last executing test programs: 1.443821479s ago: executing program 3 (id=5806): r0 = syz_open_dev$usbfs(&(0x7f0000000400), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x7, 0x0}) 1.277043238s ago: executing program 0 (id=5808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ftruncate(r0, 0x4) 1.206537441s ago: executing program 3 (id=5811): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r0, 0x3, 0x0) 1.136058024s ago: executing program 2 (id=5812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0) 1.038853749s ago: executing program 0 (id=5814): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@local, @empty}, 0x8) 984.658012ms ago: executing program 2 (id=5815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) 976.727962ms ago: executing program 3 (id=5816): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002d00)={'wg1\x00', &(0x7f0000002cc0)=@ethtool_wolinfo={0x5, 0x7, 0xa8, "1b7432c41e26"}}) 906.312916ms ago: executing program 0 (id=5818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x4000014) 816.68076ms ago: executing program 3 (id=5819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x38, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x35b}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x589c}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 770.046483ms ago: executing program 1 (id=5820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0xfffffffffffffffd}, 0x10) 766.498683ms ago: executing program 2 (id=5821): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000003c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 650.922209ms ago: executing program 0 (id=5822): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4) 650.498128ms ago: executing program 1 (id=5823): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @local}, @in={0x2, 0x4e21, @empty}], 0x40) 650.309879ms ago: executing program 3 (id=5824): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") stat(&(0x7f0000000040)='./file0\x00', 0x0) 604.316441ms ago: executing program 2 (id=5825): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) 518.445585ms ago: executing program 1 (id=5826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x8000) 434.828779ms ago: executing program 0 (id=5827): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 420.69067ms ago: executing program 3 (id=5828): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="2e00000011008b88040f80ee59acbc1b130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 387.537142ms ago: executing program 2 (id=5829): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r0, 0x1) 246.875158ms ago: executing program 1 (id=5830): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x80681, 0x0) pwrite64(r0, &(0x7f0000000080)='b', 0x1, 0x100000001) 216.91979ms ago: executing program 2 (id=5831): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d45000/0x4000)=nil, 0x4000, 0x4) 87.164746ms ago: executing program 0 (id=5832): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 42.899368ms ago: executing program 1 (id=5833): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) 0s ago: executing program 1 (id=5834): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =108 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 353.094340][ T27] audit: type=1326 audit(2000000219.420:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.3.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 353.149573][ T27] audit: type=1326 audit(2000000219.420:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.3.4168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 353.523546][ T27] audit: type=1326 audit(2000000220.050:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.2.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 353.585194][ T27] audit: type=1326 audit(2000000220.050:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.2.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 353.657775][ T27] audit: type=1326 audit(2000000220.060:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.2.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 353.686186][ T27] audit: type=1326 audit(2000000220.060:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.2.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 353.719942][ T27] audit: type=1326 audit(2000000220.060:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.2.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 354.068809][T21453] loop3: detected capacity change from 0 to 512 [ 354.152732][T21453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.204226][T21453] ext4 filesystem being mounted at /1021/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.393906][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.418259][T21473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'. [ 355.052225][T21513] loop1: detected capacity change from 0 to 512 [ 355.135514][T21513] EXT4-fs (loop1): 1 truncate cleaned up [ 355.142493][T21513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.305276][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.425428][T21534] loop2: detected capacity change from 0 to 4096 [ 356.565512][T21610] loop2: detected capacity change from 0 to 764 [ 356.621621][T21610] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 356.673759][T21610] Symlink component flag not implemented [ 356.679672][T21610] Symlink component flag not implemented (7) [ 357.510163][T21670] loop3: detected capacity change from 0 to 512 [ 357.553406][T21670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.596814][T21670] ext4 filesystem being mounted at /1036/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.645428][T21648] loop2: detected capacity change from 0 to 32768 [ 357.670090][T21648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4245 (21648) [ 357.683318][ T8] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 357.722903][T21648] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 357.745396][T21648] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 357.762490][T21670] EXT4-fs error (device loop3): ext4_get_first_dir_block:3584: inode #12: comm syz.3.4252: Attempting to read directory block (0) that is past i_size (3) [ 357.780013][T21648] BTRFS info (device loop2): setting nodatasum [ 357.786549][T21648] BTRFS info (device loop2): force zlib compression, level 3 [ 357.794806][T21648] BTRFS info (device loop2): metadata ratio 1 [ 357.801015][T21648] BTRFS info (device loop2): enabling ssd optimizations [ 357.814092][T21648] BTRFS info (device loop2): allowing degraded mounts [ 357.821001][T21648] BTRFS info (device loop2): using free space tree [ 357.916370][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.940338][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.961578][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 358.003740][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 358.064727][ T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 358.101196][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 358.141496][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 358.189352][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.204677][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.214083][ T8] usb 2-1: Product: syz [ 358.249937][ T8] usb 2-1: Manufacturer: syz [ 358.277516][ T8] usb 2-1: SerialNumber: syz [ 358.415691][ T5778] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.435061][ T42] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 358.575211][ T8] usb 2-1: 0:2 : does not exist [ 358.631333][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 358.631348][ T27] audit: type=1326 audit(2000000225.160:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.0.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 358.679909][ T42] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 358.708146][ T42] usb 4-1: config 0 has no interface number 0 [ 358.714711][ T42] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 358.719276][ T8] usb 2-1: USB disconnect, device number 30 [ 358.731663][ T42] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.745423][ T42] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 358.762518][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.771518][ T42] usb 4-1: Product: syz [ 358.775783][ T42] usb 4-1: Manufacturer: syz [ 358.780400][ T42] usb 4-1: SerialNumber: syz [ 358.787135][ T27] audit: type=1326 audit(2000000225.160:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.0.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 358.809474][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.841198][ T42] usb 4-1: config 0 descriptor?? [ 358.853755][T13185] udevd[13185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.877540][T21710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 358.915081][ T42] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 358.937174][ T27] audit: type=1326 audit(2000000225.200:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.0.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 358.959526][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.975233][ T42] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 359.006801][ T27] audit: type=1326 audit(2000000225.200:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.0.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 359.029339][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.046042][ T27] audit: type=1326 audit(2000000225.200:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21729 comm="syz.0.4261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 359.200381][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 359.402263][ T42] usb 4-1: USB disconnect, device number 24 [ 359.423803][ T42] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 359.456217][ T42] cyberjack 4-1:0.69: device disconnected [ 359.496373][T21782] kAFS: No cell specified [ 360.078369][T21813] geneve2: entered promiscuous mode [ 360.094953][T21813] geneve2: entered allmulticast mode [ 360.536456][T21848] loop0: detected capacity change from 0 to 128 [ 360.689115][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'. [ 360.884618][T21870] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 361.998916][T21934] [U]  [ 362.182659][T21917] loop3: detected capacity change from 0 to 32768 [ 362.235159][T21917] (syz.3.4307,21917,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 362.313341][T21917] (syz.3.4307,21917,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 362.460242][T21917] JBD2: Ignoring recovery information on journal [ 362.608471][T21917] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 362.742688][T21965] loop2: detected capacity change from 0 to 2048 [ 362.786993][T21967] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.844103][T21952] loop0: detected capacity change from 0 to 32768 [ 362.846812][T21965] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=16, inode=2, rec_len=16, name_len=255 [ 362.902076][T21965] Remounting filesystem read-only [ 362.929113][T21952] jfs_lookup: dtSearch returned -5 [ 363.145106][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 363.401793][T21958] loop1: detected capacity change from 0 to 32768 [ 363.461857][T21958] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 363.552066][T21958] XFS (loop1): Ending clean mount [ 363.581814][T21958] XFS (loop1): Quotacheck needed: Please wait. [ 363.593367][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 363.693166][ T5888] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 363.733255][T21958] XFS (loop1): Quotacheck: Done. [ 363.821834][ T8] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 363.839436][ T8] usb 1-1: config 0 has no interface number 0 [ 363.870459][ T8] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.893243][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 363.905662][ T5888] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 363.928842][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 363.944265][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.960140][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.969248][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.992441][ T8] usb 1-1: Product: syz [ 363.993894][ T5768] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 363.999136][ T8] usb 1-1: Manufacturer: syz [ 364.023405][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.037694][ T8] usb 1-1: SerialNumber: syz [ 364.046684][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.057022][ T8] usb 1-1: config 0 descriptor?? [ 364.059484][T22023] loop3: detected capacity change from 0 to 256 [ 364.088547][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.124396][ T8] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 364.133432][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.171378][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.178889][T22023] FAT-fs (loop3): Directory bread(block 64) failed [ 364.209605][T22023] FAT-fs (loop3): Directory bread(block 65) failed [ 364.223099][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.243423][T22023] FAT-fs (loop3): Directory bread(block 66) failed [ 364.250362][T22023] FAT-fs (loop3): Directory bread(block 67) failed [ 364.277227][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.279262][T22023] FAT-fs (loop3): Directory bread(block 68) failed [ 364.302237][T22023] FAT-fs (loop3): Directory bread(block 69) failed [ 364.309375][T22023] FAT-fs (loop3): Directory bread(block 70) failed [ 364.317229][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.361908][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.363248][T22023] FAT-fs (loop3): Directory bread(block 71) failed [ 364.402881][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.419030][T22023] FAT-fs (loop3): Directory bread(block 72) failed [ 364.419149][ C0] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 364.432052][T22023] FAT-fs (loop3): Directory bread(block 73) failed [ 364.437589][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.462316][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.483356][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.503462][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.525677][ T5888] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 364.543360][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.563376][ T5888] usb 3-1: Product: syz [ 364.567890][ T5888] usb 3-1: Manufacturer: syz [ 364.578303][ T5888] usb 3-1: SerialNumber: syz [ 364.594690][ T5888] r8152-cfgselector 3-1: config 0 descriptor?? [ 364.659104][ T23] usb 1-1: USB disconnect, device number 19 [ 364.672001][ T23] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 364.864592][ T5888] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 364.959105][T22063] loop1: detected capacity change from 0 to 256 [ 365.010206][T22063] FAT-fs (loop1): Directory bread(block 64) failed [ 365.018445][T22063] FAT-fs (loop1): Directory bread(block 65) failed [ 365.025570][T22063] FAT-fs (loop1): Directory bread(block 66) failed [ 365.037101][T22063] FAT-fs (loop1): Directory bread(block 67) failed [ 365.053450][T22063] FAT-fs (loop1): Directory bread(block 68) failed [ 365.064461][T22063] FAT-fs (loop1): Directory bread(block 69) failed [ 365.093284][T22063] FAT-fs (loop1): Directory bread(block 70) failed [ 365.099978][T22063] FAT-fs (loop1): Directory bread(block 71) failed [ 365.109168][T22063] FAT-fs (loop1): Directory bread(block 72) failed [ 365.136352][T22063] FAT-fs (loop1): Directory bread(block 73) failed [ 365.144043][ T5888] usb 3-1: USB disconnect, device number 26 [ 366.663789][ T42] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 366.722975][T22161] loop3: detected capacity change from 0 to 256 [ 366.869854][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 366.889096][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 366.916830][ T42] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 366.943191][ T42] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 366.962733][ T42] usb 3-1: Product: syz [ 366.971939][ T42] usb 3-1: Manufacturer: syz [ 366.989878][ T42] usb 3-1: SerialNumber: syz [ 367.028877][T22150] loop0: detected capacity change from 0 to 32768 [ 367.097400][T22150] JBD2: Ignoring recovery information on journal [ 367.124431][T22156] loop1: detected capacity change from 0 to 32768 [ 367.149548][T22156] [ 367.149548][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.149548][T22156] [ 367.192458][T22156] [ 367.192458][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.192458][T22156] [ 367.213986][T22156] [ 367.213986][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.213986][T22156] [ 367.236538][ T42] usb 3-1: Invalid connection information received from device [ 367.239760][T22156] [ 367.239760][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.239760][T22156] [ 367.278509][T22150] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 367.287193][T22156] [ 367.287193][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.287193][T22156] [ 367.338576][T22156] [ 367.338576][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.338576][T22156] [ 367.351725][T22156] [ 367.351725][T22156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.351725][T22156] [ 367.398939][ T112] [ 367.398939][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.398939][ T112] [ 367.439126][ T5809] usb 3-1: USB disconnect, device number 27 [ 367.503761][ T5768] [ 367.503761][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.503761][ T5768] [ 367.506358][ T5773] ocfs2: Unmounting device (7,0) on (node local) [ 367.520836][ T5768] [ 367.520836][ T5768] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 367.520836][ T5768] [ 368.046382][T22214] loop0: detected capacity change from 0 to 512 [ 368.112812][T22221] netlink: 'syz.3.4377': attribute type 3 has an invalid length. [ 368.291341][T22229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4379'. [ 368.711780][T22262] loop3: detected capacity change from 0 to 8 [ 368.795046][T22262] SQUASHFS error: lzo decompression failed, data probably corrupt [ 368.803979][ T5808] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 368.839141][T22262] SQUASHFS error: Failed to read block 0x144: -5 [ 368.851143][T22262] SQUASHFS error: Unable to read metadata cache entry [142] [ 368.873700][T22262] SQUASHFS error: Unable to read directory block [142:26] [ 369.003099][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 369.024098][ T5808] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 369.043104][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.064205][ T5808] usb 3-1: Product: syz [ 369.068598][ T5808] usb 3-1: Manufacturer: syz [ 369.103317][ T5808] usb 3-1: SerialNumber: syz [ 369.120642][ T5808] usb 3-1: config 0 descriptor?? [ 369.139590][T22287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4396'. [ 369.173461][ T5808] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 369.182851][ T5808] usb 3-1: Detected FT4233HP [ 369.219346][T22295] delete_channel: no stack [ 369.592032][ T5808] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 369.614149][ T5808] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 369.664852][ T5808] usb 3-1: USB disconnect, device number 28 [ 369.684062][ T5808] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 369.712197][ T5808] ftdi_sio 3-1:0.0: device disconnected [ 369.761772][T22316] loop1: detected capacity change from 0 to 8192 [ 370.046785][T22353] netlink: 'syz.0.4412': attribute type 2 has an invalid length. [ 371.533324][ T42] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 371.742782][T22430] loop2: detected capacity change from 0 to 32768 [ 371.743289][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 371.757438][T22430] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.4437 (22430) [ 371.771436][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.796243][T22430] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 371.797177][ T42] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 371.819193][T22430] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 371.846862][ T42] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 371.856262][T22430] BTRFS info (device loop2): force zlib compression, level 3 [ 371.879039][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.894263][T22430] BTRFS info (device loop2): force clearing of disk cache [ 371.902694][ T42] usb 2-1: Product: syz [ 371.912807][ T42] usb 2-1: Manufacturer: syz [ 371.916475][T22430] BTRFS info (device loop2): setting nodatasum [ 371.930502][T22430] BTRFS info (device loop2): allowing degraded mounts [ 371.932084][ T42] usb 2-1: SerialNumber: syz [ 371.938981][T22430] BTRFS info (device loop2): enabling disk space caching [ 371.960429][ T42] usb 2-1: config 0 descriptor?? [ 371.974517][T22430] BTRFS info (device loop2): disk space caching is enabled [ 372.086573][T22430] BTRFS info (device loop2): auto enabling async discard [ 372.135849][T22430] BTRFS info (device loop2): rebuilding free space tree [ 372.208751][T22430] BTRFS info (device loop2): disabling free space tree [ 372.233385][T22430] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 372.269684][T22430] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 372.376677][T22497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.541760][ T5778] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 372.547031][ T42] usb 2-1: USB disconnect, device number 31 [ 372.844504][ T5808] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 373.036064][T22492] loop0: detected capacity change from 0 to 32768 [ 373.048495][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 373.074296][ T5808] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 373.111336][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.174951][ T5808] usb 4-1: Product: syz [ 373.179191][ T5808] usb 4-1: Manufacturer: syz [ 373.190553][T22492] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.199471][ T5808] usb 4-1: SerialNumber: syz [ 373.222252][ T5808] usb 4-1: config 0 descriptor?? [ 373.354830][T22492] XFS (loop0): Ending clean mount [ 373.378176][T22492] XFS (loop0): Quotacheck needed: Please wait. [ 373.481449][ T5808] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 373.489903][T22492] XFS (loop0): Quotacheck: Done. [ 373.500091][ T5808] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 373.680654][ T5773] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.745480][ T5809] usb 4-1: USB disconnect, device number 25 [ 374.492192][T22604] netlink: 'syz.3.4476': attribute type 39 has an invalid length. [ 375.053139][ T42] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 375.253244][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 375.276986][ T42] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 375.295775][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.322376][ T42] usb 1-1: config 0 has no interface number 0 [ 375.336444][ T42] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 375.358201][ T42] usb 1-1: config 0 interface 223 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 375.383131][ T42] usb 1-1: config 0 interface 223 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.411798][ T42] usb 1-1: config 0 interface 223 has no altsetting 0 [ 375.451529][T22671] netlink: 'syz.1.4494': attribute type 39 has an invalid length. [ 375.453863][ T42] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 375.483136][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.497076][ T42] usb 1-1: Product: syz [ 375.501301][ T42] usb 1-1: Manufacturer: syz [ 375.522670][ T42] usb 1-1: SerialNumber: syz [ 375.570552][ T42] usb 1-1: config 0 descriptor?? [ 375.972899][T22701] loop1: detected capacity change from 0 to 1024 [ 375.989544][T22701] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 376.066282][T22701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 376.090273][ T42] usb 1-1: USB disconnect, device number 20 [ 376.130521][T22701] System zones: 0-1, 3-36 [ 376.155573][T22701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.334256][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.477534][T22740] loop2: detected capacity change from 0 to 64 [ 376.552869][T22740] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 376.822675][T22757] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 377.053305][T22776] loop2: detected capacity change from 0 to 256 [ 377.136211][T22776] FAT-fs (loop2): Directory bread(block 64) failed [ 377.145625][ T5888] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 377.178617][T22776] FAT-fs (loop2): Directory bread(block 65) failed [ 377.188800][T22776] FAT-fs (loop2): Directory bread(block 66) failed [ 377.197132][T22776] FAT-fs (loop2): Directory bread(block 67) failed [ 377.204407][T22776] FAT-fs (loop2): Directory bread(block 68) failed [ 377.211375][T22776] FAT-fs (loop2): Directory bread(block 69) failed [ 377.231728][T22776] FAT-fs (loop2): Directory bread(block 70) failed [ 377.250404][T22776] FAT-fs (loop2): Directory bread(block 71) failed [ 377.260668][T22776] FAT-fs (loop2): Directory bread(block 72) failed [ 377.274396][T22776] FAT-fs (loop2): Directory bread(block 73) failed [ 377.368919][ T5888] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 377.393345][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.425741][ T5888] usb 4-1: config 0 has no interface number 0 [ 377.451982][ T5888] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 377.476689][ T5888] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 377.504835][ T5888] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.561043][ T5888] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 377.585473][T22797] netlink: 'syz.0.4526': attribute type 39 has an invalid length. [ 377.593691][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 377.598157][T22801] netlink: zone id is out of range [ 377.617165][T22801] netlink: zone id is out of range [ 377.617355][ T5888] usb 4-1: SerialNumber: syz [ 377.622309][T22801] netlink: zone id is out of range [ 377.622319][T22801] netlink: zone id is out of range [ 377.643848][T22801] netlink: zone id is out of range [ 377.675176][ T5888] usb 4-1: config 0 descriptor?? [ 377.696511][T22801] netlink: zone id is out of range [ 377.701703][T22801] netlink: zone id is out of range [ 377.702226][ T5888] gspca_main: spca561-2.14.0 probing abcd:cdee [ 377.709069][T22801] netlink: zone id is out of range [ 377.719984][T22801] netlink: zone id is out of range [ 377.756441][T22801] netlink: zone id is out of range [ 377.911401][ T5888] spca561: probe of 4-1:0.156 failed with error -22 [ 377.934430][ T5888] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 377.961945][ T5888] usb 4-1: MIDIStreaming interface descriptor not found [ 378.085472][T22836] loop0: detected capacity change from 0 to 256 [ 378.094171][ T5888] usb 4-1: USB disconnect, device number 26 [ 378.110156][T22833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4531'. [ 378.133951][T22836] exfat: Deprecated parameter 'namecase' [ 378.200877][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.201126][T22849] loop2: detected capacity change from 0 to 64 [ 378.247055][T22836] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 378.330156][T22836] exFAT-fs (loop0): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 378.727019][T22877] tmpfs: Bad value for 'mpol' [ 378.742997][T22879] loop0: detected capacity change from 0 to 512 [ 378.780733][T22879] EXT4-fs: Ignoring removed bh option [ 378.824790][T22879] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.874073][T22879] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 378.916574][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.922972][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.930188][T22879] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 379.014331][T22879] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 379.022577][T22879] System zones: 0-2, 18-18, 34-35 [ 379.038185][T22879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.108937][T22879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.4540: bg 0: block 353: padding at end of block bitmap is not set [ 379.126911][T22719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 379.330624][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.450488][T22864] loop1: detected capacity change from 0 to 32768 [ 379.714969][T22864] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 379.822567][T22864] XFS (loop1): Ending clean mount [ 379.987419][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 380.214161][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4558'. [ 380.417410][T22958] netlink: 174 bytes leftover after parsing attributes in process `syz.2.4560'. [ 380.525965][T22963] netlink: 'syz.1.4556': attribute type 2 has an invalid length. [ 380.552291][T22963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4556'. [ 380.654500][T22971] netlink: 'syz.2.4565': attribute type 3 has an invalid length. [ 380.723900][T22977] tmpfs: User quota block hardlimit too large. [ 380.758506][T22979] loop1: detected capacity change from 0 to 1764 [ 380.874747][T22979] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 381.534046][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4578'. [ 381.659904][T23024] loop1: detected capacity change from 0 to 2048 [ 381.738519][T23024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.795138][T23024] ext4 filesystem being mounted at /1081/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.934973][T23024] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4581: bg 0: block 345: padding at end of block bitmap is not set [ 381.987011][T23024] EXT4-fs (loop1): Remounting filesystem read-only [ 382.090329][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.293228][ T5809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 382.456105][T23081] autofs4:pid:23081:autofs_fill_super: called with bogus options [ 382.523065][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 382.536268][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.568977][ T5809] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 382.588871][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.609105][ T5809] usb 1-1: Product: syz [ 382.623206][ T5809] usb 1-1: Manufacturer: syz [ 382.639736][ T5809] usb 1-1: SerialNumber: syz [ 382.654195][ T5809] usb 1-1: config 0 descriptor?? [ 382.763702][T23096] sock: sock_timestamping_bind_phc: sock not bind to device [ 382.893930][ T5809] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 382.997617][T23078] loop2: detected capacity change from 0 to 32768 [ 383.004127][ T5809] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 383.059070][T23078] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.102839][ T27] audit: type=1326 audit(2000000249.630:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23119 comm="syz.3.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 383.133281][ T1314] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 383.160792][ T23] usb 1-1: USB disconnect, device number 21 [ 383.209231][ T27] audit: type=1326 audit(2000000249.630:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23119 comm="syz.3.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 383.221047][T23078] XFS (loop2): Ending clean mount [ 383.277364][T23078] XFS (loop2): Quotacheck needed: Please wait. [ 383.280782][ T27] audit: type=1326 audit(2000000249.630:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23119 comm="syz.3.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 383.325122][T23132] loop1: detected capacity change from 0 to 64 [ 383.354238][ T27] audit: type=1326 audit(2000000249.630:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23119 comm="syz.3.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 383.400826][T23078] XFS (loop2): Quotacheck: Done. [ 383.417054][ T27] audit: type=1326 audit(2000000249.630:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23119 comm="syz.3.4608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 383.651021][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.943600][ T5888] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 383.951502][T23158] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4620'. [ 384.108375][T23165] loop3: detected capacity change from 0 to 128 [ 384.177780][T23174] loop2: detected capacity change from 0 to 256 [ 384.183662][ T1314] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.192826][T23165] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 384.236415][ T1314] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.389503][ T5771] sysv_free_block: flc_count > flc_size [ 384.403334][ T5809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 384.420397][ T5771] sysv_free_block: flc_count > flc_size [ 384.429673][ T5771] sysv_free_block: flc_count > flc_size [ 384.437268][ T5771] sysv_free_block: flc_count > flc_size [ 384.442903][ T5771] sysv_free_block: flc_count > flc_size [ 384.443541][ T23] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 384.449799][ T5771] sysv_free_block: flc_count > flc_size [ 384.463705][ T5771] sysv_free_block: flc_count > flc_size [ 384.469286][ T5771] sysv_free_block: flc_count > flc_size [ 384.483282][ T5771] sysv_free_block: flc_count > flc_size [ 384.493871][ T5771] sysv_free_block: flc_count > flc_size [ 384.506098][ T5771] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 384.613321][ T5809] usb 1-1: Using ep0 maxpacket: 8 [ 384.624278][ T5809] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 384.649547][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.668531][ T5809] usb 1-1: Product: syz [ 384.672767][ T5809] usb 1-1: Manufacturer: syz [ 384.680452][ T5809] usb 1-1: SerialNumber: syz [ 384.699220][ T5809] usb 1-1: config 0 descriptor?? [ 384.712359][ T5809] gspca_main: sq930x-2.14.0 probing 2770:930c [ 384.735233][T23189] gretap0: left promiscuous mode [ 384.799700][T23189] hsr0: left promiscuous mode [ 384.832289][T23189] macvlan0: left allmulticast mode [ 384.839256][T23189] veth1_vlan: left allmulticast mode [ 384.876378][T23189] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 384.940826][T23189] bond1: left allmulticast mode [ 384.961696][T23189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.035265][ T5888] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 385.121964][ T5809] gspca_sq930x: ucbus_write failed -71 [ 385.135929][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4630'. [ 385.181164][T23202] netlink: 540 bytes leftover after parsing attributes in process `syz.1.4630'. [ 385.384184][ T5809] gspca_sq930x: Sensor ov9630 not yet treated [ 385.403905][ T5809] sq930x: probe of 1-1:0.0 failed with error -22 [ 385.437266][ T5809] usb 1-1: USB disconnect, device number 22 [ 385.591797][ T5888] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 385.612758][T23236] overlayfs: overlapping lowerdir path [ 385.814125][T23245] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4641'. [ 386.001776][ T27] audit: type=1326 audit(2000000252.530:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23263 comm="syz.2.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 386.024706][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.061672][ T27] audit: type=1326 audit(2000000252.530:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23263 comm="syz.2.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 386.097118][T23267] netlink: 'syz.1.4646': attribute type 2 has an invalid length. [ 386.119966][ T27] audit: type=1326 audit(2000000252.570:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23263 comm="syz.2.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 386.193126][ T27] audit: type=1326 audit(2000000252.570:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23263 comm="syz.2.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 386.259720][ T27] audit: type=1326 audit(2000000252.570:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23263 comm="syz.2.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 386.353242][T23284] netlink: 'syz.2.4652': attribute type 3 has an invalid length. [ 386.737254][T23302] bridge_slave_0: left allmulticast mode [ 386.758122][T23302] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.813571][T23308] netlink: 'syz.2.4658': attribute type 9 has an invalid length. [ 386.821459][T23308] netlink: 911 bytes leftover after parsing attributes in process `syz.2.4658'. [ 387.027344][T23315] net_ratelimit: 335 callbacks suppressed [ 387.027361][T23315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.050444][T23319] sctp: [Deprecated]: syz.1.4664 (pid 23319) Use of int in maxseg socket option. [ 387.050444][T23319] Use struct sctp_assoc_value instead [ 387.168944][T23323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4665'. [ 387.334650][T23332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4668'. [ 387.462647][T23299] loop3: detected capacity change from 0 to 32768 [ 387.551882][T23299] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.686904][T23299] XFS (loop3): Ending clean mount [ 387.697565][T23299] XFS (loop3): Quotacheck needed: Please wait. [ 387.774910][T23364] loop2: detected capacity change from 0 to 256 [ 387.788024][T23364] exfat: Deprecated parameter 'utf8' [ 387.810951][T23364] exfat: Deprecated parameter 'namecase' [ 387.828328][T23299] XFS (loop3): Quotacheck: Done. [ 387.900072][T23364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 387.943567][ T5771] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 387.977372][T23371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4677'. [ 387.986626][T23371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4677'. [ 388.563756][T23405] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 388.572836][T23405] overlayfs: missing 'lowerdir' [ 388.663222][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 388.834692][T23426] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 388.835555][T23428] loop0: detected capacity change from 0 to 256 [ 388.892627][T23428] exfat: Deprecated parameter 'utf8' [ 388.919927][T23428] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 389.013217][ T5808] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 389.130348][T23444] usb usb8: usbfs: process 23444 (syz.3.4697) did not claim interface 0 before use [ 389.236138][T23450] loop1: detected capacity change from 0 to 128 [ 389.261809][ T5808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.274515][ T5808] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 389.293889][ T5808] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=2a.7a [ 389.304572][ T5809] kernel write not supported for file /dsp (pid: 5809 comm: kworker/0:4) [ 389.304786][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.348403][ T5808] usb 3-1: Product: syz [ 389.353706][ T5808] usb 3-1: Manufacturer: 濦턁닫鼮㴩횠茶瞤歜ง๡䳲敯𿌼 [ 389.363915][ T5808] usb 3-1: SerialNumber: syz [ 389.371229][T23450] syz.1.4698: attempt to access beyond end of device [ 389.371229][T23450] loop1: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 389.400567][T23450] Buffer I/O error on dev loop1, logical block 12837, async page read [ 389.450197][T23450] Trying to free block not in datazone [ 389.597334][T23467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.622989][ T5808] usb 3-1: USB disconnect, device number 29 [ 390.082576][T23496] loop0: detected capacity change from 0 to 4096 [ 390.158393][T23496] ntfs3: loop0: MFT: r=b, expect seq=b instead of 1ff! [ 390.175623][T23496] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 390.194983][T23496] ntfs3: loop0: Failed to load $Extend (-22). [ 390.204901][T23496] ntfs3: loop0: Failed to initialize $Extend. [ 390.221596][T23509] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4714'. [ 390.324175][ T5809] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 390.530399][ T5809] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 390.569739][ T5809] usb 2-1: config 0 has no interface number 0 [ 390.577497][ T5809] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 390.612732][ T5809] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 390.623991][ T5809] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 390.635176][ T5809] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 390.650239][T23534] netlink: 460 bytes leftover after parsing attributes in process `syz.0.4720'. [ 390.673887][ T5809] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 390.692765][ T5809] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 390.713877][ T5809] usb 2-1: Product: syz [ 390.718118][ T5809] usb 2-1: Manufacturer: syz [ 390.722726][ T5809] usb 2-1: SerialNumber: syz [ 390.761362][ T5809] usb 2-1: config 0 descriptor?? [ 390.820918][ T5809] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 391.071795][ T5809] usb 2-1: USB disconnect, device number 32 [ 391.870476][T23592] misc userio: No port type given on /dev/userio [ 392.030536][T23601] loop1: detected capacity change from 0 to 764 [ 392.313356][ T5809] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 392.513146][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 392.530966][ T5809] usb 1-1: config index 0 descriptor too short (expected 1068, got 27) [ 392.542452][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 392.566904][ T5809] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 392.581093][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.590015][ T5809] usb 1-1: Product: syz [ 392.594304][ T5809] usb 1-1: Manufacturer: syz [ 392.599019][ T5809] usb 1-1: SerialNumber: syz [ 392.620133][ T5809] usb 1-1: config 0 descriptor?? [ 392.846264][T23652] loop1: detected capacity change from 0 to 256 [ 392.927715][ T5808] usb 1-1: USB disconnect, device number 23 [ 392.929090][T23652] FAT-fs (loop1): Directory bread(block 64) failed [ 392.962508][T23652] FAT-fs (loop1): Directory bread(block 65) failed [ 392.975125][T23652] FAT-fs (loop1): Directory bread(block 66) failed [ 392.981712][T23652] FAT-fs (loop1): Directory bread(block 67) failed [ 392.998994][T23652] FAT-fs (loop1): Directory bread(block 68) failed [ 393.023364][T23652] FAT-fs (loop1): Directory bread(block 69) failed [ 393.040335][T23652] FAT-fs (loop1): Directory bread(block 70) failed [ 393.048572][T23652] FAT-fs (loop1): Directory bread(block 71) failed [ 393.069009][T23652] FAT-fs (loop1): Directory bread(block 72) failed [ 393.084292][T23652] FAT-fs (loop1): Directory bread(block 73) failed [ 393.302287][T23679] loop3: detected capacity change from 0 to 512 [ 393.319329][T23679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 393.367197][T23679] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.4764: inode has both inline data and extents flags [ 393.391625][T23679] EXT4-fs (loop3): Remounting filesystem read-only [ 393.402324][T23679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.447090][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.353357][ T42] IPVS: starting estimator thread 0... [ 394.373233][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 394.473757][T23754] IPVS: using max 20 ests per chain, 48000 per kthread [ 394.594521][ T23] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 394.623189][ T23] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 394.638462][ T23] usb 1-1: Product: syz [ 394.645654][ T23] usb 1-1: SerialNumber: syz [ 394.663397][ T23] usb 1-1: config 0 descriptor?? [ 394.912386][ T23] hso 1-1:0.0: Failed to find BULK IN ep [ 395.158064][ T23] usb 1-1: USB disconnect, device number 24 [ 395.185574][T23807] loop2: detected capacity change from 0 to 256 [ 395.221545][T23807] FAT-fs (loop2): Directory bread(block 64) failed [ 395.246675][T23807] FAT-fs (loop2): Directory bread(block 65) failed [ 395.256890][T23807] FAT-fs (loop2): Directory bread(block 66) failed [ 395.276862][T23807] FAT-fs (loop2): Directory bread(block 67) failed [ 395.285379][T23807] FAT-fs (loop2): Directory bread(block 68) failed [ 395.292571][T23807] FAT-fs (loop2): Directory bread(block 69) failed [ 395.300151][T23807] FAT-fs (loop2): Directory bread(block 70) failed [ 395.307371][T23807] FAT-fs (loop2): Directory bread(block 71) failed [ 395.314720][T23807] FAT-fs (loop2): Directory bread(block 72) failed [ 395.344130][T23807] FAT-fs (loop2): Directory bread(block 73) failed [ 395.612965][T23835] loop1: detected capacity change from 0 to 256 [ 395.639597][T23835] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 395.689430][T23828] loop3: detected capacity change from 0 to 4096 [ 395.735597][T23828] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 395.818188][ T3448] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 396.065458][T23856] ip6t_srh: unknown srh match flags 4000 [ 396.432284][T23883] loop2: detected capacity change from 0 to 16 [ 396.463424][T23883] erofs: (device loop2): mounted with root inode @ nid 36. [ 396.503719][T23883] overlay: filesystem on ./file0 is read-only [ 396.613263][ T5888] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 396.829842][ T5888] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.849627][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.879921][ T5888] usb 4-1: Product: syz [ 396.885072][ T5888] usb 4-1: Manufacturer: syz [ 396.889962][ T5888] usb 4-1: SerialNumber: syz [ 396.926822][ T5888] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.947891][ T5809] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.132922][T23927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.169351][T23927] batadv_slave_0: entered promiscuous mode [ 397.211129][T23927] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 397.252348][T23932] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 397.437491][T23943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4837'. [ 397.463675][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 397.481614][ T42] usb 4-1: USB disconnect, device number 27 [ 397.730444][T23963] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 397.965912][T23981] loop2: detected capacity change from 0 to 256 [ 398.033158][ T5809] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 398.065780][ T5809] ath9k_htc: Failed to initialize the device [ 398.076154][ T42] usb 4-1: ath9k_htc: USB layer deinitialized [ 398.239215][ T8] IPVS: starting estimator thread 0... [ 398.353295][T24000] IPVS: using max 24 ests per chain, 57600 per kthread [ 398.361767][ T27] audit: type=1326 audit(2000000264.890:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24007 comm="syz.0.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 398.387329][ T27] audit: type=1326 audit(2000000264.890:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24007 comm="syz.0.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 398.428917][ T27] audit: type=1326 audit(2000000264.890:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24007 comm="syz.0.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 398.504209][ T27] audit: type=1326 audit(2000000264.890:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24007 comm="syz.0.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 398.589636][ T27] audit: type=1326 audit(2000000264.890:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24007 comm="syz.0.4857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 398.618241][ T27] audit: type=1326 audit(2000000264.920:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24005 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 398.653420][ T27] audit: type=1326 audit(2000000264.920:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24005 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 398.723221][ T27] audit: type=1326 audit(2000000264.920:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24005 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 398.795192][ T27] audit: type=1326 audit(2000000264.920:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24005 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 398.864664][ T27] audit: type=1326 audit(2000000264.920:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24005 comm="syz.3.4855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f778079c799 code=0x7ffc0000 [ 399.163343][ T5809] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 399.213883][T24048] loop3: detected capacity change from 0 to 256 [ 399.283807][T24048] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 399.292758][T24048] FAT-fs (loop3): Filesystem has been set read-only [ 399.322471][T24048] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 399.353286][T24048] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 399.384309][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 399.391253][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.405680][ T5809] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 399.428160][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.448858][ T5809] usb 2-1: Product: syz [ 399.459114][ T5809] usb 2-1: Manufacturer: syz [ 399.473342][ T5809] usb 2-1: SerialNumber: syz [ 399.480984][T24024] loop0: detected capacity change from 0 to 40427 [ 399.494580][ T5809] usb 2-1: config 0 descriptor?? [ 399.506617][ T5809] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 399.512911][ T5809] gspca_stv06xx: st6422 sensor detected [ 399.527073][T24024] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 399.545654][T24024] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 399.558598][T24024] F2FS-fs (loop0): build fault injection attr: rate: 2, type: 0x7ffff [ 399.569090][T24024] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8 [ 399.593510][T24024] F2FS-fs (loop0): invalid crc value [ 399.642038][T24024] F2FS-fs (loop0): Found nat_bits in checkpoint [ 399.806183][T24024] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 399.829214][T24024] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 399.914470][T24024] F2FS-fs (loop0): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 400.030047][ T5809] STV06xx: probe of 2-1:0.0 failed with error -71 [ 400.057499][ T5809] usb 2-1: USB disconnect, device number 33 [ 400.157773][T24088] loop3: detected capacity change from 0 to 512 [ 400.217284][T24088] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 400.258946][T24088] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 400.286423][T24071] loop2: detected capacity change from 0 to 32768 [ 400.293192][T24088] System zones: 0-1, 15-15, 18-18, 34-34 [ 400.302912][T24088] EXT4-fs (loop3): orphan cleanup on readonly fs [ 400.330625][T24088] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 400.353774][T24071] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.369948][T24088] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 400.396087][T24088] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.4876: bad orphan inode 16 [ 400.406876][T24088] ext4_test_bit(bit=15, block=18) = 1 [ 400.412572][T24088] is_bad_inode(inode)=0 [ 400.423999][T24088] NEXT_ORPHAN(inode)=0 [ 400.428298][T24088] max_ino=32 [ 400.431735][T24088] i_nlink=2 [ 400.439111][T24088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 400.468630][T24088] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 400.509273][T24071] XFS (loop2): Ending clean mount [ 400.530244][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.539565][T24071] XFS (loop2): Quotacheck needed: Please wait. [ 400.580648][T24107] netlink: 'syz.0.4877': attribute type 3 has an invalid length. [ 400.680920][T24071] XFS (loop2): Quotacheck: Done. [ 400.954854][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.041475][T24131] loop3: detected capacity change from 0 to 764 [ 401.102929][T24131] 9pnet_fd: p9_fd_create_unix (24131): problem connecting socket: ./file0: -30 [ 401.717273][T24169] ieee802154 phy0 wpan0: encryption failed: -90 [ 402.339135][T24196] bond2: entered allmulticast mode [ 402.380223][T24196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.471570][T24178] loop1: detected capacity change from 0 to 32768 [ 402.597756][T24178] ea_get: invalid extended attribute [ 402.834877][T24256] loop1: detected capacity change from 0 to 256 [ 403.214982][T24269] loop2: detected capacity change from 0 to 8192 [ 403.256039][T24269] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 403.313257][T24269] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 403.322527][T24269] REISERFS (device loop2): using ordered data mode [ 403.379640][T24269] reiserfs: using flush barriers [ 403.431408][T24269] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 403.468466][T24303] loop3: detected capacity change from 0 to 256 [ 403.484892][T24269] REISERFS (device loop2): checking transaction log (loop2) [ 403.613251][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 403.621315][ T5809] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 403.695259][T24269] REISERFS (device loop2): Using tea hash to sort names [ 403.702715][T24269] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 403.823276][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 403.830730][ T5809] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 403.863796][ T5809] usb 2-1: config 0 has no interface number 0 [ 403.869995][ T5809] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 403.892567][ T8] usb 1-1: config 0 has an invalid interface number: 99 but max is 0 [ 403.916345][ T8] usb 1-1: config 0 has no interface number 0 [ 403.922608][ T8] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 403.939471][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.954932][ T8] usb 1-1: config 0 descriptor?? [ 403.963680][ T8] usb-storage 1-1:0.99: USB Mass Storage device detected [ 403.980819][ T5809] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 403.990315][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.999234][ T5809] usb 2-1: Product: syz [ 404.006408][ T8] usb-storage 1-1:0.99: device ignored [ 404.014626][ T5809] usb 2-1: Manufacturer: syz [ 404.019288][ T5809] usb 2-1: SerialNumber: syz [ 404.034611][ T5809] usb 2-1: config 0 descriptor?? [ 404.040427][T24289] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 404.133988][ T5809] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, da:fc:54:66:9e:14 [ 404.175757][ T42] usb 1-1: USB disconnect, device number 25 [ 404.219780][T24334] netlink: 'syz.2.4923': attribute type 10 has an invalid length. [ 404.300842][T24310] loop3: detected capacity change from 0 to 32768 [ 404.307981][T24334] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 404.317769][T24310] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.4922 (24310) [ 404.364288][T24310] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 404.383675][T24310] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 404.405336][T24310] BTRFS info (device loop3): turning off barriers [ 404.412608][T24310] BTRFS info (device loop3): enabling ssd optimizations [ 404.425253][T24310] BTRFS info (device loop3): using spread ssd allocation scheme [ 404.454299][T24310] BTRFS info (device loop3): enabling auto defrag [ 404.461069][T24310] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 404.513490][T24310] BTRFS info (device loop3): trying to use backup root at mount time [ 404.524880][T24310] BTRFS info (device loop3): ignoring data csums [ 404.531732][T24310] BTRFS info (device loop3): force zlib compression, level 3 [ 404.540169][T24310] BTRFS info (device loop3): using free space tree [ 404.843397][T24310] BTRFS error (device loop3: state MC): ignoredatacsums must be used with ro mount option [ 404.965102][ T5771] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 405.567011][T24390] loop0: detected capacity change from 0 to 8192 [ 405.607319][T24390] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 405.642488][T24398] loop3: detected capacity change from 0 to 1024 [ 405.670292][T24390] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 405.715514][T24390] REISERFS (device loop0): using ordered data mode [ 405.722201][T24390] reiserfs: using flush barriers [ 405.772973][T24390] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 405.825627][T24398] __quota_error: 5 callbacks suppressed [ 405.825645][T24398] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 405.838793][T24390] REISERFS (device loop0): checking transaction log (loop0) [ 405.894830][T24398] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 405.953154][T24398] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.4928: Failed to acquire dquot type 0 [ 405.989416][ T5809] usb 2-1: USB disconnect, device number 34 [ 406.014575][ T5809] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 406.019575][T24398] EXT4-fs error (device loop3): mb_free_blocks:1952: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 406.056502][T24424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4935'. [ 406.077403][T24398] EXT4-fs (loop3): 1 truncate cleaned up [ 406.095939][T24398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.140785][T24398] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.177474][T24390] REISERFS (device loop0): Using tea hash to sort names [ 406.198790][T24390] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 406.627135][T24456] IPv6: sit1: Disabled Multicast RS [ 406.642867][T24456] sit1: entered allmulticast mode [ 406.916401][T24476] loop3: detected capacity change from 0 to 64 [ 407.136944][T24491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4945'. [ 407.167452][T24491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4945'. [ 407.278382][T24498] loop2: detected capacity change from 0 to 256 [ 407.347157][T24498] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 407.602001][T24504] loop1: detected capacity change from 0 to 8192 [ 407.643477][T24504] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 407.656864][T24504] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 407.666389][T24504] REISERFS (device loop1): using ordered data mode [ 407.673610][T24504] reiserfs: using flush barriers [ 407.683310][T24504] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 407.701214][T24504] REISERFS (device loop1): checking transaction log (loop1) [ 407.829245][T24504] REISERFS (device loop1): Using tea hash to sort names [ 407.853264][T24504] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 408.461511][T24507] loop0: detected capacity change from 0 to 32768 [ 408.502529][T24507] ERROR: (device loop0): diAllocAG: numfree > numinos [ 408.502529][T24507] [ 408.558687][T24507] ERROR: (device loop0): remounting filesystem as read-only [ 408.593627][T24507] ialloc: diAlloc returned -5! [ 409.208054][ T27] audit: type=1326 audit(2000000275.730:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.2.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 409.281798][ T27] audit: type=1326 audit(2000000275.730:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.2.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 409.304367][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.359128][ T27] audit: type=1326 audit(2000000275.740:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.2.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 409.414653][ T27] audit: type=1326 audit(2000000275.740:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.2.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 409.437298][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.490324][ T27] audit: type=1326 audit(2000000275.740:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24585 comm="syz.2.4966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8499c799 code=0x7ffc0000 [ 409.533352][ T42] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 409.739158][ T42] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 409.759087][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.779279][ T42] usb 4-1: Product: syz [ 409.788229][ T42] usb 4-1: Manufacturer: syz [ 409.792919][ T42] usb 4-1: SerialNumber: syz [ 409.818404][ T42] usb 4-1: config 0 descriptor?? [ 409.840151][ T42] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 410.080192][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4976'. [ 410.260116][ T42] gspca_sunplus: reg_w_riv err -71 [ 410.284471][ T42] sunplus: probe of 4-1:0.0 failed with error -71 [ 410.326526][ T42] usb 4-1: USB disconnect, device number 28 [ 410.987046][T24691] loop1: detected capacity change from 0 to 512 [ 411.024138][T24691] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.076674][T24691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 411.110468][T24691] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 411.138807][T24703] x_tables: unsorted underflow at hook 2 [ 411.155755][T24691] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 411.193310][T24691] EXT4-fs (loop1): orphan cleanup on readonly fs [ 411.241546][T24691] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 411.328418][T24691] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 411.381583][T24691] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.4990: Failed to acquire dquot type 1 [ 411.396347][T24716] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4995'. [ 411.407757][T24691] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.4990: Invalid block bitmap block 0 in block_group 0 [ 411.474949][T24691] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.4990: Invalid block bitmap block 0 in block_group 0 [ 411.489132][T24691] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.4990: Invalid block bitmap block 0 in block_group 0 [ 411.529218][T24691] Quota error (device loop1): write_blk: dquota write failed [ 411.565129][T24691] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 411.600819][T24691] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.4990: Failed to acquire dquot type 1 [ 411.607276][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4998'. [ 411.624722][T24725] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4998'. [ 411.647102][T24691] Quota error (device loop1): write_blk: dquota write failed [ 411.681855][T24691] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 411.708197][T24691] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.4990: Failed to acquire dquot type 1 [ 411.760626][T24691] EXT4-fs (loop1): 1 orphan inode deleted [ 411.784910][T24691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.832883][T24739] loop3: detected capacity change from 0 to 128 [ 411.861348][T24739] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 411.952621][T24739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.974777][T24691] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.4990: deleted inode referenced: 12 [ 412.155662][T24754] loop0: detected capacity change from 0 to 736 [ 412.173275][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.823619][ T5809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.837672][ T5888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.041135][T24767] loop1: detected capacity change from 0 to 32768 [ 413.130046][T24767] read_mapping_page failed! [ 413.138196][T24767] ERROR: (device loop1): txCommit: [ 413.138196][T24767] [ 413.273232][ T1314] read_mapping_page failed! [ 413.286783][ T1314] ERROR: (device loop1): txCommit: [ 413.286783][ T1314] [ 413.311409][ T1314] jfs_write_inode: jfs_commit_inode failed! [ 413.693091][T24825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5027'. [ 413.854201][T24833] loop1: detected capacity change from 0 to 256 [ 413.909180][T24833] FAT-fs (loop1): Directory bread(block 64) failed [ 413.925264][T24833] FAT-fs (loop1): Directory bread(block 65) failed [ 413.950219][T24833] FAT-fs (loop1): Directory bread(block 66) failed [ 413.968517][T24833] FAT-fs (loop1): Directory bread(block 67) failed [ 413.983388][T24833] FAT-fs (loop1): Directory bread(block 68) failed [ 413.989983][T24833] FAT-fs (loop1): Directory bread(block 69) failed [ 414.024955][T24833] FAT-fs (loop1): Directory bread(block 70) failed [ 414.031637][T24833] FAT-fs (loop1): Directory bread(block 71) failed [ 414.054721][T24833] FAT-fs (loop1): Directory bread(block 72) failed [ 414.062372][T24833] FAT-fs (loop1): Directory bread(block 73) failed [ 414.233455][ T23] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 414.453204][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 414.475347][ T23] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 414.498991][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.520365][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.545690][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.562724][ T23] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 414.609702][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.645052][ T23] usb 1-1: config 0 descriptor?? [ 414.666638][T24882] loop2: detected capacity change from 0 to 256 [ 414.668926][ T23] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 414.677649][T24882] exfat: Deprecated parameter 'utf8' [ 414.702884][T24882] exfat: Deprecated parameter 'utf8' [ 414.725585][ T5129] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 414.733709][T24882] exfat: Deprecated parameter 'namecase' [ 414.733774][T24882] exfat: Deprecated parameter 'namecase' [ 414.742569][T24882] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 414.745783][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 414.844085][ T5129] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 414.893843][ T5129] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 414.937657][ T5759] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 414.973108][ T5129] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 415.005967][T24841] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 415.050326][ T5129] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 415.083657][ T42] usb 1-1: USB disconnect, device number 26 [ 415.092119][T24903] loop1: detected capacity change from 0 to 512 [ 415.120034][T24909] loop3: detected capacity change from 0 to 64 [ 415.265980][T24903] syz.1.5049: attempt to access beyond end of device [ 415.265980][T24903] loop1: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 415.324588][T24903] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 415.338280][T24903] FAT-fs (loop1): Filesystem has been set read-only [ 415.346530][T24903] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 415.769200][T24954] netlink: 'syz.0.5059': attribute type 12 has an invalid length. [ 415.782196][T24945] loop1: detected capacity change from 0 to 4096 [ 415.793306][T24954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5059'. [ 415.823205][T24945] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 415.946348][T24964] loop0: detected capacity change from 0 to 128 [ 415.981464][T24945] ntfs3: loop1: failed to convert "c46c" to ascii [ 416.013489][T24964] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 416.089093][T24964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.174140][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5064'. [ 416.730621][T25005] ERROR: device name not specified. [ 416.761173][T25011] tc_dump_action: action bad kind [ 417.203221][ T5888] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 417.426861][ T5888] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 417.448134][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.473685][ T5888] usb 3-1: Product: syz [ 417.479394][T25046] loop1: detected capacity change from 0 to 1764 [ 417.486477][ T5888] usb 3-1: Manufacturer: syz [ 417.491219][ T5888] usb 3-1: SerialNumber: syz [ 417.503316][T25017] loop0: detected capacity change from 0 to 40427 [ 417.513425][T25046] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 417.527580][ T5888] usb 3-1: config 0 descriptor?? [ 417.539621][T25017] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 417.570401][T25017] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 417.608898][T25017] F2FS-fs (loop0): invalid crc value [ 417.655846][T25017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 417.757477][T25017] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 417.776503][T25017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 417.777255][ T5888] mos7840 3-1:0.0: required endpoints missing [ 417.894124][T25017] F2FS-fs (loop0): Corrupted max_depth of 3: 255 [ 417.913881][T25017] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 418.059325][ T5888] usb 3-1: USB disconnect, device number 30 [ 418.883226][ T5888] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 419.083436][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 419.096577][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 419.121252][ T5888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.140968][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.162132][T25140] loop2: detected capacity change from 0 to 1024 [ 419.171724][ T5888] usb 4-1: Product: syz [ 419.181634][ T5888] usb 4-1: Manufacturer: syz [ 419.195280][ T5888] usb 4-1: SerialNumber: syz [ 419.339757][ T3491] hfsplus: b-tree write err: -5, ino 25 [ 419.355358][ T3491] hfsplus: b-tree write err: -5, ino 4 [ 419.360970][ T3491] hfsplus: b-tree write err: -5, ino 2 [ 419.367647][T25155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5112'. [ 419.379787][ T3491] hfsplus: b-tree write err: -5, ino 26 [ 419.483729][ T5888] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 419.515462][ T5888] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 419.546997][ T5888] usb 4-1: 3:0: failed to get current value for ch 0 (-22) [ 419.547102][T25166] : renamed from lo (while UP) [ 419.583596][ T5888] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 419.623055][ T5888] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 419.646496][ T5888] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 419.689939][T25174] netlink: 'syz.0.5117': attribute type 7 has an invalid length. [ 419.713226][T25174] netlink: 'syz.0.5117': attribute type 8 has an invalid length. [ 419.737418][ T5888] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 419.768261][ T5888] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 419.792978][ T5888] usb 4-1: USB disconnect, device number 29 [ 419.840653][T25191] loop0: detected capacity change from 0 to 1024 [ 419.941061][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.054623][ T11] hfsplus: b-tree write err: -5, ino 25 [ 420.060683][ T11] hfsplus: b-tree write err: -5, ino 4 [ 420.089307][ T11] hfsplus: b-tree write err: -5, ino 2 [ 420.416586][T25232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5129'. [ 420.473432][T25232] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5129'. [ 420.489076][T25232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5129'. [ 420.983246][ T5809] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 421.000966][T25272] loop2: detected capacity change from 0 to 512 [ 421.010646][T25272] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.062336][T25272] EXT4-fs (loop2): orphan cleanup on readonly fs [ 421.071101][T25272] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 421.120118][T25272] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.5140: attempt to clear invalid blocks 2 len 1 [ 421.182125][T25272] EXT4-fs (loop2): Remounting filesystem read-only [ 421.191244][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.203106][T25272] EXT4-fs (loop2): 1 truncate cleaned up [ 421.210054][T25272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.222961][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x61, skipping [ 421.234763][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 421.253349][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 421.287716][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 421.340798][ T5809] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 421.358460][ T5809] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 421.392734][ T5809] usb 2-1: Manufacturer: syz [ 421.408776][ T5809] usb 2-1: config 0 descriptor?? [ 421.429170][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.595452][T25308] loop0: detected capacity change from 0 to 256 [ 421.602866][T25308] exfat: Deprecated parameter 'utf8' [ 421.621646][T25308] exfat: Deprecated parameter 'namecase' [ 421.632365][T25308] exfat: Deprecated parameter 'namecase' [ 421.661865][T25314] loop2: detected capacity change from 0 to 16 [ 421.663301][T25308] exfat: Deprecated parameter 'utf8' [ 421.707940][T25314] erofs: (device loop2): mounted with root inode @ nid 36. [ 421.727271][ T23] usb 2-1: USB disconnect, device number 35 [ 421.779418][ T5779] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 421.805523][T25308] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 421.806220][T25314] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 421.859969][ T27] audit: type=1800 audit(2000000288.390:218): pid=25314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5150" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 422.247158][T25352] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5159'. [ 422.257223][T25352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5159'. [ 422.423358][ T5809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.480439][T25366] netlink: 'syz.3.5164': attribute type 24 has an invalid length. [ 422.489493][T25366] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5164'. [ 422.732978][T25378] loop3: detected capacity change from 0 to 256 [ 422.736090][T25378] exfat: Deprecated parameter 'utf8' [ 422.736138][T25378] exfat: Deprecated parameter 'namecase' [ 422.736230][T25378] exfat: Deprecated parameter 'namecase' [ 422.736252][T25378] exfat: Deprecated parameter 'utf8' [ 422.776812][T25378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 423.121874][T25392] loop3: detected capacity change from 0 to 4096 [ 423.169771][T25392] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 423.348354][T25409] loop0: detected capacity change from 0 to 512 [ 423.374252][T25409] EXT4-fs: Ignoring removed mblk_io_submit option [ 423.417446][T25409] EXT4-fs (loop0): orphan cleanup on readonly fs [ 423.436468][T25409] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 423.462683][T25414] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 423.524921][T25409] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.5177: attempt to clear invalid blocks 2 len 1 [ 423.600729][T25409] EXT4-fs (loop0): Remounting filesystem read-only [ 423.657827][T25409] EXT4-fs (loop0): 1 truncate cleaned up [ 423.706630][T25409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.884392][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.971322][T25436] loop3: detected capacity change from 0 to 4096 [ 423.992846][T25436] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 424.113155][T25456] loop2: detected capacity change from 0 to 128 [ 424.200333][T25456] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.242949][T25456] ext4 filesystem being mounted at /1317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.261586][T25436] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 424.376192][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.650106][T25487] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5195'. [ 424.976795][T25513] loop2: detected capacity change from 0 to 16 [ 425.082516][ T6616] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 425.164613][ T42] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 425.383697][ T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.397938][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.416317][ T42] usb 2-1: Product: syz [ 425.420571][ T42] usb 2-1: Manufacturer: syz [ 425.422976][T25535] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5210'. [ 425.453107][ T42] usb 2-1: SerialNumber: syz [ 425.477906][ T42] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 425.540023][ T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 425.641080][T25548] binder: 25547:25548 ioctl c00c6211 ffffffffffffffff returned -14 [ 425.997022][T25570] loop3: detected capacity change from 0 to 8 [ 426.037198][T25570] SQUASHFS error: zlib decompression failed, data probably corrupt [ 426.045859][T25570] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.052381][T25570] SQUASHFS error: zlib decompression failed, data probably corrupt [ 426.060812][T25570] SQUASHFS error: Failed to read block 0x4df: -5 [ 426.075622][T25570] SQUASHFS error: zlib decompression failed, data probably corrupt [ 426.084522][ T5808] usb 2-1: USB disconnect, device number 36 [ 426.113466][ T42] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 426.117672][T25570] SQUASHFS error: Failed to read block 0x4e0: -5 [ 426.147999][T25570] SQUASHFS error: zlib decompression failed, data probably corrupt [ 426.159794][T25570] SQUASHFS error: Failed to read block 0x4de: -5 [ 426.175190][ T27] audit: type=1800 audit(2000000292.700:219): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5218" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 426.303205][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 426.320664][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.342286][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 426.372846][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.394465][ T42] usb 1-1: config 0 descriptor?? [ 426.414861][ T42] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 426.583136][ T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 426.613371][ T23] ath9k_htc: Failed to initialize the device [ 426.622468][ T5808] usb 2-1: ath9k_htc: USB layer deinitialized [ 426.691659][ T42] usb 1-1: USB disconnect, device number 27 [ 426.844912][T25589] loop2: detected capacity change from 0 to 32768 [ 426.876443][T25589] (syz.2.5222,25589,1):ocfs2_find_slot:468 ERROR: no free slots available! [ 426.888082][T25589] (syz.2.5222,25589,1):ocfs2_mount_volume:1807 ERROR: status = -22 [ 426.920939][T25589] (syz.2.5222,25589,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 426.938176][T25616] loop3: detected capacity change from 0 to 4096 [ 426.955074][T25589] NILFS (loop2): couldn't find nilfs on the device [ 426.982956][T25616] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 427.026978][T25616] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 427.059468][T25616] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 427.125905][T25616] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 427.216817][T25616] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 427.252335][T25616] ntfs: volume version 3.1. [ 427.273422][T25616] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 427.322488][T25616] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 427.371769][T25616] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 427.421167][T25616] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 427.456942][T25616] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 427.477396][T25645] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 427.611630][T25650] loop0: detected capacity change from 0 to 256 [ 428.284324][T25691] loop1: detected capacity change from 0 to 8 [ 428.310802][T25691] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 429.372905][T25723] loop1: detected capacity change from 0 to 32768 [ 429.492343][T25723] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 429.492343][T25723] [ 429.552878][T25723] ialloc: diAlloc returned -5! [ 430.503999][ T5809] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 430.618811][T25825] loop3: detected capacity change from 0 to 512 [ 430.652661][T25825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 430.670863][T25825] EXT4-fs (loop3): Test dummy encryption mode enabled [ 430.724981][T25825] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.755108][ T5809] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 430.773168][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.796678][ T5809] usb 1-1: config 0 has no interface number 0 [ 430.815723][ T5809] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 430.831623][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.874166][ T5809] usb 1-1: Product: syz [ 430.878401][ T5809] usb 1-1: Manufacturer: syz [ 430.895880][ T5809] usb 1-1: SerialNumber: syz [ 430.915796][ T5809] usb 1-1: config 0 descriptor?? [ 431.120999][T25825] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 431.156328][ T5809] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 431.170104][ T5809] usb 1-1: No valid video chain found. [ 431.171025][T25825] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.5286: Directory hole found for htree leaf block 0 [ 431.220060][T25855] loop1: detected capacity change from 0 to 4096 [ 431.236478][T25825] EXT4-fs (loop3): Remounting filesystem read-only [ 431.267766][T25855] ntfs: volume version 3.1. [ 431.392972][ T5771] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 431.413932][ T8] usb 1-1: USB disconnect, device number 28 [ 431.694911][T25886] loop2: detected capacity change from 0 to 64 [ 432.022171][T25896] loop2: detected capacity change from 0 to 1764 [ 432.030123][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.041440][ T5888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.071080][T25896] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 432.090333][ T3448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.399915][T25911] loop0: detected capacity change from 0 to 4096 [ 432.430076][T25911] __ntfs_error: 22 callbacks suppressed [ 432.430093][T25911] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 432.473104][T25911] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 432.473674][T25917] netlink: 'syz.1.5310': attribute type 3 has an invalid length. [ 432.523654][T25911] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 432.539196][T25917] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.5310'. [ 432.556375][T25911] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 432.591837][T25911] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 432.651094][T25911] ntfs: volume version 3.1. [ 432.659353][T25911] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 432.713557][T25911] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 432.797899][T25911] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 432.823887][T25911] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 432.854799][T25911] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 433.094188][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 433.124315][T25948] overlay: Bad value for 'metacopy' [ 433.317983][ T8] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 433.341622][ T8] usb 2-1: config 0 has no interface number 0 [ 433.361742][ T8] usb 2-1: config 0 interface 13 has no altsetting 0 [ 433.401528][ T8] usb 2-1: Dual-Role OTG device on HNP port [ 433.419993][ T8] usb 2-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 433.445340][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.458151][ T8] usb 2-1: Product: syz [ 433.462483][ T8] usb 2-1: Manufacturer: syz [ 433.471701][ T8] usb 2-1: SerialNumber: syz [ 433.504370][ T8] usb 2-1: config 0 descriptor?? [ 433.738897][ T8] snd-usb-caiaq 2-1:0.13: can't set alt interface. [ 433.763125][ T8] usb 2-1: unable to init card! (ret=-5) [ 433.773865][ T8] snd-usb-caiaq: probe of 2-1:0.13 failed with error -5 [ 433.803495][ T8] usb 2-1: USB disconnect, device number 37 [ 434.087345][T26007] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 435.144883][T26065] loop3: detected capacity change from 0 to 65 [ 435.163613][T26065] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 435.293987][ T5888] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 435.485347][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.496814][T26081] netlink: 'syz.0.5356': attribute type 1 has an invalid length. [ 435.498032][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 435.529664][ T5888] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 435.548154][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.577937][ T5888] usb 3-1: config 0 descriptor?? [ 436.013311][T26080] loop3: detected capacity change from 0 to 32768 [ 436.025594][T26098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5362'. [ 436.040749][ T5888] Bluetooth: Can't get state to change to load configuration err [ 436.064483][T26080] (syz.3.5357,26080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 436.071114][ T5888] Bluetooth: Loading sysconfig file failed [ 436.092288][T26098] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 436.106023][T26080] (syz.3.5357,26080,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 436.110699][ T5888] ath3k: probe of 3-1:0.0 failed with error -16 [ 436.152989][T26080] JBD2: Ignoring recovery information on journal [ 436.244580][ T5888] usb 3-1: USB disconnect, device number 31 [ 436.273518][T26080] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 436.541461][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 436.709327][T26135] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5371'. [ 436.825210][T26144] binder: 26142:26144 ioctl c00c620f 0 returned -14 [ 437.095754][T26159] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5376'. [ 437.441337][T26182] loop1: detected capacity change from 0 to 256 [ 437.551781][T26182] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.563257][T26182] FAT-fs (loop1): Filesystem has been set read-only [ 437.570278][T26182] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.590086][T26182] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 437.610451][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 437.610465][ T27] audit: type=1800 audit(2000000304.140:220): pid=26182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5384" name="file1" dev="loop1" ino=1048645 res=0 errno=0 [ 437.611044][T26182] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 437.728562][T26196] netlink: 'syz.0.5387': attribute type 3 has an invalid length. [ 437.753619][T26196] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5387'. [ 437.783736][ T3448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.241444][T26227] tmpfs: Bad value for 'mpol' [ 438.509292][ T27] audit: type=1326 audit(2000000305.030:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.551012][T26240] loop1: detected capacity change from 0 to 2048 [ 438.564057][T26240] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 438.573111][ T27] audit: type=1326 audit(2000000305.030:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.630926][T26240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.640028][ T27] audit: type=1326 audit(2000000305.030:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.640073][ T27] audit: type=1326 audit(2000000305.030:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.640113][ T27] audit: type=1326 audit(2000000305.030:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.640149][ T27] audit: type=1326 audit(2000000305.060:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.640186][ T27] audit: type=1326 audit(2000000305.060:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.640222][ T27] audit: type=1326 audit(2000000305.070:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.640260][ T27] audit: type=1326 audit(2000000305.070:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26237 comm="syz.0.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa431d9c799 code=0x7ffc0000 [ 438.684298][T26244] veth1_virt_wifi: entered promiscuous mode [ 439.091624][T26253] loop1: detected capacity change from 0 to 4096 [ 439.173283][T26228] loop2: detected capacity change from 0 to 32768 [ 439.212979][T26228] JBD2: Ignoring recovery information on journal [ 439.427733][T26228] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 439.686168][T26228] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 439.730284][T26228] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 439.765288][T26228] OCFS2: File system is now read-only. [ 439.773353][T26228] (syz.2.5396,26228,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 439.782846][T26228] (syz.2.5396,26228,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 439.797366][T26228] (syz.2.5396,26228,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 439.808221][T26228] (syz.2.5396,26228,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 439.821835][T26228] (syz.2.5396,26228,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 439.853217][T26228] (syz.2.5396,26228,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 439.886628][T26228] (syz.2.5396,26228,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 439.912602][T26228] (syz.2.5396,26228,0):ocfs2_mknod:385 ERROR: status = -30 [ 439.942054][T26228] (syz.2.5396,26228,0):ocfs2_mknod:502 ERROR: status = -30 [ 439.954868][T26228] (syz.2.5396,26228,0):ocfs2_create:676 ERROR: status = -30 [ 440.073634][T26287] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551615) [ 440.103514][ T5779] Bluetooth: hci0: command tx timeout [ 440.163981][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 440.361184][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.368486][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.844037][ T23] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 440.913354][T26340] loop3: detected capacity change from 0 to 64 [ 441.062669][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.083182][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.109384][ T23] usb 3-1: Product: syz [ 441.122841][ T23] usb 3-1: Manufacturer: syz [ 441.138306][ T23] usb 3-1: SerialNumber: syz [ 441.158626][ T23] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 441.183198][ T42] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 441.591717][T26335] loop1: detected capacity change from 0 to 40427 [ 441.629157][T26335] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 441.658612][T26335] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 441.692261][ T5809] usb 3-1: USB disconnect, device number 32 [ 441.702449][T26370] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 441.725920][T26335] F2FS-fs (loop1): invalid crc value [ 441.755996][T26335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 441.876807][T26379] devpts: called with bogus options [ 441.902152][T26335] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 441.934245][T26335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 441.982029][T26362] loop3: detected capacity change from 0 to 32768 [ 442.043654][T26362] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.207526][T26362] XFS (loop3): Ending clean mount [ 442.266273][ T42] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 442.291810][ T42] ath9k_htc: Failed to initialize the device [ 442.323204][ T5809] usb 3-1: ath9k_htc: USB layer deinitialized [ 442.385168][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.553246][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 442.676100][T26422] loop1: detected capacity change from 0 to 256 [ 442.701466][T26422] exfat: Deprecated parameter 'utf8' [ 442.733205][T26422] exfat: Deprecated parameter 'utf8' [ 442.773576][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 442.785790][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 442.804749][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.830566][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.853097][T26422] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 442.913579][ T23] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 442.922904][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.939388][ T23] usb 1-1: Product: syz [ 442.951499][ T23] usb 1-1: Manufacturer: syz [ 442.961837][T26433] loop2: detected capacity change from 0 to 512 [ 442.966452][ T23] usb 1-1: SerialNumber: syz [ 443.027438][T26433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.053250][T26433] ext4 filesystem being mounted at /1384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.311003][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.427377][ T23] usb 1-1: cannot find UAC_HEADER [ 443.455135][T26476] loop3: detected capacity change from 0 to 16 [ 443.465822][T26477] netlink: 'syz.1.5454': attribute type 1 has an invalid length. [ 443.482393][T26476] erofs: (device loop3): mounted with root inode @ nid 36. [ 443.492461][ T23] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 443.528759][ T23] usb 1-1: USB disconnect, device number 29 [ 443.546263][T26476] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 443.553138][ T1314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.577061][T26476] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 443.629912][T26476] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 443.645539][T13185] udevd[13185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.668583][T26476] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 443.689889][T26476] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 443.713303][T26476] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 443.748421][T26476] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 443.786776][T26476] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 443.801109][T26476] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 443.812929][ T27] audit: type=1800 audit(2000000310.350:230): pid=26476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5455" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 443.942356][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5460'. [ 444.225713][T26521] loop0: detected capacity change from 0 to 4096 [ 444.289203][T26521] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 444.374867][T26521] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 444.504681][T26545] xt_TPROXY: Can be used only with -p tcp or -p udp [ 444.999659][T26573] loop2: detected capacity change from 0 to 512 [ 445.000781][T26572] netlink: 'syz.0.5479': attribute type 2 has an invalid length. [ 445.021257][T26572] netlink: 'syz.0.5479': attribute type 1 has an invalid length. [ 445.088850][T26573] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 445.141199][T26573] UDF-fs: Scanning with blocksize 512 failed [ 445.200892][T26573] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 445.227858][T26573] UDF-fs: Scanning with blocksize 1024 failed [ 445.256886][T26573] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 445.303193][T26573] UDF-fs: Scanning with blocksize 2048 failed [ 445.327131][T26573] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 445.398991][T26573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.125272][T26635] loop0: detected capacity change from 0 to 128 [ 446.183754][T26635] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.245373][T26635] ext4 filesystem being mounted at /1451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 446.277528][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.311944][T26648] netlink: 'syz.3.5501': attribute type 1 has an invalid length. [ 446.403648][T26635] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.5498: reserved inode found cleared - inode=2 [ 446.630155][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.311929][T26688] loop2: detected capacity change from 0 to 4096 [ 447.355568][T26688] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 447.392242][T26698] loop1: detected capacity change from 0 to 4096 [ 447.416499][T26698] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 447.431430][T26698] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 447.442256][T26698] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 447.467038][T26698] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 447.511134][T26698] ntfs: volume version 3.1. [ 447.525653][T26698] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 447.556993][T26698] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 447.613165][T26698] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 447.693160][T26698] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 447.764844][T26698] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 448.023342][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 448.389576][T26757] netlink: 'syz.2.5536': attribute type 3 has an invalid length. [ 448.398166][T26757] netlink: 'syz.2.5536': attribute type 27 has an invalid length. [ 448.977688][T26791] loop2: detected capacity change from 0 to 256 [ 449.152801][T26791] FAT-fs (loop2): Directory bread(block 64) failed [ 449.164372][T26791] FAT-fs (loop2): Directory bread(block 65) failed [ 449.171160][T26791] FAT-fs (loop2): Directory bread(block 66) failed [ 449.196055][T26791] FAT-fs (loop2): Directory bread(block 67) failed [ 449.219709][T26791] FAT-fs (loop2): Directory bread(block 68) failed [ 449.237780][T26791] FAT-fs (loop2): Directory bread(block 69) failed [ 449.257550][T26791] FAT-fs (loop2): Directory bread(block 70) failed [ 449.271982][T26791] FAT-fs (loop2): Directory bread(block 71) failed [ 449.286545][T26791] FAT-fs (loop2): Directory bread(block 72) failed [ 449.301756][T26791] FAT-fs (loop2): Directory bread(block 73) failed [ 449.313608][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.938185][T26803] loop0: detected capacity change from 0 to 32768 [ 450.008754][T26803] [ 450.008754][T26803] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.008754][T26803] [ 450.062699][T26803] jfs_rename: dtInsert returned -EIO [ 450.191422][T26833] loop2: detected capacity change from 0 to 2048 [ 450.253882][T26840] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.286585][ T5773] [ 450.286585][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.286585][ T5773] [ 450.341377][ T5773] [ 450.341377][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 450.341377][ T5773] [ 450.449527][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 450.449542][ T27] audit: type=1326 audit(2000000316.980:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.1.5565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eec39c799 code=0x7ffc0000 [ 450.513154][ T27] audit: type=1326 audit(2000000316.980:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.1.5565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eec39c799 code=0x7ffc0000 [ 450.558775][T26854] loop3: detected capacity change from 0 to 256 [ 450.774828][T26864] loop0: detected capacity change from 0 to 16 [ 450.811969][T26864] erofs: (device loop0): mounted with root inode @ nid 36. [ 451.401639][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5579'. [ 451.493396][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 451.600875][T26944] loop1: detected capacity change from 0 to 4096 [ 451.632522][T26944] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 451.719774][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.743623][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.766588][ T8] usb 4-1: config 1 interface 1 has no altsetting 1 [ 451.785811][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.802839][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.822554][ T8] usb 4-1: Product: syz [ 451.841530][ T8] usb 4-1: Manufacturer: syz [ 451.856619][ T8] usb 4-1: SerialNumber: syz [ 451.878832][ T8] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 451.906555][ T8] cdc_ncm 4-1:1.0: bind() failure [ 451.932518][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 451.946974][ T8] cdc_ncm 4-1:1.1: bind() failure [ 452.098538][ T8] usb 4-1: USB disconnect, device number 30 [ 452.178966][T26987] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5590'. [ 452.551597][T27004] loop2: detected capacity change from 0 to 4096 [ 452.583786][T27004] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 452.690261][T27004] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 452.721340][T27004] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 452.773183][T27004] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 452.829894][T27004] ntfs: volume version 3.1. [ 452.899506][T27027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5603'. [ 452.959897][T27004] ntfs: (device loop2): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 453.175201][ T5778] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 453.779931][T27067] loop3: detected capacity change from 0 to 4096 [ 453.831770][T27081] geneve1: entered allmulticast mode [ 453.844366][T27067] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 453.984348][T27087] netlink: 'syz.2.5622': attribute type 32 has an invalid length. [ 454.047767][T27093] loop0: detected capacity change from 0 to 64 [ 454.406479][T27112] SET target dimension over the limit! [ 454.476473][T27117] netlink: 'syz.3.5630': attribute type 3 has an invalid length. [ 454.646931][T27125] loop1: detected capacity change from 0 to 1024 [ 454.693245][T27132] netlink: 444 bytes leftover after parsing attributes in process `syz.3.5636'. [ 454.843503][ T40] hfsplus: b-tree write err: -5, ino 25 [ 454.849426][ T40] hfsplus: b-tree write err: -5, ino 4 [ 454.883243][ T40] hfsplus: b-tree write err: -5, ino 2 [ 454.914036][ T40] hfsplus: b-tree write err: -5, ino 17 [ 454.949424][T27147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5641'. [ 455.002070][T27147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.083515][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.389365][T27175] netlink: 'syz.0.5648': attribute type 21 has an invalid length. [ 455.413119][T27175] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5648'. [ 455.594539][T27190] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 455.601222][T27190] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 455.642088][T27190] comedi comedi0: 8255: I/O port conflict (0x4f,4) [ 455.650876][T27190] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 455.683230][T27190] comedi comedi0: 8255: I/O port conflict (0x400008,4) [ 455.700656][T27190] comedi comedi0: 8255: I/O port conflict (0x80ffa,4) [ 455.709217][ T5809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.760096][T27197] openvswitch: netlink: Message has 245 unknown bytes. [ 455.767561][T27201] IPv6: NLM_F_REPLACE set, but no existing node found! [ 455.781252][T27197] openvswitch: netlink: Actions may not be safe on all matching packets [ 456.103279][T27222] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 456.323328][T27237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5669'. [ 456.413313][T27239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5670'. [ 456.761549][T27262] overlayfs: workdir and upperdir must be separate subtrees [ 457.113750][T27289] loop3: detected capacity change from 0 to 256 [ 457.169302][T27289] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 457.324955][ T49] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 457.399386][T27304] loop0: detected capacity change from 0 to 8 [ 457.445603][T27308] loop2: detected capacity change from 0 to 256 [ 457.486086][T27308] FAT-fs (loop2): Directory bread(block 64) failed [ 457.492803][T27308] FAT-fs (loop2): Directory bread(block 65) failed [ 457.553419][T27308] FAT-fs (loop2): Directory bread(block 66) failed [ 457.560892][T27308] FAT-fs (loop2): Directory bread(block 67) failed [ 457.568948][T27308] FAT-fs (loop2): Directory bread(block 68) failed [ 457.576400][T27308] FAT-fs (loop2): Directory bread(block 69) failed [ 457.586970][T27308] FAT-fs (loop2): Directory bread(block 70) failed [ 457.594010][T27308] FAT-fs (loop2): Directory bread(block 71) failed [ 457.661400][T27308] FAT-fs (loop2): Directory bread(block 72) failed [ 457.668192][T27308] FAT-fs (loop2): Directory bread(block 73) failed [ 457.844502][T27308] syz.2.5693: attempt to access beyond end of device [ 457.844502][T27308] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 458.403660][T27359] program syz.2.5706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.658161][T27373] affs: No valid root block on device nbd1 [ 458.751336][T27328] loop0: detected capacity change from 0 to 40427 [ 458.797768][T27328] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 458.813214][T27328] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 458.856402][T27328] F2FS-fs (loop0): heap/no_heap options were deprecated [ 458.900264][T27328] F2FS-fs (loop0): invalid crc value [ 458.940635][T27328] F2FS-fs (loop0): Found nat_bits in checkpoint [ 459.025193][T27393] netlink: 'syz.3.5715': attribute type 2 has an invalid length. [ 459.063214][T27393] netlink: 'syz.3.5715': attribute type 1 has an invalid length. [ 459.092154][T27393] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5715'. [ 459.119197][T27328] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 459.142809][T27328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 459.254370][T27402] loop2: detected capacity change from 0 to 128 [ 459.314520][T27402] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 459.365365][T27402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.746030][T27429] libceph: resolve 'c' (ret=-3): failed [ 459.891524][T27436] comedi comedi3: comedi_config --init_data is deprecated [ 459.916911][T27439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5728'. [ 460.203656][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.411418][T27468] loop2: detected capacity change from 0 to 2048 [ 460.480453][T27468] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 460.521747][T27468] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 460.575228][T27468] UDF-fs: Scanning with blocksize 512 failed [ 460.618714][T27468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 461.092125][T27516] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5749'. [ 461.295961][T27516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.344993][T27516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.402350][T27516] bond0 (unregistering): Released all slaves [ 461.593465][T27548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5757'. [ 461.602480][T27548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5757'. [ 461.725251][T27556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5761'. [ 461.967075][T27568] loop3: detected capacity change from 0 to 128 [ 462.099130][T27568] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.187606][T27568] ext4 filesystem being mounted at /1417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.232029][T27568] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.5765: No space for directory leaf checksum. Please run e2fsck -D. [ 462.232060][T27568] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.5765: checksumming directory block 0 [ 462.358048][ T5771] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.530422][T27607] loop1: detected capacity change from 0 to 512 [ 462.591141][T27607] EXT4-fs (loop1): orphan cleanup on readonly fs [ 462.651474][T27607] EXT4-fs error (device loop1): ext4_find_extent:936: inode #4: comm syz.1.5776: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 462.687366][T27607] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 462.687455][T27607] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 462.693311][T27607] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 462.694520][T27607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.744535][T27607] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.5776: 'file0' linked to parent dir [ 462.821090][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.261817][T27645] delete_channel: no stack [ 463.288417][T27650] loop0: detected capacity change from 0 to 16 [ 463.334391][T27650] erofs: (device loop0): mounted with root inode @ nid 36. [ 463.394846][T27650] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 463.432489][T27650] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 463.472192][T27650] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 464.183278][T27707] usb usb7: usbfs: process 27707 (syz.3.5806) did not claim interface 0 before use [ 464.927641][T27757] loop3: detected capacity change from 0 to 128 [ 465.122691][T27767] loop0: detected capacity change from 0 to 64 [ 465.187491][T27767] hfs: unable to locate alternate MDB [ 465.228717][T27767] hfs: continuing without an alternate MDB [ 465.246519][T27778] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5828'. [ 465.309053][ T40] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.333289][ T27] audit: type=1800 audit(2000000331.860:233): pid=27767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5827" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 465.418480][ T1314] hfs: new node 0 already hashed? [ 465.463794][ T1314] ------------[ cut here ]------------ [ 465.469777][ T1314] WARNING: CPU: 1 PID: 1314 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440 [ 465.479060][ T1314] Modules linked in: [ 465.482999][ T1314] CPU: 1 PID: 1314 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 465.490638][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.500985][ T1314] Workqueue: writeback wb_workfn (flush-7:0) [ 465.507116][ T1314] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 465.512786][ T1314] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 465.532583][ T1314] RSP: 0018:ffffc90004e8ee18 EFLAGS: 00010246 [ 465.538837][ T1314] RAX: 000000000000001f RBX: ffff88807d442000 RCX: 5c5bf75b1d7b2600 [ 465.547196][ T1314] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 465.555358][ T1314] RBP: 0000000000000000 R08: ffffc90004e8eb27 R09: 1ffff920009d1d64 [ 465.563570][ T1314] R10: dffffc0000000000 R11: fffff520009d1d65 R12: 0000000000000000 [ 465.572118][ T1314] R13: ffff88807d4420e0 R14: ffff88802e578300 R15: dffffc0000000000 [ 465.580208][ T1314] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 465.589444][ T1314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.596142][ T1314] CR2: 000000110c329009 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 465.604330][ T1314] Call Trace: [ 465.607623][ T1314] [ 465.610669][ T1314] hfs_bmap_alloc+0x541/0x5d0 [ 465.615434][ T1314] ? hfs_bmap_reserve+0x430/0x430 [ 465.620512][ T1314] hfs_btree_inc_height+0x101/0xac0 [ 465.625970][ T1314] ? hfs_brec_insert+0x6fa/0xbd0 [ 465.630947][ T1314] ? hfs_brec_insert+0xbd0/0xbd0 [ 465.636028][ T1314] ? do_raw_spin_unlock+0x121/0x230 [ 465.641261][ T1314] hfs_brec_insert+0x748/0xbd0 [ 465.646145][ T1314] ? hfs_brec_keylen+0x360/0x360 [ 465.651309][ T1314] __hfs_ext_write_extent+0x2a1/0x470 [ 465.657229][ T1314] hfs_ext_write_extent+0x17f/0x210 [ 465.662546][ T1314] ? verify_lock_unused+0x140/0x140 [ 465.667867][ T1314] ? hfs_ext_find_block+0x190/0x190 [ 465.673701][ T1314] ? blk_start_plug+0x51/0x1a0 [ 465.678517][ T1314] hfs_write_inode+0xdc/0x880 [ 465.683373][ T1314] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 465.688791][ T1314] ? __writeback_single_inode+0x48d/0xec0 [ 465.694757][ T1314] ? __lock_acquire+0x7d40/0x7d40 [ 465.699808][ T1314] ? do_raw_spin_lock+0x11f/0x2c0 [ 465.705015][ T1314] ? __rwlock_init+0x150/0x150 [ 465.709822][ T1314] __writeback_single_inode+0x705/0xec0 [ 465.715526][ T1314] writeback_sb_inodes+0x7cd/0xf50 [ 465.721268][ T1314] ? queue_io+0x550/0x550 [ 465.725749][ T1314] ? rcu_is_watching+0x15/0xb0 [ 465.731024][ T1314] wb_writeback+0x46a/0xbf0 [ 465.735624][ T1314] ? queue_io+0x3b1/0x550 [ 465.740137][ T1314] ? percpu_ref_tryget+0x250/0x250 [ 465.745409][ T1314] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 465.751599][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.757072][ T1314] wb_workfn+0x400/0xe60 [ 465.761918][ T1314] ? inode_wait_for_writeback+0x230/0x230 [ 465.767806][ T1314] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 465.774398][ T1314] ? read_lock_is_recursive+0x20/0x20 [ 465.779903][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.785505][ T1314] ? process_scheduled_works+0x96f/0x15d0 [ 465.791340][ T1314] ? process_scheduled_works+0x96f/0x15d0 [ 465.797321][ T1314] process_scheduled_works+0xa5d/0x15d0 [ 465.802980][ T1314] ? worker_attach_to_pool+0x380/0x380 [ 465.808660][ T1314] ? assign_work+0x3d2/0x5d0 [ 465.813348][ T1314] worker_thread+0xa55/0xfc0 [ 465.818223][ T1314] kthread+0x2fa/0x390 [ 465.822426][ T1314] ? pr_cont_work+0x560/0x560 [ 465.827200][ T1314] ? kthread_blkcg+0xd0/0xd0 [ 465.832483][ T1314] ret_from_fork+0x48/0x80 [ 465.837399][ T1314] ? kthread_blkcg+0xd0/0xd0 [ 465.842221][ T1314] ret_from_fork_asm+0x11/0x20 [ 465.847900][ T1314] [ 465.851029][ T1314] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 465.858405][ T1314] CPU: 1 PID: 1314 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 465.866036][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.876172][ T1314] Workqueue: writeback wb_workfn (flush-7:0) [ 465.882160][ T1314] Call Trace: [ 465.885428][ T1314] [ 465.888439][ T1314] dump_stack_lvl+0x18c/0x250 [ 465.893114][ T1314] ? show_regs_print_info+0x20/0x20 [ 465.898307][ T1314] ? load_image+0x400/0x400 [ 465.902897][ T1314] panic+0x2dc/0x730 [ 465.906798][ T1314] ? bpf_jit_dump+0xd0/0xd0 [ 465.911304][ T1314] ? ret_from_fork_asm+0x11/0x20 [ 465.916282][ T1314] __warn+0x2e0/0x470 [ 465.920262][ T1314] ? hfs_bnode_create+0x3b9/0x440 [ 465.925277][ T1314] ? hfs_bnode_create+0x3b9/0x440 [ 465.930298][ T1314] report_bug+0x2be/0x4f0 [ 465.934645][ T1314] ? hfs_bnode_create+0x3b9/0x440 [ 465.939658][ T1314] ? hfs_bnode_create+0x3b9/0x440 [ 465.944764][ T1314] ? hfs_bnode_create+0x3bb/0x440 [ 465.949780][ T1314] handle_bug+0xcf/0x120 [ 465.954107][ T1314] exc_invalid_op+0x1a/0x50 [ 465.958615][ T1314] asm_exc_invalid_op+0x1a/0x20 [ 465.963456][ T1314] RIP: 0010:hfs_bnode_create+0x3b9/0x440 [ 465.969182][ T1314] Code: d4 e0 8a 89 ee e8 47 8c 1f 08 e9 73 fd ff ff e8 1d 1c 2d ff 4c 89 ef e8 45 bc 34 08 48 c7 c7 c0 d4 e0 8a 89 ee e8 27 8c 1f 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c [ 465.988783][ T1314] RSP: 0018:ffffc90004e8ee18 EFLAGS: 00010246 [ 465.994848][ T1314] RAX: 000000000000001f RBX: ffff88807d442000 RCX: 5c5bf75b1d7b2600 [ 466.002914][ T1314] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 466.011069][ T1314] RBP: 0000000000000000 R08: ffffc90004e8eb27 R09: 1ffff920009d1d64 [ 466.019049][ T1314] R10: dffffc0000000000 R11: fffff520009d1d65 R12: 0000000000000000 [ 466.027100][ T1314] R13: ffff88807d4420e0 R14: ffff88802e578300 R15: dffffc0000000000 [ 466.035087][ T1314] ? hfs_bnode_create+0x3b9/0x440 [ 466.040295][ T1314] hfs_bmap_alloc+0x541/0x5d0 [ 466.045088][ T1314] ? hfs_bmap_reserve+0x430/0x430 [ 466.050207][ T1314] hfs_btree_inc_height+0x101/0xac0 [ 466.055927][ T1314] ? hfs_brec_insert+0x6fa/0xbd0 [ 466.060855][ T1314] ? hfs_brec_insert+0xbd0/0xbd0 [ 466.065798][ T1314] ? do_raw_spin_unlock+0x121/0x230 [ 466.070997][ T1314] hfs_brec_insert+0x748/0xbd0 [ 466.075763][ T1314] ? hfs_brec_keylen+0x360/0x360 [ 466.081011][ T1314] __hfs_ext_write_extent+0x2a1/0x470 [ 466.086739][ T1314] hfs_ext_write_extent+0x17f/0x210 [ 466.092214][ T1314] ? verify_lock_unused+0x140/0x140 [ 466.097599][ T1314] ? hfs_ext_find_block+0x190/0x190 [ 466.102887][ T1314] ? blk_start_plug+0x51/0x1a0 [ 466.107733][ T1314] hfs_write_inode+0xdc/0x880 [ 466.112489][ T1314] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 466.117944][ T1314] ? __writeback_single_inode+0x48d/0xec0 [ 466.123666][ T1314] ? __lock_acquire+0x7d40/0x7d40 [ 466.128682][ T1314] ? do_raw_spin_lock+0x11f/0x2c0 [ 466.133699][ T1314] ? __rwlock_init+0x150/0x150 [ 466.138465][ T1314] __writeback_single_inode+0x705/0xec0 [ 466.144119][ T1314] writeback_sb_inodes+0x7cd/0xf50 [ 466.149334][ T1314] ? queue_io+0x550/0x550 [ 466.153755][ T1314] ? rcu_is_watching+0x15/0xb0 [ 466.158529][ T1314] wb_writeback+0x46a/0xbf0 [ 466.163114][ T1314] ? queue_io+0x3b1/0x550 [ 466.167454][ T1314] ? percpu_ref_tryget+0x250/0x250 [ 466.172587][ T1314] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 466.178688][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.183891][ T1314] wb_workfn+0x400/0xe60 [ 466.188148][ T1314] ? inode_wait_for_writeback+0x230/0x230 [ 466.193960][ T1314] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 466.200047][ T1314] ? read_lock_is_recursive+0x20/0x20 [ 466.205446][ T1314] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.210652][ T1314] ? process_scheduled_works+0x96f/0x15d0 [ 466.216373][ T1314] ? process_scheduled_works+0x96f/0x15d0 [ 466.222093][ T1314] process_scheduled_works+0xa5d/0x15d0 [ 466.227748][ T1314] ? worker_attach_to_pool+0x380/0x380 [ 466.233302][ T1314] ? assign_work+0x3d2/0x5d0 [ 466.237902][ T1314] worker_thread+0xa55/0xfc0 [ 466.242504][ T1314] kthread+0x2fa/0x390 [ 466.246562][ T1314] ? pr_cont_work+0x560/0x560 [ 466.251230][ T1314] ? kthread_blkcg+0xd0/0xd0 [ 466.255820][ T1314] ret_from_fork+0x48/0x80 [ 466.260259][ T1314] ? kthread_blkcg+0xd0/0xd0 [ 466.264839][ T1314] ret_from_fork_asm+0x11/0x20 [ 466.269621][ T1314] [ 466.272971][ T1314] Kernel Offset: disabled [ 466.277384][ T1314] Rebooting in 86400 seconds..