last executing test programs: 4.27273777s ago: executing program 1 (id=6797): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000014c0)={'gretap0\x00', &(0x7f0000001400)=@ethtool_eeprom={0xc, 0x1}}) 4.139484167s ago: executing program 1 (id=6800): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01a6"]) 1.642470728s ago: executing program 1 (id=6841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x55, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) 1.551157s ago: executing program 1 (id=6844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) 1.450349553s ago: executing program 1 (id=6847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) 1.204985025s ago: executing program 4 (id=6851): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r0, 0x0) 1.123968865s ago: executing program 1 (id=6853): syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000010b804020240000102030109021b000101b28000090400030207"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x525, &(0x7f0000000880)="$eJzs3W1rY1kdAPD/TZtOZ6ZrsyoyLri7uCszi07Sbt3dKrK7guirBXV9P9Y2LaVpMzTpOi2LdvEDCCIq+AF8I/gBBJmPIMKAvhcVRXRGX+pcuTc32IekDW06mU1/PziTc3Jy7/+cO8npfTjcG8Cl9WJEvB0RExHxSkTMFu+XihT7nZR97tHD95ezlESavvuPJJLive66svJkRFwvFpuOiG9+LeI7yfG4rd29jaVGo75dlGvtzbu11u7e7fXNpbX6Wn1rYWH+9cU3Fl9bnEsL5+pnJSLe/MpffvLDX3z1zd987rt/vPO3W9/LmvWlT3TaHRHL5wrQR2fd5XxbdGXbaPsigo1I1p/yxKhbAQDAILJ9/I9GxKfz/f/ZmMj35gAAAIBxkr41E/9JIlIAAABgbJUiYiaSUrWYCzATpVK12pnD+/G4Vmo0W+3PrjZ3tlayuohKlEur6436XDFXuBLlJCvPF3Nsu+VXj5QXIuLZiPjx7NW8XF1uNlZGffIDAAAALonrLxw+/v/3bCnPAwAAAGOm0rcAAAAAjAuH/AAAADD+HP8DAADAWPv6O+9kKe0+x3vlvd2djeZ7t1fqrY3q5s5ytRwR1bVmcy2/Z9/maetrNJt3Px9bO/dq7XqrXWvt7t3ZbO5ste+sH3oENgAAAPAEPfvC/T8kEbH/xat5iuI+gACH/HnUDQCGaWLUDQBGZnLUDQBGpnzqJ4wQMO6SU+qPT97pnCuM315MewAAgOG7+cnj1/+nirrTzw0AH2bm+gDA5ePqHlxe5bPOALwx7JYAo/KRzsuVfvV9b94xwPX/zjmGND1TwwAAgKGZyVNSqhb76TNRKlWrEc/kjwUoJ6vrjfpccXzw+9nylaw8ny+ZnDpnGAAAAAAAAAAAAAAAAAAAAAAAAADoSNMkUgAAAGCsRZT+muR384+4OfvyzOGzA0ee+vXzd396b6nd3p6PmEr+OZu9NRUR7Z8V77+aeiQAAAAAPAU6x+nF6/yoWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAuHn08P3lbhpsiStDifv3L0dEpVf8yZjOX6fzQNf+lcTkgeWSiJgYQvz9DyLiRq/4STxO07RStKJX/KsXHL+Sb5re8UsRcX0I8eEyu5+NP2/3+v2V4sX8tffvb7JI59Ud/6aK8sH4xfiXj3O9xp9njpT7ee7Br2p9438Q8dxk7/GnGz/pxD8UIiu8NGAfv/2tvb2eFQdW2Sv+wVi19ubdWmt37/b65tJafa2+tbAw//riG4uvLc7VVtcb9eLfnmF+9KlfPz6p/9f6xK8c7v+x7f/yQL1P478P7j38WKdQ7hX/1ku9//7eOBq/8x+Sj/3Zd+IzRT6rv9nN73fyBz3/y989f1L/V/r0f/qU/t8aqP/xhVe+8YM/9aw5tjUAgCehtbu3sdRo1LdPyEwP8JmBMxNDWc9bQ2vP05KJp6MZF5yZij5V6fc738fzhTjn4scy6XkWn4whNGPq2O90Is66wiRiP1vXgF9IAABgzPx/p/+kK0gAAAAAAAAAAAAAAAAAAADARTrjbcmmI2LgDx+NuT+argIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOh/AQAA///L38kW") 1.08434612s ago: executing program 4 (id=6854): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) lseek(r0, 0x0, 0x1) 991.422312ms ago: executing program 4 (id=6856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24044000) 892.668555ms ago: executing program 2 (id=6858): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) readahead(r0, 0x0, 0xfffffffffffffcaa) 787.361248ms ago: executing program 4 (id=6860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd19, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0xd, 0x3, {0x0, 0x0, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 781.156439ms ago: executing program 2 (id=6861): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x81, {{0x29, 0x0, 0x43000000, @local, 0x3}}}, 0x88) 696.0586ms ago: executing program 4 (id=6863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 678.589502ms ago: executing program 2 (id=6864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000c80)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x640100fd, 0x1}, @phonet={0x23, 0x1, 0x8, 0x2}, @generic={0x2a, "85424c9251b9f4e60a7f4f9739ca"}, 0x800, 0x0, 0x0, 0x0, 0xff80, 0x0, 0x0, 0x80000000, 0x9}) 586.180174ms ago: executing program 4 (id=6866): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 521.457852ms ago: executing program 2 (id=6868): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 498.139105ms ago: executing program 3 (id=6870): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) 446.640682ms ago: executing program 2 (id=6871): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000005, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]}) 391.529339ms ago: executing program 0 (id=6872): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0xfffffffffffffffe, 0x0) 378.90341ms ago: executing program 3 (id=6873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x37}}]}, 0x70}}, 0x0) 339.012186ms ago: executing program 0 (id=6874): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x9, @pix={0x203, 0x807c2, 0x32314d59, 0x32315659, 0xffffffff, 0xfffffff7, 0x4, 0x807, 0x1, 0x3, 0x2}}) 322.655188ms ago: executing program 2 (id=6875): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x5, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102150109024800010000000009046900000e010000084101dfe5f48e9a1c", @ANYBLOB='A'], 0x0) 255.518037ms ago: executing program 3 (id=6876): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="4f3bfde51b257f40", 0x8}], 0x1) 229.47954ms ago: executing program 0 (id=6877): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}}, 0x0) 212.555932ms ago: executing program 3 (id=6878): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac85800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0fe8a7d06d7535f7866907dc6751dfb292f7d3acec77f5efad9c11650300000000000000649c1cfd138d5521f9451759c3421eed73d5661cfeecf9c66cf6dd6dcd54c3b3ff02000000d7c983c044c03bf3cc2367a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a37c9af2551ce935b0f327cb3f011a7d069111d5a34ed09baafa9e87110bd5602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2fc7925bfacbb031e7743f541cd0aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a1420cfd9e1f84d8271ff6606b2a44bc47b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b207000000000000001d24291c25449f106a99893ed20fa7a050fbbef90327e827e513e96068fd1e8a43e89f9c050022a961546ed5365470fa503c1fac35b903e10c62bebc943c17ff1432d0881406bc176e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40e4ffff06aabca77e64c988dd413230d60a7f7681314df1c2a0f4249c7be5329ac624fb2997df9e6867053a4b239d17ba83b498812a8f57b9b52ebc8b327a967e41f61fe4382601bff5f5dbcd3d50a065bcc67943ba05f3a5366ca6d291f931d9cde41bdabdae4717317621abaa7179e2d44f8ebca654f9e4571963a3f198769e309fc99f6320f47140bb9a5e359804c2653d19462139d5c505dc6e4f178c9a098b51333cccfe0d2eb41dd079de3cfa60365787ca4b8eb920a06969c5da49fc87d37f18205f4b5c0f44d16a2d9f2bc894dfd78e819e54e79eb5ceb91451149e099e47b94fd53ed2dd33d43d8c681e027175e8d281ba4ac708543bc3f9e8e35532b7b90eee5df24d5ec9cd4e33a79f5b123cf15edeb8b0ee7cafbf"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 142.847421ms ago: executing program 3 (id=6879): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c03e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fd6a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 109.581416ms ago: executing program 0 (id=6880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x8}]}}}]}, 0x44}}, 0x0) 63.612041ms ago: executing program 0 (id=6881): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f00000012c0)="0800b76dce3226de", 0x8, 0x14, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 26.761416ms ago: executing program 3 (id=6882): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 0 (id=6883): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x84ce, 0x2000000000800000, 0x622, 0x1002, 0x7, 0x5, 0xfffffffffffffffd, 0x41eb}) kernel console output (not intermixed with test programs): 899] loop3: detected capacity change from 0 to 1024 [ 680.956650][T16901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.052876][ T9134] usb 1-1: Using ep0 maxpacket: 32 [ 681.181567][ T9134] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 681.189976][ T9134] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 681.209055][T16915] ip6t_srh: unknown srh match flags 4001 [ 681.237106][ T9134] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 681.292558][ T9134] usb 1-1: config 1 has no interface number 0 [ 681.318532][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 681.318548][ T26] audit: type=1400 audit(1769130263.118:30): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=16917 comm="syz.2.5390" [ 681.321367][ T9134] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.369632][T16921] device gtp0 entered promiscuous mode [ 681.409770][ T9134] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 681.423265][ T9134] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 681.432964][ T9134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.526705][ T9134] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 681.626616][T16923] loop4: detected capacity change from 0 to 8192 [ 681.760465][ T9134] snd_usb_pod 1-1:1.1: invalid control EP [ 681.777287][ T9134] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 681.790406][ T9134] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 681.820910][ T9134] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 681.949772][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5403'. [ 682.025392][ T9134] usb 1-1: USB disconnect, device number 19 [ 682.026858][T16945] loop3: detected capacity change from 0 to 4096 [ 682.138871][T16945] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 682.384000][T16971] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5416'. [ 682.564260][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5418'. [ 682.580763][T16981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5420'. [ 682.592797][T16978] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5418'. [ 682.808171][T16993] loop0: detected capacity change from 0 to 64 [ 682.833360][ T4264] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 682.988267][T17003] Invalid option length (1048395) for dns_resolver key [ 683.012158][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 683.061265][T17006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5432'. [ 683.076050][T17007] loop0: detected capacity change from 0 to 256 [ 683.104705][T17006] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5432'. [ 683.151325][ T4264] usb 2-1: Using ep0 maxpacket: 16 [ 683.228016][T17014] loop2: detected capacity change from 0 to 64 [ 683.269095][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 683.291284][ T4264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.398817][ T7] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 683.439153][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.467557][T17023] loop2: detected capacity change from 0 to 256 [ 683.471720][ T7] usb 4-1: config 0 has no interface number 0 [ 683.517992][ T4264] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 683.536669][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.562222][ T4264] usb 2-1: Product: syz [ 683.564024][T17025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5442'. [ 683.576136][ T4264] usb 2-1: Manufacturer: syz [ 683.576160][ T4264] usb 2-1: SerialNumber: syz [ 683.589194][ T4264] usb 2-1: config 0 descriptor?? [ 683.665678][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 683.674799][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.690643][ T7] usb 4-1: Product: syz [ 683.694879][ T7] usb 4-1: Manufacturer: syz [ 683.731776][ T7] usb 4-1: SerialNumber: syz [ 683.764064][ T7] usb 4-1: config 0 descriptor?? [ 683.767331][ T4264] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 683.910991][ T6159] usb 2-1: USB disconnect, device number 16 [ 683.911799][ T1276] usb 2-1: Failed to submit usb control message: -71 [ 683.936309][T17042] loop2: detected capacity change from 0 to 1024 [ 684.024043][ T1276] usb 2-1: unable to send the bmi data to the device: -71 [ 684.040618][ T1276] usb 2-1: unable to get target info from device [ 684.047199][ T1276] usb 2-1: could not get target info (-71) [ 684.053945][ T7] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 684.053984][ T7] usb 4-1: No valid video chain found. [ 684.071004][T17052] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 684.099577][T17042] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 684.131605][T17042] ext4 filesystem being mounted at /1200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.160776][ T1276] usb 2-1: could not probe fw (-71) [ 684.284680][ T7] usb 4-1: USB disconnect, device number 3 [ 684.572342][T17061] loop2: detected capacity change from 0 to 4096 [ 684.802233][T17050] loop0: detected capacity change from 0 to 32768 [ 684.853971][T17059] loop4: detected capacity change from 0 to 32768 [ 684.921178][T17050] ERROR: (device loop0): dtSearch: stack overrun! [ 684.921178][T17050] [ 684.931415][T17059] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.5456 (17059) [ 684.965451][T17050] ERROR: (device loop0): remounting filesystem as read-only [ 684.976008][T17069] loop2: detected capacity change from 0 to 2048 [ 684.983559][T17050] btstack dump: [ 685.010307][T17050] bn = 0, index = 4 [ 685.015706][T17059] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 685.026080][T17069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.036251][T17050] bn = 0, index = 4 [ 685.041511][T17050] bn = 0, index = 4 [ 685.048176][T17059] BTRFS info (device loop4): enabling ssd optimizations [ 685.074084][T17050] bn = 0, index = 4 [ 685.077976][T17050] bn = 0, index = 4 [ 685.097393][T17059] BTRFS info (device loop4): not using ssd optimizations [ 685.121101][T17050] bn = 0, index = 4 [ 685.124981][T17050] bn = 0, index = 4 [ 685.128816][T17050] bn = 0, index = 0 [ 685.144730][T17059] BTRFS info (device loop4): turning off barriers [ 685.174678][T17050] jfs_lookup: dtSearch returned -5 [ 685.189652][T17059] BTRFS info (device loop4): using free space tree [ 685.206223][T17059] BTRFS info (device loop4): has skinny extents [ 685.864132][T17118] loop3: detected capacity change from 0 to 8192 [ 685.925751][T17118] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 685.945638][T17118] REISERFS (device loop3): using ordered data mode [ 685.952426][T17118] reiserfs: using flush barriers [ 686.015837][T17118] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 686.084574][ T6164] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 686.119794][T17118] REISERFS (device loop3): checking transaction log (loop3) [ 686.186821][T17118] REISERFS (device loop3): Using r5 hash to sort names [ 686.189072][T17129] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 686.205461][T17118] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 686.223585][ T7] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 686.287902][T17118] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 686.527749][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 686.533687][T17135] loop0: detected capacity change from 0 to 64 [ 686.579902][T17135] attempt to access beyond end of device [ 686.579902][T17135] loop0: rw=0, want=65536, limit=64 [ 686.593877][ T6164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.610148][ T6164] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.624634][T17135] Buffer I/O error on dev loop0, logical block 32767, async page read [ 686.652006][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.663116][T17135] attempt to access beyond end of device [ 686.663116][T17135] loop0: rw=0, want=65536, limit=64 [ 686.679228][ T7] usb 3-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 686.698609][ T7] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.711935][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 686.719636][T17135] Buffer I/O error on dev loop0, logical block 32767, async page read [ 686.828525][ T6164] usb 2-1: New USB device found, idVendor=0525, idProduct=b0a1, bcdDevice= 0.00 [ 686.852315][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.864232][ T6164] usb 2-1: Product: syz [ 686.874406][ T6164] usb 2-1: Manufacturer: syz [ 686.879301][ T6164] usb 2-1: SerialNumber: syz [ 686.888226][ T7] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 686.897722][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.924773][ T7] usb 3-1: Product: syz [ 686.929001][ T7] usb 3-1: Manufacturer: syz [ 686.934405][ T7] usb 3-1: SerialNumber: syz [ 686.950203][ T7] usb 3-1: config 0 descriptor?? [ 686.955357][ T6164] cdc_mbim 2-1:1.0: MBIM functional descriptor missing [ 686.955398][ T6164] cdc_mbim 2-1:1.0: bind() failure [ 687.008114][ T7] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 687.120534][T17148] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5490'. [ 687.148132][T17149] loop4: detected capacity change from 0 to 1764 [ 687.180604][ T9134] usb 2-1: USB disconnect, device number 17 [ 687.219093][ T4243] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 687.248003][T17149] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 687.379869][ T7] snd_usb_toneport 3-1:0.0: set_interface failed [ 687.405874][ T7] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 687.425307][ T7] snd_usb_toneport: probe of 3-1:0.0 failed with error -71 [ 687.451974][ T7] usb 3-1: USB disconnect, device number 126 [ 687.463408][T17157] fuse: Bad value for 'group_id' [ 687.486828][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 687.587042][T17163] loop3: detected capacity change from 0 to 4096 [ 687.616693][ T4243] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.629064][ T4243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.818992][ T4243] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 687.840052][ T9132] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 687.853900][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.877197][ T4243] usb 1-1: Product: syz [ 687.881522][ T4243] usb 1-1: Manufacturer: syz [ 687.892330][ T4243] usb 1-1: SerialNumber: syz [ 687.952336][T17177] loop3: detected capacity change from 0 to 8 [ 688.097033][ T9132] usb 5-1: Using ep0 maxpacket: 8 [ 688.137847][T17177] SQUASHFS error: Unable to read inode 0xa7 [ 688.149287][T17186] netlink: 'syz.2.5507': attribute type 2 has an invalid length. [ 688.163472][T17186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5507'. [ 688.225607][ T9132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.390201][T17190] loop1: detected capacity change from 0 to 4096 [ 688.433754][ T9132] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 688.450269][ T4243] usb 1-1: cannot find UAC_HEADER [ 688.478986][ T9132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.498697][ T4243] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 688.520615][T17196] loop2: detected capacity change from 0 to 1024 [ 688.526912][ T9132] usb 5-1: Product: syz [ 688.553382][ T9132] usb 5-1: Manufacturer: syz [ 688.558979][ T4243] usb 1-1: USB disconnect, device number 20 [ 688.565677][ T9132] usb 5-1: SerialNumber: syz [ 688.583736][T17196] hfsplus: unable to find HFS+ superblock [ 688.603879][ T9132] usb 5-1: config 0 descriptor?? [ 688.815067][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.881204][ T6159] usb 5-1: USB disconnect, device number 21 [ 688.993203][T17194] loop3: detected capacity change from 0 to 32768 [ 689.043435][T17208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5518'. [ 689.241047][T17214] loop0: detected capacity change from 0 to 512 [ 689.315052][T17220] device vlan1 entered promiscuous mode [ 689.375939][T17214] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 689.495286][T17214] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,dioread_nolock,noload,auto_da_alloc=0x000000000000168f,bsddf,. Quota mode: writeback. [ 689.575671][T17214] ext4 filesystem being mounted at /1092/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.590961][T17238] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5529'. [ 689.625080][T17214] EXT4-fs error (device loop0): ext4_xattr_block_list:719: inode #15: comm syz.0.5522: corrupted xattr block 32 [ 689.676307][T17214] EXT4-fs (loop0): Remounting filesystem read-only [ 689.743441][T17243] loop4: detected capacity change from 0 to 256 [ 689.974829][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5540'. [ 689.997083][T17259] loop1: detected capacity change from 0 to 64 [ 690.048227][T17263] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 690.171510][T17267] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 690.229882][ T4243] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 690.361486][T17284] loop3: detected capacity change from 0 to 256 [ 690.507298][ T4243] usb 3-1: Using ep0 maxpacket: 8 [ 690.609493][T17294] loop4: detected capacity change from 0 to 1024 [ 690.633833][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.700843][T17301] device vlan1 entered promiscuous mode [ 690.830941][ T4243] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 690.847424][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.893947][ T4243] usb 3-1: Product: syz [ 690.898456][ T4243] usb 3-1: Manufacturer: syz [ 690.910229][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5564'. [ 690.930437][ T4243] usb 3-1: SerialNumber: syz [ 690.958300][ T4243] usb 3-1: config 0 descriptor?? [ 691.115000][T17314] dlm: dev_write: no op 0 74000000000000 [ 691.245145][ T7] usb 3-1: USB disconnect, device number 127 [ 691.478332][T17291] loop1: detected capacity change from 0 to 32768 [ 691.489023][T17321] loop0: detected capacity change from 0 to 4096 [ 691.495774][ T4243] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 691.509672][T17291] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5557 (17291) [ 691.578523][T17291] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 691.587565][T17291] BTRFS info (device loop1): force clearing of disk cache [ 691.595819][T17291] BTRFS info (device loop1): enabling auto defrag [ 691.596636][T17325] loop4: detected capacity change from 0 to 256 [ 691.618820][T17291] BTRFS info (device loop1): max_inline at 0 [ 691.624860][T17291] BTRFS info (device loop1): enabling disk space caching [ 691.637926][T17291] BTRFS info (device loop1): disk space caching is enabled [ 691.646374][T17291] BTRFS info (device loop1): has skinny extents [ 691.666959][T17321] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 691.779652][ T4243] usb 4-1: Using ep0 maxpacket: 32 [ 691.868914][T17321] ntfs3: loop0: Failed to load $Extend. [ 691.907741][ T4243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 691.990585][T17343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5575'. [ 692.078903][ T4243] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 692.103623][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 692.113058][ T4243] usb 4-1: Product: syz [ 692.117348][ T4243] usb 4-1: Manufacturer: syz [ 692.122364][ T4243] usb 4-1: SerialNumber: syz [ 692.144779][ T4243] usb 4-1: config 0 descriptor?? [ 692.171664][T17357] loop2: detected capacity change from 0 to 16 [ 692.180005][T17291] BTRFS info (device loop1): enabling ssd optimizations [ 692.197775][T17291] BTRFS info (device loop1): clearing free space tree [ 692.207288][T17291] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 692.219816][T17291] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 692.276380][T17357] erofs: (device loop2): mounted with root inode @ nid 36. [ 692.437740][ T7529] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 692.578209][ T5974] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5974) [ 692.690670][ T9135] usb 4-1: USB disconnect, device number 4 [ 693.095827][ T7529] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 693.105256][ T7529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.138381][ T7529] usb 5-1: Product: syz [ 693.142606][ T7529] usb 5-1: Manufacturer: syz [ 693.162466][ T7529] usb 5-1: SerialNumber: syz [ 693.267908][ T7529] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 693.287127][T17363] loop0: detected capacity change from 0 to 32768 [ 693.331849][T17370] infiniband syz1: set active [ 693.348467][T17370] infiniband syz1: added bond0 [ 693.478798][T17363] XFS (loop0): Mounting V5 Filesystem [ 693.673051][T17363] XFS (loop0): Ending clean mount [ 693.712199][T17370] RDS/IB: syz1: added [ 693.718059][T17370] smc: adding ib device syz1 with port count 1 [ 693.724568][T17370] smc: ib device syz1 port 1 has pnetid [ 693.805252][T17397] loop3: detected capacity change from 0 to 1024 [ 693.878211][ T4188] XFS (loop0): Unmounting Filesystem [ 693.940066][ T9] hfsplus: b-tree write err: -5, ino 4 [ 694.028574][ T4244] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 694.441316][T17404] loop3: detected capacity change from 0 to 16 [ 694.503389][ T9135] usb 5-1: USB disconnect, device number 22 [ 694.514043][T17404] erofs: (device loop3): mounted with root inode @ nid 36. [ 694.558070][T17404] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 694.588301][T17404] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 694.624364][ T4185] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 694.657593][T17404] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 694.690432][ T26] audit: type=1800 audit(1769130275.608:31): pid=17404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5598" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 694.871074][T17418] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5604'. [ 695.059351][T17424] loop3: detected capacity change from 0 to 512 [ 695.155506][ T4244] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 695.168812][T17424] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 695.188793][ T4244] ath9k_htc: Failed to initialize the device [ 695.234472][ T9135] usb 5-1: ath9k_htc: USB layer deinitialized [ 695.251922][T17432] netlink: 'syz.0.5609': attribute type 2 has an invalid length. [ 695.292534][T17432] netlink: 'syz.0.5609': attribute type 8 has an invalid length. [ 695.316376][T17424] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,inode_readahead_blks=0x0000000000000800,discard,,errors=continue. Quota mode: writeback. [ 695.349434][T17432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5609'. [ 695.368880][T17424] ext4 filesystem being mounted at /1084/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 695.574770][T17416] loop2: detected capacity change from 0 to 32768 [ 695.721084][T17446] loop3: detected capacity change from 0 to 512 [ 695.793880][T17446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 695.885996][T17446] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.5613: bad orphan inode 131083 [ 695.938741][T17452] netlink: 'syz.0.5619': attribute type 21 has an invalid length. [ 695.975793][T17446] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 696.004455][T17452] netlink: 'syz.0.5619': attribute type 4 has an invalid length. [ 696.028217][T17452] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5619'. [ 696.203873][T17463] overlayfs: missing 'workdir' [ 696.209052][T17461] netlink: 'syz.4.5624': attribute type 5 has an invalid length. [ 696.462940][T17474] netlink: 'syz.0.5630': attribute type 32 has an invalid length. [ 696.493841][T17474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5630'. [ 696.627019][T17488] loop2: detected capacity change from 0 to 512 [ 696.761837][T17488] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.5636: inode has both inline data and extents flags [ 696.874115][T17488] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5636: couldn't read orphan inode 15 (err -117) [ 696.888859][T17488] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 697.155726][T17525] loop4: detected capacity change from 0 to 1024 [ 697.223944][T17532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5656'. [ 697.241102][T17525] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 697.265489][T17527] loop2: detected capacity change from 0 to 2048 [ 697.370065][T17525] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 697.427360][T17527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.544687][T17525] EXT4-fs error (device loop4): ext4_xattr_set_entry:1625: inode #16: comm syz.4.5654: corrupted xattr entries [ 697.667162][T17525] EXT4-fs (loop4): Remounting filesystem read-only [ 697.701669][T17549] netlink: 'syz.2.5665': attribute type 2 has an invalid length. [ 698.379974][T17576] Cannot find set identified by id 0 to match [ 698.400623][T17575] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5676'. [ 698.429499][T17543] loop0: detected capacity change from 0 to 32768 [ 698.938178][T17558] loop1: detected capacity change from 0 to 32768 [ 699.025450][T17558] XFS: noikeep mount option is deprecated. [ 699.151867][T17558] XFS (loop1): Mounting V5 Filesystem [ 699.383920][T17558] XFS (loop1): Ending clean mount [ 699.420272][T17558] XFS (loop1): Quotacheck needed: Please wait. [ 699.578844][ T26] audit: type=1800 audit(1769130280.177:32): pid=17614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.5694" name="/newroot/1249/bus" dev="tmpfs" ino=6601 res=0 errno=0 [ 699.628196][T17558] XFS (loop1): Quotacheck: Done. [ 699.690747][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.697144][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.759895][T17592] loop3: detected capacity change from 0 to 32768 [ 699.826317][ T4184] XFS (loop1): Unmounting Filesystem [ 700.095429][T17605] loop4: detected capacity change from 0 to 32768 [ 700.173739][T17632] loop3: detected capacity change from 0 to 4096 [ 700.249641][T17632] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 700.676403][T17647] loop1: detected capacity change from 0 to 256 [ 700.677864][T17641] syz.2.5705 (17641) used greatest stack depth: 20600 bytes left [ 700.735641][T17651] comedi comedi0: pcm3724: I/O port conflict (0x3,16) [ 700.829306][T17647] FAT-fs (loop1): Directory bread(block 64) failed [ 700.855051][T17647] FAT-fs (loop1): Directory bread(block 65) failed [ 700.900088][T17647] FAT-fs (loop1): Directory bread(block 66) failed [ 700.906702][T17647] FAT-fs (loop1): Directory bread(block 67) failed [ 700.966744][T17647] FAT-fs (loop1): Directory bread(block 68) failed [ 700.986813][T17647] FAT-fs (loop1): Directory bread(block 69) failed [ 701.026287][T17647] FAT-fs (loop1): Directory bread(block 70) failed [ 701.032889][T17647] FAT-fs (loop1): Directory bread(block 71) failed [ 701.093547][T17647] FAT-fs (loop1): Directory bread(block 72) failed [ 701.100175][T17647] FAT-fs (loop1): Directory bread(block 73) failed [ 701.197103][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5720'. [ 701.219142][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5720'. [ 701.250238][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5720'. [ 701.489241][ T7529] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 701.567809][T17676] loop3: detected capacity change from 0 to 4096 [ 701.624887][T17676] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 701.752527][T17676] ntfs3: loop3: failed to convert "c46c" to default [ 701.806032][T17694] SET target dimension over the limit! [ 701.812130][ T7529] usb 5-1: Using ep0 maxpacket: 8 [ 701.957538][ T7529] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.982070][ T4244] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 701.992897][ T7529] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.025320][ T7529] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.057248][ T7529] usb 5-1: config 0 interface 0 has no altsetting 0 [ 702.256727][T17712] loop0: detected capacity change from 0 to 8 [ 702.268221][ T7529] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 702.288335][ T7529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.297190][ T4244] usb 2-1: Using ep0 maxpacket: 8 [ 702.303947][ T7529] usb 5-1: Product: syz [ 702.308270][ T7529] usb 5-1: Manufacturer: syz [ 702.319315][T17712] SQUASHFS error: zlib decompression failed, data probably corrupt [ 702.332064][ T7529] usb 5-1: SerialNumber: syz [ 702.345514][T17712] SQUASHFS error: Failed to read block 0x9b: -5 [ 702.351995][T17712] SQUASHFS error: Unable to read metadata cache entry [99] [ 702.366423][T17712] SQUASHFS error: Unable to read inode 0x104 [ 702.375349][ T7529] usb 5-1: config 0 descriptor?? [ 702.396998][T17714] loop3: detected capacity change from 0 to 2048 [ 702.441965][ T7529] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 702.456334][T17715] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 702.467370][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.489612][ T4244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.511171][ T4244] usb 2-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 702.521439][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.548826][ T4244] usb 2-1: config 0 descriptor?? [ 702.561752][T17714] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 702.591380][ T4244] usbhid 2-1:0.0: can't add hid device: -22 [ 702.597441][ T4244] usbhid: probe of 2-1:0.0 failed with error -22 [ 702.623793][T17714] Remounting filesystem read-only [ 702.629166][T17714] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 702.692372][ T7529] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 702.713550][ T7529] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 702.723676][ T7529] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 702.755449][T17717] loop2: detected capacity change from 0 to 1024 [ 702.813265][ T4244] usb 2-1: USB disconnect, device number 18 [ 702.824275][ T9135] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 702.931964][ T6159] usb 5-1: USB disconnect, device number 23 [ 703.001561][T17719] loop3: detected capacity change from 0 to 4096 [ 703.077684][T17719] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 703.098545][T17719] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 703.122683][T17719] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 703.138444][T17719] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 703.151819][T17719] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 703.165199][T17719] ntfs: volume version 3.1. [ 703.172505][T17719] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 703.185415][T17719] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 703.200826][T17719] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 703.212335][T17719] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 703.224711][ T9135] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 703.233269][T17719] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 703.249813][ T9135] usb 1-1: config 0 has no interface number 0 [ 703.256478][ T9135] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 703.273633][ T9135] usb 1-1: config 0 interface 2 altsetting 2 has an invalid endpoint with address 0x6D, skipping [ 703.294964][ T9135] usb 1-1: config 0 interface 2 has no altsetting 0 [ 703.295170][ T7529] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 703.466419][ T9135] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 703.479991][ T9135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.489851][ T9135] usb 1-1: Product: syz [ 703.494081][ T9135] usb 1-1: Manufacturer: syz [ 703.504753][ T9135] usb 1-1: SerialNumber: syz [ 703.513793][ T9135] usb 1-1: config 0 descriptor?? [ 703.530798][T17712] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 703.537945][T17712] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 703.594754][ T7529] usb 3-1: Using ep0 maxpacket: 32 [ 703.673759][T17733] netlink: 'syz.4.5750': attribute type 1 has an invalid length. [ 703.701708][ T4243] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 703.722199][T17735] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5751'. [ 703.734122][ T6159] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 703.764455][ T7529] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 703.785642][ T7529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.809415][ T7529] usb 3-1: config 0 descriptor?? [ 703.864908][ T7529] gspca_main: sq930x-2.14.0 probing 041e:403c [ 703.873533][ T9135] usb 1-1: invalid MIDI in EP 0 [ 703.905422][ T9135] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 703.915174][ T9135] usb 1-1: USB disconnect, device number 21 [ 703.969283][ T4243] usb 2-1: Using ep0 maxpacket: 8 [ 704.141411][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.290376][ T4243] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 704.299673][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.308249][ T4243] usb 2-1: Product: syz [ 704.313053][ T4243] usb 2-1: Manufacturer: syz [ 704.317777][ T4243] usb 2-1: SerialNumber: syz [ 704.327117][ T4243] usb 2-1: config 0 descriptor?? [ 704.343900][ T7529] gspca_sq930x: ucbus_write failed -71 [ 704.349985][ T6159] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 704.359496][ T7529] sq930x: probe of 3-1:0.0 failed with error -71 [ 704.377948][ T4243] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 704.381695][ T6159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.428773][ T7529] usb 3-1: USB disconnect, device number 2 [ 704.445079][ T6159] usb 4-1: Product: syz [ 704.473041][ T6159] usb 4-1: Manufacturer: syz [ 704.478014][ T6159] usb 4-1: SerialNumber: syz [ 704.537398][ T6159] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 704.593006][ T4243] usb 2-1: USB disconnect, device number 19 [ 705.162963][ T6159] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 705.237435][T17782] netlink: 'syz.4.5774': attribute type 6 has an invalid length. [ 705.410561][T17792] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5778'. [ 705.646594][ T4244] usb 4-1: USB disconnect, device number 5 [ 705.769023][T17817] loop0: detected capacity change from 0 to 8 [ 705.899442][T17817] SQUASHFS error: Failed to read block 0x738: -5 [ 705.937553][T17817] SQUASHFS error: Unable to read metadata cache entry [736] [ 705.994938][T17828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.066763][ T7529] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 706.220654][T17836] program syz.0.5800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.245460][T17836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 706.280922][ T6159] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 706.298883][ T6159] ath9k_htc: Failed to initialize the device [ 706.310049][ T4244] usb 4-1: ath9k_htc: USB layer deinitialized [ 706.334167][ T7529] usb 3-1: Using ep0 maxpacket: 16 [ 706.419303][T17846] loop4: detected capacity change from 0 to 256 [ 706.523058][T17846] FAT-fs (loop4): Directory bread(block 64) failed [ 706.563089][T17846] FAT-fs (loop4): Directory bread(block 65) failed [ 706.598070][T17848] loop0: detected capacity change from 0 to 2048 [ 706.634242][ T7529] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 706.645847][ T7529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.654235][ T7529] usb 3-1: Product: syz [ 706.659212][ T7529] usb 3-1: Manufacturer: syz [ 706.663852][ T7529] usb 3-1: SerialNumber: syz [ 706.689797][T17848] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 706.700378][T17846] FAT-fs (loop4): Directory bread(block 66) failed [ 706.706954][T17846] FAT-fs (loop4): Directory bread(block 67) failed [ 706.719712][ T7529] r8152-cfgselector 3-1: config 0 descriptor?? [ 706.758653][T17848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 706.768146][T17846] FAT-fs (loop4): Directory bread(block 68) failed [ 706.785475][T17846] FAT-fs (loop4): Directory bread(block 69) failed [ 706.835710][T17846] FAT-fs (loop4): Directory bread(block 70) failed [ 706.857014][T17846] FAT-fs (loop4): Directory bread(block 71) failed [ 706.886640][T17846] FAT-fs (loop4): Directory bread(block 72) failed [ 706.908153][T17846] FAT-fs (loop4): Directory bread(block 73) failed [ 706.977691][T17831] loop1: detected capacity change from 0 to 32768 [ 707.156711][T17831] XFS (loop1): Mounting V5 Filesystem [ 707.254535][ T7529] r8152-cfgselector 3-1: Unknown version 0x0000 [ 707.261029][ T7529] r8152-cfgselector 3-1: bad CDC descriptors [ 707.297501][ T7529] r8152-cfgselector 3-1: Unknown version 0x0000 [ 707.315680][ T7529] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 707.354280][T17831] XFS (loop1): Ending clean mount [ 707.451521][T17872] netlink: 'syz.4.5814': attribute type 1 has an invalid length. [ 707.463926][ T4184] XFS (loop1): Unmounting Filesystem [ 707.477108][T17872] netlink: 'syz.4.5814': attribute type 3 has an invalid length. [ 707.501986][T17872] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5814'. [ 707.830212][T17882] loop4: detected capacity change from 0 to 1024 [ 708.035882][T17882] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,nobarrier,errors=remount-ro,. Quota mode: none. [ 708.076444][T17882] EXT4-fs error (device loop4): ext4_get_first_dir_block:3597: inode #11: comm syz.4.5820: Directory hole found for htree leaf block 0 [ 708.098766][T17882] EXT4-fs (loop4): Remounting filesystem read-only [ 708.184872][T17893] loop1: detected capacity change from 0 to 512 [ 708.303646][T17897] netlink: 'syz.4.5824': attribute type 2 has an invalid length. [ 708.399614][T17893] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 708.439604][T17874] loop3: detected capacity change from 0 to 40427 [ 708.489145][T17893] ext4 filesystem being mounted at /1106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.520660][T17874] F2FS-fs (loop3): invalid crc value [ 708.540805][T17874] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 3 [ 708.547308][T17874] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 708.853157][T17884] loop0: detected capacity change from 0 to 32768 [ 709.176844][T17918] loop2: detected capacity change from 0 to 4096 [ 709.202649][T17928] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.347252][T17931] device erspan1 entered promiscuous mode [ 709.399630][T17918] __ntfs_error: 6 callbacks suppressed [ 709.399649][T17918] ntfs: (device loop2): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 709.519858][T17918] ntfs: volume version 3.1. [ 709.658634][T17937] loop4: detected capacity change from 0 to 164 [ 709.832659][T17937] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 709.849276][T17945] loop0: detected capacity change from 0 to 256 [ 709.960375][T17945] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 710.223153][T17920] loop1: detected capacity change from 0 to 40427 [ 710.333662][T17920] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 710.352274][T17920] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 710.407848][T17920] F2FS-fs (loop1): invalid crc value [ 710.449412][T17920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 710.614266][T17975] loop4: detected capacity change from 0 to 4096 [ 710.641730][T17979] loop2: detected capacity change from 0 to 2048 [ 710.652838][T17920] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 710.663173][T17920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 710.766494][T17975] ntfs3: loop4: ino=5, "/" directory corrupted [ 710.795879][T17975] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 710.843910][T17979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 710.927914][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5870'. [ 711.021178][T17979] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 711.222105][T18010] syz.4.5876 uses obsolete (PF_INET,SOCK_PACKET) [ 711.264748][T18009] loop0: detected capacity change from 0 to 1764 [ 711.325863][T18012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.365644][T18009] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 711.551629][T18018] [U] v3f"S/4:XTzWtlW= [ 711.603384][T18018] [U] J"e:" [ 711.607184][T18018] [U] [ 711.736849][T18016] loop2: detected capacity change from 0 to 4096 [ 711.807956][T18016] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 712.085906][T18037] loop4: detected capacity change from 0 to 64 [ 712.176640][T18037] Bad inode number on dev loop4: 6 is out of range [ 712.238775][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5891'. [ 712.284923][T18044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5891'. [ 712.309127][T18044] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5891'. [ 712.326983][ T6159] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 712.494564][T18054] loop1: detected capacity change from 0 to 64 [ 712.527851][T18056] loop0: detected capacity change from 0 to 256 [ 712.576611][T18049] loop2: detected capacity change from 0 to 8192 [ 712.666445][T18056] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 712.715923][T18049] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 712.725954][ T6159] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 712.764530][T18049] REISERFS (device loop2): using ordered data mode [ 712.769793][ T6159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.774076][T18049] reiserfs: using flush barriers [ 712.788015][T18049] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 712.846174][T18049] REISERFS (device loop2): checking transaction log (loop2) [ 712.850273][ T6159] usb 4-1: config 0 descriptor?? [ 712.900308][T18049] REISERFS (device loop2): Using rupasov hash to sort names [ 712.931413][T18049] REISERFS (device loop2): using 3.5.x disk format [ 712.946691][ T6159] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 712.949509][T18049] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 713.030892][T18049] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 713.059621][T18049] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 713.077870][T18049] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 713.102614][T18049] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 713.304474][T18049] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 713.321910][T18049] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 713.407369][ T6159] gp8psk: usb in 128 operation failed. [ 713.429140][ T6159] gp8psk: usb in 137 operation failed. [ 713.435535][ T6159] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 713.519453][ T6159] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 713.567943][ T6159] usb 4-1: USB disconnect, device number 6 [ 714.069713][T18063] loop1: detected capacity change from 0 to 32768 [ 714.159479][T18063] ERROR: (device loop1): diAllocBit: iag inconsistent [ 714.159479][T18063] [ 714.204469][T18094] loop4: detected capacity change from 0 to 4096 [ 714.219988][T18063] ialloc: diAlloc returned -5! [ 714.267809][T18106] loop3: detected capacity change from 0 to 256 [ 714.310673][T18094] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 714.364902][T18106] FAT-fs (loop3): Directory bread(block 64) failed [ 714.412869][T18106] FAT-fs (loop3): Directory bread(block 65) failed [ 714.441268][T18106] FAT-fs (loop3): Directory bread(block 66) failed [ 714.463226][T18111] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5925'. [ 714.481023][T18106] FAT-fs (loop3): Directory bread(block 67) failed [ 714.501439][T18106] FAT-fs (loop3): Directory bread(block 68) failed [ 714.520344][T18106] FAT-fs (loop3): Directory bread(block 69) failed [ 714.560616][T18106] FAT-fs (loop3): Directory bread(block 70) failed [ 714.595495][T18106] FAT-fs (loop3): Directory bread(block 71) failed [ 714.642791][T18106] FAT-fs (loop3): Directory bread(block 72) failed [ 714.669917][T18106] FAT-fs (loop3): Directory bread(block 73) failed [ 714.830053][T18120] loop4: detected capacity change from 0 to 256 [ 714.905789][T18120] exfat: Deprecated parameter 'utf8' [ 714.912355][T18120] exfat: Deprecated parameter 'utf8' [ 714.958594][T18120] exfat: Deprecated parameter 'namecase' [ 715.007997][T18127] netlink: 'syz.1.5932': attribute type 2 has an invalid length. [ 715.019724][T18120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 715.096721][T18127] netlink: 'syz.1.5932': attribute type 8 has an invalid length. [ 715.176709][T18131] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5934'. [ 715.186362][T18127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5932'. [ 715.244093][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5934'. [ 715.568111][T18145] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 715.862457][T18166] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.017235][T18159] loop4: detected capacity change from 0 to 4096 [ 716.089572][T18159] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 716.220181][T18185] loop3: detected capacity change from 0 to 256 [ 716.256623][T18188] loop0: detected capacity change from 0 to 64 [ 716.325721][T18192] loop2: detected capacity change from 0 to 128 [ 716.400658][T18192] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 716.454932][T18192] hpfs: filesystem error: improperly stopped [ 716.478379][T18192] hpfs: You really don't want any checks? You are crazy... [ 716.499469][T18192] hpfs: hpfs_map_sector(): read error [ 716.518988][T18192] hpfs: code page support is disabled [ 716.527596][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5969'. [ 716.536996][T18192] hpfs: hpfs_map_sector(): read error [ 716.543625][T18192] hpfs: hpfs_map_sector(): read error [ 716.549050][T18192] hpfs: filesystem error: unable to find root dir [ 716.562434][T18198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5969'. [ 716.628647][T18198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5969'. [ 716.635168][T18202] syz.3.5968 (18202): /proc/18201/oom_adj is deprecated, please use /proc/18201/oom_score_adj instead. [ 716.925140][T18214] netlink: 'syz.1.5976': attribute type 2 has an invalid length. [ 716.994435][T18222] sctp: [Deprecated]: syz.3.5979 (pid 18222) Use of int in max_burst socket option. [ 716.994435][T18222] Use struct sctp_assoc_value instead [ 717.317501][T18238] libceph: resolve 'cc' (ret=-3): failed [ 717.500799][T18245]  (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 717.559306][T18250] netlink: 'syz.1.5992': attribute type 2 has an invalid length. [ 717.569535][T18247] netlink: 'syz.3.5991': attribute type 22 has an invalid length. [ 717.577600][T18247] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 717.590776][T18250] netlink: 'syz.1.5992': attribute type 3 has an invalid length. [ 717.684400][T18253] loop2: detected capacity change from 0 to 128 [ 717.729430][T18254] net_ratelimit: 12170 callbacks suppressed [ 717.729451][T18254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.827920][T18218] loop4: detected capacity change from 0 to 32768 [ 717.886618][T18218] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.5977 (18218) [ 718.008260][T18218] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 718.027139][T18218] BTRFS info (device loop4): force zlib compression, level 3 [ 718.051431][T18218] BTRFS info (device loop4): turning on flush-on-commit [ 718.079276][T18218] BTRFS info (device loop4): max_inline at 4096 [ 718.104507][T18218] BTRFS info (device loop4): using free space tree [ 718.111171][T18218] BTRFS info (device loop4): has skinny extents [ 718.479153][T18293] netlink: 'syz.0.6006': attribute type 21 has an invalid length. [ 718.501870][T18293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6006'. [ 718.539130][T18218] BTRFS info (device loop4): enabling ssd optimizations [ 718.619490][T18293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6006'. [ 719.572729][T18320] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6019'. [ 719.757099][T18329] loop0: detected capacity change from 0 to 512 [ 719.782903][T18297] loop2: detected capacity change from 0 to 32768 [ 719.870027][T18329] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.6023: inode has both inline data and extents flags [ 719.883890][T18329] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.6023: couldn't read orphan inode 15 (err -117) [ 719.911176][T18329] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 719.989563][T18349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6029'. [ 719.999060][T18349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6029'. [ 720.008689][T18349] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6029'. [ 720.023798][T18297] XFS (loop2): Mounting V5 Filesystem [ 720.145848][T18356] loop1: detected capacity change from 0 to 4096 [ 720.258058][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6034'. [ 720.277120][T18356] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 720.295364][T18297] XFS (loop2): Ending clean mount [ 720.428844][ T4190] XFS (loop2): Unmounting Filesystem [ 720.464749][T18368] loop0: detected capacity change from 0 to 1024 [ 720.526167][ T4184] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 720.535785][ T4184] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 720.542370][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 720.611342][T18368] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 720.751669][T18368] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 720.803059][T18380] loop3: detected capacity change from 0 to 256 [ 720.834250][T18368] EXT4-fs error (device loop0): ext4_xattr_set_entry:1625: inode #16: comm syz.0.6038: corrupted xattr entries [ 720.908200][T18368] EXT4-fs (loop0): Remounting filesystem read-only [ 721.344999][T18404] QAT: failed to copy from user cfg_data. [ 721.514366][T18412] device lo entered promiscuous mode [ 721.572098][T18412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.802235][T18412] syz.2.6067 (18412) used greatest stack depth: 20112 bytes left [ 721.887007][T18429] loop2: detected capacity change from 0 to 24 [ 721.953529][T18431] netlink: 'syz.0.6077': attribute type 1 has an invalid length. [ 721.969896][T18429] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 722.013703][T18429] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 722.388348][T18451] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6075'. [ 722.735306][T18461] loop2: detected capacity change from 0 to 4096 [ 722.780068][ T4284] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 722.852266][T18470] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 722.874838][T18461] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 722.987893][T18461] Remounting filesystem read-only [ 723.049205][T18474] loop0: detected capacity change from 0 to 512 [ 723.120462][T18474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 723.169914][T18474] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 723.219495][T18474] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 723.258526][T18474] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 723.301681][ T4284] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 723.313092][T18479] cgroup: noprefix used incorrectly [ 723.336496][ T4284] usb 4-1: config 0 has no interface number 1 [ 723.364468][ T4284] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 723.379575][T18474] EXT4-fs (loop0): Test dummy encryption mode enabled [ 723.398238][T18474] EXT4-fs (loop0): re-mounted. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,. Quota mode: writeback. [ 723.409330][ T4284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.496784][ T4284] usb 4-1: config 0 descriptor?? [ 723.556612][ T4284] usb 4-1: MIDIStreaming interface descriptor not found [ 723.567094][T18488] loop2: detected capacity change from 0 to 2048 [ 723.628484][ T4284] gspca_main: spca561-2.14.0 probing abcd:cdee [ 723.657170][T18489] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 723.685877][T18488] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 723.703704][T18492] device geneve2 entered promiscuous mode [ 723.734602][T18488] Remounting filesystem read-only [ 723.740005][T18488] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 723.860722][ T4284] spca561: probe of 4-1:0.0 failed with error -22 [ 723.878965][ T4284] usb 4-1: USB disconnect, device number 7 [ 724.049714][T18497] loop4: detected capacity change from 0 to 4096 [ 724.170311][T18497] ntfs: (device loop4): map_mft_record_page(): Attempt to read mft record 0x1, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 724.227431][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.245746][T18497] ntfs: (device loop4): map_mft_record(): Failed with error code 2. [ 724.254032][T18497] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 724.372696][T18497] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 724.445073][T18497] ntfs: (device loop4): map_mft_record_page(): Attempt to read mft record 0x0, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 724.534963][T18497] ntfs: (device loop4): map_mft_record(): Failed with error code 2. [ 724.599603][T18497] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 724.684595][T18497] ntfs: (device loop4): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 724.723190][T18497] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 724.966835][T18502] loop0: detected capacity change from 0 to 32768 [ 725.056535][T18502] (syz.0.6101,18502,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 725.097330][T18539] loop4: detected capacity change from 0 to 24 [ 725.108440][T18502] (syz.0.6101,18502,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 725.155785][T18539] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 725.171594][T18502] JBD2: Ignoring recovery information on journal [ 725.222254][T18539] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 725.257199][T18502] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 725.381879][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 725.642052][T18562] cgroup: noprefix used incorrectly [ 725.848403][T18576] loop3: detected capacity change from 0 to 24 [ 725.915597][T18576] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 725.949131][T18576] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 725.953035][T18575] loop0: detected capacity change from 0 to 4096 [ 726.086669][T18582] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 726.105343][T18580] loop1: detected capacity change from 0 to 512 [ 726.144659][T18575] NILFS error (device loop0): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 726.182295][T18580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 726.189598][T18575] Remounting filesystem read-only [ 726.245437][T18580] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 726.327463][T18580] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 726.365884][T18580] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 726.557132][T18580] EXT4-fs (loop1): Test dummy encryption mode enabled [ 726.575595][T18580] EXT4-fs (loop1): re-mounted. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,. Quota mode: writeback. [ 726.784805][T18570] loop2: detected capacity change from 0 to 32768 [ 726.858218][T18570] (syz.2.6133,18570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 726.899450][T18570] (syz.2.6133,18570,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 727.061694][T18570] JBD2: Ignoring recovery information on journal [ 727.079025][T18613] device geneve2 entered promiscuous mode [ 727.309879][T18570] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 727.491358][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 728.592669][T18675] loop0: detected capacity change from 0 to 256 [ 728.615727][T18652] loop3: detected capacity change from 0 to 32768 [ 728.702114][T18652] (syz.3.6164,18652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 728.730785][T18675] FAT-fs (loop0): Directory bread(block 64) failed [ 728.737414][T18675] FAT-fs (loop0): Directory bread(block 65) failed [ 728.755605][T18652] (syz.3.6164,18652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 728.784299][T18675] FAT-fs (loop0): Directory bread(block 66) failed [ 728.791038][T18675] FAT-fs (loop0): Directory bread(block 67) failed [ 728.810562][T18675] FAT-fs (loop0): Directory bread(block 68) failed [ 728.835987][T18652] JBD2: Ignoring recovery information on journal [ 728.843373][T18675] FAT-fs (loop0): Directory bread(block 69) failed [ 728.858939][T18675] FAT-fs (loop0): Directory bread(block 70) failed [ 728.865567][T18675] FAT-fs (loop0): Directory bread(block 71) failed [ 728.879752][T18675] FAT-fs (loop0): Directory bread(block 72) failed [ 728.891664][T18675] FAT-fs (loop0): Directory bread(block 73) failed [ 728.922633][T18652] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 729.029055][T18695] loop4: detected capacity change from 0 to 512 [ 729.106507][T18695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 729.146903][T18699] ip6t_REJECT: ECHOREPLY is not supported [ 729.172772][T18695] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.6184: Invalid block bitmap block 0 in block_group 0 [ 729.208048][T18705] loop2: detected capacity change from 0 to 256 [ 729.219103][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 729.238578][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.247908][T18695] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 729.281911][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.288760][T18695] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.6184: attempt to clear invalid blocks 983261 len 1 [ 729.339331][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.345946][T18695] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.6184: Invalid inode table block 0 in block_group 0 [ 729.372447][T18705] FAT-fs (loop2): Directory bread(block 64) failed [ 729.379042][T18705] FAT-fs (loop2): Directory bread(block 65) failed [ 729.404814][T18705] FAT-fs (loop2): Directory bread(block 66) failed [ 729.422441][T18705] FAT-fs (loop2): Directory bread(block 67) failed [ 729.433319][T18705] FAT-fs (loop2): Directory bread(block 68) failed [ 729.456045][T18705] FAT-fs (loop2): Directory bread(block 69) failed [ 729.462851][T18705] FAT-fs (loop2): Directory bread(block 70) failed [ 729.513208][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.522891][T18705] FAT-fs (loop2): Directory bread(block 71) failed [ 729.529562][T18695] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 729.552948][T18705] FAT-fs (loop2): Directory bread(block 72) failed [ 729.559558][T18705] FAT-fs (loop2): Directory bread(block 73) failed [ 729.573788][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.636965][T18695] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 729.716720][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.754340][T18695] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.6184: Invalid inode table block 0 in block_group 0 [ 729.843363][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.849945][T18695] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 729.901351][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 729.944317][T18695] EXT4-fs error (device loop4): ext4_truncate:4279: inode #11: comm syz.4.6184: mark_inode_dirty error [ 730.021338][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 730.042544][T18695] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 730.075522][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 730.108550][T18695] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.6184: Invalid inode table block 0 in block_group 0 [ 730.170715][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 730.195174][T18695] EXT4-fs (loop4): 1 truncate cleaned up [ 730.211153][T18695] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,noblock_validity,. Quota mode: none. [ 730.300304][T18695] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.6184: Invalid inode table block 0 in block_group 0 [ 730.364301][T18695] EXT4-fs (loop4): Remounting filesystem read-only [ 730.387157][T18725] loop1: detected capacity change from 0 to 4096 [ 730.494781][T18734] loop3: detected capacity change from 0 to 512 [ 730.596510][T18734] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.6203: bad orphan inode 15 [ 730.625716][T18725] ntfs: (device loop1): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 730.639417][T18734] ext4_test_bit(bit=14, block=5) = 0 [ 730.650664][T18734] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 730.695508][T18739] loop4: detected capacity change from 0 to 256 [ 730.726519][T18725] ntfs: volume version 3.1. [ 731.139464][T18750] device erspan1 entered promiscuous mode [ 731.400038][T18770] loop4: detected capacity change from 0 to 256 [ 731.503382][T18770] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 731.583808][T18776] loop2: detected capacity change from 0 to 1764 [ 731.594206][T18779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.728745][T18776] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 732.498478][T18814] loop2: detected capacity change from 0 to 256 [ 732.566979][T18814] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 732.629738][T18819] [U] v3f"S/4:XTzWtlW= [ 732.657286][T18819] [U] J"e:" [ 732.668776][T18819] [U] [ 732.811023][T18823] loop0: detected capacity change from 0 to 128 [ 732.873677][T18794] loop1: detected capacity change from 0 to 32768 [ 732.928562][T18823] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 732.969343][T18794] (syz.1.6232,18794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 733.069809][ T1226] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 733.092282][T18794] (syz.1.6232,18794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 733.122844][T18833] loop2: detected capacity change from 0 to 256 [ 733.211611][T18794] JBD2: Ignoring recovery information on journal [ 733.253117][T18839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6254'. [ 733.263163][T18839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6254'. [ 733.272547][T18839] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6254'. [ 733.320695][T18833] FAT-fs (loop2): Directory bread(block 64) failed [ 733.327307][T18833] FAT-fs (loop2): Directory bread(block 65) failed [ 733.414156][T18833] FAT-fs (loop2): Directory bread(block 66) failed [ 733.435675][T18833] FAT-fs (loop2): Directory bread(block 67) failed [ 733.442393][T18833] FAT-fs (loop2): Directory bread(block 68) failed [ 733.454230][T18846] loop3: detected capacity change from 0 to 4096 [ 733.468284][T18794] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 733.499674][T18833] FAT-fs (loop2): Directory bread(block 69) failed [ 733.509309][T18833] FAT-fs (loop2): Directory bread(block 70) failed [ 733.530492][T18833] FAT-fs (loop2): Directory bread(block 71) failed [ 733.544204][T18846] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 733.553829][T18833] FAT-fs (loop2): Directory bread(block 72) failed [ 733.581287][T18849] nvme_fabrics: missing parameter 'transport=%s' [ 733.592062][T18833] FAT-fs (loop2): Directory bread(block 73) failed [ 733.600516][T18849] nvme_fabrics: missing parameter 'nqn=%s' [ 733.696036][T18846] ntfs3: loop3: failed to convert "c46c" to maccenteuro [ 733.729162][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 733.953568][T18821] loop4: detected capacity change from 0 to 40427 [ 734.015679][T18821] F2FS-fs (loop4): invalid crc value [ 734.086783][T18821] F2FS-fs (loop4): Mismatch valid blocks 2 vs. 3 [ 734.109932][T18821] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 734.153634][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6262'. [ 734.213656][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6262'. [ 734.529184][T18874] loop1: detected capacity change from 0 to 64 [ 734.590489][T18874] Bad inode number on dev loop1: 6 is out of range [ 734.779644][T18882] loop4: detected capacity change from 0 to 256 [ 734.834084][T18876] loop3: detected capacity change from 0 to 4096 [ 734.870456][T18886] loop0: detected capacity change from 0 to 512 [ 734.901357][T18876] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 734.938005][T18882] FAT-fs (loop4): Directory bread(block 64) failed [ 734.972169][T18882] FAT-fs (loop4): Directory bread(block 65) failed [ 734.982335][T18886] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 735.013858][T18882] FAT-fs (loop4): Directory bread(block 66) failed [ 735.032955][T18886] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.6275: Invalid block bitmap block 0 in block_group 0 [ 735.068573][T18882] FAT-fs (loop4): Directory bread(block 67) failed [ 735.075742][T18882] FAT-fs (loop4): Directory bread(block 68) failed [ 735.082690][T18882] FAT-fs (loop4): Directory bread(block 69) failed [ 735.090035][T18882] FAT-fs (loop4): Directory bread(block 70) failed [ 735.097198][T18882] FAT-fs (loop4): Directory bread(block 71) failed [ 735.104159][T18882] FAT-fs (loop4): Directory bread(block 72) failed [ 735.110935][T18882] FAT-fs (loop4): Directory bread(block 73) failed [ 735.214528][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.221148][T18886] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 735.225378][T18876] ntfs3: loop3: failed to convert "076c" to cp949 [ 735.271893][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.286739][T18886] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.6275: attempt to clear invalid blocks 983261 len 1 [ 735.339268][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.362126][T18886] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.6275: Invalid inode table block 0 in block_group 0 [ 735.406741][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.433902][T18886] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 735.453913][T18892] loop3: detected capacity change from 0 to 128 [ 735.479192][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.496924][T18886] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 735.507455][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.511473][ T4244] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 735.522256][T18886] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.6275: Invalid inode table block 0 in block_group 0 [ 735.535993][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.546033][T18886] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 735.562342][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.570073][T18886] EXT4-fs error (device loop0): ext4_truncate:4279: inode #11: comm syz.0.6275: mark_inode_dirty error [ 735.590071][T18892] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 735.612669][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.641988][T18886] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 735.688680][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.693017][T18898] loop2: detected capacity change from 0 to 4096 [ 735.716965][T18886] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.6275: Invalid inode table block 0 in block_group 0 [ 735.737715][ T144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 735.756383][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 735.764216][T18886] EXT4-fs (loop0): 1 truncate cleaned up [ 735.774609][T18900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6280'. [ 735.788874][T18886] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,noblock_validity,. Quota mode: none. [ 735.838627][T18900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6280'. [ 735.860422][T18900] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6280'. [ 735.878928][T18898] ntfs: volume version 3.1. [ 735.938824][ T4244] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 735.947919][ T4244] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 735.977604][T18886] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.6275: Invalid inode table block 0 in block_group 0 [ 735.980693][ T4244] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 736.018495][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.069610][T18886] EXT4-fs (loop0): Remounting filesystem read-only [ 736.090766][ T4244] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 736.569769][ T4244] gspca_sn9c2028: read1 error -71 [ 736.591205][ T4244] gspca_sn9c2028: read1 error -71 [ 736.596343][ T4244] sn9c2028: probe of 2-1:220.0 failed with error -71 [ 736.606193][ T4244] usb 2-1: USB disconnect, device number 20 [ 737.182002][T18914] netlink: 'syz.0.6295': attribute type 5 has an invalid length. [ 737.240924][T18916] loop1: detected capacity change from 0 to 256 [ 737.284227][T18918] loop2: detected capacity change from 0 to 512 [ 737.323388][T18921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6292'. [ 737.325704][T18916] exfat: Deprecated parameter 'utf8' [ 737.385058][T18916] exfat: Deprecated parameter 'utf8' [ 737.404962][T18916] exfat: Deprecated parameter 'namecase' [ 737.422062][T18918] EXT4-fs (loop2): 1 truncate cleaned up [ 737.436257][T18918] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,nombcache,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,data_err=abort,. Quota mode: writeback. [ 737.486592][T18916] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 737.680417][T18928] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 737.749709][T18930] ieee802154 phy0 wpan0: encryption failed: -22 [ 737.864770][T18935] CIFS: VFS: Malformed UNC in devname [ 738.304384][T18955] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 738.308657][T18956] loop0: detected capacity change from 0 to 512 [ 738.407802][T18952] loop1: detected capacity change from 0 to 4096 [ 738.447341][T18956] EXT4-fs (loop0): 1 truncate cleaned up [ 738.467083][T18956] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,nombcache,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,data_err=abort,. Quota mode: writeback. [ 738.605897][T18952] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 738.639824][T18946] loop3: detected capacity change from 0 to 32768 [ 738.737064][T18946] (syz.3.6305,18946,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 738.737275][T18963] CIFS: VFS: Malformed UNC in devname [ 738.782983][T18952] ntfs3: loop1: failed to convert "c46c" to maccenteuro [ 738.844308][T18946] (syz.3.6305,18946,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 739.004939][T18946] JBD2: Ignoring recovery information on journal [ 739.158330][T18946] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 739.424781][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 739.473416][T18984] ieee802154 phy0 wpan0: encryption failed: -22 [ 739.793441][T18997] loop1: detected capacity change from 0 to 128 [ 739.867599][T18997] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 739.944834][T18997] hpfs: filesystem error: improperly stopped [ 739.984172][T18997] hpfs: You really don't want any checks? You are crazy... [ 739.991993][T18997] hpfs: hpfs_map_sector(): read error [ 740.052043][T18997] hpfs: code page support is disabled [ 740.058543][T18997] hpfs: hpfs_map_sector(): read error [ 740.064587][T18997] hpfs: hpfs_map_sector(): read error [ 740.071533][T18997] hpfs: filesystem error: unable to find root dir [ 740.244237][T19009] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.6334' sets config #0 [ 740.266576][T19011] loop4: detected capacity change from 0 to 64 [ 740.321934][T19015] loop1: detected capacity change from 0 to 256 [ 740.720374][T19034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6346'. [ 740.729475][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6346'. [ 740.758329][T19037] loop2: detected capacity change from 0 to 1024 [ 740.824259][T19034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6346'. [ 740.919180][T18989] loop0: detected capacity change from 0 to 40427 [ 740.944519][T19037] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,discard,sb=0x0000000000000001,lazytime,noload,bsddf,journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 741.039758][T18989] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 741.078219][T19037] EXT4-fs (loop2): Cannot specify journal on remount [ 741.097294][T18989] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 741.136906][T18989] F2FS-fs (loop0): invalid crc value [ 741.159068][T18989] F2FS-fs (loop0): Found nat_bits in checkpoint [ 741.359302][T19060] netlink: 'syz.4.6355': attribute type 2 has an invalid length. [ 741.380560][T19060] netlink: 'syz.4.6355': attribute type 3 has an invalid length. [ 741.390392][T18989] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 741.432738][T18989] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 741.751153][T19073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.187191][T19087] netlink: 'syz.4.6370': attribute type 21 has an invalid length. [ 742.215656][T19087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6370'. [ 742.232016][T19087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6370'. [ 742.315785][T19091] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 742.360330][T19093] loop3: detected capacity change from 0 to 128 [ 742.902625][T19113] loop0: detected capacity change from 0 to 8192 [ 742.975745][T19113] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 742.998764][T19113] REISERFS (device loop0): using ordered data mode [ 743.005411][T19113] reiserfs: using flush barriers [ 743.027184][T19113] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 743.140190][T19127] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.6387' sets config #0 [ 743.149430][T19113] REISERFS (device loop0): checking transaction log (loop0) [ 743.204128][T19113] REISERFS (device loop0): Using rupasov hash to sort names [ 743.253842][T19113] REISERFS (device loop0): using 3.5.x disk format [ 743.275346][T19113] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 743.331737][T19113] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 743.375058][T19113] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 743.415691][T19113] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 743.479862][T19113] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 743.521888][T19113] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 743.582266][T19113] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 743.608222][ T9132] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 743.870770][T19145] netlink: 328 bytes leftover after parsing attributes in process `syz.3.6397'. [ 743.880325][ T9132] usb 2-1: Using ep0 maxpacket: 8 [ 744.095407][T19147] loop0: detected capacity change from 0 to 4096 [ 744.122752][T19147] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 744.163511][T19154] device lo entered promiscuous mode [ 744.186577][ T9132] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 744.201927][T19154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.211270][ T9132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.278303][T19157] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.6402' sets config #0 [ 744.297732][ T9132] usb 2-1: Product: syz [ 744.310699][ T9132] usb 2-1: Manufacturer: syz [ 744.335592][ T9132] usb 2-1: SerialNumber: syz [ 744.370329][ T9132] usb 2-1: config 0 descriptor?? [ 744.397368][ T4188] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 744.416232][ T4188] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 744.435013][ T9132] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 744.442413][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 744.611745][T19169] netlink: 'syz.2.6410': attribute type 10 has an invalid length. [ 744.642730][T19169] device veth0_macvtap left promiscuous mode [ 744.662284][ T9132] usb 2-1: USB disconnect, device number 21 [ 744.677595][T19169] batman_adv: batadv0: Adding interface: macvtap0 [ 744.718794][T19169] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.782515][T19169] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 744.891934][T19179] device lo entered promiscuous mode [ 744.936953][T19179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.048728][T19189] netlink: 'syz.4.6418': attribute type 1 has an invalid length. [ 745.462254][T19223] device lo entered promiscuous mode [ 745.468288][T19222] loop4: detected capacity change from 0 to 256 [ 745.493819][T19223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.583217][T19222] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 745.611353][T19222] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 745.644996][T19222] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 745.660296][T19231] sctp: [Deprecated]: syz.1.6441 (pid 19231) Use of int in maxseg socket option. [ 745.660296][T19231] Use struct sctp_assoc_value instead [ 745.688963][T19235] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6442'. [ 745.717705][T19222] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805d9421e0 iblock : 16, err : -5) [ 745.769125][T19222] exFAT-fs (loop4): Filesystem has been set read-only [ 745.844646][ T4173] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 745.972307][ T9128] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 746.229195][ T4173] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 746.237629][ T9128] usb 4-1: Using ep0 maxpacket: 8 [ 746.248430][ T4173] usb 3-1: config 0 has no interface number 0 [ 746.282836][ T4173] usb 3-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 746.307457][ T4173] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 746.322582][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.347783][ T4173] usb 3-1: config 0 descriptor?? [ 746.401897][ T4173] usb 3-1: Found UVC 0.00 device (8086:0b5b) [ 746.420054][ T4173] usb 3-1: No valid video chain found. [ 746.501406][T19252] loop1: detected capacity change from 0 to 32768 [ 746.539409][ T9128] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 746.548528][ T9128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.557153][ T9128] usb 4-1: Product: syz [ 746.561764][ T9128] usb 4-1: Manufacturer: syz [ 746.566496][ T9128] usb 4-1: SerialNumber: syz [ 746.576714][ T9128] usb 4-1: config 0 descriptor?? [ 746.583043][T19252] (syz.1.6450,19252,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 746.604825][T19252] (syz.1.6450,19252,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 746.627232][ T9128] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 746.644490][ T9128] usb 3-1: USB disconnect, device number 4 [ 746.671087][T19252] JBD2: Ignoring recovery information on journal [ 746.765417][T19252] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 746.850888][ T4284] usb 4-1: USB disconnect, device number 8 [ 746.891619][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 746.975772][T19267] netlink: 'syz.0.6456': attribute type 10 has an invalid length. [ 746.984080][T19267] device veth0_macvtap left promiscuous mode [ 747.034488][T19267] batman_adv: batadv0: Adding interface: macvtap0 [ 747.056748][T19267] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.097668][T19267] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 747.393861][T19280] loop0: detected capacity change from 0 to 2048 [ 747.493380][T19288] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.531323][T19280] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 747.543541][T19291] netlink: 'syz.1.6465': attribute type 1 has an invalid length. [ 747.575834][T19291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6465'. [ 747.589613][T19280] Remounting filesystem read-only [ 747.602032][T19291] netlink: 'syz.1.6465': attribute type 1 has an invalid length. [ 747.627292][T19282] loop2: detected capacity change from 0 to 4096 [ 747.634908][T19293] netlink: 'syz.3.6467': attribute type 8 has an invalid length. [ 747.662605][T19293] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.6467'. [ 747.688160][T19282] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 747.933012][ T4190] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 747.950004][ T4190] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 747.983957][ T4190] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 748.250487][ T4244] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 748.312144][T19321] x_tables: duplicate entry at hook 3 [ 748.389677][T19327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6483'. [ 748.420012][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6483'. [ 748.538850][T19334] sctp: [Deprecated]: syz.4.6485 (pid 19334) Use of int in maxseg socket option. [ 748.538850][T19334] Use struct sctp_assoc_value instead [ 748.553960][ T4244] usb 4-1: Using ep0 maxpacket: 8 [ 748.710033][T19343] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 748.758694][T19343] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 748.780367][T19343] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 748.807439][T19343] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 748.914113][ T4244] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 748.942721][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.958854][T19347] loop4: detected capacity change from 0 to 4096 [ 748.972397][ T4244] usb 4-1: Product: syz [ 748.977127][ T4244] usb 4-1: Manufacturer: syz [ 748.982598][ T4244] usb 4-1: SerialNumber: syz [ 748.990345][ T4244] usb 4-1: config 0 descriptor?? [ 749.019337][T19347] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 749.040985][T19303] loop1: detected capacity change from 0 to 40427 [ 749.047505][ T4244] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 749.191355][T19303] F2FS-fs (loop1): invalid crc value [ 749.212628][ T4192] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 749.239692][T19303] F2FS-fs (loop1): Found nat_bits in checkpoint [ 749.251020][ T4192] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 749.263565][ T7529] usb 4-1: USB disconnect, device number 9 [ 749.280497][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 749.534270][T19303] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 749.799937][T19377] loop0: detected capacity change from 0 to 4096 [ 749.927167][T19379] netlink: 'syz.3.6504': attribute type 1 has an invalid length. [ 749.929792][T19377] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 749.967839][T19379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6504'. [ 750.021481][T19379] netlink: 'syz.3.6504': attribute type 1 has an invalid length. [ 750.103860][T19366] loop4: detected capacity change from 0 to 32768 [ 750.258787][T19366] XFS (loop4): Mounting V5 Filesystem [ 750.385933][T19373] loop2: detected capacity change from 0 to 32768 [ 750.421851][T19373] [ 750.421851][T19373] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 750.421851][T19373] [ 750.474767][T19397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6509'. [ 750.484677][T19397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6509'. [ 750.535229][T19399] loop3: detected capacity change from 0 to 1024 [ 750.571684][T19366] XFS (loop4): Ending clean mount [ 750.586607][T19373] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 750.586607][T19373] [ 750.711370][T19373] xtLookup: xtSearch returned -5 [ 750.742921][T19373] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 750.742921][T19373] [ 750.774409][T19400] loop0: detected capacity change from 0 to 4096 [ 750.817073][ T4192] XFS (loop4): Unmounting Filesystem [ 750.902245][ T4314] [ 750.902245][ T4314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 750.902245][ T4314] [ 750.927123][T19400] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 750.968649][ T4314] [ 750.968649][ T4314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 750.968649][ T4314] [ 751.075474][ T275] [ 751.075474][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 751.075474][ T275] [ 751.175351][T19400] ntfs: (device loop0): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 751.183301][ T4190] [ 751.183301][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 751.183301][ T4190] [ 751.244027][ T4190] [ 751.244027][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 751.244027][ T4190] [ 751.254681][T19400] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 751.255706][T19400] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 751.294736][T19400] ntfs: volume version 3.1. [ 751.318026][T19400] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 751.327456][T19400] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 751.338669][T19400] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 751.459319][ T4284] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 751.668323][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6518'. [ 751.704706][T19419] netlink: 'syz.0.6517': attribute type 1 has an invalid length. [ 751.737638][T19419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6517'. [ 751.763517][T19419] NCSI netlink: No device for ifindex 0 [ 751.844525][ T4284] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 751.852849][ T4284] usb 4-1: config 0 has no interface number 0 [ 751.862809][ T4284] usb 4-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 751.928326][ T4284] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 751.954271][ T4284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.993218][ T4284] usb 4-1: config 0 descriptor?? [ 752.060541][ T4284] usb 4-1: Found UVC 0.00 device (8086:0b5b) [ 752.067468][ T4284] usb 4-1: No valid video chain found. [ 752.216829][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6535'. [ 752.313598][ T9132] usb 4-1: USB disconnect, device number 10 [ 752.341517][T19458] loop0: detected capacity change from 0 to 64 [ 752.552570][T19474] No such timeout policy "syz0" [ 752.575296][T19477] ipt_ECN: cannot use operation on non-tcp rule [ 752.686839][T19479] loop2: detected capacity change from 0 to 1024 [ 752.799081][ T1226] hfsplus: b-tree write err: -5, ino 4 [ 752.937300][T19495] loop1: detected capacity change from 0 to 64 [ 753.146739][T19505] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 753.179072][T19505] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 753.200263][T19505] overlayfs: missing 'lowerdir' [ 753.212511][T19509] program syz.0.6563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.388360][T19518] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 753.418934][T19518] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 753.432579][T19518] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 753.448504][T19518] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 753.538764][T19488] loop4: detected capacity change from 0 to 32768 [ 753.619303][T19488] [ 753.619303][T19488] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.619303][T19488] [ 753.675077][T19488] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 753.675077][T19488] [ 753.709814][T19488] xtLookup: xtSearch returned -5 [ 753.721441][T19488] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 753.721441][T19488] [ 753.750471][T19533] __nla_validate_parse: 2 callbacks suppressed [ 753.750490][T19533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6573'. [ 753.808886][T19533] unsupported nlmsg_type 40 [ 753.818793][ T4314] [ 753.818793][ T4314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.818793][ T4314] [ 753.862537][ T4314] [ 753.862537][ T4314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.862537][ T4314] [ 753.879112][T19535] loop1: detected capacity change from 0 to 1024 [ 753.898139][ T275] [ 753.898139][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.898139][ T275] [ 753.917116][ T4192] [ 753.917116][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.917116][ T4192] [ 753.941876][ T4192] [ 753.941876][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 753.941876][ T4192] [ 754.443900][T19524] loop0: detected capacity change from 0 to 32768 [ 754.519314][T19541] loop2: detected capacity change from 0 to 8192 [ 754.592842][T19551] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 754.614160][T19551] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 754.646271][T19524] jfs_rename: dtInsert returned -EIO [ 754.655221][T19546] loop1: detected capacity change from 0 to 4096 [ 754.682215][T19551] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 754.696128][T19551] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 754.723445][T19541] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 754.744400][T19546] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 754.766477][T19541] REISERFS (device loop2): using ordered data mode [ 754.773930][T19541] reiserfs: using flush barriers [ 754.824500][T19546] ntfs: (device loop1): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 754.882546][T19541] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 754.957183][T19546] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 754.977593][T19561] netlink: 'syz.3.6588': attribute type 1 has an invalid length. [ 755.033644][T19561] netlink: 'syz.3.6588': attribute type 2 has an invalid length. [ 755.075090][T19541] REISERFS (device loop2): checking transaction log (loop2) [ 755.089767][T19546] ntfs: volume version 3.1. [ 755.331602][T19571] tmpfs: Bad value for 'mpol' [ 755.526207][T19541] REISERFS (device loop2): Using tea hash to sort names [ 755.556159][T19541] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 755.566973][T19570] loop4: detected capacity change from 0 to 4096 [ 755.641701][T19541] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 755.680071][T19570] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 756.037066][T19589] raw_sendmsg: syz.1.6603 forgot to set AF_INET. Fix it! [ 756.299241][T19591] device wlan0 entered promiscuous mode [ 756.363341][T19591] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 756.412702][ T6164] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 756.471542][T19603] loop0: detected capacity change from 0 to 8 [ 756.670144][T19585] loop3: detected capacity change from 0 to 32768 [ 756.712619][ T6164] usb 3-1: Using ep0 maxpacket: 16 [ 756.804179][T19585] XFS (loop3): Mounting V5 Filesystem [ 756.846946][ T6164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 756.901544][T19585] XFS (loop3): Ending clean mount [ 756.926946][T19585] XFS (loop3): Quotacheck needed: Please wait. [ 757.097015][ T6164] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 757.114887][ T6164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.117044][T19585] XFS (loop3): Quotacheck: Done. [ 757.167975][ T6164] usb 3-1: Product: syz [ 757.185463][ T6164] usb 3-1: Manufacturer: syz [ 757.215808][ T6164] usb 3-1: SerialNumber: syz [ 757.241360][ T6164] usb 3-1: config 0 descriptor?? [ 757.283978][ T4194] XFS (loop3): Unmounting Filesystem [ 757.290550][ T6164] hub 3-1:0.0: bad descriptor, ignoring hub [ 757.311137][ T6164] hub: probe of 3-1:0.0 failed with error -5 [ 757.584422][ T6164] usb 3-1: USB disconnect, device number 5 [ 758.097039][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6625'. [ 758.180596][T19643] loop1: detected capacity change from 0 to 32768 [ 758.203570][T19669] loop4: detected capacity change from 0 to 764 [ 758.278688][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6638'. [ 758.306641][T19669] rock: directory entry would overflow storage [ 758.312845][T19669] rock: sig=0x4654, size=5, remaining=4 [ 758.336893][T19643] jfs_rename: dtInsert returned -EIO [ 758.370801][T19669] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 758.404577][T19669] overlayfs: missing 'lowerdir' [ 758.887565][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6652'. [ 759.303963][ T6164] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 759.409246][T19728] loop0: detected capacity change from 0 to 128 [ 759.512313][T19728] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 759.573995][T19728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 759.587658][T19677] loop3: detected capacity change from 0 to 40427 [ 759.590726][T19734] loop2: detected capacity change from 0 to 512 [ 759.627847][ T6164] usb 5-1: Using ep0 maxpacket: 32 [ 759.635178][T19677] F2FS-fs (loop3): invalid crc value [ 759.667563][T19728] UDF-fs: bad mount option "*7d~\%;L߮MخMWlpLg\+Ս~ m{uj+/d`6J[}gB#g" or missing value [ 759.735383][T19677] F2FS-fs (loop3): Found nat_bits in checkpoint [ 759.790395][T19734] __quota_error: 4 callbacks suppressed [ 759.790414][T19734] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 759.823495][ T6164] usb 5-1: config 0 has too many interfaces: 195, using maximum allowed: 32 [ 759.837042][ T6164] usb 5-1: config 0 has an invalid interface number: 196 but max is 194 [ 759.850053][ T6164] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 195 [ 759.859512][ T6164] usb 5-1: config 0 has no interface number 0 [ 759.865674][ T6164] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 759.876163][ T6164] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 759.888142][ T6164] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 759.899036][T19677] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 759.907348][ T6164] usb 5-1: config 0 interface 196 has no altsetting 0 [ 759.930289][T19734] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 759.956674][T19734] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.6669: Failed to acquire dquot type 1 [ 760.009450][T19734] EXT4-fs (loop2): 1 truncate cleaned up [ 760.035340][T19734] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 760.072371][T19734] ext4 filesystem being mounted at /1440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.101582][ T7529] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 760.132275][T19734] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 760.145436][ T6164] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 760.154630][ T6164] usb 5-1: New USB device strings: Mfr=72, Product=223, SerialNumber=3 [ 760.167605][ T6164] usb 5-1: Product: syz [ 760.171817][ T6164] usb 5-1: Manufacturer: syz [ 760.177901][T19734] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 760.188285][ T6164] usb 5-1: SerialNumber: syz [ 760.193899][T19734] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.6669: Failed to acquire dquot type 1 [ 760.219894][ T6164] usb 5-1: config 0 descriptor?? [ 760.251319][T19704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 760.551674][ T7529] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 760.564734][T19760] loop2: detected capacity change from 0 to 256 [ 760.582701][ T6164] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 760.590544][ T7529] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 760.600050][ T6164] ipheth: probe of 5-1:0.196 failed with error -71 [ 760.624570][ T6164] usb 5-1: USB disconnect, device number 24 [ 760.683107][T19760] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 760.711549][ T7529] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 760.733682][ T7529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 760.742351][T19760] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 760.762806][ T7529] usb 2-1: SerialNumber: syz [ 760.787525][T19760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 760.820993][ T7529] usb 2-1: 0:2 : does not exist [ 761.095706][T19780] loop3: detected capacity change from 0 to 764 [ 761.258659][T19780] Symlink component flag not implemented [ 761.277045][ T7529] usb 2-1: USB disconnect, device number 22 [ 761.306081][T19780] Symlink component flag not implemented (15) [ 761.657992][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6702'. [ 761.672533][T19797] loop2: detected capacity change from 0 to 8192 [ 761.733289][T19797] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 761.774336][T19797] REISERFS (device loop2): using ordered data mode [ 761.795792][T19797] reiserfs: using flush barriers [ 761.816823][T19797] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 761.875782][T19797] REISERFS (device loop2): checking transaction log (loop2) [ 761.906533][T19813] loop0: detected capacity change from 0 to 256 [ 761.962282][ T4173] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 761.970693][T19813] exfat: Deprecated parameter 'utf8' [ 762.034879][T19806] loop3: detected capacity change from 0 to 32768 [ 762.184739][T19797] REISERFS (device loop2): Using tea hash to sort names [ 762.201471][T19797] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 762.358327][ T4173] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 762.370985][T19823] netlink: 'syz.0.6707': attribute type 21 has an invalid length. [ 762.378868][T19823] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6707'. [ 762.388408][ T4173] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 762.415026][T19823] netlink: 'syz.0.6707': attribute type 4 has an invalid length. [ 762.441794][T19823] netlink: 'syz.0.6707': attribute type 5 has an invalid length. [ 762.443674][ T4173] usb 5-1: config 0 interface 0 has no altsetting 0 [ 762.453200][T19825] loop1: detected capacity change from 0 to 764 [ 762.463214][T19823] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6707'. [ 762.531066][T19827] loop3: detected capacity change from 0 to 512 [ 762.647202][ T4173] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 762.662567][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 762.677291][T19825] Symlink component flag not implemented [ 762.688339][ T4173] usb 5-1: Product: syz [ 762.700200][ T4173] usb 5-1: Manufacturer: syz [ 762.706419][T19827] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 762.716052][ T4173] usb 5-1: SerialNumber: syz [ 762.725719][ T4173] usb 5-1: config 0 descriptor?? [ 762.732653][T19825] Symlink component flag not implemented (15) [ 762.760236][T19827] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 762.776373][ T4173] hub 5-1:0.0: bad descriptor, ignoring hub [ 762.782881][ T4173] hub: probe of 5-1:0.0 failed with error -5 [ 762.798572][ T4173] usb 5-1: selecting invalid altsetting 0 [ 762.808711][T19827] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.6711: Failed to acquire dquot type 1 [ 762.895551][T19827] EXT4-fs (loop3): 1 truncate cleaned up [ 762.901268][T19827] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 763.008428][T19834] loop0: detected capacity change from 0 to 2048 [ 763.032928][T19827] ext4 filesystem being mounted at /1290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.126067][T19827] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 763.178709][T19827] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 763.192043][T19827] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.6711: Failed to acquire dquot type 1 [ 763.214096][ T4173] usb 5-1: USB disconnect, device number 25 [ 763.305280][T19834] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.682197][T19864] loop2: detected capacity change from 0 to 128 [ 763.730910][T19866] loop1: detected capacity change from 0 to 256 [ 763.786802][T19864] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 763.831480][T19864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.862695][T19866] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 763.905970][T19866] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 763.914873][T19864] UDF-fs: bad mount option "*7d~\%;L߮MخMWlpLg\+Ս~ m{uj+/d`6J[}gB#g" or missing value [ 763.940518][T19879] loop4: detected capacity change from 0 to 2048 [ 763.964021][T19866] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 764.040610][T19879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.111310][T19883] loop2: detected capacity change from 0 to 256 [ 764.208805][T19883] exfat: Deprecated parameter 'utf8' [ 764.509174][T19899] loop1: detected capacity change from 0 to 2048 [ 764.624074][T19909] loop4: detected capacity change from 0 to 128 [ 764.645385][ T5974] Alternate GPT is invalid, using primary GPT. [ 764.657660][ T5974] loop1: p2 p3 p7 [ 764.724770][T19899] Alternate GPT is invalid, using primary GPT. [ 764.731828][T19909] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 764.745426][T19899] loop1: p2 p3 p7 [ 764.789389][T19909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 764.823631][T19911] loop2: detected capacity change from 0 to 8192 [ 764.830517][T19909] UDF-fs: bad mount option "*7d~\%;L߮MخMWlpLg\+Ս~ m{uj+/d`6J[}gB#g" or missing value [ 764.862153][T19874] loop3: detected capacity change from 0 to 40427 [ 764.908581][T19911] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 764.919695][ T3560] Alternate GPT is invalid, using primary GPT. [ 764.926551][T19911] REISERFS (device loop2): using journaled data mode [ 764.933966][ T3560] loop1: p2 p3 p7 [ 764.961621][T19911] reiserfs: using flush barriers [ 764.985335][T19911] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 765.031411][T19874] F2FS-fs (loop3): invalid crc value [ 765.039754][T19874] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 765.119882][T19911] REISERFS (device loop2): checking transaction log (loop2) [ 765.130074][T19874] F2FS-fs (loop3): Found nat_bits in checkpoint [ 765.143046][T19911] REISERFS (device loop2): Using r5 hash to sort names [ 765.183118][T19911] reiserfs: enabling write barrier flush mode [ 765.221949][T19911] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 765.240337][T19923] loop1: detected capacity change from 0 to 2048 [ 765.312814][T19874] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 765.319673][T19874] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 765.324025][T19911] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 765.370886][T19923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 765.419413][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.425829][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 765.447452][T19874] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 765.471019][ T6164] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 765.871341][T19918] loop0: detected capacity change from 0 to 32768 [ 765.912953][ T6164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.928700][ T6164] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.981706][T19934] netlink: 'syz.1.6759': attribute type 21 has an invalid length. [ 766.026404][T19934] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6759'. [ 766.057662][T19918] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 766.057662][T19918] [ 766.065285][T19934] netlink: 'syz.1.6759': attribute type 4 has an invalid length. [ 766.119076][T19918] ERROR: (device loop0): remounting filesystem as read-only [ 766.128081][ T6164] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 766.143992][ T6164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 766.149866][T19934] netlink: 'syz.1.6759': attribute type 5 has an invalid length. [ 766.152042][ T6164] usb 5-1: SerialNumber: syz [ 766.160154][T19918] ialloc: diAlloc returned -5! [ 766.179628][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 766.188723][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 766.194599][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 766.200482][T19934] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6759'. [ 766.270130][ T6164] usb 5-1: 0:2 : does not exist [ 766.316720][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 766.333250][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 766.352408][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 766.453513][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 766.453876][ T4357] udevd[4357]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 766.517671][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 766.731725][ T4173] usb 5-1: USB disconnect, device number 26 [ 767.069487][T19967] loop3: detected capacity change from 0 to 128 [ 767.449132][T19977] netlink: 'syz.3.6779': attribute type 21 has an invalid length. [ 767.470427][T19977] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6779'. [ 767.500047][T19977] netlink: 'syz.3.6779': attribute type 4 has an invalid length. [ 767.527390][T19977] netlink: 'syz.3.6779': attribute type 5 has an invalid length. [ 767.567697][T19977] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6779'. [ 767.821975][T19987] loop0: detected capacity change from 0 to 4096 [ 767.910293][T19987] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 768.015758][T19987] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 768.052218][T19971] loop2: detected capacity change from 0 to 32768 [ 768.058940][T19987] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 768.131879][T19987] ntfs: volume version 3.1. [ 768.214786][T20011] netlink: 'syz.4.6798': attribute type 21 has an invalid length. [ 768.222877][T20011] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6798'. [ 768.232409][T20011] netlink: 'syz.4.6798': attribute type 4 has an invalid length. [ 768.240724][T20011] netlink: 'syz.4.6798': attribute type 5 has an invalid length. [ 768.258486][T20011] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6798'. [ 768.298534][T20019] netlink: 'syz.0.6801': attribute type 4 has an invalid length. [ 768.345004][T19971] XFS (loop2): Mounting V5 Filesystem [ 768.625187][ T4264] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 768.661841][T20043] netlink: 22 bytes leftover after parsing attributes in process `syz.4.6808'. [ 768.722707][T19971] XFS (loop2): Ending clean mount [ 768.829670][ T4190] XFS (loop2): Unmounting Filesystem [ 768.853661][T20050] kAFS: Can only specify source 'none' with -o dyn [ 768.933745][T20054] loop4: detected capacity change from 0 to 256 [ 768.986514][T20054] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 769.037108][T20054] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 769.067522][T20054] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 769.096044][ T4264] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 769.104234][ T4264] usb 2-1: config 0 has no interface number 0 [ 769.149208][ T4264] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 769.226635][ T4264] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 769.321301][T20066] loop0: detected capacity change from 0 to 1024 [ 769.357451][T20068] loop4: detected capacity change from 0 to 256 [ 769.448991][ T4264] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 769.469578][T20068] FAT-fs (loop4): Directory bread(block 64) failed [ 769.476705][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.496240][T20068] FAT-fs (loop4): Directory bread(block 65) failed [ 769.513139][ T4264] usb 2-1: Product: syz [ 769.519754][T20068] FAT-fs (loop4): Directory bread(block 66) failed [ 769.530958][ T4264] usb 2-1: Manufacturer: syz [ 769.541764][ T4264] usb 2-1: SerialNumber: syz [ 769.552832][T20068] FAT-fs (loop4): Directory bread(block 67) failed [ 769.575761][T20068] FAT-fs (loop4): Directory bread(block 68) failed [ 769.582598][T20068] FAT-fs (loop4): Directory bread(block 69) failed [ 769.583464][ T4264] usb 2-1: config 0 descriptor?? [ 769.590513][ T6164] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 769.602908][T20068] FAT-fs (loop4): Directory bread(block 70) failed [ 769.615516][T20068] FAT-fs (loop4): Directory bread(block 71) failed [ 769.623700][T20068] FAT-fs (loop4): Directory bread(block 72) failed [ 769.631568][T20023] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 769.664106][ T4264] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 769.683471][T20068] FAT-fs (loop4): Directory bread(block 73) failed [ 769.699441][ T4264] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 769.792267][T20074] netlink: 'syz.2.6812': attribute type 21 has an invalid length. [ 769.807292][T20076] program syz.0.6826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 769.822152][T20074] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6812'. [ 769.857630][T20074] netlink: 'syz.2.6812': attribute type 4 has an invalid length. [ 769.874599][T20074] netlink: 'syz.2.6812': attribute type 5 has an invalid length. [ 769.883393][T20074] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6812'. [ 769.951795][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 770.095605][ T6164] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 770.111737][ T6164] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 770.165166][ T6164] usb 4-1: config 220 has no interface number 2 [ 770.171535][ T6164] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 770.188915][T20088] kAFS: unable to lookup cell '.,' [ 770.204774][ T6164] usb 4-1: config 220 interface 0 has no altsetting 0 [ 770.213897][ T6164] usb 4-1: config 220 interface 76 has no altsetting 0 [ 770.221406][ T6164] usb 4-1: config 220 interface 1 has no altsetting 0 [ 770.231170][ T4264] usb 2-1: USB disconnect, device number 23 [ 770.261870][ T4264] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 770.302908][ T4264] cyberjack 2-1:0.69: device disconnected [ 770.311586][T20092] netlink: 'syz.2.6834': attribute type 12 has an invalid length. [ 770.337689][T20092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6834'. [ 770.430125][T20096] loop2: detected capacity change from 0 to 256 [ 770.437147][ T6164] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 770.484182][ T6164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.509039][ T6164] usb 4-1: Product: syz [ 770.513320][ T6164] usb 4-1: Manufacturer: syz [ 770.531450][ T6164] usb 4-1: SerialNumber: syz [ 770.683047][T20104] netlink: 'syz.4.6840': attribute type 21 has an invalid length. [ 770.698684][T20104] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6840'. [ 770.716538][T20104] netlink: 'syz.4.6840': attribute type 4 has an invalid length. [ 770.727068][T20104] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6840'. [ 770.925630][T20086] loop0: detected capacity change from 0 to 32768 [ 770.960932][ T6164] usb 4-1: selecting invalid altsetting 0 [ 770.973427][ T6164] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 770.988398][ T6164] usb 4-1: No valid video chain found. [ 771.003965][T20086] ERROR: (device loop0): diAllocAG: error reading iag [ 771.003965][T20086] [ 771.061120][T20086] ialloc: diAlloc returned -5! [ 771.139918][ T6164] usb 4-1: selecting invalid altsetting 0 [ 771.145727][ T6164] usbtest: probe of 4-1:220.1 failed with error -22 [ 771.188405][ T6164] usb 4-1: USB disconnect, device number 11 [ 771.620375][ T4244] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 771.951303][ T4244] usb 2-1: Using ep0 maxpacket: 16 [ 772.122760][ T4244] usb 2-1: unable to get BOS descriptor or descriptor too short [ 772.172234][ T6164] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 772.219185][ T4244] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.236456][ T4244] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 772.251517][ T4244] usb 2-1: config 1 interface 0 has no altsetting 0 [ 772.300155][T20183] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 772.330545][T20185] IPv6: NLM_F_CREATE should be specified when creating new route [ 772.400997][ T4284] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 772.443783][ T4244] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 772.460242][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.469696][ T4244] usb 2-1: Product: syz [ 772.473924][ T4244] usb 2-1: Manufacturer: syz [ 772.479667][ T6164] usb 5-1: Using ep0 maxpacket: 8 [ 772.492047][ T4244] usb 2-1: SerialNumber: syz [ 772.622880][ T6164] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 772.631836][ T6164] usb 5-1: config 2 has no interface number 0 [ 772.638396][ T6164] usb 5-1: config 2 interface 31 has no altsetting 0 [ 772.655680][T20191] loop0: detected capacity change from 0 to 32768 [ 772.657445][ T4284] usb 3-1: Using ep0 maxpacket: 16 [ 772.680734][T20191] (syz.0.6883,20191,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 772.702519][T20191] (syz.0.6883,20191,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 772.714870][ T6159] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 772.738092][T20191] JBD2: Ignoring recovery information on journal [ 772.762335][T20131] loop1: detected capacity change from 0 to 512 [ 772.784342][T20191] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 772.817653][ T6164] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 772.817864][ T4284] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 772.848622][ T6164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.857910][ T6164] usb 5-1: Product: syz [ 772.862635][ T6164] usb 5-1: Manufacturer: syz [ 772.867264][ T6164] usb 5-1: SerialNumber: syz [ 772.889383][T20191] [ 772.891766][T20191] ====================================================== [ 772.898814][T20191] WARNING: possible circular locking dependency detected [ 772.905873][T20191] syzkaller #0 Not tainted [ 772.910323][T20191] ------------------------------------------------------ [ 772.917361][T20191] syz.0.6883/20191 is trying to acquire lock: [ 772.918755][ T4284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.923453][T20191] ffff8880747122e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 772.944711][T20191] [ 772.944711][T20191] but task is already holding lock: [ 772.952105][T20191] ffff888074712648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 772.964690][T20191] [ 772.964690][T20191] which lock already depends on the new lock. [ 772.964690][T20191] [ 772.975149][T20191] [ 772.975149][T20191] the existing dependency chain (in reverse order) is: [ 772.984290][T20191] [ 772.984290][T20191] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 772.988381][ T4284] usb 3-1: config 0 has no interface number 0 [ 772.994849][T20191] down_write+0x38/0x60 [ 772.994875][T20191] ocfs2_lock_global_qf+0x1d7/0x290 [ 772.994895][T20191] ocfs2_acquire_dquot+0x29d/0xb10 [ 772.994914][T20191] dqget+0x778/0xeb0 [ 772.994934][T20191] dquot_set_dqblk+0x27/0xf90 [ 773.026803][T20191] quota_setquota+0x4d6/0x590 [ 773.032047][T20191] __se_sys_quotactl+0x28b/0x6f0 [ 773.037539][T20191] do_syscall_64+0x4c/0xa0 [ 773.042776][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.049674][T20191] [ 773.049674][T20191] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 773.057393][T20191] __mutex_lock_common+0x1e3/0x2400 [ 773.063163][T20191] mutex_lock_nested+0x17/0x20 [ 773.068491][T20191] dquot_commit+0x5a/0x410 [ 773.073483][T20191] ext4_write_dquot+0x1f0/0x360 [ 773.078893][T20191] mark_all_dquot_dirty+0x1e3/0x400 [ 773.084654][T20191] __dquot_free_space+0x7ca/0xb90 [ 773.090254][T20191] ext4_free_blocks+0x1b2b/0x24d0 [ 773.095841][T20191] ext4_ext_remove_space+0x1f86/0x42b0 [ 773.101864][T20191] ext4_ext_truncate+0x192/0x240 [ 773.107364][T20191] ext4_truncate+0xa09/0x10f0 [ 773.112594][T20191] ext4_evict_inode+0xb4f/0x1090 [ 773.118086][T20191] evict+0x4c9/0x8d0 [ 773.122535][T20191] ext4_orphan_cleanup+0xad2/0x1320 [ 773.128285][T20191] ext4_fill_super+0x92c9/0x9a40 [ 773.133792][T20191] mount_bdev+0x287/0x3c0 [ 773.138787][T20191] legacy_get_tree+0xe6/0x180 [ 773.144033][T20191] vfs_get_tree+0x88/0x270 [ 773.149006][T20191] do_new_mount+0x24a/0xa40 [ 773.154070][T20191] __se_sys_mount+0x2e3/0x3d0 [ 773.159318][T20191] do_syscall_64+0x4c/0xa0 [ 773.164303][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.170765][T20191] [ 773.170765][T20191] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 773.178526][T20191] down_write+0x38/0x60 [ 773.183216][T20191] ext4_truncate+0x97f/0x10f0 [ 773.188492][T20191] ext4_setattr+0xffe/0x19e0 [ 773.192188][ T4284] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 773.193619][T20191] notify_change+0xbcd/0xee0 [ 773.207418][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 773.207795][T20191] do_truncate+0x1ac/0x240 [ 773.220813][T20191] do_sys_ftruncate+0x31b/0x3d0 [ 773.226222][T20191] do_syscall_64+0x4c/0xa0 [ 773.230530][ T4284] usb 3-1: Product: syz [ 773.231203][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.236471][ T4284] usb 3-1: Manufacturer: syz [ 773.241809][T20191] [ 773.241809][T20191] -> #3 (jbd2_handle){++++}-{0:0}: [ 773.241843][T20191] start_this_handle+0x136f/0x15c0 [ 773.241885][T20191] jbd2__journal_start+0x2b7/0x5a0 [ 773.241904][T20191] jbd2_journal_start+0x26/0x30 [ 773.241931][T20191] ocfs2_start_trans+0x3b2/0x6f0 [ 773.241953][T20191] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 773.241974][T20191] ocfs2_dismount_volume+0x1e1/0x8a0 [ 773.241997][T20191] generic_shutdown_super+0x130/0x300 [ 773.242019][T20191] kill_block_super+0x7c/0xe0 [ 773.242038][T20191] deactivate_locked_super+0x93/0xf0 [ 773.242058][T20191] cleanup_mnt+0x42d/0x4e0 [ 773.242079][T20191] task_work_run+0x125/0x1a0 [ 773.242100][T20191] exit_to_user_mode_loop+0x10f/0x130 [ 773.257699][ T4284] usb 3-1: SerialNumber: syz [ 773.259644][T20191] exit_to_user_mode_prepare+0xee/0x180 [ 773.259674][T20191] syscall_exit_to_user_mode+0x16/0x40 [ 773.299528][ T4284] usb 3-1: config 0 descriptor?? [ 773.305276][T20191] do_syscall_64+0x58/0xa0 [ 773.348013][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.354466][T20191] [ 773.354466][T20191] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 773.363025][T20191] down_read+0x44/0x2e0 [ 773.367748][T20191] ocfs2_start_trans+0x3a6/0x6f0 [ 773.373240][T20191] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 773.379525][T20191] ocfs2_dismount_volume+0x1e1/0x8a0 [ 773.383945][ T4284] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 773.385428][T20191] generic_shutdown_super+0x130/0x300 [ 773.385463][T20191] kill_block_super+0x7c/0xe0 [ 773.385482][T20191] deactivate_locked_super+0x93/0xf0 [ 773.385502][T20191] cleanup_mnt+0x42d/0x4e0 [ 773.385523][T20191] task_work_run+0x125/0x1a0 [ 773.385545][T20191] exit_to_user_mode_loop+0x10f/0x130 [ 773.385567][T20191] exit_to_user_mode_prepare+0xee/0x180 [ 773.385588][T20191] syscall_exit_to_user_mode+0x16/0x40 [ 773.405838][ T4284] usb 3-1: No valid video chain found. [ 773.408897][T20191] do_syscall_64+0x58/0xa0 [ 773.447866][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.454328][T20191] [ 773.454328][T20191] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 773.461926][T20191] ocfs2_start_trans+0x2a7/0x6f0 [ 773.467440][T20191] ocfs2_write_info+0x112/0x360 [ 773.472854][T20191] dquot_set_dqinfo+0x459/0x6c0 [ 773.478264][T20191] quota_setinfo+0x2cf/0x2e0 [ 773.483423][T20191] __se_sys_quotactl+0x28b/0x6f0 [ 773.488953][T20191] do_syscall_64+0x4c/0xa0 [ 773.493934][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.500396][T20191] [ 773.500396][T20191] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 773.509306][T20191] __lock_acquire+0x2c42/0x7d10 [ 773.514731][T20191] lock_acquire+0x19e/0x400 [ 773.519796][T20191] down_write+0x38/0x60 [ 773.524516][T20191] ocfs2_lock_global_qf+0x1fe/0x290 [ 773.530260][T20191] ocfs2_acquire_dquot+0x29d/0xb10 [ 773.535902][T20191] dqget+0x778/0xeb0 [ 773.540540][T20191] dquot_set_dqblk+0x27/0xf90 [ 773.545763][T20191] quota_setquota+0x4d6/0x590 [ 773.550996][T20191] __se_sys_quotactl+0x28b/0x6f0 [ 773.556473][T20191] do_syscall_64+0x4c/0xa0 [ 773.561453][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.567897][T20191] [ 773.567897][T20191] other info that might help us debug this: [ 773.567897][T20191] [ 773.578133][T20191] Chain exists of: [ 773.578133][T20191] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 [ 773.578133][T20191] [ 773.595453][T20191] Possible unsafe locking scenario: [ 773.595453][T20191] [ 773.602932][T20191] CPU0 CPU1 [ 773.608368][T20191] ---- ---- [ 773.613967][T20191] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 773.619633][ T4284] usb 3-1: USB disconnect, device number 6 [ 773.621572][T20191] lock(&dquot->dq_lock); [ 773.621593][T20191] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 773.644372][T20191] lock(&ocfs2_quota_ip_alloc_sem_key); [ 773.650058][T20191] [ 773.650058][T20191] *** DEADLOCK *** [ 773.650058][T20191] [ 773.658227][T20191] 3 locks held by syz.0.6883/20191: [ 773.663458][T20191] #0: ffff888077cd80e0 (&type->s_umount_key#64){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 773.673709][T20191] #1: ffff88806078e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28b/0xb10 [ 773.683772][T20191] #2: ffff888074712648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 773.696790][T20191] [ 773.696790][T20191] stack backtrace: [ 773.702678][T20191] CPU: 1 PID: 20191 Comm: syz.0.6883 Not tainted syzkaller #0 [ 773.710255][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.720346][T20191] Call Trace: [ 773.723648][T20191] [ 773.726626][T20191] dump_stack_lvl+0x188/0x250 [ 773.731361][T20191] ? load_image+0x400/0x400 [ 773.735891][T20191] ? show_regs_print_info+0x20/0x20 [ 773.741102][T20191] ? print_circular_bug+0x12b/0x1a0 [ 773.746314][T20191] check_noncircular+0x296/0x330 [ 773.751268][T20191] ? add_chain_block+0x940/0x940 [ 773.756233][T20191] ? lockdep_lock+0xf1/0x1f0 [ 773.760920][T20191] ? lockdep_unlock+0x143/0x2e0 [ 773.765778][T20191] ? mark_lock+0x94/0x320 [ 773.770117][T20191] __lock_acquire+0x2c42/0x7d10 [ 773.775017][T20191] ? mark_lock+0x94/0x320 [ 773.779355][T20191] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 773.785432][T20191] ? verify_lock_unused+0x140/0x140 [ 773.790660][T20191] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 773.796514][T20191] ? lockdep_hardirqs_on+0x94/0x140 [ 773.801814][T20191] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 773.807568][T20191] lock_acquire+0x19e/0x400 [ 773.812104][T20191] ? ocfs2_lock_global_qf+0x1fe/0x290 [ 773.817531][T20191] ? __might_sleep+0xf0/0xf0 [ 773.822236][T20191] ? read_lock_is_recursive+0x10/0x10 [ 773.827624][T20191] ? rwsem_write_trylock+0x135/0x1c0 [ 773.832973][T20191] ? clear_nonspinnable+0x60/0x60 [ 773.838108][T20191] ? __rwlock_init+0x140/0x140 [ 773.842911][T20191] down_write+0x38/0x60 [ 773.847079][T20191] ? ocfs2_lock_global_qf+0x1fe/0x290 [ 773.852544][T20191] ocfs2_lock_global_qf+0x1fe/0x290 [ 773.857755][T20191] ? lock_buffer+0x80/0x80 [ 773.862239][T20191] ocfs2_acquire_dquot+0x29d/0xb10 [ 773.867360][T20191] ? ocfs2_destroy_dquot+0x40/0x40 [ 773.872475][T20191] dqget+0x778/0xeb0 [ 773.876383][T20191] dquot_set_dqblk+0x27/0xf90 [ 773.881097][T20191] quota_setquota+0x4d6/0x590 [ 773.885799][T20191] ? quota_getnextquota+0x4a0/0x4a0 [ 773.891006][T20191] ? bpf_lsm_capable+0x5/0x10 [ 773.895692][T20191] ? do_quotactl+0x4f3/0x710 [ 773.900298][T20191] __se_sys_quotactl+0x28b/0x6f0 [ 773.905369][T20191] ? __x64_sys_quotactl+0xa0/0xa0 [ 773.910398][T20191] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 773.916407][T20191] ? lock_chain_count+0x20/0x20 [ 773.921268][T20191] ? vtime_user_exit+0x2c8/0x3e0 [ 773.926324][T20191] ? lockdep_hardirqs_on+0x94/0x140 [ 773.931534][T20191] do_syscall_64+0x4c/0xa0 [ 773.935978][T20191] ? clear_bhb_loop+0x30/0x80 [ 773.940666][T20191] ? clear_bhb_loop+0x30/0x80 [ 773.945369][T20191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.951308][T20191] RIP: 0033:0x7fce1ebe4cb9 [ 773.955839][T20191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.975471][T20191] RSP: 002b:00007fce1ce40028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 773.984116][T20191] RAX: ffffffffffffffda RBX: 00007fce1ee5ffa0 RCX: 00007fce1ebe4cb9 [ 773.992124][T20191] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000800 [ 774.000100][T20191] RBP: 00007fce1ec52bf7 R08: 0000000000000000 R09: 0000000000000000 [ 774.008081][T20191] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 774.016080][T20191] R13: 00007fce1ee60038 R14: 00007fce1ee5ffa0 R15: 00007ffe3eeebfd8 [ 774.024086][T20191] [ 774.041072][T20131] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #16: comm syz.1.6853: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0) [ 774.063263][T20131] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.6853: couldn't read orphan inode 16 (err -117) [ 774.074484][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 774.081976][T20131] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 774.093606][T20131] ext4 filesystem being mounted at /1299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.113142][ T6159] usb 4-1: Using ep0 maxpacket: 32 [ 774.157601][ T4244] usb 2-1: USB disconnect, device number 24 [ 774.250659][ T6159] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 774.269921][ T6159] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 774.284044][ T6159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 774.293101][ T6159] usb 4-1: config 1 has no interface number 0 [ 774.301140][ T6159] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 774.312321][ T6159] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 774.322190][ T6159] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 774.335382][ T6159] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 774.344973][ T6159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.404169][ T6159] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 774.625653][ T6159] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 774.632398][ T6159] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 774.640011][ T6159] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 774.775547][ T6164] ch9200: probe of 5-1:2.31 failed with error -22 [ 774.783918][ T6164] usb 5-1: USB disconnect, device number 27 [ 774.841713][ T6159] usb 4-1: USB disconnect, device number 12