_acquire+0x1ff0/0x1ff0 [ 145.249471][ T6981] ? slab_free_freelist_hook+0xdd/0x160 [ 145.251189][ T4525] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.255001][ T6981] ? tomoyo_path_number_perm+0x648/0x810 [ 145.255028][ T6981] ? kfree+0xf1/0x270 [ 145.273526][ T6981] ? tomoyo_path_number_perm+0x6ab/0x810 [ 145.279171][ T6981] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 145.284641][ T6981] ? __fget_files+0x413/0x480 [ 145.289328][ T6981] ? bpf_lsm_file_ioctl+0x5/0x10 [ 145.294253][ T6981] ? security_file_ioctl+0x7d/0xa0 [ 145.299350][ T6981] ? ext4_fileattr_set+0x1750/0x1750 [ 145.304623][ T6981] __se_sys_ioctl+0xf1/0x160 [ 145.309196][ T6981] do_syscall_64+0x3b/0xb0 [ 145.313607][ T6981] ? clear_bhb_loop+0x15/0x70 [ 145.318267][ T6981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.324148][ T6981] RIP: 0033:0x7fb623ba2ff9 [ 145.328548][ T6981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.348136][ T6981] RSP: 002b:00007fb62201b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.356546][ T6981] RAX: ffffffffffffffda RBX: 00007fb623d5af80 RCX: 00007fb623ba2ff9 [ 145.364506][ T6981] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004 [ 145.372475][ T6981] RBP: 00007fb623c15296 R08: 0000000000000000 R09: 0000000000000000 [ 145.380445][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.388402][ T6981] R13: 0000000000000000 R14: 00007fb623d5af80 R15: 00007ffe4b2ea168 [ 145.396379][ T6981] [ 145.399683][ T6981] Kernel Offset: disabled [ 145.403999][ T6981] Rebooting in 86400 seconds..