last executing test programs: 4.470344068s ago: executing program 0 (id=3206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.310914133s ago: executing program 0 (id=3210): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000000c0)={0x10001, 0x770000, 0x8, 0x0, 0x1c, "000000000000040000000017000c00"}) 3.995991483s ago: executing program 0 (id=3214): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0xb00, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0xfffffff8}}}}}, 0x0) 3.700187443s ago: executing program 0 (id=3219): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x623, &(0x7f0000001140)="$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") creat(&(0x7f00000004c0)='./file1\x00', 0x32) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) 3.620862895s ago: executing program 1 (id=3220): ftruncate(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone3(&(0x7f0000000380)={0x200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 3.312854255s ago: executing program 2 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.298509285s ago: executing program 1 (id=3225): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000", 0x4}, {&(0x7f0000001480)="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", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2.980216305s ago: executing program 2 (id=3227): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0) 2.928782057s ago: executing program 1 (id=3229): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) ioctl$TCSETA(r0, 0x8925, 0x0) 2.553204729s ago: executing program 0 (id=3231): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x9716, &(0x7f0000012ec0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000880)=ANY=[], 0xbfe, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) 2.473045451s ago: executing program 1 (id=3232): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f000000bc40)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x1, 0x700, &(0x7f00000011c0)="$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") open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 2.143848682s ago: executing program 3 (id=3236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000000000e700000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001e0"], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060aff0400000000000000000a0000110900010073797a31000000002400048020000180070001006374000014000280080002400000000e08000140000000140900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.042261105s ago: executing program 1 (id=3237): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x2000) 1.912509029s ago: executing program 3 (id=3239): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b63, 0x3) 1.860222031s ago: executing program 4 (id=3240): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) exit(0xf9) write$apparmor_exec(r0, 0x0, 0x0) 1.744943435s ago: executing program 3 (id=3241): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@multicast1, 0x4e1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x200000004, 0x40000000007, 0x6811220b, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@private0, 0x3502, 0x2, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.643059937s ago: executing program 3 (id=3242): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000100)=ANY=[], 0x1, 0x6190, &(0x7f0000002900)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') 939.98564ms ago: executing program 4 (id=3243): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) 842.588813ms ago: executing program 4 (id=3244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ca8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 802.354644ms ago: executing program 2 (id=3245): setuid(0xee01) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007800)=[{{&(0x7f0000005c00)={0xa, 0x4e22, 0x9, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000006d80)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}}], 0x1, 0x24000000) 753.350806ms ago: executing program 4 (id=3246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x55, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 700.988788ms ago: executing program 1 (id=3247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b7570000004000280070007"], 0x74}}, 0x10) 658.429889ms ago: executing program 0 (id=3248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x34, r1, 0x1, 0x170bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000007}, 0x40040) 640.117049ms ago: executing program 2 (id=3249): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd0, &(0x7f0000000000), &(0x7f0000000240)=0x4) 551.545972ms ago: executing program 4 (id=3250): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 494.615944ms ago: executing program 2 (id=3251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 426.301867ms ago: executing program 3 (id=3252): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100) 290.79754ms ago: executing program 2 (id=3253): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000000940)=ANY=[], 0xf0, 0x629d, &(0x7f0000000bc0)="$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") setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)=""/209, 0xd1) 241.931272ms ago: executing program 3 (id=3254): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=3255): write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") unlink(&(0x7f0000000140)='./file3\x00') kernel console output (not intermixed with test programs): 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.715104][ T4696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 249.727391][ T9662] loop2: detected capacity change from 0 to 256 [ 249.760794][ T4696] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.797206][ T9662] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.842847][ T4696] usb 4-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 249.895110][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2126'. [ 249.904939][ T4696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.935434][ T4696] usb 4-1: config 0 descriptor?? [ 249.967295][ T9636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.999470][ T9668] loop0: detected capacity change from 0 to 256 [ 250.066299][ T9668] FAT-fs (loop0): Directory bread(block 64) failed [ 250.080818][ T9668] FAT-fs (loop0): Directory bread(block 65) failed [ 250.087664][ T9668] FAT-fs (loop0): Directory bread(block 66) failed [ 250.094365][ T9668] FAT-fs (loop0): Directory bread(block 67) failed [ 250.101105][ T9668] FAT-fs (loop0): Directory bread(block 68) failed [ 250.108260][ T9668] FAT-fs (loop0): Directory bread(block 69) failed [ 250.115057][ T9668] FAT-fs (loop0): Directory bread(block 70) failed [ 250.121712][ T9668] FAT-fs (loop0): Directory bread(block 71) failed [ 250.128489][ T9668] FAT-fs (loop0): Directory bread(block 72) failed [ 250.135275][ T9668] FAT-fs (loop0): Directory bread(block 73) failed [ 250.163454][ T9] hfsplus: b-tree write err: -5, ino 25 [ 250.173125][ T9] hfsplus: b-tree write err: -5, ino 4 [ 250.178731][ T9] hfsplus: b-tree write err: -5, ino 2 [ 250.433608][ T4696] hid (null): unknown global tag 0xa3 [ 250.452734][ T4696] logitech-djreceiver 0003:046D:C53F.001F: unexpected long global item [ 250.489641][ T4696] logitech-djreceiver 0003:046D:C53F.001F: logi_dj_probe: parse failed [ 250.521693][ T9678] loop0: detected capacity change from 0 to 1024 [ 250.532183][ T4696] logitech-djreceiver: probe of 0003:046D:C53F.001F failed with error -22 [ 250.648136][ T4295] usb 4-1: USB disconnect, device number 12 [ 251.272251][ T9677] loop4: detected capacity change from 0 to 32768 [ 251.435266][ T9677] XFS (loop4): Mounting V5 Filesystem [ 251.504914][ T9677] XFS (loop4): Ending clean mount [ 251.529534][ T4295] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 251.561813][ T4295] XFS (loop4): Unmount and run xfs_repair [ 251.584119][ T4295] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 251.617302][ T4295] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 251.627196][ T4295] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 251.636521][ T4295] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 251.646482][ T4295] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 251.663004][ T4295] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 251.673592][ T4295] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.694001][ T4295] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 251.712125][ T4295] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 251.728949][ T9677] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 251.773089][ T9677] XFS (loop4): Failed to initialize disk quotas. [ 251.886728][ T4199] XFS (loop4): Unmounting Filesystem [ 251.907287][ T9690] loop0: detected capacity change from 0 to 40427 [ 251.926229][ T9698] loop1: detected capacity change from 0 to 32768 [ 252.000331][ T9690] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 252.043452][ T9690] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 252.095002][ T9690] F2FS-fs (loop0): invalid crc value [ 252.110699][ T9698] JFS: metapage_get_blocks failed [ 252.141028][ T9698] ERROR: (device loop1): release_metapage: write_one_page() failed [ 252.141028][ T9698] [ 252.155259][ T9690] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 252.212946][ T9698] ERROR: (device loop1): remounting filesystem as read-only [ 252.258484][ T9722] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 252.328582][ T9722] ntfs3: loop3: Failed to load $Extend. [ 252.378241][ T277] ERROR: (device loop1): diUpdatePMap: the iag is outside the map [ 252.378241][ T277] [ 252.500116][ T9690] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 252.518731][ T9690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.735035][ T4193] attempt to access beyond end of device [ 252.735035][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 253.160180][ T9752] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.234360][ T9752] EXT4-fs (loop1): 1 truncate cleaned up [ 253.240087][ T9752] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 253.279004][ T9750] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22de60d6, utbl_chksum : 0xe619d30d) [ 254.080937][ T9789] set_capacity_and_notify: 4 callbacks suppressed [ 254.080956][ T9789] loop0: detected capacity change from 0 to 512 [ 254.232010][ T9789] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 254.312473][ T9808] loop4: detected capacity change from 0 to 1764 [ 254.324971][ T9789] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.2177: Unimplemented hash flags: 0x0001 [ 254.337504][ T9789] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2177: Corrupt directory, running e2fsck is recommended [ 254.459232][ T9810] loop1: detected capacity change from 0 to 512 [ 254.477875][ T9805] loop3: detected capacity change from 0 to 4096 [ 254.560859][ T9805] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 254.610487][ T9805] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 254.673998][ T9810] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 254.681839][ T9810] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 254.748262][ T9821] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.787432][ T9810] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #13: comm syz.1.2188: iget: bad i_size value: 12154757448730 [ 254.850324][ T9810] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2188: couldn't read orphan inode 13 (err -117) [ 254.890239][ T9810] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x0000000000000002,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.grpquota,nolazytime,,errors=continue. Quota mode: writeback. [ 254.967941][ T9800] loop2: detected capacity change from 0 to 32768 [ 255.014198][ T9829] sp0: Synchronizing with TNC [ 255.234472][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.240843][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.368452][ T9800] XFS (loop2): Mounting V5 Filesystem [ 255.409631][ T9855] loop4: detected capacity change from 0 to 128 [ 255.592967][ T9800] XFS (loop2): Ending clean mount [ 255.629481][ T9800] XFS (loop2): Quotacheck needed: Please wait. [ 255.881861][ T9800] XFS (loop2): Quotacheck: Done. [ 255.911705][ T9860] loop1: detected capacity change from 0 to 4096 [ 255.975791][ T4195] XFS (loop2): Unmounting Filesystem [ 255.990645][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 256.048533][ T9860] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 256.164311][ T9860] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 256.191801][ T5208] kernel write not supported for file /media6 (pid: 5208 comm: kworker/0:16) [ 256.381612][ T4189] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 256.416716][ T4189] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 256.470230][ T9875] loop0: detected capacity change from 0 to 4096 [ 256.525388][ T9875] __ntfs_warning: 12 callbacks suppressed [ 256.525405][ T9875] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 256.582137][ T9850] loop3: detected capacity change from 0 to 32768 [ 256.722341][ T9875] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 256.735172][ T9850] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2203 (9850) [ 256.762314][ T9875] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 256.786784][ T9875] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 256.838179][ T9875] ntfs: volume version 3.1. [ 256.851893][ T9850] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 256.919710][ T9850] BTRFS info (device loop3): using free space tree [ 256.934725][ T9875] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 256.962645][ T9850] BTRFS info (device loop3): has skinny extents [ 257.043251][ T9875] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 257.176621][ T4193] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 257.188205][ T9899] loop2: detected capacity change from 0 to 4096 [ 257.215518][ T9899] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 257.343880][ T9916] FAT-fs (loop4): Unrecognized mount option "shortname=wknnt" or missing value [ 257.431744][ T9850] BTRFS info (device loop3): enabling ssd optimizations [ 257.541159][ T9909] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 257.560842][ T9909] REISERFS (device loop1): using ordered data mode [ 257.602340][ T9909] reiserfs: using flush barriers [ 257.613670][ T4260] ntfs3: loop2: ntfs3_write_inode r=1a failed, -22. [ 257.650955][ T4195] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 257.672398][ T9909] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 257.714007][ T4195] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 257.717157][ T4182] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop3 scanned by udevd (4182) [ 257.720934][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 257.742255][ T5208] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 257.760510][ T9909] REISERFS (device loop1): checking transaction log (loop1) [ 257.806506][ T9909] REISERFS (device loop1): Using r5 hash to sort names [ 257.822484][ T9909] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 257.859617][ T9909] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 258.022485][ T5208] usb 5-1: Using ep0 maxpacket: 32 [ 258.174650][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.199772][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.259651][ T9930] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 258.269796][ T5208] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.321536][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.391033][ T5208] usb 5-1: config 0 descriptor?? [ 258.433828][ T5208] hub 5-1:0.0: USB hub found [ 258.448767][ T9930] ntfs3: loop2: failed to convert "076c" to iso8859-5 [ 258.515180][ T9930] ntfs3: loop2: ino=5, "/" directory corrupted [ 258.557761][ T9940] exfat: Deprecated parameter 'utf8' [ 258.564128][ T9940] exfat: Deprecated parameter 'utf8' [ 258.623184][ T9940] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdc00, utbl_chksum : 0xe619d30d) [ 258.652433][ T5208] hub 5-1:0.0: 1 port detected [ 258.882486][ T5208] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 258.901562][ T5208] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 258.984293][ T9954] hfsplus: bad catalog entry type [ 259.032514][ T5208] usbhid 5-1:0.0: can't add hid device: -71 [ 259.038707][ T5208] usbhid: probe of 5-1:0.0 failed with error -71 [ 259.081463][ T154] hfsplus: b-tree write err: -5, ino 25 [ 259.089110][ T154] hfsplus: b-tree write err: -5, ino 4 [ 259.098866][ T154] hfsplus: b-tree write err: -5, ino 2 [ 259.112382][ T5208] usb 5-1: USB disconnect, device number 21 [ 259.155259][ T9966] set_capacity_and_notify: 5 callbacks suppressed [ 259.155275][ T9966] loop0: detected capacity change from 0 to 64 [ 259.265044][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2251'. [ 259.289016][ T9966] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 259.406727][ T9974] netlink: 'syz.3.2252': attribute type 3 has an invalid length. [ 259.497642][ T9979] loop3: detected capacity change from 0 to 16 [ 259.515167][ T9980] loop4: detected capacity change from 0 to 8 [ 259.573009][ T9980] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 259.596033][ T9979] erofs: (device loop3): mounted with root inode @ nid 36. [ 259.651783][ T9979] attempt to access beyond end of device [ 259.651783][ T9979] loop3: rw=0, want=15300821032, limit=16 [ 259.700462][ T9979] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 259.749906][ T9984] attempt to access beyond end of device [ 259.749906][ T9984] loop3: rw=0, want=15300821032, limit=16 [ 259.751576][ T9984] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 259.906826][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 260.050665][T10001] loop3: detected capacity change from 0 to 64 [ 260.158650][T10010] loop4: detected capacity change from 0 to 164 [ 260.262639][T10011] loop2: detected capacity change from 0 to 1024 [ 260.267848][T10010] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 260.408481][T10011] hfsplus: bad catalog entry type [ 260.489865][T10023] loop4: detected capacity change from 0 to 1024 [ 260.520309][T10024] loop1: detected capacity change from 0 to 4096 [ 260.619252][T10028] loop0: detected capacity change from 0 to 2048 [ 260.627397][T10031] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.642717][T10023] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 260.708117][T10024] NILFS (loop1): nilfs_sufile_do_free: segment 7 is already clean [ 260.728146][T10023] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 260.837621][T10028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.952076][ T5203] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 261.131014][T10048] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2286'. [ 261.352266][ T5203] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.371604][ T5203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.404112][T10057] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 261.429924][ T5203] usb 4-1: config 0 descriptor?? [ 261.497579][ T5203] cp210x 4-1:0.0: cp210x converter detected [ 261.559477][T10067] loop4: detected capacity change from 0 to 256 [ 261.718613][T10067] FAT-fs (loop4): Directory bread(block 64) failed [ 261.739660][T10067] FAT-fs (loop4): Directory bread(block 65) failed [ 261.750926][T10067] FAT-fs (loop4): Directory bread(block 66) failed [ 261.766883][T10067] FAT-fs (loop4): Directory bread(block 67) failed [ 261.778925][T10067] FAT-fs (loop4): Directory bread(block 68) failed [ 261.796286][T10067] FAT-fs (loop4): Directory bread(block 69) failed [ 261.809278][T10067] FAT-fs (loop4): Directory bread(block 70) failed [ 261.826403][T10067] FAT-fs (loop4): Directory bread(block 71) failed [ 261.839003][T10067] FAT-fs (loop4): Directory bread(block 72) failed [ 261.893341][T10067] FAT-fs (loop4): Directory bread(block 73) failed [ 261.910326][ T5203] usb 4-1: cp210x converter now attached to ttyUSB0 [ 262.112644][ T5203] usb 4-1: USB disconnect, device number 13 [ 262.150137][ T5203] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.175432][ T5203] cp210x 4-1:0.0: device disconnected [ 262.431551][T10091] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 262.469188][T10091] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 262.564239][T10098] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.749884][T10102] netlink: 'syz.2.2311': attribute type 1 has an invalid length. [ 262.809660][T10101] EXT4-fs (loop4): Ignoring removed nobh option [ 262.828485][T10101] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 262.882068][T10101] ext4 filesystem being mounted at /466/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.973973][T10104] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 262.993156][T10109] exfat: Deprecated parameter 'namecase' [ 263.012083][T10109] exfat: Deprecated parameter 'namecase' [ 263.102156][T10109] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 263.386140][T10113] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.491077][T10113] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.674403][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2325'. [ 263.729903][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 263.742415][T10131] netlink: 'syz.4.2325': attribute type 18 has an invalid length. [ 263.781475][T10129] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 263.847983][T10129] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 263.909358][T10137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.023373][T10138] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 264.064871][T10138] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.351822][ T4709] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 264.405540][T10151] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2334'. [ 264.466079][T10149] set_capacity_and_notify: 9 callbacks suppressed [ 264.466094][T10149] loop2: detected capacity change from 0 to 4096 [ 264.504754][T10123] loop3: detected capacity change from 0 to 32768 [ 264.557683][T10149] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 264.582210][T10149] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 264.612351][T10149] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 264.629467][T10136] loop0: detected capacity change from 0 to 40427 [ 264.659206][T10123] XFS (loop3): Mounting V5 Filesystem [ 264.689141][T10136] F2FS-fs (loop0): invalid crc value [ 264.697151][T10149] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 264.710654][T10149] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 264.724487][T10149] ntfs: volume version 3.1. [ 264.730990][T10149] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 264.742941][ T4709] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.742969][ T4709] usb 5-1: config 0 has no interface number 0 [ 264.743004][ T4709] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.743034][ T4709] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.743058][ T4709] usb 5-1: config 0 interface 1 has no altsetting 0 [ 264.743112][ T4709] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 264.755539][T10149] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 264.768527][ T4709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.774370][ T4709] usb 5-1: config 0 descriptor?? [ 264.832591][T10149] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 264.854939][T10136] F2FS-fs (loop0): Found nat_bits in checkpoint [ 264.917383][T10136] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 264.927599][T10149] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 264.971919][T10149] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 265.098630][T10123] XFS (loop3): Ending clean mount [ 265.145181][ T4193] attempt to access beyond end of device [ 265.145181][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 265.270504][ T4196] XFS (loop3): Unmounting Filesystem [ 265.324995][T10175] loop2: detected capacity change from 0 to 512 [ 265.456439][T10175] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 8: comm syz.2.2339: lblock 0 mapped to illegal pblock 8 (length 1) [ 265.503031][T10175] EXT4-fs (loop2): Remounting filesystem read-only [ 265.509620][T10175] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2339: error -117 reading directory block [ 265.582521][T10175] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 265.590879][T10175] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,init_itable,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 265.771921][ T4709] uclogic 0003:2179:0053.0020: failed retrieving string descriptor #100: -71 [ 265.780799][ T4709] uclogic 0003:2179:0053.0020: failed retrieving pen parameters: -71 [ 265.831785][ T4709] uclogic 0003:2179:0053.0020: pen probing failed: -71 [ 265.838720][ T4709] uclogic 0003:2179:0053.0020: failed probing parameters: -71 [ 265.875550][ T4709] uclogic: probe of 0003:2179:0053.0020 failed with error -71 [ 265.922749][T10187] sp0: Synchronizing with TNC [ 265.923015][ T4709] usb 5-1: USB disconnect, device number 22 [ 265.955219][T10186] [U] è` [ 266.151975][T10199] netlink: 'syz.0.2338': attribute type 2 has an invalid length. [ 266.174081][T10199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2338'. [ 266.437368][T10215] loop1: detected capacity change from 0 to 256 [ 266.555807][T10215] FAT-fs (loop1): Directory bread(block 64) failed [ 266.582425][T10215] FAT-fs (loop1): Directory bread(block 65) failed [ 266.589099][T10215] FAT-fs (loop1): Directory bread(block 66) failed [ 266.618081][T10215] FAT-fs (loop1): Directory bread(block 67) failed [ 266.654852][T10215] FAT-fs (loop1): Directory bread(block 68) failed [ 266.673930][T10215] FAT-fs (loop1): Directory bread(block 69) failed [ 266.680946][T10215] FAT-fs (loop1): Directory bread(block 70) failed [ 266.713910][T10215] FAT-fs (loop1): Directory bread(block 71) failed [ 266.731868][T10215] FAT-fs (loop1): Directory bread(block 72) failed [ 266.738686][T10215] FAT-fs (loop1): Directory bread(block 73) failed [ 267.260443][T10241] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 267.290209][T10241] [U] J"—E:ÀÆ" [ 267.356331][T10245] loop4: detected capacity change from 0 to 1024 [ 267.414666][T10245] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.489131][T10252] loop0: detected capacity change from 0 to 164 [ 267.581583][T10252] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.581702][ T4278] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 267.724633][T10252] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.818826][T10252] Symlink component flag not implemented [ 267.825101][T10252] Symlink component flag not implemented [ 267.833273][T10252] Symlink component flag not implemented (7) [ 267.839324][T10252] Symlink component flag not implemented (116) [ 267.852955][T10261] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 267.868587][T10261] rock: directory entry would overflow storage [ 267.876288][T10261] rock: sig=0x4f50, size=4, remaining=3 [ 267.896684][T10261] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 267.992098][ T4278] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 268.007307][ T4278] usb 3-1: config 0 has no interface number 0 [ 268.086257][ T1110] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 268.222023][ T4278] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 268.242526][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.280891][ T4278] usb 3-1: Product: syz [ 268.294263][ T4278] usb 3-1: Manufacturer: syz [ 268.311984][ T4278] usb 3-1: SerialNumber: syz [ 268.340341][ T4278] usb 3-1: config 0 descriptor?? [ 268.351714][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 268.441106][T10284] loop0: detected capacity change from 0 to 16 [ 268.477163][ T1110] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 268.497728][T10284] erofs: (device loop0): mounted with root inode @ nid 36. [ 268.515120][T10284] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 268.528645][ T1110] usb 5-1: config 0 has no interface number 0 [ 268.550960][T10284] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 268.602123][T10284] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 268.614301][ T4278] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 268.633275][ T4278] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 268.670414][ T4278] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 268.699419][ T4278] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 268.715176][ T1110] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 268.724973][ T4278] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 268.757351][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.765772][ T1110] usb 5-1: Product: syz [ 268.769990][ T1110] usb 5-1: Manufacturer: syz [ 268.786756][ T1110] usb 5-1: SerialNumber: syz [ 268.792564][T10269] loop1: detected capacity change from 0 to 40427 [ 268.820600][T10269] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 268.828286][ T1110] usb 5-1: config 0 descriptor?? [ 268.853034][T10269] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 268.876680][T10269] F2FS-fs (loop1): invalid crc value [ 268.929826][T10269] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 269.054416][ T4278] usb 3-1: USB disconnect, device number 16 [ 269.086661][ T4278] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 269.120682][ T4278] keyspan 3-1:0.133: device disconnected [ 269.157419][T10269] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 269.164919][T10269] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 269.370340][ T1110] usb 5-1: USB disconnect, device number 23 [ 269.389895][ T4189] attempt to access beyond end of device [ 269.389895][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 270.128210][T10329] loop4: detected capacity change from 0 to 128 [ 270.245836][T10337] loop1: detected capacity change from 0 to 128 [ 270.367823][T10337] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 270.728380][T10356] loop3: detected capacity change from 0 to 256 [ 270.807660][T10356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 270.922399][T10360] loop2: detected capacity change from 0 to 1764 [ 271.121163][T10367] loop4: detected capacity change from 0 to 1024 [ 271.141010][T10371] loop3: detected capacity change from 0 to 512 [ 271.205583][T10367] EXT4-fs (loop4): Ignoring removed oldalloc option [ 271.239052][T10367] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.344435][T10371] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2417: invalid indirect mapped block 4294967295 (level 1) [ 271.365497][T10367] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,bsddf,init_itable=0x0000000000000ddd,norecovery,dioread_nolock,oldalloc,user_xattr,errors=remount-ro,norecovery,. Quota mode: none. [ 271.400618][T10371] EXT4-fs (loop3): Remounting filesystem read-only [ 271.416635][T10371] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2417: invalid indirect mapped block 4294967295 (level 1) [ 271.455572][T10371] EXT4-fs (loop3): Remounting filesystem read-only [ 271.526113][T10371] EXT4-fs (loop3): 2 truncates cleaned up [ 271.582090][T10371] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 271.651530][ T5211] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 271.780532][T10371] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz.3.2417: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 271.816827][T10389] loop2: detected capacity change from 0 to 16 [ 271.828420][T10331] loop0: detected capacity change from 0 to 40427 [ 271.893459][T10389] erofs: (device loop2): mounted with root inode @ nid 36. [ 271.912060][T10331] F2FS-fs (loop0): invalid crc value [ 271.932295][T10371] EXT4-fs (loop3): Remounting filesystem read-only [ 271.967806][T10371] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 271.993710][T10331] F2FS-fs (loop0): Found nat_bits in checkpoint [ 272.101889][ T5211] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.110234][ T5211] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 272.152321][ T5211] usb 2-1: config 220 has no interface number 2 [ 272.181566][ T5211] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 272.206844][T10331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 272.231521][ T5211] usb 2-1: config 220 interface 0 has no altsetting 0 [ 272.238377][ T5211] usb 2-1: config 220 interface 76 has no altsetting 0 [ 272.294979][ T5211] usb 2-1: config 220 interface 1 has no altsetting 0 [ 272.365251][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 272.365267][ T26] audit: type=1800 audit(1778923134.827:45): pid=10331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2405" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 272.515179][ T5211] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 272.543807][ T5211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.579064][ T4193] attempt to access beyond end of device [ 272.579064][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 272.606657][ T5211] usb 2-1: Product: syz [ 272.610892][ T5211] usb 2-1: Manufacturer: syz [ 272.635264][ T5211] usb 2-1: SerialNumber: syz [ 272.909284][T10422] device veth1_macvtap left promiscuous mode [ 273.072083][ T5211] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 273.078597][ T5211] usb 2-1: No valid video chain found. [ 273.109452][ T5211] usb 2-1: selecting invalid altsetting 0 [ 273.233003][ T5211] usb 2-1: selecting invalid altsetting 0 [ 273.248384][ T5211] usbtest: probe of 2-1:220.1 failed with error -22 [ 273.271991][ T5211] usb 2-1: USB disconnect, device number 15 [ 273.401561][ T23] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 273.617815][T10448] loop4: detected capacity change from 0 to 512 [ 273.761795][ T23] usb 4-1: config 0 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.782381][ T23] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 273.804531][T10448] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.835429][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.842657][ T23] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 273.858880][T10448] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 273.858893][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.891630][ T23] usb 4-1: config 0 descriptor?? [ 273.912549][T10448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102] [ 273.932434][T10448] System zones: 1-12 [ 273.952468][T10448] EXT4-fs (loop4): orphan cleanup on readonly fs [ 273.966006][T10448] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2441: invalid indirect mapped block 2 (level 2) [ 273.991170][T10448] EXT4-fs (loop4): Remounting filesystem read-only [ 274.022010][T10448] EXT4-fs (loop4): 1 truncate cleaned up [ 274.028019][T10448] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,errors=remount-ro,abort. Quota mode: none. [ 274.372332][T10456] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 274.384544][ T23] hid (null): usage index exceeded [ 274.389722][ T23] hid (null): usage index exceeded [ 274.418948][ T23] thrustmaster 0003:044F:B320.0021: ignoring exceeding usage max [ 274.437611][ T23] thrustmaster 0003:044F:B320.0021: usage index exceeded [ 274.449914][ T23] thrustmaster 0003:044F:B320.0021: item 0 1 2 0 parsing failed [ 274.468693][ T23] thrustmaster 0003:044F:B320.0021: parse failed [ 274.479784][ T23] thrustmaster: probe of 0003:044F:B320.0021 failed with error -22 [ 274.598105][T10458] loop0: detected capacity change from 0 to 1764 [ 274.649401][ T4278] usb 4-1: USB disconnect, device number 14 [ 274.729987][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 274.746896][T10466] netlink: 'syz.1.2449': attribute type 22 has an invalid length. [ 274.774341][T10466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2449'. [ 274.838486][T10469] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 275.043503][T10483] mmap: syz.4.2456 (10483): VmData 49205248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 275.412182][T10505] tmpfs: Bad value for 'size' [ 275.641504][ T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.845059][T10515] loop1: detected capacity change from 0 to 2048 [ 275.891470][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 275.913594][T10499] loop4: detected capacity change from 0 to 32768 [ 275.925372][T10515] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.941009][T10515] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.004026][T10499] [ 276.004026][T10499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.004026][T10499] [ 276.014994][ T23] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.066724][ T23] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.117009][ T23] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.141651][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.160893][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 276.162062][T10499] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 276.162062][T10499] [ 276.181433][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.196819][ T23] usb 3-1: config 0 descriptor?? [ 276.219798][T10499] ERROR: (device loop4): remounting filesystem as read-only [ 276.231118][T10499] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 276.363606][T10511] loop3: detected capacity change from 0 to 40427 [ 276.403896][T10511] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 276.410573][T10511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 276.523216][T10511] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 297097612231902693) [ 276.672588][T10511] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 276.687500][ T23] hid (null): invalid report_size 26545 [ 276.708435][T10511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 276.724935][ T23] magicmouse 0003:05AC:0265.0022: unexpected long global item [ 276.752466][ T23] magicmouse 0003:05AC:0265.0022: magicmouse hid parse failed [ 276.788106][ T23] magicmouse: probe of 0003:05AC:0265.0022 failed with error -22 [ 276.829925][ T4196] attempt to access beyond end of device [ 276.829925][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 276.890430][ T23] usb 3-1: USB disconnect, device number 17 [ 277.051755][ T5208] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 277.205848][T10529] loop0: detected capacity change from 0 to 32768 [ 277.286256][T10529] (syz.0.2478,10529,0):ocfs2_verify_volume:2377 ERROR: bad system_dir_blkno: 0 [ 277.311604][ T5208] usb 2-1: Using ep0 maxpacket: 32 [ 277.322225][T10529] (syz.0.2478,10529,0):ocfs2_verify_volume:2392 ERROR: status = -22 [ 277.332399][T10529] (syz.0.2478,10529,0):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 277.343477][T10529] (syz.0.2478,10529,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 277.441521][ T5208] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 277.475261][T10553] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2489'. [ 277.477725][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.551558][ T5208] usb 2-1: config 0 descriptor?? [ 277.566375][T10557] loop2: detected capacity change from 0 to 512 [ 277.598943][ T5208] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 277.654415][T10557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.681532][T10557] ext4 filesystem being mounted at /485/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.721675][ T1110] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.741577][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 277.750939][T10557] EXT4-fs warning (device loop2): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 277.839949][T10547] loop4: detected capacity change from 0 to 32768 [ 277.860705][T10547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2486 (10547) [ 277.908599][T10547] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 277.921675][T10547] BTRFS info (device loop4): using free space tree [ 277.928261][T10547] BTRFS info (device loop4): has skinny extents [ 277.969724][T10547] BTRFS info (device loop4): enabling ssd optimizations [ 277.981591][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 278.101972][ T23] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 278.110129][ T23] usb 1-1: config 0 has no interface number 0 [ 278.131943][ T23] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.251651][ T5208] gspca_vc032x: reg_w err -71 [ 278.256399][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.262308][ T1110] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 278.262352][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.262375][ T1110] usb 4-1: Product: syz [ 278.262391][ T1110] usb 4-1: Manufacturer: syz [ 278.262408][ T1110] usb 4-1: SerialNumber: syz [ 278.315083][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.320530][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.323280][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 278.327739][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.341656][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.346993][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.353832][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.361448][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.367680][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.374483][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.380006][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.382146][ T23] usb 1-1: Product: syz [ 278.386669][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.396770][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.402433][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.410151][ T23] usb 1-1: Manufacturer: syz [ 278.411182][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.415116][ T23] usb 1-1: SerialNumber: syz [ 278.428811][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.438303][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.445109][ T23] usb 1-1: config 0 descriptor?? [ 278.451357][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.456774][ T5208] gspca_vc032x: I2c Bus Busy Wait 00 [ 278.462715][ T5208] gspca_vc032x: Unknown sensor... [ 278.467843][ T5208] vc032x: probe of 2-1:0.0 failed with error -22 [ 278.484973][ T5208] usb 2-1: USB disconnect, device number 16 [ 278.523531][ T23] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 278.737677][T10587] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.771713][ T1110] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 278.779498][ T1110] mxuport: probe of 4-1:254.0 failed with error -5 [ 278.877858][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 278.929192][ T4278] usb 1-1: USB disconnect, device number 15 [ 278.958284][ T4278] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 278.974919][ T4232] usb 4-1: USB disconnect, device number 15 [ 279.249419][T10604] mmap: syz.4.2501 (10604) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 279.462966][T10610] loop4: detected capacity change from 0 to 4096 [ 279.471618][ T5208] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.514070][T10594] loop2: detected capacity change from 0 to 32768 [ 279.566674][T10610] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 279.582085][T10616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 279.617624][T10594] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 279.651430][T10594] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 279.719570][T10594] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 279.734053][ T4278] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 279.742686][ T5208] usb 2-1: Using ep0 maxpacket: 16 [ 279.748397][ T4278] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 279.901648][ T5208] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 279.909707][ T5208] usb 2-1: config 0 has no interface number 0 [ 279.931802][ T4278] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 183ms [ 279.942264][ T5208] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.967449][ T4278] gfs2: fsid=syz:syz.0: jid=0: Done [ 279.979693][T10623] netlink: 'syz.4.2507': attribute type 11 has an invalid length. [ 280.011295][ T5208] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 280.024204][T10594] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 280.142871][T10594] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 280.155267][ T5208] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 280.164540][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 280.176141][ T5208] usb 2-1: Product: syz [ 280.180385][ T5208] usb 2-1: SerialNumber: syz [ 280.186602][T10594] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 280.186602][T10594] inode = 12 2341 [ 280.186602][T10594] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 280.238422][ T5208] usb 2-1: config 0 descriptor?? [ 280.254229][T10594] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 280.287227][T10594] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 280.320403][T10594] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 280.335573][ T5208] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 280.354071][ T5208] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input23 [ 280.378170][T10594] gfs2: fsid=syz:syz.0: File system withdrawn [ 280.414483][T10594] CPU: 1 PID: 10594 Comm: syz.2.2496 Not tainted syzkaller #0 [ 280.422015][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.432213][T10594] Call Trace: [ 280.435619][T10594] [ 280.438593][T10594] dump_stack_lvl+0x188/0x250 [ 280.443414][T10594] ? kobject_uevent_env+0x371/0x890 [ 280.448752][T10594] ? show_regs_print_info+0x20/0x20 [ 280.453994][T10594] ? load_image+0x400/0x400 [ 280.458537][T10594] ? kobject_uevent_env+0x371/0x890 [ 280.463785][T10594] ? preempt_schedule_thunk+0x16/0x18 [ 280.469215][T10594] gfs2_withdraw+0x1149/0x1490 [ 280.474136][T10594] ? gfs2_lm+0x240/0x240 [ 280.478419][T10594] ? load_image+0x400/0x400 [ 280.482972][T10594] ? gfs2_consist_inode_i+0xc0/0xe0 [ 280.488239][T10594] gfs2_dirent_scan+0x525/0x650 [ 280.493145][T10594] ? gfs2_dirent_scan+0x650/0x650 [ 280.498337][T10594] gfs2_dir_read+0x7ba/0x17e0 [ 280.503075][T10594] ? __might_sleep+0xf0/0xf0 [ 280.507710][T10594] ? gfs2_dir_hash_inval+0x70/0x70 [ 280.512866][T10594] ? _raw_spin_unlock+0x24/0x40 [ 280.517759][T10594] ? gfs2_glock_nq+0xcb0/0x1550 [ 280.522677][T10594] gfs2_readdir+0x165/0x1d0 [ 280.527227][T10594] ? gfs2_fallocate+0x4b0/0x4b0 [ 280.532126][T10594] ? gfs2_readdir+0x11f/0x1d0 [ 280.536848][T10594] ? iterate_dir+0x10d/0x560 [ 280.541482][T10594] ? down_read_killable+0x1ce/0x340 [ 280.546721][T10594] ? fsnotify_perm+0x254/0x560 [ 280.551530][T10594] iterate_dir+0x218/0x560 [ 280.555990][T10594] ? gfs2_fallocate+0x4b0/0x4b0 [ 280.560885][T10594] __se_sys_getdents64+0xf2/0x270 [ 280.565959][T10594] ? __x64_sys_getdents64+0x80/0x80 [ 280.571196][T10594] ? filldir+0x720/0x720 [ 280.575480][T10594] ? vtime_user_exit+0x2c8/0x3e0 [ 280.580471][T10594] ? lockdep_hardirqs_on+0x94/0x140 [ 280.585718][T10594] do_syscall_64+0x4c/0xa0 [ 280.590176][T10594] ? clear_bhb_loop+0x30/0x80 [ 280.595015][T10594] ? clear_bhb_loop+0x30/0x80 [ 280.599739][T10594] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.605682][T10594] RIP: 0033:0x7f05f43eee59 [ 280.610147][T10594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.629930][T10594] RSP: 002b:00007f05f2648028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 280.638396][T10594] RAX: ffffffffffffffda RBX: 00007f05f4667fa0 RCX: 00007f05f43eee59 [ 280.646425][T10594] RDX: 0000000000000029 RSI: 9999999999999999 RDI: 0000000000000004 [ 280.654465][T10594] RBP: 00007f05f4484d6f R08: 0000000000000000 R09: 0000000000000000 [ 280.662480][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.670497][T10594] R13: 00007f05f4668038 R14: 00007f05f4667fa0 R15: 00007ffef4ec4188 [ 280.678541][T10594] [ 280.722302][ T5208] usb 2-1: USB disconnect, device number 17 [ 280.742898][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 280.750798][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 280.778266][ T5208] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 280.878043][T10645] loop4: detected capacity change from 0 to 128 [ 280.911163][T10647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2520'. [ 280.973679][T10645] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 280.997788][T10645] hpfs: filesystem error: improperly stopped [ 281.083688][T10645] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 281.102719][T10651] loop0: detected capacity change from 0 to 2048 [ 281.131584][T10645] hpfs: You really don't want any checks? You are crazy... [ 281.149433][T10645] hpfs: hpfs_map_sector(): read error [ 281.157924][T10645] hpfs: code page support is disabled [ 281.164143][T10645] hpfs: hpfs_map_4sectors(): unaligned read [ 281.170279][T10645] hpfs: hpfs_map_4sectors(): unaligned read [ 281.176814][T10645] hpfs: filesystem error: unable to find root dir [ 281.201040][T10651] Alternate GPT is invalid, using primary GPT. [ 281.220020][T10651] loop0: p1 p2 p3 [ 281.241166][T10656] netlink: 'syz.3.2526': attribute type 3 has an invalid length. [ 281.279747][T10645] hpfs: hpfs_map_4sectors(): unaligned read [ 281.299796][T10645] hpfs: hpfs_map_sector(): read error [ 281.443207][T10660] loop3: detected capacity change from 0 to 256 [ 281.570779][T10660] FAT-fs (loop3): Directory bread(block 64) failed [ 281.599152][T10660] FAT-fs (loop3): Directory bread(block 65) failed [ 281.643957][T10660] FAT-fs (loop3): Directory bread(block 66) failed [ 281.644000][T10660] FAT-fs (loop3): Directory bread(block 67) failed [ 281.727088][T10660] FAT-fs (loop3): Directory bread(block 68) failed [ 281.777779][T10660] FAT-fs (loop3): Directory bread(block 69) failed [ 281.818656][T10660] FAT-fs (loop3): Directory bread(block 70) failed [ 281.842938][T10660] FAT-fs (loop3): Directory bread(block 71) failed [ 281.892230][T10660] FAT-fs (loop3): Directory bread(block 72) failed [ 281.898978][T10660] FAT-fs (loop3): Directory bread(block 73) failed [ 282.054690][T10683] loop2: detected capacity change from 0 to 256 [ 282.104553][T10681] loop4: detected capacity change from 0 to 4096 [ 282.130603][T10683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 282.180256][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 282.208482][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 282.271772][T10691] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.288537][T10689] loop3: detected capacity change from 0 to 16 [ 282.324286][T10681] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 282.342262][T10689] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 282.344024][T10681] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 282.371169][T10681] Remounting filesystem read-only [ 282.383966][T10681] NILFS (loop4): error -5 truncating bmap (ino=12) [ 282.394647][T10692] loop2: detected capacity change from 0 to 4096 [ 282.436938][ T4199] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 282.491576][ T4278] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 282.517648][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 282.530552][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 282.659733][T10695] loop3: detected capacity change from 0 to 4096 [ 282.674427][T10699] fuse: Bad value for 'fd' [ 282.755753][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 282.781410][ T4278] usb 1-1: Using ep0 maxpacket: 16 [ 282.881029][T10705] loop1: detected capacity change from 0 to 2048 [ 282.926966][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.950806][ T4278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.961841][ T4278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.006223][T10705] Alternate GPT is invalid, using primary GPT. [ 283.013765][ T4278] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.031367][T10705] loop1: p1 p2 p3 [ 283.036871][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.075012][ T4278] usb 1-1: config 0 descriptor?? [ 283.130884][ T3561] Alternate GPT is invalid, using primary GPT. [ 283.148035][ T3561] loop1: p1 p2 p3 [ 283.194781][T10717] loop2: detected capacity change from 0 to 136 [ 283.470557][T10725] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 283.501129][T10725] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 283.537207][T10725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.580369][ T4278] microsoft 0003:045E:07DA.0023: No inputs registered, leaving [ 283.607788][T10728] FAT-fs (loop3): Directory bread(block 64) failed [ 283.629255][ T4278] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 283.630670][T10728] FAT-fs (loop3): Directory bread(block 65) failed [ 283.670664][ T4278] microsoft 0003:045E:07DA.0023: no inputs found [ 283.707436][ T4278] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway [ 283.721430][T10728] FAT-fs (loop3): Directory bread(block 66) failed [ 283.728397][T10728] FAT-fs (loop3): Directory bread(block 67) failed [ 283.780201][ T4278] usb 1-1: USB disconnect, device number 16 [ 283.795704][T10728] FAT-fs (loop3): Directory bread(block 68) failed [ 283.871537][T10728] FAT-fs (loop3): Directory bread(block 69) failed [ 283.900196][T10728] FAT-fs (loop3): Directory bread(block 70) failed [ 283.908968][T10736] netlink: 'syz.1.2562': attribute type 12 has an invalid length. [ 283.917133][T10728] FAT-fs (loop3): Directory bread(block 71) failed [ 283.941276][T10736] netlink: 'syz.1.2562': attribute type 29 has an invalid length. [ 283.952021][T10736] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2562'. [ 283.964659][T10728] FAT-fs (loop3): Directory bread(block 72) failed [ 283.979009][T10736] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2562'. [ 283.988657][T10728] FAT-fs (loop3): Directory bread(block 73) failed [ 284.004426][ T4469] udevd[4469]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 284.016838][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 284.030742][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 284.091729][T10732] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 284.226472][T10734] fido_id[10734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 284.241417][T10732] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.249187][ T4469] udevd[4469]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 284.265713][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 284.295281][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 284.440050][T10732] EXT4-fs error (device loop4): ext4_xattr_block_find:1855: inode #12: comm syz.4.2561: corrupted xattr block 6 [ 284.623392][T10744] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.665013][T10744] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 284.721454][T10744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102] [ 284.743642][T10744] System zones: 1-12 [ 284.748689][T10744] EXT4-fs (loop2): orphan cleanup on readonly fs [ 284.780750][T10744] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2564: invalid indirect mapped block 2 (level 2) [ 284.899029][T10744] EXT4-fs (loop2): Remounting filesystem read-only [ 284.940299][T10744] EXT4-fs (loop2): 1 truncate cleaned up [ 284.997324][T10744] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,errors=remount-ro,abort. Quota mode: none. [ 285.523957][T10796] delete_channel: no stack [ 285.653171][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 285.821289][T10798] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 285.938738][T10798] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 286.009772][T10818] binder: BINDER_SET_CONTEXT_MGR already set [ 286.028176][T10818] binder: 10817:10818 ioctl 40046207 0 returned -16 [ 286.180936][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2600'. [ 286.747071][T10856] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 286.769062][T10851] set_capacity_and_notify: 5 callbacks suppressed [ 286.769079][T10851] loop0: detected capacity change from 0 to 4096 [ 286.828804][T10860] loop1: detected capacity change from 0 to 64 [ 286.888888][T10851] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 286.951350][ T4229] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.971560][T10851] ntfs3: loop0: MFT: r=b, expect seq=0 instead of b! [ 287.200370][T10869] loop0: detected capacity change from 0 to 512 [ 287.224134][T10870] netlink: 'syz.4.2621': attribute type 1 has an invalid length. [ 287.286877][T10869] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.328258][ T4229] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 287.344938][ T4229] usb 4-1: config 0 has no interface number 0 [ 287.376289][T10869] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 287.521471][ T4229] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 287.541523][T10869] Quota error (device loop0): write_blk: dquota write failed [ 287.548966][T10869] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 287.561255][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.589718][ T4229] usb 4-1: Product: syz [ 287.594298][T10869] Quota error (device loop0): write_blk: dquota write failed [ 287.601858][ T4229] usb 4-1: Manufacturer: syz [ 287.606510][ T4229] usb 4-1: SerialNumber: syz [ 287.621554][T10869] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 287.634339][ T4229] usb 4-1: config 0 descriptor?? [ 287.659630][T10869] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2619: Failed to acquire dquot type 1 [ 287.692007][T10869] EXT4-fs (loop0): 1 truncate cleaned up [ 287.697761][T10869] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,norecovery,quota,resuid=0x0000000000000000,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 287.841893][T10885] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2627'. [ 287.981457][ T4229] uvcvideo 4-1:0.64: Found Unit with invalid ID 0 [ 288.051389][ T4229] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 288.057919][ T4229] usb 4-1: No valid video chain found. [ 288.076828][ T4229] usb 4-1: USB disconnect, device number 16 [ 288.146259][T10891] loop1: detected capacity change from 0 to 1024 [ 288.179920][T10891] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.251240][T10881] loop2: detected capacity change from 0 to 32768 [ 288.263871][T10891] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000003,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 288.369144][T10891] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 288.478637][T10881] XFS (loop2): Mounting V5 Filesystem [ 288.609391][T10881] XFS (loop2): Ending clean mount [ 288.721491][ T4195] XFS (loop2): Unmounting Filesystem [ 288.994801][T10916] loop3: detected capacity change from 0 to 1024 [ 289.110932][T10877] loop4: detected capacity change from 0 to 32768 [ 289.173600][T10916] EXT4-fs (loop3): Ignoring removed bh option [ 289.179797][T10916] EXT4-fs (loop3): inline encryption not supported [ 289.214758][T10916] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.2637: lblock 2 mapped to illegal pblock 2 (length 1) [ 289.264947][T10924] loop1: detected capacity change from 0 to 1024 [ 289.295958][T10916] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 289.341398][T10916] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.2637: Invalid inode table block 1 in block_group 0 [ 289.428670][T10916] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 289.467230][T10924] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 289.471596][T10916] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.2637: mark_inode_dirty error [ 289.499190][T10924] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 289.509657][T10877] XFS (loop4): Mounting V5 Filesystem [ 289.537324][T10924] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.2640: unexpected bad inode w/o EXT4_IGET_BAD [ 289.569193][T10924] EXT4-fs (loop1): no journal found [ 289.595671][T10916] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 289.607619][T10916] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.2637: Failed to acquire dquot type 0 [ 289.619209][T10924] EXT4-fs (loop1): can't get journal size [ 289.623351][T10916] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 289.672033][T10924] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000bb0f,abort,,errors=continue. Quota mode: writeback. [ 289.709133][T10916] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.2637: mark_inode_dirty error [ 289.770409][T10916] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 289.834343][T10941] loop2: detected capacity change from 0 to 2048 [ 289.852684][T10916] EXT4-fs (loop3): 1 orphan inode deleted [ 289.870940][T10916] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,noquota,,errors=continue. Quota mode: none. [ 289.896640][ T1167] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 289.932745][ T1167] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 289.958390][T10941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 289.976654][ T1167] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 290.123041][T10877] XFS (loop4): Ending clean mount [ 290.180020][T10877] XFS (loop4): Quotacheck needed: Please wait. [ 290.203198][ T4196] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 290.240384][ T4196] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 290.260280][ T4196] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 290.279803][T10947] loop1: detected capacity change from 0 to 512 [ 290.423633][T10947] EXT4-fs (loop1): orphan cleanup on readonly fs [ 290.438921][T10947] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.2648: Bad quota inum: 2, type: 2 [ 290.480570][T10947] EXT4-fs (loop1): Remounting filesystem read-only [ 290.500450][T10955] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 290.525958][T10947] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 290.549203][T10877] XFS (loop4): Quotacheck: Done. [ 290.653799][T10947] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 290.681611][T10947] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000007,journal_ioprio=0x0000000000000001,grpid,errors=remount-ro,. Quota mode: writeback. [ 290.801544][ T4199] XFS (loop4): Unmounting Filesystem [ 290.860718][T10958] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 291.247854][T10968] EXT4-fs (loop2): Ignoring removed bh option [ 291.264305][T10968] EXT4-fs (loop2): inline encryption not supported [ 291.364867][T10968] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.2657: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.507031][T10968] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 291.552510][T10968] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2657: Invalid inode table block 1 in block_group 0 [ 291.606407][T10968] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 291.649752][T10968] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.2657: mark_inode_dirty error [ 291.718646][T10981] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.719012][T10968] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 291.753816][T10976] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 291.772905][T10976] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 291.784495][T10976] Remounting filesystem read-only [ 291.789705][T10976] NILFS (loop1): error -5 truncating bmap (ino=12) [ 291.811345][T10968] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.2657: Failed to acquire dquot type 0 [ 291.884441][T10962] set_capacity_and_notify: 5 callbacks suppressed [ 291.884468][T10962] loop3: detected capacity change from 0 to 32768 [ 291.898863][T10968] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 291.960874][T10968] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.2657: mark_inode_dirty error [ 291.972399][ T4189] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 292.050853][T10968] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 292.063430][T10985] ERROR: (device loop3): diAllocAG: free inode not found in summary map [ 292.063430][T10985] [ 292.109751][T10985] ERROR: (device loop3): remounting filesystem as read-only [ 292.117167][T10968] EXT4-fs (loop2): 1 orphan inode deleted [ 292.137362][ T4260] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.152925][T10968] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,noquota,,errors=continue. Quota mode: none. [ 292.171893][T10985] ialloc: diAlloc returned -5! [ 292.222559][ T4260] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 292.231071][ T4260] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 292.476599][ T4195] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 292.507649][ T4195] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 292.538157][ T4195] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 292.891668][T11014] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2677'. [ 292.933107][T11017] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2677'. [ 293.270788][T11037] loop2: detected capacity change from 0 to 512 [ 293.310652][T11035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2687'. [ 293.491298][T11037] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.648511][T11062] loop4: detected capacity change from 0 to 512 [ 293.765382][T11062] EXT4-fs (loop4): 1 truncate cleaned up [ 293.781582][T11062] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 294.139892][T11073] loop4: detected capacity change from 0 to 1024 [ 294.221326][T11073] EXT4-fs (loop4): Ignoring removed orlov option [ 294.327357][T11073] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 294.492902][T11059] loop1: detected capacity change from 0 to 32768 [ 294.580107][T11096] loop0: detected capacity change from 0 to 1024 [ 294.634802][T11095] loop3: detected capacity change from 0 to 4096 [ 294.646296][T11059] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 294.694434][T11096] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,errors=remount-ro,nodioread_nolock,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 294.787848][T11110] netlink: 'syz.4.2714': attribute type 29 has an invalid length. [ 294.838647][T11110] netlink: 'syz.4.2714': attribute type 29 has an invalid length. [ 294.860728][T11110] netlink: 'syz.4.2714': attribute type 29 has an invalid length. [ 294.910755][T11096] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #11: comm syz.0.2712: directory missing '..' [ 294.974589][ T4189] XFS (loop1): Unmounting Filesystem [ 294.997360][T11096] EXT4-fs (loop0): Remounting filesystem read-only [ 295.125037][ T4196] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 295.182525][ T4196] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 295.533349][T11099] loop2: detected capacity change from 0 to 32768 [ 295.569716][T11099] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.2713 (11099) [ 295.680508][T11099] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 295.733915][T11099] BTRFS info (device loop2): enabling ssd optimizations [ 295.740936][T11099] BTRFS info (device loop2): not using ssd optimizations [ 295.752884][T11122] loop3: detected capacity change from 0 to 4096 [ 295.798327][T11129] syz.4.2724 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 295.820923][T11099] BTRFS info (device loop2): turning off barriers [ 295.833799][T11122] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 295.837958][T11099] BTRFS info (device loop2): use no compression [ 295.881030][T11099] BTRFS info (device loop2): using free space tree [ 295.900936][T11099] BTRFS info (device loop2): has skinny extents [ 295.912929][T11122] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 296.039206][T11122] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 296.071216][T11122] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 296.100361][T11122] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 296.116518][T11122] ntfs: volume version 3.1. [ 296.122508][ T1110] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 296.137322][T11122] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 296.156462][T11122] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 296.193450][T11122] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 296.241031][T11122] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 296.253072][T11122] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 296.347341][T11099] BTRFS warning (device loop2): can't clear the compat:0 feature bit while mounted [ 296.427743][T11161] loop0: detected capacity change from 0 to 512 [ 296.501664][ T1110] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 296.543394][T11161] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 296.565382][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.604297][T11161] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 296.690625][T11161] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2729: Corrupt directory, running e2fsck is recommended [ 296.738263][T11161] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 296.779464][T11161] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.2729: corrupted in-inode xattr [ 296.782335][ T1110] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 296.814375][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.814518][T11161] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2729: couldn't read orphan inode 15 (err -117) [ 296.875439][ T1110] usb 5-1: Product: syz [ 296.879674][ T1110] usb 5-1: Manufacturer: syz [ 296.885686][T11173] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 296.894675][ T1110] usb 5-1: SerialNumber: syz [ 296.922901][T11161] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 296.975946][ T1110] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input24 [ 297.042588][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.101425][T11173] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 297.196719][ T3546] bcm5974 5-1:1.0: could not read from device [ 297.285583][ T1110] bcm5974 5-1:1.0: could not read from device [ 297.361204][ T3546] bcm5974 5-1:1.0: could not read from device [ 297.384205][T11184] set_capacity_and_notify: 1 callbacks suppressed [ 297.384221][T11184] loop3: detected capacity change from 0 to 8 [ 297.398117][ T1110] input: failed to attach handler mousedev to device input24, error: -5 [ 297.425313][ T1110] usb 5-1: USB disconnect, device number 24 [ 297.482114][T11184] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 297.697049][T11195] loop3: detected capacity change from 0 to 1764 [ 297.709123][T11192] loop2: detected capacity change from 0 to 4096 [ 297.797279][T11199] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.808544][ T4699] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 298.049538][T11207] loop3: detected capacity change from 0 to 1024 [ 298.078180][ T4699] usb 1-1: Using ep0 maxpacket: 16 [ 298.139893][T11201] loop1: detected capacity change from 0 to 4096 [ 298.198504][T11211] tipc: Enabling not permitted [ 298.204410][T11211] tipc: Enabling of bearer rejected, failed to enable media [ 298.210561][ T4699] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 298.231645][T11207] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 298.247799][ T4699] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 298.257511][ T4699] usb 1-1: config 0 has no interface number 0 [ 298.268222][T11201] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 298.277492][ T4699] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 298.292147][ T4699] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 298.317352][T11201] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 298.486732][ T4699] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 298.501747][ T4699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.539037][ T4699] usb 1-1: Product: syz [ 298.547943][ T4699] usb 1-1: Manufacturer: syz [ 298.576046][T11219] loop2: detected capacity change from 0 to 512 [ 298.582682][ T4699] usb 1-1: SerialNumber: syz [ 298.610967][ T4699] usb 1-1: config 0 descriptor?? [ 298.652172][T11190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 298.659276][T11190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 298.676731][T11219] EXT4-fs (loop2): Test dummy encryption mode enabled [ 298.707417][T11219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 298.755657][T11228] loop1: detected capacity change from 0 to 256 [ 298.763520][T11219] EXT4-fs (loop2): 1 truncate cleaned up [ 298.769274][T11219] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noinit_itable,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,init_itable=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 298.872305][ T4232] kernel write not supported for file /1158/net/rt_cache (pid: 4232 comm: kworker/1:6) [ 298.894768][T11228] FAT-fs (loop1): Directory bread(block 64) failed [ 298.948616][T11190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 298.955752][T11228] FAT-fs (loop1): Directory bread(block 65) failed [ 298.976666][T11228] FAT-fs (loop1): Directory bread(block 66) failed [ 298.982021][T11190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 299.009921][T11228] FAT-fs (loop1): Directory bread(block 67) failed [ 299.041328][T11228] FAT-fs (loop1): Directory bread(block 68) failed [ 299.073064][T11228] FAT-fs (loop1): Directory bread(block 69) failed [ 299.079752][T11228] FAT-fs (loop1): Directory bread(block 70) failed [ 299.117334][T11228] FAT-fs (loop1): Directory bread(block 71) failed [ 299.149826][T11228] FAT-fs (loop1): Directory bread(block 72) failed [ 299.178265][T11228] FAT-fs (loop1): Directory bread(block 73) failed [ 299.226985][T11247] loop3: detected capacity change from 0 to 512 [ 299.275651][T11228] overlayfs: filesystem on './file0' not supported [ 299.308241][T11251] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 299.312705][T11247] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 299.381921][T11251] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 299.424167][T11247] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.2766: corrupted in-inode xattr [ 299.451309][ T4699] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 299.506597][ T4699] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 299.561297][T11247] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.2766: couldn't read orphan inode 15 (err -117) [ 299.577195][ T4699] asix: probe of 1-1:0.251 failed with error -71 [ 299.608248][T11247] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,inode_readahead_blks=0x0000000000000001,grpid,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 299.644014][ T4699] usb 1-1: USB disconnect, device number 17 [ 299.812389][T11264] loop1: detected capacity change from 0 to 1024 [ 300.204427][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2783'. [ 300.384184][T11293] loop0: detected capacity change from 0 to 512 [ 300.464598][T11293] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.495510][T11293] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.2788: bad orphan inode 131083 [ 300.559993][T11293] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 300.761304][ T4699] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 300.942246][T11319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2800'. [ 300.979959][T11319] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2800'. [ 301.000067][T11319] tipc: Invalid UDP bearer configuration [ 301.000113][T11319] tipc: Enabling of bearer rejected, failed to enable media [ 301.131561][ T4699] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 301.150190][ T4699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.341412][ T4699] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 301.350567][ T4699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.386611][ T4699] usb 2-1: Product: syz [ 301.391732][ T4699] usb 2-1: Manufacturer: syz [ 301.396466][ T4699] usb 2-1: SerialNumber: syz [ 301.443353][T11333] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.465043][ T4699] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25 [ 301.659978][T11317] JBD2: Ignoring recovery information on journal [ 301.681392][ T3546] bcm5974 2-1:1.0: could not read from device [ 301.711275][ T4699] bcm5974 2-1:1.0: could not read from device [ 301.754552][ T3546] bcm5974 2-1:1.0: could not read from device [ 301.826223][T11340] netlink: 'syz.0.2808': attribute type 10 has an invalid length. [ 301.845328][ T4699] input: failed to attach handler mousedev to device input25, error: -5 [ 301.881813][ T4699] usb 2-1: USB disconnect, device number 18 [ 301.901441][ T3546] bcm5974 2-1:1.0: could not read from device [ 301.912152][T11317] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 301.958957][T11340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.967904][ T3546] bcm5974 2-1:1.0: could not read from device [ 301.978483][T11340] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 302.002394][T11310] XFS (loop3): Mounting V5 Filesystem [ 302.059574][T11350] netlink: 'syz.0.2810': attribute type 2 has an invalid length. [ 302.217159][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 302.228528][T11310] XFS (loop3): Ending clean mount [ 302.250214][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 302.250229][ T26] audit: type=1800 audit(1778923164.707:47): pid=11310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2798" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 302.359233][ T4196] XFS (loop3): Unmounting Filesystem [ 302.398285][T11360] erofs: (device loop4): mounted with root inode @ nid 36. [ 302.449433][ T26] audit: type=1800 audit(1778923164.907:48): pid=11360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2814" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 302.748281][T11370] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 302.898644][T11378] set_capacity_and_notify: 4 callbacks suppressed [ 302.898660][T11378] loop4: detected capacity change from 0 to 1024 [ 303.105047][ T154] hfsplus: b-tree write err: -5, ino 25 [ 303.123983][ T154] hfsplus: b-tree write err: -5, ino 4 [ 303.129816][ T154] hfsplus: b-tree write err: -5, ino 2 [ 303.359833][T11398] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 303.430928][T11400] loop2: detected capacity change from 0 to 1024 [ 303.439025][T11402] loop4: detected capacity change from 0 to 8 [ 303.543550][T11400] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.701228][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 303.946938][T11426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2844'. [ 304.372748][T11444] loop0: detected capacity change from 0 to 1024 [ 304.387878][T11446] loop2: detected capacity change from 0 to 512 [ 304.501391][ T4232] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 304.578252][T11446] EXT4-fs (loop2): Ignoring removed oldalloc option [ 304.599726][T11446] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 304.672410][T11446] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 304.680491][T11446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 304.690126][T11446] EXT4-fs (loop2): orphan cleanup on readonly fs [ 304.698314][T11446] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 304.708421][T11446] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 304.723415][T11446] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 304.735678][T11446] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2854: bg 0: block 40: padding at end of block bitmap is not set [ 304.751388][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 304.757113][T11446] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 304.768652][T11446] EXT4-fs (loop2): 1 truncate cleaned up [ 304.774418][T11446] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,noload,noblock_validity,oldalloc,nouid32,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 304.830880][T11454] loop0: detected capacity change from 0 to 1024 [ 304.842750][T11446] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 304.871438][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.896005][T11446] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 305.051907][ T4232] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 305.073638][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.096217][ T4232] usb 4-1: Product: syz [ 305.101509][ T4232] usb 4-1: Manufacturer: syz [ 305.106170][ T4232] usb 4-1: SerialNumber: syz [ 305.119252][ T4232] usb 4-1: config 0 descriptor?? [ 305.197587][ T4232] mcba_usb 4-1:0.0: Can't find endpoints [ 305.229095][T11467] loop1: detected capacity change from 0 to 2048 [ 305.345029][T11467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.407332][ T4232] usb 4-1: USB disconnect, device number 17 [ 305.422520][T11475] netlink: 'syz.2.2868': attribute type 29 has an invalid length. [ 305.478938][T11475] netlink: 'syz.2.2868': attribute type 29 has an invalid length. [ 305.517128][T11476] netlink: 'syz.2.2868': attribute type 29 has an invalid length. [ 305.592290][T11480] loop0: detected capacity change from 0 to 512 [ 305.718101][T11480] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 305.780094][T11480] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 305.828782][T11480] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.2869: Invalid block bitmap block 0 in block_group 0 [ 305.866818][T11480] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 305.876820][T11480] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2869: attempt to clear invalid blocks 983261 len 1 [ 305.892008][T11480] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.2869: Invalid inode table block 0 in block_group 0 [ 305.914606][T11480] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 305.936126][T11480] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 305.949211][T11480] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.2869: Invalid inode table block 0 in block_group 0 [ 305.968149][T11488] loop2: detected capacity change from 0 to 2048 [ 305.975774][T11480] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 305.992853][T11480] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.2869: mark_inode_dirty error [ 306.008186][T11480] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 306.020198][T11480] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.2869: Invalid inode table block 0 in block_group 0 [ 306.053983][T11480] EXT4-fs (loop0): 1 truncate cleaned up [ 306.059744][T11480] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 306.119344][T11488] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.147671][T11463] loop4: detected capacity change from 0 to 32768 [ 306.222863][T11488] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 306.266080][T11488] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 306.326893][T11463] JBD2: Ignoring recovery information on journal [ 306.558958][T11463] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 306.885580][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 306.898538][T11510] FAT-fs (loop2): Directory bread(block 64) failed [ 306.937015][T11510] FAT-fs (loop2): Directory bread(block 65) failed [ 306.960110][T11510] FAT-fs (loop2): Directory bread(block 66) failed [ 306.967567][T11510] FAT-fs (loop2): Directory bread(block 67) failed [ 306.974655][T11510] FAT-fs (loop2): Directory bread(block 68) failed [ 306.981817][T11510] FAT-fs (loop2): Directory bread(block 69) failed [ 306.988601][T11510] FAT-fs (loop2): Directory bread(block 70) failed [ 307.032471][T11510] FAT-fs (loop2): Directory bread(block 71) failed [ 307.044828][T11510] FAT-fs (loop2): Directory bread(block 72) failed [ 307.061585][T11510] FAT-fs (loop2): Directory bread(block 73) failed [ 307.574675][T10169] hfsplus: b-tree write err: -5, ino 25 [ 307.580918][T10169] hfsplus: b-tree write err: -5, ino 4 [ 307.611149][T10169] hfsplus: b-tree write err: -5, ino 2 [ 307.757497][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 307.924068][T11546] set_capacity_and_notify: 4 callbacks suppressed [ 307.924084][T11546] loop4: detected capacity change from 0 to 128 [ 307.991357][T11552] ALSA: mixer_oss: invalid OSS volume '' [ 308.187647][T11546] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 308.203106][T11562] loop0: detected capacity change from 0 to 256 [ 308.211253][T11546] hpfs: filesystem error: improperly stopped [ 308.217301][T11546] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 308.254427][T11546] hpfs: You really don't want any checks? You are crazy... [ 308.264624][T11546] hpfs: hpfs_map_sector(): read error [ 308.270057][T11546] hpfs: code page support is disabled [ 308.275847][T11546] hpfs: hpfs_map_4sectors(): unaligned read [ 308.284304][T11546] hpfs: hpfs_map_4sectors(): unaligned read [ 308.290456][T11546] hpfs: filesystem error: unable to find root dir [ 308.313090][T11562] FAT-fs (loop0): Directory bread(block 64) failed [ 308.319714][T11562] FAT-fs (loop0): Directory bread(block 65) failed [ 308.353247][T11562] FAT-fs (loop0): Directory bread(block 66) failed [ 308.368680][T11562] FAT-fs (loop0): Directory bread(block 67) failed [ 308.377723][T11562] FAT-fs (loop0): Directory bread(block 68) failed [ 308.388756][T11562] FAT-fs (loop0): Directory bread(block 69) failed [ 308.399129][T11562] FAT-fs (loop0): Directory bread(block 70) failed [ 308.409314][T11562] FAT-fs (loop0): Directory bread(block 71) failed [ 308.418466][ T5211] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 308.440340][T11562] FAT-fs (loop0): Directory bread(block 72) failed [ 308.465758][T11562] FAT-fs (loop0): Directory bread(block 73) failed [ 308.540972][T11562] overlayfs: filesystem on './file0' not supported [ 308.741590][ T5211] usb 2-1: Using ep0 maxpacket: 16 [ 308.751663][T11570] loop2: detected capacity change from 0 to 128 [ 308.901748][ T5211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.924349][T11570] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.931980][ T5211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.953417][T11570] ext4 filesystem being mounted at /559/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.991424][ T4278] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 309.042338][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 309.116903][T11581] netlink: 'syz.0.2916': attribute type 21 has an invalid length. [ 309.135406][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2916'. [ 309.244921][ T5211] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.261274][ T5211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.286846][ T5211] usb 2-1: Product: syz [ 309.311187][ T5211] usb 2-1: Manufacturer: syz [ 309.320128][ T5211] usb 2-1: SerialNumber: syz [ 309.381461][ T4278] usb 5-1: config 0 has no interfaces? [ 309.440105][T11592] loop0: detected capacity change from 0 to 4096 [ 309.484535][T11592] EXT4-fs (loop0): Test dummy encryption mode enabled [ 309.532340][T11592] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 309.552095][T11592] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 309.576518][ T4278] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.591344][ T4278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.599822][ T4278] usb 5-1: Product: syz [ 309.604819][ T4278] usb 5-1: Manufacturer: syz [ 309.609501][ T4278] usb 5-1: SerialNumber: syz [ 309.617345][ T4278] usb 5-1: config 0 descriptor?? [ 309.671359][ T5211] usb 2-1: 0:2 : does not exist [ 309.702778][ T5211] usb 2-1: USB disconnect, device number 19 [ 309.884186][ T4278] usb 5-1: USB disconnect, device number 25 [ 309.911208][T11585] loop3: detected capacity change from 0 to 32768 [ 309.963684][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.689887][T11629] loop3: detected capacity change from 0 to 512 [ 310.782718][T11629] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 310.863158][T11629] EXT4-fs (loop3): 1 truncate cleaned up [ 310.868888][T11629] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 311.357083][T11649] loop0: detected capacity change from 0 to 1024 [ 311.456645][T11649] EXT4-fs (loop0): Test dummy encryption mode enabled [ 311.504266][T11649] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 311.612817][T11635] loop2: detected capacity change from 0 to 32768 [ 311.844640][T11635] XFS (loop2): Mounting V5 Filesystem [ 311.879804][T11663] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 311.969854][T11635] XFS (loop2): Ending clean mount [ 312.036909][T11635] XFS (loop2): Quotacheck needed: Please wait. [ 312.104976][T11640] loop1: detected capacity change from 0 to 32768 [ 312.177395][T11635] XFS (loop2): Quotacheck: Done. [ 312.260734][ T4195] XFS (loop2): Unmounting Filesystem [ 312.268389][T11640] XFS (loop1): Mounting V5 Filesystem [ 312.527673][T11640] XFS (loop1): Ending clean mount [ 312.539383][T11640] XFS (loop1): Quotacheck needed: Please wait. [ 312.655839][T11695] tipc: Can't bind to reserved service type 1 [ 312.727501][T11640] XFS (loop1): Quotacheck: Done. [ 312.915440][ T4189] XFS (loop1): Unmounting Filesystem [ 312.937956][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'. [ 313.054886][T11699] loop0: detected capacity change from 0 to 8192 [ 313.183979][T11703] netlink: 'syz.4.2968': attribute type 3 has an invalid length. [ 313.206068][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 313.211859][T11699] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 313.266485][T11699] REISERFS (device loop0): using ordered data mode [ 313.296536][T11699] reiserfs: using flush barriers [ 313.410969][T11699] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 313.486639][T11699] REISERFS (device loop0): checking transaction log (loop0) [ 313.539608][T11699] REISERFS (device loop0): Using r5 hash to sort names [ 313.571657][T11699] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 313.631244][ T5208] Bluetooth: hci4: command 0x0406 tx timeout [ 313.776080][T11714] loop4: detected capacity change from 0 to 128 [ 313.813823][T11697] loop3: detected capacity change from 0 to 40427 [ 313.857380][T11713] loop1: detected capacity change from 0 to 4096 [ 313.921316][T11713] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 313.955831][T11714] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.999496][T11697] F2FS-fs (loop3): Found nat_bits in checkpoint [ 314.017454][T11713] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 314.070229][T11714] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.080358][T11713] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 314.121088][T11713] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 314.211517][T11697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.246943][T11713] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 314.331495][T11713] ntfs: volume version 3.1. [ 314.346279][T11713] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 314.403338][T11713] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 314.417887][T11730] loop0: detected capacity change from 0 to 1024 [ 314.501131][T11713] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 314.553210][T11713] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 314.575251][ T154] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.616749][T11713] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 314.632485][ T4196] attempt to access beyond end of device [ 314.632485][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 314.658000][ T154] hfsplus: b-tree write err: -5, ino 25 [ 314.664318][ T154] hfsplus: b-tree write err: -5, ino 4 [ 314.669916][ T154] hfsplus: b-tree write err: -5, ino 2 [ 315.553559][T11762] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:18980 [ 315.596420][T11734] loop2: detected capacity change from 0 to 32768 [ 315.758725][T11734] JBD2: Ignoring recovery information on journal [ 315.973043][T11734] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 316.058580][T11775] loop1: detected capacity change from 0 to 4096 [ 316.177203][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 316.185955][T11783] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.291330][ T5208] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 316.543182][T11794] program syz.2.3002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.591673][ T5208] usb 1-1: Using ep0 maxpacket: 16 [ 316.670798][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.677179][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.741547][ T5208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.772441][ T5208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.792901][ T5208] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 316.821035][ T5208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.846224][ T5208] usb 1-1: config 0 descriptor?? [ 317.302194][T11817] loop2: detected capacity change from 0 to 4096 [ 317.336274][ T5208] wacom 0003:056A:0084.0024: unbalanced delimiter at end of report description [ 317.357988][ T5208] wacom 0003:056A:0084.0024: parse failed [ 317.368402][ T5208] wacom: probe of 0003:056A:0084.0024 failed with error -22 [ 317.494509][T11817] ntfs3: loop2: failed to convert "0080" to maciceland [ 317.556803][ T5208] usb 1-1: USB disconnect, device number 18 [ 317.698323][T11802] loop3: detected capacity change from 0 to 40427 [ 317.732255][T11802] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 317.776836][T11802] F2FS-fs (loop3): inline encryption not supported [ 317.828770][T11802] F2FS-fs (loop3): invalid crc value [ 317.861506][T11802] F2FS-fs (loop3): Found nat_bits in checkpoint [ 317.952917][T11833] loop4: detected capacity change from 0 to 2048 [ 318.019267][T11802] F2FS-fs (loop3): Start checkpoint disabled! [ 318.046179][T11838] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.071579][T11802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 318.174825][T11840] loop0: detected capacity change from 0 to 256 [ 318.329447][T11842] loop4: detected capacity change from 0 to 2048 [ 318.392873][T11842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.493287][ T154] attempt to access beyond end of device [ 318.493287][ T154] loop3: rw=2049, want=40976, limit=40427 [ 318.642335][T11829] loop2: detected capacity change from 0 to 32768 [ 318.768522][T11829] JBD2: Ignoring recovery information on journal [ 318.976363][T11829] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 319.197683][T11829] (syz.2.3023,11829,1):ocfs2_remount:631 ERROR: Cannot change data mode on remount [ 319.329576][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 319.428753][T11887] sg_write: data in/out 327680/1 bytes for SCSI command 0xf0-- guessing data in; [ 319.428753][T11887] program syz.0.3049 not setting count and/or reply_len properly [ 319.559852][T11890] loop4: detected capacity change from 0 to 4096 [ 319.629349][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 319.681895][T11897] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.795937][T11901] loop2: detected capacity change from 0 to 64 [ 319.901674][T11905] loop4: detected capacity change from 0 to 1024 [ 319.946520][T11903] loop1: detected capacity change from 0 to 8192 [ 320.037908][T11903] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 320.077491][T11903] REISERFS (device loop1): using ordered data mode [ 320.121297][T11903] reiserfs: using flush barriers [ 320.201541][T11903] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 320.238482][ T154] hfsplus: b-tree write err: -5, ino 25 [ 320.256077][T11915] loop0: detected capacity change from 0 to 4096 [ 320.258425][ T154] hfsplus: b-tree write err: -5, ino 4 [ 320.271790][T11903] REISERFS (device loop1): checking transaction log (loop1) [ 320.292154][ T154] hfsplus: b-tree write err: -5, ino 2 [ 320.339228][ T154] hfsplus: b-tree write err: -5, ino 17 [ 320.387134][T11915] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 320.541213][T11915] ntfs3: loop0: failed to convert "c46c" to iso8859-13 [ 320.593265][T11903] REISERFS (device loop1): Using tea hash to sort names [ 320.608664][T11903] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 321.137100][T11947] loop0: detected capacity change from 0 to 64 [ 321.171330][ T5202] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 321.441145][ T5202] usb 5-1: Using ep0 maxpacket: 8 [ 321.487525][T11963] loop3: detected capacity change from 0 to 256 [ 321.561368][ T5202] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.616069][ T5202] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 321.667025][ T5202] usb 5-1: config 0 interface 0 has no altsetting 0 [ 321.707693][ T5202] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 321.761042][ T5202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.794219][ T5202] usb 5-1: config 0 descriptor?? [ 321.935361][T11986] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3097'. [ 322.259256][T12002] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.273984][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x3 [ 322.313911][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.320950][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.358074][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.404121][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.431979][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.461347][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.468387][ T5202] lenovo 0003:17EF:60A4.0025: unknown main item tag 0x0 [ 322.498381][ T5202] lenovo 0003:17EF:60A4.0025: hidraw0: USB HID v0.04 Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0 [ 322.572582][ T5202] usb 5-1: USB disconnect, device number 26 [ 322.703606][T12009] fido_id[12009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 323.030175][T11987] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 323.179868][ T4260] hfsplus: b-tree write err: -5, ino 25 [ 323.220630][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 323.228905][T12028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.230639][ T4260] hfsplus: b-tree write err: -5, ino 4 [ 323.266755][ T4260] hfsplus: b-tree write err: -5, ino 2 [ 323.369083][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 323.369099][ T26] audit: type=1800 audit(1778923185.827:51): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3115" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 323.542556][T12032] device vlan3 entered promiscuous mode [ 323.548176][T12032] device bridge0 entered promiscuous mode [ 323.552161][T12011] set_capacity_and_notify: 5 callbacks suppressed [ 323.552202][T12011] loop0: detected capacity change from 0 to 32768 [ 323.607294][T12011] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3107 (12011) [ 323.643226][T12011] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 323.662568][T12011] BTRFS info (device loop0): using free space tree [ 323.688268][T12011] BTRFS info (device loop0): has skinny extents [ 323.751184][ T4705] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 323.961430][T12011] BTRFS info (device loop0): enabling ssd optimizations [ 324.151339][ T4705] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 324.186051][ T4705] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 324.231065][ T4705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 48, changing to 9 [ 324.257806][ T4705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8240, setting to 1024 [ 324.287939][ T4705] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 324.460121][T12060] loop2: detected capacity change from 0 to 32768 [ 324.486042][ T4705] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 324.505145][T12060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3122 (12060) [ 324.521761][ T4705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.556303][ T4705] usb 4-1: Product: syz [ 324.560540][ T4705] usb 4-1: Manufacturer: syz [ 324.597324][ T4705] usb 4-1: SerialNumber: syz [ 324.642885][ T4705] usb 4-1: config 0 descriptor?? [ 324.697017][ T4705] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 324.717041][ T4705] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 324.801277][ T4705] garmin_gps: probe of ttyUSB0 failed with error -8 [ 324.842442][T12060] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 324.878668][T12060] BTRFS info (device loop2): using free space tree [ 324.899887][ T4705] usb 4-1: USB disconnect, device number 18 [ 324.911728][T12060] BTRFS info (device loop2): has skinny extents [ 324.922644][ T4705] garmin_gps 4-1:0.0: device disconnected [ 325.247511][T12065] loop4: detected capacity change from 0 to 32768 [ 325.284119][T12060] BTRFS info (device loop2): enabling ssd optimizations [ 325.421426][T12065] XFS (loop4): Mounting V5 Filesystem [ 325.557959][T12116] loop1: detected capacity change from 0 to 128 [ 325.802438][T12116] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 325.856297][T12116] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.870455][T12065] XFS (loop4): Ending clean mount [ 325.937272][T12065] XFS (loop4): Quotacheck needed: Please wait. [ 326.107628][T12065] XFS (loop4): Quotacheck: Done. [ 326.219240][ T4199] XFS (loop4): Unmounting Filesystem [ 326.258111][T12127] loop1: detected capacity change from 0 to 1024 [ 326.291043][T12110] loop0: detected capacity change from 0 to 40427 [ 326.337426][T12130] loop3: detected capacity change from 0 to 64 [ 326.381429][T12127] hfsplus: bad catalog entry type [ 326.475020][ T9] hfsplus: b-tree write err: -5, ino 25 [ 326.482329][ T9] hfsplus: b-tree write err: -5, ino 4 [ 326.487937][ T9] hfsplus: b-tree write err: -5, ino 2 [ 326.517842][T12110] F2FS-fs (loop0): Found nat_bits in checkpoint [ 326.585522][T12139] loop2: detected capacity change from 0 to 8 [ 326.636168][T12110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 326.679089][T12142] program syz.1.3144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.761161][T12142] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 326.912956][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.927484][ T4193] attempt to access beyond end of device [ 326.927484][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 327.114699][T12150] loop3: detected capacity change from 0 to 256 [ 327.222436][T12150] exfat: Deprecated parameter 'utf8' [ 327.230383][T12150] exfat: Deprecated parameter 'utf8' [ 327.258057][T12150] exfat: Deprecated parameter 'namecase' [ 327.274333][T12150] exfat: Deprecated parameter 'namecase' [ 327.298646][T12150] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 327.350763][T12158] loop4: detected capacity change from 0 to 4096 [ 327.442423][T12158] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 327.588063][T12158] ntfs: volume version 3.1. [ 327.904750][T12170] NILFS (loop1): invalid segment: Checksum error in segment payload [ 327.948370][T12170] NILFS (loop1): trying rollback from an earlier position [ 328.004807][T12170] NILFS (loop1): recovery complete [ 328.097226][T12186] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.138226][T10169] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 328.156059][T12183] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 328.282411][T12183] overlayfs: filesystem on './file0' not supported [ 328.751812][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 328.828016][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 328.861260][ T4232] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 328.923449][T12216] set_capacity_and_notify: 3 callbacks suppressed [ 328.923466][T12216] loop4: detected capacity change from 0 to 1024 [ 328.950744][T12211] loop0: detected capacity change from 0 to 4096 [ 329.021281][T12224] loop2: detected capacity change from 0 to 64 [ 329.040852][T12211] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 329.061456][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.102270][T12226] loop3: detected capacity change from 0 to 128 [ 329.111123][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 329.175346][ T154] hfsplus: b-tree write err: -5, ino 25 [ 329.183105][ T154] hfsplus: b-tree write err: -5, ino 4 [ 329.188723][ T154] hfsplus: b-tree write err: -5, ino 2 [ 329.201523][T12226] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.226306][T12211] ntfs: volume version 3.1. [ 329.231524][ T4232] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 329.244514][ T4232] usb 2-1: config 2 has no interface number 0 [ 329.262523][ T4232] usb 2-1: config 2 interface 31 has no altsetting 0 [ 329.373377][T12229] netlink: 'syz.4.3186': attribute type 29 has an invalid length. [ 329.429064][T12229] netlink: 'syz.4.3186': attribute type 29 has an invalid length. [ 329.440498][ T154] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 329.469541][T12233] netlink: 'syz.4.3186': attribute type 29 has an invalid length. [ 329.478223][ T4232] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 329.495272][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.550105][ T4232] usb 2-1: Product: syz [ 329.570408][ T4232] usb 2-1: Manufacturer: syz [ 329.600842][ T4232] usb 2-1: SerialNumber: syz [ 329.709786][T12243] loop4: detected capacity change from 0 to 1024 [ 329.742398][T12247] loop2: detected capacity change from 0 to 136 [ 330.098748][T12259] loop2: detected capacity change from 0 to 1024 [ 330.144576][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3202'. [ 330.177425][T12259] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 330.189307][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'. [ 330.209079][T12267] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3204'. [ 330.219474][T12265] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 330.231315][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'. [ 330.415415][T12273] loop4: detected capacity change from 0 to 512 [ 330.471952][ T4232] ch9200: probe of 2-1:2.31 failed with error -22 [ 330.512624][ T4232] usb 2-1: USB disconnect, device number 20 [ 330.569851][T12273] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 330.688502][T12273] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.825278][T12295] bridge0: port 3(syz_tun) entered blocking state [ 330.858141][T12295] bridge0: port 3(syz_tun) entered disabled state [ 330.870375][T12295] device syz_tun entered promiscuous mode [ 330.893694][T12295] bridge0: port 3(syz_tun) entered blocking state [ 330.900810][T12295] bridge0: port 3(syz_tun) entered forwarding state [ 331.070365][T12306] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3217'. [ 331.092545][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 331.205520][T12310] loop0: detected capacity change from 0 to 1024 [ 331.337403][T12310] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 331.408217][T12319] loop4: detected capacity change from 0 to 4096 [ 331.417505][T12310] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.3219: lblock 2 mapped to illegal pblock 2 (length 1) [ 331.527914][T12310] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 331.536408][T12310] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.3219: lblock 0 mapped to illegal pblock 48 (length 1) [ 331.563075][T12310] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 331.590055][T12328] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.603985][T12310] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.3219: Failed to acquire dquot type 0 [ 331.615811][ T26] audit: type=1326 audit(1778923194.077:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.3.3215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcd02fe59 code=0x7fc00000 [ 331.640763][T12310] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 331.685017][T12310] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.3219: mark_inode_dirty error [ 331.717969][ T26] audit: type=1326 audit(1778923194.077:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.3.3215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bcd02fe59 code=0x7fc00000 [ 331.750044][T12310] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 331.815786][T12310] EXT4-fs (loop0): 1 orphan inode deleted [ 331.845038][T12310] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,jqfmt=vfsv1,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 331.851787][T10169] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 331.899345][T12336] mkiss: ax0: crc mode is auto. [ 331.918713][T12339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3228'. [ 331.935856][ T26] audit: type=1326 audit(1778923194.107:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.3.3215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcd02fe59 code=0x7fc00000 [ 331.976914][T12339] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3228'. [ 332.010354][T12339] netlink: 'syz.4.3228': attribute type 6 has an invalid length. [ 332.042461][T10169] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 332.069170][T10169] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 332.091216][T12339] netlink: 'syz.4.3228': attribute type 5 has an invalid length. [ 332.109284][ T26] audit: type=1326 audit(1778923194.107:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.3.3215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcd02fe59 code=0x7fc00000 [ 332.141128][ T4227] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 332.249598][ T26] audit: type=1326 audit(1778923194.107:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.3.3215" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcd02fe59 code=0x7fc00000 [ 332.322992][ T9] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.338153][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 332.385197][ T4193] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 332.417933][ T4193] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 332.449067][ T4193] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 332.530200][ T5207] Bluetooth: hci4: command 0x0405 tx timeout [ 332.591147][ T4227] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 332.612685][ T4227] usb 3-1: config 5 has no interface number 0 [ 332.629418][ T4227] usb 3-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 332.671655][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.695192][ T4227] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.734061][ T4227] usb 3-1: config 5 interface 123 has no altsetting 0 [ 332.809963][ T9] hfsplus: b-tree write err: -5, ino 8 [ 332.942224][ T4227] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 332.979497][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.018691][ T4227] usb 3-1: Product: syz [ 333.045534][ T4227] usb 3-1: Manufacturer: syz [ 333.054213][ T4227] usb 3-1: SerialNumber: syz [ 333.438311][ T4227] comedi comedi5: Wrong number of endpoints [ 333.447891][ T4227] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 333.480494][ T4227] usb 3-1: USB disconnect, device number 18 [ 333.681715][T12363] XFS (loop0): Mounting V5 Filesystem [ 333.863767][T12363] XFS (loop0): Ending clean mount [ 334.071948][T12382] set_capacity_and_notify: 3 callbacks suppressed [ 334.071965][T12382] loop3: detected capacity change from 0 to 32768 [ 334.173437][ T4193] XFS (loop0): Unmounting Filesystem [ 334.223289][T12382] jfs_lookup: iget failed on inum 32 [ 334.248771][T12382] jfs_lookup: iget failed on inum 32 [ 334.519807][T12405] netlink: 'syz.4.3250': attribute type 2 has an invalid length. [ 334.573122][T12405] netlink: 'syz.4.3250': attribute type 8 has an invalid length. [ 334.611395][T12405] __nla_validate_parse: 1 callbacks suppressed [ 334.611412][T12405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3250'. [ 334.691854][ T276] ------------[ cut here ]------------ [ 334.697818][ T276] WARNING: CPU: 0 PID: 276 at fs/jfs/jfs_dmap.c:2943 dbAdjTree+0x448/0x4d0 [ 334.727358][ T276] Modules linked in: [ 334.773330][ T276] CPU: 1 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 334.780843][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.870390][ T276] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 334.886945][ T276] Code: e8 5d f9 ee fe e9 5a ff ff ff e8 b3 da a9 fe eb 05 e8 ac da a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 da a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 334.890338][T12415] loop4: detected capacity change from 0 to 512 [ 334.986623][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.995182][ T276] RSP: 0000:ffffc900025ff668 EFLAGS: 00010293 [ 335.029495][ T276] RAX: ffffffff82cf5b78 RBX: ffff88807a0aa010 RCX: ffff88801e0a3b80 [ 335.040642][ T276] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 335.055676][ T276] RBP: 0000000000020056 R08: ffffea0001e82a87 R09: 1ffffd40003d0550 [ 335.075173][T12415] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.098950][ T276] R10: dffffc0000000000 R11: fffff940003d0551 R12: ffff88807a0aa018 [ 335.124430][ T276] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 335.165856][T12415] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 335.219868][ T276] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 335.243041][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.268265][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.285259][T12415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3255: bg 0: block 248: padding at end of block bitmap is not set [ 335.315926][T12411] loop2: detected capacity change from 0 to 32768 [ 335.319842][ T276] CR2: 0000200000000180 CR3: 000000007217c000 CR4: 00000000003506e0 [ 335.348929][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.373171][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.384840][T12415] __quota_error: 29 callbacks suppressed [ 335.384856][T12415] Quota error (device loop4): write_blk: dquota write failed [ 335.426321][ T276] Call Trace: [ 335.429776][ T276] [ 335.436396][T12415] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 335.450451][ T276] ? __might_sleep+0xf0/0xf0 [ 335.459607][T12415] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.3255: Failed to acquire dquot type 1 [ 335.481536][ T276] ? mark_page_accessed+0xce5/0x12b0 [ 335.493258][ T276] dbJoin+0x238/0x300 [ 335.497702][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.508785][ T276] dbFreeBits+0x4e1/0xd80 [ 335.513663][ T276] dbFree+0x32e/0x640 [ 335.520538][ T276] txFreeMap+0x9e2/0xde0 [ 335.528150][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 335.533927][ T276] xtTruncate+0xcc0/0x2d10 [ 335.538518][ T276] ? xtInitRoot+0x160/0x160 [ 335.543696][ T276] ? invalidate_inode_page+0x360/0x360 [ 335.549408][ T276] ? __lock_acquire+0x7d10/0x7d10 [ 335.555312][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 335.556393][T12415] EXT4-fs (loop4): 1 truncate cleaned up [ 335.560641][ T276] ? memset+0x1e/0x40 [ 335.570881][ T276] ? __dquot_initialize+0x213/0xcd0 [ 335.584787][ T276] jfs_free_zero_link+0x358/0x4b0 [ 335.595514][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.597594][T12415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.613614][ T276] ? inode_wait_for_writeback+0x1df/0x220 [ 335.628115][ T276] ? jfs_write_failed+0x190/0x190 [ 335.638945][ T276] ? sb_clear_inode_writeback+0x360/0x360 [ 335.666420][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 335.674526][ T276] ? bit_waitqueue+0x30/0x30 [ 335.679353][ T276] jfs_evict_inode+0x359/0x430 [ 335.686391][ T276] ? evict+0x4c3/0x8d0 [ 335.690668][ T276] ? jfs_write_inode+0x220/0x220 [ 335.708026][ T276] evict+0x4c9/0x8d0 [ 335.716321][ T276] ? proc_nr_inodes+0x320/0x320 [ 335.722032][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 335.727450][ T276] ? _raw_spin_unlock+0x24/0x40 [ 335.732826][ T276] ? iput+0x706/0x8a0 [ 335.735658][T12415] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 335.737058][ T276] jfs_lazycommit+0x435/0xb40 [ 335.760315][ T276] ? txFreelock+0x5a0/0x5a0 [ 335.772525][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 335.789501][T12415] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 335.795524][ T276] ? sched_dynamic_update+0x210/0x210 [ 335.824553][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 335.834458][T12415] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.3255: Failed to acquire dquot type 1 [ 335.840103][ T276] ? __kthread_parkme+0x157/0x1b0 [ 335.856981][ T276] kthread+0x436/0x520 [ 335.863284][ T276] ? txFreelock+0x5a0/0x5a0 [ 335.868215][ T276] ? kthread_blkcg+0xd0/0xd0 [ 335.878443][ T276] ret_from_fork+0x1f/0x30 [ 335.920878][ T276] [ 335.924358][ T276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 335.931686][ T276] CPU: 1 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 335.938920][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.949130][ T276] Call Trace: [ 335.952447][ T276] [ 335.955428][ T276] dump_stack_lvl+0x188/0x250 [ 335.960146][ T276] ? show_regs_print_info+0x20/0x20 [ 335.965387][ T276] ? load_image+0x400/0x400 [ 335.969950][ T276] panic+0x2e5/0x810 [ 335.973896][ T276] ? bpf_jit_dump+0xd0/0xd0 [ 335.978449][ T276] ? ret_from_fork+0x1f/0x30 [ 335.983078][ T276] ? dbAdjTree+0x448/0x4d0 [ 335.987535][ T276] __warn+0x248/0x2b0 [ 335.991555][ T276] ? dbAdjTree+0x448/0x4d0 [ 335.996007][ T276] report_bug+0x1b7/0x2e0 [ 336.000389][ T276] handle_bug+0x3a/0x70 [ 336.004595][ T276] exc_invalid_op+0x16/0x40 [ 336.009143][ T276] asm_exc_invalid_op+0x16/0x20 [ 336.014033][ T276] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 336.019100][ T276] Code: e8 5d f9 ee fe e9 5a ff ff ff e8 b3 da a9 fe eb 05 e8 ac da a9 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 98 da a9 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 336.039153][ T276] RSP: 0000:ffffc900025ff668 EFLAGS: 00010293 [ 336.045267][ T276] RAX: ffffffff82cf5b78 RBX: ffff88807a0aa010 RCX: ffff88801e0a3b80 [ 336.053365][ T276] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 336.061398][ T276] RBP: 0000000000020056 R08: ffffea0001e82a87 R09: 1ffffd40003d0550 [ 336.069425][ T276] R10: dffffc0000000000 R11: fffff940003d0551 R12: ffff88807a0aa018 [ 336.077437][ T276] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 336.085567][ T276] ? dbAdjTree+0x448/0x4d0 [ 336.090210][ T276] ? dbAdjTree+0x448/0x4d0 [ 336.094706][ T276] ? __might_sleep+0xf0/0xf0 [ 336.099343][ T276] ? mark_page_accessed+0xce5/0x12b0 [ 336.104674][ T276] dbJoin+0x238/0x300 [ 336.108713][ T276] dbFreeBits+0x4e1/0xd80 [ 336.113208][ T276] dbFree+0x32e/0x640 [ 336.117250][ T276] txFreeMap+0x9e2/0xde0 [ 336.121531][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 336.126781][ T276] xtTruncate+0xcc0/0x2d10 [ 336.131262][ T276] ? xtInitRoot+0x160/0x160 [ 336.135831][ T276] ? invalidate_inode_page+0x360/0x360 [ 336.141339][ T276] ? __lock_acquire+0x7d10/0x7d10 [ 336.146399][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 336.151459][ T276] ? memset+0x1e/0x40 [ 336.155475][ T276] ? __dquot_initialize+0x213/0xcd0 [ 336.160721][ T276] jfs_free_zero_link+0x358/0x4b0 [ 336.165801][ T276] ? inode_wait_for_writeback+0x1df/0x220 [ 336.171568][ T276] ? jfs_write_failed+0x190/0x190 [ 336.176661][ T276] ? sb_clear_inode_writeback+0x360/0x360 [ 336.182427][ T276] ? do_raw_spin_lock+0x128/0x2f0 [ 336.187529][ T276] ? bit_waitqueue+0x30/0x30 [ 336.192208][ T276] jfs_evict_inode+0x359/0x430 [ 336.197128][ T276] ? evict+0x4c3/0x8d0 [ 336.201243][ T276] ? jfs_write_inode+0x220/0x220 [ 336.206235][ T276] evict+0x4c9/0x8d0 [ 336.210189][ T276] ? proc_nr_inodes+0x320/0x320 [ 336.215097][ T276] ? do_raw_spin_unlock+0x11d/0x230 [ 336.220359][ T276] ? _raw_spin_unlock+0x24/0x40 [ 336.225260][ T276] ? iput+0x706/0x8a0 [ 336.229288][ T276] jfs_lazycommit+0x435/0xb40 [ 336.234011][ T276] ? txFreelock+0x5a0/0x5a0 [ 336.238669][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 336.244611][ T276] ? sched_dynamic_update+0x210/0x210 [ 336.250039][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 336.255976][ T276] ? __kthread_parkme+0x157/0x1b0 [ 336.261038][ T276] kthread+0x436/0x520 [ 336.265156][ T276] ? txFreelock+0x5a0/0x5a0 [ 336.269805][ T276] ? kthread_blkcg+0xd0/0xd0 [ 336.274443][ T276] ret_from_fork+0x1f/0x30 [ 336.278913][ T276] [ 336.282383][ T276] Kernel Offset: disabled [ 336.287085][ T276] Rebooting in 86400 seconds..