last executing test programs: 7m13.246052023s ago: executing program 2 (id=8473): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x2, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x8, 0x0, @mcast1}}, @sadb_key={0x1, 0x8}]}, 0x78}, 0x1, 0x7}, 0x0) 7m12.80468023s ago: executing program 2 (id=8479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x6c) 7m11.877597704s ago: executing program 2 (id=8484): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) 7m11.638082088s ago: executing program 2 (id=8488): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 7m11.047351567s ago: executing program 2 (id=8497): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1cc6cc60af0c36d}) 7m9.173585985s ago: executing program 2 (id=8519): r0 = socket(0x40000000002, 0x3, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x20004081) 7m8.688528843s ago: executing program 32 (id=8519): r0 = socket(0x40000000002, 0x3, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x20004081) 2.85350949s ago: executing program 0 (id=14798): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000840)={0x240, 0x2, 0x0, {{0x500, 0xff, 0xffff, 0xe803, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x24, '\xd2\x99\x98\x80\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x974\xbd\xfd\xf0\xadpt\x13\xba3\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x240) 2.594683973s ago: executing program 0 (id=14802): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 2.504853624s ago: executing program 3 (id=14803): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000440)=0x5, 0x4) 2.293106116s ago: executing program 0 (id=14806): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') pread64(r0, &(0x7f0000000100)=""/160, 0xa0, 0x7f1) 2.264236386s ago: executing program 3 (id=14807): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x2, @dev, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="daffc3fa80002cd21721a4af36a4a2ab00000000000000025a91f64b007f0c6a96903d68d51f9405", 0x5ac}], 0x1}, 0x4b00) 2.076383798s ago: executing program 0 (id=14810): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000008c0)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d6c6f7765722c696f636861727365743d69736f383835392d31342c696f636861727365743d63703935302c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c696f636861727365743d63703733372c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c636865636b3d72656c617865642c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c0035ef24b4db44df79f65e180f02000000673c0e36328550"], 0x1, 0x276, &(0x7f0000000640)="$eJzs3UFqG1cYB/BvLMmW2oW06KoUPNAuujJ2T2BTXCg1FFq0aLtoTS1DsYTBBkGTEMWrnCAnyHmyCblADpCQXbwwmSDPSFbCyEaJbJnk99vo8d77z/vezCCtZvTPN72DvcPj/ZN7z6NeT2JpMzbjNIlWLMXIgyj17GV5PwBwy51mWbzKciulM2pTktWlay0MALg2k7//i64FALgZv//x5y9bOzvbv6VpPaL3sN9OIv/Mx7f247/oRifWoxlnEdlY3v7p553tqKZDrfiuN+i3h8ne30+K42+9iDjPb0QzWuX5jTQ3kR/027X4olh/sxudXx9HM74qz/9Qko/2cnz/7UT9a9GMp//GYXRjr6htlL+/kaY/Zo9e3/1r2DvMJ4N+e2U8r5hdudELAwAAAAAAAAAAAAAAAAAAAADAJ20tHWu9+/6dytn5+Nq08Tw/7f1Ag4n386ynaZol+fyLfDW+rkZ1kXsHAAAAAAAAAAAAAAAAAACA2+L4/zsHu91u52iujdFj/SVD8Waea63OmopKUVo3iZhtrVqRvHpyZcZdNIb1dI6SaszvEiTjnsbk0Grkaw17GnljouejV6/HeWN0dx3sJnFFql52k8yhkZXcfpWpqeX3exrFDkomNy5ZffnLD6o5a04ZSiKiNj6Zlx+nNt9zeFPfQAAAAAAAAAAAAAAAAAAAwMjFQ78lgycLKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuDi//9naAyK8LQ5WWXYqEbRs+AtAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bl4GwAA//95LWni") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x140) 2.042565468s ago: executing program 3 (id=14811): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') open_tree(r0, &(0x7f00000002c0)='./mnt/file0\x00', 0x0) 1.9200978s ago: executing program 3 (id=14813): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x9, 0x4) 1.713428092s ago: executing program 3 (id=14817): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 1.669778283s ago: executing program 4 (id=14818): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000440)=0x5, 0x4) 1.669550103s ago: executing program 0 (id=14819): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="7747a888cb4d2a582690919fdf74", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.514401084s ago: executing program 4 (id=14821): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB="05000000080002"]) 1.485348815s ago: executing program 3 (id=14822): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582", @ANYRES32], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.437630235s ago: executing program 5 (id=14823): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, 0x0, &(0x7f0000000080)=0x40) 1.437056065s ago: executing program 1 (id=14824): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4}) 1.412363995s ago: executing program 0 (id=14825): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0xa, 0x7ec, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) 1.319026226s ago: executing program 5 (id=14826): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0xaf7, &(0x7f00000024c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0xb) 1.240059477s ago: executing program 4 (id=14827): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x6, 'lo\x00'}) 1.219462457s ago: executing program 1 (id=14828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 1.028829429s ago: executing program 5 (id=14829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 980.37236ms ago: executing program 4 (id=14830): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x18000, &(0x7f0000002980)={[{@nolazytime}, {@noload}]}, 0x1, 0x597, &(0x7f0000002ac0)="$eJzs3U9oHNUfAPDvzCbNr21+pgUFlR6KChVKN0n/aPWUXsVCoQfBSwybbQjZZGN2U5vQQ3ovYkFR6aXeFPSoiHgQLx69elE8C6JFpelBVia7m7ZJNm7SJlu7nw/Mdt682f1+X2ffmz+ZYQPoWoezlzTiqYg4l0QM3FXXE43Kw/X1lm9eLtzuiUIStdr535JIIuLWzcuF5vpJ49/9EbEUEU9GxLe9EUfT9XErC4tTY6VSca5RHqxOzw5WFhaPTU6PTRQnijMnXnzp1OmTp4aPD69mcr+u/nTt7avfv3Lj2iefHVoqvDeWxEj0N+rubseDVP8/6Y2RNctP7kSwDko6nQDbkmv0rt6IeCIGIveA+hrw8Kv1RdSALpVsuf/vDWMGPAqaxwHZ+W9zuucAYWlnjz9+PVM/AcniLjemek1P/dpE/G/l3GTfH8k9ZybZ+eaBnU2NLrB0JSKGenrWf/+Txvdv+4YeRILsqG/O1DfU+u2fZtv/zU8b660df/qb107vU3P8W143/qWr41+uxfh3rs0Yf7/+84ct41+JeHrD+Mlq/GSD+GlEvNFm/OuvfXm6VV3to4gjsXH8pmTz68ODFyZLxaH664Yxvj5y6OXN2r+vRfyRTdqfLZtts/1ffPf5M612o1n855/dfPtvFD87Bn+nzfgHb338aqu6LP54i/ZvFj9bdqPN+C+MHP6xzVUBAAAAAAAAAIAtSFfuZUvS/Op8mubz9Wd4H499aalcqR69UJ6fGa/f83YgetPmnVYD9XKSlYcb9+M2y8fXlE9ExMGIeDe3d6WcL5RL451uPAAAAAAAAAAAAAAAAAAAADwk9q95/v/PXP35f6BL+Mlv6F7b7f/GDfjvu7cfJx3LA9h99uPQvfR/6F6t+v/tr3Y5EWDXtdz/9+5uHsDuc/wP3Uv/h+612v9r/vYH3cb+HwAAAAAAAAAAAAAAAAAAAAAAAAAAdsS5s2ezqXb75uVCVh6/uDA/Vb54bLxYmcpPzxfyhfLcbH6iXJ4oFfOF8vS/fV6pXJ4dipn5S4PVYqU6WFlYHJ0uz89URyenxyaKo0W/KAIAAAAAAAAAAAAAAAAAAADr9a9MSZqPiHRlPk3z+Yj/R8SB6E0uTJaKQxHxWET8kOvty8rDnU4aAAAAAAAAAAAAAAAAAAAAHjGVhcWpsVKpOLf5TNrGOo/eTEQsrVmytc8Z/Wv3cs6S3dbbk6X7ip5EpzeTmR368gMAAAAAAAAAAAAAAAAAALvqzkO/W3zjlR1KCAAAAAAAAAAAAAAAAAAAALpS+kv2mkTEkYHn+tfW7kmWcxF9sSci3rp+/v1LY9Xq3HC2/PfcSn1EVD9oLD/eifyBNi3X6qLZjwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7KguLU2OlUnFumzN9bXxOh5sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsC3/BAAA//+SBtgH") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) 782.751122ms ago: executing program 5 (id=14831): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x11e, 0x48c, 0x0, 0x0) 779.534182ms ago: executing program 1 (id=14841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x100000000000000) 610.665634ms ago: executing program 5 (id=14832): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0x0, 0x0) 546.544924ms ago: executing program 1 (id=14833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xf}, {0x0, 0x3}}}, 0x24}}, 0x40) 373.301666ms ago: executing program 4 (id=14834): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) 372.527636ms ago: executing program 1 (id=14835): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') lstat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 353.390196ms ago: executing program 5 (id=14836): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp869,discard=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,errors=remount-ro\x00iocharset=cp737,grpquota,usrquota,gid=', @ANYRES16, @ANYBLOB=',quota,g\x00\x00=', @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c000100000000000000"], 0x5, 0x6170, &(0x7f00000066c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 923.109µs ago: executing program 1 (id=14837): r0 = io_uring_setup(0x737e, &(0x7f0000019580)={0x0, 0x1b1b, 0x1000, 0x2, 0x1a5}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f000001c280)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 0s ago: executing program 4 (id=14838): mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000100000000000000100008510000002000000d500ffffffe900839500007b0000000085000000220000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x2292f76207602815, &(0x7f0000000240)=""/146, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) kernel console output (not intermixed with test programs): ngth 0, skipping remainder of the config [ 1379.734432][ T6486] usb 5-1: config 0 has no interface number 0 [ 1379.770814][ T6486] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1379.800441][ T6486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.811924][ T6486] usb 5-1: Product: syz [ 1379.820972][ T6486] usb 5-1: Manufacturer: syz [ 1379.832683][ T6486] usb 5-1: SerialNumber: syz [ 1379.845108][ T6486] usb 5-1: config 0 descriptor?? [ 1379.881812][ T6486] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1379.889222][ T6486] usb 5-1: No valid video chain found. [ 1379.957381][ T1652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13261'. [ 1380.049361][ T1638] loop1: detected capacity change from 0 to 32768 [ 1380.094774][ T6483] usb 5-1: USB disconnect, device number 26 [ 1380.117098][ T1656] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1380.134337][ T1638] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1380.208944][ T1638] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1380.529788][ T4895] ocfs2: Unmounting device (7,1) on (node local) [ 1381.424229][ T1698] loop4: detected capacity change from 0 to 256 [ 1381.445839][ T1666] loop3: detected capacity change from 0 to 32768 [ 1381.527928][ T1698] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 1381.712228][ T1666] XFS (loop3): Mounting V5 Filesystem [ 1381.816634][ T1718] loop5: detected capacity change from 0 to 64 [ 1381.961930][ T1666] XFS (loop3): Ending clean mount [ 1381.991885][ T1666] XFS (loop3): Quotacheck needed: Please wait. [ 1381.998562][ T6483] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1382.122671][ T1666] XFS (loop3): Quotacheck: Done. [ 1382.180329][ T1730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13296'. [ 1382.222331][ T6483] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 1382.230591][ T6483] usb 2-1: config 0 has no interface number 0 [ 1382.272683][ T6483] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1382.296806][ T6483] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1382.349307][ T6483] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1382.389443][ T6483] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1382.436720][ T6483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.463744][ T6483] usb 2-1: config 0 descriptor?? [ 1382.492974][ T4892] XFS (loop3): Unmounting Filesystem [ 1382.501483][ T6483] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1382.628120][ T1742] ieee802154 phy0 wpan0: encryption failed: -22 [ 1382.720868][ T6483] spca561: probe of 2-1:0.156 failed with error -22 [ 1382.733083][ T6483] usb 2-1: MIDIStreaming interface descriptor not found [ 1382.804853][ T6483] usb 2-1: USB disconnect, device number 21 [ 1383.403941][ T1764] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1383.540389][ T47] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1383.592890][ T1772] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13316'. [ 1383.743888][ T1777] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13320'. [ 1383.776996][ T1777] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13320'. [ 1383.819881][ T1784] netlink: 'syz.4.13322': attribute type 1 has an invalid length. [ 1383.826653][ T1777] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13320'. [ 1383.952391][T12812] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1384.176828][T12812] usb 1-1: Using ep0 maxpacket: 16 [ 1384.193477][T12812] usb 1-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 1384.243529][T12812] usb 1-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1384.272980][T12812] usb 1-1: config 1 interface 0 altsetting 235 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1384.305352][T12812] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1384.321297][T12812] usb 1-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 1384.375598][T12812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.391329][T12812] usb 1-1: Product: syz [ 1384.395572][T12812] usb 1-1: Manufacturer: syz [ 1384.415327][T12812] usb 1-1: SerialNumber: syz [ 1384.428418][ T1774] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1384.447597][ T1804] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1384.476812][T12812] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1384.521173][ T1806] bond0: (slave bridge0): Releasing backup interface [ 1384.549778][ T1806] device bridge0 left promiscuous mode [ 1384.558800][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.566093][ T1806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.607532][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.618081][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1384.625650][ T1806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.649797][ T1806] device bridge_slave_0 left promiscuous mode [ 1384.665141][ T1806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.696604][ T22] usb 1-1: USB disconnect, device number 18 [ 1384.737694][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1384.737709][ T26] audit: type=1326 audit(25857576.659:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1813 comm="syz.1.13337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d94f8e929 code=0x7ffc0000 [ 1384.768370][ T26] audit: type=1326 audit(25857576.687:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1813 comm="syz.1.13337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d94f8e929 code=0x7ffc0000 [ 1384.769813][ T1806] device bridge_slave_1 left promiscuous mode [ 1384.799198][ T26] audit: type=1326 audit(25857576.715:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1813 comm="syz.1.13337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0d94f8e929 code=0x7ffc0000 [ 1384.833685][ T26] audit: type=1326 audit(25857576.715:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1813 comm="syz.1.13337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d94f8e929 code=0x7ffc0000 [ 1384.863581][ T26] audit: type=1326 audit(25857576.715:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1813 comm="syz.1.13337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d94f8e929 code=0x7ffc0000 [ 1384.901435][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.928302][ T1806] bond0: (slave bond_slave_0): Releasing backup interface [ 1384.955662][ T1806] device bond_slave_0 left promiscuous mode [ 1385.000848][ T1806] bond0: (slave bond_slave_1): Releasing backup interface [ 1385.044677][ T1806] device bond_slave_1 left promiscuous mode [ 1385.075753][ T1806] device team_slave_0 left promiscuous mode [ 1385.218464][ T1806] team0: Port device team_slave_0 removed [ 1385.230505][ T1806] device team_slave_1 left promiscuous mode [ 1385.291587][ T1806] team0: Port device team_slave_1 removed [ 1385.298497][ T1806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.319046][ T1773] Process accounting resumed [ 1385.514208][ T1806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.521674][ T1806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.796824][ T1829] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1385.815819][ T1832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.218495][ T1848] loop3: detected capacity change from 0 to 2048 [ 1386.284541][ T1848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1386.335678][ T1853] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13356'. [ 1386.369278][T12812] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1386.595456][T12812] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1386.615727][T12812] usb 2-1: config 0 has no interface number 0 [ 1386.633758][T12812] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1386.683224][T12812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.692258][T12812] usb 2-1: Product: syz [ 1386.696954][T12812] usb 2-1: Manufacturer: syz [ 1386.702614][T12812] usb 2-1: SerialNumber: syz [ 1386.718913][T12812] usb 2-1: config 0 descriptor?? [ 1386.755639][ T1868] SET target dimension over the limit! [ 1386.810467][ T1870] netlink: 'syz.0.13365': attribute type 16 has an invalid length. [ 1386.844845][ T1870] netlink: 'syz.0.13365': attribute type 17 has an invalid length. [ 1386.930493][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1386.976724][T12812] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1386.979161][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1387.016535][T12812] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1387.024370][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1387.051311][T12812] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1387.062352][T12812] usb 2-1: media controller created [ 1387.074330][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1387.109695][T12812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1387.121855][ T1880] netlink: 'syz.5.13370': attribute type 3 has an invalid length. [ 1387.174310][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1387.192495][ T1870] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1387.203205][T12812] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1387.327051][T12812] usb 2-1: USB disconnect, device number 22 [ 1387.616100][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13379'. [ 1387.806875][ T1903] xt_CT: No such helper "pptp" [ 1387.839353][ T6483] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1388.072393][ T6483] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.101642][ T6483] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1388.127831][ T6483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.175307][ T6483] usb 5-1: Product: syz [ 1388.179543][ T6483] usb 5-1: Manufacturer: syz [ 1388.184173][ T6483] usb 5-1: SerialNumber: syz [ 1388.220141][ T6483] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1388.663220][ T6483] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1388.696406][ T6483] usb 5-1: USB disconnect, device number 27 [ 1389.110800][ T1960] loop5: detected capacity change from 0 to 1024 [ 1389.270599][ T1960] hfsplus: extend alloc file! (8192,512,16777721) [ 1389.641583][ T1978] loop1: detected capacity change from 0 to 256 [ 1389.661108][ T1978] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1389.709123][ T1978] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1389.768246][ T1982] netlink: 'syz.4.13420': attribute type 21 has an invalid length. [ 1389.777532][ T1978] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1389.810828][ T1982] netlink: 164 bytes leftover after parsing attributes in process `syz.4.13420'. [ 1390.050215][ T1991] loop5: detected capacity change from 0 to 8 [ 1390.097491][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1390.132329][ T1988] loop3: detected capacity change from 0 to 4096 [ 1390.153660][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1390.163277][ T1988] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1390.189837][ T1988] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1390.225028][ T1995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1390.243680][ T1988] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1390.266133][ T1995] device bridge_slave_0 left promiscuous mode [ 1390.298799][ T1995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.319876][ T1988] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1390.359551][ T1988] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1390.373371][ T1988] ntfs: volume version 3.1. [ 1390.379817][ T1995] device bridge_slave_1 left promiscuous mode [ 1390.386534][ T1995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.396606][ T1988] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1390.422484][ T1988] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1390.445365][ T1995] bond0: (slave bond_slave_0): Releasing backup interface [ 1390.491136][ T1988] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1390.510567][ T1995] bond0: (slave bond_slave_1): Releasing backup interface [ 1390.531941][ T1988] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1390.564951][ T1988] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1390.650468][ T1995] team0: Port device team_slave_0 removed [ 1390.696767][ T1995] team0: Port device team_slave_1 removed [ 1390.741599][ T1995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.765266][ T1995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.805136][ T1995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.838522][ T1995] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1390.891136][ T1995] bond0: (slave macvlan0): Releasing backup interface [ 1390.939544][ T2010] netlink: 'syz.3.13434': attribute type 4 has an invalid length. [ 1390.975673][ T2010] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13434'. [ 1391.056876][ T2010] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1391.171155][ T2016] autofs4:pid:2016:autofs_fill_super: called with bogus options [ 1391.203244][ T2018] xt_l2tp: v2 tid > 0xffff: 134217728 [ 1391.252804][ T2020] loop4: detected capacity change from 0 to 8 [ 1391.297598][ T2020] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1391.349853][ T2020] cramfs: Error -3 while decompressing! [ 1391.369338][ T5129] udevd[5129]: incorrect cramfs checksum on /dev/loop4 [ 1391.381009][ T2020] cramfs: ffffffff96b4c568(26)->ffff88806379c000(4096) [ 1391.411673][ T2020] cramfs: Error -3 while decompressing! [ 1391.431812][ T5129] udevd[5129]: incorrect cramfs checksum on /dev/loop4 [ 1391.463914][ T2020] cramfs: ffffffff96b4c582(26)->ffff8880640b4000(4096) [ 1391.491477][ T2020] cramfs: Error -3 while decompressing! [ 1391.508087][ T2020] cramfs: ffffffff96b4c59c(16)->ffff88804e062000(4096) [ 1391.536391][ T2020] cramfs: Error -3 while decompressing! [ 1391.566219][ T2020] cramfs: ffffffff96b4c568(26)->ffff88806379c000(4096) [ 1391.857054][ T2043] loop5: detected capacity change from 0 to 8 [ 1391.928050][ T2043] SQUASHFS error: Failed to read block 0x6a4: -5 [ 1391.934475][ T2043] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 1391.996583][ T2043] SQUASHFS error: Unable to read inode 0x87 [ 1392.103349][ T2052] loop3: detected capacity change from 0 to 16 [ 1392.168672][ T2052] erofs: (device loop3): mounted with root inode @ nid 36. [ 1392.632602][ T2066] loop3: detected capacity change from 0 to 4096 [ 1392.711529][ T2066] ntfs3: loop3: ino=3, Correct links count -> 2. [ 1392.718025][ T2066] ntfs3: loop3: Failed to load $Volume. [ 1393.275090][ T2097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13478'. [ 1393.309637][ T2098] netlink: 12296 bytes leftover after parsing attributes in process `syz.5.13477'. [ 1393.341388][ T2098] netlink: 164 bytes leftover after parsing attributes in process `syz.5.13477'. [ 1393.722634][ T2108] loop4: detected capacity change from 0 to 4096 [ 1393.795715][ T2108] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1393.813596][ T2118] netlink: 'syz.1.13487': attribute type 9 has an invalid length. [ 1393.837975][ T2118] netlink: 'syz.1.13487': attribute type 7 has an invalid length. [ 1393.853426][ T2108] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 1393.862591][ T2118] netlink: 'syz.1.13487': attribute type 8 has an invalid length. [ 1393.881314][ T2108] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1393.936258][ T2108] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 1394.124622][ T2121] loop5: detected capacity change from 0 to 8192 [ 1394.320849][ T2121] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1394.353303][ T2121] FAT-fs (loop5): Filesystem has been set read-only [ 1394.588835][ T2140] netlink: 'syz.0.13498': attribute type 2 has an invalid length. [ 1394.646365][ T2144] usb usb1: usbfs: process 2144 (syz.5.13500) did not claim interface 0 before use [ 1394.732942][ T6486] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1394.945067][ T6486] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1394.967950][ T6486] usb 4-1: config 0 has no interface number 0 [ 1395.000433][ T6486] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1395.027539][ T6486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.049309][ T6486] usb 4-1: Product: syz [ 1395.053575][ T6486] usb 4-1: Manufacturer: syz [ 1395.068811][ T6486] usb 4-1: SerialNumber: syz [ 1395.096935][ T6486] usb 4-1: config 0 descriptor?? [ 1395.337278][ T6486] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1395.359917][ T6486] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1395.379154][ T6486] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1395.388713][ T6486] usb 4-1: media controller created [ 1395.425278][ T6486] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1395.495670][ T2174] block device autoloading is deprecated and will be removed. [ 1395.563601][ T6486] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1395.628660][ T6486] usb 4-1: USB disconnect, device number 27 [ 1395.647936][ T6483] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1395.854101][ T6483] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1395.883060][ T6483] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.883752][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1395.900615][ T6483] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1395.900662][ T6483] usb 2-1: config 1 has no interface number 0 [ 1395.900714][ T6483] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1395.900742][ T6483] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.939061][ T6483] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1395.971980][ T6483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.975766][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1395.991704][ T6483] usb 2-1: Product: syz [ 1396.003704][ T6483] usb 2-1: Manufacturer: syz [ 1396.013261][ T6483] usb 2-1: SerialNumber: syz [ 1396.028281][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1396.050503][ T6483] cdc_wdm 2-1:1.128: skipping garbage [ 1396.060806][ T2187] device bridge_slave_0 left promiscuous mode [ 1396.061446][ T6483] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 1396.079613][ T2187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.093923][ T6483] cdc_wdm 2-1:1.128: Unknown control protocol [ 1396.102332][ T2187] device bridge_slave_1 left promiscuous mode [ 1396.116175][ T2187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.189536][ T2187] bond0: (slave bond_slave_0): Releasing backup interface [ 1396.210931][ T2187] device bond_slave_0 left promiscuous mode [ 1396.269337][ T2187] bond0: (slave bond_slave_1): Releasing backup interface [ 1396.276017][ T2178] loop5: detected capacity change from 0 to 32768 [ 1396.301711][ T2187] device bond_slave_1 left promiscuous mode [ 1396.315558][ T6483] usb 2-1: USB disconnect, device number 23 [ 1396.347456][ T2187] device team_slave_0 left promiscuous mode [ 1396.453585][ T2187] team0: Port device team_slave_0 removed [ 1396.493220][ T2187] device team_slave_1 left promiscuous mode [ 1396.496478][ T2200] loop3: detected capacity change from 0 to 256 [ 1396.523063][ T2200] exfat: Deprecated parameter 'namecase' [ 1396.552606][ T2200] exfat: Deprecated parameter 'namecase' [ 1396.553751][ T2187] team0: Port device team_slave_1 removed [ 1396.596891][ T2200] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5c96c44, utbl_chksum : 0xe619d30d) [ 1396.597596][ T2187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.652869][ T2187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.681239][ T2187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.704759][ T2187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.782603][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1397.113016][ T2212] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1397.466546][ T2227] loop5: detected capacity change from 0 to 164 [ 1397.495313][ T2227] rock: directory entry would overflow storage [ 1397.509963][ T2227] rock: sig=0x66, size=4, remaining=3 [ 1397.535539][ T2227] rock: directory entry would overflow storage [ 1397.582855][ T2227] rock: sig=0x66, size=4, remaining=3 [ 1397.761297][ T2239] netlink: 'syz.4.13548': attribute type 1 has an invalid length. [ 1397.825736][ T2244] Option ' ' to dns_resolver key: bad/missing value [ 1398.374496][ T2264] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1398.529070][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1398.529088][ T26] audit: type=1326 audit(25857589.558:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1398.531724][ T2268] x_tables: unsorted entry at hook 3 [ 1398.547965][ T26] audit: type=1326 audit(25857589.577:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1398.757276][ T26] audit: type=1326 audit(25857589.764:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1398.810466][ T26] audit: type=1326 audit(25857589.802:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2269 comm="syz.4.13561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1398.847553][ T2279] Zero length message leads to an empty skb [ 1399.008147][ T2283] netlink: 'syz.4.13566': attribute type 1 has an invalid length. [ 1399.249149][ T2293] loop5: detected capacity change from 0 to 256 [ 1399.361275][ T2258] loop1: detected capacity change from 0 to 32768 [ 1399.505343][ T2258] XFS (loop1): Mounting V5 Filesystem [ 1399.654867][ T2258] XFS (loop1): Ending clean mount [ 1399.765076][ T4895] XFS (loop1): Unmounting Filesystem [ 1400.023521][ T2289] loop0: detected capacity change from 0 to 40427 [ 1400.051981][ T2289] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384) [ 1400.084518][ T2289] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1400.144227][ T2289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1400.219187][ T2314] loop3: detected capacity change from 0 to 4096 [ 1400.226300][ T6486] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1400.277502][ T2314] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1400.307044][ T2314] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1400.332667][ T2314] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1400.370530][ T2289] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1400.374265][ T2314] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1400.389891][ T2289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1400.400361][ T2314] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1400.405692][ T2291] loop4: detected capacity change from 0 to 40427 [ 1400.415665][ T2314] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1400.437430][ T6486] usb 6-1: Using ep0 maxpacket: 8 [ 1400.446592][ T6486] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1400.461685][ T6486] usb 6-1: config 6 has no interface number 0 [ 1400.480300][ T2314] ntfs: volume version 3.1. [ 1400.480992][ T2291] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1400.487262][ T6486] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1400.547506][ T2291] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1400.552040][ T6486] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1400.618564][ T6486] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1400.656299][ T2291] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1400.673786][ T6486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.704557][ T6486] usb 6-1: Product: syz [ 1400.708797][ T6486] usb 6-1: Manufacturer: syz [ 1400.713427][ T6486] usb 6-1: SerialNumber: syz [ 1400.766376][ T6486] hso 6-1:6.2: Failed to find INT IN ep [ 1400.795797][ T4890] syz-executor: attempt to access beyond end of device [ 1400.795797][ T4890] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1400.850201][ T2291] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1400.875573][ T2291] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1400.891233][ T2326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13577'. [ 1401.010421][ T6486] usb 6-1: USB disconnect, device number 17 [ 1401.628243][ T2340] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1401.976010][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13593'. [ 1402.177605][ T2366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13598'. [ 1402.452473][ T2374] loop5: detected capacity change from 0 to 16 [ 1402.482091][ T2374] erofs: (device loop5): mounted with root inode @ nid 36. [ 1402.801822][ T2389] netlink: 9 bytes leftover after parsing attributes in process `syz.5.13607'. [ 1402.975047][ T2358] loop1: detected capacity change from 0 to 32768 [ 1403.013987][ T2358] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.13596 (2358) [ 1403.044485][ T2396] sctp: [Deprecated]: syz.0.13610 (pid 2396) Use of int in maxseg socket option. [ 1403.044485][ T2396] Use struct sctp_assoc_value instead [ 1403.083843][ T2358] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1403.131282][ T2358] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1403.140042][ T2358] BTRFS info (device loop1): enabling ssd optimizations [ 1403.185394][ T2358] BTRFS info (device loop1): not using ssd optimizations [ 1403.214251][ T2358] BTRFS info (device loop1): turning off barriers [ 1403.251779][ T2358] BTRFS info (device loop1): use no compression [ 1403.274736][ T2358] BTRFS info (device loop1): using free space tree [ 1404.013392][ T4895] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1404.310699][ T2461] loop0: detected capacity change from 0 to 2048 [ 1404.370220][ T2461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1404.502653][ T2466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13630'. [ 1404.537232][ T2466] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1404.851409][ T2479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13634'. [ 1405.064351][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1405.171930][ T2481] loop0: detected capacity change from 0 to 4096 [ 1405.255528][ T2484] team0: Port device batadv0 removed [ 1405.279591][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1405.279607][ T26] audit: type=1800 audit(25857595.872:181): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13635" name="file0" dev="loop0" ino=0 res=0 errno=0 [ 1405.281364][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1405.368640][ T2484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1405.378349][ T2484] device bridge_slave_0 left promiscuous mode [ 1405.384747][ T2484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.421138][ T2484] device bridge_slave_1 left promiscuous mode [ 1405.427427][ T2484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.521971][ T2484] bond0: (slave bond_slave_0): Releasing backup interface [ 1405.577729][ T2484] bond0: (slave bond_slave_1): Releasing backup interface [ 1405.648642][ T2484] team0: Port device team_slave_0 removed [ 1405.696662][ T2475] loop3: detected capacity change from 0 to 32768 [ 1405.739943][ T2475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.13632 (2475) [ 1405.746135][ T2484] team0: Port device team_slave_1 removed [ 1405.787862][ T2484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.795727][ T2475] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1405.808370][ T2484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.816280][ T2484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.823719][ T2475] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1405.854503][ T2475] BTRFS info (device loop3): using free space tree [ 1405.868817][ T2484] bond0: (slave macvlan0): Releasing backup interface [ 1405.894765][ T2484] device veth1_vlan left promiscuous mode [ 1405.946795][ T2494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13638'. [ 1406.017830][ T2470] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1406.133879][ T2475] BTRFS info (device loop3): enabling ssd optimizations [ 1406.222629][ T2470] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1406.242719][ T2470] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.253536][ T2470] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1406.262449][ T2470] usb 5-1: config 1 has no interface number 0 [ 1406.279778][ T2470] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1406.340386][ T2470] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1406.354951][ T4892] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1406.414034][ T2470] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1406.445528][ T2470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.453779][ T2470] usb 5-1: Product: syz [ 1406.477661][ T2470] usb 5-1: Manufacturer: syz [ 1406.482486][ T2470] usb 5-1: SerialNumber: syz [ 1406.730432][ T5129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5129) [ 1406.961283][ T2470] usb 5-1: USB disconnect, device number 28 [ 1407.474136][ T2566] loop5: detected capacity change from 0 to 4096 [ 1407.521408][ T2566] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1407.564993][ T2566] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1407.613016][ T2566] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1407.665199][ T2566] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1407.722050][ T2566] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1407.768048][ T2566] ntfs: volume version 3.1. [ 1407.782052][ T2556] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1407.866801][ T2566] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1407.920683][ T2566] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1407.961006][ T2566] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1408.007090][ T2566] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1408.009111][ T2591] IPv6: sit1: Disabled Multicast RS [ 1408.286081][ T2599] netlink: 'syz.0.13672': attribute type 2 has an invalid length. [ 1408.581295][ T2611] usb usb8: usbfs: process 2611 (syz.3.13677) did not claim interface 8 before use [ 1409.108986][ T47] Bluetooth: hci0: command 0x080f tx timeout [ 1409.674190][ T2670] tmpfs: Bad value for 'mpol' [ 1410.385936][ T2702] loop5: detected capacity change from 0 to 128 [ 1410.417516][ T2702] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1410.450153][ T2692] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1410.468100][ T2702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1410.523876][ T2706] loop3: detected capacity change from 0 to 256 [ 1410.583580][ T2702] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1410.633460][ T2702] UDF-fs: error (device loop5): udf_count_free_bitmap: udf_count_free failed [ 1410.673803][ T2706] FAT-fs (loop3): Directory bread(block 64) failed [ 1410.715098][ T2706] FAT-fs (loop3): Directory bread(block 65) failed [ 1410.721937][ T2706] FAT-fs (loop3): Directory bread(block 66) failed [ 1410.743124][ T2706] FAT-fs (loop3): Directory bread(block 67) failed [ 1410.764499][ T2706] FAT-fs (loop3): Directory bread(block 68) failed [ 1410.771106][ T2706] FAT-fs (loop3): Directory bread(block 69) failed [ 1410.829290][ T2706] FAT-fs (loop3): Directory bread(block 70) failed [ 1410.835890][ T2706] FAT-fs (loop3): Directory bread(block 71) failed [ 1410.889283][ T2706] FAT-fs (loop3): Directory bread(block 72) failed [ 1410.916704][ T2706] FAT-fs (loop3): Directory bread(block 73) failed [ 1411.294939][ T2737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13725'. [ 1411.725704][ T2755] loop4: detected capacity change from 0 to 256 [ 1411.796067][ T2759] openvswitch: netlink: EtherType 0 is less than min 600 [ 1411.817005][ T2755] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1411.912023][ T2761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1411.958176][ T2763] loop5: detected capacity change from 0 to 256 [ 1411.973167][ T6486] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1412.186421][ T6486] usb 4-1: Using ep0 maxpacket: 16 [ 1412.195058][ T6486] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1412.214731][ T6486] usb 4-1: config 0 has no interface number 0 [ 1412.225625][ T6486] usb 4-1: config 0 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1412.248587][ T6486] usb 4-1: config 0 interface 55 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1412.299531][ T6486] usb 4-1: config 0 interface 55 has no altsetting 0 [ 1412.336235][ T2784] xt_hashlimit: max too large, truncated to 1048576 [ 1412.346401][ T6486] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=b4.92 [ 1412.370552][ T6486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.389954][ T6486] usb 4-1: Product: syz [ 1412.394194][ T6486] usb 4-1: Manufacturer: syz [ 1412.398878][ T6486] usb 4-1: SerialNumber: syz [ 1412.412446][ T6486] usb 4-1: config 0 descriptor?? [ 1412.418177][ T2751] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1412.442962][ T2751] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1412.462657][ T6486] spcp8x5 4-1:0.55: SPCP8x5 converter detected [ 1412.475228][ T6486] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1412.691075][ T6486] usb 4-1: USB disconnect, device number 28 [ 1412.714871][ T6486] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1412.740627][ T6486] spcp8x5 4-1:0.55: device disconnected [ 1412.863519][ T2794] loop0: detected capacity change from 0 to 4096 [ 1412.879947][ T2808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13755'. [ 1412.907918][ T2794] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1412.972198][ T2794] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1413.008714][ T2794] ntfs3: loop0: Failed to load $Extend. [ 1413.017718][ T2815] loop5: detected capacity change from 0 to 164 [ 1413.397861][ T2831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13759'. [ 1413.960785][ T6486] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1414.197688][ T6486] usb 2-1: config 97 has an invalid interface number: 194 but max is 0 [ 1414.200363][ T2867] CIFS: VFS: Malformed UNC in devname [ 1414.206066][ T6486] usb 2-1: config 97 has no interface number 0 [ 1414.206113][ T6486] usb 2-1: config 97 interface 194 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1414.285254][ T6486] usb 2-1: config 97 interface 194 has no altsetting 0 [ 1414.309655][ T6486] usb 2-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=62.03 [ 1414.339524][ T6486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.366608][ T6486] usb 2-1: Product: syz [ 1414.385052][ T6486] usb 2-1: Manufacturer: syz [ 1414.409972][ T6486] usb 2-1: SerialNumber: syz [ 1414.658989][ T6486] hub 2-1:97.194: bad descriptor, ignoring hub [ 1414.665271][ T6486] hub: probe of 2-1:97.194 failed with error -5 [ 1414.785230][ T6486] usb 2-1: USB disconnect, device number 24 [ 1414.959032][ T2892] xt_TCPMSS: Only works on TCP SYN packets [ 1415.042107][ T5129] udevd[5129]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:97.194/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.410828][ T2912] netlink: 'syz.5.13802': attribute type 13 has an invalid length. [ 1415.683029][ T2923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13804'. [ 1415.869599][ T2930] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13810'. [ 1415.935193][ T2933] loop3: detected capacity change from 0 to 256 [ 1415.942635][ T2930] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13810'. [ 1415.965618][ T2933] exfat: Deprecated parameter 'namecase' [ 1415.978746][ T2933] exfat: Deprecated parameter 'utf8' [ 1416.029138][ T2933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1416.624045][ T2952] loop5: detected capacity change from 0 to 4096 [ 1416.801008][ T2964] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13826'. [ 1417.003911][T23611] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1417.013884][T23611] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1417.031406][ T2969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13829'. [ 1417.157694][ T2972] netlink: 'syz.5.13830': attribute type 7 has an invalid length. [ 1417.165591][ T2972] netlink: 'syz.5.13830': attribute type 8 has an invalid length. [ 1417.253681][ T2470] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1417.317043][ T2950] loop3: detected capacity change from 0 to 32768 [ 1417.406764][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1417.406780][ T26] audit: type=1400 audit(25857607.219:182): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=2977 comm="syz.5.13833" [ 1417.477698][ T2470] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.531866][ T2470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1417.541785][ T2470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1417.599552][ T2980] Process accounting paused [ 1417.604360][ T2470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1417.614524][ T2470] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.656495][ T2470] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1417.698407][ T2470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.715619][ T2470] usb 2-1: config 0 descriptor?? [ 1417.749195][ T2966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1417.885855][ T2990] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1418.021101][ T2470] usb 2-1: USB disconnect, device number 25 [ 1418.278930][ T3004] netlink: 'syz.3.13837': attribute type 3 has an invalid length. [ 1418.301811][ T3000] loop5: detected capacity change from 0 to 4096 [ 1418.347863][ T3000] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1418.397443][ T3000] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1418.447800][ T3000] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1418.508689][ T3000] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1418.551458][ T3000] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1418.605687][ T3000] ntfs: volume version 3.1. [ 1418.636972][ T3000] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1418.686474][ T3000] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1418.769136][ T3000] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1418.825184][ T3000] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1418.865514][ T3015] loop0: detected capacity change from 0 to 4096 [ 1418.972899][ T3016] loop1: detected capacity change from 0 to 4096 [ 1419.022231][ T3019] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1419.033454][ T3016] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1419.145130][ T3016] ntfs3: loop1: failed to convert "c46c" to macroman [ 1419.524251][ T3031] loop5: detected capacity change from 0 to 256 [ 1419.609036][ T3031] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1419.628304][ T3033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13860'. [ 1420.143380][ T3018] loop3: detected capacity change from 0 to 32768 [ 1420.242445][ T3051] loop5: detected capacity change from 0 to 4096 [ 1420.278987][ T3051] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1420.310568][ T3018] XFS (loop3): Mounting V5 Filesystem [ 1420.414263][ T3051] ntfs3: loop5: failed to convert "c46c" to iso8859-5 [ 1420.467363][T22277] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 1420.508853][T22277] XFS (loop3): Unmount and run xfs_repair [ 1420.543534][T22277] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1420.587738][T22277] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 1420.639300][T22277] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 1420.686291][T22277] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1420.729540][T22277] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 1420.750150][T22277] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 1420.781399][T22277] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 1420.790318][T22277] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1420.833138][T22277] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1420.868224][ T3018] XFS (loop3): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 1420.905753][ T3018] XFS (loop3): Error -117 reserving per-AG metadata reserve pool. [ 1420.931757][ T3018] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1c6/0x1f0 (fs/xfs/xfs_fsops.c:587). Shutting down filesystem. [ 1420.962623][ T3018] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1420.991203][ T3018] XFS (loop3): Ending clean mount [ 1421.019220][ T3018] XFS (loop3): Failed to initialize disk quotas. [ 1421.051704][ T3083] netlink: 'syz.5.13881': attribute type 10 has an invalid length. [ 1421.086302][ T3018] XFS (loop3): Error -5 reserving per-AG metadata reserve pool. [ 1421.177184][T22277] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1421.230946][ T4892] XFS (loop3): Unmounting Filesystem [ 1421.442055][T22277] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1421.454912][T22277] usb 1-1: config 220 has an invalid interface descriptor of length 5, skipping [ 1421.464021][T22277] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.497296][T22277] usb 1-1: config 220 has no interface number 2 [ 1421.508685][T22277] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1421.540503][T22277] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1421.551191][T22277] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1421.558114][T22277] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1421.612920][T22277] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1421.638018][T22277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.667743][T22277] usb 1-1: Product: syz [ 1421.679431][T22277] usb 1-1: Manufacturer: syz [ 1421.691864][T22277] usb 1-1: SerialNumber: syz [ 1421.782606][ T3096] loop5: detected capacity change from 0 to 4096 [ 1421.828574][ T3096] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 1421.940398][T22277] usb 1-1: selecting invalid altsetting 0 [ 1421.962222][T22277] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1421.990245][T22277] usb 1-1: No valid video chain found. [ 1422.040108][T22277] usb 1-1: selecting invalid altsetting 0 [ 1422.053611][T22277] usbtest: probe of 1-1:220.1 failed with error -22 [ 1422.064735][ T3109] netlink: 'syz.3.13886': attribute type 10 has an invalid length. [ 1422.089995][T22277] usb 1-1: USB disconnect, device number 19 [ 1422.103569][ T3109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13886'. [ 1422.118100][ T3107] loop1: detected capacity change from 0 to 2048 [ 1422.177224][ T3109] device batadv0 entered promiscuous mode [ 1422.185957][ T3109] bridge0: port 3(batadv0) entered blocking state [ 1422.215054][ T3110] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1422.224800][ T3109] bridge0: port 3(batadv0) entered disabled state [ 1422.247993][ T3107] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=3, rec_len=16, name_len=1 [ 1422.262598][ T3109] bridge0: port 3(batadv0) entered blocking state [ 1422.270249][ T3109] bridge0: port 3(batadv0) entered forwarding state [ 1422.303809][ T3107] Remounting filesystem read-only [ 1422.673873][T23462] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1422.684481][T23462] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1422.898304][ T3134] IPVS: length: 87 != 24 [ 1423.270815][ T3150] loop3: detected capacity change from 0 to 1024 [ 1423.300049][ T3150] EXT4-fs: Ignoring removed bh option [ 1423.317074][ T3153] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13914'. [ 1423.329961][ T3150] EXT4-fs: inline encryption not supported [ 1423.354631][ T3150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 1423.391223][ T3150] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.13911: lblock 2 mapped to illegal pblock 2 (length 1) [ 1423.412173][ T3150] __quota_error: 7 callbacks suppressed [ 1423.412190][ T3150] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1423.454272][ T3150] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.13911: lblock 0 mapped to illegal pblock 48 (length 1) [ 1423.510387][ T3150] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1423.542678][ T3150] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.13911: Failed to acquire dquot type 0 [ 1423.560754][ T3150] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 1423.581977][ T3150] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.13911: mark_inode_dirty error [ 1423.608878][ T3150] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1423.641420][ T3150] EXT4-fs (loop3): 1 orphan inode deleted [ 1423.653728][ T3150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1423.675104][T23473] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 1423.744040][T23473] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1423.781770][T23473] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:21: Failed to release dquot type 0 [ 1423.829003][ T26] audit: type=1326 audit(25857613.224:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3169 comm="syz.4.13920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1423.851451][T23473] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:21: lblock 2 mapped to illegal pblock 2 (length 1) [ 1423.882554][ T26] audit: type=1326 audit(25857613.261:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3169 comm="syz.4.13920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1423.945132][ T26] audit: type=1326 audit(25857613.299:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3169 comm="syz.4.13920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1423.956495][T23473] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1423.967459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.047352][T23473] EXT4-fs error (device loop3): ext4_write_dquot:6794: comm kworker/u4:21: Failed to commit dquot type 0 [ 1424.104071][ T26] audit: type=1326 audit(25857613.299:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3169 comm="syz.4.13920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1424.126327][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.127464][T23473] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 1424.149483][ T4892] EXT4-fs (loop3): unmounting filesystem. [ 1424.165162][ T3176] loop4: detected capacity change from 0 to 256 [ 1424.169473][ T4892] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1424.230908][ T3176] FAT-fs (loop4): Directory bread(block 64) failed [ 1424.265121][ T26] audit: type=1326 audit(25857613.299:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3169 comm="syz.4.13920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1424.287372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1424.294442][ T3176] FAT-fs (loop4): Directory bread(block 65) failed [ 1424.298685][ T4892] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 1424.310400][ T3176] FAT-fs (loop4): Directory bread(block 66) failed [ 1424.310437][ T3176] FAT-fs (loop4): Directory bread(block 67) failed [ 1424.310509][ T3176] FAT-fs (loop4): Directory bread(block 68) failed [ 1424.310536][ T3176] FAT-fs (loop4): Directory bread(block 69) failed [ 1424.310602][ T3176] FAT-fs (loop4): Directory bread(block 70) failed [ 1424.310629][ T3176] FAT-fs (loop4): Directory bread(block 71) failed [ 1424.310698][ T3176] FAT-fs (loop4): Directory bread(block 72) failed [ 1424.310725][ T3176] FAT-fs (loop4): Directory bread(block 73) failed [ 1424.394027][ T4892] EXT4-fs error (device loop3): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error [ 1424.424056][ T3182] xt_hashlimit: size too large, truncated to 1048576 [ 1424.456719][ T3182] xt_hashlimit: invalid rate [ 1424.971512][ T3202] ubi31: attaching mtd0 [ 1425.032556][ T3202] ubi31: scanning is finished [ 1425.052331][ T3206] netlink: 'syz.5.13939': attribute type 3 has an invalid length. [ 1425.059436][ T3202] ubi31: empty MTD device detected [ 1425.093882][ T3206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1425.180599][ T3210] netlink: 'syz.4.13941': attribute type 1 has an invalid length. [ 1425.357746][ T3202] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1425.365391][ T3202] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1425.428615][ T3202] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1425.471215][ T3202] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1425.514119][ T3202] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1425.554952][ T3202] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1425.592292][ T3202] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2215156514 [ 1425.602461][ T3202] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1425.677464][ T3213] ubi31: background thread "ubi_bgt31d" started, PID 3213 [ 1426.427412][ T3248] loop5: detected capacity change from 0 to 64 [ 1426.543025][ T3248] Trying to free block not in datazone [ 1426.565337][ T3248] Trying to free block not in datazone [ 1426.597491][ T3251] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13962'. [ 1426.611373][ T3248] Trying to free block not in datazone [ 1426.667910][ T3248] Trying to free block not in datazone [ 1426.714720][ T3248] Trying to free block not in datazone [ 1426.720258][ T3248] minix_free_block (loop5:6): bit already cleared [ 1426.757416][ T3248] Trying to free block not in datazone [ 1426.762963][ T3248] Trying to free block not in datazone [ 1426.793559][ T3256] loop1: detected capacity change from 0 to 64 [ 1426.800501][ T3248] Trying to free block not in datazone [ 1426.827200][ T3259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13963'. [ 1427.257801][ T3242] loop0: detected capacity change from 0 to 32768 [ 1427.293730][ T3242] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.13956 (3242) [ 1427.374481][ T3242] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1427.395751][ T3242] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1427.419022][ T3276] loop1: detected capacity change from 0 to 47 [ 1427.452665][ T3242] BTRFS info (device loop0): using free space tree [ 1427.716940][ T3274] loop3: detected capacity change from 0 to 4096 [ 1427.785938][ T3274] ntfs: volume version 3.1. [ 1427.907184][ T3242] BTRFS info (device loop0): enabling ssd optimizations [ 1428.254539][ T4890] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1428.468462][ T2470] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1428.671500][ T2470] usb 5-1: Using ep0 maxpacket: 8 [ 1428.683377][ T3322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1428.705804][ T2470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1428.716161][ T2470] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1428.737648][ T2470] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1428.756651][ T2470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.767936][ T2470] usb 5-1: Product: syz [ 1428.772152][ T2470] usb 5-1: Manufacturer: syz [ 1428.787708][ T2470] usb 5-1: SerialNumber: syz [ 1428.796164][ T2470] usb 5-1: config 0 descriptor?? [ 1429.065362][ T3337] loop0: detected capacity change from 0 to 1024 [ 1429.112567][ T3337] EXT4-fs: Ignoring removed oldalloc option [ 1429.147853][ T3337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1429.172625][ T3314] loop5: detected capacity change from 0 to 32768 [ 1429.259367][ T3337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1429.268575][T22277] usb 5-1: USB disconnect, device number 29 [ 1429.298256][ T3314] XFS (loop5): Mounting V5 Filesystem [ 1429.323975][ T3337] fscrypt (loop0, inode 15): Error -61 getting encryption context [ 1429.429137][ T3314] XFS (loop5): Ending clean mount [ 1429.471373][ T3314] XFS (loop5): Quotacheck needed: Please wait. [ 1429.481458][ T4890] EXT4-fs (loop0): unmounting filesystem. [ 1429.589453][ T3325] loop1: detected capacity change from 0 to 40427 [ 1429.639922][ T3314] XFS (loop5): Quotacheck: Done. [ 1429.649076][ T3325] F2FS-fs (loop1): invalid crc value [ 1429.701900][ T3325] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1429.902846][ T3325] F2FS-fs (loop1): Start checkpoint disabled! [ 1429.929921][ T3325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1430.073339][T23611] XFS (loop5): Unmounting Filesystem [ 1430.274562][ T3367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13998'. [ 1430.349626][ T2470] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1430.560333][ T2470] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1430.579372][ T2470] usb 5-1: config 220 has an invalid interface descriptor of length 5, skipping [ 1430.621161][ T2470] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.670398][ T2470] usb 5-1: config 220 has no interface number 2 [ 1430.691644][ T2470] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1430.755772][ T2470] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1430.765802][ T2470] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1430.784802][ T2470] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1430.812272][ T2470] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1430.841292][ T2470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.860395][ T2470] usb 5-1: Product: syz [ 1430.866411][ T2470] usb 5-1: Manufacturer: syz [ 1430.871084][ T2470] usb 5-1: SerialNumber: syz [ 1430.988434][ T3383] sctp: [Deprecated]: syz.3.14005 (pid 3383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1430.988434][ T3383] Use struct sctp_sack_info instead [ 1431.097874][T22277] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1431.135608][ T2470] usb 5-1: selecting invalid altsetting 0 [ 1431.157476][ T2470] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1431.172431][ T2470] usb 5-1: No valid video chain found. [ 1431.193812][ T3391] loop5: detected capacity change from 0 to 16 [ 1431.234464][ T3391] erofs: (device loop5): mounted with root inode @ nid 36. [ 1431.243481][ T2470] usb 5-1: selecting invalid altsetting 0 [ 1431.263580][ T2470] usbtest: probe of 5-1:220.1 failed with error -22 [ 1431.290565][ T2470] usb 5-1: USB disconnect, device number 30 [ 1431.345648][T22277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.386580][T22277] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1431.413650][T22277] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1431.430917][T22277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.455040][T22277] usb 1-1: config 0 descriptor?? [ 1431.710913][T22277] usb 1-1: USB disconnect, device number 20 [ 1431.971718][ T5129] udevd[5129]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1432.549449][ T3425] loop3: detected capacity change from 0 to 4096 [ 1432.612317][ T3410] loop1: detected capacity change from 0 to 32768 [ 1432.660045][ T3410] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.14026 (3410) [ 1432.676302][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1432.676318][ T26] audit: type=1800 audit(25857621.502:188): pid=3425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14024" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 1432.763347][ T3410] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1432.794232][ T3410] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1432.812254][ T3410] BTRFS info (device loop1): using free space tree [ 1432.841957][ T3431] usb usb8: usbfs: process 3431 (syz.5.14028) did not claim interface 8 before use [ 1433.086166][ T3410] BTRFS info (device loop1): enabling ssd optimizations [ 1433.092168][ T3417] loop4: detected capacity change from 0 to 40427 [ 1433.150500][ T3417] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 1433.162971][ T3417] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1433.277918][ T3417] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1433.305005][ T4895] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1433.520293][ T3417] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1433.553510][ T3417] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1433.689222][ T3427] loop0: detected capacity change from 0 to 32768 [ 1433.759326][ T3427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.14025 (3427) [ 1434.062001][ T3427] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1434.091679][ T4907] syz-executor: attempt to access beyond end of device [ 1434.091679][ T4907] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1434.105944][ T3427] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1434.134234][ T3427] BTRFS info (device loop0): force clearing of disk cache [ 1434.141464][ T3427] BTRFS info (device loop0): enabling auto defrag [ 1434.176949][ T3427] BTRFS info (device loop0): max_inline at 0 [ 1434.183045][ T3427] BTRFS info (device loop0): enabling disk space caching [ 1434.241528][ T3427] BTRFS info (device loop0): disk space caching is enabled [ 1434.433603][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.439983][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1434.706060][ T3427] BTRFS info (device loop0): enabling ssd optimizations [ 1434.726643][ T3427] BTRFS info (device loop0): rebuilding free space tree [ 1434.791393][ T3504] IPv6: sit2: Disabled Multicast RS [ 1434.812388][ T3427] BTRFS info (device loop0): disabling free space tree [ 1434.839418][ T3427] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1434.873740][ T3427] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1434.935998][ T6486] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1434.982553][ T4890] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1435.149611][ T6486] usb 4-1: Using ep0 maxpacket: 8 [ 1435.192708][ T6486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1435.202452][ T6486] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1435.239279][ T6486] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1435.256453][ T6486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.275397][ T6486] usb 4-1: Product: syz [ 1435.282220][ T6486] usb 4-1: Manufacturer: syz [ 1435.297891][ T6486] usb 4-1: SerialNumber: syz [ 1435.332928][ T6486] usb 4-1: config 0 descriptor?? [ 1435.795121][ T6486] usb 4-1: USB disconnect, device number 29 [ 1435.914598][ T3534] loop0: detected capacity change from 0 to 16 [ 1435.935306][ T3534] erofs: (device loop0): mounted with root inode @ nid 36. [ 1435.972812][ T3534] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1436.008117][ T3534] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 1436.041601][ T3534] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1436.058382][T22277] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1436.267228][T22277] usb 2-1: Using ep0 maxpacket: 32 [ 1436.280869][T22277] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 1436.307750][T22277] usb 2-1: config 0 has no interface number 0 [ 1436.335578][T22277] usb 2-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1436.378985][T22277] usb 2-1: config 0 interface 244 has no altsetting 0 [ 1436.403495][T22277] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1436.417866][T22277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.453804][T22277] usb 2-1: Product: syz [ 1436.458043][T22277] usb 2-1: Manufacturer: syz [ 1436.487305][T22277] usb 2-1: SerialNumber: syz [ 1436.506942][T22277] usb 2-1: config 0 descriptor?? [ 1436.525673][ T3554] loop0: detected capacity change from 0 to 8 [ 1436.542216][T22277] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 1436.571665][ T3554] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1436.602115][T17721] udevd[17721]: incorrect cramfs checksum on /dev/loop0 [ 1436.605526][ T3554] cramfs: Error -3 while decompressing! [ 1436.658782][ T3554] cramfs: ffffffff96b50568(26)->ffff88804e8a8000(4096) [ 1436.677712][ T3554] cramfs: Error -3 while decompressing! [ 1436.693403][ T3554] cramfs: ffffffff96b50582(26)->ffff888062c13000(4096) [ 1436.713798][ T3554] cramfs: Error -3 while decompressing! [ 1436.727867][ T3554] cramfs: ffffffff96b5059c(16)->ffff88804569f000(4096) [ 1436.749240][ T3554] cramfs: Error -3 while decompressing! [ 1436.762081][T22277] snd_usb_toneport 2-1:0.244: cannot get proper max packet size [ 1436.772939][T22277] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 1436.790192][ T3554] cramfs: ffffffff96b50568(26)->ffff88804e8a8000(4096) [ 1436.798764][T22277] snd_usb_toneport: probe of 2-1:0.244 failed with error -22 [ 1436.809193][ T26] audit: type=1800 audit(25857625.365:189): pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14063" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1436.987509][T22277] usb 2-1: USB disconnect, device number 26 [ 1437.007064][ T3565] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14070'. [ 1437.457964][ T3579] loop0: detected capacity change from 0 to 4096 [ 1437.488894][ T3579] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1437.533232][ T3579] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1437.591206][ T3579] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1437.645421][ T3579] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1437.710076][ T3579] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1437.810757][ T3579] ntfs: volume version 3.1. [ 1437.821070][ T3579] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1437.865693][ T3579] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1437.897193][ T3579] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1438.191869][ T3597] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1438.705815][ T3581] loop4: detected capacity change from 0 to 40427 [ 1438.756326][ T3581] F2FS-fs (loop4): invalid crc value [ 1438.780429][ T3581] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1438.878137][ T3581] F2FS-fs (loop4): Start checkpoint disabled! [ 1438.904877][ T3581] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1439.066060][T22277] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1439.112782][ T3639] openvswitch: netlink: EtherType 0 is less than min 600 [ 1439.267296][T22277] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.298257][T22277] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1439.333088][T22277] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1439.365702][T22277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.374118][ T6486] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1439.390860][T22277] usb 4-1: config 0 descriptor?? [ 1439.591056][ T6486] usb 6-1: config index 0 descriptor too short (expected 147, got 72) [ 1439.612987][ T6486] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1439.637503][ T6486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.651773][T22277] usb 4-1: USB disconnect, device number 30 [ 1439.668811][ T6486] usb 6-1: Product: syz [ 1439.688178][ T6486] usb 6-1: Manufacturer: syz [ 1439.717011][ T6486] usb 6-1: SerialNumber: syz [ 1439.742062][ T6486] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1439.788617][ T6486] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1439.916335][ T5129] udevd[5129]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.325503][T22277] usb 6-1: USB disconnect, device number 18 [ 1440.529853][ T3654] loop1: detected capacity change from 0 to 32768 [ 1440.608193][ T3654] XFS (loop1): Mounting V5 Filesystem [ 1440.779853][ T3654] XFS (loop1): Ending clean mount [ 1440.796494][ T3654] XFS (loop1): Quotacheck needed: Please wait. [ 1440.912610][ T3687] loop4: detected capacity change from 0 to 4096 [ 1440.922541][ T6486] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1440.922778][ T3654] XFS (loop1): Quotacheck: Done. [ 1440.929603][ T6486] ath9k_htc: Failed to initialize the device [ 1440.952433][T22277] usb 6-1: ath9k_htc: USB layer deinitialized [ 1440.966927][ T3687] __ntfs_error: 6 callbacks suppressed [ 1440.966943][ T3687] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1441.040961][ T3687] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1441.064796][ T3687] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1441.102293][ T3693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14125'. [ 1441.144918][ T3687] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1441.144986][ T3687] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1441.153943][ T3687] ntfs: volume version 3.1. [ 1441.180794][ T4895] XFS (loop1): Unmounting Filesystem [ 1441.257638][ T3687] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1441.257663][ T3687] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1441.257680][ T3687] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1441.258332][ T3687] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1441.435755][ T3687] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1441.823036][ T3707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14133'. [ 1441.836095][ T3708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1441.883631][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14130'. [ 1442.367977][ T3729] loop1: detected capacity change from 0 to 8 [ 1442.738025][ T3746] loop4: detected capacity change from 0 to 256 [ 1442.750907][ T2470] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1442.975973][ T2470] usb 2-1: Using ep0 maxpacket: 32 [ 1442.990923][ T2470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1443.022049][ T2470] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 1443.047444][ T2470] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1443.057242][ T2470] usb 2-1: config 7 has an invalid descriptor of length 148, skipping remainder of the config [ 1443.110652][ T2470] usb 2-1: config 7 has no interface number 0 [ 1443.140315][ T2470] usb 2-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1443.172479][ T2470] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1443.221583][ T2470] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1443.241316][ T3763] sctp: [Deprecated]: syz.3.14159 (pid 3763) Use of int in maxseg socket option. [ 1443.241316][ T3763] Use struct sctp_assoc_value instead [ 1443.267538][ T2470] usb 2-1: config 7 interface 128 has no altsetting 0 [ 1443.270128][ T2470] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1443.270159][ T2470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.270181][ T2470] usb 2-1: Product: syz [ 1443.270197][ T2470] usb 2-1: Manufacturer: syz [ 1443.270214][ T2470] usb 2-1: SerialNumber: syz [ 1443.276933][ T3729] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1443.580517][ T2470] usb 2-1: MIDIStreaming interface descriptor not found [ 1443.670823][ T2470] usb 2-1: USB disconnect, device number 27 [ 1444.035271][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1444.353592][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14172'. [ 1444.434272][ T3795] netlink: 332 bytes leftover after parsing attributes in process `syz.0.14172'. [ 1444.581554][ T3773] loop5: detected capacity change from 0 to 32768 [ 1444.624724][ T3773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.14164 (3773) [ 1444.695545][ T3773] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1444.724797][ T3773] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1444.747454][ T3773] BTRFS info (device loop5): force clearing of disk cache [ 1444.811195][ T3773] BTRFS info (device loop5): enabling auto defrag [ 1444.846072][ T3773] BTRFS info (device loop5): max_inline at 0 [ 1444.869812][ T3773] BTRFS info (device loop5): enabling disk space caching [ 1444.887807][ T3773] BTRFS info (device loop5): disk space caching is enabled [ 1444.901700][ T3809] loop3: detected capacity change from 0 to 64 [ 1444.950609][ T3812] program syz.1.14181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.229449][ T3773] BTRFS info (device loop5): enabling ssd optimizations [ 1445.255490][ T3773] BTRFS info (device loop5): rebuilding free space tree [ 1445.329309][ T3773] BTRFS info (device loop5): disabling free space tree [ 1445.336298][ T3773] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1445.385189][ T3773] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1445.720113][T23611] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1445.743613][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14194'. [ 1445.914835][ T3858] loop1: detected capacity change from 0 to 256 [ 1445.963716][ T3858] FAT-fs (loop1): Directory bread(block 64) failed [ 1445.981452][T22145] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1445.989261][ T3858] FAT-fs (loop1): Directory bread(block 65) failed [ 1446.004782][ T3858] FAT-fs (loop1): Directory bread(block 66) failed [ 1446.015290][ T2470] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1446.051051][ T3858] FAT-fs (loop1): Directory bread(block 67) failed [ 1446.060477][ T3858] FAT-fs (loop1): Directory bread(block 68) failed [ 1446.076936][ T3858] FAT-fs (loop1): Directory bread(block 69) failed [ 1446.083880][ T3858] FAT-fs (loop1): Directory bread(block 70) failed [ 1446.102187][ T3858] FAT-fs (loop1): Directory bread(block 71) failed [ 1446.116632][ T3858] FAT-fs (loop1): Directory bread(block 72) failed [ 1446.131118][ T3858] FAT-fs (loop1): Directory bread(block 73) failed [ 1446.210020][T22145] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.227740][T22145] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1446.278732][ T2470] usb 1-1: Using ep0 maxpacket: 16 [ 1446.285984][ T2470] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1446.299963][T22145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.312875][ T2470] usb 1-1: config 0 has no interface number 0 [ 1446.339459][ T2470] usb 1-1: config 0 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1446.350967][T22145] usb 5-1: config 0 descriptor?? [ 1446.371589][T22145] usb 5-1: bad CDC descriptors [ 1446.377399][ T2470] usb 1-1: config 0 interface 55 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1446.396713][T22145] usb 5-1: bad CDC descriptors [ 1446.415133][ T2470] usb 1-1: config 0 interface 55 has no altsetting 0 [ 1446.462517][ T2470] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=b4.92 [ 1446.492445][ T2470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.500604][ T2470] usb 1-1: Product: syz [ 1446.524454][ T2470] usb 1-1: Manufacturer: syz [ 1446.529215][ T2470] usb 1-1: SerialNumber: syz [ 1446.557856][ T2470] usb 1-1: config 0 descriptor?? [ 1446.563520][ T3853] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1446.587605][T22145] usb 5-1: USB disconnect, device number 31 [ 1446.593854][ T3853] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1446.615001][ T3863] loop3: detected capacity change from 0 to 4096 [ 1446.631451][ T2470] spcp8x5 1-1:0.55: SPCP8x5 converter detected [ 1446.646345][ T2470] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 1446.672670][ T3863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1446.797821][ T4892] EXT4-fs (loop3): unmounting filesystem. [ 1446.928809][ T2470] usb 1-1: USB disconnect, device number 21 [ 1446.961462][ T2470] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1447.001434][ T2470] spcp8x5 1-1:0.55: device disconnected [ 1447.446209][ T3885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14207'. [ 1447.500721][ T3869] loop5: detected capacity change from 0 to 32768 [ 1447.624534][ T3869] XFS (loop5): Mounting V5 Filesystem [ 1447.647104][ T2470] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1447.673570][ T3869] XFS (loop5): Ending clean mount [ 1447.686283][ T3869] XFS (loop5): Quotacheck needed: Please wait. [ 1447.736213][ T3869] XFS (loop5): Quotacheck: Done. [ 1447.854227][ T2470] usb 5-1: config 97 has an invalid interface number: 194 but max is 0 [ 1447.879900][ T2470] usb 5-1: config 97 has no interface number 0 [ 1447.911277][ T2470] usb 5-1: config 97 interface 194 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1447.962831][ T2470] usb 5-1: config 97 interface 194 has no altsetting 0 [ 1447.991444][ T2470] usb 5-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=62.03 [ 1448.013792][T23611] XFS (loop5): Unmounting Filesystem [ 1448.030660][ T2470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.052253][ T2470] usb 5-1: Product: syz [ 1448.056813][ T2470] usb 5-1: Manufacturer: syz [ 1448.061498][ T2470] usb 5-1: SerialNumber: syz [ 1448.167632][ T3908] netlink: 'syz.0.14217': attribute type 7 has an invalid length. [ 1448.176017][ T3908] netlink: 'syz.0.14217': attribute type 8 has an invalid length. [ 1448.304820][ T2470] hub 5-1:97.194: bad descriptor, ignoring hub [ 1448.324060][ T2470] hub: probe of 5-1:97.194 failed with error -5 [ 1448.356827][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14219'. [ 1448.374211][ T3915] netlink: 332 bytes leftover after parsing attributes in process `syz.3.14219'. [ 1448.417693][ T2470] usb 5-1: USB disconnect, device number 32 [ 1448.602734][T22266] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1448.813821][T22266] usb 2-1: config index 0 descriptor too short (expected 147, got 72) [ 1448.831918][T22266] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1448.842269][T22266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.856996][T22266] usb 2-1: Product: syz [ 1448.861295][T22266] usb 2-1: Manufacturer: syz [ 1448.870752][T22266] usb 2-1: SerialNumber: syz [ 1448.901774][T22266] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1448.968131][T22266] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1449.148430][ T3931] loop3: detected capacity change from 0 to 32768 [ 1449.176793][ T3931] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.14224 (3931) [ 1449.236227][ T3931] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1449.257680][ T3931] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1449.304375][ T3931] BTRFS info (device loop3): enabling ssd optimizations [ 1449.320962][ T3931] BTRFS info (device loop3): not using ssd optimizations [ 1449.335247][ T3931] BTRFS info (device loop3): turning off barriers [ 1449.352169][ T3931] BTRFS info (device loop3): use no compression [ 1449.391180][ T3931] BTRFS info (device loop3): using free space tree [ 1449.483791][ T3520] usb 2-1: USB disconnect, device number 28 [ 1449.845239][ T3967] loop5: detected capacity change from 0 to 64 [ 1449.889635][ T4892] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1449.978656][ T3970] loop4: detected capacity change from 0 to 8 [ 1450.151330][ T3971] Process accounting resumed [ 1450.167022][T22266] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1450.175785][T22266] ath9k_htc: Failed to initialize the device [ 1450.206489][ T3520] usb 2-1: ath9k_htc: USB layer deinitialized [ 1450.470583][ T6486] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1450.700848][ T6486] usb 5-1: Using ep0 maxpacket: 32 [ 1450.708455][ T6486] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1450.758897][ T6486] usb 5-1: config 7 has an invalid interface number: 128 but max is 0 [ 1450.767237][ T6486] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1450.789959][T22141] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1450.810468][ T6486] usb 5-1: config 7 has an invalid descriptor of length 148, skipping remainder of the config [ 1450.840095][ T6486] usb 5-1: config 7 has no interface number 0 [ 1450.847006][ T6486] usb 5-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 1450.869692][ T3987] loop1: detected capacity change from 0 to 4096 [ 1450.875465][ T6486] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1450.896846][ T6486] usb 5-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1450.927363][ T3977] loop0: detected capacity change from 0 to 32768 [ 1450.933131][ T3987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1450.934233][ T6486] usb 5-1: config 7 interface 128 has no altsetting 0 [ 1450.970885][ T6486] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1450.995441][ T6486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.005512][T22141] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.025339][T22141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1451.027822][ T6486] usb 5-1: Product: syz [ 1451.045283][T22141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1451.056110][T22141] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1451.066168][T22141] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1451.079404][T22141] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1451.100353][ T6486] usb 5-1: Manufacturer: syz [ 1451.102199][T22141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.105093][ T6486] usb 5-1: SerialNumber: syz [ 1451.131056][T22141] usb 6-1: config 0 descriptor?? [ 1451.148120][ T3981] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1451.154392][ T3970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1451.165715][ T4895] EXT4-fs (loop1): unmounting filesystem. [ 1451.350243][ T3999] loop3: detected capacity change from 0 to 512 [ 1451.376367][ T3999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1451.423218][ T6486] usb 5-1: MIDIStreaming interface descriptor not found [ 1451.425444][T22141] usb 6-1: USB disconnect, device number 19 [ 1451.490191][ T3999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1451.507037][ T6486] usb 5-1: USB disconnect, device number 33 [ 1451.670536][ T4006] loop1: detected capacity change from 0 to 4096 [ 1451.703161][ T4006] __ntfs_error: 5 callbacks suppressed [ 1451.703179][ T4006] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1451.721548][ T4006] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1451.737619][ T5122] udevd[5122]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1451.740014][ T4006] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1451.769230][ T4006] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1451.784386][ T4006] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1451.797329][ T4006] ntfs: volume version 3.1. [ 1451.804156][ T4006] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1451.816733][ T4006] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1451.830935][ T4006] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1451.842574][ T4006] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1451.854215][ T4006] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1451.976151][ T4892] EXT4-fs (loop3): unmounting filesystem. [ 1452.274789][ T4016] loop1: detected capacity change from 0 to 64 [ 1452.417779][ T4020] loop3: detected capacity change from 0 to 64 [ 1452.456953][ T4017] loop0: detected capacity change from 0 to 4096 [ 1452.607327][ T4017] ntfs: volume version 3.1. [ 1452.773620][ T4028] IPVS: length: 87 != 24 [ 1452.839072][ T4026] loop1: detected capacity change from 0 to 4096 [ 1452.946958][ T4035] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1453.023720][ T4040] netlink: 'syz.3.14264': attribute type 3 has an invalid length. [ 1453.545524][ T4050] loop0: detected capacity change from 0 to 4096 [ 1453.565885][ T4054] loop5: detected capacity change from 0 to 1024 [ 1453.616508][ T4050] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1453.871553][ T4890] EXT4-fs (loop0): unmounting filesystem. [ 1455.802239][ T4032] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.811525][ T4032] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.820545][ T4032] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.829634][ T4032] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.142685][ T4117] Cannot find del_set index 136 as target [ 1456.217475][ T4116] loop4: detected capacity change from 0 to 4096 [ 1456.360973][ T5129] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1456.382567][ T4126] ubi: mtd0 is already attached to ubi31 [ 1456.456731][ T4116] NILFS (loop4): device size too small [ 1456.578082][ T4130] loop1: detected capacity change from 0 to 1024 [ 1456.960702][ T4144] xt_hashlimit: size too large, truncated to 1048576 [ 1456.967472][ T4144] xt_hashlimit: invalid rate [ 1458.539865][ T4139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.549255][ T4139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.558303][ T4139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.567291][ T4139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.852774][ T4173] netlink: 'syz.4.14327': attribute type 8 has an invalid length. [ 1458.900532][ T4173] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.14327'. [ 1459.010749][ T4175] netlink: 'syz.3.14328': attribute type 1 has an invalid length. [ 1459.956839][ T4217] netlink: 'syz.1.14348': attribute type 10 has an invalid length. [ 1459.984062][ T4217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14348'. [ 1459.993293][ T4217] netlink: 'syz.1.14348': attribute type 10 has an invalid length. [ 1460.045250][ T4217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14348'. [ 1460.440759][ T4235] xt_socket: unknown flags 0x8 [ 1460.471588][ T4238] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1460.496733][ T4242] netlink: 'syz.1.14359': attribute type 2 has an invalid length. [ 1460.697836][ T4249] loop0: detected capacity change from 0 to 512 [ 1460.817725][ T4249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1461.000476][ T4890] EXT4-fs (loop0): unmounting filesystem. [ 1461.153498][ T4267] loop5: detected capacity change from 0 to 764 [ 1461.201461][ T4267] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1461.240352][ T4267] Symlink component flag not implemented [ 1461.262243][ T4267] Symlink component flag not implemented (122) [ 1461.558538][ T4285] netlink: 'syz.5.14376': attribute type 2 has an invalid length. [ 1461.704310][ T4290] loop1: detected capacity change from 0 to 512 [ 1461.827283][ T4290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1461.871835][ T4298] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1461.882899][ T4298] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1462.018231][ T4895] EXT4-fs (loop1): unmounting filesystem. [ 1462.127858][ T4306] xt_SECMARK: invalid mode: 2 [ 1462.585605][ T4327] NILFS (nullb0): couldn't find nilfs on the device [ 1463.437452][ T4355] loop4: detected capacity change from 0 to 256 [ 1463.484392][ T4355] FAT-fs (loop4): Directory bread(block 64) failed [ 1463.504114][ T4355] FAT-fs (loop4): Directory bread(block 65) failed [ 1463.530752][ T4355] FAT-fs (loop4): Directory bread(block 66) failed [ 1463.554364][ T4355] FAT-fs (loop4): Directory bread(block 67) failed [ 1463.582949][ T4355] FAT-fs (loop4): Directory bread(block 68) failed [ 1463.599568][ T4355] FAT-fs (loop4): Directory bread(block 69) failed [ 1463.613715][ T4355] FAT-fs (loop4): Directory bread(block 70) failed [ 1463.628772][ T4355] FAT-fs (loop4): Directory bread(block 71) failed [ 1463.645801][ T4355] FAT-fs (loop4): Directory bread(block 72) failed [ 1463.656101][ T4355] FAT-fs (loop4): Directory bread(block 73) failed [ 1463.925826][ T4347] loop0: detected capacity change from 0 to 32768 [ 1464.025909][ T4347] XFS (loop0): Mounting V5 Filesystem [ 1464.159657][ T4347] XFS (loop0): Ending clean mount [ 1464.174330][ T4347] XFS (loop0): Quotacheck needed: Please wait. [ 1464.242615][ T4347] XFS (loop0): Quotacheck: Done. [ 1464.360553][ T4890] XFS (loop0): Unmounting Filesystem [ 1465.225330][ T4341] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.234441][ T4341] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.243433][ T4341] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.252779][ T4341] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.282525][ T4964] xfrm0 speed is unknown, defaulting to 1000 [ 1465.481501][ T4379] loop5: detected capacity change from 0 to 256 [ 1465.523314][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14424'. [ 1465.587911][ T4379] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d) [ 1465.997760][ T4397] kAFS: No cell specified [ 1466.090261][ T4400] loop4: detected capacity change from 0 to 164 [ 1466.162044][ T4402] loop1: detected capacity change from 0 to 256 [ 1466.311426][ T4402] FAT-fs (loop1): Directory bread(block 64) failed [ 1466.334334][ T4402] FAT-fs (loop1): Directory bread(block 65) failed [ 1466.379729][ T4402] FAT-fs (loop1): Directory bread(block 66) failed [ 1466.409652][ T4402] FAT-fs (loop1): Directory bread(block 67) failed [ 1466.430984][ T4402] FAT-fs (loop1): Directory bread(block 68) failed [ 1466.437597][ T4402] FAT-fs (loop1): Directory bread(block 69) failed [ 1466.488610][ T4402] FAT-fs (loop1): Directory bread(block 70) failed [ 1466.505322][ T4402] FAT-fs (loop1): Directory bread(block 71) failed [ 1466.512031][ T4402] FAT-fs (loop1): Directory bread(block 72) failed [ 1466.548080][ T4402] FAT-fs (loop1): Directory bread(block 73) failed [ 1467.000584][ T4434] kAFS: No cell specified [ 1467.113250][ T4436] dlm: no locking on control device [ 1467.428079][ T4446] loop5: detected capacity change from 0 to 1024 [ 1467.578835][T23468] hfsplus: b-tree write err: -5, ino 4 [ 1467.660009][ T6531] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1467.863097][ T6531] usb 5-1: Using ep0 maxpacket: 16 [ 1467.879009][ T6531] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1467.909883][ T6531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.927413][ T6531] usb 5-1: Product: syz [ 1467.935135][ T6531] usb 5-1: Manufacturer: syz [ 1467.965351][ T6531] usb 5-1: SerialNumber: syz [ 1467.989640][ T6531] r8152-cfgselector 5-1: config 0 descriptor?? [ 1468.470526][ T6531] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1468.483716][ T6531] r8152-cfgselector 5-1: USB disconnect, device number 34 [ 1468.703366][ T4497] netlink: 'syz.1.14479': attribute type 5 has an invalid length. [ 1468.722663][ T4497] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14479'. [ 1468.822391][ T4500] loop5: detected capacity change from 0 to 128 [ 1468.840221][ T4500] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1469.210112][T12812] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1469.425542][T12812] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 1469.455755][T12812] usb 6-1: config 0 has no interface number 0 [ 1469.494788][T12812] usb 6-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1469.523134][ T4526] netlink: 'syz.4.14493': attribute type 1 has an invalid length. [ 1469.552560][T12812] usb 6-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1469.574907][T12812] usb 6-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 1469.590097][T12812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.598283][ T4530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1469.605700][ T4530] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.613029][ T4530] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.689972][T12812] usb 6-1: Product: syz [ 1469.695503][T12812] usb 6-1: Manufacturer: syz [ 1469.700153][T12812] usb 6-1: SerialNumber: syz [ 1469.725918][T12812] usb 6-1: config 0 descriptor?? [ 1469.741902][T12812] usb 6-1: Interface #216 referenced by multiple IADs [ 1469.832452][T12812] snd-usb-audio: probe of 6-1:0.216 failed with error -2 [ 1469.895190][ T5129] udevd[5129]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1470.015780][T12812] usb 6-1: USB disconnect, device number 20 [ 1470.149482][ T4549] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1470.224470][ T4553] netlink: 'syz.0.14506': attribute type 5 has an invalid length. [ 1470.274398][ T4553] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14506'. [ 1470.299467][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14507'. [ 1470.638742][ T4565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1470.646171][ T4565] IPv6: NLM_F_CREATE should be set when creating new route [ 1470.653602][ T4565] IPv6: NLM_F_CREATE should be set when creating new route [ 1471.147112][ T4583] loop0: detected capacity change from 0 to 1024 [ 1471.472207][ T4591] loop0: detected capacity change from 0 to 256 [ 1471.612735][ T4591] FAT-fs (loop0): Directory bread(block 64) failed [ 1471.657199][ T4591] FAT-fs (loop0): Directory bread(block 65) failed [ 1471.669801][ T4596] loop3: detected capacity change from 0 to 128 [ 1471.701567][ T4596] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1471.701782][ T4591] FAT-fs (loop0): Directory bread(block 66) failed [ 1471.829118][ T4591] FAT-fs (loop0): Directory bread(block 67) failed [ 1471.835868][ T4591] FAT-fs (loop0): Directory bread(block 68) failed [ 1471.871818][ T4591] FAT-fs (loop0): Directory bread(block 69) failed [ 1471.882644][ T4591] FAT-fs (loop0): Directory bread(block 70) failed [ 1471.889304][ T4591] FAT-fs (loop0): Directory bread(block 71) failed [ 1471.909648][ T4591] FAT-fs (loop0): Directory bread(block 72) failed [ 1471.925270][ T4591] FAT-fs (loop0): Directory bread(block 73) failed [ 1472.067348][ T4964] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1472.242558][ T4582] loop1: detected capacity change from 0 to 32768 [ 1472.280284][ T4964] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 1472.316841][ T4964] usb 4-1: config 0 has no interface number 0 [ 1472.338025][ T4964] usb 4-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1472.360105][ T4964] usb 4-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1472.386450][ T4582] XFS (loop1): Mounting V5 Filesystem [ 1472.392334][ T4964] usb 4-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 1472.441809][ T4964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.470342][ T4964] usb 4-1: Product: syz [ 1472.475045][ T4964] usb 4-1: Manufacturer: syz [ 1472.479692][ T4964] usb 4-1: SerialNumber: syz [ 1472.497503][ T4964] usb 4-1: config 0 descriptor?? [ 1472.507557][ T4964] usb 4-1: Interface #216 referenced by multiple IADs [ 1472.570037][ T4964] snd-usb-audio: probe of 4-1:0.216 failed with error -2 [ 1472.578534][ T4582] XFS (loop1): Ending clean mount [ 1472.585464][ T4582] XFS (loop1): Quotacheck needed: Please wait. [ 1472.650981][T17721] udevd[17721]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.689261][ T4582] XFS (loop1): Quotacheck: Done. [ 1472.774462][ T4964] usb 4-1: USB disconnect, device number 31 [ 1472.836089][ T4895] XFS (loop1): Unmounting Filesystem [ 1473.149857][ T4633] loop5: detected capacity change from 0 to 256 [ 1473.560064][ T4641] loop3: detected capacity change from 0 to 512 [ 1473.627020][ T4641] EXT4-fs: inline encryption not supported [ 1473.739135][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 1473.739152][ T26] audit: type=1326 audit(25857659.910:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.5.14548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1473.743375][ T4641] EXT4-fs (loop3): 1 truncate cleaned up [ 1473.748740][ T26] audit: type=1326 audit(25857659.919:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.5.14548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1473.795964][ T26] audit: type=1326 audit(25857659.938:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4648 comm="syz.5.14548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1473.826268][ T4641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1473.960814][ T4627] loop0: detected capacity change from 0 to 32768 [ 1473.970448][ T4892] EXT4-fs (loop3): unmounting filesystem. [ 1474.161461][ T4627] XFS (loop0): Mounting V5 Filesystem [ 1474.320152][ T6531] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1474.385370][ T4627] XFS (loop0): Ending clean mount [ 1474.420323][ T4627] XFS (loop0): Quotacheck needed: Please wait. [ 1474.555611][ T6531] usb 2-1: Using ep0 maxpacket: 16 [ 1474.573607][ T6531] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1474.583109][ T6531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.591288][ T6531] usb 2-1: Product: syz [ 1474.595623][ T6531] usb 2-1: Manufacturer: syz [ 1474.612168][ T6531] usb 2-1: SerialNumber: syz [ 1474.624909][ T4679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14559'. [ 1474.638913][ T6531] usb 2-1: config 0 descriptor?? [ 1474.649379][ T4627] XFS (loop0): Quotacheck: Done. [ 1474.779764][ T4890] XFS (loop0): Unmounting Filesystem [ 1474.868265][ T6531] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 1474.904450][ T6531] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1474.927271][ T4685] loop5: detected capacity change from 0 to 2048 [ 1474.979722][ T4688] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1474.996516][ T4685] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 1475.025710][ T4964] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1475.067517][ T4685] Remounting filesystem read-only [ 1475.115264][ T6531] usb 2-1: USB disconnect, device number 29 [ 1475.239644][ T4964] usb 5-1: Using ep0 maxpacket: 32 [ 1475.246906][ T4964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.279239][ T4964] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1475.314252][ T4964] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1475.343462][ T4964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.367649][ T4964] usb 5-1: Product: syz [ 1475.371916][ T4964] usb 5-1: Manufacturer: syz [ 1475.398241][ T4964] usb 5-1: SerialNumber: syz [ 1475.413538][ T4964] usb 5-1: config 0 descriptor?? [ 1475.641350][ T4964] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1475.652488][ T4964] ea af d9 87 ad fc c9 53 [ 1475.657467][ T4964] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 1475.874275][ T4964] usb 5-1: USB disconnect, device number 35 [ 1476.404492][ T4731] device netdevsim0 entered promiscuous mode [ 1476.414839][ T4733] loop5: detected capacity change from 0 to 47 [ 1476.727698][ T4717] loop1: detected capacity change from 0 to 32768 [ 1476.765882][ T4717] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.14577 (4717) [ 1476.856324][ T4717] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1476.905696][ T4717] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1476.938316][ T4717] BTRFS info (device loop1): metadata ratio 4 [ 1476.965486][ T4717] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1477.020727][ T4717] BTRFS info (device loop1): force lzo compression, level 0 [ 1477.060058][ T4717] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1477.107137][ T4717] BTRFS info (device loop1): trying to use backup root at mount time [ 1477.131756][ T4717] BTRFS info (device loop1): doing ref verification [ 1477.138473][ T4717] BTRFS info (device loop1): enabling ssd optimizations [ 1477.193219][ T4717] BTRFS info (device loop1): using spread ssd allocation scheme [ 1477.238813][ T4717] BTRFS info (device loop1): using free space tree [ 1477.253357][ T4754] loop4: detected capacity change from 0 to 1024 [ 1477.448872][T23462] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 1477.465340][T23464] hfsplus: b-tree write err: -5, ino 4 [ 1477.515983][ T4717] BTRFS warning (device loop1): couldn't read tree root [ 1477.541241][ T4717] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1477.577144][ T7178] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 1477.615378][ T4717] BTRFS warning (device loop1): couldn't read tree root [ 1477.631824][ T4717] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1477.720243][ T4717] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 1477.747094][ T4717] BTRFS warning (device loop1): couldn't read tree root [ 1477.770755][ T4717] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1477.859804][ T4717] BTRFS info (device loop1): rebuilding free space tree [ 1477.919547][ T4717] BTRFS info (device loop1): checking UUID tree [ 1478.132043][ T4796] netlink: 'syz.0.14606': attribute type 1 has an invalid length. [ 1478.163389][ T4796] netlink: 'syz.0.14606': attribute type 2 has an invalid length. [ 1478.197902][ T4766] bridge0: port 3(batadv0) entered disabled state [ 1478.204786][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.212156][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.253847][ T4895] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1479.421222][ T4766] infiniband syz!: set down [ 1479.522622][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.979178][ T4766] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.988251][ T4766] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.997658][ T4766] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.006676][ T4766] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.134053][ T4817] netlink: 'syz.5.14615': attribute type 30 has an invalid length. [ 1480.157828][ T4817] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1480.664625][ T4833] loop3: detected capacity change from 0 to 2048 [ 1480.740509][ T4839] loop0: detected capacity change from 0 to 256 [ 1480.766871][ T4840] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1480.788644][ T4833] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 1480.853540][ T4833] Remounting filesystem read-only [ 1480.883762][ T4843] dlm: Unknown command passed to DLM device : 0 [ 1480.883762][ T4843] [ 1480.926057][ T4846] loop5: detected capacity change from 0 to 256 [ 1480.989333][ T4846] exfat: Deprecated parameter 'utf8' [ 1481.082560][ T4846] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 1481.392465][ T4865] netlink: 'syz.4.14635': attribute type 1 has an invalid length. [ 1481.417912][ T4865] netlink: 'syz.4.14635': attribute type 2 has an invalid length. [ 1481.625969][ T4872] loop4: detected capacity change from 0 to 256 [ 1481.844454][ T4878] loop5: detected capacity change from 0 to 256 [ 1481.895136][ T4878] exfat: Deprecated parameter 'namecase' [ 1481.921423][ T4878] exfat: Deprecated parameter 'namecase' [ 1481.967744][ T4882] dlm: Unknown command passed to DLM device : 0 [ 1481.967744][ T4882] [ 1481.986805][ T4878] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1482.196267][ T4898] netlink: 'syz.0.14648': attribute type 30 has an invalid length. [ 1482.261047][ T4898] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 1482.289146][ T4898] Process accounting paused [ 1482.348673][ T6286] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1482.385136][ T4902] loop4: detected capacity change from 0 to 4096 [ 1482.428863][ T4902] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1482.551855][ T6286] usb 4-1: Using ep0 maxpacket: 16 [ 1482.561191][ T6286] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1482.612147][ T6286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.639064][ T6286] usb 4-1: Product: syz [ 1482.643410][ T6286] usb 4-1: Manufacturer: syz [ 1482.654768][ T6286] usb 4-1: SerialNumber: syz [ 1482.665292][ T6286] usb 4-1: config 0 descriptor?? [ 1482.907902][ T6286] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 1482.957986][ T6286] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1483.006518][ T4940] loop4: detected capacity change from 0 to 8 [ 1483.025099][ T4940] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1483.058025][ T4940] cramfs: Error -3 while decompressing! [ 1483.078812][ T4940] cramfs: ffffffff96b4c568(26)->ffff888047d44000(4096) [ 1483.090981][ T4944] netlink: 'syz.5.14661': attribute type 1 has an invalid length. [ 1483.095326][ T4940] cramfs: Error -5 while decompressing! [ 1483.108171][ T4940] cramfs: ffffffff96b4c582(26)->ffff888047d45000(4096) [ 1483.115195][ T4940] cramfs: Error -3 while decompressing! [ 1483.137165][T12812] usb 4-1: USB disconnect, device number 32 [ 1483.154063][ T4940] cramfs: ffffffff96b4c568(26)->ffff888047d44000(4096) [ 1483.167703][ T26] audit: type=1800 audit(25857668.731:199): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14660" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1483.238810][ T4946] i2c i2c-0: Invalid block write size 34 [ 1483.494332][ T4955] loop1: detected capacity change from 0 to 22 [ 1483.511181][ T4955] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1483.551600][ T4955] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1483.994744][ T4977] i2c i2c-0: Invalid block write size 34 [ 1484.269159][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14682'. [ 1484.364441][ T4990] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14684'. [ 1484.782182][ T5006] netlink: 'syz.3.14692': attribute type 1 has an invalid length. [ 1484.897004][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14695'. [ 1485.073131][ T5016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14707'. [ 1485.275955][ T5020] loop1: detected capacity change from 0 to 4096 [ 1485.316046][ T5020] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1485.388812][ T5029] loop3: detected capacity change from 0 to 128 [ 1485.425807][ T5029] befs: (loop3): invalid magic header [ 1485.493530][ T5031] loop5: detected capacity change from 0 to 8 [ 1485.500521][ T5031] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1485.566138][ T5031] cramfs: Error -3 while decompressing! [ 1485.614541][ T5031] cramfs: ffffffff96b50568(26)->ffff888066861000(4096) [ 1485.641483][ T5031] cramfs: Error -5 while decompressing! [ 1485.673627][ T6531] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1485.694857][ T5031] cramfs: ffffffff96b50582(26)->ffff8880444c6000(4096) [ 1485.701840][ T5031] cramfs: Error -3 while decompressing! [ 1485.722729][ T5031] cramfs: ffffffff96b50568(26)->ffff888066861000(4096) [ 1485.739002][ T26] audit: type=1800 audit(25857671.135:200): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14704" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 1485.876547][ T6531] usb 1-1: Using ep0 maxpacket: 32 [ 1485.885189][ T6531] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1485.942779][ T6531] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1485.972755][ T6531] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.002603][ T6531] usb 1-1: Product: syz [ 1486.013410][ T6531] usb 1-1: Manufacturer: syz [ 1486.035022][ T6531] usb 1-1: SerialNumber: syz [ 1486.047654][ T6531] usb 1-1: config 0 descriptor?? [ 1486.064803][ T5027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1486.109229][ T6531] hub 1-1:0.0: bad descriptor, ignoring hub [ 1486.123449][ T6531] hub: probe of 1-1:0.0 failed with error -5 [ 1486.131892][ T6531] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input110 [ 1486.443289][ T5027] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1486.449884][ T5027] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1486.524495][ T5027] vhci_hcd vhci_hcd.0: Device attached [ 1486.563655][ T5054] vhci_hcd: connection closed [ 1486.564032][T23458] vhci_hcd: stop threads [ 1486.577953][ T6286] usb 1-1: USB disconnect, device number 22 [ 1486.578093][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1486.587147][T23458] vhci_hcd: release socket [ 1486.637991][T23458] vhci_hcd: disconnect device [ 1487.395505][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14735'. [ 1487.935612][ T6531] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1488.145010][ T6531] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 1488.175057][ T6531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.194846][ T6531] usb 5-1: config 0 descriptor?? [ 1488.339211][ T5124] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14750'. [ 1488.367990][ T5124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14750'. [ 1488.648911][ T6531] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1488.677586][ T6531] mxuport: probe of 5-1:0.0 failed with error -5 [ 1488.713522][ T6531] usb 5-1: USB disconnect, device number 36 [ 1488.816496][ T5115] loop1: detected capacity change from 0 to 32768 [ 1489.376755][ T5164] loop5: detected capacity change from 0 to 1024 [ 1489.490707][ T5164] hfsplus: extend alloc file! (8192,512,17039360) [ 1489.906754][ T5176] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1490.003364][ T5180] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14775'. [ 1490.024480][ T5180] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14775'. [ 1490.050337][ T5182] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14776'. [ 1490.642783][ T5204] loop3: detected capacity change from 0 to 2048 [ 1490.649453][T19982] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1490.724122][ T5211] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1490.757711][ T5204] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 1490.834145][ T5204] Remounting filesystem read-only [ 1490.869308][T19982] usb 6-1: Using ep0 maxpacket: 32 [ 1490.876592][T19982] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1490.924993][T19982] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1490.964382][T19982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.990784][T19982] usb 6-1: Product: syz [ 1491.007212][T19982] usb 6-1: Manufacturer: syz [ 1491.025880][T19982] usb 6-1: SerialNumber: syz [ 1491.052541][T19982] usb 6-1: config 0 descriptor?? [ 1491.058617][ T5195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1491.094680][T19982] hub 6-1:0.0: bad descriptor, ignoring hub [ 1491.100664][T19982] hub: probe of 6-1:0.0 failed with error -5 [ 1491.148903][T19982] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input111 [ 1491.425148][ T5195] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1491.431829][ T5195] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1491.448238][ T5195] vhci_hcd vhci_hcd.0: Device attached [ 1491.482315][ T5230] vhci_hcd: connection closed [ 1491.489642][T23464] vhci_hcd: stop threads [ 1491.503785][ T6531] usb 6-1: USB disconnect, device number 21 [ 1491.509785][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1491.531868][T23464] vhci_hcd: release socket [ 1491.536352][T23464] vhci_hcd: disconnect device [ 1491.716228][ T5243] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1491.716925][ T5241] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 1492.006966][ T5255] loop0: detected capacity change from 0 to 256 [ 1492.294264][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14816'. [ 1492.762887][ T5283] loop5: detected capacity change from 0 to 2048 [ 1492.816708][ T5288] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1492.828369][ T6286] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1492.846280][ T5283] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 1492.864795][ T5283] Remounting filesystem read-only [ 1492.959193][ T5290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14829'. [ 1493.050036][ T6286] usb 4-1: Using ep0 maxpacket: 8 [ 1493.061633][ T6286] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1493.097396][ T5292] loop4: detected capacity change from 0 to 1024 [ 1493.104029][ T6286] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1493.112519][ T6286] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1493.131487][ T6286] usb 4-1: config 250 has no interface number 0 [ 1493.142154][ T6286] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1493.188655][ T5292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1493.204691][ T6286] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1493.228139][ T5297] binder: 5296:5297 ioctl c0046209 100000000000000 returned -22 [ 1493.251933][ T5292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.14830: inode #458752: comm syz.4.14830: iget: illegal inode # [ 1493.266017][ T6286] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1493.301254][ T6286] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1493.328367][ T5292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.14830: error while reading EA inode 458752 err=-117 [ 1493.356371][ T6286] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1493.368846][ T5281] loop0: detected capacity change from 0 to 32768 [ 1493.401987][ T6286] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1493.420837][ T26] audit: type=1326 audit(25857678.318:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5300 comm="syz.5.14832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1493.428119][ T6286] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1493.459798][ T5281] (syz.0.14825,5281,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1493.496256][ T5281] (syz.0.14825,5281,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1493.510117][ T6286] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1493.521531][ T26] audit: type=1326 audit(25857678.328:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5300 comm="syz.5.14832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1493.536844][ T6286] usb 4-1: Product: syz [ 1493.563508][ T6286] usb 4-1: SerialNumber: syz [ 1493.574127][ T26] audit: type=1326 audit(25857678.328:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5300 comm="syz.5.14832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1493.580106][ T4907] EXT4-fs (loop4): unmounting filesystem. [ 1493.616083][ T5281] JBD2: Ignoring recovery information on journal [ 1493.625288][ T26] audit: type=1326 audit(25857678.356:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5300 comm="syz.5.14832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6e58e929 code=0x7ffc0000 [ 1493.627363][ T6286] hub 4-1:250.228: bad descriptor, ignoring hub [ 1493.647563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1493.781619][ T26] audit: type=1326 audit(25857678.655:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz.4.14834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1493.814064][ T26] audit: type=1326 audit(25857678.665:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz.4.14834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1493.821266][ T5281] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1493.849941][ T6286] hub: probe of 4-1:250.228 failed with error -5 [ 1493.917883][ T6286] usb 4-1: USB disconnect, device number 33 [ 1493.924376][ T26] audit: type=1326 audit(25857678.693:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz.4.14834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1494.037182][ T5281] [ 1494.039594][ T5281] ====================================================== [ 1494.040097][ T26] audit: type=1326 audit(25857678.693:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz.4.14834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1494.046613][ T5281] WARNING: possible circular locking dependency detected [ 1494.046633][ T5281] 6.1.141-syzkaller #0 Not tainted [ 1494.046645][ T5281] ------------------------------------------------------ [ 1494.046653][ T5281] syz.0.14825/5281 is trying to acquire lock: [ 1494.046665][ T5281] ffff888063bb89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 1494.097204][ T26] audit: type=1326 audit(25857678.693:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5309 comm="syz.4.14834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b8e929 code=0x7ffc0000 [ 1494.106934][ T5281] [ 1494.106934][ T5281] but task is already holding lock: [ 1494.106943][ T5281] ffff88807858e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 1494.107001][ T5281] [ 1494.107001][ T5281] which lock already depends on the new lock. [ 1494.107001][ T5281] [ 1494.107009][ T5281] [ 1494.107009][ T5281] the existing dependency chain (in reverse order) is: [ 1494.165543][ T5281] [ 1494.165543][ T5281] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 1494.173198][ T5281] __mutex_lock+0x120/0xaf0 [ 1494.178238][ T5281] dquot_commit+0x5a/0x410 [ 1494.183193][ T5281] ext4_write_dquot+0x1f0/0x360 [ 1494.188599][ T5281] mark_all_dquot_dirty+0x1e3/0x400 [ 1494.194327][ T5281] __dquot_free_space+0x7ec/0xbc0 [ 1494.199878][ T5281] ext4_free_blocks+0x1bab/0x2640 [ 1494.205624][ T5281] ext4_ext_remove_space+0x1f0d/0x4490 [ 1494.211655][ T5281] ext4_ext_truncate+0x211/0x370 [ 1494.217141][ T5281] ext4_truncate+0xa0b/0x1230 [ 1494.222350][ T5281] ext4_evict_inode+0xb35/0x1100 [ 1494.227816][ T5281] evict+0x485/0x870 [ 1494.232258][ T5281] ext4_orphan_cleanup+0xbd3/0x1400 [ 1494.237994][ T5281] ext4_fill_super+0x7b78/0x8110 [ 1494.243454][ T5281] get_tree_bdev+0x3f1/0x610 [ 1494.248577][ T5281] vfs_get_tree+0x88/0x270 [ 1494.253529][ T5281] do_new_mount+0x24a/0xa40 [ 1494.258656][ T5281] __se_sys_mount+0x2d6/0x3c0 [ 1494.263862][ T5281] do_syscall_64+0x4c/0xa0 [ 1494.268830][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.275273][ T5281] [ 1494.275273][ T5281] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 1494.282930][ T5281] down_write+0x36/0x60 [ 1494.287624][ T5281] ext4_truncate+0x987/0x1230 [ 1494.292822][ T5281] ext4_setattr+0x10cb/0x19f0 [ 1494.298027][ T5281] notify_change+0xc74/0xf40 [ 1494.303161][ T5281] do_truncate+0x197/0x220 [ 1494.308115][ T5281] do_sys_ftruncate+0x312/0x3c0 [ 1494.313497][ T5281] do_syscall_64+0x4c/0xa0 [ 1494.318446][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.324882][ T5281] [ 1494.324882][ T5281] -> #4 (jbd2_handle){++++}-{0:0}: [ 1494.332211][ T5281] start_this_handle+0x1f49/0x2150 [ 1494.337854][ T5281] jbd2__journal_start+0x2b7/0x5a0 [ 1494.343511][ T5281] jbd2_journal_start+0x26/0x30 [ 1494.348890][ T5281] ocfs2_start_trans+0x372/0x6c0 [ 1494.354356][ T5281] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 1494.360598][ T5281] ocfs2_dismount_volume+0x1fc/0x930 [ 1494.366422][ T5281] generic_shutdown_super+0x130/0x340 [ 1494.372338][ T5281] kill_block_super+0x7c/0xe0 [ 1494.377545][ T5281] deactivate_locked_super+0x93/0xf0 [ 1494.383358][ T5281] cleanup_mnt+0x463/0x4f0 [ 1494.388305][ T5281] task_work_run+0x1ca/0x250 [ 1494.393465][ T5281] exit_to_user_mode_loop+0xe6/0x110 [ 1494.399297][ T5281] exit_to_user_mode_prepare+0xb1/0x140 [ 1494.405379][ T5281] syscall_exit_to_user_mode+0x16/0x40 [ 1494.411361][ T5281] do_syscall_64+0x58/0xa0 [ 1494.416304][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.422732][ T5281] [ 1494.422732][ T5281] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1494.431263][ T5281] down_read+0x42/0x2d0 [ 1494.435969][ T5281] ocfs2_start_trans+0x366/0x6c0 [ 1494.441447][ T5281] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 1494.447699][ T5281] ocfs2_dismount_volume+0x1fc/0x930 [ 1494.453514][ T5281] generic_shutdown_super+0x130/0x340 [ 1494.459424][ T5281] kill_block_super+0x7c/0xe0 [ 1494.464719][ T5281] deactivate_locked_super+0x93/0xf0 [ 1494.470536][ T5281] cleanup_mnt+0x463/0x4f0 [ 1494.475481][ T5281] task_work_run+0x1ca/0x250 [ 1494.480605][ T5281] exit_to_user_mode_loop+0xe6/0x110 [ 1494.486429][ T5281] exit_to_user_mode_prepare+0xb1/0x140 [ 1494.492519][ T5281] syscall_exit_to_user_mode+0x16/0x40 [ 1494.498504][ T5281] do_syscall_64+0x58/0xa0 [ 1494.503456][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.509883][ T5281] [ 1494.509883][ T5281] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1494.517383][ T5281] ocfs2_start_trans+0x267/0x6c0 [ 1494.522849][ T5281] ocfs2_write_info+0x117/0x350 [ 1494.528230][ T5281] dquot_set_dqinfo+0x459/0x6c0 [ 1494.533608][ T5281] quota_setinfo+0x2a4/0x2b0 [ 1494.538733][ T5281] __se_sys_quotactl+0x295/0x6b0 [ 1494.544200][ T5281] do_syscall_64+0x4c/0xa0 [ 1494.549146][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.555662][ T5281] [ 1494.555662][ T5281] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1494.564527][ T5281] down_write+0x36/0x60 [ 1494.569223][ T5281] ocfs2_lock_global_qf+0x1e5/0x270 [ 1494.574948][ T5281] ocfs2_write_info+0xd0/0x350 [ 1494.580246][ T5281] dquot_set_dqinfo+0x459/0x6c0 [ 1494.585633][ T5281] quota_setinfo+0x2a4/0x2b0 [ 1494.590752][ T5281] __se_sys_quotactl+0x295/0x6b0 [ 1494.596228][ T5281] do_syscall_64+0x4c/0xa0 [ 1494.601175][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.607612][ T5281] [ 1494.607612][ T5281] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 1494.618136][ T5281] __lock_acquire+0x2cf8/0x7c50 [ 1494.623521][ T5281] lock_acquire+0x1b4/0x490 [ 1494.628556][ T5281] down_write+0x36/0x60 [ 1494.633238][ T5281] ocfs2_lock_global_qf+0x1c7/0x270 [ 1494.638962][ T5281] ocfs2_acquire_dquot+0x2a0/0xb10 [ 1494.644599][ T5281] dqget+0x778/0xeb0 [ 1494.649021][ T5281] dquot_set_dqblk+0x27/0xf90 [ 1494.654314][ T5281] quota_setquota+0x4ac/0x530 [ 1494.659570][ T5281] __se_sys_quotactl+0x295/0x6b0 [ 1494.665053][ T5281] do_syscall_64+0x4c/0xa0 [ 1494.670026][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.676470][ T5281] [ 1494.676470][ T5281] other info that might help us debug this: [ 1494.676470][ T5281] [ 1494.686700][ T5281] Chain exists of: [ 1494.686700][ T5281] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ei->i_data_sem --> &dquot->dq_lock [ 1494.686700][ T5281] [ 1494.702660][ T5281] Possible unsafe locking scenario: [ 1494.702660][ T5281] [ 1494.710105][ T5281] CPU0 CPU1 [ 1494.715464][ T5281] ---- ---- [ 1494.720825][ T5281] lock(&dquot->dq_lock); [ 1494.725247][ T5281] lock(&ei->i_data_sem); [ 1494.732187][ T5281] lock(&dquot->dq_lock); [ 1494.739126][ T5281] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 1494.746418][ T5281] [ 1494.746418][ T5281] *** DEADLOCK *** [ 1494.746418][ T5281] [ 1494.754557][ T5281] 2 locks held by syz.0.14825/5281: [ 1494.759774][ T5281] #0: ffff88804efb20e0 (&type->s_umount_key#110){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 1494.770060][ T5281] #1: ffff88807858e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 1494.780070][ T5281] [ 1494.780070][ T5281] stack backtrace: [ 1494.785954][ T5281] CPU: 1 PID: 5281 Comm: syz.0.14825 Not tainted 6.1.141-syzkaller #0 [ 1494.794113][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1494.804166][ T5281] Call Trace: [ 1494.807469][ T5281] [ 1494.810408][ T5281] dump_stack_lvl+0x168/0x22e [ 1494.815095][ T5281] ? load_image+0x3b0/0x3b0 [ 1494.819600][ T5281] ? show_regs_print_info+0x12/0x12 [ 1494.824814][ T5281] ? print_circular_bug+0x12b/0x1a0 [ 1494.830023][ T5281] check_noncircular+0x274/0x310 [ 1494.834971][ T5281] ? add_chain_block+0x940/0x940 [ 1494.839915][ T5281] ? lockdep_lock+0xdc/0x1e0 [ 1494.844514][ T5281] ? lockdep_unlock+0x133/0x2d0 [ 1494.849381][ T5281] ? lockdep_lock+0x1e0/0x1e0 [ 1494.854067][ T5281] ? _find_first_zero_bit+0xcf/0x100 [ 1494.859368][ T5281] __lock_acquire+0x2cf8/0x7c50 [ 1494.864243][ T5281] ? verify_lock_unused+0x140/0x140 [ 1494.869475][ T5281] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 1494.875658][ T5281] lock_acquire+0x1b4/0x490 [ 1494.880175][ T5281] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 1494.885599][ T5281] ? __might_sleep+0xd0/0xd0 [ 1494.890203][ T5281] ? read_lock_is_recursive+0x10/0x10 [ 1494.895581][ T5281] ? do_raw_spin_lock+0x11d/0x280 [ 1494.900621][ T5281] ? __rwlock_init+0x140/0x140 [ 1494.905405][ T5281] down_write+0x36/0x60 [ 1494.909571][ T5281] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 1494.914960][ T5281] ocfs2_lock_global_qf+0x1c7/0x270 [ 1494.920259][ T5281] ? lock_buffer+0x80/0x80 [ 1494.925119][ T5281] ? trace_contention_end+0x5f/0x170 [ 1494.930417][ T5281] ocfs2_acquire_dquot+0x2a0/0xb10 [ 1494.935536][ T5281] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1494.941175][ T5281] ? from_kuid+0x155/0x670 [ 1494.945615][ T5281] ? ocfs2_destroy_dquot+0x40/0x40 [ 1494.950826][ T5281] dqget+0x778/0xeb0 [ 1494.954734][ T5281] dquot_set_dqblk+0x27/0xf90 [ 1494.959440][ T5281] quota_setquota+0x4ac/0x530 [ 1494.964138][ T5281] ? quota_getnextquota+0x450/0x450 [ 1494.969367][ T5281] ? bpf_lsm_capable+0x5/0x10 [ 1494.974066][ T5281] ? do_quotactl+0x4f3/0x710 [ 1494.978677][ T5281] __se_sys_quotactl+0x295/0x6b0 [ 1494.983720][ T5281] ? __x64_sys_quotactl+0xa0/0xa0 [ 1494.988756][ T5281] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1494.994761][ T5281] ? lock_chain_count+0x20/0x20 [ 1494.999636][ T5281] ? lockdep_hardirqs_on+0x94/0x140 [ 1495.004862][ T5281] do_syscall_64+0x4c/0xa0 [ 1495.009380][ T5281] ? clear_bhb_loop+0x60/0xb0 [ 1495.014063][ T5281] ? clear_bhb_loop+0x60/0xb0 [ 1495.018747][ T5281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.024659][ T5281] RIP: 0033:0x7f1fe338e929 [ 1495.029079][ T5281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.048709][ T5281] RSP: 002b:00007f1fe42ca038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1495.057143][ T5281] RAX: ffffffffffffffda RBX: 00007f1fe35b5fa0 RCX: 00007f1fe338e929 [ 1495.065214][ T5281] RDX: 0000000000000000 RSI: 0000200000002540 RDI: ffffffff80000800 [ 1495.073199][ T5281] RBP: 00007f1fe3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1495.081190][ T5281] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1495.089197][ T5281] R13: 0000000000000000 R14: 00007f1fe35b5fa0 R15: 00007ffff3dff088 [ 1495.097208][ T5281] [ 1495.100256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.207252][ T4890] ocfs2: Unmounting device (7,0) on (node local) [ 1495.288173][ T5308] loop5: detected capacity change from 0 to 32768 [ 1495.311156][ T5308] init_special_inode: bogus i_mode (2001) for inode loop5:4 [ 1500.118268][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1500.124622][ T1276] ieee802154 phy1 wpan1: encryption failed: -22