last executing test programs: 1.980741282s ago: executing program 0 (id=1118): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x2210}], 0x1, 0x0, 0x0, 0x0) 1.934410264s ago: executing program 0 (id=1119): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xf80) read(r0, &(0x7f0000000700)=""/247, 0xf7) 1.910151355s ago: executing program 2 (id=1120): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1, &(0x7f0000001740)=""/107, 0x6b}, 0x8}], 0x1, 0x20, 0x0) 1.801130181s ago: executing program 0 (id=1122): unshare(0x6020400) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440), 0x1000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0) 1.744729613s ago: executing program 2 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f00000006c0), 0x0}, 0x20) 1.675734967s ago: executing program 2 (id=1125): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x5, 0x18e, &(0x7f0000002780)="$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") lchown(&(0x7f00000014c0)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x200) 1.62105834s ago: executing program 0 (id=1127): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250f000000050014002400000008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x30000801}, 0x800) 1.576593252s ago: executing program 1 (id=1128): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiAwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1t9BgaGDSDnulXOjbnrFi/ItUz9fN2bFwwHoz5PZGBkZGBgYmCYGbZzD7K/yhugkcHAzMDAoMIAUsTCkJaZk2rgwcDIwMzAws6ADGCqmRg4wKr0kvNzUtoZGMFJAKxtOQML3AzDxwys/CDlII7RYwZWuIyxRQPMyHYorQKlPaD0cij9GErLoyUbFrAJ/VCeRgMDAxtDReJ//iJDNgYGhorEkpIiQ4hYSUmREVzMSABuMxPU1rlMqJ47zsQwCkbBKBgFo2AUjIJRMApGwSgYBSMZAAIAAP//kpC1eQ==") lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 1.520744214s ago: executing program 4 (id=1129): r0 = inotify_init() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r0, 0x0, 0x8) 1.520579164s ago: executing program 0 (id=1130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, &(0x7f0000000100)) 1.520508595s ago: executing program 4 (id=1131): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x8, 0x5}}}, 0x90) 1.454953238s ago: executing program 4 (id=1132): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x109) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000005100000005"], 0x0) 1.453878568s ago: executing program 2 (id=1133): unshare(0x400) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 1.40566517s ago: executing program 0 (id=1134): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x42, 0x5520, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xf000000) 1.260726567s ago: executing program 3 (id=1135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8000) 1.260530178s ago: executing program 2 (id=1136): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.186882641s ago: executing program 3 (id=1137): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000c00)={0x1, 0x0, &(0x7f0000000bc0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000001840)={r1, 0x0, 0x0, 0x0, 0x0}) 1.145157333s ago: executing program 4 (id=1138): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) 1.044693378s ago: executing program 2 (id=1139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x4, 'X'}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_012={0x2, 0x0, 0x9, "7516"}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) 1.044545308s ago: executing program 1 (id=1140): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200002, 0x7}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, 0x0, 0x0) 1.00113888s ago: executing program 3 (id=1141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x9, &(0x7f0000000280)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x2f}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x17}, @flat=@handle={0x73682a85, 0x100a, 0x3}}, &(0x7f0000000740)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 956.633572ms ago: executing program 4 (id=1142): mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x5, 0x31, 0xffffffffffffffff, 0xf983e000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002fc0)) 856.656157ms ago: executing program 1 (id=1143): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 856.466737ms ago: executing program 3 (id=1144): r0 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x18000, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 823.633159ms ago: executing program 4 (id=1145): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000300)='./file1\x00', 0x16, &(0x7f0000000380)={[{@barrier}, {@subvolid}, {@acl}, {@noflushoncommit}, {}, {@autodefrag}, {@nossd_spread}, {@barrier}]}, 0x15, 0x5102, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 786.958721ms ago: executing program 3 (id=1146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x8013, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xfffffff8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 310.926934ms ago: executing program 1 (id=1148): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0xffffffffffffffff) 166.684342ms ago: executing program 3 (id=1149): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x6d89, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1150): syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) kernel console output (not intermixed with test programs): 63.212263][ T4492] Quota error (device loop1): write_blk: dquota write failed [ 63.224706][ T4492] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 63.236684][ T4502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 63.249704][ T4492] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.92: Failed to acquire dquot type 0 [ 63.279905][ T4504] set_capacity_and_notify: 1 callbacks suppressed [ 63.279918][ T4504] loop2: detected capacity change from 0 to 8 [ 63.293270][ T4492] EXT4-fs error (device loop1): ext4_free_blocks:6232: comm syz.1.92: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.358153][ T4492] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.92: Invalid inode bitmap blk 0 in block_group 0 [ 63.463593][ T4492] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 63.527676][ T4238] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8) [ 63.556965][ T4492] EXT4-fs (loop1): 1 orphan inode deleted [ 63.605321][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 63.612154][ T4238] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 63.621633][ T4516] sock: sock_timestamping_bind_phc: sock not bind to device [ 63.771290][ T4189] Bluetooth: hci4: command 0x0411 tx timeout [ 63.816429][ T4527] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.009878][ T4535] loop0: detected capacity change from 0 to 256 [ 64.027378][ T4533] sp0: Synchronizing with TNC [ 64.180348][ T4535] FAT-fs (loop0): Directory bread(block 64) failed [ 64.199754][ T4535] FAT-fs (loop0): Directory bread(block 65) failed [ 64.246496][ T4535] FAT-fs (loop0): Directory bread(block 66) failed [ 64.287398][ T4535] FAT-fs (loop0): Directory bread(block 67) failed [ 64.296006][ T4535] FAT-fs (loop0): Directory bread(block 68) failed [ 64.319091][ T4535] FAT-fs (loop0): Directory bread(block 69) failed [ 64.349462][ T4535] FAT-fs (loop0): Directory bread(block 70) failed [ 64.383511][ T4535] FAT-fs (loop0): Directory bread(block 71) failed [ 64.409007][ T4535] FAT-fs (loop0): Directory bread(block 72) failed [ 64.451493][ T4535] FAT-fs (loop0): Directory bread(block 73) failed [ 64.532273][ T4559] netlink: 'syz.2.121': attribute type 2 has an invalid length. [ 64.549599][ T4559] netlink: 244 bytes leftover after parsing attributes in process `syz.2.121'. [ 64.568965][ T4561] loop4: detected capacity change from 0 to 2048 [ 64.630808][ T4563] loop1: detected capacity change from 0 to 2048 [ 64.670308][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.731859][ T4570] loop2: detected capacity change from 0 to 2368 [ 64.739350][ T4561] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.792190][ T4563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.027705][ T4570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.126'. [ 65.101939][ T4583] loop0: detected capacity change from 0 to 512 [ 65.209258][ T4591] device macsec0 entered promiscuous mode [ 65.222310][ T4583] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,errors=remount-ro,. Quota mode: writeback. [ 65.229766][ T4595] loop4: detected capacity change from 0 to 512 [ 65.276232][ T4595] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 65.323840][ T4583] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.381863][ T4595] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.382967][ T4583] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #12: comm syz.0.132: invalid size [ 65.403280][ T4583] EXT4-fs (loop0): Remounting filesystem read-only [ 65.551465][ T4595] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.137: bad orphan inode 15 [ 65.590994][ T4595] ext4_test_bit(bit=14, block=18) = 1 [ 65.647674][ T4595] is_bad_inode(inode)=0 [ 65.667018][ T4595] NEXT_ORPHAN(inode)=1023 [ 65.708396][ T4595] max_ino=32 [ 65.736509][ T4595] i_nlink=0 [ 65.757897][ T4595] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2923: inode #15: comm syz.4.137: corrupted xattr block 19 [ 65.779525][ T4620] loop1: detected capacity change from 0 to 512 [ 65.814452][ T4595] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117) [ 65.860846][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.086354][ T4628] loop2: detected capacity change from 0 to 4096 [ 66.113581][ T4628] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 66.365369][ T4628] ntfs3: loop2: ntfs_sync_inode r=1e failed, -22. [ 66.390858][ T4628] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 66.532206][ T144] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 66.580682][ T4654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'. [ 66.599074][ T4188] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 66.640036][ T4654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 66.906562][ T4668] capability: warning: `syz.1.172' uses deprecated v2 capabilities in a way that may be insecure [ 67.002173][ T4640] loop4: detected capacity change from 0 to 32768 [ 67.145425][ T4640] XFS (loop4): Mounting V5 Filesystem [ 67.288062][ T4640] XFS (loop4): Ending clean mount [ 67.347633][ T4640] XFS (loop4): Quotacheck needed: Please wait. [ 67.460992][ T4640] XFS (loop4): Quotacheck: Done. [ 67.618060][ T4699] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 67.655746][ T4699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.690314][ T4195] XFS (loop4): Unmounting Filesystem [ 67.974800][ T4704] xt_hashlimit: max too large, truncated to 1048576 [ 68.009154][ T4704] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.018463][ T4706] [U] „ [ 68.398144][ T4714] set_capacity_and_notify: 2 callbacks suppressed [ 68.398158][ T4714] loop1: detected capacity change from 0 to 4096 [ 68.519464][ T4727] device sit0 entered promiscuous mode [ 68.547635][ T4728] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.566488][ T4727] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 68.605397][ T4714] NILFS (loop1): bad btree node (ino=18446744073709486081, blocknr=1024): level = 0, flags = 0x0, nchildren = 0 [ 68.617836][ T4727] netlink: 9 bytes leftover after parsing attributes in process `syz.0.195'. [ 68.679546][ T4714] NILFS (loop1): error -5 preparing GC: cannot read source blocks [ 68.861467][ T1110] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.103116][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 69.114196][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 69.140700][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 69.154390][ T4756] loop2: detected capacity change from 0 to 512 [ 69.165947][ T4752] device gretap0 entered promiscuous mode [ 69.173735][ T4752] device gretap0 left promiscuous mode [ 69.214765][ T4756] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.231672][ T1110] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 69.250515][ T4756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.259332][ T1110] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 69.277160][ T4760] netlink: 'syz.0.212': attribute type 29 has an invalid length. [ 69.300451][ T1110] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 69.316835][ T4760] netlink: 'syz.0.212': attribute type 29 has an invalid length. [ 69.331724][ T4763] netlink: 'syz.0.212': attribute type 29 has an invalid length. [ 69.371311][ T1110] usb 5-1: config 0 has no interface number 0 [ 69.377470][ T1110] usb 5-1: config 0 interface 104 has no altsetting 1 [ 69.393238][ T4756] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 69.432229][ T4769] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.436847][ T4756] EXT4-fs (loop2): 1 truncate cleaned up [ 69.457724][ T4756] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 69.641557][ T1110] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 69.668006][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.695887][ T1110] usb 5-1: Product: syz [ 69.713326][ T1110] usb 5-1: Manufacturer: syz [ 69.735356][ T1110] usb 5-1: SerialNumber: syz [ 69.784017][ T1110] usb 5-1: config 0 descriptor?? [ 69.824538][ T1110] asix: probe of 5-1:0.104 failed with error -22 [ 69.913627][ T4771] loop3: detected capacity change from 0 to 32768 [ 70.029877][ T4790] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.225' resets device [ 70.040416][ T4223] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.059760][ T4771] JBD2: Ignoring recovery information on journal [ 70.091075][ T4730] loop4: detected capacity change from 0 to 512 [ 70.110760][ T4771] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 70.205901][ T4799] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.215974][ T4799] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.225267][ T4799] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.234031][ T4799] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.250228][ T4730] EXT4-fs (loop4): bad s_want_extra_isize: 1056 [ 70.274568][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 70.301290][ T4223] usb 1-1: Using ep0 maxpacket: 16 [ 70.330664][ T1107] usb 5-1: USB disconnect, device number 2 [ 70.339989][ T4798] loop2: detected capacity change from 0 to 4096 [ 70.435784][ T4798] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 70.452080][ T4806] snd_dummy snd_dummy.0: control 4:9:6:syz1:6 is already present [ 70.461590][ T4223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.481191][ T4223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.491894][ T4223] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 70.505321][ T4223] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.514951][ T4223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.525083][ T4223] usb 1-1: config 0 descriptor?? [ 70.843040][ T4819] loop2: detected capacity change from 0 to 64 [ 71.013498][ T4223] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 71.031122][ T4223] microsoft 0003:045E:07DA.0002: collection stack underflow [ 71.040129][ T4223] microsoft 0003:045E:07DA.0002: item 0 2 0 12 parsing failed [ 71.052072][ T4223] microsoft 0003:045E:07DA.0002: parse failed [ 71.058182][ T4223] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 71.264268][ T4223] usb 1-1: USB disconnect, device number 2 [ 71.268856][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.276742][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.436444][ T4841] vivid-006: disconnect [ 71.451322][ T4840] vivid-006: reconnect [ 71.495454][ T4843] loop4: detected capacity change from 0 to 2048 [ 71.510288][ T4813] loop1: detected capacity change from 0 to 32768 [ 71.570759][ T4843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.171431][ T4870] loop1: detected capacity change from 0 to 64 [ 72.234190][ T4868] loop0: detected capacity change from 0 to 4096 [ 72.269663][ T26] audit: type=1800 audit(1774021424.127:4): pid=4870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.263" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 72.324331][ T4850] JBD2: Ignoring recovery information on journal [ 72.328976][ T4868] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 72.485713][ T4850] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 72.571378][ T4850] (syz.2.253,4850,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 72.598956][ T4850] (syz.2.253,4850,0):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 72.653470][ T4868] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 72.667166][ T4868] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 72.728079][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 72.735859][ T4883] ntfs3: Volume is dirty and "force" flag is not set! [ 72.840095][ T4882] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d) [ 73.144807][ T144] hfsplus: b-tree write err: -5, ino 25 [ 73.163129][ T144] hfsplus: b-tree write err: -5, ino 4 [ 73.170433][ T144] hfsplus: b-tree write err: -5, ino 2 [ 73.199947][ T4866] F2FS-fs (loop4): invalid crc value [ 73.226613][ T4866] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 73.478226][ T4866] F2FS-fs (loop4): Start checkpoint disabled! [ 73.505994][ T4866] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 73.661355][ T1110] Bluetooth: hci4: command 0x0405 tx timeout [ 73.721249][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.793458][ T4913] set_capacity_and_notify: 4 callbacks suppressed [ 73.793473][ T4913] loop1: detected capacity change from 0 to 2048 [ 73.920399][ T4914] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.104075][ T4908] loop0: detected capacity change from 0 to 40427 [ 74.163403][ T4908] F2FS-fs (loop0): invalid crc value [ 74.209461][ T4908] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.261785][ T4928] loop2: detected capacity change from 0 to 256 [ 74.359794][ T4928] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.372184][ T1107] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 74.392271][ T4908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.398656][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.421186][ T1107] usb 4-1: Product: syz [ 74.448928][ T1107] usb 4-1: Manufacturer: syz [ 74.459919][ T4934] loop1: detected capacity change from 0 to 2048 [ 74.466578][ T1107] usb 4-1: SerialNumber: syz [ 74.483814][ T1107] usb 4-1: config 0 descriptor?? [ 74.552793][ T4934] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.570287][ T1107] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 74.607958][ T4304] udevd[4304]: incorrect nilfs2 checksum on /dev/loop1 [ 74.624684][ T4193] attempt to access beyond end of device [ 74.624684][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 74.635333][ T4940] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.667201][ T4934] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 74.670996][ T4934] Remounting filesystem read-only [ 74.909122][ T4949] capability: warning: `syz.2.297' uses 32-bit capabilities (legacy support in use) [ 75.092475][ T4955] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.300'. [ 75.189869][ T4961] loop0: detected capacity change from 0 to 512 [ 75.201555][ T1107] i2c i2c-1: failure reading functionality [ 75.207441][ T1107] i2c i2c-1: connected i2c-tiny-usb device [ 75.217132][ T1107] usb 4-1: USB disconnect, device number 2 [ 75.275035][ T4961] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.275136][ T4961] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.577698][ T4982] loop4: detected capacity change from 0 to 16 [ 75.627313][ T4985] loop0: detected capacity change from 0 to 512 [ 75.659902][ T4989] loop2: detected capacity change from 0 to 64 [ 75.662232][ T4982] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.786972][ T4992] loop1: detected capacity change from 0 to 256 [ 75.795430][ T26] audit: type=1800 audit(1774021427.657:5): pid=4989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="bus" dev="loop2" ino=21 res=0 errno=0 [ 75.876501][ T4995] loop4: detected capacity change from 0 to 8 [ 75.890286][ T4992] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 75.973525][ T4995] overlayfs: upper fs is r/o, try multi-lower layers mount [ 76.038680][ T4993] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 76.060891][ T4993] REISERFS (device loop3): using ordered data mode [ 76.069116][ T4993] reiserfs: using flush barriers [ 76.087947][ T4993] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.111737][ T4993] REISERFS (device loop3): checking transaction log (loop3) [ 76.384263][ T13] cfg80211: failed to load regulatory.db [ 76.416140][ T4993] REISERFS (device loop3): Using tea hash to sort names [ 76.437658][ T4993] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 76.551370][ T4515] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.791724][ T4515] usb 2-1: Using ep0 maxpacket: 8 [ 76.911553][ T4515] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 77.071723][ T4515] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 77.106672][ T4515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.135218][ T4515] usb 2-1: Product: syz [ 77.157963][ T4515] usb 2-1: Manufacturer: syz [ 77.177302][ T4515] usb 2-1: SerialNumber: syz [ 77.194404][ T4515] usb 2-1: config 0 descriptor?? [ 77.253195][ T4515] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 77.266629][ T5055] erofs: (device loop3): mounted with root inode @ nid 36. [ 77.284701][ T4515] usb 2-1: setting power ON [ 77.289821][ T4515] dvb-usb: bulk message failed: -22 (2/0) [ 77.310413][ T5055] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 77.358099][ T5055] erofs: (device loop3): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 77.368194][ T4515] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.401660][ T4515] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 77.414573][ T5055] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 77.424606][ T5061] netlink: 'syz.2.347': attribute type 3 has an invalid length. [ 77.438510][ T4515] usb 2-1: media controller created [ 77.457493][ T5055] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 77.459807][ T5012] dvb-usb: bulk message failed: -22 (3/0) [ 77.476072][ T4515] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.500758][ T5055] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 77.510050][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.538882][ T4187] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -1027 in[4096, 0] out[3968] [ 77.561842][ T5055] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 77.563912][ T4515] usb 2-1: selecting invalid altsetting 6 [ 77.578679][ T4515] usb 2-1: digital interface selection failed (-22) [ 77.586176][ T4515] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 77.601977][ T5055] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -1027 in[4096, 0] out[3968] [ 77.622424][ T5055] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 77.630745][ T26] audit: type=1800 audit(1774021429.487:6): pid=5055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 77.651486][ T4515] usb 2-1: setting power OFF [ 77.656475][ T4515] dvb-usb: bulk message failed: -22 (2/0) [ 77.665008][ T4515] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 77.674551][ T4515] (NULL device *): no alternate interface [ 77.699627][ T4515] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 77.734656][ T4515] usb 2-1: USB disconnect, device number 2 [ 77.781380][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 77.901502][ T21] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 77.909709][ T21] usb 5-1: config 4 has no interface number 0 [ 77.948355][ T5069] process 'syz.3.349' launched '/dev/fd/3' with NULL argv: empty string added [ 77.956500][ T21] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.001240][ T21] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.030286][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 78.075534][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.150132][ T21] hub 5-1:4.128: USB hub found [ 78.291985][ T5059] XFS (loop0): Mounting V5 Filesystem [ 78.361278][ T21] hub 5-1:4.128: 2 ports detected [ 78.366717][ T21] hub 5-1:4.128: Using single TT (err -22) [ 78.467732][ T5059] XFS (loop0): Ending clean mount [ 78.502787][ T5059] XFS (loop0): Quotacheck needed: Please wait. [ 78.581337][ T21] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 78.589439][ T5059] XFS (loop0): Quotacheck: Done. [ 78.601565][ T21] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 78.682086][ T21] usb 5-1: USB disconnect, device number 3 [ 78.714014][ T4193] XFS (loop0): Unmounting Filesystem [ 78.811237][ T4522] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.917147][ T5087] XFS (loop3): Mounting V5 Filesystem [ 78.954351][ T5087] XFS (loop3): Ending clean mount [ 78.978221][ T5087] XFS (loop3): Quotacheck needed: Please wait. [ 79.066498][ T5087] XFS (loop3): Quotacheck: Done. [ 79.101775][ T5101] set_capacity_and_notify: 4 callbacks suppressed [ 79.101790][ T5101] loop1: detected capacity change from 0 to 40427 [ 79.138724][ T5101] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 79.200975][ T5101] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.201655][ T4522] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 79.238448][ T4522] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 79.276379][ T4522] usb 3-1: config 0 has no interface number 0 [ 79.300572][ T5101] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.322287][ T4191] XFS (loop3): Unmounting Filesystem [ 79.398858][ T5118] loop0: detected capacity change from 0 to 8 [ 79.451629][ T4522] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 79.470977][ T4522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.481099][ T4522] usb 3-1: Product: syz [ 79.485638][ T4522] usb 3-1: Manufacturer: syz [ 79.495931][ T4522] usb 3-1: SerialNumber: syz [ 79.503802][ T4522] usb 3-1: config 0 descriptor?? [ 79.526299][ T5101] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.538048][ T5101] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.658086][ T5101] attempt to access beyond end of device [ 79.658086][ T5101] loop1: rw=2049, want=45104, limit=40427 [ 79.785603][ T5111] loop4: detected capacity change from 0 to 32768 [ 79.916232][ T5125] loop3: detected capacity change from 0 to 24 [ 79.977307][ T5128] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.990925][ T4184] attempt to access beyond end of device [ 79.990925][ T4184] loop1: rw=2051, want=45104, limit=40427 [ 80.010414][ T5125] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 80.017283][ T4522] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 80.027473][ T5131] loop0: detected capacity change from 0 to 64 [ 80.031222][ T4522] usb 3-1: No valid video chain found. [ 80.082926][ T4184] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 80.088808][ T5125] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 80.269918][ T5135] netlink: 'syz.0.374': attribute type 3 has an invalid length. [ 80.282962][ T3576] usb 3-1: USB disconnect, device number 3 [ 80.558065][ T5149] loop0: detected capacity change from 0 to 256 [ 80.569302][ T5147] loop3: detected capacity change from 0 to 2048 [ 80.619559][ T5150] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.636779][ T5149] exfat: Deprecated parameter 'utf8' [ 80.663066][ T5149] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 80.777748][ T5158] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980 [ 80.932085][ T5166] mkiss: ax0: crc mode is auto. [ 81.272448][ T5182] loop3: detected capacity change from 0 to 4096 [ 81.286115][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 81.309812][ T5182] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 81.322868][ T4522] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.463637][ T5196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'. [ 81.681739][ T4522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 81.703135][ T4522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57465, setting to 1024 [ 81.738855][ T5212] loop3: detected capacity change from 0 to 128 [ 81.799818][ T5212] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 81.828787][ T4522] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 81.846493][ T5212] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 81.857327][ T4522] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 81.876479][ T5212] FAT-fs (loop3): Filesystem has been set read-only [ 81.876768][ T4522] usb 2-1: Product: syz [ 81.891304][ T4522] usb 2-1: config 0 descriptor?? [ 81.912408][ T5212] attempt to access beyond end of device [ 81.912408][ T5212] loop3: rw=524288, want=2073, limit=128 [ 81.914637][ T5221] loop4: detected capacity change from 0 to 512 [ 81.932155][ T5212] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 81.940304][ T5212] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 81.957486][ T5212] attempt to access beyond end of device [ 81.957486][ T5212] loop3: rw=0, want=2073, limit=128 [ 81.969114][ T26] audit: type=1800 audit(1774021433.837:7): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="file2" dev="loop3" ino=1048599 res=0 errno=0 [ 82.082892][ T5221] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.142322][ T5221] EXT4-fs error (device loop4): __ext4_iget:4912: inode #11: block 1: comm syz.4.412: invalid block [ 82.156488][ T5221] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.412: couldn't read orphan inode 11 (err -117) [ 82.168789][ T5221] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,test_dummy_encryption=v1,journal_ioprio=0x0000000000000002,,errors=continue. Quota mode: none. [ 82.309970][ T5242] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.325674][ T21] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 82.342513][ T5242] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 82.388292][ T5242] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 82.403836][ T4522] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 82.420863][ T4522] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 82.449957][ T4522] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 82.502973][ T4522] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 82.520076][ T4522] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 82.558859][ T4522] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.1-1/input0 [ 82.702128][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 82.726073][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 82.747562][ T5258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'. [ 82.763883][ T4515] usb 2-1: USB disconnect, device number 3 [ 82.819942][ T5254] fido_id[5254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 82.926429][ T21] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 82.952599][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.968301][ T21] usb 1-1: Product: syz [ 82.980968][ T21] usb 1-1: Manufacturer: syz [ 82.992700][ T21] usb 1-1: SerialNumber: syz [ 83.009669][ T21] usb 1-1: config 0 descriptor?? [ 83.072517][ T21] hub 1-1:0.0: bad descriptor, ignoring hub [ 83.082033][ T21] hub: probe of 1-1:0.0 failed with error -5 [ 83.093350][ T5274] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 83.102818][ T21] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 83.500250][ T5296] ptrace attach of "./syz-executor exec"[4188] was attempted by ""[5296] [ 83.755057][ T5288] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.441 (5288) [ 83.785831][ T5288] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 83.798721][ T5288] BTRFS info (device loop3): force zlib compression, level 3 [ 83.807205][ T5288] BTRFS info (device loop3): force clearing of disk cache [ 83.816016][ T5288] BTRFS info (device loop3): setting nodatasum [ 83.824077][ T5288] BTRFS info (device loop3): allowing degraded mounts [ 83.833659][ T5288] BTRFS info (device loop3): enabling disk space caching [ 83.841593][ T5288] BTRFS info (device loop3): disk space caching is enabled [ 83.849335][ T5288] BTRFS info (device loop3): has skinny extents [ 83.909804][ T5288] BTRFS info (device loop3): clearing free space tree [ 83.923959][ T5288] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.938739][ T5288] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.201466][ T4515] usb 1-1: USB disconnect, device number 3 [ 84.208154][ T5288] BTRFS info (device loop3): balance: start -f [ 84.235157][ T5288] BTRFS info (device loop3): balance: ended with status: 0 [ 84.334925][ T5325] set_capacity_and_notify: 2 callbacks suppressed [ 84.334941][ T5325] loop2: detected capacity change from 0 to 4096 [ 84.575810][ T5341] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 84.575810][ T5341] The task syz.4.456 (5341) triggered the difference, watch for misbehavior. [ 84.653189][ T5343] loop1: detected capacity change from 0 to 2048 [ 84.754850][ T5343] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 84.791205][ T5343] NILFS (loop1): mounting unchecked fs [ 84.848557][ T4188] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 84.862742][ T4272] udevd[4272]: incorrect nilfs2 checksum on /dev/loop1 [ 84.872747][ T4188] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 84.914820][ T5343] NILFS (loop1): recovery complete [ 84.988576][ T5350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.423847][ T5345] loop0: detected capacity change from 0 to 32768 [ 85.597467][ T5377] loop3: detected capacity change from 0 to 1024 [ 85.642176][ T5345] XFS (loop0): Mounting V5 Filesystem [ 85.661588][ T5377] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 85.751507][ T4512] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.817292][ T5368] loop4: detected capacity change from 0 to 32768 [ 85.947131][ T5368] XFS (loop4): Mounting V5 Filesystem [ 85.965881][ T5345] XFS (loop0): Ending clean mount [ 86.001583][ T4512] usb 3-1: Using ep0 maxpacket: 16 [ 86.019637][ T5377] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback. [ 86.093990][ T4193] XFS (loop0): Unmounting Filesystem [ 86.121731][ T4512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.137300][ T5399] netlink: 56 bytes leftover after parsing attributes in process `syz.1.474'. [ 86.141590][ T4512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.157872][ T4512] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.164441][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 86.176027][ T4512] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.202974][ T5368] XFS (loop4): Ending clean mount [ 86.210135][ T4512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.244046][ T4512] usb 3-1: config 0 descriptor?? [ 86.301640][ T5377] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.3.470: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 86.390004][ T4195] XFS (loop4): Unmounting Filesystem [ 86.506179][ T5405] loop3: detected capacity change from 0 to 64 [ 86.725227][ T4512] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 86.772867][ T4512] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 86.833541][ T4512] microsoft 0003:045E:07DA.0004: no inputs found [ 86.860578][ T4512] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 86.927698][ T5419] loop1: detected capacity change from 0 to 1024 [ 87.019514][ T5347] usb 3-1: USB disconnect, device number 4 [ 87.048009][ T5425] loop0: detected capacity change from 0 to 256 [ 87.064313][ T5419] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 87.098271][ T5419] System zones: 0-1, 3-12 [ 87.144957][ T5419] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 87.215491][ T5422] fido_id[5422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 87.249969][ T5435] [U] 3xM îîä:U)›ÉèœM©ÔC&à~6‘’Î:…ZZ­ÀSÃ:dÒ"$ˆÎ [ 87.276925][ T5435] [U] °ÐÓ½ä]u q#ñ [ 87.299873][ T5435] [U] TåXRÒjX¢!Ì›ùÅÌNŸi*¨“ðizûÇužA׈y†B" [ 87.309424][ T5435] [U] SúLÁ¥èùàg>÷]àæ­aTµ™£ùÎ3÷ý2sŒÚô(™í¦-eX ªåvÞæ—éÅ¢¤†0ÔÜ&x5lÆ] ©99º²’ÐøPÙæ÷ùâ¾9˜Ýóß c•˜IØMª [ 87.364733][ T5435] [U] Ç…yu[*5ª²HÅ5åcr'¼¦ÔýÔØUt¾SI” ½Ly÷¥R/6ÚÍTøYè+2 [ 87.397500][ T5435] [U] ”ý„&?‚.ÄqRú9[¹«^–a¦A'ÉÛ¤3õ¸ì}Ï ‡Kx¡ƒŸnGùèÆÌ:г;¨×4g¶Ã_½&²-apÏ+ Å‹@Žè7À–ŸLV²É×Ï*—è}ü9õKº–„ÂIöÎ/GÏâñÌï¾,Ø&+lÛ¶Ê¡}…vº€!‚YâêàÍâð­ ×ÔëñÃÏr» [ 87.555468][ T5435] [U] ¿Ý–ó§,ª¨Q!!büTº[L3ÔÚØì÷  [ 87.567331][ T5435] [U] ’N¿·Üäw(¿Ó.œ$#bZ ‰YK.;`ùÞL*0 ýN*½Lø}=_důé<‡8P)F1°[¤Q{$E]!·Ÿábëƒ/”ph#ÖšA ÂÙÇRúSL9s± [ 87.610372][ T5435] [U] ·s*T’Y [ 87.619063][ T5435] [U] r¸I;¦À•Gß!Y”iµ~iCê|1)7k þûŸ/<ªfò[(¢lH}ë®&t—yw`t¼ïd’#¢a›ÑÍ_î“röLP3V‹fj`oÄ]@w\ú­¤ÜðÇç\MÃ}hð8{ [ 87.755031][ T5450] loop0: detected capacity change from 0 to 8192 [ 87.771107][ T5459] loop2: detected capacity change from 0 to 256 [ 87.821981][ T5459] exfat: Deprecated parameter 'namecase' [ 87.852740][ T5450] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 87.853603][ T5459] exfat: Deprecated parameter 'utf8' [ 87.871652][ T5450] REISERFS (device loop0): using ordered data mode [ 87.887631][ T5450] reiserfs: using flush barriers [ 87.899296][ T5459] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 87.902330][ T5450] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.970374][ T5464] EXT4-fs (loop4): Test dummy encryption mode enabled [ 88.058483][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,barrier,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,init_itable=0x000000000000d530,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 88.100149][ T5450] REISERFS (device loop0): checking transaction log (loop0) [ 88.114877][ T5450] REISERFS (device loop0): Using r5 hash to sort names [ 88.197340][ T5471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.348518][ T5476] kernel read not supported for file / -Ö9÷mZr†œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ² (pid: 5476 comm: syz.0.506) [ 88.386590][ T26] audit: type=1800 audit(1774021440.247:8): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.506" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=35628 res=0 errno=0 [ 88.488356][ T5478] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.508'. [ 88.540574][ T5478] netlink: get zone limit has 8 unknown bytes [ 88.569720][ T26] audit: type=1804 audit(1774021440.317:9): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.506" name=202DD60E39F76D5A06720386019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B206 dev="mqueue" ino=35628 res=1 errno=0 [ 88.827882][ T5498] EXT4-fs (loop4): Ignoring removed nobh option [ 88.865342][ T5498] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 88.875975][ T4522] kernel write not supported for file /snd/seq (pid: 4522 comm: kworker/1:11) [ 88.911757][ T5498] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.991786][ T5347] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.073395][ T5465] F2FS-fs (loop3): invalid crc value [ 89.122002][ T5465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.319179][ T5465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.361740][ T5347] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.380049][ T5347] usb 1-1: config 0 has no interface number 0 [ 89.406670][ T5347] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.479012][ T5347] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.503740][ T5347] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 89.543328][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.575317][ T5347] usb 1-1: config 0 descriptor?? [ 89.718872][ T5534] set_capacity_and_notify: 5 callbacks suppressed [ 89.718888][ T5534] loop2: detected capacity change from 0 to 4096 [ 89.796703][ T5534] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 89.845482][ T5543] loop1: detected capacity change from 0 to 2048 [ 89.846840][ T5534] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 89.909328][ T5543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.911843][ T5534] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 89.965781][ T5534] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 90.023828][ T5534] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 90.028463][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.533'. [ 90.048375][ T5347] prodikeys 0003:041E:2801.0005: item fetching failed at offset 5/7 [ 90.072503][ T5347] prodikeys 0003:041E:2801.0005: hid parse failed [ 90.079961][ T5347] prodikeys: probe of 0003:041E:2801.0005 failed with error -22 [ 90.089504][ T5534] ntfs: volume version 3.1. [ 90.147846][ T5534] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 90.229690][ T5534] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 90.295754][ T5558] loop1: detected capacity change from 0 to 512 [ 90.305822][ T5347] usb 1-1: USB disconnect, device number 4 [ 90.343311][ T5534] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 90.378386][ T5558] EXT4-fs (loop1): 1 truncate cleaned up [ 90.415008][ T5558] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,inode_readahead_blks=0x0000000000000001,nouid32,,errors=continue. Quota mode: none. [ 90.442465][ T13] libceph: connect (1)[c::]:6789 error -101 [ 90.449929][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 90.460942][ T13] libceph: connect (1)[c::]:6789 error -101 [ 90.467672][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 90.718839][ T5577] loop4: detected capacity change from 0 to 2048 [ 90.744561][ T13] libceph: connect (1)[c::]:6789 error -101 [ 90.750618][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 90.765032][ T5579] loop1: detected capacity change from 0 to 2048 [ 90.780396][ T5577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.887462][ T5585] loop2: detected capacity change from 0 to 16 [ 90.898443][ T5579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.934823][ T5588] loop0: detected capacity change from 0 to 64 [ 90.987917][ T5589] loop4: detected capacity change from 0 to 2368 [ 91.133204][ T5595] loop0: detected capacity change from 0 to 8 [ 91.144591][ T5589] netlink: 40 bytes leftover after parsing attributes in process `syz.4.551'. [ 91.189755][ T5561] ceph: No mds server is up or the cluster is laggy [ 91.271634][ T4223] libceph: connect (1)[c::]:6789 error -101 [ 91.277673][ T4223] libceph: mon0 (1)[c::]:6789 connect error [ 91.442433][ T5612] loop0: detected capacity change from 0 to 256 [ 91.484202][ T5612] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.498206][ T5612] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.703850][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 91.707855][ T5610] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 91.734882][ T5610] REISERFS (device loop2): using ordered data mode [ 91.751979][ T5610] reiserfs: using flush barriers [ 91.766552][ T5610] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.791494][ T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.917653][ T5610] REISERFS (device loop2): checking transaction log (loop2) [ 91.962295][ T5610] REISERFS (device loop2): Using r5 hash to sort names [ 92.001920][ T5610] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.040803][ T5641] device macsec1 entered promiscuous mode [ 92.059113][ T5610] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 92.061559][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 92.167977][ T5643] attempt to access beyond end of device [ 92.167977][ T5643] loop4: rw=2051, want=28736, limit=512 [ 92.238935][ T5646] FAT-fs (loop4): FAT read failed (blocknr 128) [ 92.464714][ T13] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 92.472896][ T13] usb 4-1: config 0 has no interface number 0 [ 92.492341][ T5645] gfs2: quota_quantum mount option requires a positive numeric argument [ 92.496342][ T5648] erofs: (device loop0): mounted with root inode @ nid 36. [ 92.649038][ T5648] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 92.658620][ T5648] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 92.711673][ T13] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 92.743191][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.789365][ T13] usb 4-1: Product: syz [ 92.808842][ T13] usb 4-1: Manufacturer: syz [ 92.834454][ T13] usb 4-1: SerialNumber: syz [ 92.871708][ T13] usb 4-1: config 0 descriptor?? [ 92.894978][ T5656] MPI: mpi too large (185152 bits) [ 92.943025][ T13] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.056940][ T5665] exfat: Deprecated parameter 'namecase' [ 93.128106][ T5665] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 93.209739][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 93.248758][ T13] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 93.540858][ T5658] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 93.604935][ T5658] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 93.646734][ T5658] F2FS-fs (loop4): invalid crc value [ 93.725167][ T4512] usb 4-1: USB disconnect, device number 3 [ 93.731283][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 93.749627][ T5658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.750334][ T4512] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 93.813070][ T4512] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 93.814712][ T5658] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 93.831633][ T5658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.842755][ T4512] quatech2 4-1:0.51: device disconnected [ 93.923831][ T5658] attempt to access beyond end of device [ 93.923831][ T5658] loop4: rw=2049, want=45104, limit=40427 [ 94.056977][ T1517] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 94.086473][ T1517] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 94.375707][ T5696] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #11: comm syz.1.604: iget: bogus i_mode (1) [ 94.452356][ T5696] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.604: couldn't read orphan inode 11 (err -117) [ 94.549053][ T5698] ntfs: volume version 3.1. [ 94.579484][ T5696] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.647546][ T5696] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.604: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 94.695002][ T5698] __ntfs_error: 9 callbacks suppressed [ 94.695018][ T5698] ntfs: (device loop0): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because this attribute type is not defined on the NTFS volume. Possible corruption! You should run chkdsk! [ 94.741590][ T5707] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.604: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 94.747724][ T5706] set_capacity_and_notify: 9 callbacks suppressed [ 94.747738][ T5706] loop3: detected capacity change from 0 to 1024 [ 94.779327][ T5692] loop2: detected capacity change from 0 to 32768 [ 94.801503][ T5698] ntfs: (device loop0): ntfs_prepare_file_for_write(): Cannot perform write to inode 0x43, attribute type 0x80, because extending the allocation failed (error 5). [ 94.836880][ T5709] loop4: detected capacity change from 0 to 512 [ 94.980671][ T5709] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 94.996977][ T5706] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #3: block 1: comm syz.3.608: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.042344][ T5692] XFS (loop2): Mounting V5 Filesystem [ 95.049287][ T5709] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.050773][ T5706] Quota error (device loop3): write_blk: dquota write failed [ 95.063931][ T5706] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 95.075035][ T5706] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.608: Failed to acquire dquot type 0 [ 95.121639][ T5709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.599: bg 0: block 305: padding at end of block bitmap is not set [ 95.170328][ T5706] EXT4-fs error (device loop3): ext4_free_blocks:6232: comm syz.3.608: Freeing blocks not in datazone - block = 0, count = 4096 [ 95.229362][ T5706] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.608: Invalid inode bitmap blk 0 in block_group 0 [ 95.237963][ T5709] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 95.256830][ T4238] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 95.295983][ T5706] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 95.328986][ T4238] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 95.329166][ T5692] XFS (loop2): Ending clean mount [ 95.342095][ T5728] loop0: detected capacity change from 0 to 256 [ 95.349128][ T4238] EXT4-fs error (device loop3): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 95.372558][ T5709] EXT4-fs (loop4): 1 truncate cleaned up [ 95.380534][ T5706] EXT4-fs (loop3): 1 orphan inode deleted [ 95.411227][ T5706] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 95.446896][ T5709] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 95.631938][ T4188] XFS (loop2): Unmounting Filesystem [ 95.774917][ T5738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.618'. [ 95.948455][ T5747] loop4: detected capacity change from 0 to 1764 [ 96.155695][ T5754] loop0: detected capacity change from 0 to 1024 [ 96.269046][ T5758] loop1: detected capacity change from 0 to 2048 [ 96.329959][ T5758] NILFS (loop1): invalid segment: Magic number mismatch [ 96.367121][ T5758] NILFS (loop1): trying rollback from an earlier position [ 96.449207][ T5758] NILFS (loop1): recovery complete [ 96.509238][ T5767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.671905][ T5766] loop0: detected capacity change from 0 to 4096 [ 96.730506][ T5766] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 96.979766][ T5760] loop4: detected capacity change from 0 to 32768 [ 97.192995][ T5764] loop3: detected capacity change from 0 to 32768 [ 97.206324][ T5760] XFS (loop4): Mounting V5 Filesystem [ 97.321650][ T5764] XFS (loop3): Mounting V5 Filesystem [ 97.336846][ T5760] XFS (loop4): Ending clean mount [ 97.452621][ T4195] XFS (loop4): Unmounting Filesystem [ 97.455877][ T5764] XFS (loop3): Ending clean mount [ 97.674975][ T4191] XFS (loop3): Unmounting Filesystem [ 97.699867][ T5808] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 97.974400][ T5816] team0: Device vlan2 is already an upper device of the team interface [ 98.381517][ T5826] hfs: hfs: Invalid key length: 94 [ 98.390433][ T5832] rock: directory entry would overflow storage [ 98.416639][ T4193] hfs: node 4:3 still has 1 user(s)! [ 98.431628][ T5832] rock: sig=0x4654, size=5, remaining=4 [ 98.434486][ T5828] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 98.471569][ T5828] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 98.623561][ T5828] ntfs: volume version 3.1. [ 99.122441][ T1517] hfsplus: b-tree write err: -5, ino 25 [ 99.129458][ T1517] hfsplus: b-tree write err: -5, ino 4 [ 99.141603][ T1517] hfsplus: b-tree write err: -5, ino 2 [ 99.147150][ T1517] hfsplus: b-tree write err: -5, ino 26 [ 99.233235][ T5853] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 99.301742][ T5855] comedi comedi3: pcl818: I/O port conflict (0x8001,16) [ 99.419873][ T5834] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 99.427759][ T5834] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 99.448204][ T5834] F2FS-fs (loop4): invalid crc value [ 99.493639][ T5834] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 99.611907][ T5347] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.678748][ T5834] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 99.708743][ T5834] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 99.770217][ T5864] set_capacity_and_notify: 7 callbacks suppressed [ 99.770233][ T5864] loop1: detected capacity change from 0 to 4096 [ 99.851566][ T5347] usb 1-1: Using ep0 maxpacket: 16 [ 99.906701][ T4195] attempt to access beyond end of device [ 99.906701][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 99.944074][ T5864] ntfs3: loop1: ino=5, "/" directory corrupted [ 99.982501][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.007904][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.047968][ T5347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.086856][ T5347] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.116332][ T5869] loop1: detected capacity change from 0 to 512 [ 100.124565][ T5859] loop3: detected capacity change from 0 to 32768 [ 100.127708][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.168639][ T5347] usb 1-1: config 0 descriptor?? [ 100.268188][ T5869] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.670: iget: bad i_size value: 38620345925642 [ 100.269489][ T5859] ea_get: invalid extended attribute [ 100.295097][ T5869] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.670: couldn't read orphan inode 15 (err -117) [ 100.388490][ T5869] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 100.508781][ T5869] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.670: bg 0: block 5: invalid block bitmap [ 100.552632][ T5873] loop4: detected capacity change from 0 to 128 [ 100.680366][ T5347] microsoft 0003:045E:07DA.0006: unbalanced collection at end of report description [ 100.692557][ T5347] microsoft 0003:045E:07DA.0006: parse failed [ 100.698674][ T5347] microsoft: probe of 0003:045E:07DA.0006 failed with error -22 [ 100.930347][ T4512] usb 1-1: USB disconnect, device number 5 [ 100.988751][ T5867] ODEBUG: Out of memory. ODEBUG disabled [ 101.108137][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.150806][ T5896] loop3: detected capacity change from 0 to 512 [ 101.217005][ T5896] EXT4-fs (loop3): Ignoring removed oldalloc option [ 101.276948][ T5896] EXT4-fs (loop3): 1 truncate cleaned up [ 101.299946][ T5896] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 101.403042][ T5896] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.677: invalid indirect mapped block 234881024 (level 0) [ 101.427972][ T5896] EXT4-fs (loop3): Remounting filesystem read-only [ 101.551458][ T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.562840][ T3576] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 101.580695][ T13] usb 5-1: config 0 has no interface number 0 [ 101.598161][ T13] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.639937][ T13] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.648572][ T5901] loop2: detected capacity change from 0 to 32768 [ 101.671605][ T13] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 101.680896][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.704599][ T5901] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.713209][ T5901] gfs2: fsid=syz:syz: unknown hostdata (\) [ 101.745080][ T13] usb 5-1: config 0 descriptor?? [ 101.812063][ T5909] loop3: detected capacity change from 0 to 8 [ 101.893025][ T5909] SQUASHFS error: zlib decompression failed, data probably corrupt [ 101.921919][ T5909] SQUASHFS error: Failed to read block 0x9b: -5 [ 101.928206][ T5909] SQUASHFS error: Unable to read metadata cache entry [99] [ 101.961522][ T5909] SQUASHFS error: Unable to read inode 0x127 [ 101.971531][ T3576] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.979580][ T3576] usb 2-1: config 0 has no interface number 0 [ 102.009939][ T3576] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 102.056933][ T3576] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 102.098571][ T3576] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.137654][ T3576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.173449][ T3576] usb 2-1: config 0 descriptor?? [ 102.211783][ T5899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.219788][ T13] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 102.229962][ T5905] loop0: detected capacity change from 0 to 32768 [ 102.257820][ T13] hid_prodikeys: hid-prodikeys: failed to find output report [ 102.257820][ T13] [ 102.269474][ T3576] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 102.409876][ T5905] XFS (loop0): Mounting V5 Filesystem [ 102.447501][ T13] usb 5-1: USB disconnect, device number 4 [ 102.473402][ T5929] fido_id[5929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 102.525663][ T4512] usb 2-1: USB disconnect, device number 4 [ 102.571092][ T5905] XFS (loop0): Ending clean mount [ 102.581441][ T4189] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.687706][ T5924] loop2: detected capacity change from 0 to 32768 [ 102.711969][ T4193] XFS (loop0): Unmounting Filesystem [ 102.795584][ T5924] XFS (loop2): Mounting V5 Filesystem [ 102.865608][ T5924] XFS (loop2): Ending clean mount [ 102.875564][ T5924] XFS (loop2): Quotacheck needed: Please wait. [ 102.959771][ T5924] XFS (loop2): Quotacheck: Done. [ 102.981476][ T4189] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 102.994598][ T5942] loop0: detected capacity change from 0 to 2048 [ 103.009557][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.049003][ T5942] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.059832][ T4188] XFS (loop2): Unmounting Filesystem [ 103.060429][ T4189] usb 4-1: config 0 descriptor?? [ 103.140007][ T5942] attempt to access beyond end of device [ 103.140007][ T5942] loop0: rw=524288, want=33554432, limit=2048 [ 103.158586][ T5947] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.193995][ T5944] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 103.261452][ T5944] EXT4-fs (loop4): invalid journal inode [ 103.267191][ T5944] EXT4-fs (loop4): can't get journal size [ 103.292455][ T5944] EXT4-fs (loop4): 1 truncate cleaned up [ 103.298282][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,sysvgroups,sysvgroups,lazytime,,errors=continue. Quota mode: none. [ 103.353509][ T5944] EXT4-fs warning (device loop4): ext4_group_extend:1847: will only finish group (8193 blocks, 7937 new) [ 103.366583][ T5944] EXT4-fs warning (device loop4): ext4_group_extend:1852: can't read last block, resize aborted [ 103.457550][ T5951] syz.0.691 (5951) used greatest stack depth: 19888 bytes left [ 103.578099][ T5949] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 103.595930][ T4189] hackrf 4-1:0.0: Board ID: 00 [ 103.601031][ T4189] hackrf 4-1:0.0: Firmware version: [ 103.601968][ T5949] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 103.664704][ T4189] hackrf 4-1:0.0: Registered as swradio24 [ 103.682459][ T4189] hackrf 4-1:0.0: Registered as swradio25 [ 103.688226][ T4189] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 103.697631][ T5949] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 103.760124][ T5949] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 103.821332][ T5949] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 103.848357][ T4189] usb 4-1: USB disconnect, device number 4 [ 103.861559][ T4512] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.893138][ T5949] ntfs: volume version 3.1. [ 103.927008][ T5949] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 103.978869][ T5949] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 104.004107][ T5949] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 104.017356][ T5949] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 104.029111][ T5949] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 104.046045][ T5963] Unable to read rock-ridge attributes [ 104.121545][ T4512] usb 1-1: Using ep0 maxpacket: 16 [ 104.158367][ T5963] Unable to read rock-ridge attributes [ 104.181870][ T5963] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 104.241638][ T4512] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 104.250009][ T4512] usb 1-1: config 0 has no interface number 0 [ 104.256657][ T4512] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 104.391882][ T4512] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 104.400988][ T4512] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 104.437016][ T4512] usb 1-1: Manufacturer: syz [ 104.465039][ T4512] usb 1-1: SerialNumber: syz [ 104.486491][ T4512] usb 1-1: config 0 descriptor?? [ 104.729668][ T5976] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 104.796230][ T5976] ntfs3: loop3: Failed to load $Extend. [ 104.971705][ T4522] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.029323][ T5982] set_capacity_and_notify: 5 callbacks suppressed [ 105.029339][ T5982] loop4: detected capacity change from 0 to 32768 [ 105.104238][ T5982] XFS (loop4): Mounting V5 Filesystem [ 105.168521][ T5982] XFS (loop4): Ending clean mount [ 105.189437][ T4512] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 105.225461][ T4512] usb 1-1: USB disconnect, device number 6 [ 105.258428][ T4195] XFS (loop4): Unmounting Filesystem [ 105.331775][ T4522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 105.351696][ T4522] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 105.368316][ T4522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 105.378595][ T4522] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 105.551686][ T4522] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 105.560769][ T4522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.590753][ T4522] usb 3-1: Product: syz [ 105.608691][ T4522] usb 3-1: Manufacturer: syz [ 105.619683][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 105.631665][ T4522] usb 3-1: SerialNumber: syz [ 105.656396][ T4522] usb 3-1: config 0 descriptor?? [ 105.702570][ T4522] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 105.726800][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 105.737757][ T6015] loop1: detected capacity change from 0 to 2048 [ 105.789968][ T6015] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.828586][ T6022] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.828923][ T6015] attempt to access beyond end of device [ 105.828923][ T6015] loop1: rw=524288, want=33554432, limit=2048 [ 106.014657][ T6028] xt_hashlimit: max too large, truncated to 1048576 [ 106.046831][ T6028] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 106.139896][ T4522] scsi host1: usb-storage 3-1:0.0 [ 106.212483][ T4522] usb 3-1: USB disconnect, device number 5 [ 106.365458][ T6035] loop3: detected capacity change from 0 to 4096 [ 106.455569][ T6035] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 106.471254][ T6043] ubi31: attaching mtd0 [ 106.475787][ T6043] ubi31 error: ubi_attach_mtd_dev: bad VID header (42) or data offsets (106) [ 106.544079][ T6024] loop0: detected capacity change from 0 to 32768 [ 107.269074][ T6045] loop1: detected capacity change from 0 to 32768 [ 107.510665][ T6045] JBD2: Ignoring recovery information on journal [ 107.564318][ T6072] loop4: detected capacity change from 0 to 32768 [ 107.585477][ T6065] loop3: detected capacity change from 0 to 40427 [ 107.638178][ T6072] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #68: fs_generation is 3919078593 [ 107.654940][ T6072] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 107.665370][ T6072] OCFS2: File system is now read-only. [ 107.670839][ T6072] (syz.4.746,6072,1):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 107.679253][ T6072] (syz.4.746,6072,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 107.688672][ T6072] (syz.4.746,6072,1):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 107.698280][ T6045] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 107.708128][ T6072] (syz.4.746,6072,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 107.708160][ T6072] (syz.4.746,6072,1):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 107.708166][ T6074] loop2: detected capacity change from 0 to 1764 [ 107.708182][ T6072] (syz.4.746,6072,1):ocfs2_initialize_super:2281 ERROR: status = -30 [ 107.744977][ T6072] (syz.4.746,6072,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 107.771331][ T6065] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.779131][ T6065] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.859441][ T6077] loop0: detected capacity change from 0 to 4096 [ 107.879681][ T6065] F2FS-fs (loop3): invalid crc value [ 107.880163][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 107.888898][ T6074] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 108.004908][ T6065] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.014526][ T6084] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.112944][ T6088] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 108.305614][ T6065] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 108.326249][ T6065] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.790142][ T6111] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.763'. [ 108.820227][ T6111] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 108.998450][ T6120] loop3: detected capacity change from 0 to 64 [ 109.322394][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.593470][ T6100] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 109.618012][ T6100] F2FS-fs (loop1): invalid crc value [ 109.656118][ T6100] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.711512][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 109.739087][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57465, setting to 1024 [ 109.811291][ T6100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.876902][ T13] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 109.892837][ T13] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 109.916459][ T13] usb 5-1: Product: syz [ 109.934466][ T13] usb 5-1: config 0 descriptor?? [ 109.962889][ T4184] attempt to access beyond end of device [ 109.962889][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 110.218190][ T6137] set_capacity_and_notify: 1 callbacks suppressed [ 110.218206][ T6137] loop2: detected capacity change from 0 to 40427 [ 110.325313][ T6137] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 110.337641][ T6137] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 110.362030][ T6137] F2FS-fs (loop2): invalid crc value [ 110.420074][ T6137] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 110.438603][ T13] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 110.449337][ T13] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 110.481948][ T13] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 110.519240][ T13] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 110.569837][ T13] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 110.590282][ T13] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.4-1/input0 [ 110.658445][ T13] usb 5-1: USB disconnect, device number 5 [ 110.678474][ T6137] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 110.692095][ T6137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.798889][ T6161] fido_id[6161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 110.891693][ T4188] attempt to access beyond end of device [ 110.891693][ T4188] loop2: rw=2049, want=45104, limit=40427 [ 111.037665][ T6171] loop0: detected capacity change from 0 to 512 [ 111.174188][ T6174] loop3: detected capacity change from 0 to 64 [ 111.225322][ T6171] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.787: couldn't read orphan inode 26 (err -116) [ 111.282346][ T6171] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.374498][ T6171] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.482760][ T6171] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.787: corrupted inode contents [ 111.545043][ T6171] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.787: mark_inode_dirty error [ 111.561702][ T6178] loop2: detected capacity change from 0 to 32768 [ 111.589864][ T6178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.785 (6178) [ 111.607377][ T6182] loop3: detected capacity change from 0 to 4096 [ 111.613913][ T6171] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.787: bg 0: block 64: padding at end of block bitmap is not set [ 111.646525][ T6178] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 111.655819][ T6171] __quota_error: 6 callbacks suppressed [ 111.655837][ T6171] Quota error (device loop0): write_blk: dquota write failed [ 111.661705][ T6178] BTRFS info (device loop2): allowing degraded mounts [ 111.661925][ T6178] BTRFS info (device loop2): enabling ssd optimizations [ 111.661944][ T6178] BTRFS info (device loop2): allowing degraded mounts [ 111.661966][ T6178] BTRFS info (device loop2): using free space tree [ 111.661980][ T6178] BTRFS info (device loop2): has skinny extents [ 111.706999][ T6171] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 111.708614][ T6169] loop1: detected capacity change from 0 to 32768 [ 111.719455][ T6183] Quota error (device loop0): write_blk: dquota write failed [ 111.724372][ T6171] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.787: Failed to acquire dquot type 0 [ 111.731699][ T6183] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 111.731742][ T6183] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.787: Failed to acquire dquot type 0 [ 111.907902][ T26] audit: type=1800 audit(1774021463.767:11): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 111.987246][ T6169] ialloc: diAlloc returned -5! [ 112.028920][ T6182] ntfs3: Cannot use different iocharset when remounting! [ 112.621982][ T6204] loop0: detected capacity change from 0 to 32768 [ 112.651650][ T4512] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.791909][ T6204] XFS (loop0): Mounting V5 Filesystem [ 112.879322][ T6204] XFS (loop0): Ending clean mount [ 112.892077][ T4512] usb 4-1: Using ep0 maxpacket: 16 [ 113.011771][ T4512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.016445][ T4193] XFS (loop0): Unmounting Filesystem [ 113.033434][ T4512] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.057353][ T4512] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 113.088043][ T4512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.120089][ T4512] usb 4-1: config 0 descriptor?? [ 113.421636][ T5347] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 113.592910][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.600005][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.607805][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.615511][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.623286][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.637464][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.645289][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.659575][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.678590][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.680881][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 113.686096][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.702931][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.709995][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.718446][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.726123][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.735145][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.747141][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.769187][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.773092][ T6253] loop4: detected capacity change from 0 to 40427 [ 113.780279][ T6265] loop1: detected capacity change from 0 to 256 [ 113.789446][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.799683][ T5347] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.809347][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.818013][ T6253] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.827179][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.838727][ T6253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.848227][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.857594][ T5347] usb 3-1: config 0 descriptor?? [ 113.862765][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.869858][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.880537][ T6253] F2FS-fs (loop4): invalid crc value [ 113.887578][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.895304][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.904384][ T5347] cp210x 3-1:0.0: cp210x converter detected [ 113.914022][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.922155][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.929232][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.937877][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.945722][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.953199][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.965039][ T6253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.972985][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.980059][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.988584][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 113.999311][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 114.008995][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 114.019673][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 114.029359][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 114.044331][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 114.049074][ T6253] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.056014][ T4512] chicony 0003:04F2:1123.0009: unknown main item tag 0x0 [ 114.058765][ T6253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.092560][ T4512] chicony 0003:04F2:1123.0009: hidraw0: USB HID v0.0c Device [HID 04f2:1123] on usb-dummy_hcd.3-1/input0 [ 114.124250][ T4512] usb 4-1: USB disconnect, device number 5 [ 114.238719][ T6272] fido_id[6272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 114.342445][ T5347] usb 3-1: cp210x converter now attached to ttyUSB0 [ 114.390654][ T6280] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 114.501041][ T6282] loop1: detected capacity change from 0 to 4096 [ 114.534348][ T6235] usb 3-1: USB disconnect, device number 6 [ 114.547319][ T6235] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.570486][ T6282] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 114.638980][ T6235] cp210x 3-1:0.0: device disconnected [ 114.659642][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 114.687164][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 114.709622][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 115.036060][ T6298] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 115.081276][ T6298] REISERFS (device loop3): using ordered data mode [ 115.087819][ T6298] reiserfs: using flush barriers [ 115.158847][ T6298] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.220210][ T6298] REISERFS (device loop3): checking transaction log (loop3) [ 115.232654][ T6298] REISERFS (device loop3): Using tea hash to sort names [ 115.249468][ T6298] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 115.397180][ T6292] set_capacity_and_notify: 1 callbacks suppressed [ 115.397196][ T6292] loop4: detected capacity change from 0 to 32768 [ 115.469079][ T6292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.820 (6292) [ 115.505680][ T6307] loop1: detected capacity change from 0 to 32768 [ 115.536163][ T6292] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 115.545589][ T6292] BTRFS info (device loop4): turning off barriers [ 115.580790][ T6313] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 115.600953][ T6292] BTRFS info (device loop4): setting nodatasum [ 115.638967][ T6292] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.688475][ T6307] overlayfs: upper fs needs to support d_type. [ 115.721446][ T6292] BTRFS info (device loop4): use zstd compression, level 3 [ 115.728696][ T6292] BTRFS info (device loop4): using free space tree [ 115.741254][ T6307] overlayfs: upper fs does not support tmpfile. [ 115.760284][ T6307] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 115.779475][ T6292] BTRFS info (device loop4): has skinny extents [ 115.792564][ T6307] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 115.792564][ T6307] [ 115.811965][ T6307] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 115.819076][ T6307] overlayfs: failed to verify upper root origin [ 115.891690][ T144] read_mapping_page failed! [ 115.896759][ T144] ERROR: (device loop1): txCommit: [ 115.896759][ T144] [ 115.906355][ T144] jfs_write_inode: jfs_commit_inode failed! [ 116.085267][ T6342] netlink: 'syz.1.835': attribute type 8 has an invalid length. [ 116.472971][ T6350] loop1: detected capacity change from 0 to 32768 [ 116.504672][ T6350] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.840 (6350) [ 116.595747][ T6350] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 116.634736][ T6350] BTRFS info (device loop1): force zlib compression, level 3 [ 116.676856][ T6350] BTRFS info (device loop1): force clearing of disk cache [ 116.735218][ T6350] BTRFS info (device loop1): setting nodatasum [ 116.767942][ T6350] BTRFS info (device loop1): allowing degraded mounts [ 116.785552][ T6350] BTRFS info (device loop1): enabling disk space caching [ 116.815602][ T6350] BTRFS info (device loop1): disk space caching is enabled [ 116.855729][ T6350] BTRFS info (device loop1): has skinny extents [ 117.139752][ T6395] loop4: detected capacity change from 0 to 1024 [ 117.304219][ T6350] BTRFS info (device loop1): clearing free space tree [ 117.312850][ T6363] loop0: detected capacity change from 0 to 40427 [ 117.315837][ T6350] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.339116][ T6363] F2FS-fs (loop0): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 117.346756][ T6407] loop2: detected capacity change from 0 to 64 [ 117.355015][ T6363] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 117.376366][ T6363] F2FS-fs (loop0): invalid crc value [ 117.378327][ T6350] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.409710][ T6363] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.588146][ T6363] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 117.599888][ T6363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.651285][ T6350] BTRFS info (device loop1): balance: start -f [ 117.668110][ T6350] BTRFS info (device loop1): balance: ended with status: 0 [ 117.692146][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.749414][ T6412] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.763370][ T6419] loop2: detected capacity change from 0 to 512 [ 117.813950][ T6419] EXT4-fs (loop2): Ignoring removed nobh option [ 118.138347][ T6419] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.242533][ T6419] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 1: comm syz.2.858: invalid block [ 118.314648][ T6419] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.858: couldn't read orphan inode 11 (err -117) [ 118.401296][ T6419] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noauto_da_alloc,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 118.528950][ T6444] tmpfs: Bad value for 'gid' [ 119.094859][ T6462] loop2: detected capacity change from 0 to 8192 [ 119.144481][ T6442] loop1: detected capacity change from 0 to 32768 [ 119.214911][ T6462] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 119.226064][ T6462] REISERFS (device loop2): using ordered data mode [ 119.241306][ T6462] reiserfs: using flush barriers [ 119.247554][ T6454] loop4: detected capacity change from 0 to 32768 [ 119.290057][ T6462] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.312373][ T6462] REISERFS (device loop2): checking transaction log (loop2) [ 119.335316][ T6462] REISERFS (device loop2): Using r5 hash to sort names [ 119.335819][ T6462] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 119.335880][ T6462] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 119.338732][ T6440] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 119.338760][ T6440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.345566][ T6462] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 119.345946][ T6462] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 119.346197][ T6440] F2FS-fs (loop3): invalid crc value [ 119.346209][ T6462] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 119.370531][ T6442] XFS (loop1): Mounting V5 Filesystem [ 119.448277][ T6454] XFS (loop4): Mounting V5 Filesystem [ 119.484977][ T6440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.584253][ T6442] XFS (loop1): Ending clean mount [ 119.669996][ T6454] XFS (loop4): Ending clean mount [ 119.675544][ T6442] XFS (loop1): Quotacheck needed: Please wait. [ 119.705462][ T6440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.722912][ T6440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 119.771628][ T6442] XFS (loop1): Quotacheck: Done. [ 119.837572][ T4195] XFS (loop4): Unmounting Filesystem [ 119.865004][ T4184] XFS (loop1): Unmounting Filesystem [ 120.254826][ T6498] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 120.891332][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.037359][ T6534] set_capacity_and_notify: 2 callbacks suppressed [ 121.037374][ T6534] loop2: detected capacity change from 0 to 4096 [ 121.170927][ T6542] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 121.238657][ T6543] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.321596][ T13] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 121.343069][ T13] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 121.370355][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.453342][ T13] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 121.899040][ T6540] loop4: detected capacity change from 0 to 32768 [ 122.413926][ T6583] loop1: detected capacity change from 0 to 4096 [ 122.438199][ T6571] loop4: detected capacity change from 0 to 32768 [ 122.485044][ T6571] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.918 (6571) [ 122.546618][ T6583] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 122.562734][ T6571] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.572285][ T6583] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 122.585964][ T6571] BTRFS info (device loop4): force zlib compression, level 3 [ 122.593687][ T13] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 122.602081][ T6583] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 122.614120][ T6571] BTRFS info (device loop4): force clearing of disk cache [ 122.623501][ T6571] BTRFS info (device loop4): setting nodatasum [ 122.629960][ T6583] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 122.644131][ T6571] BTRFS info (device loop4): allowing degraded mounts [ 122.651086][ T6571] BTRFS info (device loop4): enabling disk space caching [ 122.651628][ T13] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 122.658834][ T6583] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 122.677315][ T6571] BTRFS info (device loop4): disk space caching is enabled [ 122.685226][ T6571] BTRFS info (device loop4): has skinny extents [ 122.694063][ T6583] ntfs: volume version 3.1. [ 122.716584][ T6583] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 122.730414][ T6583] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 122.749657][ T6583] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 122.762188][ T6583] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 122.774508][ T6583] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 122.856009][ T13] usb 4-1: USB disconnect, device number 6 [ 122.865930][ T6571] BTRFS info (device loop4): clearing free space tree [ 122.873543][ T6571] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 122.892292][ T6571] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 122.936858][ T6606] loop0: detected capacity change from 0 to 4096 [ 122.984603][ T6571] BTRFS info (device loop4): balance: start -f [ 122.996624][ T6571] BTRFS info (device loop4): balance: ended with status: 0 [ 123.030713][ T6571] BTRFS info (device loop4): balance: start -d -m -s [ 123.051473][ T6611] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.068591][ T6610] loop1: detected capacity change from 0 to 4096 [ 123.125303][ T6571] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 123.153943][ T6610] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 123.192092][ T6237] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.266243][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 123.299610][ T6571] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 123.317424][ T6613] loop0: detected capacity change from 0 to 4096 [ 123.340280][ T6613] EXT4-fs (loop0): Test dummy encryption mode enabled [ 123.362236][ T6571] BTRFS info (device loop4): balance: canceled [ 123.425931][ T6613] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 123.452638][ T6237] usb 3-1: Using ep0 maxpacket: 32 [ 123.463439][ T6613] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 123.476119][ T6613] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 123.583517][ T6237] usb 3-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 123.601162][ T6237] usb 3-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 123.796820][ T6237] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 123.809391][ T6237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.820264][ T6237] usb 3-1: Product: syz [ 123.838975][ T6237] usb 3-1: Manufacturer: syz [ 123.844146][ T6237] usb 3-1: SerialNumber: syz [ 124.028533][ T6629] loop1: detected capacity change from 0 to 1024 [ 124.050239][ T6633] loop0: detected capacity change from 0 to 512 [ 124.078638][ T6629] EXT4-fs (loop1): Ignoring removed oldalloc option [ 124.101886][ T6629] EXT4-fs (loop1): Ignoring removed bh option [ 124.108014][ T6629] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.126961][ T4510] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 124.146537][ T6633] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 124.146537][ T6633] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 124.146537][ T6633] [ 124.204245][ T6633] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.217417][ T6629] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 124.284752][ T6237] usb 3-1: unit 2 not found! [ 124.338824][ T6633] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026018, mo2=0000] [ 124.368373][ T6631] loop4: detected capacity change from 0 to 40427 [ 124.403948][ T6237] usb 3-1: USB disconnect, device number 7 [ 124.426594][ T6633] EXT4-fs (loop0): 1 truncate cleaned up [ 124.437625][ T6633] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nojournal_checksum,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,journal_ioprio=0x0000000000000002,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 124.442059][ T4238] EXT4-fs error (device loop0): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 1 [ 124.489851][ T6631] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.522044][ T4510] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 124.530435][ T4510] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 124.551370][ T6631] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.569695][ T4510] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.599308][ T4510] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 124.600487][ T6631] F2FS-fs (loop4): invalid crc value [ 124.618500][ T4510] usb 4-1: config 1 has no interface number 0 [ 124.658898][ T4510] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 124.672589][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.688901][ T4510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.730886][ T6631] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.777988][ T4510] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 124.940523][ T6631] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.968741][ T6631] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.976842][ T4510] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 124.992577][ T4510] snd_usb_pod 4-1:1.1: invalid control EP [ 125.008558][ T4510] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 125.029215][ T4510] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 125.059578][ T4510] snd_usb_pod: probe of 4-1:1.1 failed with error -22 [ 125.180594][ T4510] usb 4-1: USB disconnect, device number 7 [ 125.221396][ T13] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 125.651384][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.701450][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 125.781449][ T6696] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.798912][ T6696] hpfs: filesystem error: improperly stopped [ 125.805605][ T6696] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.814062][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 4 [ 125.825604][ T6696] hpfs: You really don't want any checks? You are crazy... [ 125.838997][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 125.858198][ T6696] hpfs: hpfs_map_sector(): read error [ 125.881230][ T13] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 125.885880][ T6696] hpfs: code page support is disabled [ 125.928808][ T6696] hpfs: hpfs_map_4sectors(): unaligned read [ 125.949366][ T6696] hpfs: hpfs_map_4sectors(): unaligned read [ 125.973876][ T6696] hpfs: filesystem error: unable to find root dir [ 126.087154][ T13] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 126.090255][ T6694] set_capacity_and_notify: 1 callbacks suppressed [ 126.090267][ T6694] loop0: detected capacity change from 0 to 32768 [ 126.103356][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.103383][ T13] usb 2-1: Product: syz [ 126.103398][ T13] usb 2-1: Manufacturer: syz [ 126.103414][ T13] usb 2-1: SerialNumber: syz [ 126.135722][ T6702] loop2: detected capacity change from 0 to 4096 [ 126.276469][ T6694] XFS (loop0): Mounting V5 Filesystem [ 126.279413][ T6702] ntfs3: loop2: ino=21, "rdma.current" The size of extended attributes must not exceed 64KiB [ 126.319652][ T4188] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 126.329763][ T4188] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 126.342667][ T6694] XFS (loop0): Ending clean mount [ 126.472703][ T13] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 126.503906][ T13] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 126.523309][ T4193] XFS (loop0): Unmounting Filesystem [ 126.577496][ T6704] loop3: detected capacity change from 0 to 32768 [ 126.638377][ T13] usb 2-1: USB disconnect, device number 5 [ 126.691098][ T6718] loop4: detected capacity change from 0 to 256 [ 126.716036][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.841731][ T6718] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 127.080090][ T6714] loop2: detected capacity change from 0 to 32768 [ 127.104254][ T6725] tmpfs: Bad value for 'mpol' [ 127.164711][ T6720] loop3: detected capacity change from 0 to 8192 [ 127.266151][ T6714] JBD2: Ignoring recovery information on journal [ 127.332834][ T6714] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.375225][ T6735] loop0: detected capacity change from 0 to 512 [ 127.529391][ T6735] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.731792][ T4189] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.749716][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 127.763338][ T6749] nbd: socks must be embedded in a SOCK_ITEM attr [ 127.880045][ T4257] udevd[4257]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 128.171432][ T4189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.191644][ T4189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.220622][ T6762] loop2: detected capacity change from 0 to 4096 [ 128.329008][ T6752] loop0: detected capacity change from 0 to 32768 [ 128.367861][ T6762] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.379613][ T6752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.981 (6752) [ 128.392116][ T4189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.411615][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.421590][ T4189] usb 2-1: Product: syz [ 128.434469][ T4189] usb 2-1: Manufacturer: syz [ 128.441545][ T4189] usb 2-1: SerialNumber: syz [ 128.479423][ T6752] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 128.501360][ T6752] BTRFS info (device loop0): force zlib compression, level 3 [ 128.512180][ T4189] hub 2-1:1.0: bad descriptor, ignoring hub [ 128.518108][ T4189] hub: probe of 2-1:1.0 failed with error -5 [ 128.537643][ T6752] BTRFS info (device loop0): force clearing of disk cache [ 128.538897][ T6762] ntfs3: loop2: failed to convert "c46c" to cp1251 [ 128.572668][ T6752] BTRFS info (device loop0): setting nodatasum [ 128.595148][ T6752] BTRFS info (device loop0): allowing degraded mounts [ 128.617772][ T6752] BTRFS info (device loop0): enabling disk space caching [ 128.638137][ T6752] BTRFS info (device loop0): disk space caching is enabled [ 128.651533][ T6752] BTRFS info (device loop0): has skinny extents [ 128.675176][ T6764] loop3: detected capacity change from 0 to 32768 [ 128.762441][ T6776] siw: device registration error -23 [ 128.794931][ T6764] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 128.794931][ T6764] [ 128.849961][ T6772] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 128.875882][ T6772] EXT4-fs (loop4): mount failed [ 128.971726][ T6752] BTRFS info (device loop0): clearing free space tree [ 129.009758][ T6752] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.032472][ T4189] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 129.051626][ T6752] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.269169][ T6752] BTRFS info (device loop0): balance: start -f [ 129.306668][ T6752] BTRFS info (device loop0): balance: ended with status: 0 [ 129.486996][ T6823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.493007][ T6816] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 129.615464][ T6816] NILFS (loop3): mounting fs with errors [ 129.811256][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.871444][ T4189] usb 2-1: USB disconnect, device number 6 [ 130.111450][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 130.200436][ T6835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.224484][ T6835] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.261557][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.300499][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.403871][ T13] usb 3-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 130.415237][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.430182][ T13] usb 3-1: config 0 descriptor?? [ 130.706342][ T6852] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 130.715683][ T6852] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 130.722907][ T6852] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 130.730148][ T6852] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 130.737305][ T6852] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 130.751007][ T6852] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 130.758474][ T6852] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 130.765838][ T6852] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 130.775040][ T6852] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 130.782527][ T6852] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 130.789142][ T6852] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 130.803374][ T6852] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 130.809889][ T6852] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 130.832133][ T6841] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.1015 (6841) [ 130.834559][ T6849] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 130.858984][ T6852] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 130.868807][ T6852] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 130.881062][ T6852] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 130.889296][ T6852] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 130.903998][ T6852] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 130.910577][ T6852] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 130.922952][ T6841] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 130.955837][ T6852] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 130.957368][ T6841] BTRFS info (device loop0): using free space tree [ 130.980391][ T6852] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 130.994669][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.002647][ T6841] BTRFS info (device loop0): has skinny extents [ 131.011458][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.021517][ T6852] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 131.034058][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.058010][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.072667][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.080430][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.088470][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.097288][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.113384][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.156370][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.176701][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.215196][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.234913][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.252441][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.268122][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.268137][ T6841] BTRFS info (device loop0): enabling ssd optimizations [ 131.291185][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.298406][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.317223][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.327000][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.357346][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.368032][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.380812][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.388248][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.401673][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.408882][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.420834][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.429485][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.441290][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.449325][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.462671][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.469915][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.479491][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.486885][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.494191][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.501611][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.508655][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.515766][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.522983][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.530023][ T13] chicony 0003:04F2:1123.000A: unknown main item tag 0x0 [ 131.565089][ T13] chicony 0003:04F2:1123.000A: hidraw0: USB HID v0.0c Device [HID 04f2:1123] on usb-dummy_hcd.2-1/input0 [ 131.640368][ T13] usb 3-1: USB disconnect, device number 8 [ 131.778047][ T6891] fido_id[6891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 132.172524][ T6907] set_capacity_and_notify: 6 callbacks suppressed [ 132.172539][ T6907] loop2: detected capacity change from 0 to 2048 [ 132.231205][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.263324][ T6904] loop1: detected capacity change from 0 to 8192 [ 132.330636][ T6913] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.437022][ T6919] loop2: detected capacity change from 0 to 64 [ 132.441370][ T6904] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 132.451714][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 132.472384][ T6904] REISERFS (device loop1): using ordered data mode [ 132.478936][ T6904] reiserfs: using flush barriers [ 132.518307][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 132.528045][ T6922] netlink: 'syz.0.1040': attribute type 11 has an invalid length. [ 132.559592][ T6904] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.594250][ T6904] REISERFS (device loop1): checking transaction log (loop1) [ 132.602744][ T21] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.613314][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.630570][ T21] usb 5-1: config 0 descriptor?? [ 132.636204][ T6904] REISERFS (device loop1): Using r5 hash to sort names [ 132.645197][ T6904] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.659637][ T6904] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 132.682612][ T21] cp210x 5-1:0.0: cp210x converter detected [ 132.706047][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.712784][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.756088][ T6904] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 132.792547][ T6904] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 132.849657][ T6904] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 133.155567][ T6949] loop3: detected capacity change from 0 to 16 [ 133.286358][ T6949] erofs: (device loop3): mounted with root inode @ nid 36. [ 133.319089][ T6949] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 133.351633][ T21] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 133.359184][ T21] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 133.382097][ T21] usb 5-1: cp210x converter now attached to ttyUSB0 [ 133.390385][ T6949] erofs: (device loop3): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 133.413733][ T21] usb 5-1: USB disconnect, device number 6 [ 133.420382][ T6949] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel [ 133.444726][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.458716][ T21] cp210x 5-1:0.0: device disconnected [ 133.464852][ T6949] erofs: (device loop3): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 133.743418][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1062'. [ 133.777230][ T6969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1062'. [ 133.807982][ T6969] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 133.852889][ T6973] sp0: Synchronizing with TNC [ 133.865885][ T6951] loop0: detected capacity change from 0 to 32768 [ 134.030061][ T6987] loop4: detected capacity change from 0 to 512 [ 134.045388][ T6983] smc: net device bond0 applied user defined pnetid SYZ2 [ 134.067972][ T6951] XFS (loop0): Mounting V5 Filesystem [ 134.156050][ T6987] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1069: inode #1: comm syz.4.1069: iget: illegal inode # [ 134.216985][ T6951] XFS (loop0): Ending clean mount [ 134.228781][ T6987] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1069: error while reading EA inode 1 err=-117 [ 134.280965][ T4193] XFS (loop0): Unmounting Filesystem [ 134.367212][ T6987] EXT4-fs (loop4): 1 orphan inode deleted [ 134.400267][ T6987] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.400411][ T7005] loop3: detected capacity change from 0 to 256 [ 134.454497][ T6987] EXT4-fs (loop4): Cannot specify journal on remount [ 134.462562][ T7005] exfat: Deprecated parameter 'utf8' [ 134.467884][ T7005] exfat: Deprecated parameter 'utf8' [ 134.499623][ T7005] exfat: Deprecated parameter 'utf8' [ 134.578421][ T7005] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 134.721775][ T6355] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.797914][ T7017] loop3: detected capacity change from 0 to 128 [ 134.835975][ T7017] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.836098][ T7017] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.002560][ T7024] loop2: detected capacity change from 0 to 1024 [ 135.071984][ T7022] loop3: detected capacity change from 0 to 8192 [ 135.090382][ T7024] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 135.101731][ T6355] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.121094][ T7024] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.137688][ T6355] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.153659][ T6355] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.189943][ T6355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.203795][ T7024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 135.238481][ T7024] System zones: 0-1, 3-36 [ 135.301960][ T7007] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.372643][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 135.387192][ T7024] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 135.454598][ T7020] XFS (loop0): Mounting V5 Filesystem [ 135.678915][ T7020] XFS (loop0): Ending clean mount [ 135.691912][ T7020] XFS (loop0): Quotacheck needed: Please wait. [ 135.746894][ T7049] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.816881][ T7049] EXT4-fs (loop4): can't change dax mount option while remounting [ 135.847757][ T7020] XFS (loop0): Quotacheck: Done. [ 135.931674][ T4193] XFS (loop0): Unmounting Filesystem [ 136.237083][ T7065] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 136.281869][ T7065] ext4 filesystem being mounted at /218/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.301729][ T5346] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.455559][ T7057] jfs: Unrecognized mount option "quota=" or missing value [ 136.562449][ T5346] usb 4-1: Using ep0 maxpacket: 16 [ 136.686998][ T5346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.722573][ T5346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.782130][ T5346] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 136.792792][ T5346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.803088][ T5346] usb 4-1: config 0 descriptor?? [ 136.837129][ T7086] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.871272][ T7086] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.092497][ T6235] usb 2-1: USB disconnect, device number 7 [ 137.245327][ T7104] set_capacity_and_notify: 7 callbacks suppressed [ 137.245342][ T7104] loop4: detected capacity change from 0 to 128 [ 137.283899][ T5346] mcp2221 0003:04D8:00DD.000B: item fetching failed at offset 1/5 [ 137.304011][ T5346] mcp2221 0003:04D8:00DD.000B: can't parse reports [ 137.310580][ T5346] mcp2221: probe of 0003:04D8:00DD.000B failed with error -22 [ 137.322481][ T7104] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.365249][ T7110] PKCS8: Unsupported PKCS#8 version [ 137.378139][ T7104] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.488047][ T5346] usb 4-1: USB disconnect, device number 8 [ 137.513649][ T714] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.589669][ T7117] QAT: failed to copy from user cfg_data. [ 137.604365][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 137.729081][ T7125] loop2: detected capacity change from 0 to 64 [ 137.756647][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'. [ 137.795189][ T7131] loop1: detected capacity change from 0 to 8 [ 137.906717][ T7131] SQUASHFS error: xz decompression failed, data probably corrupt [ 137.941310][ T7131] SQUASHFS error: Failed to read block 0x108: -5 [ 137.947684][ T7131] SQUASHFS error: Unable to read metadata cache entry [106] [ 137.957053][ T7139] loop4: detected capacity change from 0 to 128 [ 138.011168][ T7131] SQUASHFS error: Unable to read inode 0x11f [ 138.019959][ T7139] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 138.049670][ T7139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.602283][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 138.602299][ T26] audit: type=1326 audit(1774021490.457:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 138.623594][ T7167] loop3: detected capacity change from 0 to 1024 [ 138.630629][ T21] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.674162][ T26] audit: type=1326 audit(1774021490.467:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 138.703610][ T7167] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.726669][ T26] audit: type=1326 audit(1774021490.467:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 138.748873][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.749367][ T7167] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 138.805947][ T7167] JBD2: no valid journal superblock found [ 138.830042][ T26] audit: type=1326 audit(1774021490.467:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 138.836334][ T7167] EXT4-fs (loop3): error loading journal [ 138.852235][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.901635][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 138.907963][ T7169] bond0: option packets_per_slave: invalid value (18446744073709551608) [ 138.927277][ T26] audit: type=1326 audit(1774021490.467:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 138.948582][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.956699][ T26] audit: type=1326 audit(1774021490.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 138.961211][ T7169] bond0: option packets_per_slave: allowed values 0 - 65535 [ 138.979600][ T26] audit: type=1326 audit(1774021490.467:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 139.047046][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.066366][ T26] audit: type=1326 audit(1774021490.467:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcc6abac799 code=0x7ffc0000 [ 139.091768][ T7171] loop1: detected capacity change from 0 to 64 [ 139.095344][ T7142] loop0: detected capacity change from 0 to 40427 [ 139.099408][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.115606][ T21] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 139.141642][ T26] audit: type=1326 audit(1774021490.467:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc6abac502 code=0x7ffc0000 [ 139.167809][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.179410][ T21] usb 3-1: config 0 descriptor?? [ 139.187993][ T26] audit: type=1326 audit(1774021490.467:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm=06 exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc6ab6cfce code=0x7ffc0000 [ 139.229417][ T7142] F2FS-fs (loop0): invalid crc value [ 139.261773][ T7142] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.332010][ T144] ------------[ cut here ]------------ [ 139.337509][ T144] kernel BUG at fs/hfs/inode.c:447! [ 139.379835][ T144] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 139.385954][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 139.393415][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.403404][ T7142] F2FS-fs (loop0): Start checkpoint disabled! [ 139.403467][ T144] Workqueue: writeback wb_workfn (flush-7:1) [ 139.410371][ T7142] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 139.415495][ T144] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 139.415519][ T144] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 a0 99 8d ff e9 47 fe ff ff e8 46 8e 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 139.415532][ T144] RSP: 0018:ffffc900016ef3c0 EFLAGS: 00010293 [ 139.415549][ T144] RAX: ffffffff823092ca RBX: ffff8880798fa218 RCX: ffff888017b3bb80 [ 139.415562][ T144] RDX: 0000000000000000 RSI: ffffffff8c4e2c80 RDI: 0000000000000000 [ 139.415574][ T144] RBP: ffffc900016ef550 R08: ffff888017b3bb80 R09: 0000000000000003 [ 139.415585][ T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 139.415596][ T144] R13: 1ffff920002dde7c R14: 0000000000000000 R15: ffff8880798fa1d8 [ 139.415609][ T144] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 139.415624][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.415636][ T144] CR2: 00007fac4b2c8000 CR3: 0000000066e8c000 CR4: 00000000003506f0 [ 139.415651][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.415662][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.415673][ T144] Call Trace: [ 139.415679][ T144] [ 139.415687][ T144] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 139.415707][ T144] ? __writeback_single_inode+0x471/0xda0 [ 139.415729][ T144] ? __rwlock_init+0x140/0x140 [ 139.415750][ T144] __writeback_single_inode+0x6c3/0xda0 [ 139.415769][ T144] writeback_sb_inodes+0xa4e/0x1680 [ 139.415796][ T144] ? queue_io+0x550/0x550 [ 139.415817][ T144] ? rcu_is_watching+0x11/0xa0 [ 139.415837][ T144] wb_writeback+0x45d/0xbe0 [ 139.415858][ T144] ? rcu_lock_release+0x20/0x20 [ 139.415871][ T144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 139.415893][ T144] ? mark_lock+0x94/0x320 [ 139.415908][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 139.415925][ T144] wb_workfn+0x43a/0xf20 [ 139.415948][ T144] ? inode_wait_for_writeback+0x220/0x220 [ 139.466344][ T7165] loop4: detected capacity change from 0 to 32768 [ 139.470457][ T144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 139.622204][ T144] ? read_lock_is_recursive+0x10/0x10 [ 139.627590][ T144] ? __schedule+0x11f7/0x43c0 [ 139.632254][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 139.637436][ T144] process_one_work+0x85f/0x1010 [ 139.642369][ T144] ? worker_detach_from_pool+0x240/0x240 [ 139.647997][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 139.653271][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 139.653573][ T21] ntrig 0003:1B96:0008.000C: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 139.658293][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 139.658316][ T144] ? wq_worker_running+0x97/0x170 [ 139.658334][ T144] worker_thread+0xaa6/0x1290 [ 139.684494][ T144] kthread+0x436/0x520 [ 139.688546][ T144] ? rcu_lock_release+0x20/0x20 [ 139.693374][ T144] ? kthread_blkcg+0xd0/0xd0 [ 139.697947][ T144] ret_from_fork+0x1f/0x30 [ 139.702349][ T144] [ 139.705361][ T144] Modules linked in: [ 139.722629][ T144] ---[ end trace 902c923196619fbd ]--- [ 139.728121][ T144] RIP: 0010:hfs_write_inode+0xa1a/0xa20 [ 139.733717][ T144] Code: 8d ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 a0 99 8d ff e9 47 fe ff ff e8 46 8e 48 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 [ 139.743887][ T154] attempt to access beyond end of device [ 139.743887][ T154] loop0: rw=2049, want=40976, limit=40427 [ 139.757971][ T144] RSP: 0018:ffffc900016ef3c0 EFLAGS: 00010293 [ 139.771436][ T144] RAX: ffffffff823092ca RBX: ffff8880798fa218 RCX: ffff888017b3bb80 [ 139.779502][ T144] RDX: 0000000000000000 RSI: ffffffff8c4e2c80 RDI: 0000000000000000 [ 139.780267][ T7165] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1145 (7165) [ 139.787743][ T144] RBP: ffffc900016ef550 R08: ffff888017b3bb80 R09: 0000000000000003 [ 139.787760][ T144] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 139.787772][ T144] R13: 1ffff920002dde7c R14: 0000000000000000 R15: ffff8880798fa1d8 [ 139.787785][ T144] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 139.787800][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.787811][ T144] CR2: 00007fac4b2c8000 CR3: 000000002b467000 CR4: 00000000003506f0 [ 139.787825][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.787835][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.787859][ T144] Kernel panic - not syncing: Fatal exception [ 139.869491][ T144] Kernel Offset: disabled [ 139.873801][ T144] Rebooting in 86400 seconds..