last executing test programs: 7m42.135964141s ago: executing program 0 (id=4719): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040201"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m40.371560392s ago: executing program 0 (id=4745): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500"], 0x50}}, 0x0) 7m40.264387788s ago: executing program 0 (id=4748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x3, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x6, 0x0, 0x200000}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) 7m40.093485557s ago: executing program 0 (id=4753): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 7m39.689802118s ago: executing program 0 (id=4759): r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000100)=0x9) 7m39.331783337s ago: executing program 0 (id=4765): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 7m38.816939214s ago: executing program 32 (id=4765): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 4.57084488s ago: executing program 1 (id=10898): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno', 0xa) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 4.342636652s ago: executing program 1 (id=10901): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) 4.231738468s ago: executing program 1 (id=10903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}]}], {0x14}}, 0x6c}}, 0x0) 4.101956465s ago: executing program 1 (id=10905): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, 0x0, 0x0, 0x0) 3.873177397s ago: executing program 1 (id=10907): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) 3.368102403s ago: executing program 1 (id=10911): r0 = memfd_create(&(0x7f0000000100)='\x8f\xd5\xa7\x16\xbf\xda\f\xfe\x10\x8e\x90\xe2\xf9\x7f\x9f~zmZ!\x01\xb3\xdcOD\xfdF\xbe\xd5\xea\x1e\xae\x90\x13\x1b\xf2\x00\x96\xad\xa3\xfb\xdd\f\x03\xec\xbf\x1f\xf0\t\x98\x1e%\xea\x91&\x9f\xf8k\x01\x14\xc1\xacvi\xdc\x91\xfb\xdf\xe3\xbc\xc6a\x85\r\x84C\xfcP(\xe9\xd7\xeb9_\x13\x81\x8d\xbf\x97\xe3\xcf\rq\xfe\x8bxz\x81<\x84U\x8b\xc0\fEyv\x8d-\xa5 \x87\x01\x00nCK\xee\xfb\xce|1', 0x7) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r0, 0x0) 2.645088321s ago: executing program 4 (id=10913): unshare(0x22020400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) 2.395503914s ago: executing program 4 (id=10915): process_madvise(0xffffffffffffffff, &(0x7f0000000440), 0x1, 0x13, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 2.214509873s ago: executing program 2 (id=10918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8000}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x800) 1.975176756s ago: executing program 2 (id=10919): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@setlink={0x3c, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r1, 0x40000}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d1}, 0x4040080) 1.920092239s ago: executing program 3 (id=10920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1.755536188s ago: executing program 3 (id=10921): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb35259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c61d078b9c5bb34f39566153c97e4af37017ea6b16b694bb536e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a030ac4ba765170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x0, 0x989680}) 1.680094412s ago: executing program 2 (id=10922): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt(r0, 0x0, 0xb, &(0x7f00000000c0), 0x0) 1.626840224s ago: executing program 4 (id=10923): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3700dabe}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xd3588a68d39da5d3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x0, 0x23}, 0x94) 1.611099165s ago: executing program 3 (id=10924): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000200)=ANY=[], 0x26, 0x1) 1.279457443s ago: executing program 4 (id=10925): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214080, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@part={'part', 0x3d, 0x7ff}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$eJzs3U1r1E4cB/DvZLPb3XbpP/+2UvBYLXgqbT0oXixSBPENeJBibVcojRW0ggri6lmKngTBoze9ir4FvYhvQE89iCe9FA9GZiazSbaZ7ENj02W/H+g2D/Pwm0weZlZqQERD68Ly19end+WPKAMoATgHOACqgAvgGKard7e2N7b9xnpWQSWVQ/4I6JxiX5q1rUZaVplP5Qh5cs1FHe7OpRyaSJmC4FvHND8PJRIqjtDX/j4OMBJenWp/9dAj+zeaul3DJdbDYg97uIfxIsMhIqLihc9/J3xK1MPxu+MAs+HYfNCf/4nxzV5xcRwJree/o9cDIY/Pf2pXNN9TUzjZ+46ZJaaVpc+JenJjEB3uCvSZlegA0WlWqWJxajc2/MZcUxXwBOdDsWRT6nMdpiGKLdqK/jWTMjfNkNX2bGOqDWXZhkVL/JM91/jhO16kV7fyqYuYxEfxWawIDy+x3hr/uYGQB0cdH6+tp3T88/YSVSs9nSrRymhO/7+q5LjpgfdvolbWbMe1ipKMJY0sRbSP3z0T57OKPRcmEl81mNYt2Funck2m5lpsrf9OzTXVnqvmlv3G3NotP/OrlNykzujEjrgiZvAD77AcG/87MvUs7Fdm4s4vVMrwzMhsj6tSWvoxQV3AN1OuTKeLzEPtYmpHZ3uK6ziL8Tv3H2yu+n7jdk4Lz9/q4vvIbi6VXOPpf0GfiCJqjvwdS4OqXCgDyK3SP0EQ+L6pM7bLxWE0uayqPfMq0YOiqVcPVgWa+06JJXtiAEsAwi3mjtBP7Y9auUaiArvK/kv2gNqSfkKaqHLsgrpll6kqsauEka6ulFof8Vx+uLnq935LocETdTqmrxYdDBVBDq+Env/F5ivz6q4jP7yM2UjQqfBYiQuWGdCE+hztbgbXKtY6gxszCx3mXCdOASfbanRganzcXqwXxtk2pD8aev+nDLGML7jG7/+JiIiIiIiIiIiIiIiIiIiIiIiIiAZNr3+o0M+fEyRr3B3C/3iDiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOhgYu//BUrqjTGVwt//WzLv/w03jKZkMu+lIKK+/Q0AAP//oLJZGA==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.279268003s ago: executing program 2 (id=10926): inotify_init() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.209202096s ago: executing program 2 (id=10927): r0 = epoll_create1(0x80000) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.095828752s ago: executing program 4 (id=10928): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.007217386s ago: executing program 3 (id=10929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3fc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 948.2165ms ago: executing program 2 (id=10930): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file2\x00', 0x2000480, &(0x7f0000000480)=ANY=[], 0x1, 0x62f4, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) 696.840933ms ago: executing program 3 (id=10931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 405.452268ms ago: executing program 3 (id=10932): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfffffffe, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "31b6d9345897ebbaefd479db86fe609ea2029b", 0x807f, 0xd71}) 0s ago: executing program 4 (id=10933): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x801092d) keyctl$read(0xb, r0, &(0x7f0000004bc0)=""/216, 0xd8) kernel console output (not intermixed with test programs): to 16 [ 767.433432][T28300] bridge0: port 3(ipvlan2) entered blocking state [ 767.459219][T28302] erofs: (device loop3): mounted with root inode @ nid 36. [ 767.459259][T28300] bridge0: port 3(ipvlan2) entered disabled state [ 767.501788][T28302] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 767.515426][T28300] ipvlan2: entered allmulticast mode [ 767.544200][T28300] bridge0: entered allmulticast mode [ 767.555971][T28300] ipvlan2: left allmulticast mode [ 767.569609][T28300] bridge0: left allmulticast mode [ 767.781858][T28310] netlink: 'syz.1.9957': attribute type 3 has an invalid length. [ 768.092079][T28317] loop3: detected capacity change from 0 to 8192 [ 768.101677][T28317] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 768.135679][T28317] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 768.145768][T28317] REISERFS (device loop3): using ordered data mode [ 768.152884][T28317] reiserfs: using flush barriers [ 768.160839][T28317] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 768.182468][T28317] REISERFS (device loop3): checking transaction log (loop3) [ 768.337246][T28317] REISERFS (device loop3): Using tea hash to sort names [ 768.361886][T28317] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 768.369998][ T5840] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 768.594863][ T5840] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 768.619188][ T5840] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 768.628156][ T5840] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 768.644790][T28337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9970'. [ 768.668730][ T5840] usb 5-1: config 220 has no interface number 2 [ 768.675398][ T5840] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 768.707299][ T5840] usb 5-1: config 220 interface 0 has no altsetting 0 [ 768.720729][ T5840] usb 5-1: config 220 interface 76 has no altsetting 0 [ 768.740461][ T5840] usb 5-1: config 220 interface 1 has no altsetting 0 [ 768.761972][ T5840] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 768.796804][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.821627][ T5840] usb 5-1: Product: syz [ 768.825891][ T5840] usb 5-1: Manufacturer: syz [ 768.838959][ T5840] usb 5-1: SerialNumber: syz [ 769.064577][ T5840] usb 5-1: selecting invalid altsetting 0 [ 769.092863][ T5840] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 769.100119][T28349] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 769.100368][ T5840] usb 5-1: No valid video chain found. [ 769.136782][ T5840] usb 5-1: selecting invalid altsetting 0 [ 769.152873][ T5840] usbtest: probe of 5-1:220.1 failed with error -22 [ 769.157655][T28352] loop2: detected capacity change from 0 to 8192 [ 769.182991][T28352] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 769.188348][ T5840] usb 5-1: USB disconnect, device number 36 [ 769.219376][T28352] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 769.230590][T28352] REISERFS (device loop2): using ordered data mode [ 769.282041][T28352] reiserfs: using flush barriers [ 769.322205][T28352] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 769.344919][T28356] PKCS8: Unsupported PKCS#8 version [ 769.380393][T28352] REISERFS (device loop2): checking transaction log (loop2) [ 769.416491][T28352] REISERFS (device loop2): Using r5 hash to sort names [ 769.427924][T28352] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 769.432904][T28360] loop3: detected capacity change from 0 to 512 [ 769.445925][T28352] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 769.489246][T28360] FAT-fs (loop3): Directory bread(block 199916) failed [ 769.516616][T28360] FAT-fs (loop3): Directory bread(block 199917) failed [ 769.532901][T28360] FAT-fs (loop3): Directory bread(block 199918) failed [ 769.546680][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9980'. [ 769.555901][T28360] FAT-fs (loop3): Directory bread(block 199919) failed [ 769.562986][T28360] FAT-fs (loop3): Directory bread(block 199920) failed [ 769.571721][T28362] netlink: 'syz.1.9980': attribute type 1 has an invalid length. [ 769.579857][T28360] FAT-fs (loop3): Directory bread(block 199921) failed [ 769.586944][T28362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9980'. [ 769.600171][T28360] FAT-fs (loop3): Directory bread(block 199922) failed [ 769.609501][T28360] FAT-fs (loop3): Directory bread(block 199923) failed [ 769.659705][T28360] FAT-fs (loop3): Directory bread(block 199916) failed [ 769.666650][T28360] FAT-fs (loop3): Directory bread(block 199917) failed [ 769.828147][T28366] loop4: detected capacity change from 0 to 256 [ 769.877342][T28366] FAT-fs (loop4): Directory bread(block 64) failed [ 769.887416][T28366] FAT-fs (loop4): Directory bread(block 65) failed [ 769.903221][T28366] FAT-fs (loop4): Directory bread(block 66) failed [ 769.948335][T28366] FAT-fs (loop4): Directory bread(block 67) failed [ 769.958460][T28366] FAT-fs (loop4): Directory bread(block 68) failed [ 769.967145][T28366] FAT-fs (loop4): Directory bread(block 69) failed [ 769.992515][T28366] FAT-fs (loop4): Directory bread(block 70) failed [ 770.000611][T28366] FAT-fs (loop4): Directory bread(block 71) failed [ 770.007314][T28366] FAT-fs (loop4): Directory bread(block 72) failed [ 770.017760][T28366] FAT-fs (loop4): Directory bread(block 73) failed [ 770.065900][T28368] loop3: detected capacity change from 0 to 4096 [ 770.161801][T28373] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 770.242435][T28368] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 770.309750][T28368] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 770.388390][T28368] Remounting filesystem read-only [ 770.410658][T28368] NILFS (loop3): error -5 truncating bmap (ino=12) [ 770.562907][T16857] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 770.601752][T16857] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 770.608594][T16857] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 770.617619][T16857] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 770.625899][T16857] NILFS (loop3): discard dirty block: blocknr=14, size=4096 [ 770.633992][T16857] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 770.654454][T16857] NILFS (loop3): discard dirty block: blocknr=23, size=4096 [ 770.675286][T16857] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 770.695029][T16857] NILFS (loop3): discard dirty block: blocknr=24, size=4096 [ 770.709238][T16857] NILFS (loop3): discard dirty page: offset=8192, ino=6 [ 770.735006][T16857] NILFS (loop3): discard dirty block: blocknr=25, size=4096 [ 770.754412][T16857] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 770.768762][T16857] NILFS (loop3): discard dirty block: blocknr=28, size=4096 [ 770.782311][T28389] loop1: detected capacity change from 0 to 256 [ 770.790269][T16857] NILFS (loop3): discard dirty page: offset=4096, ino=3 [ 770.797246][T16857] NILFS (loop3): discard dirty block: blocknr=29, size=4096 [ 770.826826][T16857] NILFS (loop3): discard dirty page: offset=270336, ino=3 [ 770.845928][T16857] NILFS (loop3): discard dirty block: blocknr=0, size=4096 [ 770.960001][T28389] FAT-fs (loop1): Directory bread(block 64) failed [ 770.970724][T28389] FAT-fs (loop1): Directory bread(block 65) failed [ 770.996292][T28389] FAT-fs (loop1): Directory bread(block 66) failed [ 770.996327][T28389] FAT-fs (loop1): Directory bread(block 67) failed [ 770.996412][T28389] FAT-fs (loop1): Directory bread(block 68) failed [ 770.996438][T28389] FAT-fs (loop1): Directory bread(block 69) failed [ 770.996515][T28389] FAT-fs (loop1): Directory bread(block 70) failed [ 770.996559][T28389] FAT-fs (loop1): Directory bread(block 71) failed [ 770.996638][T28389] FAT-fs (loop1): Directory bread(block 72) failed [ 770.996661][T28389] FAT-fs (loop1): Directory bread(block 73) failed [ 771.066802][T28372] loop2: detected capacity change from 0 to 40427 [ 771.075291][T28372] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 771.075320][T28372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 771.075626][T28372] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 771.075686][T28372] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 771.075720][T28372] F2FS-fs (loop2): Image doesn't support compression [ 771.076589][T28372] F2FS-fs (loop2): invalid crc value [ 771.102271][T28372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 771.303982][T28372] F2FS-fs (loop2): Start checkpoint disabled! [ 771.310571][T16859] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 771.313218][T28372] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 771.331182][T28372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 771.496040][T16859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.534956][T16859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.579939][T16859] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 771.607795][T16859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.621107][T28404] loop1: detected capacity change from 0 to 512 [ 771.632373][T16859] usb 4-1: config 0 descriptor?? [ 771.648736][T28404] ext4: Unknown parameter 'permit_directio' [ 771.676422][T28402] loop4: detected capacity change from 0 to 8192 [ 771.703622][T28402] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 771.773705][T15730] kworker/u4:10: attempt to access beyond end of device [ 771.773705][T15730] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 771.787906][T28402] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 771.823840][T28402] REISERFS (device loop4): using ordered data mode [ 771.833190][T15730] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 771.840609][T15730] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 771.859145][T28402] reiserfs: using flush barriers [ 771.889032][T28402] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 771.929727][T28402] REISERFS (device loop4): checking transaction log (loop4) [ 772.137994][T28412] netlink: 160 bytes leftover after parsing attributes in process `syz.1.10003'. [ 772.149863][T28402] REISERFS (device loop4): Using tea hash to sort names [ 772.157126][T28402] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 772.159327][T28412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10003'. [ 772.275647][T16859] hid-led: probe of 0003:1D34:000A.0005 failed with error -71 [ 772.323147][T16859] usb 4-1: USB disconnect, device number 49 [ 772.480834][T28418] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10000'. [ 772.584657][T28420] loop1: detected capacity change from 0 to 1024 [ 772.681616][T28420] hfsplus: bad catalog entry type [ 772.738170][ T59] hfsplus: b-tree write err: -5, ino 25 [ 772.753634][ T59] hfsplus: b-tree write err: -5, ino 4 [ 772.761304][ T59] hfsplus: b-tree write err: -5, ino 2 [ 772.964596][ T5840] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 773.180950][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.206356][ T5840] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 773.221883][ T5840] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 773.232553][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.265368][ T5840] usb 5-1: config 0 descriptor?? [ 773.378120][T28450] loop2: detected capacity change from 0 to 512 [ 773.412571][T28452] loop1: detected capacity change from 0 to 128 [ 773.419281][T28450] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 773.452090][T28454] loop3: detected capacity change from 0 to 512 [ 773.516558][ T28] audit: type=1800 audit(1777281984.270:659): pid=28454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10022" name="file1" dev="loop3" ino=1048772 res=0 errno=0 [ 773.549415][T28450] EXT4-fs (loop2): 1 truncate cleaned up [ 773.556626][T28450] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.583481][T28454] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 50, start 00000672) [ 773.609533][T28454] FAT-fs (loop3): Filesystem has been set read-only [ 773.645169][T28454] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000672) [ 773.757752][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.929567][ T28] audit: type=1400 audit(1777281984.690:660): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26F81648AA2A pid=28461 comm="syz.1.10026" [ 773.982308][ T5840] Bluetooth: Can't get version to change to load ram patch err [ 774.013709][ T5840] Bluetooth: Loading sysconfig file failed [ 774.035962][ T5840] ath3k: probe of 5-1:0.0 failed with error -71 [ 774.060540][ T5840] usb 5-1: USB disconnect, device number 37 [ 774.319913][T28477] usb usb8: check_ctrlrecip: process 28477 (syz.1.10032) requesting ep 01 but needs 81 [ 774.629287][T28494] loop4: detected capacity change from 0 to 64 [ 774.889226][ T5840] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 774.927025][T28506] loop4: detected capacity change from 0 to 512 [ 774.944608][T28506] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 774.991139][T28506] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 775.012882][T28506] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #11: comm syz.4.10046: corrupted inode contents [ 775.042795][T28506] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #11: comm syz.4.10046: mark_inode_dirty error [ 775.069782][T28506] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.10046: invalid indirect mapped block 1 (level 1) [ 775.091441][ T5840] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 775.102955][ T5840] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.113493][ T5840] usb 4-1: config 2 interface 0 has no altsetting 0 [ 775.114106][T28506] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #11: comm syz.4.10046: corrupted inode contents [ 775.120465][ T5840] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 775.151882][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.153159][T28506] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 775.205334][T28506] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #11: comm syz.4.10046: corrupted inode contents [ 775.224594][T28506] EXT4-fs error (device loop4): ext4_truncate:4301: inode #11: comm syz.4.10046: mark_inode_dirty error [ 775.237013][T28506] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 775.252856][T28506] EXT4-fs (loop4): 1 truncate cleaned up [ 775.267298][T28506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.356219][T28506] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.10046: path /1287/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 775.554792][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.654598][ T5840] elo 0003:04E7:0009.0006: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 775.760945][T28527] loop4: detected capacity change from 0 to 64 [ 775.889184][ T5156] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 775.925640][ T5840] usb 4-1: USB disconnect, device number 50 [ 776.111082][ T5156] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 776.128971][ T5156] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 776.158959][ T5156] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 776.170191][ T5156] usb 2-1: config 220 has no interface number 2 [ 776.189052][ T5156] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 776.217734][ T5156] usb 2-1: config 220 interface 0 has no altsetting 0 [ 776.239009][ T5156] usb 2-1: config 220 interface 76 has no altsetting 0 [ 776.245942][ T5156] usb 2-1: config 220 interface 1 has no altsetting 0 [ 776.277527][ T5156] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 776.295003][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.306104][ T5156] usb 2-1: Product: syz [ 776.318983][ T5156] usb 2-1: Manufacturer: syz [ 776.323695][ T5156] usb 2-1: SerialNumber: syz [ 776.408528][T28529] loop2: detected capacity change from 0 to 32768 [ 776.448507][T28529] [ 776.448507][T28529] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 776.448507][T28529] [ 776.509910][T28529] ERROR: (device loop2): diWrite: ixpxd invalid [ 776.509910][T28529] [ 776.561286][ T5156] usb 2-1: selecting invalid altsetting 0 [ 776.565407][T28529] ERROR: (device loop2): txCommit: [ 776.565407][T28529] [ 776.585596][ T5156] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 776.608427][ T5156] usb 2-1: No valid video chain found. [ 776.660358][ T5156] usb 2-1: selecting invalid altsetting 0 [ 776.666170][ T5156] usbtest: probe of 2-1:220.1 failed with error -22 [ 776.688245][ T5156] usb 2-1: USB disconnect, device number 59 [ 776.748248][T15406] [ 776.748248][T15406] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 776.748248][T15406] [ 776.779830][T15406] [ 776.779830][T15406] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 776.779830][T15406] [ 777.096848][T28556] loop2: detected capacity change from 0 to 128 [ 777.160344][T28556] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 777.431657][T15406] sysv_free_block: trying to free block not in datazone [ 777.443618][T15406] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 777.459233][ T28] audit: type=1326 audit(1777281988.210:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 777.465226][T28562] loop4: detected capacity change from 0 to 4096 [ 777.481754][ T28] audit: type=1326 audit(1777281988.210:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 777.481794][ T28] audit: type=1326 audit(1777281988.210:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 777.508925][ T28] audit: type=1326 audit(1777281988.250:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 777.515286][T28568] loop1: detected capacity change from 0 to 256 [ 777.541136][ T28] audit: type=1326 audit(1777281988.250:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 777.598144][T28562] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 777.619349][ T28] audit: type=1326 audit(1777281988.250:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f814479cb42 code=0x7ffc0000 [ 777.641776][ T28] audit: type=1326 audit(1777281988.250:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f814475d60e code=0x7ffc0000 [ 777.664460][ T28] audit: type=1326 audit(1777281988.250:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.1.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f814479cc07 code=0x7ffc0000 [ 777.688484][T28568] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 777.709905][T28568] FAT-fs (loop1): Filesystem has been set read-only [ 778.419159][T28598] loop3: detected capacity change from 0 to 24 [ 778.430220][T28598] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 778.475044][T28598] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 778.941992][T28610] loop1: detected capacity change from 0 to 128 [ 778.980217][T28610] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.001275][T28610] ext4 filesystem being mounted at /2593/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 779.110008][T28602] loop2: detected capacity change from 0 to 32768 [ 779.177599][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 779.184373][T28602] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 779.220031][T28594] loop4: detected capacity change from 0 to 32768 [ 779.349098][T28594] read_mapping_page failed! [ 779.354289][T28594] ERROR: (device loop4): txCommit: [ 779.354289][T28594] [ 779.368028][T28602] XFS (loop2): Ending clean mount [ 779.410301][T28602] XFS (loop2): Quotacheck needed: Please wait. [ 779.531833][T28606] loop3: detected capacity change from 0 to 32768 [ 779.605467][T28602] XFS (loop2): Quotacheck: Done. [ 779.753006][ T1078] read_mapping_page failed! [ 779.789277][ T1078] ERROR: (device loop3): txCommit: [ 779.789277][ T1078] [ 779.830984][ T1078] jfs_write_inode: jfs_commit_inode failed! [ 779.889647][T15406] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 779.952676][T28629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10099'. [ 779.981988][T28629] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10099'. [ 780.005381][T28629] netlink: 'syz.3.10099': attribute type 6 has an invalid length. [ 780.035673][T28629] netlink: 'syz.3.10099': attribute type 5 has an invalid length. [ 780.047036][T28629] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10099'. [ 780.317609][T28631] loop4: detected capacity change from 0 to 32768 [ 780.340308][T28631] (syz.4.10098,28631,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 780.354521][T28631] (syz.4.10098,28631,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 780.391971][T28631] JBD2: Ignoring recovery information on journal [ 780.433986][T28631] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 780.553888][T16431] ocfs2: Unmounting device (7,4) on (node local) [ 780.668315][T28639] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 780.692994][T28639] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 780.769088][T28639] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #11: comm syz.3.10105: corrupted inode contents [ 780.820643][T28639] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #11: comm syz.3.10105: mark_inode_dirty error [ 780.872818][T28639] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.10105: invalid indirect mapped block 1 (level 1) [ 780.903658][T28639] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #11: comm syz.3.10105: corrupted inode contents [ 780.925053][T28639] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 780.934363][T28639] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #11: comm syz.3.10105: corrupted inode contents [ 780.963946][T28639] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.10105: mark_inode_dirty error [ 781.002205][T28639] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 781.011275][T28648] program syz.1.10108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 781.024480][T28639] EXT4-fs (loop3): 1 truncate cleaned up [ 781.049527][T28639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.172598][T28652] Attempt to read inode for relocated directory [ 781.192684][T28639] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.10105: path /1300/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 781.439144][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.249635][T28658] set_capacity_and_notify: 2 callbacks suppressed [ 782.249650][T28658] loop4: detected capacity change from 0 to 32768 [ 782.340004][T28658] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 782.411870][T28668] loop2: detected capacity change from 0 to 40427 [ 782.428649][T28668] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 782.442550][T28668] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 782.446706][T28658] XFS (loop4): Ending clean mount [ 782.478971][T28668] F2FS-fs (loop2): invalid crc value [ 782.550609][T28668] F2FS-fs (loop2): Found nat_bits in checkpoint [ 782.766519][T28668] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 782.793678][T28668] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 782.891338][T16431] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 783.510748][T28697] loop1: detected capacity change from 0 to 32768 [ 783.598524][T28697] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 783.669604][T28718] sd 0:0:1:0: device reset [ 783.850482][T28697] XFS (loop1): Starting recovery (logdev: internal) [ 783.912099][T28697] XFS (loop1): Ending recovery (logdev: internal) [ 784.101723][ T5769] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 784.190359][T28728] loop4: detected capacity change from 0 to 4096 [ 784.388959][ T5829] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 784.583798][ T5829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 784.603822][ T5829] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 784.623933][ T5829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 784.665346][ T5829] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 784.679433][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.695651][ T5829] usb 4-1: Product: syz [ 784.719148][ T5829] usb 4-1: Manufacturer: syz [ 784.734066][ T5829] usb 4-1: SerialNumber: syz [ 784.755372][ T5829] hub 4-1:1.0: bad descriptor, ignoring hub [ 784.767357][ T5829] hub: probe of 4-1:1.0 failed with error -5 [ 784.881584][T28740] loop4: detected capacity change from 0 to 8192 [ 784.942250][T28744] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 784.990193][ T5829] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 785.385316][T28746] loop1: detected capacity change from 0 to 32768 [ 785.398242][T28746] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.10140 (28746) [ 785.423999][ T5156] usb 4-1: USB disconnect, device number 51 [ 785.443647][ T5156] usblp0: removed [ 785.468495][T28746] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 785.503072][T28746] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 785.529852][T28746] BTRFS info (device loop1): enabling auto defrag [ 785.536519][T28746] BTRFS info (device loop1): use no compression [ 785.560954][T28746] BTRFS info (device loop1): max_inline at 4096 [ 785.567266][T28746] BTRFS info (device loop1): using free space tree [ 785.652580][T28746] BTRFS info (device loop1): enabling ssd optimizations [ 785.670088][T28746] BTRFS info (device loop1): auto enabling async discard [ 785.871211][T28754] loop4: detected capacity change from 0 to 32768 [ 785.930373][T28746] BTRFS error (device loop1: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿ01777777777777777777777š@­LqE:†‹ á艞Õt}²0ü$‰' [ 785.955007][T28754] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 786.119903][ T5769] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 786.169506][T16431] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 786.574296][T28791] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10150'. [ 786.675718][T28793] loop1: detected capacity change from 0 to 512 [ 786.690282][T28793] EXT4-fs: Ignoring removed bh option [ 786.729510][T28793] EXT4-fs: inline encryption not supported [ 786.761619][T28793] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 786.845589][T28793] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 786.887041][T28793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.10151: bg 0: block 248: padding at end of block bitmap is not set [ 786.923006][T28793] __quota_error: 23 callbacks suppressed [ 786.923022][T28793] Quota error (device loop1): write_blk: dquota write failed [ 786.973620][T28793] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 787.012952][T28793] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.10151: Failed to acquire dquot type 1 [ 787.036134][T28804] loop3: detected capacity change from 0 to 64 [ 787.062849][T28793] EXT4-fs (loop1): 1 truncate cleaned up [ 787.070929][T28793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 787.258314][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 787.421639][T28810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10156'. [ 787.798583][T28826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10165'. [ 787.817706][T28826] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 787.854244][T28822] loop2: detected capacity change from 0 to 2048 [ 787.928752][T28822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.951269][T28822] ext4 filesystem being mounted at /1373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.175480][T28820] loop1: detected capacity change from 0 to 40427 [ 788.208063][T28820] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 788.233315][T28820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 788.245751][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.283404][T28820] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 788.364509][T28820] F2FS-fs (loop1): Found nat_bits in checkpoint [ 788.444607][T28840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.491791][T28840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.502222][T28840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.512780][T28820] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 788.519961][T28820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 788.534610][T28840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.118358][ T23] IPVS: starting estimator thread 0... [ 789.219413][T28860] IPVS: using max 19 ests per chain, 45600 per kthread [ 789.706786][T28855] loop3: detected capacity change from 0 to 32768 [ 789.743359][T28876] loop4: detected capacity change from 0 to 4096 [ 789.789241][T28855] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 789.811116][T28876] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 789.825023][T28889] netlink: 'syz.1.10193': attribute type 3 has an invalid length. [ 789.903439][T28896] netlink: 'syz.1.10194': attribute type 3 has an invalid length. [ 789.932735][T28855] XFS (loop3): Ending clean mount [ 789.997270][T28898] loop1: detected capacity change from 0 to 2048 [ 790.028670][T28898] EXT4-fs: Ignoring removed mblk_io_submit option [ 790.036338][T28876] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 790.096152][T28898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.225005][T16857] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 790.267780][T28898] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.10195: bg 0: block 234: padding at end of block bitmap is not set [ 790.347778][T28898] EXT4-fs (loop1): Remounting filesystem read-only [ 790.413215][T28898] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 790.517386][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.778232][T28913] loop1: detected capacity change from 0 to 512 [ 790.833348][T28916] loop3: detected capacity change from 0 to 256 [ 790.858955][T28913] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.10200: bad orphan inode 13 [ 790.913880][T28916] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25f3d2c1, utbl_chksum : 0xe619d30d) [ 790.922926][T28918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10203'. [ 790.948998][T28913] ext4_test_bit(bit=12, block=4) = 1 [ 790.954361][T28913] is_bad_inode(inode)=0 [ 790.958537][T28913] NEXT_ORPHAN(inode)=0 [ 791.019158][T28913] max_ino=32 [ 791.022432][T28913] i_nlink=1 [ 791.044498][T28913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.079737][T28913] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.10200: Hash code is SIPHASH, but hash not in dirent [ 791.097228][T28913] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.10200: Corrupt directory, running e2fsck is recommended [ 791.156830][T28913] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.10200: path /2621/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 791.159662][T16859] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 791.240834][T28913] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.10200: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 791.345151][T28928] loop3: detected capacity change from 0 to 2048 [ 791.392577][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.419343][T16859] usb 3-1: unable to get BOS descriptor or descriptor too short [ 791.474072][T16859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.502925][T16859] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 791.519413][T28932] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 791.523163][T16859] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 791.569217][T16859] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 791.594857][T16859] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 791.606533][T16859] usb 3-1: config 1 interface 1 has no altsetting 0 [ 791.617631][T16859] usb 3-1: string descriptor 0 read error: -22 [ 791.624616][T16859] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 791.634082][T16859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.637524][T28928] NILFS error (device loop3): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 791.687524][T28928] Remounting filesystem read-only [ 791.778479][T16857] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 791.805853][T28938] loop4: detected capacity change from 0 to 764 [ 791.813006][T16857] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 791.822210][T16857] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 791.831719][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 791.852906][T28938] rock: directory entry would overflow storage [ 791.869984][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 791.880905][T28938] rock: sig=0x4654, size=5, remaining=4 [ 791.897052][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 791.909202][T16857] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 791.911371][T16859] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 791.919505][T16857] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 791.959271][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 791.968186][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 791.998983][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.008251][T16857] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 792.068944][T16857] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 792.076297][T16857] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 792.113774][T16857] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 792.123732][T16857] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 792.133027][T16857] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 792.140750][T16857] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 792.143471][T16859] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 792.152515][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.178233][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.190721][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.203747][T16859] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 792.217959][T16859] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 792.230283][T16857] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 792.237171][T16857] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 792.271870][T16859] usb 3-1: USB disconnect, device number 51 [ 792.277940][T16857] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 792.301100][T16857] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 792.320854][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.363840][T16857] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 792.385417][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.407590][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.418317][T16857] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 792.426142][T16857] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 792.903391][T28970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.910810][T28970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.937866][T28970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.944379][T28970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.951166][T28970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.957632][T28970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.965400][T28970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.973376][T28970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.980549][T28970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 792.987035][T28970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 792.996585][ T23] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 793.079164][T28976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10231'. [ 793.115595][T28976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10231'. [ 793.134717][T28978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10231'. [ 793.215775][ T23] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 793.236933][ T23] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 793.252298][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.296804][ T23] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 793.361278][T28987] loop4: detected capacity change from 0 to 512 [ 793.456173][T28987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.528810][T28987] ext4 filesystem being mounted at /1353/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 793.561372][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.655418][T28987] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #15: comm syz.4.10236: corrupted xattr block 33: invalid ea_ino [ 793.676307][T28987] EXT4-fs (loop4): Remounting filesystem read-only [ 793.824083][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.848335][ T1078] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 793.861621][ T1078] Quota error (device loop4): write_blk: dquota write failed [ 793.869347][ T1078] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 793.879931][ T1078] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 793.890970][ T1078] Quota error (device loop4): write_blk: dquota write failed [ 793.898495][ T1078] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 793.909182][ T1078] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 793.922052][ T1078] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 794.102925][T29013] loop2: detected capacity change from 0 to 2048 [ 794.126337][T29013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.407474][T29011] loop4: detected capacity change from 0 to 32768 [ 794.415374][ T23] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 794.429012][ T23] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 794.437673][ T23] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 794.670608][T16859] usb 4-1: USB disconnect, device number 52 [ 794.891189][T29018] loop2: detected capacity change from 0 to 32768 [ 794.963200][T29018] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 795.081111][T29018] XFS (loop2): Ending clean mount [ 795.110214][T29018] XFS (loop2): Quotacheck needed: Please wait. [ 795.224560][T29018] XFS (loop2): Quotacheck: Done. [ 795.426086][T15406] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 795.695112][ T787] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 795.871082][T29056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10264'. [ 795.965435][ T787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 795.988825][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.003820][ T787] usb 2-1: Product: syz [ 796.017988][ T787] usb 2-1: Manufacturer: syz [ 796.036508][ T787] usb 2-1: SerialNumber: syz [ 796.061445][ T787] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 796.093563][T16859] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 796.386731][ T5156] usb 2-1: USB disconnect, device number 60 [ 796.471555][T29077] loop4: detected capacity change from 0 to 64 [ 796.759101][ T23] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 796.934019][T29093] loop3: detected capacity change from 0 to 4096 [ 796.947123][T29093] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 796.965907][ T23] usb 3-1: config 127 has an invalid interface number: 84 but max is 0 [ 796.975603][ T23] usb 3-1: config 127 has no interface number 0 [ 796.991491][ T23] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 797.001343][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.010032][ T23] usb 3-1: Product: syz [ 797.014304][ T23] usb 3-1: Manufacturer: syz [ 797.023645][ T23] usb 3-1: SerialNumber: syz [ 797.047842][T29093] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 797.076844][T29093] ntfs3: loop3: ino=5, "/" directory corrupted [ 797.201919][T29095] loop3: detected capacity change from 0 to 128 [ 797.210493][T16859] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 797.217747][T16859] ath9k_htc: Failed to initialize the device [ 797.227191][T29095] hpfs: bad mount options. [ 797.232548][ T5156] usb 2-1: ath9k_htc: USB layer deinitialized [ 797.275820][ T23] gspca_main: spca501-2.14.0 probing 040a:0002 [ 797.657634][T29101] loop4: detected capacity change from 0 to 512 [ 797.674409][ T5156] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 797.687504][T29101] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 797.692298][T29099] loop3: detected capacity change from 0 to 32768 [ 797.692536][ T23] gspca_spca501: reg write: error -71 [ 797.707425][T29101] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.10285: corrupted in-inode xattr: e_value size too large [ 797.741627][T29099] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.10284 (29099) [ 797.741824][ T23] spca501 3-1:127.84: Reg write failed for 0x00,0x02,0x01 [ 797.763416][T29101] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.10285: couldn't read orphan inode 15 (err -117) [ 797.766348][ T23] spca501: probe of 3-1:127.84 failed with error -22 [ 797.787594][ T23] usb 3-1: USB disconnect, device number 52 [ 797.811436][T29101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.832317][T29099] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 797.852330][T29099] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 797.903436][T29099] BTRFS info (device loop3): enabling auto defrag [ 797.913748][T29099] BTRFS info (device loop3): use no compression [ 797.921670][T29099] BTRFS info (device loop3): max_inline at 4096 [ 797.927978][T29099] BTRFS info (device loop3): using free space tree [ 797.928996][ T5156] usb 2-1: Using ep0 maxpacket: 8 [ 797.971592][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.005819][ T5156] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 798.046757][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 798.078273][ T5156] usb 2-1: Product: syz [ 798.081513][T29099] BTRFS info (device loop3): enabling ssd optimizations [ 798.089136][ T5156] usb 2-1: Manufacturer: syz [ 798.094937][ T5156] usb 2-1: SerialNumber: syz [ 798.107206][ T5156] usb 2-1: config 0 descriptor?? [ 798.128293][T29099] BTRFS info (device loop3): auto enabling async discard [ 798.290407][T29099] BTRFS error (device loop3: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿ01777777777777777777777š@­LqE:†‹ á艞Õt}²0ü$‰' [ 798.359536][ T5156] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 798.390077][ T5156] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 798.439380][ T5156] usb 2-1: USB disconnect, device number 61 [ 798.495198][T16857] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 799.009116][T29137] tipc: Started in network mode [ 799.014150][T29137] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 799.048099][T29137] tipc: Enabling of bearer rejected, failed to enable media [ 799.072387][T29139] usb usb8: usbfs: process 29139 (syz.2.10295) did not claim interface 0 before use [ 799.255716][T29143] loop3: detected capacity change from 0 to 512 [ 799.276665][T29143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 799.310398][T29143] EXT4-fs (loop3): 1 truncate cleaned up [ 799.324595][T29143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.358630][T29143] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.10297: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 799.420853][T29143] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 799.438584][T29147] loop1: detected capacity change from 0 to 4096 [ 799.446828][T29147] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 799.465478][T29143] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.10297: Deleting old file: nlink 4, error=-117 [ 799.576869][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.597833][T29129] loop4: detected capacity change from 0 to 40427 [ 799.619062][T29129] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 799.659530][T29129] F2FS-fs (loop4): invalid crc value [ 799.701440][T29129] F2FS-fs (loop4): Found nat_bits in checkpoint [ 799.794203][T29129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 800.602499][T29178] loop4: detected capacity change from 0 to 4096 [ 800.719893][T29178] ntfs: volume version 3.1. [ 800.737635][T29182] loop2: detected capacity change from 0 to 512 [ 800.776667][T29184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10312'. [ 800.808652][T29182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.884741][T29189] loop3: detected capacity change from 0 to 1024 [ 800.893832][T29189] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 800.908085][T29182] ext4 filesystem being mounted at /1412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.948039][T29189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.074432][T29189] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 801.166683][T29174] loop1: detected capacity change from 0 to 32768 [ 801.190607][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.225283][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.236175][T29174] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 801.401390][T29174] XFS (loop1): Ending clean mount [ 801.718556][ T5769] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 801.982974][T29212] loop3: detected capacity change from 0 to 256 [ 802.108148][T29203] loop2: detected capacity change from 0 to 32768 [ 802.176070][T29203] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 802.302902][T29203] XFS (loop2): Ending clean mount [ 802.345880][T29222] netlink: 332 bytes leftover after parsing attributes in process `syz.1.10320'. [ 802.382663][T29205] loop4: detected capacity change from 0 to 40427 [ 802.411942][T29205] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 802.418347][T29205] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 802.454179][T15406] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 802.468325][T29205] F2FS-fs (loop4): invalid crc value [ 802.794023][T29205] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 802.804164][T29229] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 802.826566][T29205] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 802.947175][T29229] ntfs3: loop1: ino=5, "/" attr_set_size [ 803.085119][T16431] syz-executor: attempt to access beyond end of device [ 803.085119][T16431] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 803.107826][T16431] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 803.161573][T29234] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 803.198174][T29234] ntfs3: loop3: Failed to load $Extend (-22). [ 803.248514][T29234] ntfs3: loop3: Failed to initialize $Extend. [ 803.521070][T29244] rdma_op ffff88807dfd19f0 conn xmit_rdma 0000000000000000 [ 803.754627][T29251] tipc: Started in network mode [ 803.766717][T29251] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 803.801483][T29251] tipc: Enabled bearer , priority 28 [ 803.982790][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10339'. [ 804.116840][T29258] ntfs: volume version 3.1. [ 804.305471][T29268] rdma_op ffff88805e8df9f0 conn xmit_rdma 0000000000000000 [ 804.317971][T29266] set_capacity_and_notify: 3 callbacks suppressed [ 804.317987][T29266] loop2: detected capacity change from 0 to 4096 [ 804.478089][T29266] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 804.531368][T29272] netlink: 'syz.3.10344': attribute type 1 has an invalid length. [ 804.566405][T29266] ntfs3: loop2: Failed to load $Extend (-22). [ 804.588974][T29266] ntfs3: loop2: Failed to initialize $Extend. [ 804.637923][T29254] loop4: detected capacity change from 0 to 32768 [ 804.763879][ T28] audit: type=1800 audit(1777282015.520:692): pid=29254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10327" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 804.921629][ T787] tipc: Node number set to 8432298 [ 805.593613][T29299] loop2: detected capacity change from 0 to 256 [ 805.678206][T29299] FAT-fs (loop2): Directory bread(block 64) failed [ 805.696904][T29299] FAT-fs (loop2): Directory bread(block 65) failed [ 805.721845][T29299] FAT-fs (loop2): Directory bread(block 66) failed [ 805.743483][T29299] FAT-fs (loop2): Directory bread(block 67) failed [ 805.763289][T29299] FAT-fs (loop2): Directory bread(block 68) failed [ 805.772832][T29301] loop4: detected capacity change from 0 to 4096 [ 805.773337][T29299] FAT-fs (loop2): Directory bread(block 69) failed [ 805.816552][T29299] FAT-fs (loop2): Directory bread(block 70) failed [ 805.835618][T29299] FAT-fs (loop2): Directory bread(block 71) failed [ 805.845307][T29284] loop1: detected capacity change from 0 to 32768 [ 805.854512][T29299] FAT-fs (loop2): Directory bread(block 72) failed [ 805.874538][T29301] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 805.891868][T29299] FAT-fs (loop2): Directory bread(block 73) failed [ 805.926328][T29284] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 806.004942][T29301] ntfs3: loop4: Failed to load $Extend (-22). [ 806.064164][T29301] ntfs3: loop4: Failed to initialize $Extend. [ 806.070678][T29295] loop3: detected capacity change from 0 to 32768 [ 806.097228][T29284] XFS (loop1): Ending clean mount [ 806.116213][T29284] XFS (loop1): Quotacheck needed: Please wait. [ 806.193107][T29295] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 806.334176][T29284] XFS (loop1): Quotacheck: Done. [ 806.475862][T16857] ocfs2: Unmounting device (7,3) on (node local) [ 806.626825][ T5769] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 806.860820][T29326] Bluetooth: MGMT ver 1.22 [ 807.149591][ T5156] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 807.300832][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10371'. [ 807.357580][ T5156] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.386543][ T28] audit: type=1326 audit(1777282018.140:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.409070][ T5156] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.409101][ T5156] usb 3-1: config 0 interface 0 has no altsetting 0 [ 807.409141][ T5156] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 807.409162][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.411902][ T5156] usb 3-1: config 0 descriptor?? [ 807.481537][ T28] audit: type=1326 audit(1777282018.190:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.504760][ T28] audit: type=1326 audit(1777282018.190:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.547416][T29346] loop1: detected capacity change from 0 to 512 [ 807.556103][ T28] audit: type=1326 audit(1777282018.190:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.599359][ T28] audit: type=1326 audit(1777282018.190:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.658474][T29346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.689644][ T28] audit: type=1326 audit(1777282018.230:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.739121][T29346] ext4 filesystem being mounted at /2660/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 807.753301][ T28] audit: type=1326 audit(1777282018.230:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29341 comm="syz.4.10372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d799cdd9 code=0x7ffc0000 [ 807.904824][T29353] loop4: detected capacity change from 0 to 4096 [ 807.931874][T29353] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 807.963820][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.981863][ T5156] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 808.008342][ T5156] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 808.018479][ T5156] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 808.031028][ T5156] monterey 0003:0566:3004.0007: unknown main item tag 0x0 [ 808.056538][ T5156] monterey 0003:0566:3004.0007: hidraw0: USB HID v10.09 Device [HID 0566:3004] on usb-dummy_hcd.2-1/input0 [ 808.144319][T29353] ntfs3: loop4: ino=5, "/" directory corrupted [ 808.291959][ T5156] usb 3-1: USB disconnect, device number 53 [ 808.512894][T29364] loop1: detected capacity change from 0 to 256 [ 808.521030][T29355] loop3: detected capacity change from 0 to 32768 [ 808.528496][T29364] exfat: Deprecated parameter 'utf8' [ 808.573072][ T28] audit: type=1800 audit(1777282019.330:700): pid=29355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10377" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 808.633732][T29364] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 808.893914][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.074733][T29373] netlink: 'syz.4.10386': attribute type 1 has an invalid length. [ 809.151351][T29375] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 809.182912][T29375] EXT4-fs (loop2): 1 truncate cleaned up [ 809.210771][T29378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10383'. [ 809.220291][T29378] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10383'. [ 809.229471][T29378] tipc: Cannot configure node identity twice [ 809.230014][T29375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.302754][T16859] IPVS: starting estimator thread 0... [ 809.409066][T29382] IPVS: using max 22 ests per chain, 52800 per kthread [ 809.473021][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10391'. [ 809.510074][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.554258][T29369] set_capacity_and_notify: 1 callbacks suppressed [ 809.554275][T29369] loop1: detected capacity change from 0 to 32768 [ 809.600345][T29389] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 809.654314][T29387] loop4: detected capacity change from 0 to 4096 [ 809.661734][T29369] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 809.661734][T29369] [ 809.669097][T29389] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 809.693691][T29387] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 809.714236][T29369] ERROR: (device loop1): remounting filesystem as read-only [ 809.832695][T29387] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 809.942024][T29396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10395'. [ 809.973796][T29396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10395'. [ 810.041853][T16431] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 810.159377][ T5156] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 810.369293][ T5829] IPVS: starting estimator thread 0... [ 810.377339][ T5156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.403975][ T5156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.436219][ T5156] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 810.454465][ T5156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.480064][ T5156] usb 3-1: config 0 descriptor?? [ 810.489873][T29407] IPVS: using max 18 ests per chain, 43200 per kthread [ 810.706393][T29416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10404'. [ 810.735169][T29416] net_ratelimit: 66 callbacks suppressed [ 810.735186][T29416] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 810.911660][ T5156] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 810.918516][ T5156] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 810.949290][ T5156] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 810.956154][ T5156] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 810.993151][ T5156] kone 0003:1E7D:2CED.0008: unknown main item tag 0x0 [ 811.015296][ T5156] kone 0003:1E7D:2CED.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 811.184271][ T787] usb 3-1: USB disconnect, device number 54 [ 811.231957][T29422] fido_id[29422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 811.244761][T29428] loop4: detected capacity change from 0 to 512 [ 811.274720][T29428] EXT4-fs: Ignoring removed nobh option [ 811.325592][T29418] loop3: detected capacity change from 0 to 32768 [ 811.326517][T29428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.355001][T29428] ext4 filesystem being mounted at /1396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.501953][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.148779][T29451] loop3: detected capacity change from 0 to 2048 [ 812.167692][T29451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 812.185302][T29449] loop2: detected capacity change from 0 to 4096 [ 812.193827][T29449] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 812.259018][ T5156] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 812.279751][T29449] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 812.482130][ T5156] usb 2-1: Using ep0 maxpacket: 32 [ 812.498657][T15406] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 812.509164][ T5156] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 812.517205][ T5156] usb 2-1: config 0 has no interface number 0 [ 812.553290][ T5156] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 812.583916][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.599723][ T5156] usb 2-1: Product: syz [ 812.603955][ T5156] usb 2-1: Manufacturer: syz [ 812.630983][ T5156] usb 2-1: SerialNumber: syz [ 812.638581][ T5156] usb 2-1: config 0 descriptor?? [ 812.658721][ T5156] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 812.678983][ T5156] usb 2-1: selecting invalid altsetting 1 [ 812.693463][ T5156] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 812.721957][ T5156] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 812.758834][ T5156] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 812.784373][ T5156] usb 2-1: media controller created [ 812.838576][ T5156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.932515][ T5156] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 812.953357][ T5156] zl10353_read_register: readreg error (reg=127, ret==-71) [ 812.969225][ T5156] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 813.079678][ T5156] usb 2-1: USB disconnect, device number 62 [ 813.125488][T29474] loop3: detected capacity change from 0 to 512 [ 813.170226][T29474] EXT4-fs: Ignoring removed orlov option [ 813.209199][T29474] EXT4-fs (loop3): Test dummy encryption mode enabled [ 813.216131][T29474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 813.278696][T29474] EXT4-fs (loop3): 1 truncate cleaned up [ 813.325519][T29474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.463483][T29474] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 813.491729][T29474] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 813.577217][T29460] loop4: detected capacity change from 0 to 40427 [ 813.626553][T29460] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 813.633315][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.651353][T29460] F2FS-fs (loop4): invalid crc value [ 813.681327][T29460] F2FS-fs (loop4): Found nat_bits in checkpoint [ 813.785458][T29490] mmap: syz.1.10435 (29490) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 813.868518][T29460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 814.055622][T16431] syz-executor: attempt to access beyond end of device [ 814.055622][T16431] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 814.099336][T16431] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 814.311141][T29486] loop2: detected capacity change from 0 to 32768 [ 814.328489][T29486] XFS: noikeep mount option is deprecated. [ 814.351765][T29486] XFS: attr2 mount option is deprecated. [ 814.430462][T29486] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 814.457666][T29512] loop1: detected capacity change from 0 to 256 [ 814.494936][T29517] Bluetooth: MGMT ver 1.22 [ 814.530952][T29486] XFS (loop2): Ending clean mount [ 814.542619][T29486] XFS (loop2): Quotacheck needed: Please wait. [ 814.637886][T29512] FAT-fs (loop1): Directory bread(block 64) failed [ 814.689217][T29512] FAT-fs (loop1): Directory bread(block 65) failed [ 814.695926][T29512] FAT-fs (loop1): Directory bread(block 66) failed [ 814.729482][T29512] FAT-fs (loop1): Directory bread(block 67) failed [ 814.738121][T29486] XFS (loop2): Quotacheck: Done. [ 814.759099][T29512] FAT-fs (loop1): Directory bread(block 68) failed [ 814.769366][T29512] FAT-fs (loop1): Directory bread(block 69) failed [ 814.776050][T29512] FAT-fs (loop1): Directory bread(block 70) failed [ 814.819067][T29512] FAT-fs (loop1): Directory bread(block 71) failed [ 814.825771][T29512] FAT-fs (loop1): Directory bread(block 72) failed [ 814.839733][T29519] loop3: detected capacity change from 0 to 4096 [ 814.866422][T29512] FAT-fs (loop1): Directory bread(block 73) failed [ 814.870762][T29519] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 814.918665][T29519] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 814.951616][T15406] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 815.248400][T16857] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 815.366174][T29526] loop1: detected capacity change from 0 to 128 [ 815.400643][T29526] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 815.450305][T29526] ext4 filesystem being mounted at /2674/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 815.465177][T29531] loop3: detected capacity change from 0 to 1024 [ 815.482259][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.531468][ T27] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 815.552571][T29531] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 815.568326][ T28] audit: type=1800 audit(1777282026.330:701): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10448" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 815.588987][ C1] vkms_vblank_simulate: vblank timer overrun [ 815.589135][T29531] System zones: 0-1, 3-36 [ 815.601947][T29531] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.10450: bad orphan inode 134217728 [ 815.653921][T29531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.678555][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 815.753745][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 815.788746][ T27] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.805019][ T27] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.824440][T29537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10452'. [ 815.836045][ T27] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 815.849672][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.858930][ T27] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 815.858957][ T27] usb 5-1: Product: syz [ 815.858971][ T27] usb 5-1: Manufacturer: syz [ 815.878792][ T27] hub 5-1:4.0: USB hub found [ 816.091430][ T27] hub 5-1:4.0: 3 ports detected [ 816.226929][T29545] loop3: detected capacity change from 0 to 4096 [ 816.248286][T29545] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 816.270136][T29545] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 816.289917][T29545] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 816.308295][T29545] ntfs: volume version 3.1. [ 816.317141][T29545] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 816.352752][T29545] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 816.368028][T29545] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 816.402668][T29545] ntfs: (device loop3): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 816.502396][ T27] hub 5-1:4.0: set hub depth failed [ 816.531333][ T27] usb 5-1: USB disconnect, device number 38 [ 817.018917][T29558] loop3: detected capacity change from 0 to 32768 [ 817.051370][T29569] loop2: detected capacity change from 0 to 8 [ 817.182239][T29558] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 817.297772][T29575] loop4: detected capacity change from 0 to 2048 [ 817.345575][T29575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 817.391961][T29575] ext4 filesystem being mounted at /1404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.409176][T29569] SQUASHFS error: xz decompression failed, data probably corrupt [ 817.436749][T16857] ocfs2: Unmounting device (7,3) on (node local) [ 817.443819][T29569] SQUASHFS error: Failed to read block 0x60: -5 [ 817.531733][T29569] SQUASHFS error: xz decompression failed, data probably corrupt [ 817.573280][T29569] SQUASHFS error: Failed to read block 0x60: -5 [ 817.593488][ T28] audit: type=1800 audit(1777282028.350:702): pid=29569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10466" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 817.641874][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.110419][T29594] loop1: detected capacity change from 0 to 4096 [ 818.185705][T29594] ntfs: volume version 3.1. [ 818.212033][T29602] loop3: detected capacity change from 0 to 1764 [ 818.231797][T29594] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 818.628561][T29611] loop3: detected capacity change from 0 to 764 [ 818.681855][T29611] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 819.116242][T29623] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 819.163685][T29623] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 819.563244][T29616] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 819.579021][T29616] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 819.598448][T29616] F2FS-fs (loop1): invalid crc value [ 819.638362][T29616] F2FS-fs (loop1): Found nat_bits in checkpoint [ 819.686502][ T787] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 819.710817][T29620] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 819.757931][T29616] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 819.766486][T29616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 819.804793][T29616] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 819.901517][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 819.932765][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.965035][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.994688][ T787] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 820.004739][T29620] XFS (loop2): Ending clean mount [ 820.011471][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.020149][ T787] usb 4-1: Product: syz [ 820.024586][ T787] usb 4-1: Manufacturer: syz [ 820.046124][ T787] usb 4-1: SerialNumber: syz [ 820.069982][ T787] usb 4-1: selecting invalid altsetting 1 [ 820.076429][ T787] usb 4-1: unit 6 not found! [ 820.160664][T15406] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 820.259210][ T27] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 820.284053][ T787] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 820.353369][ T787] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 820.427108][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.503070][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.509206][T16859] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 820.514246][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.532597][ T27] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 820.541988][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.552653][ T27] usb 5-1: config 0 descriptor?? [ 820.560672][ T787] usb 4-1: USB disconnect, device number 53 [ 820.726711][T16859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.739644][T16859] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 820.748750][T16859] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 820.759423][T16859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.772693][T16859] usb 2-1: config 0 descriptor?? [ 820.985672][ T27] arvo 0003:1E7D:30D4.0009: item fetching failed at offset 5/7 [ 820.997042][ T27] arvo 0003:1E7D:30D4.0009: parse failed [ 821.008110][ T27] arvo: probe of 0003:1E7D:30D4.0009 failed with error -22 [ 821.024272][T16859] usb 2-1: USB disconnect, device number 63 [ 821.070985][T29654] set_capacity_and_notify: 3 callbacks suppressed [ 821.070995][T29654] loop2: detected capacity change from 0 to 32768 [ 821.202956][ T27] usb 5-1: USB disconnect, device number 39 [ 821.871751][T29680] loop3: detected capacity change from 0 to 128 [ 821.937828][T29674] loop1: detected capacity change from 0 to 4096 [ 821.973660][T29674] ntfs3: loop1: ino=3, Correct links count -> 2. [ 822.170254][T29687] loop3: detected capacity change from 0 to 1024 [ 822.876041][T29712] loop4: detected capacity change from 0 to 512 [ 822.933214][T29712] EXT4-fs (loop4): 1 orphan inode deleted [ 822.940485][T29712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.008323][T29719] tipc: Enabling of bearer rejected, already enabled [ 823.074520][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.241400][T29728] loop3: detected capacity change from 0 to 1024 [ 823.333048][T29729] loop4: detected capacity change from 0 to 4096 [ 823.385716][T29731] loop1: detected capacity change from 0 to 1024 [ 823.404966][T29729] ntfs: volume version 3.1. [ 823.559814][T29729] __ntfs_error: 1 callbacks suppressed [ 823.559829][T29729] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 823.589046][T29729] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 823.627227][ T49] hfsplus: b-tree write err: -5, ino 25 [ 823.642854][ T49] hfsplus: b-tree write err: -5, ino 4 [ 823.672912][ T49] hfsplus: b-tree write err: -5, ino 2 [ 823.917004][T29739] loop4: detected capacity change from 0 to 512 [ 823.921771][T29742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10535'. [ 823.953194][T29739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 823.997438][T29739] EXT4-fs: journaled quota format not specified [ 824.389054][T16859] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 824.592483][T16859] usb 4-1: Using ep0 maxpacket: 16 [ 824.608253][T16859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.636228][T16859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 824.664704][T16859] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 824.688736][T16859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.709051][T16859] usb 4-1: Product: syz [ 824.716635][T16859] usb 4-1: Manufacturer: syz [ 824.726964][T16859] usb 4-1: SerialNumber: syz [ 824.742747][T16859] usb 4-1: config 0 descriptor?? [ 824.782681][T16859] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 824.804680][T16859] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 824.979509][T16859] mcba_usb: probe of 4-1:0.0 failed with error -90 [ 825.018689][T16859] usb 4-1: USB disconnect, device number 54 [ 825.077456][T29766] loop4: detected capacity change from 0 to 4096 [ 825.123384][T29764] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 825.187459][T29767] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 825.267382][T29766] NILFS (loop4): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=2048, cno=5, offset=63330, blocknr=0, vblocknr=34359803903 [ 825.318954][T29766] NILFS (loop4): error -2 preparing GC: cannot read source blocks [ 825.322242][T29764] ntfs3: loop2: failed to convert "c46c" to iso8859-6 [ 825.353869][T29764] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 825.424288][T29764] ntfs3: loop2: failed to convert "0031" to iso8859-6 [ 825.469171][T29764] ntfs3: loop2: failed to convert "0032" to iso8859-6 [ 825.502904][T29764] ntfs3: loop2: failed to convert "0033" to iso8859-6 [ 825.547064][T29769] trusted_key: encrypted_key: key trusted:syz not found [ 826.115772][T29789] FAT-fs (loop3): Directory bread(block 64) failed [ 826.176001][T29789] FAT-fs (loop3): Directory bread(block 65) failed [ 826.189374][T29789] FAT-fs (loop3): Directory bread(block 66) failed [ 826.195968][T29789] FAT-fs (loop3): Directory bread(block 67) failed [ 826.221828][T29789] FAT-fs (loop3): Directory bread(block 68) failed [ 826.228415][T29789] FAT-fs (loop3): Directory bread(block 69) failed [ 826.243410][T29791] set_capacity_and_notify: 2 callbacks suppressed [ 826.243425][T29791] loop1: detected capacity change from 0 to 512 [ 826.256998][T29789] FAT-fs (loop3): Directory bread(block 70) failed [ 826.266369][T29789] FAT-fs (loop3): Directory bread(block 71) failed [ 826.277908][T29789] FAT-fs (loop3): Directory bread(block 72) failed [ 826.299156][T29789] FAT-fs (loop3): Directory bread(block 73) failed [ 826.320371][T29791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.388542][T29791] ext4 filesystem being mounted at /2700/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.600208][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.654565][T29795] loop2: detected capacity change from 0 to 40427 [ 826.664996][T29795] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 826.695616][T29795] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 826.724056][T29795] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 826.729439][T29802] loop3: detected capacity change from 0 to 164 [ 826.751993][T29795] F2FS-fs (loop2): Found nat_bits in checkpoint [ 826.770461][T29802] Unable to read rock-ridge attributes [ 826.784963][T29802] Unable to read rock-ridge attributes [ 826.928822][T29795] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 826.944010][T29795] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 827.092648][ T28] audit: type=1800 audit(1777282037.850:703): pid=29795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10560" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 827.115826][T29814] ip6tnl4: entered promiscuous mode [ 827.174360][T29814] ip6tnl4: entered allmulticast mode [ 827.189222][T29814] team0: Device ip6tnl4 is of different type [ 827.351866][T29816] veth0_to_bond: entered allmulticast mode [ 827.777856][T29831] loop1: detected capacity change from 0 to 256 [ 827.796748][T29831] exfat: Deprecated parameter 'utf8' [ 827.865904][T29831] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 827.932790][ T28] audit: type=1800 audit(1777282038.690:704): pid=29831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10573" name="file1" dev="loop1" ino=1048824 res=0 errno=0 [ 828.278352][T29839] loop2: detected capacity change from 0 to 512 [ 828.305821][T29839] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 828.337843][T29839] EXT4-fs (loop2): 2 truncates cleaned up [ 828.350594][T29825] loop4: detected capacity change from 0 to 32768 [ 828.374854][T29839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.511375][T29839] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.2.10577: path /1480/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 828.547911][T29829] loop3: detected capacity change from 0 to 32768 [ 828.609268][T29839] EXT4-fs (loop2): Remounting filesystem read-only [ 828.635005][T29829] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 828.713522][T29854] raw_sendmsg: syz.4.10580 forgot to set AF_INET. Fix it! [ 828.746427][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.855733][T29829] XFS (loop3): Ending clean mount [ 829.133915][T16857] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 829.276586][T29868] loop2: detected capacity change from 0 to 512 [ 829.356022][T29866] loop4: detected capacity change from 0 to 4096 [ 829.374946][T29866] ntfs3: Invalid value for gid. [ 829.383679][T29868] EXT4-fs (loop2): 1 truncate cleaned up [ 829.391982][T29868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.452825][ T5762] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 829.711971][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.064789][T29870] loop1: detected capacity change from 0 to 40427 [ 830.086875][T29870] F2FS-fs (loop1): invalid crc value [ 830.111232][T29870] F2FS-fs (loop1): Found nat_bits in checkpoint [ 830.163740][T29887] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 830.191347][T29870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 830.205090][T29887] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 830.230086][T29887] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.10595: invalid indirect mapped block 2683928664 (level 1) [ 830.256231][T29887] EXT4-fs (loop3): Remounting filesystem read-only [ 830.302575][T29887] EXT4-fs (loop3): 1 truncate cleaned up [ 830.331230][T29887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.348973][ T5156] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 830.526053][T29887] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 830.554846][T29887] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 830.570695][ T5156] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 830.595667][ T5156] usb 3-1: config 0 has no interface number 0 [ 830.607782][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.608928][ T5156] usb 3-1: config 0 interface 36 altsetting 215 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.639682][ T5156] usb 3-1: config 0 interface 36 altsetting 215 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.664382][ T5156] usb 3-1: config 0 interface 36 has no altsetting 0 [ 830.672929][ T5156] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 830.682706][ T5156] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 830.691136][ T5156] usb 3-1: Manufacturer: syz [ 830.710774][ T5156] usb 3-1: config 0 descriptor?? [ 830.776451][T29900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 830.824535][T29900] EXT4-fs (loop4): 1 truncate cleaned up [ 830.842156][T29900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.942431][T29900] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 830.956591][T29900] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 830.985917][T16431] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=0, size=1024 fake=0 [ 831.016448][T16431] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 831.046050][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.173530][ T5156] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 831.221747][T16859] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 831.423913][T16859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.438922][T16859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.462031][T16859] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 831.481923][T16859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.493944][ T5774] usb 3-1: USB disconnect, device number 55 [ 831.518128][T16859] usb 4-1: config 0 descriptor?? [ 831.640857][T29922] set_capacity_and_notify: 2 callbacks suppressed [ 831.640871][T29922] loop1: detected capacity change from 0 to 128 [ 831.647780][T29920] loop4: detected capacity change from 0 to 1024 [ 831.672982][T29922] affs: Error parsing options [ 831.962802][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 831.973179][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 831.980520][T29926] openvswitch: netlink: Actions may not be safe on all matching packets [ 831.993241][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 832.001955][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 832.009235][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 832.039004][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 832.047578][T16859] isku 0003:1E7D:319C.000B: unknown main item tag 0x0 [ 832.101942][T16859] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 832.165034][T16859] isku 0003:1E7D:319C.000B: couldn't init struct isku_device [ 832.176218][T16859] isku 0003:1E7D:319C.000B: couldn't install keyboard [ 832.209699][T16859] isku: probe of 0003:1E7D:319C.000B failed with error -71 [ 832.253757][T16859] usb 4-1: USB disconnect, device number 55 [ 832.642630][T29949] loop1: detected capacity change from 0 to 16 [ 832.655822][T29949] erofs: (device loop1): mounted with root inode @ nid 36. [ 832.696708][T29949] Invalid ELF header len 10 [ 832.880700][T29955] loop3: detected capacity change from 0 to 16 [ 832.905540][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10625'. [ 832.922321][T29955] erofs: (device loop3): mounted with root inode @ nid 36. [ 832.961192][ T28] audit: type=1800 audit(1777282043.720:705): pid=29955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10626" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 832.985625][T29955] syz.3.10626: attempt to access beyond end of device [ 832.985625][T29955] loop3: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 833.268815][T29967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10630'. [ 833.307506][T29967] vlan3: entered promiscuous mode [ 833.323752][T29967] macvlan0: entered promiscuous mode [ 833.360183][T29968] [U]  [ 833.402799][T29971] loop2: detected capacity change from 0 to 2048 [ 833.432916][T29971] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 833.464372][T29971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 833.708441][T29977] loop1: detected capacity change from 0 to 4096 [ 833.768686][T29983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 833.851072][T29981] loop4: detected capacity change from 0 to 4096 [ 833.889275][T29981] NILFS (loop4): invalid segment: Checksum error in segment payload [ 833.925063][T29981] NILFS (loop4): trying rollback from an earlier position [ 833.966072][T29981] NILFS (loop4): recovery complete [ 833.986945][T29990] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 834.106871][ T28] audit: type=1800 audit(1777282044.860:706): pid=29981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10637" name="file0" dev="loop4" ino=12 res=0 errno=0 [ 834.175646][ T28] audit: type=1800 audit(1777282044.900:707): pid=29981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10637" name="file0" dev="loop4" ino=12 res=0 errno=0 [ 834.742885][T30011] loop4: detected capacity change from 0 to 4096 [ 834.785576][T30011] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 834.863404][T30011] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 834.926081][T29997] loop3: detected capacity change from 0 to 32768 [ 834.949124][T30011] ntfs3: loop4: ino=5, "/" directory corrupted [ 834.980424][T29997] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 835.086337][T29997] XFS (loop3): Ending clean mount [ 835.106769][T29997] XFS (loop3): Quotacheck needed: Please wait. [ 835.218490][T29997] XFS (loop3): Quotacheck: Done. [ 835.307682][T16857] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 836.251243][T30037] loop2: detected capacity change from 0 to 40427 [ 836.262330][T30051] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 836.278908][T30037] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 836.301779][T30037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 836.319368][T30051] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 836.329081][ T5774] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 836.335829][T30037] F2FS-fs (loop2): invalid crc value [ 836.368540][T30051] REISERFS (device loop1): using ordered data mode [ 836.395116][T30037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 836.417811][T30051] reiserfs: using flush barriers [ 836.459696][T30051] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 836.489474][T30051] REISERFS (device loop1): checking transaction log (loop1) [ 836.519147][ T5774] usb 5-1: Using ep0 maxpacket: 32 [ 836.529502][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.531888][T30051] REISERFS (device loop1): Using r5 hash to sort names [ 836.555521][ T5774] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 836.582823][T30051] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 836.583345][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.612136][T30037] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 836.630872][T30037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 836.645643][ T5774] usb 5-1: config 0 descriptor?? [ 836.653395][T30063] set_capacity_and_notify: 1 callbacks suppressed [ 836.653411][T30063] loop3: detected capacity change from 0 to 4096 [ 836.719952][T30063] NILFS (loop3): invalid segment: Checksum error in segment payload [ 836.728044][T30063] NILFS (loop3): trying rollback from an earlier position [ 836.776334][T30063] NILFS (loop3): recovery complete [ 836.793324][T30065] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 836.847584][ T28] audit: type=1800 audit(1777282047.600:708): pid=30063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10668" name="file0" dev="loop3" ino=12 res=0 errno=0 [ 836.897260][ T28] audit: type=1800 audit(1777282047.630:709): pid=30063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10668" name="file0" dev="loop3" ino=12 res=0 errno=0 [ 837.153697][ T5774] apple 0003:05AC:027C.000C: unknown main item tag 0x0 [ 837.174826][T30069] loop2: detected capacity change from 0 to 8 [ 837.184091][ T5774] apple 0003:05AC:027C.000C: unknown main item tag 0x0 [ 837.209600][ T5774] apple 0003:05AC:027C.000C: unknown main item tag 0x0 [ 837.238186][T30069] SQUASHFS error: lzo decompression failed, data probably corrupt [ 837.246605][ T5774] apple 0003:05AC:027C.000C: unknown main item tag 0x0 [ 837.260485][ T5774] apple 0003:05AC:027C.000C: unknown main item tag 0x0 [ 837.286145][T30069] SQUASHFS error: Failed to read block 0x202: -5 [ 837.299681][ T5774] apple 0003:05AC:027C.000C: unknown main item tag 0x0 [ 837.313317][T30069] SQUASHFS error: Unable to read metadata cache entry [200] [ 837.330094][ T5774] apple 0003:05AC:027C.000C: hidraw0: USB HID v0.02 Device [HID 05ac:027c] on usb-dummy_hcd.4-1/input0 [ 837.402484][ T5774] usb 5-1: USB disconnect, device number 40 [ 837.573258][T30075] fido_id[30075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 837.600312][T30081] program syz.3.10675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 838.970688][T30136] loop2: detected capacity change from 0 to 4096 [ 838.992238][T30136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.216193][ T27] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 839.225251][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.386644][T30155] C: entered promiscuous mode [ 839.392809][T30155] team_slave_1: entered promiscuous mode [ 839.415038][T30155] macsec1: entered promiscuous mode [ 839.425183][T30155] team0: entered promiscuous mode [ 839.435458][T30155] team0: Device macsec1 is already an upper device of the team interface [ 839.448990][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 839.470815][ T27] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 839.490643][T30155] team0: left promiscuous mode [ 839.496391][T30155] C: left promiscuous mode [ 839.496668][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 839.501010][T30155] team_slave_1: left promiscuous mode [ 839.533382][ T27] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 839.557603][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.576357][ T27] usb 2-1: config 0 descriptor?? [ 839.848086][T30171] loop4: detected capacity change from 0 to 2048 [ 839.895658][T30171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 840.003515][ T27] acrux 0003:1A34:0802.000D: unknown global tag 0xd [ 840.029106][ T27] acrux 0003:1A34:0802.000D: item 0 1 1 13 parsing failed [ 840.050634][ T27] acrux 0003:1A34:0802.000D: parse failed [ 840.066782][ T27] acrux: probe of 0003:1A34:0802.000D failed with error -22 [ 840.274746][ T27] usb 2-1: USB disconnect, device number 64 [ 840.413715][T30167] loop3: detected capacity change from 0 to 32768 [ 840.447512][T30167] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 840.494539][T30167] XFS (loop3): Ending clean mount [ 840.512894][T30167] XFS (loop3): Quotacheck needed: Please wait. [ 840.613052][T30167] XFS (loop3): Quotacheck: Done. [ 840.705172][T16857] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 840.769229][T30181] loop4: detected capacity change from 0 to 32768 [ 840.915149][T30181] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 841.070842][T30181] XFS (loop4): Ending clean mount [ 841.230293][T16431] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 841.438161][T30212] loop2: detected capacity change from 0 to 1024 [ 841.469868][T30212] EXT4-fs: inline encryption not supported [ 841.509802][T30212] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 841.586236][T30212] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.10730: lblock 2 mapped to illegal pblock 2 (length 1) [ 841.646820][ T5829] kernel write not supported for file /input/mouse0 (pid: 5829 comm: kworker/1:6) [ 841.660594][T30212] EXT4-fs (loop2): Remounting filesystem read-only [ 841.698909][T30212] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 841.707150][T30212] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 841.779128][T30212] EXT4-fs (loop2): 1 orphan inode deleted [ 841.786138][T30212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.805679][ T28] audit: type=1326 audit(1777282052.560:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 841.870305][ T28] audit: type=1326 audit(1777282052.590:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 841.966007][ T28] audit: type=1326 audit(1777282052.600:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 841.988460][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.054100][T30229] loop1: detected capacity change from 0 to 1024 [ 842.067358][ T28] audit: type=1326 audit(1777282052.600:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 842.078718][T30231] loop4: detected capacity change from 0 to 512 [ 842.098204][ T28] audit: type=1326 audit(1777282052.600:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 842.120640][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.147523][T15406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.149131][T30231] EXT4-fs (loop4): orphan cleanup on readonly fs [ 842.165511][T30231] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.10738: ea_inode file size=4 entry size=6 [ 842.181696][T30231] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 842.197499][T30231] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #15: comm syz.4.10738: corrupted inode contents [ 842.213755][T30231] EXT4-fs (loop4): Remounting filesystem read-only [ 842.220779][T30231] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -5) [ 842.225797][ T28] audit: type=1326 audit(1777282052.600:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 842.230609][T30231] EXT4-fs (loop4): 1 orphan inode deleted [ 842.252191][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.311116][T30231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 842.339977][ T28] audit: type=1326 audit(1777282052.600:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 842.396218][ T28] audit: type=1326 audit(1777282052.600:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30222 comm="syz.1.10736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814479cdd9 code=0x7ffc0000 [ 842.418701][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.505585][T30231] overlayfs: failed to get redirect (-5) [ 842.544830][T30236] loop3: detected capacity change from 0 to 4096 [ 842.565446][T30240] loop1: detected capacity change from 0 to 2048 [ 842.613118][T30244] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 842.614731][T30243] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 842.629603][T30242] loop2: detected capacity change from 0 to 1024 [ 842.712186][T16431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.875794][ T12] hfsplus: b-tree write err: -5, ino 25 [ 842.905364][ T12] hfsplus: b-tree write err: -5, ino 4 [ 842.919096][ T12] hfsplus: b-tree write err: -5, ino 2 [ 842.924718][ T12] hfsplus: b-tree write err: -5, ino 26 [ 843.101766][T30250] loop1: detected capacity change from 0 to 4096 [ 843.153100][T30250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.247303][T30259] loop3: detected capacity change from 0 to 512 [ 843.301430][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.345814][T30259] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.10750: inode has both inline data and extents flags [ 843.385079][T30259] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.10750: couldn't read orphan inode 15 (err -117) [ 843.407083][T30259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.523379][T30259] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.10750: invalid size [ 843.660959][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.998377][T30285] loop4: detected capacity change from 0 to 128 [ 844.094540][T30285] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 844.126045][T30287] loop1: detected capacity change from 0 to 8192 [ 844.127983][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10764'. [ 844.154916][T30287] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 844.167236][T30285] ext4 filesystem being mounted at /1474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.240954][T30285] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.10761: No space for directory leaf checksum. Please run e2fsck -D. [ 844.293311][T30285] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.10761: Directory block failed checksum [ 844.437450][T16431] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 844.559533][T30306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10769'. [ 844.653761][T30309] loop4: detected capacity change from 0 to 16 [ 844.665217][T30309] erofs: (device loop4): mounted with root inode @ nid 36. [ 844.719432][ T5829] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 844.775309][T30313] EXT4-fs: Ignoring removed bh option [ 844.800642][T30313] EXT4-fs (loop1): stripe (14) is not aligned with cluster size (16), stripe is disabled [ 844.832785][T30313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.875700][T30313] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 844.924712][ T5829] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 844.939973][ T5829] usb 3-1: config 0 has no interface number 0 [ 844.946186][ T5829] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 844.946212][ T5829] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 844.946250][ T5829] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 844.946271][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.970235][ T5829] usb 3-1: config 0 descriptor?? [ 844.972774][T30301] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 844.981908][ T5829] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 845.034691][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.263150][T16859] usb 3-1: USB disconnect, device number 56 [ 845.345831][T30326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10779'. [ 845.355141][T30326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10779'. [ 845.364995][T30326] netlink: 'syz.1.10779': attribute type 11 has an invalid length. [ 846.016168][T30348] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 846.093582][T30348] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 846.173664][T30348] ext2 filesystem being mounted at /1524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.310726][T15406] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 846.932954][T15726] hfsplus: b-tree write err: -5, ino 25 [ 846.961563][T15726] hfsplus: b-tree write err: -5, ino 4 [ 846.969121][T15726] hfsplus: b-tree write err: -5, ino 2 [ 847.226129][T30386] set_capacity_and_notify: 4 callbacks suppressed [ 847.226144][T30386] loop4: detected capacity change from 0 to 4096 [ 847.309101][T30391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 847.607598][T30393] loop2: detected capacity change from 0 to 4096 [ 847.649226][T30393] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 847.724485][T30393] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 847.755233][T30381] loop3: detected capacity change from 0 to 32768 [ 847.807793][T30381] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 847.823986][ T1078] ntfs3: loop2: ino=1a, ntfs3_write_inode failed, -22. [ 847.851240][T15406] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 847.979058][T30381] XFS (loop3): Ending clean mount [ 848.038010][T30410] loop2: detected capacity change from 0 to 1024 [ 848.047208][T30390] loop1: detected capacity change from 0 to 32768 [ 848.065380][T16857] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 848.160994][T30390] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 848.160994][T30390] [ 848.410388][ T12] hfsplus: b-tree write err: -5, ino 25 [ 848.416267][ T12] hfsplus: b-tree write err: -5, ino 4 [ 848.462957][ T12] hfsplus: b-tree write err: -5, ino 2 [ 848.519317][ T12] hfsplus: b-tree write err: -5, ino 20 [ 848.523515][T30421] loop3: detected capacity change from 0 to 1024 [ 848.571304][T30421] EXT4-fs: Ignoring removed bh option [ 848.668471][T30421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.819861][T30429] program syz.1.10821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.856798][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.421617][T30449] loop4: detected capacity change from 0 to 512 [ 849.678104][T30456] loop3: detected capacity change from 0 to 2048 [ 849.737603][T30456] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 849.760391][T30461] loop4: detected capacity change from 0 to 256 [ 849.774241][T30456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.846964][T30462] vlan3: entered allmulticast mode [ 849.924968][T30462] team0: entered allmulticast mode [ 849.943946][T30462] C: entered allmulticast mode [ 849.963397][T30462] team_slave_1: entered allmulticast mode [ 850.434511][T30483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10842'. [ 850.468208][T30483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10842'. [ 851.245921][T30520] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10856'. [ 851.493185][T30494] loop4: detected capacity change from 0 to 32768 [ 851.526041][T30494] (syz.4.10847,30494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 851.593154][T30494] (syz.4.10847,30494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 851.609435][T30528] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 851.684685][T30494] JBD2: Ignoring recovery information on journal [ 851.896144][T30494] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 852.205930][T30538] FAT-fs (loop2): Directory bread(block 64) failed [ 852.244435][T30538] FAT-fs (loop2): Directory bread(block 65) failed [ 852.264961][T30538] FAT-fs (loop2): Directory bread(block 66) failed [ 852.296168][T30538] FAT-fs (loop2): Directory bread(block 67) failed [ 852.334717][T30538] FAT-fs (loop2): Directory bread(block 68) failed [ 852.352528][T30538] FAT-fs (loop2): Directory bread(block 69) failed [ 852.373133][T16431] ocfs2: Unmounting device (7,4) on (node local) [ 852.375449][T30538] FAT-fs (loop2): Directory bread(block 70) failed [ 852.413437][T30538] FAT-fs (loop2): Directory bread(block 71) failed [ 852.413576][T30538] FAT-fs (loop2): Directory bread(block 72) failed [ 852.413603][T30538] FAT-fs (loop2): Directory bread(block 73) failed [ 852.816213][T30554] [U] „ [ 853.038517][T30565] netlink: 'syz.1.10875': attribute type 322 has an invalid length. [ 853.246314][T30573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10879'. [ 853.458266][T30585] set_capacity_and_notify: 3 callbacks suppressed [ 853.458289][T30585] loop3: detected capacity change from 0 to 65 [ 853.526459][T30585] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 853.547075][T30585] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 853.719155][ T5774] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 853.763471][T30593] loop1: detected capacity change from 0 to 1024 [ 853.855313][T30593] hfsplus: bad catalog entry type [ 853.904402][ T5774] usb 5-1: Using ep0 maxpacket: 32 [ 853.924850][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.937081][T15726] hfsplus: b-tree write err: -5, ino 25 [ 853.943135][T15726] hfsplus: b-tree write err: -5, ino 4 [ 853.947007][T30599] loop3: detected capacity change from 0 to 512 [ 853.956432][T15726] hfsplus: b-tree write err: -5, ino 2 [ 853.965842][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.989903][T30599] EXT4-fs: Ignoring removed nobh option [ 853.993067][ T5774] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 854.005799][ T5774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.016261][ T5774] usb 5-1: config 0 descriptor?? [ 854.086788][T30599] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 854.139056][T30599] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 854.181078][T30609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10897'. [ 854.203241][T30599] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.10892: inode has both inline data and extents flags [ 854.246481][T30599] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.10892: couldn't read orphan inode 13 (err -117) [ 854.275389][T30599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 854.405869][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.509309][T30620] netlink: 'syz.2.10902': attribute type 2 has an invalid length. [ 854.528952][ T5774] nintendo 0003:057E:200E.000E: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 854.607918][T30624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10903'. [ 854.683013][ T5774] nintendo 0003:057E:200E.000E: Failed charging grip handshake [ 854.720793][T30627] loop3: detected capacity change from 0 to 1024 [ 854.724544][ T5774] nintendo 0003:057E:200E.000E: Failed to initialize controller; ret=-110 [ 854.784898][T30629] loop2: detected capacity change from 0 to 128 [ 854.803811][ T5774] nintendo 0003:057E:200E.000E: probe - fail = -110 [ 854.821737][ T5774] nintendo: probe of 0003:057E:200E.000E failed with error -110 [ 854.822651][T30629] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 854.871210][T30631] cgroup: fork rejected by pids controller in /syz1 [ 854.876772][ T5774] usb 5-1: USB disconnect, device number 41 [ 854.904461][T30629] hpfs: filesystem error: improperly stopped [ 854.939787][T30629] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 854.947579][T30629] hpfs: You really don't want any checks? You are crazy... [ 854.974772][T30629] hpfs: hpfs_map_sector(): read error [ 854.983901][T30629] hpfs: code page support is disabled [ 854.991691][T30629] hpfs: hpfs_map_4sectors(): unaligned read [ 854.997729][T30629] hpfs: hpfs_map_4sectors(): unaligned read [ 855.035844][T30629] hpfs: filesystem error: unable to find root dir [ 855.064984][T30629] hpfs: hpfs_map_4sectors(): unaligned read [ 855.148259][T30635] loop3: detected capacity change from 0 to 4096 [ 855.263116][T30638] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 855.382033][T30635] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 855.382905][T30640] loop4: detected capacity change from 0 to 2048 [ 855.419611][T30640] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 855.453764][T30640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.559406][T30642] loop2: detected capacity change from 0 to 4096 [ 855.599822][T30642] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 855.643010][T15726] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.681456][T30644] loop3: detected capacity change from 0 to 512 [ 855.689937][T30644] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 855.725075][T30644] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.10912: Invalid block bitmap block 0 in block_group 0 [ 855.751326][T30644] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 855.778521][T30644] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.10912: attempt to clear invalid blocks 983261 len 1 [ 855.794592][T30642] ntfs3: loop2: MFT: r=b, expect seq=b instead of 0! [ 855.821421][T15726] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.839229][T30644] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.10912: Invalid inode table block 0 in block_group 0 [ 855.845564][T30642] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 855.896373][T30642] ntfs3: loop2: Failed to load $Extend (-22). [ 855.906738][T30644] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 855.930090][T30642] ntfs3: loop2: Failed to initialize $Extend. [ 855.981029][T30644] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 856.028540][T30644] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.10912: Invalid inode table block 0 in block_group 0 [ 856.062461][T30644] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 856.113777][T30644] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.10912: mark_inode_dirty error [ 856.139848][T15726] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.154555][T30644] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 856.172946][T30644] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.10912: Invalid inode table block 0 in block_group 0 [ 856.210431][T30644] EXT4-fs (loop3): 1 truncate cleaned up [ 856.217276][T30644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.322428][T30644] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.10912: Invalid inode table block 0 in block_group 0 [ 856.410072][T30652] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.10912: Invalid inode table block 0 in block_group 0 [ 856.424882][T15726] netdevsim netdevsim1 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.530180][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.024268][T15726] tipc: Disabling bearer [ 857.047135][T15726] tipc: Left network mode [ 857.181800][T30671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 857.198179][T30671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 857.222684][T30671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 857.245732][T30671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 857.269075][T30671] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 857.306858][T30671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.338477][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 857.349504][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 857.358649][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 857.387263][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 857.403702][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 857.411524][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.425217][T30681] loop3: detected capacity change from 0 to 512 [ 857.471064][T30681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 857.499040][T30681] EXT4-fs (loop3): 1 truncate cleaned up [ 857.522779][T30681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.822795][T16857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.018497][T30696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.058698][T30696] ext4 filesystem being mounted at /1508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.777337][T30699] set_capacity_and_notify: 2 callbacks suppressed [ 858.777353][T30699] loop2: detected capacity change from 0 to 32768 [ 858.825691][T15721] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm kworker/u4:2: bg 0: block 345: padding at end of block bitmap is not set [ 858.852557][T15721] EXT4-fs (loop4): Remounting filesystem read-only [ 858.866320][T30699] [ 858.866320][T30699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 858.866320][T30699] [ 858.869570][ T12] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 858.888493][ T12] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 858.896928][ T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 858.904311][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.914380][ T12] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 858.921171][ T12] RIP: 0010:ext4_ext_map_blocks+0x2d04/0x6800 [ 858.927261][ T12] Code: 8b 04 24 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 c7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 41 0f b7 47 08 c1 e0 04 48 [ 858.946893][ T12] RSP: 0018:ffffc90000117520 EFLAGS: 00010246 [ 858.952981][ T12] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffff88801ba55a00 [ 858.961004][ T12] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000003 [ 858.969420][ T12] RBP: ffffc900001177d0 R08: ffffffff911c559f R09: 1ffffffff2238ab3 [ 858.977415][ T12] R10: dffffc0000000000 R11: fffffbfff2238ab4 R12: 0000000000000001 [ 858.985406][ T12] R13: 1ffff92000022ed0 R14: dffffc0000000000 R15: fffffffffffffffb [ 858.993393][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 859.002324][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.009002][ T12] CR2: 00007f7108d1d872 CR3: 0000000065545000 CR4: 00000000003506f0 [ 859.016997][ T12] Call Trace: [ 859.020272][ T12] [ 859.023199][ T12] ? rwsem_down_read_slowpath+0x880/0x880 [ 859.028915][ T12] ? ext4_ext_release+0x10/0x10 [ 859.033775][ T12] ? ext4_es_lookup_extent+0x60e/0xa00 [ 859.039233][ T12] ext4_map_blocks+0x9e2/0x1b80 [ 859.044101][ T12] ? ext4_issue_zeroout+0x250/0x250 [ 859.049313][ T12] ? ext4_journal_check_start+0x178/0x250 [ 859.055044][ T12] ? __ext4_journal_start_sb+0x259/0x560 [ 859.060680][ T12] ext4_convert_unwritten_extents+0x2c2/0x5f0 [ 859.066754][ T12] ? trace_ext4_fallocate_exit+0x1d0/0x1d0 [ 859.072577][ T12] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 859.078469][ T12] ? lockdep_hardirqs_on+0x98/0x150 [ 859.083660][ T12] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 859.089548][ T12] ? _raw_spin_unlock+0x40/0x40 [ 859.094388][ T12] ext4_convert_unwritten_io_end_vec+0xff/0x170 [ 859.100625][ T12] ext4_end_io_rsv_work+0x2f5/0x690 [ 859.105815][ T12] ? ext4_last_io_end_vec+0x70/0x70 [ 859.111003][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 859.116194][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 859.121904][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 859.127614][ T12] process_scheduled_works+0xa5d/0x15d0 [ 859.133156][ T12] ? worker_attach_to_pool+0x380/0x380 [ 859.138608][ T12] ? assign_work+0x3d2/0x5d0 [ 859.143190][ T12] worker_thread+0xa55/0xfc0 [ 859.147784][ T12] kthread+0x2fa/0x390 [ 859.151840][ T12] ? pr_cont_work+0x560/0x560 [ 859.156508][ T12] ? kthread_blkcg+0xd0/0xd0 [ 859.161089][ T12] ret_from_fork+0x48/0x80 [ 859.165500][ T12] ? kthread_blkcg+0xd0/0xd0 [ 859.170108][ T12] ret_from_fork_asm+0x11/0x20 [ 859.174879][ T12] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 859.177888][ T12] Modules linked in: [ 859.199529][T30699] [ 859.199529][T30699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.199529][T30699] [ 859.227825][T30699] [ 859.227825][T30699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.227825][T30699] [ 859.283912][T30699] [ 859.283912][T30699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.283912][T30699] [ 859.286484][ T12] ---[ end trace 0000000000000000 ]--- [ 859.301880][T30699] [ 859.301880][T30699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.301880][T30699] [ 859.322101][ T113] [ 859.322101][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 859.322101][ T113] [ 859.359350][ T12] RIP: 0010:ext4_ext_map_blocks+0x2d04/0x6800 [ 859.365599][ T12] Code: 8b 04 24 89 18 89 9c 24 38 01 00 00 4c 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 c7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 41 0f b7 47 08 c1 e0 04 48 [ 859.441120][ T12] RSP: 0018:ffffc90000117520 EFLAGS: 00010246 [ 859.447253][ T12] RAX: 0000000000000000 RBX: fffffffffffffffb RCX: ffff88801ba55a00 [ 859.455472][ T5779] Bluetooth: hci1: command tx timeout [ 859.488889][ T12] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000003 [ 859.496928][ T12] RBP: ffffc900001177d0 R08: ffffffff911c559f R09: 1ffffffff2238ab3 [ 859.528882][ T12] R10: dffffc0000000000 R11: fffffbfff2238ab4 R12: 0000000000000001 [ 859.540283][ T12] R13: 1ffff92000022ed0 R14: dffffc0000000000 R15: fffffffffffffffb [ 859.548300][ T12] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 859.600138][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 859.606964][ T12] CR2: 0000561bbd815950 CR3: 000000002f43a000 CR4: 00000000003506f0 [ 859.646353][ T12] Kernel panic - not syncing: Fatal exception [ 859.652904][ T12] Kernel Offset: disabled [ 859.657216][ T12] Rebooting in 86400 seconds..