last executing test programs: 4.562814753s ago: executing program 0 (id=3376): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045007, 0x0) 4.449514382s ago: executing program 0 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a07000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c0002800800014000000000090001"], 0xe4}}, 0x0) 4.351410155s ago: executing program 0 (id=3382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x9) 4.26904616s ago: executing program 0 (id=3385): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008f5100012400001020301090269000301650002080b0005010620020904000000010120"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) 2.669200981s ago: executing program 3 (id=3426): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096100, 0x0) 2.519119275s ago: executing program 3 (id=3431): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x1, 0x0) 2.412684415s ago: executing program 3 (id=3434): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x6, "3200210a22d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.323100089s ago: executing program 0 (id=3438): r0 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x33, @string={0x33, 0x3, "c24c90cd2cc32901eb3b24ddc3bddb3008f597ff9b58fdd406a911822df5395f9e33042581b788247643ec7ac8ba18a9b3"}}}, 0x0) 905.381034ms ago: executing program 2 (id=3465): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0) 759.555977ms ago: executing program 2 (id=3468): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0x1, 0x0, 0x0) 679.181463ms ago: executing program 4 (id=3470): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 654.561018ms ago: executing program 3 (id=3471): r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) getpriority(0x1, r0) 580.893885ms ago: executing program 2 (id=3472): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 573.347024ms ago: executing program 4 (id=3474): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 504.179671ms ago: executing program 1 (id=3475): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 503.777061ms ago: executing program 2 (id=3476): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix={0xffffffa5, 0x57, 0x32314752, 0x4, 0x6, 0x39, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3}}) 448.770951ms ago: executing program 3 (id=3477): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001100)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_win95}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 433.787698ms ago: executing program 4 (id=3478): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 404.912633ms ago: executing program 1 (id=3479): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x1c, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 393.536141ms ago: executing program 2 (id=3480): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) 353.053654ms ago: executing program 4 (id=3481): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x2, 0x4) 297.884914ms ago: executing program 1 (id=3482): r0 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000180)={0x81, 0x2, 0x0, {0x9b, 0x2, 0x20363059, 0x4, 0x4, 0x3, 0x0, 0x1}}) 225.468061ms ago: executing program 1 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xdc}}, 0x0) 219.30667ms ago: executing program 0 (id=3484): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) 136.314635ms ago: executing program 4 (id=3485): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x4) 136.183695ms ago: executing program 3 (id=3486): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, 0x0, 0x0) 116.656021ms ago: executing program 1 (id=3487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x3, 0xfffffffffffffffa}) 102.278098ms ago: executing program 4 (id=3488): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6", 0xa8, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000001010902240001000000000904000002ffffff000905ef"], 0x0) 81.614705ms ago: executing program 2 (id=3489): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x1, 0x10, [0x0, 0x0, 0x0, 0x0]}) 0s ago: executing program 1 (id=3490): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000400)='9H', 0x2}], 0x2) kernel console output (not intermixed with test programs): 1: SerialNumber: syz [ 124.947881][ T7609] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1523: invalid indirect mapped block 1 (level 1) [ 125.015129][ T4611] usb 1-1: config 0 descriptor?? [ 125.045417][ T4609] usb 2-1: Using ep0 maxpacket: 16 [ 125.068228][ T4611] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 125.076528][ T7609] EXT4-fs (loop3): Remounting filesystem read-only [ 125.124906][ T7609] EXT4-fs (loop3): 1 truncate cleaned up [ 125.130644][ T7609] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 125.195224][ T4609] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.214870][ T4609] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.297132][ T4611] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 125.339728][ T4611] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 125.359605][ T7609] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.1523: bad inode number: 1 [ 125.404872][ T7609] EXT4-fs (loop3): Remounting filesystem read-only [ 125.453566][ T4609] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 125.473283][ T4609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.506810][ T4609] usb 2-1: Product: syz [ 125.511313][ T4609] usb 2-1: Manufacturer: syz [ 125.539628][ T4609] usb 2-1: SerialNumber: syz [ 125.561524][ T4609] r8152-cfgselector 2-1: config 0 descriptor?? [ 125.570619][ T4611] usb 1-1: USB disconnect, device number 3 [ 125.706912][ T7651] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 125.751966][ T7651] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 125.836121][ T4609] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 125.963798][ T7666] netlink: 'syz.4.1549': attribute type 10 has an invalid length. [ 125.977702][ T7666] netlink: 'syz.4.1549': attribute type 10 has an invalid length. [ 126.000054][ T7669] loop3: detected capacity change from 0 to 64 [ 126.070361][ T4611] usb 2-1: USB disconnect, device number 8 [ 126.340998][ T7688] loop2: detected capacity change from 0 to 8 [ 126.435238][ T7688] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 126.471681][ T4343] udevd[4343]: incorrect cramfs checksum on /dev/loop2 [ 126.494337][ T7688] cramfs: Error -3 while decompressing! [ 126.503241][ T7696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1565'. [ 126.514395][ T7699] dlm: no locking on control device [ 126.534239][ T4342] udevd[4342]: incorrect cramfs checksum on /dev/loop2 [ 126.553505][ T7688] cramfs: ffffffff964030a8(26)->ffff8880718cd000(4096) [ 126.577331][ T7688] cramfs: Error -3 while decompressing! [ 126.621508][ T7688] cramfs: ffffffff964030c2(26)->ffff888069401000(4096) [ 126.664313][ T7688] cramfs: Error -3 while decompressing! [ 126.678688][ T7697] loop4: detected capacity change from 0 to 4096 [ 126.695001][ T7688] cramfs: ffffffff964030dc(16)->ffff88805c7a2000(4096) [ 126.712515][ T7688] cramfs: Error -3 while decompressing! [ 126.718732][ T7688] cramfs: ffffffff964030a8(26)->ffff8880718cd000(4096) [ 126.831644][ T7697] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 126.891558][ T7697] ntfs3: loop4: Failed to load $Extend. [ 126.993823][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 127.113096][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1578'. [ 127.832447][ T7782] loop1: detected capacity change from 0 to 1024 [ 127.972278][ T154] hfsplus: b-tree write err: -5, ino 25 [ 128.018902][ T154] hfsplus: b-tree write err: -5, ino 4 [ 128.024494][ T154] hfsplus: b-tree write err: -5, ino 2 [ 128.075042][ T154] hfsplus: b-tree write err: -5, ino 26 [ 128.187510][ T7808] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1614'. [ 128.390716][ T7820] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 128.423033][ T7822] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1628'. [ 128.470796][ T7822] unsupported nla_type 34 [ 128.638306][ T7798] loop0: detected capacity change from 0 to 32768 [ 128.750056][ T7798] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 128.767710][ T7798] JBD2: Ignoring recovery information on journal [ 128.892661][ T7798] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 129.061538][ T7810] loop3: detected capacity change from 0 to 32768 [ 129.092303][ T7798] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 129.145518][ T7798] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.166625][ T7810] (syz.3.1622,7810,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.205471][ T7798] OCFS2: File system is now read-only. [ 129.235614][ T7798] (syz.0.1617,7798,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 129.243964][ T7798] (syz.0.1617,7798,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 129.266133][ T7810] (syz.3.1622,7810,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 129.295065][ T7798] (syz.0.1617,7798,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 129.303943][ T7798] (syz.0.1617,7798,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 129.363901][ T7810] JBD2: Ignoring recovery information on journal [ 129.371316][ T7798] (syz.0.1617,7798,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 129.380259][ T7798] (syz.0.1617,7798,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 129.388724][ T7798] (syz.0.1617,7798,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 129.397672][ T7798] (syz.0.1617,7798,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 129.407012][ T7798] (syz.0.1617,7798,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 129.417005][ T7798] (syz.0.1617,7798,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 129.427669][ T7798] (syz.0.1617,7798,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 129.436984][ T7798] (syz.0.1617,7798,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 129.453204][ T7798] (syz.0.1617,7798,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 129.463330][ T7798] (syz.0.1617,7798,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 129.485240][ T7798] (syz.0.1617,7798,1):ocfs2_mknod:357 ERROR: status = -30 [ 129.503085][ T7860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.513440][ T7798] (syz.0.1617,7798,1):ocfs2_mknod:502 ERROR: status = -30 [ 129.555267][ T7810] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 129.566617][ T7798] (syz.0.1617,7798,1):ocfs2_mkdir:659 ERROR: status = -30 [ 129.574635][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 129.615810][ T7859] device netdevsim0 entered promiscuous mode [ 129.734996][ T7867] device netdevsim0 entered promiscuous mode [ 129.773436][ T7867] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.840884][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 129.896086][ T7871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.914235][ T7874] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1651'. [ 129.932044][ T7871] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.038695][ T4193] ocfs2: Unmounting device (7,3) on (node local) [ 130.650932][ T7915] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 130.792657][ T7923] device gre0 entered promiscuous mode [ 130.824377][ T7925] xt_hashlimit: max too large, truncated to 1048576 [ 130.912684][ T7931] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 130.954454][ T7934] loop4: detected capacity change from 0 to 512 [ 131.132986][ T7947] loop2: detected capacity change from 0 to 512 [ 131.162741][ T7954] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 131.190391][ T7934] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1682: corrupted in-inode xattr [ 131.208514][ T7934] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1682: couldn't read orphan inode 15 (err -117) [ 131.221707][ T7947] EXT4-fs (loop2): Ignoring removed nobh option [ 131.255620][ T7934] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 131.296606][ T7947] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 131.322170][ T7934] EXT4-fs error (device loop4): ext4_xattr_set_entry:1613: inode #2: comm syz.4.1682: corrupted xattr entries [ 131.335990][ T7947] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1688: invalid indirect mapped block 256 (level 1) [ 131.365736][ T7964] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 131.387047][ T7947] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1688: invalid indirect mapped block 2683928664 (level 1) [ 131.466758][ T7947] EXT4-fs (loop2): 1 truncate cleaned up [ 131.540054][ T7947] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,nobh,nodioread_nolock,journal_ioprio=0x0000000000000004,usrjquota=.noacl,norecovery,jqfmt=vfsv0,auto_da_alloc,,,errors=continue. Quota mode: writeback. [ 132.236431][ T8017] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1720'. [ 132.280524][ T8022] sctp: [Deprecated]: syz.3.1723 (pid 8022) Use of int in max_burst socket option. [ 132.280524][ T8022] Use struct sctp_assoc_value instead [ 132.446512][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.452850][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.564015][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1734'. [ 132.581860][ T8045] loop3: detected capacity change from 0 to 512 [ 132.588364][ T5133] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.650456][ T8045] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.678857][ T8045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.717629][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'. [ 132.741777][ T8045] EXT4-fs error (device loop3): xattr_find_entry:297: inode #15: comm syz.3.1732: corrupted xattr entries [ 132.746999][ T8056] loop0: detected capacity change from 0 to 8 [ 132.759832][ T8045] EXT4-fs (loop3): Remounting filesystem read-only [ 132.788785][ T8045] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 132.802617][ T8045] EXT4-fs (loop3): 1 orphan inode deleted [ 132.808707][ T8045] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,. Quota mode: none. [ 132.955134][ T5133] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 132.968061][ T5133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.982172][ T8056] SQUASHFS error: lzo decompression failed, data probably corrupt [ 133.006882][ T8056] SQUASHFS error: Failed to read block 0x1dd: -5 [ 133.023015][ T5133] usb 3-1: config 0 has no interface number 0 [ 133.051718][ T8056] SQUASHFS error: Unable to read metadata cache entry [1db] [ 133.060894][ T5133] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 133.079921][ T8056] SQUASHFS error: Unable to read inode 0xa7 [ 133.093708][ T5133] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.304961][ T5134] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.315103][ T5133] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 133.344613][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.363273][ T5133] usb 3-1: Product: syz [ 133.392172][ T5133] usb 3-1: Manufacturer: syz [ 133.408283][ T5133] usb 3-1: SerialNumber: syz [ 133.438894][ T5133] usb 3-1: config 0 descriptor?? [ 133.562129][ T8062] loop1: detected capacity change from 0 to 32768 [ 133.575201][ T5134] usb 4-1: Using ep0 maxpacket: 8 [ 133.593007][ T8062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1742 (8062) [ 133.624314][ T8062] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 133.643858][ T8062] BTRFS info (device loop1): turning on sync discard [ 133.653946][ T8062] BTRFS info (device loop1): setting nodatacow, compression disabled [ 133.673138][ T8078] loop0: detected capacity change from 0 to 8192 [ 133.682885][ T8062] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 133.698489][ T5134] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 133.714025][ T8062] BTRFS info (device loop1): trying to use backup root at mount time [ 133.715081][ T5134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.748642][ T5134] usb 4-1: config 0 has no interface number 0 [ 133.755238][ T5134] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 133.766680][ T5134] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.776730][ T8078] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 133.781406][ T5134] usb 4-1: config 0 interface 52 has no altsetting 0 [ 133.794468][ T8062] BTRFS info (device loop1): disabling tree log [ 133.813603][ T8062] BTRFS info (device loop1): enabling auto defrag [ 133.813948][ T8078] REISERFS (device loop0): using ordered data mode [ 133.835098][ T8062] BTRFS info (device loop1): enabling ssd optimizations [ 133.841940][ T8078] reiserfs: using flush barriers [ 133.843662][ T8062] BTRFS info (device loop1): max_inline at 0 [ 133.854194][ T8062] BTRFS info (device loop1): using free space tree [ 133.861316][ T8062] BTRFS info (device loop1): has skinny extents [ 133.875095][ T5134] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 133.882372][ T8078] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.885670][ T5134] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 133.909810][ T4609] usb 3-1: USB disconnect, device number 8 [ 133.911747][ T5134] usb 4-1: Manufacturer: syz [ 133.926030][ T5134] usb 4-1: config 0 descriptor?? [ 133.932486][ T8078] REISERFS (device loop0): checking transaction log (loop0) [ 133.956887][ T5132] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.965889][ T5134] hub 4-1:0.52: bad descriptor, ignoring hub [ 133.971919][ T5134] hub: probe of 4-1:0.52 failed with error -5 [ 133.982781][ T8078] REISERFS (device loop0): Using r5 hash to sort names [ 134.001069][ T8078] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 134.077470][ T155] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 134.099888][ T8062] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 134.116129][ T155] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 134.170278][ T8062] BTRFS warning (device loop1): couldn't read tree root [ 134.201935][ T5134] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input9 [ 134.203217][ T8062] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 134.228624][ T8062] BTRFS warning (device loop1): couldn't read tree root [ 134.306588][ T8062] BTRFS info (device loop1): clearing free space tree [ 134.314040][ T8062] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.345233][ T5132] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.368778][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.375629][ T8062] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.406691][ T5132] usb 5-1: config 0 descriptor?? [ 134.466139][ T5132] cp210x 5-1:0.0: cp210x converter detected [ 134.473717][ T5134] usb 4-1: USB disconnect, device number 10 [ 134.479749][ C1] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 134.543364][ T8062] BTRFS info (device loop1): creating free space tree [ 134.561074][ T8062] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.575399][ T8062] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.695147][ T4609] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.905052][ T5132] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 134.915255][ T5132] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 134.932349][ T5132] usb 5-1: cp210x converter now attached to ttyUSB0 [ 134.989179][ T4609] usb 1-1: Using ep0 maxpacket: 8 [ 135.002292][ T5132] usb 5-1: USB disconnect, device number 9 [ 135.008436][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.118702][ T5132] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.135328][ T4609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 135.159406][ T5132] cp210x 5-1:0.0: device disconnected [ 135.165803][ T4609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.191713][ T4609] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.398466][ T4609] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 135.422187][ T4609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.465247][ T4609] usb 1-1: Product: syz [ 135.469484][ T4609] usb 1-1: Manufacturer: syz [ 135.474249][ T4609] usb 1-1: SerialNumber: syz [ 135.506879][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 135.533317][ T4609] usb 1-1: config 0 descriptor?? [ 135.646097][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 135.774387][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 135.803823][ T4609] usb 1-1: USB disconnect, device number 4 [ 135.894256][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1779'. [ 135.903510][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1779'. [ 135.984999][ T4222] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 136.004734][ T8167] netlink: 'syz.1.1782': attribute type 10 has an invalid length. [ 136.048198][ T8167] team0: Port device macvlan1 added [ 136.136530][ T8117] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.353628][ T8188] loop2: detected capacity change from 0 to 256 [ 136.425251][ T4222] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 136.458697][ T4222] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.489115][ T8188] FAT-fs (loop2): Directory bread(block 64) failed [ 136.506198][ T8188] FAT-fs (loop2): Directory bread(block 65) failed [ 136.515423][ T4222] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 136.530008][ T8188] FAT-fs (loop2): Directory bread(block 66) failed [ 136.539086][ T8188] FAT-fs (loop2): Directory bread(block 67) failed [ 136.546474][ T8188] FAT-fs (loop2): Directory bread(block 68) failed [ 136.553176][ T8188] FAT-fs (loop2): Directory bread(block 69) failed [ 136.585877][ T8188] FAT-fs (loop2): Directory bread(block 70) failed [ 136.592822][ T8188] FAT-fs (loop2): Directory bread(block 71) failed [ 136.606356][ T8188] FAT-fs (loop2): Directory bread(block 72) failed [ 136.615629][ T4222] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.624918][ T8188] FAT-fs (loop2): Directory bread(block 73) failed [ 136.635528][ T4222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.665563][ T4222] usb 5-1: SerialNumber: syz [ 136.700665][ T8196] loop1: detected capacity change from 0 to 4096 [ 136.755169][ T8117] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.783052][ T8117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.824981][ T8117] usb 4-1: Product: syz [ 136.829217][ T8117] usb 4-1: Manufacturer: syz [ 136.848985][ T8117] usb 4-1: SerialNumber: syz [ 136.926389][ T8117] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.027530][ T4222] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 137.034324][ T8210] loop2: detected capacity change from 0 to 256 [ 137.053474][ T4222] usb 5-1: USB disconnect, device number 10 [ 137.119537][ T8210] FAT-fs (loop2): Directory bread(block 64) failed [ 137.141438][ T8210] FAT-fs (loop2): Directory bread(block 65) failed [ 137.150686][ T8210] FAT-fs (loop2): Directory bread(block 66) failed [ 137.157892][ T8210] FAT-fs (loop2): Directory bread(block 67) failed [ 137.164622][ T8210] FAT-fs (loop2): Directory bread(block 68) failed [ 137.171845][ T8210] FAT-fs (loop2): Directory bread(block 69) failed [ 137.179234][ T8210] FAT-fs (loop2): Directory bread(block 70) failed [ 137.219339][ T8210] FAT-fs (loop2): Directory bread(block 71) failed [ 137.251354][ T8210] FAT-fs (loop2): Directory bread(block 72) failed [ 137.265232][ T8210] FAT-fs (loop2): Directory bread(block 73) failed [ 137.339923][ T8216] loop1: detected capacity change from 0 to 4096 [ 137.437772][ T8216] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 137.450172][ T8216] ntfs3: loop1: Failed to load $Extend. [ 137.521584][ T4183] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 137.532180][ T4183] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 137.554358][ T8223] loop0: detected capacity change from 0 to 512 [ 137.636019][ T4609] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.649039][ T8223] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.671934][ T8229] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 137.716397][ T8223] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 137.786497][ T8223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 137.794649][ T8223] System zones: 0-2, 18-18, 34-35 [ 137.806398][ T8223] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 137.829663][ T8237] loop2: detected capacity change from 0 to 64 [ 137.840504][ T8238] loop1: detected capacity change from 0 to 8 [ 137.897069][ T8237] MINIX-fs: bad superblock [ 137.943788][ T8238] SQUASHFS error: lzo decompression failed, data probably corrupt [ 137.965347][ T8238] SQUASHFS error: Failed to read block 0x1dd: -5 [ 137.992067][ T8238] SQUASHFS error: Unable to read metadata cache entry [1db] [ 138.021979][ T8238] SQUASHFS error: Unable to read inode 0xa7 [ 138.053201][ T4611] usb 4-1: USB disconnect, device number 11 [ 138.386708][ T8273] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 138.685214][ T4609] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 138.693147][ T4609] ath9k_htc: Failed to initialize the device [ 138.719709][ T4611] usb 4-1: ath9k_htc: USB layer deinitialized [ 138.746762][ T8289] loop1: detected capacity change from 0 to 512 [ 138.822991][ T8289] EXT4-fs (loop1): Test dummy encryption mode enabled [ 138.845016][ T8289] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.855428][ T8293] netlink: 'syz.3.1840': attribute type 3 has an invalid length. [ 138.923950][ T8289] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.1837: corrupted xattr entries [ 138.967695][ T8298] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.985253][ T8289] EXT4-fs (loop1): Remounting filesystem read-only [ 138.991979][ T8289] EXT4-fs (loop1): 1 orphan inode deleted [ 139.032884][ T8289] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,. Quota mode: none. [ 139.139978][ T8281] loop0: detected capacity change from 0 to 32768 [ 139.233867][ T8275] loop2: detected capacity change from 0 to 32768 [ 139.297753][ T8281] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1834 (8281) [ 139.333605][ T8275] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 139.357648][ T8275] JBD2: Ignoring recovery information on journal [ 139.417462][ T8281] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 139.467699][ T8281] BTRFS info (device loop0): turning on sync discard [ 139.510821][ T8275] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.529053][ T8281] BTRFS info (device loop0): setting nodatacow, compression disabled [ 139.545021][ T8320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.591699][ T8281] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 139.648103][ T8275] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 139.666465][ T8281] BTRFS info (device loop0): trying to use backup root at mount time [ 139.714695][ T8281] BTRFS info (device loop0): disabling tree log [ 139.733543][ T8323] Cannot find del_set index 2 as target [ 139.776387][ T8281] BTRFS info (device loop0): enabling auto defrag [ 139.793531][ T8275] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 139.819699][ T8281] BTRFS info (device loop0): enabling ssd optimizations [ 139.891985][ T8281] BTRFS info (device loop0): max_inline at 0 [ 139.894919][ T8275] OCFS2: File system is now read-only. [ 139.903574][ T8275] (syz.2.1832,8275,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 139.912267][ T8281] BTRFS info (device loop0): using free space tree [ 139.953423][ T8281] BTRFS info (device loop0): has skinny extents [ 139.970284][ T8275] (syz.2.1832,8275,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 140.040590][ T8275] (syz.2.1832,8275,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 140.067517][ T8275] (syz.2.1832,8275,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 140.076618][ T8275] (syz.2.1832,8275,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 140.088234][ T8275] (syz.2.1832,8275,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 140.097091][ T8275] (syz.2.1832,8275,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 140.106336][ T8275] (syz.2.1832,8275,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 140.115218][ T8275] (syz.2.1832,8275,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 140.124493][ T8275] (syz.2.1832,8275,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 140.134013][ T8275] (syz.2.1832,8275,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 140.143401][ T8275] (syz.2.1832,8275,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 140.152540][ T8275] (syz.2.1832,8275,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 140.161900][ T8275] (syz.2.1832,8275,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 140.171757][ T8275] (syz.2.1832,8275,1):ocfs2_mknod:357 ERROR: status = -30 [ 140.179452][ T8275] (syz.2.1832,8275,1):ocfs2_mknod:502 ERROR: status = -30 [ 140.182353][ T6728] BTRFS warning (device loop0): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 140.187051][ T8275] (syz.2.1832,8275,1):ocfs2_mkdir:659 ERROR: status = -30 [ 140.242147][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 140.275807][ T8281] BTRFS warning (device loop0): failed to read root (objectid=2): -5 [ 140.317293][ T6728] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 140.402899][ T8281] BTRFS warning (device loop0): couldn't read tree root [ 140.429403][ T8281] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 140.463121][ T8281] BTRFS warning (device loop0): couldn't read tree root [ 140.579566][ T8281] BTRFS info (device loop0): clearing free space tree [ 140.597335][ T8281] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.655587][ T8281] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.774092][ T8281] BTRFS info (device loop0): creating free space tree [ 140.786004][ T8281] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.822245][ T8374] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.840338][ T8281] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.857330][ T8374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 140.908800][ T8374] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1859: corrupted xattr entries [ 140.950885][ T8374] EXT4-fs (loop2): Remounting filesystem read-only [ 140.994623][ T8374] EXT4-fs (loop2): 1 orphan inode deleted [ 141.039675][ T8374] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,. Quota mode: none. [ 141.348198][ T8402] binder: 8401:8402 ioctl c0046209 e0ffff00000000 returned -22 [ 141.358082][ T8397] Symlink component flag not implemented [ 141.366249][ T8397] Symlink component flag not implemented (7) [ 141.558298][ T8408] netlink: 3620 bytes leftover after parsing attributes in process `syz.4.1885'. [ 141.640675][ T8408] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1885'. [ 141.651169][ T8408] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1885'. [ 141.997567][ T8427] set_capacity_and_notify: 5 callbacks suppressed [ 141.997582][ T8427] loop3: detected capacity change from 0 to 4096 [ 142.220078][ T8432] loop1: detected capacity change from 0 to 8192 [ 142.260408][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 142.293483][ T8449] 9pnet: p9_fd_create_tcp (8449): problem connecting socket to 127.0.0.1 [ 142.314430][ T8432] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 142.347344][ T8455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1906'. [ 142.375114][ T8432] REISERFS (device loop1): using ordered data mode [ 142.381665][ T8432] reiserfs: using flush barriers [ 142.448816][ T8432] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.505279][ T8432] REISERFS (device loop1): checking transaction log (loop1) [ 142.524992][ T8432] REISERFS (device loop1): Using r5 hash to sort names [ 142.532781][ T8432] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 142.627203][ T8473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1915'. [ 142.734949][ T4609] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.125202][ T4609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.147678][ T8494] QAT: failed to copy from user. [ 143.153188][ T4609] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.337603][ T8504] xt_socket: unknown flags 0x50 [ 143.355596][ T4609] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 143.373998][ T4609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.398643][ T4609] usb 5-1: Product: syz [ 143.406020][ T4609] usb 5-1: Manufacturer: syz [ 143.410737][ T4609] usb 5-1: SerialNumber: syz [ 143.447490][ T4609] usb 5-1: config 0 descriptor?? [ 143.482316][ T8510] loop0: detected capacity change from 0 to 1024 [ 143.491547][ T4609] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 143.529405][ T4609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.585502][ T4609] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 143.596484][ T4609] usb 5-1: media controller created [ 143.614433][ T4609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.661637][ T8475] loop2: detected capacity change from 0 to 32768 [ 143.694094][ T8510] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 143.733154][ T4609] DVB: Unable to find symbol tda10046_attach() [ 143.741385][ T8475] [ 143.741385][ T8475] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.741385][ T8475] [ 143.797914][ T8510] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 39: comm syz.0.1933: bad entry in directory: rec_len is smaller than minimal - offset=7296, inode=0, rec_len=0, size=1024 fake=0 [ 143.797976][ T4609] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 143.798002][ T4609] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 143.840196][ T8510] EXT4-fs (loop0): Remounting filesystem read-only [ 143.921224][ T4191] [ 143.921224][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.921224][ T4191] [ 143.960744][ T4191] [ 143.960744][ T4191] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 143.960744][ T4191] [ 144.065009][ T4609] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 144.100654][ T4609] usb 5-1: USB disconnect, device number 11 [ 144.184874][ T8116] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.346605][ T8545] loop2: detected capacity change from 0 to 64 [ 144.454942][ T8116] usb 2-1: Using ep0 maxpacket: 8 [ 144.605314][ T8116] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 144.613451][ T8116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.639618][ T8116] usb 2-1: config 0 has no interface number 0 [ 144.646068][ T8116] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 144.658293][ T8116] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.671876][ T8116] usb 2-1: config 0 interface 52 has no altsetting 0 [ 144.713334][ T8559] netlink: 'syz.2.1957': attribute type 32 has an invalid length. [ 144.775203][ T8116] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 144.784291][ T8116] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 144.813104][ T8116] usb 2-1: Manufacturer: syz [ 144.820049][ T8116] usb 2-1: config 0 descriptor?? [ 144.866510][ T8116] hub 2-1:0.52: bad descriptor, ignoring hub [ 144.872575][ T8116] hub: probe of 2-1:0.52 failed with error -5 [ 144.880725][ T8571] netlink: 'syz.0.1961': attribute type 21 has an invalid length. [ 144.916477][ T8571] netlink: 'syz.0.1961': attribute type 6 has an invalid length. [ 144.924229][ T8571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1961'. [ 144.981300][ T8578] ipt_REJECT: TCP_RESET invalid for non-tcp [ 145.086713][ T8116] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input10 [ 145.101126][ T8584] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1969'. [ 145.166327][ T8584] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1969'. [ 145.180581][ T8584] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1969'. [ 145.203074][ T8589] netlink: 'syz.0.1970': attribute type 3 has an invalid length. [ 145.317452][ T8116] usb 2-1: USB disconnect, device number 9 [ 145.334907][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 145.492975][ T8600] loop0: detected capacity change from 0 to 4096 [ 145.649239][ T8600] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 145.674041][ T8600] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 145.695748][ T8600] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 145.751714][ T8617] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.764894][ T8600] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 145.866498][ T8600] ntfs: volume version 3.1. [ 145.945305][ T8625] device sit0 entered promiscuous mode [ 145.962624][ T8600] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 146.006490][ T8625] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 146.054540][ T8600] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 146.285715][ T8641] loop3: detected capacity change from 0 to 512 [ 146.596068][ T8655] loop4: detected capacity change from 0 to 4096 [ 146.752150][ T8670] __nla_validate_parse: 3 callbacks suppressed [ 146.752165][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2010'. [ 146.777792][ T8666] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2006'. [ 146.908442][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2010'. [ 147.155219][ T8679] xt_CONNSECMARK: invalid mode: 0 [ 147.185334][ T8686] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 147.222785][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2019'. [ 147.302716][ T8691] loop3: detected capacity change from 0 to 1764 [ 147.421793][ T8697] loop1: detected capacity change from 0 to 128 [ 147.451001][ T8682] loop2: detected capacity change from 0 to 4096 [ 147.558030][ T8701] device gtp0 entered promiscuous mode [ 147.864132][ T8682] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 147.939932][ T8682] ntfs3: loop2: Failed to load $Extend. [ 148.006207][ T8727] loop3: detected capacity change from 0 to 16 [ 148.033577][ T8729] x_tables: unsorted underflow at hook 3 [ 148.075956][ T8727] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.086091][ T8682] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 148.172418][ T8733] loop0: detected capacity change from 0 to 4096 [ 148.199899][ T4191] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 148.241629][ T4191] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 148.338860][ T8743] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.398573][ T8733] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 148.459831][ T8733] Remounting filesystem read-only [ 148.534710][ T4190] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 149.082719][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2057'. [ 150.101942][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2083'. [ 150.130721][ T8823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2083'. [ 150.575109][ T4609] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 150.755000][ T5143] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.831655][ T8850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2096'. [ 150.841573][ T4609] usb 2-1: Using ep0 maxpacket: 32 [ 150.929068][ T8852] loop3: detected capacity change from 0 to 128 [ 150.959697][ T8855] loop4: detected capacity change from 0 to 256 [ 150.992477][ T8852] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.005212][ T4609] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.026635][ T4609] usb 2-1: config 0 has no interface number 0 [ 151.032776][ T4609] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.043899][ T4609] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.125122][ T5143] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 151.138607][ T8852] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.246054][ T4609] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.275852][ T4609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.296077][ T4609] usb 2-1: Product: syz [ 151.300280][ T4609] usb 2-1: Manufacturer: syz [ 151.325290][ T4609] usb 2-1: SerialNumber: syz [ 151.325617][ T5143] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 151.349626][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.361241][ T5143] usb 1-1: Product: syz [ 151.366878][ T5143] usb 1-1: Manufacturer: syz [ 151.372051][ T5143] usb 1-1: SerialNumber: syz [ 151.385646][ T4609] usb 2-1: config 0 descriptor?? [ 151.436506][ T4609] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.655709][ T4609] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 151.665057][ T4609] quatech2: probe of 2-1:0.51 failed with error -90 [ 151.728306][ T8877] trusted_key: encrypted_key: hex blob is missing [ 151.871700][ T23] usb 2-1: USB disconnect, device number 10 [ 151.930395][ T5143] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.975122][ T5143] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.050868][ T5143] usb 1-1: USB disconnect, device number 5 [ 152.355567][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.525053][ T5132] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 152.609822][ T8913] loop4: detected capacity change from 0 to 256 [ 152.628587][ T8915] kAFS: unable to lookup cell '@mTsyz0' [ 152.684900][ T8913] exFAT-fs (loop4): bogus data start sector [ 152.715306][ T8913] exFAT-fs (loop4): failed to read boot sector [ 152.722005][ T8913] exFAT-fs (loop4): failed to recognize exfat type [ 152.866546][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 152.885038][ T5132] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 152.903035][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.962744][ T5132] usb 4-1: config 0 descriptor?? [ 153.006853][ T5132] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 153.130371][ T8935] sctp: [Deprecated]: syz.0.2139 (pid 8935) Use of int in max_burst socket option. [ 153.130371][ T8935] Use struct sctp_assoc_value instead [ 153.213276][ T8939] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.235259][ T23] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 153.455244][ T5132] gp8psk: usb in 128 operation failed. [ 153.470582][ T8945] loop4: detected capacity change from 0 to 512 [ 153.485395][ T5132] gp8psk: usb in 137 operation failed. [ 153.490886][ T5132] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 153.524268][ T5132] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 153.552320][ T5132] usb 4-1: USB disconnect, device number 12 [ 153.595074][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.611169][ T23] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.622151][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 153.630615][ T8945] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.632680][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.686017][ T23] hub 2-1:4.0: USB hub found [ 153.900320][ T8967] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.2150'. [ 153.911838][ T23] hub 2-1:4.0: 5 ports detected [ 153.923931][ T23] usb 2-1: selecting invalid altsetting 1 [ 153.944164][ T23] hub 2-1:4.0: Using single TT (err -22) [ 153.965362][ T23] hub 2-1:4.0: insufficient power available to use all downstream ports [ 154.115059][ T23] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 154.122026][ T23] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 154.206095][ T23] usb 2-1: USB disconnect, device number 11 [ 154.844910][ T5143] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.984116][ T9028] device syz_tun entered promiscuous mode [ 155.084987][ T5143] usb 4-1: Using ep0 maxpacket: 16 [ 155.097376][ T9034] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2187'. [ 155.205093][ T5143] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 155.213369][ T5143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.250755][ T5143] usb 4-1: config 0 has no interface number 0 [ 155.264834][ T9043] kernel read not supported for file / 7ç!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9043 comm: syz.0.2190) [ 155.313207][ T26] audit: type=1800 audit(1772668256.832:5): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2190" name=20019C1437B3CFFCC3A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=46781 res=0 errno=0 [ 155.475032][ T5143] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 155.480933][ T9049] loop2: detected capacity change from 0 to 4096 [ 155.484112][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.484134][ T5143] usb 4-1: Product: syz [ 155.534885][ T5143] usb 4-1: Manufacturer: syz [ 155.539563][ T5143] usb 4-1: SerialNumber: syz [ 155.550772][ T9049] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 155.577177][ T5143] usb 4-1: config 0 descriptor?? [ 155.627479][ T5143] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 155.633880][ T5143] usb 4-1: No valid video chain found. [ 155.700089][ T9062] loop0: detected capacity change from 0 to 2048 [ 155.738325][ T9049] ntfs3: loop2: failed to convert "c46c" to iso8859-9 [ 155.790702][ T9066] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.816578][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 155.855253][ T9062] Remounting filesystem read-only [ 155.864519][ T23] usb 4-1: USB disconnect, device number 13 [ 155.873393][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 155.911245][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 155.961636][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.007541][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.083734][ T9080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 156.086076][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.245284][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.268379][ T9080] CIFS mount error: No usable UNC path provided in device string! [ 156.268379][ T9080] [ 156.333047][ T9062] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.345320][ T9080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.361532][ T26] audit: type=1800 audit(1772668257.882:6): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2200" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 156.580231][ T9100] loop0: detected capacity change from 0 to 128 [ 156.765307][ T4611] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.813765][ T9112] [U] v3f"S/4:XTzWtlW= [ 156.834009][ T9112] [U] J"e:" [ 156.965402][ T9122] loop3: detected capacity change from 0 to 1024 [ 157.025137][ T4611] usb 3-1: Using ep0 maxpacket: 16 [ 157.044521][ T9128] netlink: 'syz.0.2232': attribute type 13 has an invalid length. [ 157.135240][ T4270] hfsplus: b-tree write err: -5, ino 25 [ 157.141041][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 157.165225][ T4611] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.185461][ T4270] hfsplus: b-tree write err: -5, ino 2 [ 157.191126][ T4611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.205446][ T4270] hfsplus: b-tree write err: -5, ino 26 [ 157.413711][ T4611] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.433785][ T4611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.454003][ T4611] usb 3-1: Product: syz [ 157.478824][ T4611] usb 3-1: Manufacturer: syz [ 157.483578][ T4611] usb 3-1: SerialNumber: syz [ 157.633491][ T9152] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 157.845378][ T4611] usb 3-1: 0:2 : does not exist [ 157.850379][ T4611] usb 3-1: unit 9 not found! [ 157.866553][ T9160] loop0: detected capacity change from 0 to 64 [ 157.914217][ T4611] usb 3-1: USB disconnect, device number 9 [ 158.070979][ T9165] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 158.145656][ T4342] udevd[4342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.404029][ T9153] loop1: detected capacity change from 0 to 32768 [ 158.588820][ T9153] XFS (loop1): Mounting V5 Filesystem [ 158.719883][ T9153] XFS (loop1): Ending clean mount [ 158.796126][ T9153] XFS (loop1): Quotacheck needed: Please wait. [ 158.984720][ T9153] XFS (loop1): Quotacheck: Done. [ 159.243853][ T9238] loop2: detected capacity change from 0 to 8 [ 159.417682][ T9233] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2278'. [ 159.428831][ T4183] XFS (loop1): Unmounting Filesystem [ 159.575263][ T9238] SQUASHFS error: Unable to read directory block [629:26] [ 160.298828][ T9251] loop2: detected capacity change from 0 to 4096 [ 160.432691][ T9251] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 160.833004][ T9277] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2277'. [ 160.961793][ T9282] tmpfs: Bad value for 'mpol' [ 161.048900][ T9285] ipt_CLUSTERIP: Please specify destination IP [ 161.191631][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2303'. [ 161.304072][ T9300] kernel read not supported for file / 7ç!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9300 comm: syz.3.2307) [ 161.325005][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2306'. [ 161.354833][ T26] audit: type=1800 audit(1772668262.872:7): pid=9300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2307" name=20019C1437B3CFFCC3A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48032 res=0 errno=0 [ 161.600804][ T9311] tmpfs: Bad value for 'mpol' [ 161.752568][ T9319] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.059541][ T8403] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.085123][ T5143] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.335106][ T5143] usb 3-1: Using ep0 maxpacket: 8 [ 162.435330][ T8403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.464894][ T8403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.495266][ T5143] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.515128][ T8403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.555011][ T8403] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.575052][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 162.594947][ T8403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.603038][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 162.638572][ T8403] usb 4-1: config 0 descriptor?? [ 162.643678][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 162.675824][ T8403] hub 4-1:0.0: USB hub found [ 162.681019][ T5143] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 162.701539][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 162.732828][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64 [ 162.895168][ T8403] hub 4-1:0.0: 14 ports detected [ 162.914995][ T8403] hub 4-1:0.0: insufficient power available to use all downstream ports [ 162.924481][ T5143] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 162.953939][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.989004][ T5143] usb 3-1: Product: syz [ 163.001258][ T5143] usb 3-1: Manufacturer: syz [ 163.023834][ T5143] usb 3-1: SerialNumber: syz [ 163.052988][ T5143] usb 3-1: config 0 descriptor?? [ 163.085925][ T9325] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 163.104997][ T8403] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 163.111372][ T8403] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 163.186955][ T8403] usb 4-1: USB disconnect, device number 14 [ 163.251333][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.352536][ T5143] usb 3-1: USB disconnect, device number 10 [ 163.457541][ T9337] loop0: detected capacity change from 0 to 32768 [ 163.539903][ T9337] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2324 (9337) [ 163.693369][ T9337] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.702837][ T4609] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.776094][ T9337] BTRFS info (device loop0): force zlib compression, level 3 [ 163.825168][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2337'. [ 163.845101][ T9337] BTRFS info (device loop0): force clearing of disk cache [ 163.852267][ T9337] BTRFS info (device loop0): setting nodatasum [ 163.964871][ T9337] BTRFS info (device loop0): allowing degraded mounts [ 163.971700][ T9337] BTRFS info (device loop0): enabling disk space caching [ 163.994939][ T4609] usb 2-1: Using ep0 maxpacket: 8 [ 164.114997][ T4609] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 164.132144][ T4609] usb 2-1: config 127 has no interface number 1 [ 164.150964][ T9373] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2341'. [ 164.160173][ T9337] BTRFS info (device loop0): disk space caching is enabled [ 164.175354][ T4609] usb 2-1: config 127 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.224843][ T4609] usb 2-1: config 127 interface 171 has no altsetting 0 [ 164.231836][ T4609] usb 2-1: config 127 interface 0 has no altsetting 0 [ 164.245617][ T9337] BTRFS info (device loop0): has skinny extents [ 164.285836][ T9375] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2342'. [ 164.360609][ T9375] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 164.407426][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 164.556440][ T4609] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 164.569760][ T9337] BTRFS info (device loop0): clearing free space tree [ 164.598479][ T9337] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.618695][ T4609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.649252][ T9337] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.711628][ T4609] usb 2-1: Product: syz [ 164.727768][ T4609] usb 2-1: Manufacturer: syz [ 164.763572][ T4609] usb 2-1: SerialNumber: syz [ 164.791272][ T9337] BTRFS info (device loop0): balance: start [ 164.815638][ T9337] BTRFS info (device loop0): balance: ended with status: 0 [ 165.037674][ T9410] overlayfs: missing 'lowerdir' [ 165.157090][ T4609] xr_serial 2-1:127.171: xr_serial converter detected [ 165.192640][ T4609] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 165.213804][ T4609] xr_serial: probe of ttyUSB0 failed with error -71 [ 165.284185][ T4609] usb 2-1: USB disconnect, device number 12 [ 165.323305][ T4609] xr_serial 2-1:127.171: device disconnected [ 165.878154][ T9446] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2366'. [ 165.935260][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2365'. [ 166.079218][ T9453] loop2: detected capacity change from 0 to 2048 [ 166.165235][ T9453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.491409][ T9475] Sensor A: ================= START STATUS ================= [ 166.560165][ T9475] Sensor A: Test Pattern: 75% Colorbar [ 166.590465][ T9475] Sensor A: Show Information: All [ 166.607266][ T9475] Sensor A: Vertical Flip: false [ 166.625111][ T9475] Sensor A: Horizontal Flip: false [ 166.630375][ T9475] Sensor A: Brightness: 128 [ 166.677045][ T9475] Sensor A: Contrast: 128 [ 166.681514][ T9475] Sensor A: Hue: -14 [ 166.714958][ T9475] Sensor A: Saturation: 128 [ 166.729802][ T9475] Sensor A: ================== END STATUS ================== [ 166.912090][ T9490] loop4: detected capacity change from 0 to 64 [ 167.069297][ T26] audit: type=1800 audit(1772668268.592:8): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2387" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 167.172764][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2394'. [ 167.383940][ T9517] program syz.3.2400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.513523][ T9520] comedi comedi4: bad chanlist[0]=0xfffffc01 chan=64513 range length=2 [ 168.257907][ T9560] xt_NFQUEUE: number of total queues is 0 [ 169.054913][ T9587] netlink: 'syz.4.2431': attribute type 21 has an invalid length. [ 169.146193][ T9565] loop2: detected capacity change from 0 to 32768 [ 169.248911][ T9565] JBD2: Ignoring recovery information on journal [ 169.409906][ T9594] netlink: 'syz.1.2434': attribute type 24 has an invalid length. [ 169.449236][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 169.468941][ T9565] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 169.616561][ T9565] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 169.616682][ T9565] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 169.692012][ T9597] loop0: detected capacity change from 0 to 64 [ 169.704896][ T5132] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.725298][ T9565] OCFS2: File system is now read-only. [ 169.745378][ T9565] (syz.2.2424,9565,1):ocfs2_setattr:1302 ERROR: status = -117 [ 169.804835][ T26] audit: type=1800 audit(1772668271.322:9): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2437" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 169.925506][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 169.945065][ T5132] usb 5-1: Using ep0 maxpacket: 8 [ 170.125454][ T5132] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.180245][ T9610] netlink: 'syz.0.2445': attribute type 6 has an invalid length. [ 170.205451][ T5132] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.226717][ T5132] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17520, setting to 1024 [ 170.391810][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2446'. [ 170.425317][ T5132] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 170.440189][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.460047][ T9619] loop1: detected capacity change from 0 to 128 [ 170.468684][ T5132] usb 5-1: Product: syz [ 170.481789][ T5132] usb 5-1: Manufacturer: syz [ 170.497657][ T5132] usb 5-1: SerialNumber: syz [ 170.536373][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2446'. [ 170.642833][ T9619] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 170.704107][ T9631] loop2: detected capacity change from 0 to 512 [ 170.718217][ T9619] FAT-fs (loop1): Filesystem has been set read-only [ 170.760824][ T9619] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 170.808840][ T9619] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 170.876187][ T9631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 170.895070][ T9631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 170.943621][ T9631] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.2454: Failed to acquire dquot type 1 [ 171.005865][ T9631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 171.040921][ T9631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.075113][ T5132] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.086011][ T9631] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.2454: Failed to acquire dquot type 1 [ 171.104969][ T5132] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 171.142140][ T9650] loop0: detected capacity change from 0 to 256 [ 171.148866][ T5132] usb 5-1: USB disconnect, device number 12 [ 171.226894][ T9631] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2454: bg 0: block 248: padding at end of block bitmap is not set [ 171.283314][ T9650] FAT-fs (loop0): Directory bread(block 64) failed [ 171.312686][ T9650] FAT-fs (loop0): Directory bread(block 65) failed [ 171.343419][ T9631] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 171.357276][ T9650] FAT-fs (loop0): Directory bread(block 66) failed [ 171.382213][ T9650] FAT-fs (loop0): Directory bread(block 67) failed [ 171.390269][ T9650] FAT-fs (loop0): Directory bread(block 68) failed [ 171.397617][ T9631] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 171.415454][ T9650] FAT-fs (loop0): Directory bread(block 69) failed [ 171.433305][ T9631] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 171.453242][ T9650] FAT-fs (loop0): Directory bread(block 70) failed [ 171.460728][ T9650] FAT-fs (loop0): Directory bread(block 71) failed [ 171.474891][ T9631] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.2454: Failed to acquire dquot type 1 [ 171.510104][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.526658][ T9650] FAT-fs (loop0): Directory bread(block 72) failed [ 171.533388][ T9650] FAT-fs (loop0): Directory bread(block 73) failed [ 171.566798][ T9631] EXT4-fs (loop2): 1 orphan inode deleted [ 171.600767][ T9631] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.685099][ T9631] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.720226][ T9663] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2468'. [ 172.279064][ T9684] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 172.437041][ T9693] loop2: detected capacity change from 0 to 512 [ 172.513482][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.539494][ T9693] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.564310][ T9693] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 172.589548][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.618077][ T9693] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 172.631285][ T9697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.639809][ T9693] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 172.655874][ T9693] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nombcache,noblock_validity,,errors=continue. Quota mode: none. [ 172.659850][ T9706] loop1: detected capacity change from 0 to 1024 [ 172.724378][ T9693] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 172.760886][ T9706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 172.806543][ T9706] System zones: 0-1, 3-36 [ 172.829115][ T9706] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2489: bad orphan inode 134217728 [ 172.835187][ T8403] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 172.883607][ T9706] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000101,debug,journal_dev=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 173.215148][ T8403] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 173.224364][ T8403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.241681][ T9721] loop1: detected capacity change from 0 to 256 [ 173.267538][ T8403] usb 5-1: config 0 descriptor?? [ 173.304946][ T9725] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 173.337002][ T8403] gspca_main: spca508-2.14.0 probing 8086:0110 [ 173.384390][ T9721] FAT-fs (loop1): Directory bread(block 64) failed [ 173.394033][ T9721] FAT-fs (loop1): Directory bread(block 65) failed [ 173.424458][ T9721] FAT-fs (loop1): Directory bread(block 66) failed [ 173.464957][ T9721] FAT-fs (loop1): Directory bread(block 67) failed [ 173.515559][ T9721] FAT-fs (loop1): Directory bread(block 68) failed [ 173.532399][ T9721] FAT-fs (loop1): Directory bread(block 69) failed [ 173.540611][ T9735] netlink: 'syz.0.2502': attribute type 3 has an invalid length. [ 173.573133][ T9721] FAT-fs (loop1): Directory bread(block 70) failed [ 173.600672][ T9735] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2502'. [ 173.601841][ T9721] FAT-fs (loop1): Directory bread(block 71) failed [ 173.648065][ T9721] FAT-fs (loop1): Directory bread(block 72) failed [ 173.675083][ T9721] FAT-fs (loop1): Directory bread(block 73) failed [ 173.734954][ T8403] gspca_spca508: reg_read err -71 [ 173.758306][ T8403] gspca_spca508: reg_read err -71 [ 173.787517][ T8403] gspca_spca508: reg_read err -71 [ 173.821554][ T8403] gspca_spca508: reg_read err -71 [ 173.846025][ T8403] gspca_spca508: reg write: error -71 [ 173.851603][ T8403] spca508: probe of 5-1:0.0 failed with error -71 [ 173.852458][ T9739] loop2: detected capacity change from 0 to 2048 [ 173.867462][ T9743] netlink: 'syz.3.2505': attribute type 2 has an invalid length. [ 173.895011][ T9743] netlink: 'syz.3.2505': attribute type 1 has an invalid length. [ 173.911087][ T8403] usb 5-1: USB disconnect, device number 13 [ 174.069821][ T9739] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.114056][ T9739] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.365660][ T9762] ipt_CLUSTERIP: Please specify an interface name [ 174.644860][ T9422] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.894980][ T9422] usb 5-1: Using ep0 maxpacket: 8 [ 174.935461][ T9747] loop0: detected capacity change from 0 to 32768 [ 175.035326][ T9422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.041410][ T9747] ialloc: diAlloc returned -5! [ 175.062194][ T9784] xt_l2tp: wrong L2TP version: 0 [ 175.068006][ T9422] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 175.285254][ T9422] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 175.311111][ T9422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.344332][ T9422] usb 5-1: Product: syz [ 175.363248][ T9422] usb 5-1: Manufacturer: syz [ 175.383498][ T9422] usb 5-1: SerialNumber: syz [ 175.416499][ T9422] usb 5-1: config 0 descriptor?? [ 175.605772][ T9802] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 175.628297][ T9804] device geneve2 entered promiscuous mode [ 175.903564][ T9422] usb 5-1: USB disconnect, device number 14 [ 176.480265][ T9846] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.514685][ T9846] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.530367][ T9846] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 176.555211][ T9852] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 176.594508][ T9846] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.615675][ T9846] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 176.622359][ T9846] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 176.683612][ T9855] netlink: 'syz.2.2561': attribute type 27 has an invalid length. [ 176.721476][ T9859] loop4: detected capacity change from 0 to 8 [ 176.764217][ T9846] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.800908][ T9859] SQUASHFS error: Failed to read block 0x8f: -5 [ 176.848446][ T9846] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 176.869744][ T9859] SQUASHFS error: Unable to read data cache entry [8f] [ 176.871586][ T9846] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 176.913874][ T9859] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 176.949183][ T9859] SQUASHFS error: Unable to read data cache entry [8f] [ 176.951747][ T9846] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 177.006244][ T9859] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 177.008559][ T9846] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 177.052586][ T9859] SQUASHFS error: Unable to read data cache entry [8f] [ 177.065124][ T9846] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 177.093915][ T9859] SQUASHFS error: Unable to read page, block 8f, size 1c00001 [ 177.103904][ T9846] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 177.144406][ T9846] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 177.149846][ T9859] SQUASHFS error: Failed to read block 0x8f: -5 [ 177.186220][ T9846] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 177.202143][ T9859] SQUASHFS error: Failed to read block 0x8f: -5 [ 177.223808][ T9846] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 177.232286][ T26] audit: type=1800 audit(1772668278.752:10): pid=9859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2563" name="file3" dev="loop4" ino=6 res=0 errno=0 [ 177.295074][ T9846] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 177.301718][ T9846] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 177.648920][ T9899] loop0: detected capacity change from 0 to 164 [ 177.715418][ T9899] ISOFS: unable to read i-node block [ 177.720825][ T9899] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 177.735983][ T9903] netlink: 'syz.1.2584': attribute type 9 has an invalid length. [ 177.790717][ T9899] ISOFS: unable to read i-node block [ 178.203829][ T9929] loop2: detected capacity change from 0 to 256 [ 178.252376][ T9929] exfat: Deprecated parameter 'namecase' [ 178.271599][ T9929] exfat: Deprecated parameter 'namecase' [ 178.290372][ T9934] netlink: 'syz.1.2599': attribute type 21 has an invalid length. [ 178.339242][ T9929] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 178.367692][ T9932] loop0: detected capacity change from 0 to 2048 [ 178.451480][ T9932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.709184][ T9879] loop3: detected capacity change from 0 to 32768 [ 178.831307][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2612'. [ 178.844994][ T9958] netlink: 'syz.2.2611': attribute type 1 has an invalid length. [ 178.852755][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 178.856536][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2612'. [ 178.892647][ T9879] ialloc: diAlloc returned -5! [ 179.234978][ T9977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.242264][ T9977] IPv6: NLM_F_CREATE should be set when creating new route [ 179.249571][ T9977] IPv6: NLM_F_CREATE should be set when creating new route [ 179.396985][ T9984] netlink: 'syz.2.2624': attribute type 30 has an invalid length. [ 179.469159][ T9984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2624'. [ 179.479462][ T9988] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2626'. [ 179.506198][ T9988] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.627352][ T9956] loop1: detected capacity change from 0 to 32768 [ 179.811637][ T9956] XFS (loop1): Mounting V5 Filesystem [ 179.823045][T10011] loop0: detected capacity change from 0 to 1764 [ 180.042622][T10020] loop2: detected capacity change from 0 to 1764 [ 180.065016][T10025] rdma_rxe: rxe creation allowed on top of a real device only [ 180.080928][ T9956] XFS (loop1): Ending clean mount [ 180.163920][ T4183] XFS (loop1): Unmounting Filesystem [ 180.199108][T10020] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 180.325614][ T26] audit: type=1326 audit(1772668281.842:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c1530799 code=0x7ffc0000 [ 180.435380][ T26] audit: type=1326 audit(1772668281.842:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c1530799 code=0x7ffc0000 [ 180.544763][ T26] audit: type=1326 audit(1772668281.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53c1530799 code=0x7ffc0000 [ 180.605068][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 180.614977][ T9422] Bluetooth: hci4: command 0x0406 tx timeout [ 180.615163][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 180.661753][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 180.667910][ T26] audit: type=1326 audit(1772668281.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10034 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53c1530799 code=0x7ffc0000 [ 180.803052][T10051] loop1: detected capacity change from 0 to 4096 [ 180.942938][T10063] loop2: detected capacity change from 0 to 4096 [ 180.972709][T10051] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 181.015236][T10051] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 181.029927][T10051] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 181.073185][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 181.082739][T10062] loop4: detected capacity change from 0 to 4096 [ 181.091106][T10063] ntfs: volume version 3.1. [ 181.105408][T10051] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 181.131999][T10063] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 181.166586][T10062] ntfs: volume version 3.1. [ 181.171285][T10051] ntfs: volume version 3.1. [ 181.643092][T10093] netlink: 'syz.3.2675': attribute type 15 has an invalid length. [ 181.714902][T10093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2675'. [ 181.806787][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'. [ 181.869317][T10110] netlink: 'syz.3.2682': attribute type 1 has an invalid length. [ 181.901208][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2682'. [ 182.057440][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'. [ 182.105778][T10117] loop2: detected capacity change from 0 to 4096 [ 182.182260][T10117] ntfs: volume version 3.1. [ 182.187116][T10129] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 182.238294][T10117] __ntfs_error: 48 callbacks suppressed [ 182.238309][T10117] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 182.312575][T10117] ntfs: (device loop2): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 182.611218][T10158] loop0: detected capacity change from 0 to 512 [ 182.654734][T10164] netlink: 'syz.1.2709': attribute type 79 has an invalid length. [ 182.722521][T10158] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.735048][T10158] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 182.768063][T10158] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2706: Failed to acquire dquot type 1 [ 182.804663][T10173] loop4: detected capacity change from 0 to 2048 [ 182.817302][T10158] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 182.827514][ T5141] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.835580][T10158] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 182.846645][T10158] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2706: Failed to acquire dquot type 1 [ 182.861297][T10177] loop1: detected capacity change from 0 to 512 [ 182.896730][T10158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2706: bg 0: block 248: padding at end of block bitmap is not set [ 182.916553][T10158] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 182.927103][T10173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.962500][T10158] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 183.000852][T10158] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 183.011547][T10158] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2706: Failed to acquire dquot type 1 [ 183.025679][T10177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.037919][T10158] EXT4-fs (loop0): 1 orphan inode deleted [ 183.043681][T10158] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.057108][T10177] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.080163][T10158] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.099799][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 183.149779][T10158] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 183.162291][T10158] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 183.172861][T10158] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.2706: Failed to acquire dquot type 1 [ 183.245232][ T5141] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 183.256536][T10187] netlink: 'syz.4.2716': attribute type 11 has an invalid length. [ 183.268940][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.327187][ T5141] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 183.710106][T10217] ieee802154 phy0 wpan0: encryption failed: -90 [ 183.772059][ T5141] gspca_nw80x: reg_r err -71 [ 183.776946][ T5141] nw80x: probe of 4-1:3.0 failed with error -71 [ 183.815997][ T5141] usb 4-1: USB disconnect, device number 15 [ 184.040780][T10229] loop0: detected capacity change from 0 to 2048 [ 184.135114][ T4255] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.159037][T10229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.425031][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 184.545198][ T4255] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 184.572083][ T4255] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.625027][ T9422] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 184.629355][ T4255] usb 3-1: config 0 has no interface number 0 [ 184.725163][ T4609] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 184.795065][ T4255] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 184.820569][T10276] loop1: detected capacity change from 0 to 2048 [ 184.835208][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.843238][ T4255] usb 3-1: Product: syz [ 184.867894][ T4255] usb 3-1: Manufacturer: syz [ 184.872547][ T4255] usb 3-1: SerialNumber: syz [ 184.885128][ T9422] usb 1-1: Using ep0 maxpacket: 16 [ 184.893048][T10276] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.913747][ T4255] usb 3-1: config 0 descriptor?? [ 184.926456][T10276] ext4 filesystem being mounted at /543/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.963923][T10278] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 185.015464][ T9422] usb 1-1: config 1 has an invalid interface number: 152 but max is 0 [ 185.029482][ T9422] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.041418][ T9422] usb 1-1: config 1 has no interface number 0 [ 185.055123][ T9422] usb 1-1: config 1 interface 152 altsetting 239 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.067108][ T9422] usb 1-1: config 1 interface 152 altsetting 239 endpoint 0xF has invalid wMaxPacketSize 0 [ 185.077997][ T9422] usb 1-1: config 1 interface 152 has no altsetting 0 [ 185.165594][ T4609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 185.179410][T10286] __nla_validate_parse: 3 callbacks suppressed [ 185.179425][T10286] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2763'. [ 185.196105][ T4609] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 185.205853][ T4255] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 185.205888][ T4255] usb 3-1: No valid video chain found. [ 185.243335][ T4609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.265269][ T9422] usb 1-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=7e.a8 [ 185.274750][ T4609] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.285149][ T9422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.293187][ T9422] usb 1-1: Product: syz [ 185.345211][ T9422] usb 1-1: Manufacturer: syz [ 185.350090][ T9422] usb 1-1: SerialNumber: syz [ 185.443498][ T5141] usb 3-1: USB disconnect, device number 11 [ 185.515278][ T4609] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 185.524996][ T4609] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 185.533096][ T4609] usb 5-1: Product: syz [ 185.538120][ T4609] usb 5-1: Manufacturer: syz [ 185.542741][ T4609] usb 5-1: SerialNumber: syz [ 185.556877][ T4609] usb 5-1: config 0 descriptor?? [ 185.607606][ T4609] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 185.621786][ T4609] kvaser_usb 5-1:0.0: Failed to initialize card, error -90 [ 185.635478][ T4609] kvaser_usb: probe of 5-1:0.0 failed with error -90 [ 185.719464][ T9422] safe_serial 1-1:1.152: safe_serial converter detected [ 185.732938][ T9422] safe_serial: probe of 1-1:1.152 failed with error -22 [ 185.753813][ T9422] usb 1-1: USB disconnect, device number 6 [ 185.821712][ T4609] usb 5-1: USB disconnect, device number 15 [ 186.134582][T10334] syz.3.2791 (10334): drop_caches: 0 [ 186.228518][T10343] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 186.922202][T10398] set_capacity_and_notify: 1 callbacks suppressed [ 186.922218][T10398] loop1: detected capacity change from 0 to 64 [ 187.032828][T10409] netlink: 'syz.4.2826': attribute type 3 has an invalid length. [ 187.367964][T10435] loop1: detected capacity change from 0 to 8 [ 187.395003][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.433491][T10441] syz.3.2841 uses obsolete (PF_INET,SOCK_PACKET) [ 187.444327][T10440] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1008285695) [ 187.457167][T10440] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 187.527881][T10443] loop0: detected capacity change from 0 to 1764 [ 187.544360][T10447] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2844'. [ 187.685118][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 187.814954][ T7] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 187.833240][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.855857][ T7] usb 3-1: config 0 descriptor?? [ 187.894932][ T4255] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.144987][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 188.154956][ T7] usb 3-1: string descriptor 0 read error: -71 [ 188.161389][ T7] usb 3-1: Found UVC 0.00 device (2833:0201) [ 188.206587][ T7] usb 3-1: No valid video chain found. [ 188.245392][ T7] usb 3-1: USB disconnect, device number 12 [ 188.293051][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 188.305151][ T4255] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.385179][ T4255] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 188.406158][ T4255] usb 1-1: config 13 has no interface number 0 [ 188.430429][ T4255] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 188.485248][ T4255] usb 1-1: config 13 interface 50 has no altsetting 0 [ 188.669335][ T4255] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 188.704900][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.734876][ T4255] usb 1-1: Product: syz [ 188.734969][T10495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.739060][ T4255] usb 1-1: Manufacturer: syz [ 188.794974][ T4255] usb 1-1: SerialNumber: syz [ 188.848584][T10443] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 189.000242][T10507] IPv6: NLM_F_REPLACE set, but no existing node found! [ 189.258233][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2882'. [ 189.267635][ T4255] usb 1-1: MIDIStreaming interface descriptor not found [ 189.329440][ T4255] usb 1-1: USB disconnect, device number 7 [ 189.412091][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.666038][T10535] loop2: detected capacity change from 0 to 16 [ 189.706710][T10535] erofs: (device loop2): mounted with root inode @ nid 36. [ 189.960031][T10520] loop1: detected capacity change from 0 to 32768 [ 190.041093][T10520] JBD2: Ignoring recovery information on journal [ 190.051439][T10552] loop3: detected capacity change from 0 to 128 [ 190.191523][T10520] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 190.271380][T10520] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 190.325035][T10520] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 190.371479][T10520] OCFS2: File system is now read-only. [ 190.427411][T10520] (syz.1.2883,10520,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 190.462578][T10520] (syz.1.2883,10520,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 190.483399][T10520] (syz.1.2883,10520,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 190.549398][T10520] (syz.1.2883,10520,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 190.585154][T10520] (syz.1.2883,10520,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 190.624468][T10520] (syz.1.2883,10520,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 190.656352][T10520] (syz.1.2883,10520,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 190.679527][T10520] (syz.1.2883,10520,0):ocfs2_symlink:1941 ERROR: status = -30 [ 190.722960][T10520] (syz.1.2883,10520,0):ocfs2_symlink:2065 ERROR: status = -30 [ 190.811648][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 191.180267][T10600] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2921'. [ 191.221576][T10600] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2921'. [ 191.251892][T10600] netlink: 'syz.2.2921': attribute type 4 has an invalid length. [ 191.814103][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'. [ 191.873624][T10645] loop3: detected capacity change from 0 to 256 [ 191.981060][T10650] netlink: 'syz.1.2944': attribute type 1 has an invalid length. [ 191.995068][T10645] FAT-fs (loop3): Directory bread(block 65296) failed [ 192.002457][T10645] FAT-fs (loop3): Directory bread(block 65297) failed [ 192.019647][T10650] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2944'. [ 192.039742][T10645] FAT-fs (loop3): Directory bread(block 65298) failed [ 192.086241][T10645] FAT-fs (loop3): Directory bread(block 65299) failed [ 192.093246][T10645] FAT-fs (loop3): Directory bread(block 65300) failed [ 192.185904][T10657] loop1: detected capacity change from 0 to 164 [ 192.195139][T10645] FAT-fs (loop3): Directory bread(block 65301) failed [ 192.202077][T10645] FAT-fs (loop3): Directory bread(block 65302) failed [ 192.245091][T10645] FAT-fs (loop3): Directory bread(block 65303) failed [ 192.262323][T10645] FAT-fs (loop3): Directory bread(block 65304) failed [ 192.306385][T10645] FAT-fs (loop3): Directory bread(block 65305) failed [ 192.427966][T10665] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54411 - 0 [ 192.520763][T10668] netlink: 'syz.2.2952': attribute type 1 has an invalid length. [ 192.545297][T10665] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54411 - 0 [ 192.594908][T10665] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54411 - 0 [ 192.627749][T10665] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54411 - 0 [ 192.676834][T10665] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 43963 - 0 [ 192.694968][T10665] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 43963 - 0 [ 192.703896][T10665] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 43963 - 0 [ 192.744922][T10665] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 43963 - 0 [ 192.753887][T10665] device geneve3 entered promiscuous mode [ 192.793308][T10671] loop2: detected capacity change from 0 to 4096 [ 192.885764][T10676] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.947308][T10671] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 193.020249][T10671] Remounting filesystem read-only [ 193.165401][T10683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.233559][T10683] device batadv_slave_0 entered promiscuous mode [ 193.287745][T10683] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 193.581522][T10703] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.685387][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 193.707274][T10707] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2971'. [ 193.716614][T10710] SET target dimension over the limit! [ 193.875931][T10713] user_cmd nlpid 1197 [ 193.888581][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.896454][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.142353][T10732] libceph: resolve 'c' (ret=-3): failed [ 194.251545][T10737] overlayfs: unrecognized mount option "\" or missing value [ 194.593350][T10753] loop1: detected capacity change from 0 to 512 [ 194.730756][T10762] netlink: 'syz.4.2997': attribute type 13 has an invalid length. [ 194.803537][T10753] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.2994: dx entry: limit 1024 != root limit 124 [ 194.815887][ T5132] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 194.825150][T10753] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2994: Corrupt directory, running e2fsck is recommended [ 194.876150][T10753] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 194.905020][T10753] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.2994: corrupted in-inode xattr [ 194.925906][T10753] EXT4-fs (loop1): Remounting filesystem read-only [ 194.932629][T10753] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2994: couldn't read orphan inode 15 (err -117) [ 195.020288][T10753] EXT4-fs (loop1): Remounting filesystem read-only [ 195.028660][T10753] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 195.069456][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'. [ 195.175422][ T5132] usb 4-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 195.285036][ T5132] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 195.312305][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 195.351089][ T5132] usb 4-1: Product: syz [ 195.395149][T10751] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.417097][ T5132] usbhid 4-1:15.0: fixing wrong optional hid class descriptors count [ 195.418079][T10786] loop4: detected capacity change from 0 to 64 [ 195.445587][ T5132] usbhid 4-1:15.0: can't add hid device: -22 [ 195.467361][ T5132] usbhid: probe of 4-1:15.0 failed with error -22 [ 195.652059][ T4255] usb 4-1: USB disconnect, device number 16 [ 195.874913][ T5132] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 196.100963][T10759] loop0: detected capacity change from 0 to 40427 [ 196.125481][ T5132] usb 2-1: Using ep0 maxpacket: 8 [ 196.162524][T10759] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x1ffff [ 196.245182][ T5132] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.283129][T10759] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 196.435101][ T5132] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 196.444185][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.464832][T10759] F2FS-fs (loop0): invalid crc value [ 196.474275][T10806] loop3: detected capacity change from 0 to 4096 [ 196.481530][ T5132] usb 2-1: Product: syz [ 196.489921][ T5132] usb 2-1: Manufacturer: syz [ 196.494564][ T5132] usb 2-1: SerialNumber: syz [ 196.504902][T10759] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.534180][ T5132] usb 2-1: config 0 descriptor?? [ 196.567128][T10806] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 196.578333][ T5132] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 196.584514][ T5132] usb 2-1: selecting invalid altsetting 1 [ 196.732915][T10759] F2FS-fs (loop0): Start checkpoint disabled! [ 196.795109][ T5132] gspca_stk014: init reg: 0x00 [ 196.800086][ T5132] stk014: probe of 2-1:0.0 failed with error -5 [ 196.825251][T10759] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 196.914601][T10759] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 197.012547][ T8117] usb 2-1: USB disconnect, device number 13 [ 197.280822][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 197.332598][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 198.166177][T10859] loop1: detected capacity change from 0 to 4096 [ 198.207922][T10863] loop4: detected capacity change from 0 to 256 [ 198.282304][T10867] loop3: detected capacity change from 0 to 1024 [ 198.338179][T10859] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 198.352894][T10863] FAT-fs (loop4): Directory bread(block 64) failed [ 198.376713][T10863] FAT-fs (loop4): Directory bread(block 65) failed [ 198.383453][T10863] FAT-fs (loop4): Directory bread(block 66) failed [ 198.426870][T10859] ntfs3: loop1: Failed to load $Extend. [ 198.453185][T10863] FAT-fs (loop4): Directory bread(block 67) failed [ 198.487257][ T154] hfsplus: b-tree write err: -5, ino 25 [ 198.492975][ T154] hfsplus: b-tree write err: -5, ino 4 [ 198.500203][T10863] FAT-fs (loop4): Directory bread(block 68) failed [ 198.511828][ T154] hfsplus: b-tree write err: -5, ino 2 [ 198.526402][T10863] FAT-fs (loop4): Directory bread(block 69) failed [ 198.545058][T10863] FAT-fs (loop4): Directory bread(block 70) failed [ 198.551728][T10863] FAT-fs (loop4): Directory bread(block 71) failed [ 198.613085][T10863] FAT-fs (loop4): Directory bread(block 72) failed [ 198.624958][T10863] FAT-fs (loop4): Directory bread(block 73) failed [ 198.863743][T10879] loop1: detected capacity change from 0 to 1024 [ 199.004924][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 199.093925][ T4270] hfsplus: b-tree write err: -5, ino 25 [ 199.116921][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 199.136088][ T4270] hfsplus: b-tree write err: -5, ino 2 [ 199.310865][T10884] loop4: detected capacity change from 0 to 8192 [ 199.424906][T10884] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 199.479108][T10884] REISERFS (device loop4): using ordered data mode [ 199.523383][T10884] reiserfs: using flush barriers [ 199.573557][T10884] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.626769][T10892] comedi comedi0: comedi_config --init_data is deprecated [ 199.635441][T10884] REISERFS (device loop4): checking transaction log (loop4) [ 199.654924][T10884] REISERFS (device loop4): Using r5 hash to sort names [ 199.661898][T10884] REISERFS (device loop4): using 3.5.x disk format [ 199.711366][T10884] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 199.843714][T10894] loop0: detected capacity change from 0 to 512 [ 199.951866][T10889] loop1: detected capacity change from 0 to 32768 [ 200.012912][T10894] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 200.136710][T10894] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.3061: bg 0: block 104: invalid block bitmap [ 200.156026][T10889] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 200.167517][T10885] loop3: detected capacity change from 0 to 40427 [ 200.255228][T10889] (syz.1.3057,10889,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 200.281968][T10894] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 200.325111][T10889] (syz.1.3057,10889,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 200.338371][T10894] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3061: invalid indirect mapped block 1 (level 1) [ 200.355423][T10885] F2FS-fs (loop3): invalid crc value [ 200.377018][T10889] (syz.1.3057,10889,0):ocfs2_mknod:298 ERROR: status = -2 [ 200.388367][T10885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.396073][T10889] (syz.1.3057,10889,0):ocfs2_mknod:502 ERROR: status = -2 [ 200.433918][T10894] EXT4-fs (loop0): 1 truncate cleaned up [ 200.443249][T10889] (syz.1.3057,10889,0):ocfs2_create:676 ERROR: status = -2 [ 200.482573][T10894] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.566344][ T4183] ocfs2: Unmounting device (7,1) on (node local) [ 200.584764][T10885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 200.640934][T10906] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3064'. [ 200.982609][T10916] loop4: detected capacity change from 0 to 1024 [ 201.042820][T10920] xt_addrtype: ipv6 does not support BROADCAST matching [ 201.057554][T10916] hfsplus: Filesystem is marked locked, mounting read-only. [ 201.094408][T10916] hfsplus: invalid catalog entry type in lookup [ 201.231336][T10923] mmap: syz.0.3073 (10923): VmData 37470208 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 201.292187][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3075'. [ 201.409562][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3076'. [ 201.444990][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3076'. [ 201.619823][T10939] device geneve2 entered promiscuous mode [ 202.525631][T10974] loop3: detected capacity change from 0 to 4096 [ 202.582769][T10974] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 202.683270][T10991] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 202.703019][T10974] ntfs3: loop3: failed to convert "c46c" to cp860 [ 202.716452][T10993] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 203.108446][T11003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.146748][T11009] netlink: 'syz.0.3115': attribute type 8 has an invalid length. [ 203.190295][T11009] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3115'. [ 203.462821][T11025] set_capacity_and_notify: 1 callbacks suppressed [ 203.462836][T11025] loop0: detected capacity change from 0 to 512 [ 203.563330][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3125'. [ 203.615503][T11034] loop2: detected capacity change from 0 to 64 [ 203.645586][T11025] EXT4-fs (loop0): Ignoring removed oldalloc option [ 203.652237][T11025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.745156][T11025] EXT4-fs (loop0): 1 truncate cleaned up [ 203.751016][T11025] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 203.856384][T11041] xt_bpf: check failed: parse error [ 204.249533][T11060] loop1: detected capacity change from 0 to 512 [ 204.331966][T11060] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.447263][T11067] loop0: detected capacity change from 0 to 64 [ 204.734111][T11073] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3144'. [ 204.798269][T11075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3145'. [ 204.887770][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3145'. [ 205.054655][T11048] loop4: detected capacity change from 0 to 32768 [ 205.357535][T11093] loop1: detected capacity change from 0 to 2048 [ 205.424286][T11093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.803765][T11111] 9pnet: Insufficient options for proto=fd [ 206.057283][T11123] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.102727][T11090] loop2: detected capacity change from 0 to 32768 [ 206.155096][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.191746][T11090] JBD2: Ignoring recovery information on journal [ 206.205973][T11126] tmpfs: Bad value for 'mpol' [ 206.382141][T11090] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 206.518448][T11090] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 206.585097][ T7] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 206.600647][ T7] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 206.614870][T11090] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 206.634827][ T7] usb 1-1: config 220 interface 0 has no altsetting 0 [ 206.662291][T11090] OCFS2: File system is now read-only. [ 206.694845][T11090] (syz.2.3153,11090,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 206.702824][T11090] (syz.2.3153,11090,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 206.737521][T11090] (syz.2.3153,11090,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 206.774906][T11090] (syz.2.3153,11090,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 206.815205][ T7] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.824417][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.833317][T11090] (syz.2.3153,11090,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 206.852674][T11090] (syz.2.3153,11090,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 206.874923][ T7] usb 1-1: Product: syz [ 206.879118][ T7] usb 1-1: Manufacturer: syz [ 206.883757][ T7] usb 1-1: SerialNumber: syz [ 206.889164][T11090] (syz.2.3153,11090,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 206.904876][T11090] (syz.2.3153,11090,0):ocfs2_symlink:1941 ERROR: status = -30 [ 206.912589][T11090] (syz.2.3153,11090,0):ocfs2_symlink:2065 ERROR: status = -30 [ 206.944969][T11149] capability: warning: `syz.4.3181' uses 32-bit capabilities (legacy support in use) [ 206.997483][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 207.275439][ T7] usb 1-1: USB disconnect, device number 8 [ 207.306178][T11161] loop4: detected capacity change from 0 to 512 [ 207.373224][T11161] EXT4-fs (loop4): Ignoring removed nobh option [ 207.405929][T11161] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 207.488648][T11161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.519433][T11161] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3188: bad orphan inode 15 [ 207.587621][T11161] ext4_test_bit(bit=14, block=18) = 1 [ 207.598380][T11161] is_bad_inode(inode)=0 [ 207.602657][T11161] NEXT_ORPHAN(inode)=1023 [ 207.626512][T11161] max_ino=32 [ 207.629772][T11161] i_nlink=0 [ 207.640472][T11161] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3188: bg 0: block 161: padding at end of block bitmap is not set [ 207.697285][T11161] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 207.721320][T11161] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 207.964973][ T5141] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 208.148698][T11198] tmpfs: Bad value for 'uid' [ 208.335077][ T5141] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 208.359823][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.391914][ T5141] usb 1-1: config 0 descriptor?? [ 208.456748][ T5141] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 208.885060][ T5141] gp8psk: usb in 137 operation failed. [ 208.890775][ T5141] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 208.912319][ T5141] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 208.955170][ T5141] usb 1-1: USB disconnect, device number 9 [ 209.104850][ T8403] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 209.126113][T11252] loop2: detected capacity change from 0 to 512 [ 209.152690][T11252] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.213188][T11252] EXT4-fs (loop2): 1 truncate cleaned up [ 209.227231][T11252] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,user_xattr,nolazytime,quota,,errors=continue. Quota mode: writeback. [ 209.308476][T11252] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 209.308476][T11252] SȘȞZ6' [ 209.343578][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 209.354517][T11256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3231'. [ 209.364447][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 209.365981][ T8403] usb 5-1: Using ep0 maxpacket: 16 [ 209.378491][T11256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3231'. [ 209.387919][T11256] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3231'. [ 209.500717][T11261] loop3: detected capacity change from 0 to 256 [ 209.605083][ T8403] usb 5-1: config 8 has an invalid interface number: 24 but max is 1 [ 209.628448][ T8403] usb 5-1: config 8 has an invalid interface number: 62 but max is 1 [ 209.640286][T11261] FAT-fs (loop3): Directory bread(block 64) failed [ 209.657073][T11261] FAT-fs (loop3): Directory bread(block 65) failed [ 209.666710][ T8403] usb 5-1: config 8 has no interface number 0 [ 209.684056][T11261] FAT-fs (loop3): Directory bread(block 66) failed [ 209.693064][ T8403] usb 5-1: config 8 has no interface number 1 [ 209.695054][T11261] FAT-fs (loop3): Directory bread(block 67) failed [ 209.713681][ T8403] usb 5-1: config 8 interface 24 has no altsetting 0 [ 209.725181][T11261] FAT-fs (loop3): Directory bread(block 68) failed [ 209.737803][ T8403] usb 5-1: config 8 interface 62 has no altsetting 0 [ 209.747707][T11261] FAT-fs (loop3): Directory bread(block 69) failed [ 209.776905][T11261] FAT-fs (loop3): Directory bread(block 70) failed [ 209.783470][T11261] FAT-fs (loop3): Directory bread(block 71) failed [ 209.826558][T11261] FAT-fs (loop3): Directory bread(block 72) failed [ 209.853096][T11278] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3242'. [ 209.863629][T11261] FAT-fs (loop3): Directory bread(block 73) failed [ 209.894206][T11278] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3242'. [ 209.995112][ T8403] usb 5-1: string descriptor 0 read error: -22 [ 210.001473][ T8403] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=96.97 [ 210.041819][ T8403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.081471][T11287] loop0: detected capacity change from 0 to 512 [ 210.122795][ T26] audit: type=1326 audit(1772668311.642:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054cc6799 code=0x7ffc0000 [ 210.145101][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.152933][ T8403] asix: probe of 5-1:8.24 failed with error -22 [ 210.179769][T11291] syz.1.3250 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 210.184374][ T8403] asix: probe of 5-1:8.62 failed with error -22 [ 210.247706][T11295] loop3: detected capacity change from 0 to 1024 [ 210.261794][T11287] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,. Quota mode: writeback. [ 210.274280][ T26] audit: type=1326 audit(1772668311.672:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054cc6799 code=0x7ffc0000 [ 210.297085][ T26] audit: type=1326 audit(1772668311.702:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3054cc6799 code=0x7ffc0000 [ 210.328773][T11287] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.358119][ T5141] usb 5-1: USB disconnect, device number 16 [ 210.380681][ T26] audit: type=1326 audit(1772668311.752:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054cc6799 code=0x7ffc0000 [ 210.397591][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 210.457145][ T1212] hfsplus: b-tree write err: -5, ino 25 [ 210.464080][ T1212] hfsplus: b-tree write err: -5, ino 4 [ 210.576711][ T1212] hfsplus: b-tree write err: -5, ino 2 [ 211.223880][T11342] loop3: detected capacity change from 0 to 4096 [ 211.243403][T11348] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 211.303589][T11348] team0: Port device wlan1 added [ 211.339909][T11342] ntfs3: loop3: ino=3, Correct links count -> 2. [ 211.357530][T11342] ntfs3: loop3: Failed to load $Volume. [ 211.405547][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.652076][T11363] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 211.676550][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 211.805899][ T7] usb 5-1: config 0 has an invalid descriptor of length 136, skipping remainder of the config [ 211.835067][ T4609] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 212.005316][ T7] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 212.024654][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.038116][ T7] usb 5-1: Product: syz [ 212.042439][ T7] usb 5-1: Manufacturer: syz [ 212.062242][ T7] usb 5-1: SerialNumber: syz [ 212.082845][ T7] usb 5-1: config 0 descriptor?? [ 212.115405][ T4609] usb 4-1: Using ep0 maxpacket: 8 [ 212.145989][ T7] cdc_ether 5-1:0.0: skipping garbage [ 212.151412][ T7] usb 5-1: bad CDC descriptors [ 212.177074][ T7] usb 5-1: unsupported MDLM descriptors [ 212.255160][ T4609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.388703][ T5141] usb 5-1: USB disconnect, device number 17 [ 212.457527][ T4609] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 212.481581][ T4609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.515310][ T4609] usb 4-1: Product: syz [ 212.519520][ T4609] usb 4-1: Manufacturer: syz [ 212.524129][ T4609] usb 4-1: SerialNumber: syz [ 212.575203][ T4609] usb 4-1: config 0 descriptor?? [ 212.784712][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'. [ 212.843021][ T8117] usb 4-1: USB disconnect, device number 17 [ 212.934647][T11404] loop2: detected capacity change from 0 to 32768 [ 213.122964][T11439] openvswitch: netlink: IP tunnel dst address not specified [ 213.284455][T11447] netlink: 'syz.0.3323': attribute type 21 has an invalid length. [ 213.590259][T11464] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 213.636777][T11464] overlayfs: overlapping lowerdir path [ 213.866832][T11482] delete_channel: no stack [ 213.927456][T11488] overlayfs: missing 'lowerdir' [ 214.134611][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 214.161772][T11500] tc_dump_action: action bad kind [ 214.203838][T11502] netlink: 'syz.1.3351': attribute type 10 has an invalid length. [ 214.267957][T11502] team0: Port device wlan1 added [ 214.440088][T11515] loop0: detected capacity change from 0 to 256 [ 214.502459][T11515] FAT-fs (loop0): Directory bread(block 64) failed [ 214.540722][T11515] FAT-fs (loop0): Directory bread(block 65) failed [ 214.569530][T11515] FAT-fs (loop0): Directory bread(block 66) failed [ 214.613528][T11516] loop4: detected capacity change from 0 to 4096 [ 214.644971][T11515] FAT-fs (loop0): Directory bread(block 67) failed [ 214.652367][T11515] FAT-fs (loop0): Directory bread(block 68) failed [ 214.671492][T11515] FAT-fs (loop0): Directory bread(block 69) failed [ 214.695000][T11515] FAT-fs (loop0): Directory bread(block 70) failed [ 214.718164][T11515] FAT-fs (loop0): Directory bread(block 71) failed [ 214.735974][T11516] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 214.762679][T11515] FAT-fs (loop0): Directory bread(block 72) failed [ 214.780501][T11515] FAT-fs (loop0): Directory bread(block 73) failed [ 214.801744][T11534] __nla_validate_parse: 2 callbacks suppressed [ 214.801758][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3365'. [ 214.840179][T11516] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 214.875171][T11516] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 214.910883][T11516] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 214.952298][T11537] netlink: 'syz.1.3367': attribute type 28 has an invalid length. [ 214.976452][T11516] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 215.008599][T11539] loop3: detected capacity change from 0 to 1024 [ 215.046549][T11541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3369'. [ 215.063476][T11516] ntfs: volume version 3.1. [ 215.081832][T11516] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 215.234355][T11551] loop3: detected capacity change from 0 to 512 [ 215.412988][T11559] loop2: detected capacity change from 0 to 4096 [ 215.504466][T11569] kernel profiling enabled (shift: 5) [ 215.575059][T11551] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 215.595211][T11575] loop4: detected capacity change from 0 to 8 [ 215.610562][T11577] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.623600][T11551] ext4 filesystem being mounted at /666/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.695916][T11575] SQUASHFS error: xz decompression failed, data probably corrupt [ 215.735167][T11575] SQUASHFS error: Failed to read block 0x108: -5 [ 215.735287][T11551] Quota error (device loop3): find_tree_dqentry: Getting block too big (67108869 >= 6) [ 215.745429][T11575] SQUASHFS error: Unable to read metadata cache entry [106] [ 215.768870][T11551] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 215.785166][T11551] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.3373: Failed to acquire dquot type 0 [ 215.793162][T11575] SQUASHFS error: Unable to read inode 0x0 [ 215.854960][ T4609] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 216.052727][T11592] loop1: detected capacity change from 0 to 512 [ 216.081481][T11594] tmpfs: Bad value for 'mpol' [ 216.110229][T11598] loop2: detected capacity change from 0 to 1024 [ 216.124941][ T4609] usb 1-1: Using ep0 maxpacket: 8 [ 216.173341][T11592] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 216.252351][T11592] ext4 filesystem being mounted at /715/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.325280][ T4609] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.367122][T11592] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 3: comm syz.1.3393: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 216.415584][ T4609] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.435879][ T4609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.526237][T11621] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3405'. [ 216.625271][ T4609] usb 1-1: New USB device found, idVendor=10f5, idProduct=1200, bcdDevice= 0.40 [ 216.634362][ T4609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.673308][ T4609] usb 1-1: Product: syz [ 216.677667][ T4609] usb 1-1: Manufacturer: syz [ 216.682751][ T4609] usb 1-1: SerialNumber: syz [ 216.692856][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.776976][T11637] netlink: 'syz.2.3412': attribute type 29 has an invalid length. [ 216.814916][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 216.834613][T11637] netlink: 'syz.2.3412': attribute type 29 has an invalid length. [ 216.856288][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 216.993469][T11649] x_tables: unsorted entry at hook 3 [ 217.070312][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 217.125234][ T4609] usb 1-1: 0:1 : does not exist [ 217.130578][ T4609] usb 1-1: 0:2 : does not exist [ 217.146483][ T4609] usb 1-1: 0:3 : does not exist [ 217.160741][ T4609] usb 1-1: 0:4 : does not exist [ 217.205003][ T4609] usb 1-1: USB disconnect, device number 10 [ 217.213577][T11663] QAT: failed to copy from user cfg_data. [ 217.467112][T11681] binder: binder_mmap: 11680 200000001000-20000000b000 bad vm_flags failed -1 [ 217.587675][T11689] netlink: 'syz.2.3439': attribute type 1 has an invalid length. [ 217.626225][T11689] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.3439'. [ 217.705068][ T8403] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 217.771458][T11695] trusted_key: encrypted_key: keyword 'newU_5' not recognized [ 217.805471][ T5141] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 218.061293][T11705] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 218.066151][ T8403] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 218.104998][ T8403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.164988][ T5141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.178504][ T8403] usb 4-1: config 0 descriptor?? [ 218.204993][ T5141] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 218.248705][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.455045][ T5141] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 218.483386][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.508756][ T5141] usb 1-1: Product: syz [ 218.541033][ T5141] usb 1-1: Manufacturer: syz [ 218.554928][ T5141] usb 1-1: SerialNumber: syz [ 218.564699][ T5141] usb 1-1: config 0 descriptor?? [ 218.659681][ T8403] usb 4-1: Cannot set MAC address [ 218.669503][ T8403] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 218.710630][ T8403] usb 4-1: USB disconnect, device number 18 [ 218.835051][ T5141] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 218.843997][ T5141] usb 1-1: No valid video chain found. [ 218.884365][ T4173] udevd[4173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.942086][T11739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3464'. [ 218.954580][T11740] xt_TCPMSS: Only works on TCP SYN packets [ 219.050174][ T5141] usb 1-1: USB disconnect, device number 11 [ 219.114096][T11748] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 219.452872][T11767] loop3: detected capacity change from 0 to 256 [ 219.507523][T11773] libceph: resolve '. [ 219.507523][T11773] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 219.507523][T11773] ' (ret=-3): failed [ 219.695359][T11784] loop0: detected capacity change from 0 to 64 [ 219.754365][T11784] hfs: unable to locate alternate MDB [ 219.774979][T11784] hfs: continuing without an alternate MDB [ 219.802551][ T26] audit: type=1800 audit(1772668321.322:19): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3484" name="bus" dev="loop0" ino=21 res=0 errno=0 [ 219.881715][ T154] [ 219.884181][ T154] ====================================================== [ 219.891215][ T154] WARNING: possible circular locking dependency detected [ 219.898257][ T154] syzkaller #0 Not tainted [ 219.902689][ T154] ------------------------------------------------------ [ 219.909718][ T154] kworker/u4:2/154 is trying to acquire lock: [ 219.915808][ T154] ffff88805b2d4878 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 219.926626][ T154] [ 219.926626][ T154] but task is already holding lock: [ 219.934006][ T154] ffff88807bb500b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 219.943521][ T154] [ 219.943521][ T154] which lock already depends on the new lock. [ 219.943521][ T154] [ 219.953932][ T154] [ 219.953932][ T154] the existing dependency chain (in reverse order) is: [ 219.962966][ T154] [ 219.962966][ T154] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 219.971084][ T154] __mutex_lock_common+0x1e3/0x2400 [ 219.976831][ T154] mutex_lock_nested+0x17/0x20 [ 219.982139][ T154] hfs_find_init+0x15b/0x1d0 [ 219.987264][ T154] hfs_extend_file+0x35d/0x13f0 [ 219.992663][ T154] hfs_bmap_reserve+0x103/0x420 [ 219.998066][ T154] hfs_cat_create+0x204/0x8e0 [ 220.003277][ T154] hfs_mkdir+0x68/0xe0 [ 220.007900][ T154] vfs_mkdir+0x387/0x570 [ 220.012688][ T154] do_mkdirat+0x1df/0x5b0 [ 220.017552][ T154] __x64_sys_mkdirat+0x85/0x90 [ 220.022861][ T154] do_syscall_64+0x4c/0xa0 [ 220.027821][ T154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.034253][ T154] [ 220.034253][ T154] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 220.043488][ T154] __lock_acquire+0x2c42/0x7d10 [ 220.048898][ T154] lock_acquire+0x19e/0x400 [ 220.053938][ T154] __mutex_lock_common+0x1e3/0x2400 [ 220.059675][ T154] mutex_lock_nested+0x17/0x20 [ 220.064986][ T154] hfs_extend_file+0xfb/0x13f0 [ 220.070291][ T154] hfs_bmap_reserve+0x103/0x420 [ 220.075685][ T154] __hfs_ext_write_extent+0x1fa/0x470 [ 220.081608][ T154] hfs_ext_write_extent+0x17b/0x200 [ 220.087353][ T154] hfs_write_inode+0xd8/0xa20 [ 220.092720][ T154] __writeback_single_inode+0x6c3/0xda0 [ 220.098806][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 220.104568][ T154] wb_writeback+0x45d/0xbe0 [ 220.109616][ T154] wb_workfn+0x43a/0xf20 [ 220.114430][ T154] process_one_work+0x85f/0x1010 [ 220.119911][ T154] worker_thread+0xaa6/0x1290 [ 220.125134][ T154] kthread+0x436/0x520 [ 220.129759][ T154] ret_from_fork+0x1f/0x30 [ 220.134718][ T154] [ 220.134718][ T154] other info that might help us debug this: [ 220.134718][ T154] [ 220.144969][ T154] Possible unsafe locking scenario: [ 220.144969][ T154] [ 220.152460][ T154] CPU0 CPU1 [ 220.157837][ T154] ---- ---- [ 220.163243][ T154] lock(&tree->tree_lock#2/1); [ 220.168140][ T154] lock(&HFS_I(tree->inode)->extents_lock); [ 220.176693][ T154] lock(&tree->tree_lock#2/1); [ 220.184102][ T154] lock(&HFS_I(tree->inode)->extents_lock); [ 220.190105][ T154] [ 220.190105][ T154] *** DEADLOCK *** [ 220.190105][ T154] [ 220.198265][ T154] 3 locks held by kworker/u4:2/154: [ 220.203487][ T154] #0: ffff888142b8d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 220.214131][ T154] #1: ffffc90001ea7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 220.226013][ T154] #2: ffff88807bb500b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 220.236014][ T154] [ 220.236014][ T154] stack backtrace: [ 220.241932][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 220.249413][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.259492][ T154] Workqueue: writeback wb_workfn (flush-7:0) [ 220.265525][ T154] Call Trace: [ 220.268827][ T154] [ 220.271770][ T154] dump_stack_lvl+0x188/0x250 [ 220.276480][ T154] ? load_image+0x400/0x400 [ 220.281010][ T154] ? show_regs_print_info+0x20/0x20 [ 220.286235][ T154] ? print_circular_bug+0x12b/0x1a0 [ 220.291456][ T154] check_noncircular+0x296/0x330 [ 220.296408][ T154] ? look_up_lock_class+0x71/0x110 [ 220.301551][ T154] ? add_chain_block+0x940/0x940 [ 220.306506][ T154] ? lockdep_lock+0xf1/0x1f0 [ 220.311132][ T154] ? deref_stack_reg+0xd0/0x120 [ 220.316010][ T154] ? mark_lock+0x94/0x320 [ 220.320351][ T154] ? _find_first_zero_bit+0xce/0xf0 [ 220.325567][ T154] __lock_acquire+0x2c42/0x7d10 [ 220.330452][ T154] ? verify_lock_unused+0x140/0x140 [ 220.335674][ T154] ? stack_trace_save+0xa6/0xf0 [ 220.340554][ T154] ? stack_trace_snprint+0xf0/0xf0 [ 220.345689][ T154] ? check_noncircular+0x189/0x330 [ 220.350826][ T154] ? add_chain_block+0x940/0x940 [ 220.355782][ T154] lock_acquire+0x19e/0x400 [ 220.360308][ T154] ? hfs_extend_file+0xfb/0x13f0 [ 220.365305][ T154] ? __lock_acquire+0x28ac/0x7d10 [ 220.370354][ T154] ? __might_sleep+0xf0/0xf0 [ 220.374967][ T154] ? read_lock_is_recursive+0x10/0x10 [ 220.380364][ T154] ? hfs_extend_file+0xfb/0x13f0 [ 220.385353][ T154] __mutex_lock_common+0x1e3/0x2400 [ 220.390586][ T154] ? hfs_extend_file+0xfb/0x13f0 [ 220.395545][ T154] ? mark_lock+0x94/0x320 [ 220.399893][ T154] ? verify_lock_unused+0x140/0x140 [ 220.405105][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 220.411108][ T154] ? __rwlock_init+0x140/0x140 [ 220.415896][ T154] ? mutex_lock_io_nested+0x60/0x60 [ 220.421139][ T154] ? lockdep_hardirqs_on+0x94/0x140 [ 220.426362][ T154] mutex_lock_nested+0x17/0x20 [ 220.431185][ T154] hfs_extend_file+0xfb/0x13f0 [ 220.436015][ T154] ? __mutex_trylock_common+0x155/0x260 [ 220.441588][ T154] ? hfs_get_block+0xc50/0xc50 [ 220.446372][ T154] ? writeback_sb_inodes+0xa4e/0x1680 [ 220.451755][ T154] ? wb_workfn+0x43a/0xf20 [ 220.456185][ T154] ? hfs_find_init+0x15b/0x1d0 [ 220.461020][ T154] ? __mutex_lock_common+0x465/0x2400 [ 220.466419][ T154] ? memset+0x1e/0x40 [ 220.470421][ T154] ? hfs_brec_find+0x197/0x500 [ 220.475244][ T154] hfs_bmap_reserve+0x103/0x420 [ 220.480129][ T154] __hfs_ext_write_extent+0x1fa/0x470 [ 220.485516][ T154] hfs_ext_write_extent+0x17b/0x200 [ 220.490751][ T154] ? verify_lock_unused+0x140/0x140 [ 220.496013][ T154] ? hfs_ext_keycmp+0x310/0x310 [ 220.500923][ T154] ? writeback_sb_inodes+0x418/0x1680 [ 220.506327][ T154] hfs_write_inode+0xd8/0xa20 [ 220.511035][ T154] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 220.516432][ T154] ? __writeback_single_inode+0x471/0xda0 [ 220.522180][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 220.527231][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 220.532274][ T154] ? __rwlock_init+0x140/0x140 [ 220.537075][ T154] __writeback_single_inode+0x6c3/0xda0 [ 220.542650][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 220.547894][ T154] ? queue_io+0x550/0x550 [ 220.552248][ T154] ? rcu_is_watching+0x11/0xa0 [ 220.557025][ T154] wb_writeback+0x45d/0xbe0 [ 220.561568][ T154] ? rcu_lock_release+0x20/0x20 [ 220.566441][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 220.572463][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 220.577691][ T154] wb_workfn+0x43a/0xf20 [ 220.581977][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 220.587728][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 220.593733][ T154] ? read_lock_is_recursive+0x10/0x10 [ 220.599137][ T154] ? try_to_wake_up+0x6cf/0x1050 [ 220.604107][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 220.609332][ T154] process_one_work+0x85f/0x1010 [ 220.614299][ T154] ? worker_detach_from_pool+0x240/0x240 [ 220.619980][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 220.625286][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 220.630339][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 220.635918][ T154] ? wq_worker_running+0x97/0x170 [ 220.640980][ T154] worker_thread+0xaa6/0x1290 [ 220.645714][ T154] kthread+0x436/0x520 [ 220.649820][ T154] ? rcu_lock_release+0x20/0x20 [ 220.654698][ T154] ? kthread_blkcg+0xd0/0xd0 [ 220.659307][ T154] ret_from_fork+0x1f/0x30 [ 220.663752][ T154] [ 220.710616][ T154] hfs: new node 0 already hashed? [ 220.723678][ T154] ------------[ cut here ]------------ [ 220.735518][ T154] WARNING: CPU: 0 PID: 154 at fs/hfs/bnode.c:530 hfs_bnode_create+0x3d1/0x450 [ 220.744540][ T154] Modules linked in: [ 220.751776][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 220.759697][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.776298][ T154] Workqueue: writeback wb_workfn (flush-7:0) [ 220.783265][ T154] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 220.793285][ T154] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 220.816524][ T154] RSP: 0018:ffffc90001ea6e90 EFLAGS: 00010246 [ 220.822656][ T154] RAX: 000000000000001f RBX: ffff88807bb50000 RCX: 05ec61c6b062e900 [ 220.832211][ T4609] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.841978][ T154] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 220.851563][ T154] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 220.862023][ T154] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 220.871661][ T154] R13: ffff88807bb500e0 R14: ffff888025717000 R15: dffffc0000000000 [ 220.882939][ T154] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 220.894157][ T154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.903778][ T154] CR2: 0000200000001000 CR3: 0000000064817000 CR4: 00000000003506f0 [ 220.913070][ T154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.923254][ T154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.932798][ T154] Call Trace: [ 220.938140][ T154] [ 220.941154][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 220.947961][ T154] hfs_bmap_alloc+0x5b8/0x670 [ 220.952725][ T154] ? hfs_bmap_reserve+0x420/0x420 [ 220.959737][ T154] ? rcu_is_watching+0x11/0xa0 [ 220.964565][ T154] hfs_btree_inc_height+0xfd/0xac0 [ 220.971315][ T154] ? hfs_brec_insert+0x6f6/0xbd0 [ 220.978319][ T154] ? hfs_brec_insert+0xbd0/0xbd0 [ 220.984259][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 220.990896][ T154] hfs_brec_insert+0x744/0xbd0 [ 220.997756][ T154] ? hfs_brec_keylen+0x350/0x350 [ 221.002785][ T154] __hfs_ext_write_extent+0x2a1/0x470 [ 221.011030][ T154] hfs_ext_write_extent+0x17b/0x200 [ 221.018185][ T154] ? verify_lock_unused+0x140/0x140 [ 221.023517][ T154] ? hfs_ext_keycmp+0x310/0x310 [ 221.029770][ T154] ? writeback_sb_inodes+0x418/0x1680 [ 221.037421][ T154] hfs_write_inode+0xd8/0xa20 [ 221.042317][ T154] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 221.049203][ T154] ? __writeback_single_inode+0x471/0xda0 [ 221.057076][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 221.062248][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 221.068641][ T154] ? __rwlock_init+0x140/0x140 [ 221.073548][ T154] __writeback_single_inode+0x6c3/0xda0 [ 221.081066][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 221.088902][ T4609] usb 5-1: Using ep0 maxpacket: 8 [ 221.094219][ T154] ? queue_io+0x550/0x550 [ 221.101101][ T154] ? rcu_is_watching+0x11/0xa0 [ 221.107590][ T154] wb_writeback+0x45d/0xbe0 [ 221.112228][ T154] ? rcu_lock_release+0x20/0x20 [ 221.120064][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.127930][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 221.133216][ T154] wb_workfn+0x43a/0xf20 [ 221.139529][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 221.146960][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.153052][ T154] ? read_lock_is_recursive+0x10/0x10 [ 221.160700][ T154] ? try_to_wake_up+0x6cf/0x1050 [ 221.170364][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 221.175877][ T154] process_one_work+0x85f/0x1010 [ 221.180931][ T154] ? worker_detach_from_pool+0x240/0x240 [ 221.187469][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 221.192887][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 221.198225][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 221.203885][ T154] ? wq_worker_running+0x97/0x170 [ 221.209317][ T4609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.219627][ T154] worker_thread+0xaa6/0x1290 [ 221.224717][ T4609] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEF, skipping [ 221.235672][ T154] kthread+0x436/0x520 [ 221.239840][ T154] ? rcu_lock_release+0x20/0x20 [ 221.244975][ T154] ? kthread_blkcg+0xd0/0xd0 [ 221.249696][ T4609] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.262867][ T154] ret_from_fork+0x1f/0x30 [ 221.267549][ T154] [ 221.270655][ T154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.277949][ T154] CPU: 0 PID: 154 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 221.285415][ T154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.295497][ T154] Workqueue: writeback wb_workfn (flush-7:0) [ 221.301547][ T154] Call Trace: [ 221.304850][ T154] [ 221.307797][ T154] dump_stack_lvl+0x188/0x250 [ 221.312515][ T154] ? show_regs_print_info+0x20/0x20 [ 221.317740][ T154] ? load_image+0x400/0x400 [ 221.322261][ T154] panic+0x2e5/0x810 [ 221.326185][ T154] ? bpf_jit_dump+0xd0/0xd0 [ 221.330720][ T154] ? ret_from_fork+0x1f/0x30 [ 221.335331][ T154] ? hfs_bnode_create+0x3d1/0x450 [ 221.340383][ T154] __warn+0x248/0x2b0 [ 221.344387][ T154] ? hfs_bnode_create+0x3d1/0x450 [ 221.349464][ T154] report_bug+0x1b7/0x2e0 [ 221.353829][ T154] handle_bug+0x3a/0x70 [ 221.358008][ T154] exc_invalid_op+0x16/0x40 [ 221.362545][ T154] asm_exc_invalid_op+0x16/0x20 [ 221.367425][ T154] RIP: 0010:hfs_bnode_create+0x3d1/0x450 [ 221.373095][ T154] Code: 97 3f 8a 89 ee e8 6f 65 82 07 e9 57 fd ff ff e8 a5 c4 49 ff 4c 89 ef e8 7d 7a 96 07 48 c7 c7 40 98 3f 8a 89 ee e8 4f 65 82 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 63 fc ff ff 4c [ 221.392725][ T154] RSP: 0018:ffffc90001ea6e90 EFLAGS: 00010246 [ 221.398920][ T154] RAX: 000000000000001f RBX: ffff88807bb50000 RCX: 05ec61c6b062e900 [ 221.406925][ T154] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 221.414911][ T154] RBP: 0000000000000000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 221.422908][ T154] R10: dffffc0000000000 R11: ffffed10172067b0 R12: 0000000000000000 [ 221.430903][ T154] R13: ffff88807bb500e0 R14: ffff888025717000 R15: dffffc0000000000 [ 221.438912][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 221.444141][ T154] hfs_bmap_alloc+0x5b8/0x670 [ 221.448838][ T154] ? hfs_bmap_reserve+0x420/0x420 [ 221.453888][ T154] ? rcu_is_watching+0x11/0xa0 [ 221.458664][ T154] hfs_btree_inc_height+0xfd/0xac0 [ 221.463796][ T154] ? hfs_brec_insert+0x6f6/0xbd0 [ 221.468760][ T154] ? hfs_brec_insert+0xbd0/0xbd0 [ 221.473731][ T154] ? do_raw_spin_unlock+0x11d/0x230 [ 221.478961][ T154] hfs_brec_insert+0x744/0xbd0 [ 221.483741][ T154] ? hfs_brec_keylen+0x350/0x350 [ 221.488711][ T154] __hfs_ext_write_extent+0x2a1/0x470 [ 221.494107][ T154] hfs_ext_write_extent+0x17b/0x200 [ 221.499325][ T154] ? verify_lock_unused+0x140/0x140 [ 221.504540][ T154] ? hfs_ext_keycmp+0x310/0x310 [ 221.509435][ T154] ? writeback_sb_inodes+0x418/0x1680 [ 221.514830][ T154] hfs_write_inode+0xd8/0xa20 [ 221.519537][ T154] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 221.524932][ T154] ? __writeback_single_inode+0x471/0xda0 [ 221.530671][ T154] ? __lock_acquire+0x7d10/0x7d10 [ 221.535723][ T154] ? do_raw_spin_lock+0x128/0x2f0 [ 221.540793][ T154] ? __rwlock_init+0x140/0x140 [ 221.545597][ T154] __writeback_single_inode+0x6c3/0xda0 [ 221.551158][ T154] writeback_sb_inodes+0xa4e/0x1680 [ 221.556381][ T154] ? queue_io+0x550/0x550 [ 221.560738][ T154] ? rcu_is_watching+0x11/0xa0 [ 221.565521][ T154] wb_writeback+0x45d/0xbe0 [ 221.570057][ T154] ? rcu_lock_release+0x20/0x20 [ 221.574930][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.580945][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 221.586161][ T154] wb_workfn+0x43a/0xf20 [ 221.590434][ T154] ? inode_wait_for_writeback+0x220/0x220 [ 221.596186][ T154] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 221.602228][ T154] ? read_lock_is_recursive+0x10/0x10 [ 221.607615][ T154] ? try_to_wake_up+0x6cf/0x1050 [ 221.612781][ T154] ? _raw_spin_unlock_irq+0x1f/0x40 [ 221.618006][ T154] process_one_work+0x85f/0x1010 [ 221.622984][ T154] ? worker_detach_from_pool+0x240/0x240 [ 221.628638][ T154] ? lockdep_hardirqs_off+0x70/0x100 [ 221.633951][ T154] ? _raw_spin_lock_irq+0xb7/0xf0 [ 221.638994][ T154] ? _raw_spin_lock_irqsave+0x100/0x100 [ 221.644587][ T154] ? wq_worker_running+0x97/0x170 [ 221.649666][ T154] worker_thread+0xaa6/0x1290 [ 221.654389][ T154] kthread+0x436/0x520 [ 221.658484][ T154] ? rcu_lock_release+0x20/0x20 [ 221.663355][ T154] ? kthread_blkcg+0xd0/0xd0 [ 221.667966][ T154] ret_from_fork+0x1f/0x30 [ 221.672417][ T154] [ 221.675769][ T154] Kernel Offset: disabled [ 221.680105][ T154] Rebooting in 86400 seconds..