last executing test programs: 4.432299434s ago: executing program 2 (id=1025): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b16, 0x0) 2.502943446s ago: executing program 2 (id=1047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8}}, 0x0, 0x0, 0x3d, 0x0, "383bbcff90c0f1abb0bb6876ed3e34fe0ac72692fa07583327d6f7b2881fba13a076c8cc9dfa0ac33699a9fa100c5072b3a3262edbe1ec0cdb1ed1ae59c91dfa32a6b17d1de5d1606ce0e295fad616b5"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) 2.453552917s ago: executing program 2 (id=1048): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 2.329755177s ago: executing program 2 (id=1050): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) syz_usb_disconnect(r0) read(r1, 0x0, 0x0) 1.825692238s ago: executing program 1 (id=1052): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x46]}, 0x76) 1.662024657s ago: executing program 3 (id=1056): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') read$msr(r0, &(0x7f0000000080)=""/3, 0x3) 1.644335608s ago: executing program 1 (id=1057): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751"], 0x6, 0x2a4, &(0x7f0000002680)="$eJzs3T1re1UYAPDnpmkSdUgGJxG8oIPTn7arS4qkUMykZFAHLbYFaYLQQsEXDJ1cXRz9BILg5pdw8RsIroKbHQpHbnIvSWuaNtK0vvx+Q3t67vOc85zTQ18oOf3w5dHJYR7HF1/8Eq1WFrVudOMyi07UopJSSjHT/ToAgH+zy5Ti9zS1Sl4WEa31lQUArNHK3/9/WHtJAMCavfPue2/t9vu9t/O8FXujr84HxW/2xfvp893j+DiGcRRb0Y6r6d8Cqp8Wird7KaVxPS904rXR+HxQZI4++Kkcf/e3iEn+drSjM+m6nr/f723nU3P546KO58v5u0X+TrTjxQXz7/d7OwvyY9CI11+dq/9ZtOPnj+KTGMbhpIhZ/pfbef5m+uaPz98vyivys/H5oDmJm0kbj/ypAQAAAAAAAAAAAAAAAAAAAADgP+xZeXdOMyb39xRd5f07G1fFB5uRVzrX7+eZ5mfVQDfuBxqn+DalZj2i39vK8zyVgbP8erxUj/rTrBoAAAAAAAAAAAAAAAAAAAD+Wc4+/ezkYDg8On2QRnUbQPWy/r87Tneu55VYHtyczVUrm0tGjo0qJotYWkaxiAfalrsaz91W83ffrzpg6+6YzWX78zCN6nSdHGSL97AZVU+rOiQ/zsc04p5zNW57lFY6fo2Fj9orr73xwqQxXhIT2bLC3vh1unNlT3ZzFY3Jri5M3ywbc+k3zsZK5/mvXysyt3UAAAAAAAAAAAAAAAAAAMBazV70u+DhxdLUWmqurSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFSz//+/QmNcJt8juBGnZ0+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4H/gwAAP//GX9i/A==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.624749338s ago: executing program 0 (id=1058): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) pipe(&(0x7f0000000080)) 1.444001608s ago: executing program 0 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)=ANY=[@ANYBLOB="501000000a0a0101000000000000001e01"], 0x1050}}, 0x0) 1.345081088s ago: executing program 3 (id=1062): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) 1.237175329s ago: executing program 1 (id=1063): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x4a600) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) 1.237029549s ago: executing program 0 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xf3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x0) 1.236932188s ago: executing program 4 (id=1065): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050f00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x38}}, 0x0) 1.091494729s ago: executing program 3 (id=1066): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4ed6f, 0x43426}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) 1.086820939s ago: executing program 4 (id=1067): r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x9b) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) 1.020012809s ago: executing program 0 (id=1068): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001940), 0x1, 0x0) recvmmsg(r0, &(0x7f0000006e80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x42, 0x0) 1.009154419s ago: executing program 1 (id=1069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000001040168b800ff0000000000000004000500010001"], 0x1c}}, 0x0) close(r0) 971.268669ms ago: executing program 4 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r1, 0x1, 0x8000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ee578dcc5534"}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044004}, 0x20000000) 924.043959ms ago: executing program 0 (id=1071): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x2}) 918.582889ms ago: executing program 3 (id=1072): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000740)={0x3, 0x0, 0xffffd3de, 0x0, 0xfffffff9}) 858.942229ms ago: executing program 1 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002600000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a0006"], 0x44}}, 0x0) 771.041479ms ago: executing program 4 (id=1074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 749.872599ms ago: executing program 3 (id=1075): syz_mount_image$sysv(&(0x7f0000000240), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1208000, &(0x7f0000000240)=ANY=[], 0x1, 0x9e80, &(0x7f000000fcc0)="$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") r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) 737.084269ms ago: executing program 0 (id=1076): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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") write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='utf8=0,nonumtail=0,iocharset=iso8859-14,check=strict,uni_xlate=1,shortname=lower,shoru~ame=winnt,flush,\x00'], 0x1, 0x216, &(0x7f0000000e00)="$eJzs3bFqU1EYB/CvttVSkHQQiiJ4xcUpNBX3FKkgBhQlg04Wm6IksWAg0A6tTr6EvoKOroKDuPoCIkgVXOzWQYjUGxtb0jZS01vM77fkg3v+95zvEnLIkJN7Z+vV+cXGwvr6WoyNDcVIMYqxMRQTcSyGI/UkAID/yUarFd9bqazXAgAcDvs/AAyeHvf/m4e4JACgz3z/B4DBc/vO3eszpdLsrSQZi6g/a5ab5fQ1vT6zEA+jFpWYilz8iGhtSeur10qzU8mmLxNRrq+286vN8vD2fCFyMdE9X0hS2/OjMd7OfxyPSkxHLk51z093zR+Pixf+mD8fufhwPxajFvOxme3kVwpJcuVGaUf+xK9xAAAAAAAAAAAAAAAAAAAAAADQD/lkS9fze/L53a6n+d7PB9p5Ps9InBnJtncAAAAAAAAAAAAAAAAAAAA4KhpLy9W5Wq3yeK/i0fuXb/cb02Mx1J73oPc5eHHy/Ofnu495+jfP598Wb85l+Vh6LN6tPTh9qTF5+aisZ2m5OrrXW+tbLqJPs7/KtPffXe87ePJFce71yqevvd45gw8jAAAAAAAAAAAAAAAAAAAYcJ0f/Wa9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADITuf///tXZN0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8DAAA///UmKDH") ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000140)={0x3, 0x3}) 605.97467ms ago: executing program 4 (id=1077): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00'], 0x6, 0x2c6, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJCiYLVyI4oAtXj9e3dZMi74HYlY8s1IUW33sgSRBaKPgHY1du3bhw4ScQBD+IG7+B4FZwZ4XCyExmmqTGNJHEKv5+m97ee87MuZfLtB3ozXsvTEaPsnhy/ulP0e0m0RjEIC6S6Ecjap/HksGXAQD8l13kefyaz2yTl0REd39lAQB7VP/8b64Pe/aq9f3+awIA9uvhW2+/cXh0dP/NLOvGg8kXZ8PiL/vi62z88El8EON4HHejF5cR5YuCdpRvC4rmgzzPp62s0I+XJ9OzYZE5efeH6vqHv0SU+QfRi37ZdfW2ocx//ej+QTazkD8t6ni6uv+gyL8XvXjuKnkp/96K/Bim8cpLC/XfiV78+H58GON4VBYxz//sIMtey7/67ZN3ivKK/GR6NuyUcXM3/YoEAAAAAAAAAAAAAAAAAAAAAACbu1OdndOJ8vyeoqs6f6d5WXzTjqzWXz6fZ5af1BdaPB8oz/NpHt/U5+vczbIsrwLn+a14vhWt25k1AAAAAAAAAAAAAAAAAAAA/LucfvTx6Hg8fnyyk0Z9GkArIn5/GPF3rzNY6Hkx1gd3qnsej8eNqrkc01rsiWYdk0SsLaOYxI6WZdZIkpVD7VU1V41vv9v2Xt2bY9pL93qqWo9dznRU767RcbJ6DTtR93SrTfJ1GjGPSTetJ/2roTy22X7pyqHe1nNPnykb0zUxkawr7NWfZytX9STXZ5GWq7p6I1WNhfRre2Oj/RzdWfqfnxXJ/LSO5m6fQgAAAAAAAAAAAAAAAAAAQCz9//+KwfO1qY28s7eyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfNf/8/y0a0yp5g+A0Tk5veYoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D/wRAAD//8v2UxQ=") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') 605.767489ms ago: executing program 1 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x470b, &(0x7f0000008f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 362.098419ms ago: executing program 4 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50, 0x0, 0x5f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 360.81751ms ago: executing program 3 (id=1080): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close_range(r0, r0, 0x2) preadv(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/136, 0x88}], 0x1, 0x7f, 0x80000001) 353.80397ms ago: executing program 2 (id=1081): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="100c0681000000000000001b71ca", 0xe, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x70bd2d, 0x25dfdbfc, {0x3}}, 0x14}}, 0x0) 0s ago: executing program 2 (id=1082): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): ng: No such file or directory [ 77.273813][ T4525] loop1: detected capacity change from 0 to 128 [ 77.324218][ T4527] loop2: detected capacity change from 0 to 512 [ 77.364133][ T4525] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 77.412974][ T4527] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.124: inode #1: comm syz.2.124: iget: illegal inode # [ 77.480384][ T4527] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.124: error while reading EA inode 1 err=-117 [ 77.495518][ T4525] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 77.495986][ T4509] loop3: detected capacity change from 0 to 32768 [ 77.512584][ T4527] EXT4-fs (loop2): 1 orphan inode deleted [ 77.525817][ T4527] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 77.611778][ T4525] sysv_count_free_inodes: unable to read inode table [ 77.645910][ T4527] EXT4-fs error (device loop2): __ext4_expand_extra_isize:5826: inode #15: comm syz.2.124: bad extra_isize 6 (inode size 256) [ 77.682324][ T4509] XFS (loop3): Mounting V5 Filesystem [ 77.755522][ T4166] sysv_free_block: trying to free block not in datazone [ 77.776966][ T4166] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 77.804040][ T4546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.130'. [ 77.858995][ T4509] XFS (loop3): Ending clean mount [ 77.943876][ T4550] ax25_connect(): syz.0.131 uses autobind, please contact jreuter@yaina.de [ 77.960985][ T4552] loop1: detected capacity change from 0 to 256 [ 78.101243][ T4552] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 78.176854][ T4177] XFS (loop3): Unmounting Filesystem [ 78.477535][ T4564] netlink: 'syz.0.138': attribute type 21 has an invalid length. [ 78.519637][ T4564] netlink: 128 bytes leftover after parsing attributes in process `syz.0.138'. [ 78.567269][ T4564] netlink: 'syz.0.138': attribute type 4 has an invalid length. [ 78.575007][ T4564] netlink: 'syz.0.138': attribute type 3 has an invalid length. [ 78.633679][ T4564] netlink: 3 bytes leftover after parsing attributes in process `syz.0.138'. [ 78.957896][ T4582] loop2: detected capacity change from 0 to 512 [ 78.967096][ T4557] loop4: detected capacity change from 0 to 32768 [ 79.091233][ T4582] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.123491][ T4557] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.153790][ T4582] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.240494][ T4593] tipc: Started in network mode [ 79.245394][ T4593] tipc: Node identity 7ff, cluster identity 4711 [ 79.290195][ T4178] ocfs2: Unmounting device (7,4) on (node local) [ 79.308747][ T4572] loop1: detected capacity change from 0 to 32768 [ 79.319088][ T4593] tipc: Node number set to 2047 [ 79.541463][ T4599] loop2: detected capacity change from 0 to 64 [ 79.665514][ T4599] hfs: walked past end of dir [ 79.981265][ T4585] loop0: detected capacity change from 0 to 32768 [ 80.115604][ T4585] JBD2: Ignoring recovery information on journal [ 80.371574][ T4639] loop2: detected capacity change from 0 to 256 [ 80.393721][ T4585] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 80.436038][ T4642] loop4: detected capacity change from 0 to 512 [ 80.459180][ T26] audit: type=1326 audit(1733516566.525:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.1.150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736c7e6ed9 code=0x0 [ 80.547286][ T4642] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 80.603154][ T4642] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.163: corrupted in-inode xattr [ 80.643931][ T4642] EXT4-fs (loop4): Remounting filesystem read-only [ 80.661503][ T4642] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.163: couldn't read orphan inode 15 (err -117) [ 80.675963][ T4642] EXT4-fs (loop4): Remounting filesystem read-only [ 80.687149][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,noauto_da_alloc,nombcache,noquota,grpquota,norecovery,. Quota mode: writeback. [ 80.814565][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 80.888952][ T4653] loop3: detected capacity change from 0 to 4096 [ 80.959312][ T4653] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 81.026894][ T4653] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 81.054002][ T4653] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 81.070637][ T4653] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 81.108341][ T4653] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 81.121234][ T4653] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 81.151636][ T4653] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 81.182119][ T4653] ntfs: volume version 3.1. [ 81.196598][ T4653] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 81.216089][ T4653] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 81.479596][ T4670] loop1: detected capacity change from 0 to 128 [ 81.547148][ T1107] cfg80211: failed to load regulatory.db [ 81.584144][ T4672] loop3: detected capacity change from 0 to 16 [ 81.600342][ T4670] EXT4-fs (loop1): Ignoring removed nobh option [ 81.649585][ T4670] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 81.699517][ T4670] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.711297][ T4672] erofs: (device loop3): mounted with root inode @ nid 36. [ 81.790658][ T4670] fscrypt (loop1, inode 12): Reserved bits set in encryption policy [ 81.842466][ T4666] loop0: detected capacity change from 0 to 32768 [ 81.894821][ T4676] overlayfs: workdir and upperdir must reside under the same mount [ 81.954080][ T4666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.172 (4666) [ 81.976113][ T4664] loop2: detected capacity change from 0 to 40427 [ 82.022213][ T4680] loop1: detected capacity change from 0 to 64 [ 82.079466][ T4664] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.092402][ T4666] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 82.113213][ T4666] BTRFS info (device loop0): using free space tree [ 82.132200][ T4664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.143285][ T4666] BTRFS info (device loop0): has skinny extents [ 82.198918][ T4664] F2FS-fs (loop2): invalid crc value [ 82.314635][ T4664] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.517443][ T4664] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.546429][ T4664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.774400][ T4666] BTRFS info (device loop0): enabling ssd optimizations [ 82.979886][ T4682] loop3: detected capacity change from 0 to 32768 [ 83.022055][ T4725] loop1: detected capacity change from 0 to 1024 [ 83.077121][ T4725] EXT4-fs (loop1): Ignoring removed orlov option [ 83.126945][ T4682] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 83.152949][ T4725] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000010000,orlov,barrier=0x0000000000000002,jqfmt=vfsv1,i_version,minixdf,data_err=abort,max_batch_time=0x0000000000000002,bsdgroups,min_batch_time=0x0000000000000002,quota,,errors=continue. Quota mode: writeback. [ 83.294738][ T4725] EXT4-fs (loop1): shut down requested (2) [ 83.355830][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 83.614651][ T4741] loop2: detected capacity change from 0 to 256 [ 83.703688][ T4741] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 83.839446][ T4745] loop3: detected capacity change from 0 to 8192 [ 83.966148][ T4745] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.386133][ T4772] loop0: detected capacity change from 0 to 1024 [ 84.503655][ T4772] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.204: Invalid block bitmap block 0 in block_group 0 [ 84.563595][ T4783] loop2: detected capacity change from 0 to 2048 [ 84.612780][ T4772] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.204: Failed to acquire dquot type 0 [ 84.673540][ T4772] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.204: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.747121][ T4772] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.204: Invalid inode bitmap blk 0 in block_group 0 [ 84.777720][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:2: Failed to release dquot type 0 [ 84.806726][ T4786] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.847508][ T4772] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 84.870928][ T4772] EXT4-fs (loop0): 1 orphan inode deleted [ 84.882896][ T4772] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 84.942247][ T4772] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 84.991480][ T4781] loop3: detected capacity change from 0 to 32768 [ 85.130712][ T4169] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.150904][ T4781] JBD2: Ignoring recovery information on journal [ 85.174228][ T4769] loop1: detected capacity change from 0 to 32768 [ 85.184952][ T4793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.211'. [ 85.213786][ T4781] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 85.223748][ T4769] XFS: ikeep mount option is deprecated. [ 85.302073][ T4769] XFS (loop1): Mounting V5 Filesystem [ 85.352829][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 85.440489][ T4769] XFS (loop1): Ending clean mount [ 85.499891][ T4809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 85.511756][ T4769] XFS (loop1): Quotacheck needed: Please wait. [ 85.616212][ T4769] XFS (loop1): Quotacheck: Done. [ 85.716603][ T4169] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 85.742883][ T4169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.766612][ T4169] usb 5-1: Product: syz [ 85.770928][ T4169] usb 5-1: Manufacturer: syz [ 85.785791][ T4169] usb 5-1: SerialNumber: syz [ 85.799047][ T4169] usb 5-1: config 0 descriptor?? [ 85.859891][ T4169] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 85.882161][ T4169] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 85.891990][ T4169] garmin_gps: probe of ttyUSB0 failed with error -22 [ 85.902864][ T4166] XFS (loop1): Unmounting Filesystem [ 86.042351][ T4813] loop2: detected capacity change from 0 to 32768 [ 86.093937][ T4169] usb 5-1: USB disconnect, device number 2 [ 86.124574][ T4813] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.217 (4813) [ 86.151172][ T4169] garmin_gps 5-1:0.0: device disconnected [ 86.215468][ T4813] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 86.247998][ T4813] BTRFS info (device loop2): using free space tree [ 86.269331][ T4813] BTRFS info (device loop2): has skinny extents [ 86.424222][ T4813] BTRFS info (device loop2): enabling ssd optimizations [ 86.480132][ T4846] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.694491][ T4855] loop4: detected capacity change from 0 to 1024 [ 86.835300][ T4855] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.909428][ T4855] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.921626][ T4864] loop1: detected capacity change from 0 to 128 [ 87.022143][ T4868] netlink: 'syz.0.233': attribute type 34 has an invalid length. [ 87.022823][ T4864] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,nouid32,,errors=continue. Quota mode: none. [ 87.120024][ T4864] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.512113][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 87.625417][ T4887] netlink: 'syz.3.240': attribute type 21 has an invalid length. [ 87.649754][ T4887] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 87.830873][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 87.902589][ T4903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 87.947998][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 88.028159][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 88.028175][ T26] audit: type=1326 audit(1733516574.095:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4907 comm="syz.3.249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1208baaed9 code=0x0 [ 88.148487][ T4872] loop0: detected capacity change from 0 to 40427 [ 88.192235][ T4915] bond0: option ad_select: unable to set because the bond device is up [ 88.210836][ T4872] F2FS-fs (loop0): invalid crc value [ 88.243998][ T4872] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.273085][ T4923] tap0: tun_chr_ioctl cmd 1074025677 [ 88.285280][ T4923] tap0: linktype set to 769 [ 88.296098][ T4872] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.343818][ T4167] attempt to access beyond end of device [ 88.343818][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 88.463690][ T4931] loop1: detected capacity change from 0 to 17 [ 89.029499][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 89.092921][ T4945] loop4: detected capacity change from 0 to 1024 [ 89.211313][ T4949] loop2: detected capacity change from 0 to 128 [ 89.244311][ T4945] EXT4-fs error (device loop4): __ext4_get_inode_loc:4320: comm syz.4.264: Invalid inode table block 0 in block_group 0 [ 89.277414][ T4945] EXT4-fs (loop4): get root inode failed [ 89.283225][ T4945] EXT4-fs (loop4): mount failed [ 89.341146][ T4949] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 89.378859][ T4949] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.404957][ T4935] loop1: detected capacity change from 0 to 32768 [ 89.509856][ T4935] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.259 (4935) [ 89.525291][ T4933] loop0: detected capacity change from 0 to 40427 [ 89.612880][ T4933] F2FS-fs (loop0): invalid crc value [ 89.630314][ T4935] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.680340][ T4933] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.685201][ T4935] BTRFS info (device loop1): using free space tree [ 89.735824][ T4935] BTRFS info (device loop1): has skinny extents [ 89.914533][ T4933] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 89.996478][ T4933] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.077495][ T4935] BTRFS info (device loop1): enabling ssd optimizations [ 90.088953][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 90.197183][ T4960] loop4: detected capacity change from 0 to 32768 [ 90.226441][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 90.257695][ T4167] attempt to access beyond end of device [ 90.257695][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 90.301902][ T4960] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.269 (4960) [ 90.374512][ T4158] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4158) [ 90.626644][ T4947] loop3: detected capacity change from 0 to 40427 [ 90.669880][ T4947] F2FS-fs (loop3): invalid crc value [ 90.706389][ T4212] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.765759][ T4947] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.950613][ T4947] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.966697][ T4212] usb 3-1: Using ep0 maxpacket: 8 [ 91.070047][ T4177] attempt to access beyond end of device [ 91.070047][ T4177] loop3: rw=2049, want=45104, limit=40427 [ 91.090209][ T4212] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 91.105244][ T4212] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.127371][ T4212] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.144254][ T4212] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.155883][ T4212] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.175805][ T4212] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.185539][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.459594][ T5021] input: syz0 as /devices/virtual/input/input6 [ 91.476703][ T4212] usb 3-1: GET_CAPABILITIES returned 0 [ 91.482241][ T4212] usbtmc 3-1:16.0: can't read capabilities [ 91.516132][ T5023] loop1: detected capacity change from 0 to 2048 [ 91.609998][ T5023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.663613][ T5028] loop0: detected capacity change from 0 to 256 [ 91.683854][ T5030] syz.4.285 sent an empty control message without MSG_MORE. [ 91.723501][ T5028] FAT-fs (loop0): Directory bread(block 1285) failed [ 91.781088][ T4212] usb 3-1: USB disconnect, device number 3 [ 91.827164][ T5028] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 91.850304][ T5034] loop4: detected capacity change from 0 to 512 [ 91.933755][ T5034] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 91.980368][ T5040] gfs2: path_lookup on  returned error -2 [ 92.017534][ T5034] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,delalloc,,errors=continue. Quota mode: writeback. [ 92.120910][ T5034] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.250786][ T5034] EXT4-fs error (device loop4): __ext4_new_inode:1286: comm syz.4.286: failed to insert inode 16: doubly allocated? [ 92.398615][ T5061] loop2: detected capacity change from 0 to 128 [ 92.441433][ T5061] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 92.504830][ T5061] sysv_count_free_blocks: >flc_size entries in free-list block [ 92.567360][ T5061] sysv_count_free_inodes: unable to read inode table [ 92.574192][ T5061] sysv_count_free_blocks: >flc_size entries in free-list block [ 92.605232][ T5061] sysv_count_free_inodes: unable to read inode table [ 92.683768][ T5075] loop0: detected capacity change from 0 to 1024 [ 92.726223][ T4168] sysv_free_block: flc_count > flc_size [ 92.736314][ T4216] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.756468][ T4168] sysv_free_block: flc_count > flc_size [ 92.762046][ T4168] sysv_free_block: flc_count > flc_size [ 92.776388][ T4168] sysv_free_block: flc_count > flc_size [ 92.788492][ T4168] sysv_free_block: flc_count > flc_size [ 92.789631][ T5075] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.794062][ T4168] sysv_free_block: flc_count > flc_size [ 92.816565][ T4168] sysv_free_block: flc_count > flc_size [ 92.822342][ T4168] sysv_free_block: flc_count > flc_size [ 92.852054][ T4168] sysv_free_block: flc_count > flc_size [ 92.859973][ T5075] EXT4-fs (loop0): shut down requested (0) [ 92.876083][ T4168] sysv_free_block: flc_count > flc_size [ 92.950075][ T4168] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 92.986549][ T4216] usb 2-1: Using ep0 maxpacket: 16 [ 93.118573][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.130862][ T5097] loop2: detected capacity change from 0 to 1024 [ 93.156562][ T4216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.179488][ T4216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.236671][ T4216] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 93.245754][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.311318][ T5104] device ip6gretap1 entered promiscuous mode [ 93.320145][ T4216] usb 2-1: config 0 descriptor?? [ 93.349846][ T5106] loop3: detected capacity change from 0 to 1024 [ 93.419491][ T5097] EXT4-fs (loop2): Test dummy encryption mode enabled [ 93.430439][ T5097] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 93.457568][ T5097] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 93.465569][ T5106] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 93.519013][ T5097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 93.523789][ T5117] loop0: detected capacity change from 0 to 256 [ 93.544058][ T5106] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 93.575883][ T5097] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 93.615768][ T5122] loop4: detected capacity change from 0 to 256 [ 93.767407][ T5122] FAT-fs (loop4): Directory bread(block 64) failed [ 93.775028][ T5122] FAT-fs (loop4): Directory bread(block 65) failed [ 93.794243][ T5122] FAT-fs (loop4): Directory bread(block 66) failed [ 93.802653][ T5122] FAT-fs (loop4): Directory bread(block 67) failed [ 93.832538][ T5122] FAT-fs (loop4): Directory bread(block 68) failed [ 93.834794][ T4216] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0 [ 93.873712][ T4216] hid-u2fzero 0003:10C4:8ACF.0001: unknown main item tag 0x0 [ 93.886662][ T5122] FAT-fs (loop4): Directory bread(block 69) failed [ 93.893405][ T5122] FAT-fs (loop4): Directory bread(block 70) failed [ 93.904906][ T4216] hid-u2fzero 0003:10C4:8ACF.0001: item fetching failed at offset 2/5 [ 93.927226][ T4216] hid-u2fzero: probe of 0003:10C4:8ACF.0001 failed with error -22 [ 93.933840][ T5122] FAT-fs (loop4): Directory bread(block 71) failed [ 93.944521][ T5122] FAT-fs (loop4): Directory bread(block 72) failed [ 93.960442][ T5126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.323'. [ 93.985185][ T5122] FAT-fs (loop4): Directory bread(block 73) failed [ 93.988151][ T5124] loop0: detected capacity change from 0 to 4096 [ 94.055409][ T4216] usb 2-1: USB disconnect, device number 2 [ 94.074263][ T5124] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.089791][ T5130] loop2: detected capacity change from 0 to 512 [ 94.226937][ T5130] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 94.238972][ T5130] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.326526][ T5124] ntfs3: loop0: failed to convert "c46c" to iso8859-14 [ 94.350667][ T5130] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.325: invalid size [ 94.358077][ T5136] loop4: detected capacity change from 0 to 2048 [ 94.379950][ T5138] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.329'. [ 94.391020][ T5130] EXT4-fs (loop2): Remounting filesystem read-only [ 94.447155][ T5140] loop3: detected capacity change from 0 to 512 [ 94.499298][ T5140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.604770][ T5140] EXT4-fs (loop3): 1 truncate cleaned up [ 94.673542][ T5140] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=remount-ro,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000001,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 94.845193][ T5140] Process accounting resumed [ 94.874400][ T5140] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.330: corrupted in-inode xattr [ 94.920883][ T5136] hpfs: filesystem error: improperly stopped; already mounted read-only [ 94.935792][ T5140] EXT4-fs (loop3): Remounting filesystem read-only [ 94.954222][ T5160] loop2: detected capacity change from 0 to 64 [ 94.959451][ T5140] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1751: inode #15: comm syz.3.330: unable to update i_inline_off [ 94.970045][ T5136] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.998500][ T5136] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 95.025132][ T5140] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.330: corrupted in-inode xattr [ 95.070825][ T5140] EXT4-fs (loop3): Remounting filesystem read-only [ 95.343689][ T5164] netlink: 104 bytes leftover after parsing attributes in process `syz.2.341'. [ 95.850187][ T5178] sp0: Synchronizing with TNC [ 95.891866][ T5177] [U] [ 95.917798][ T5155] loop0: detected capacity change from 0 to 40427 [ 96.001710][ T5155] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 96.017100][ T5155] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.044621][ T5162] loop1: detected capacity change from 0 to 32768 [ 96.078057][ T5155] F2FS-fs (loop0): invalid crc value [ 96.122971][ T5155] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.198200][ T5155] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 96.205455][ T5162] XFS (loop1): Mounting V5 Filesystem [ 96.224185][ T5155] F2FS-fs (loop0): Start checkpoint disabled! [ 96.334495][ T5155] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.348862][ T5155] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 96.382076][ T5200] netlink: 68 bytes leftover after parsing attributes in process `syz.2.352'. [ 96.391379][ T5162] XFS (loop1): Ending clean mount [ 96.524473][ T5169] loop4: detected capacity change from 0 to 32768 [ 96.541891][ T4166] XFS (loop1): Unmounting Filesystem [ 96.596571][ T5155] attempt to access beyond end of device [ 96.596571][ T5155] loop0: rw=2049, want=53504, limit=40427 [ 96.674394][ T5169] (syz.4.343,5169,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.713290][ T5169] (syz.4.343,5169,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 96.813274][ T5169] JBD2: Ignoring recovery information on journal [ 96.968305][ T5169] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 97.233502][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 97.369592][ T4178] ocfs2: Unmounting device (7,4) on (node local) [ 97.729900][ T5228] loop3: detected capacity change from 0 to 4096 [ 97.910882][ T5228] NILFS (loop3): invalid segment: Checksum error in segment payload [ 97.967058][ T5228] NILFS (loop3): trying rollback from an earlier position [ 98.000789][ T5228] NILFS (loop3): recovery complete [ 98.046676][ T5257] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.167487][ T5263] loop2: detected capacity change from 0 to 16 [ 98.194025][ T5263] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 98.244424][ T5263] cramfs: Error -3 while decompressing! [ 98.270434][ T5263] cramfs: ffffffff96bbb2a8(27)->ffff88805aaf5000(4096) [ 98.306819][ T5263] cramfs: Error -3 while decompressing! [ 98.332788][ T5263] cramfs: ffffffff96bbb2a8(27)->ffff88805aaf5000(4096) [ 98.366833][ T5270] tap0: tun_chr_ioctl cmd 2147767519 [ 98.372215][ T26] audit: type=1800 audit(1733516584.435:27): pid=5263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.377" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 98.639314][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 98.871039][ T5291] loop2: detected capacity change from 0 to 512 [ 98.920867][ T5289] loop1: detected capacity change from 0 to 4096 [ 98.979856][ T5293] loop3: detected capacity change from 0 to 256 [ 98.996422][ T5289] ntfs: (device loop1): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 99.020980][ T5289] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 99.060375][ T5291] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 99.086623][ T5289] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 99.100834][ T5289] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 99.128078][ T5289] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 99.146616][ T5291] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.158860][ T5289] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 99.173739][ T5289] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 99.219375][ T5289] ntfs: volume version 3.1. [ 99.224579][ T5289] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 99.256823][ T5289] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 99.285465][ T5304] netlink: 60 bytes leftover after parsing attributes in process `syz.4.395'. [ 99.333908][ T5291] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.2.389: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.385028][ T5291] EXT4-fs (loop2): Remounting filesystem read-only [ 99.386420][ T4214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.399900][ T5291] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #12: comm syz.2.389: directory missing '.' [ 99.422904][ T5291] EXT4-fs (loop2): Remounting filesystem read-only [ 99.646390][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 99.676567][ T4212] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.766721][ T4214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.797199][ T5319] loop1: detected capacity change from 0 to 1024 [ 99.947721][ T4214] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 99.967606][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.986150][ T4214] usb 1-1: Product: syz [ 99.996551][ T4214] usb 1-1: Manufacturer: syz [ 100.001353][ T4214] usb 1-1: SerialNumber: syz [ 100.013406][ T4214] usb 1-1: config 0 descriptor?? [ 100.103920][ T4212] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.130036][ T4212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.153157][ T4212] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.173490][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.217005][ T4212] usb 5-1: config 0 descriptor?? [ 100.258839][ T4212] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.284429][ T4212] dvb-usb: bulk message failed: -22 (3/0) [ 100.311673][ T4212] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.347007][ T4212] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.365903][ T4212] usb 5-1: media controller created [ 100.408632][ T4212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.434871][ T4212] dvb-usb: bulk message failed: -22 (6/0) [ 100.435233][ T4212] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.468878][ T4212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 100.503649][ T4212] dvb-usb: schedule remote query interval to 150 msecs. [ 100.521978][ T4214] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 100.536744][ T4214] usb 1-1: No valid video chain found. [ 100.543694][ T4212] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 100.577340][ T4212] usb 5-1: USB disconnect, device number 3 [ 100.677305][ T4212] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.894487][ T5352] bridge0: port 3(syz_tun) entered blocking state [ 100.969459][ T5352] bridge0: port 3(syz_tun) entered disabled state [ 100.981659][ T5352] device syz_tun entered promiscuous mode [ 100.988723][ T5352] bridge0: port 3(syz_tun) entered blocking state [ 100.995559][ T5352] bridge0: port 3(syz_tun) entered forwarding state [ 101.244428][ T5365] loop4: detected capacity change from 0 to 2048 [ 101.359733][ T5365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.397541][ T5373] loop1: detected capacity change from 0 to 2048 [ 101.433263][ T5377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.428'. [ 101.466165][ T5377] netlink: 264 bytes leftover after parsing attributes in process `syz.3.428'. [ 101.659125][ T5383] netlink: 'syz.2.432': attribute type 7 has an invalid length. [ 101.688334][ T5385] loop3: detected capacity change from 0 to 256 [ 101.866217][ T5393] loop4: detected capacity change from 0 to 2048 [ 102.029965][ T5393] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.037261][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 102.060371][ T5393] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.102518][ T4215] usb 1-1: USB disconnect, device number 4 [ 102.706356][ T4737] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.918266][ T5433] loop1: detected capacity change from 0 to 64 [ 102.946548][ T4737] usb 1-1: Using ep0 maxpacket: 8 [ 102.968620][ T5437] loop3: detected capacity change from 0 to 512 [ 103.073757][ T4737] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 103.094146][ T4737] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.116313][ T4737] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.126082][ T4737] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.156630][ T4737] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.196387][ T4737] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.212653][ T5437] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 103.225847][ T4737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.320790][ T5424] loop4: detected capacity change from 0 to 32768 [ 103.336223][ T5437] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.419357][ T5424] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.448 (5424) [ 103.471363][ T5437] EXT4-fs (loop3): shut down requested (2) [ 103.482981][ T5424] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 103.505630][ T5450] loop1: detected capacity change from 0 to 164 [ 103.506676][ T4737] usb 1-1: GET_CAPABILITIES returned 0 [ 103.536469][ T5424] BTRFS info (device loop4): enabling auto defrag [ 103.542933][ T5424] BTRFS info (device loop4): doing ref verification [ 103.549780][ T4737] usbtmc 1-1:16.0: can't read capabilities [ 103.608967][ T5424] BTRFS info (device loop4): max_inline at 0 [ 103.615004][ T5424] BTRFS info (device loop4): force clearing of disk cache [ 103.639340][ T5424] BTRFS info (device loop4): turning on sync discard [ 103.646191][ T5424] BTRFS info (device loop4): disabling free space tree [ 103.679608][ T5424] BTRFS info (device loop4): has skinny extents [ 103.741183][ T4737] usb 1-1: USB disconnect, device number 5 [ 104.117273][ T5424] BTRFS info (device loop4): enabling ssd optimizations [ 104.147183][ T5424] BTRFS info (device loop4): clearing free space tree [ 104.154968][ T5424] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.182938][ T5424] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.339311][ T5485] loop3: detected capacity change from 0 to 164 [ 104.421572][ T5485] isofs: isofs_export_get_parent(): child directory not normalized! [ 104.552487][ T5424] capability: warning: `syz.4.448' uses 32-bit capabilities (legacy support in use) [ 104.623317][ T5496] loop1: detected capacity change from 0 to 2048 [ 104.635114][ T5499] loop3: detected capacity change from 0 to 1024 [ 104.824045][ T5496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.838743][ T5499] hfsplus: bad catalog entry type [ 105.088152][ T4726] hfsplus: b-tree write err: -5, ino 4 [ 105.269084][ T5534] loop2: detected capacity change from 0 to 128 [ 105.283704][ T5529] loop1: detected capacity change from 0 to 256 [ 105.461394][ T5537] loop4: detected capacity change from 0 to 16 [ 105.567018][ T5537] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 105.677957][ T5537] cramfs: Error -3 while decompressing! [ 105.709287][ T5537] cramfs: ffffffff96bb7168(453)->ffff88807e475000(4096) [ 105.784004][ T5548] loop2: detected capacity change from 0 to 1764 [ 106.034141][ T5564] loop0: detected capacity change from 0 to 128 [ 106.072808][ T5564] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 106.123648][ T5564] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 106.214950][ T5564] sysv_count_free_inodes: unable to read inode table [ 106.303613][ T5568] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'. [ 106.313478][ T4167] sysv_free_block: trying to free block not in datazone [ 106.345042][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 106.453461][ T5570] ax25_connect(): syz.3.498 uses autobind, please contact jreuter@yaina.de [ 106.467263][ T5572] loop0: detected capacity change from 0 to 64 [ 107.145328][ T5591] loop3: detected capacity change from 0 to 4096 [ 107.177032][ T5560] loop4: detected capacity change from 0 to 40427 [ 107.232762][ T5591] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 107.262017][ T5560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.301483][ T5591] ntfs3: loop3: mft corrupted [ 107.316427][ T5591] ntfs3: loop3: Failed to load $Extend. [ 107.376381][ T4212] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.400149][ T5560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.522565][ T5606] loop3: detected capacity change from 0 to 512 [ 107.618116][ T4178] attempt to access beyond end of device [ 107.618116][ T4178] loop4: rw=2049, want=45104, limit=40427 [ 107.626386][ T4212] usb 2-1: Using ep0 maxpacket: 16 [ 107.650282][ T5606] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.514: inode #1: comm syz.3.514: iget: illegal inode # [ 107.671532][ T5606] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.514: error while reading EA inode 1 err=-117 [ 107.714745][ T5606] EXT4-fs (loop3): 1 orphan inode deleted [ 107.747234][ T5606] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 107.773064][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.791486][ T4212] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.804893][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.818183][ T4212] usb 2-1: config 0 descriptor?? [ 107.875485][ T5606] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5826: inode #15: comm syz.3.514: bad extra_isize 6 (inode size 256) [ 108.110641][ T5617] loop4: detected capacity change from 0 to 256 [ 108.145674][ T5620] loop3: detected capacity change from 0 to 64 [ 108.149105][ T5618] loop0: detected capacity change from 0 to 512 [ 108.232903][ T5620] hfs: walked past end of dir [ 108.259993][ T5618] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.300618][ T4212] mcp2221 0003:04D8:00DD.0002: item fetching failed at offset 0/5 [ 108.317455][ T4212] mcp2221 0003:04D8:00DD.0002: can't parse reports [ 108.324077][ T5624] loop2: detected capacity change from 0 to 256 [ 108.330769][ T4212] mcp2221: probe of 0003:04D8:00DD.0002 failed with error -22 [ 108.354800][ T5618] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.437882][ T5624] exfat: Deprecated parameter 'namecase' [ 108.525592][ T5624] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 108.627773][ T4259] usb 2-1: USB disconnect, device number 3 [ 108.951417][ T5645] loop0: detected capacity change from 0 to 64 [ 108.968078][ T5644] tipc: Started in network mode [ 108.993682][ T5644] tipc: Node identity ac14140f, cluster identity 4711 [ 109.006617][ T5644] tipc: New replicast peer: 255.255.255.255 [ 109.023904][ T5644] tipc: Enabled bearer , priority 10 [ 109.306452][ T4215] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.432511][ T5654] loop1: detected capacity change from 0 to 8 [ 109.557261][ T5656] loop2: detected capacity change from 0 to 4096 [ 109.600566][ T5656] __ntfs_warning: 17 callbacks suppressed [ 109.600582][ T5656] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 109.700401][ T5656] ntfs: (device loop2): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 109.715653][ T5656] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 109.726564][ T4215] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 109.732133][ T5656] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 109.745395][ T4215] usb 5-1: config 0 has no interface number 0 [ 109.752848][ T4215] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.789444][ T5656] ntfs: volume version 3.1. [ 109.805030][ T4215] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.824017][ T5641] loop3: detected capacity change from 0 to 32768 [ 109.857023][ T4215] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 109.870681][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.927117][ T5663] loop0: detected capacity change from 0 to 4096 [ 109.932925][ T4215] usb 5-1: config 0 descriptor?? [ 109.952293][ T5641] JBD2: Ignoring recovery information on journal [ 110.077649][ T5663] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 110.101036][ T5641] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 110.123724][ T5663] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 110.144493][ T4737] tipc: Node number set to 2886997007 [ 110.247493][ T5663] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 110.268278][ T5641] (syz.3.529,5641,0):ocfs2_remove_inode_range:1797 ERROR: status = -22 [ 110.276774][ T5663] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 110.278558][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 110.307750][ T5641] (syz.3.529,5641,0):__ocfs2_change_file_space:2048 ERROR: status = -22 [ 110.311593][ T5663] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 110.341153][ T5663] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 110.375243][ T5663] ntfs: volume version 3.1. [ 110.428110][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 110.475067][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.496583][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.513883][ T5673] loop1: detected capacity change from 0 to 1024 [ 110.526033][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.548801][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.576174][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.621689][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.644397][ T4215] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 110.734918][ T4215] logitech-djreceiver 0003:046D:C71B.0003: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 110.762529][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 110.805268][ T4215] usb 5-1: USB disconnect, device number 4 [ 110.851679][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 110.882237][ T5676] hfsplus: request for non-existent node 16777216 in B*Tree [ 110.927105][ T5676] hfsplus: request for non-existent node 16777216 in B*Tree [ 110.968066][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 110.995367][ T5682] loop2: detected capacity change from 0 to 256 [ 111.029013][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.087636][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.095792][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.140128][ T5676] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.159341][ T5676] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.169784][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.178118][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.186680][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.194163][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.203956][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.203974][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.220272][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.220289][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.220419][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.334770][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.334836][ T5676] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.334893][ T5676] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335122][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335136][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335172][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335183][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335217][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335229][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335443][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335456][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335490][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335502][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335536][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335667][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335726][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.335739][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.336201][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.336215][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.337218][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.337236][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.337286][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.337300][ T5673] hfsplus: request for non-existent node 16777216 in B*Tree [ 111.768784][ T263] block nbd4: Attempted send on invalid socket [ 111.769716][ T263] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.777862][ T263] block nbd4: Attempted send on invalid socket [ 111.777889][ T263] blk_update_request: I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.779068][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 111.779434][ T263] block nbd4: Attempted send on invalid socket [ 111.779456][ T263] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.779620][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 111.779649][ T5705] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 111.779664][ T5705] UDF-fs: Scanning with blocksize 512 failed [ 111.780559][ T263] block nbd4: Attempted send on invalid socket [ 111.780582][ T263] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.780865][ T263] block nbd4: Attempted send on invalid socket [ 111.780884][ T263] blk_update_request: I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.780946][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 111.781157][ T263] block nbd4: Attempted send on invalid socket [ 111.781177][ T263] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.781240][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 111.781263][ T5705] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 111.781277][ T5705] UDF-fs: Scanning with blocksize 1024 failed [ 111.781796][ T263] block nbd4: Attempted send on invalid socket [ 111.781818][ T263] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.795927][ T263] block nbd4: Attempted send on invalid socket [ 111.795950][ T263] blk_update_request: I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.796019][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 111.796204][ T263] block nbd4: Attempted send on invalid socket [ 111.796225][ T263] blk_update_request: I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.797044][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 111.797071][ T5705] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 111.797085][ T5705] UDF-fs: Scanning with blocksize 2048 failed [ 111.797559][ T263] block nbd4: Attempted send on invalid socket [ 111.797581][ T263] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.797853][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 111.798064][ T5705] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 111.798087][ T5705] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 111.798102][ T5705] UDF-fs: Scanning with blocksize 4096 failed [ 111.798113][ T5705] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 112.291718][ T5694] loop0: detected capacity change from 0 to 40427 [ 112.353346][ T5694] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 112.353376][ T5694] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 112.361065][ T5694] F2FS-fs (loop0): invalid crc value [ 112.373907][ T5700] loop2: detected capacity change from 0 to 32768 [ 112.431099][ T5694] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.650371][ T5694] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 112.650437][ T5694] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.812107][ T5694] attempt to access beyond end of device [ 112.812107][ T5694] loop0: rw=2049, want=78776, limit=40427 [ 113.115717][ T5720] sctp: [Deprecated]: syz.2.564 (pid 5720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.115717][ T5720] Use struct sctp_sack_info instead [ 113.495661][ T5726] loop1: detected capacity change from 0 to 4096 [ 113.755944][ T5726] ntfs: volume version 3.1. [ 116.703067][ T5766] netlink: 'syz.1.584': attribute type 34 has an invalid length. [ 116.762286][ T5767] tap0: tun_chr_ioctl cmd 1074025677 [ 116.800415][ T5767] tap0: linktype set to 769 [ 116.860198][ T5769] loop4: detected capacity change from 0 to 4096 [ 117.126863][ T5771] loop1: detected capacity change from 0 to 4096 [ 117.462336][ T5771] ntfs: volume version 3.1. [ 117.773364][ T5786] loop2: detected capacity change from 0 to 16 [ 117.837162][ T5786] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 117.883957][ T5786] cramfs: Error -3 while decompressing! [ 117.893434][ T5786] cramfs: ffffffff96bb7168(453)->ffff88802461d000(4096) [ 118.059268][ T5790] loop2: detected capacity change from 0 to 1024 [ 118.791120][ T5795] loop1: detected capacity change from 0 to 128 [ 118.803883][ T5769] __ntfs_warning: 15 callbacks suppressed [ 118.803900][ T5769] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 118.865520][ T5795] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 118.867132][ T5769] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 118.885474][ T5795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.021848][ T5769] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 119.086419][ T5769] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 119.103287][ T5802] loop1: detected capacity change from 0 to 256 [ 119.140071][ T5769] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 119.161852][ T5769] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 119.195920][ T5769] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 119.271317][ T5769] ntfs: volume version 3.1. [ 119.285392][ T5769] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 119.308790][ T5807] loop3: detected capacity change from 0 to 256 [ 119.324467][ T5769] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 119.352304][ T5769] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 119.685176][ T5821] loop0: detected capacity change from 0 to 256 [ 119.792838][ T5825] loop3: detected capacity change from 0 to 1024 [ 119.854435][ T5821] FAT-fs (loop0): Directory bread(block 64) failed [ 119.874621][ T5821] FAT-fs (loop0): Directory bread(block 65) failed [ 119.903778][ T5821] FAT-fs (loop0): Directory bread(block 66) failed [ 119.930443][ T5821] FAT-fs (loop0): Directory bread(block 67) failed [ 119.953329][ T5821] FAT-fs (loop0): Directory bread(block 68) failed [ 119.982044][ T5821] FAT-fs (loop0): Directory bread(block 69) failed [ 119.995729][ T5821] FAT-fs (loop0): Directory bread(block 70) failed [ 120.013068][ T5821] FAT-fs (loop0): Directory bread(block 71) failed [ 120.020921][ T5821] FAT-fs (loop0): Directory bread(block 72) failed [ 120.034192][ T5821] FAT-fs (loop0): Directory bread(block 73) failed [ 120.372657][ T5790] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.453934][ T5853] loop3: detected capacity change from 0 to 256 [ 120.491291][ T5790] EXT4-fs (loop2): shut down requested (0) [ 120.633160][ T5856] loop0: detected capacity change from 0 to 512 [ 120.695597][ T5843] loop1: detected capacity change from 0 to 32768 [ 120.717203][ T5856] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.763845][ T5856] EXT4-fs (loop0): 1 truncate cleaned up [ 120.792466][ T5843] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.618 (5843) [ 120.808534][ T5856] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 120.816854][ T5865] loop2: detected capacity change from 0 to 64 [ 120.905878][ T5843] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 120.930171][ T5871] gfs2: path_lookup on  returned error -2 [ 120.946759][ T5843] BTRFS info (device loop1): using free space tree [ 120.962070][ T5843] BTRFS info (device loop1): has skinny extents [ 121.242752][ T5894] loop4: detected capacity change from 0 to 1024 [ 121.339253][ T5843] BTRFS info (device loop1): enabling ssd optimizations [ 121.470516][ T5905] loop0: detected capacity change from 0 to 128 [ 121.570999][ T5905] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.624126][ T5887] loop2: detected capacity change from 0 to 32768 [ 121.637967][ T5905] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.644912][ T5909] loop3: detected capacity change from 0 to 64 [ 121.769975][ T5887] JBD2: Ignoring recovery information on journal [ 121.900724][ T4519] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4519) [ 122.060144][ T5887] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 122.178519][ T5922] loop3: detected capacity change from 0 to 64 [ 122.312509][ T4168] ocfs2: Unmounting device (7,2) on (node local) [ 122.437271][ T4177] hfs: node 4:3 still has 1 user(s)! [ 122.835564][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 122.855392][ T5954] loop2: detected capacity change from 0 to 512 [ 122.879006][ T4214] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.969617][ T5950] loop3: detected capacity change from 0 to 4096 [ 123.015935][ T5954] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.654: corrupted inode contents [ 123.101359][ T5954] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.654: mark_inode_dirty error [ 123.112064][ T5934] loop1: detected capacity change from 0 to 40427 [ 123.148096][ T5954] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.654: corrupted inode contents [ 123.165990][ T5934] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 123.175987][ T5954] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.654: mark_inode_dirty error [ 123.207873][ T5934] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.207871][ T5954] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.654: corrupted inode contents [ 123.255891][ T5934] F2FS-fs (loop1): invalid crc value [ 123.257038][ T5954] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 123.267098][ T4214] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 123.290886][ T5954] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.654: corrupted inode contents [ 123.312580][ T5934] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.322651][ T4214] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.353068][ T4214] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.373310][ T5954] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.654: mark_inode_dirty error [ 123.394673][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.428436][ T5954] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 123.438143][ T5944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.507171][ T5954] EXT4-fs (loop2): 1 truncate cleaned up [ 123.525791][ T5934] F2FS-fs (loop1): recover fsync data on readonly fs [ 123.544142][ T5954] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.586699][ T5934] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 123.603921][ T5934] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 123.611443][ T5954] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.646778][ T5934] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 123.703128][ T4737] usb 1-1: USB disconnect, device number 6 [ 123.816709][ T5971] EXT4-fs (loop2): shut down requested (1) [ 123.825201][ T5934] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 123.915717][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 123.915731][ T26] audit: type=1800 audit(1733516609.975:43): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.654" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 123.960983][ T5976] loop4: detected capacity change from 0 to 512 [ 124.101578][ T4520] udevd[4520]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.135433][ T5976] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.181004][ T4726] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.221389][ T4726] Quota error (device loop2): write_blk: dquota write failed [ 124.236300][ T4726] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 124.277499][ T5976] EXT4-fs (loop4): 1 truncate cleaned up [ 124.286566][ T5976] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=remount-ro,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000001,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 124.312988][ T5988] loop0: detected capacity change from 0 to 512 [ 124.342376][ T5982] 9pnet: Insufficient options for proto=fd [ 124.350657][ T5988] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.379632][ T4726] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.391457][ T4726] Quota error (device loop2): write_blk: dquota write failed [ 124.400524][ T4726] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 124.422075][ T4726] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 124.425545][ T5988] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.667: invalid indirect mapped block 4294967295 (level 1) [ 124.432443][ T4726] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 124.455797][ T4726] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 124.469648][ T4726] Quota error (device loop2): write_blk: dquota write failed [ 124.484526][ T4726] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 124.512962][ T5988] EXT4-fs (loop0): Remounting filesystem read-only [ 124.520310][ T5988] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.667: invalid indirect mapped block 4294967295 (level 1) [ 124.541843][ T5988] EXT4-fs (loop0): Remounting filesystem read-only [ 124.566137][ T5988] EXT4-fs (loop0): 2 truncates cleaned up [ 124.572041][ T5988] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 124.613102][ T5976] Process accounting resumed [ 124.649142][ T5976] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.663: corrupted in-inode xattr [ 124.716765][ T5976] EXT4-fs (loop4): Remounting filesystem read-only [ 124.807625][ T5976] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1751: inode #15: comm syz.4.663: unable to update i_inline_off [ 124.832002][ T5999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.670'. [ 124.962661][ T5976] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.663: corrupted in-inode xattr [ 125.055836][ T5976] EXT4-fs (loop4): Remounting filesystem read-only [ 125.134683][ T4178] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 125.201404][ T4178] EXT4-fs (loop4): Remounting filesystem read-only [ 125.270929][ T6012] loop2: detected capacity change from 0 to 256 [ 125.473238][ T6021] loop0: detected capacity change from 0 to 512 [ 125.501931][ T4215] hid-generic 000D:0000:0000.0004: unknown main item tag 0x0 [ 125.546606][ T4215] hid-generic 000D:0000:0000.0004: unknown main item tag 0x0 [ 125.582664][ T4215] hid-generic 000D:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 125.731758][ T6021] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 125.776605][ T6021] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.786510][ T4737] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.823333][ T6005] loop1: detected capacity change from 0 to 32768 [ 126.040186][ T6005] XFS (loop1): Mounting V5 Filesystem [ 126.105152][ T6005] XFS (loop1): Ending clean mount [ 126.117774][ T6005] XFS (loop1): Quotacheck needed: Please wait. [ 126.133759][ T6019] loop3: detected capacity change from 0 to 40427 [ 126.166093][ T4737] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.174934][ T4737] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.177885][ T6005] XFS (loop1): Quotacheck: Done. [ 126.185955][ T4737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.199696][ T4737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 126.224543][ T4737] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 126.228867][ T6019] F2FS-fs (loop3): invalid crc value [ 126.266563][ T6019] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.286620][ T4214] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.329381][ T4166] XFS (loop1): Unmounting Filesystem [ 126.363201][ T6019] F2FS-fs (loop3): Start checkpoint disabled! [ 126.376566][ T4737] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.385882][ T4737] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.392355][ T6019] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 126.394311][ T4737] usb 3-1: Product: syz [ 126.405838][ T4737] usb 3-1: Manufacturer: syz [ 126.477723][ T4737] cdc_wdm 3-1:1.0: skipping garbage [ 126.483008][ T4737] cdc_wdm 3-1:1.0: skipping garbage [ 126.497844][ T4737] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 126.503965][ T4737] cdc_wdm 3-1:1.0: Unknown control protocol [ 126.536360][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 126.594328][ T9] attempt to access beyond end of device [ 126.594328][ T9] loop3: rw=2049, want=40976, limit=40427 [ 126.666555][ T4214] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 126.674853][ T4214] usb 1-1: config 0 has no interface number 0 [ 126.696163][ T4214] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 126.735785][ T4214] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 126.797893][ T6048] loop4: detected capacity change from 0 to 2048 [ 126.818392][ T5511] usb 3-1: USB disconnect, device number 4 [ 126.826746][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 126.834082][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 126.840165][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 126.852223][ T6024] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 126.922235][ T6048] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.936627][ T4214] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 126.951941][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.960926][ T4214] usb 1-1: Product: syz [ 126.965115][ T4214] usb 1-1: Manufacturer: syz [ 126.978762][ T4214] usb 1-1: SerialNumber: syz [ 126.985889][ T4214] usb 1-1: config 0 descriptor?? [ 127.006677][ T6034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.013940][ T6034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.016134][ T6048] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.061110][ T6048] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 127.075427][ T4212] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.079676][ T6048] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.079676][ T6048] [ 127.093800][ T6048] EXT4-fs (loop4): Total free blocks count 0 [ 127.101172][ T6048] EXT4-fs (loop4): Free/Dirty block details [ 127.107310][ T6048] EXT4-fs (loop4): free_blocks=2415919104 [ 127.113094][ T6048] EXT4-fs (loop4): dirty_blocks=16 [ 127.122201][ T6048] EXT4-fs (loop4): Block reservation details [ 127.128595][ T6048] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 127.163065][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.177495][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.177495][ T9] [ 127.254207][ T6034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.284839][ T6034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 127.316404][ T4212] usb 2-1: Using ep0 maxpacket: 8 [ 127.436503][ T4212] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 127.447404][ T4212] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.458895][ T4212] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.470097][ T4212] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.480417][ T4212] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.501224][ T4212] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.513046][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.718610][ T6073] loop4: detected capacity change from 0 to 256 [ 127.796448][ T4212] usb 2-1: GET_CAPABILITIES returned 0 [ 127.808881][ T6073] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 127.821263][ T4212] usbtmc 2-1:16.0: can't read capabilities [ 127.950023][ T4214] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.972867][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 127.984939][ T4214] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 128.008791][ T6083] loop4: detected capacity change from 0 to 256 [ 128.022942][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 128.037876][ T4214] asix: probe of 1-1:0.251 failed with error -71 [ 128.046443][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 128.059629][ T6046] usbtmc 2-1:16.0: Unable to send data, error -71 [ 128.076209][ T6083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 128.092353][ T4212] usb 2-1: USB disconnect, device number 4 [ 128.102122][ T4214] usb 1-1: USB disconnect, device number 7 [ 128.211216][ T6089] loop3: detected capacity change from 0 to 512 [ 128.327140][ T6089] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 128.386107][ T6089] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.510897][ T6089] EXT4-fs error (device loop3): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.3.704: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 128.545255][ T6101] loop4: detected capacity change from 0 to 128 [ 128.554697][ T6089] EXT4-fs (loop3): Remounting filesystem read-only [ 128.565125][ T6089] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #12: comm syz.3.704: directory missing '.' [ 128.585366][ T6089] EXT4-fs (loop3): Remounting filesystem read-only [ 128.726495][ T4731] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 128.899140][ T6111] autofs4:pid:6111:autofs_fill_super: pipe file descriptor does not contain proper ops [ 129.016891][ T6117] device sit0 entered promiscuous mode [ 129.096889][ T4731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.110923][ T6117] netlink: 'syz.1.718': attribute type 1 has an invalid length. [ 129.119278][ T4731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.129857][ T6117] netlink: 1 bytes leftover after parsing attributes in process `syz.1.718'. [ 129.145500][ T4731] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 129.164565][ T6115] loop3: detected capacity change from 0 to 4096 [ 129.171504][ T4731] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 129.181045][ T4731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.213248][ T6103] loop0: detected capacity change from 0 to 40427 [ 129.218102][ T4731] usb 3-1: config 0 descriptor?? [ 129.245733][ T6115] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 129.276163][ T6103] F2FS-fs (loop0): invalid crc value [ 129.315647][ T6103] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.319234][ T6115] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 129.436035][ T6103] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 129.479021][ T6103] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.606028][ T4167] attempt to access beyond end of device [ 129.606028][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 129.709002][ T4731] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 129.723676][ T4731] logitech 0003:046D:C50C.0005: unknown main item tag 0x0 [ 129.735970][ T4731] logitech 0003:046D:C50C.0005: hidraw0: USB HID vff.fe Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 129.927155][ T4731] usb 3-1: USB disconnect, device number 5 [ 129.955164][ T6126] loop1: detected capacity change from 0 to 32768 [ 130.027154][ T6126] XFS: attr2 mount option is deprecated. [ 130.032844][ T6126] XFS: ikeep mount option is deprecated. [ 130.060081][ T6126] XFS: noikeep mount option is deprecated. [ 130.141814][ T6130] loop3: detected capacity change from 0 to 32768 [ 130.174136][ T6126] XFS (loop1): Mounting V5 Filesystem [ 130.219155][ T6130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.723 (6130) [ 130.228949][ T6142] loop4: detected capacity change from 0 to 4096 [ 130.292639][ T6126] XFS (loop1): Ending clean mount [ 130.307202][ T6126] XFS (loop1): Quotacheck needed: Please wait. [ 130.319521][ T6130] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 130.374331][ T6130] BTRFS info (device loop3): using free space tree [ 130.376567][ T6145] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.381391][ T6130] BTRFS info (device loop3): has skinny extents [ 130.446352][ T5520] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.479665][ T6126] XFS (loop1): Quotacheck: Done. [ 130.606750][ T6130] BTRFS info (device loop3): enabling ssd optimizations [ 130.615275][ T4166] XFS (loop1): Unmounting Filesystem [ 130.692876][ T6164] serio: Serial port ptm1 [ 130.721083][ T5520] usb 1-1: Using ep0 maxpacket: 32 [ 130.864448][ T5520] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 130.884670][ T5520] usb 1-1: config 0 has no interface number 0 [ 131.098645][ T5520] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.108130][ T5520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.116658][ T5520] usb 1-1: Product: syz [ 131.120842][ T5520] usb 1-1: Manufacturer: syz [ 131.141216][ T5520] usb 1-1: SerialNumber: syz [ 131.148385][ T5520] usb 1-1: config 0 descriptor?? [ 131.164107][ T6178] loop1: detected capacity change from 0 to 64 [ 131.193424][ T5520] quatech2 1-1:0.19: Quatech 2nd gen USB to Serial Driver converter detected [ 131.268295][ T4214] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 131.330476][ T6178] minix_free_block (loop1:1): bit already cleared [ 131.341622][ T6178] minix_free_block (loop1:4): bit already cleared [ 131.349792][ T6178] minix_free_block (loop1:3): bit already cleared [ 131.362235][ T6178] minix_free_block (loop1:2): bit already cleared [ 131.370224][ T6178] minix_free_block (loop1:1): bit already cleared [ 131.411807][ T5520] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 131.432686][ T5520] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 131.611352][ T6139] udc-core: couldn't find an available UDC or it's busy [ 131.618825][ T6139] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.646572][ T4214] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 131.659782][ T4214] usb 3-1: config 54 has no interface number 0 [ 131.816712][ T4214] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 131.830392][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.841862][ T4214] usb 3-1: Product: syz [ 131.846166][ T4214] usb 3-1: Manufacturer: syz [ 131.850126][ T5520] usb 1-1: USB disconnect, device number 8 [ 131.856907][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 131.862681][ T4214] usb 3-1: SerialNumber: syz [ 131.917335][ T5520] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 131.964706][ T5520] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 132.001564][ T5520] quatech2 1-1:0.19: device disconnected [ 132.118864][ T6191] loop1: detected capacity change from 0 to 32768 [ 132.213767][ T4214] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 132.232413][ T154] usb 3-1: Failed to submit usb control message: -71 [ 132.240201][ T4214] usb 3-1: USB disconnect, device number 6 [ 132.273868][ T154] usb 3-1: unable to send the bmi data to the device: -71 [ 132.302726][ T154] usb 3-1: unable to get target info from device [ 132.371026][ T154] usb 3-1: could not get target info (-71) [ 132.417552][ T154] usb 3-1: could not probe fw (-71) [ 132.499775][ T6216] netlink: 'syz.4.747': attribute type 25 has an invalid length. [ 132.746732][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753056][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991122][ T6234] program syz.1.755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.190623][ T6243] loop0: detected capacity change from 0 to 4096 [ 133.201056][ T6252] loop1: detected capacity change from 0 to 1024 [ 133.271005][ T6252] EXT4-fs (loop1): Ignoring removed bh option [ 133.318518][ T6259] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.338665][ T6252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c028, mo2=0002] [ 133.382613][ T6252] System zones: 0-1, 3-12 [ 133.470100][ T6252] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,nobarrier,barrier=0x0000000000000000,errors=remount-ro,bh,lazytime,nodelalloc,acl,debug,. Quota mode: none. [ 133.488390][ T26] audit: type=1800 audit(1733516619.535:44): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.758" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 133.534923][ T6243] syz.0.758 (6243) used greatest stack depth: 18896 bytes left [ 133.571451][ T6266] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz.1.762: attempt to clear invalid blocks 1886221359 len 1 [ 133.591921][ T6266] EXT4-fs (loop1): Remounting filesystem read-only [ 133.638398][ T4215] kernel read not supported for file /adsp1 (pid: 4215 comm: kworker/0:5) [ 133.696506][ T4214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.928353][ T6272] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 133.999561][ T6274] ALSA: mixer_oss: invalid OSS volume 'u' [ 134.012147][ T6274] ALSA: mixer_oss: invalid OSS volume 'S}B./YY992WhԅNE,' [ 134.043420][ T6274] ALSA: mixer_oss: invalid OSS volume 'cOF8!}sd"tx8SA' [ 134.061039][ T6274] ALSA: mixer_oss: invalid OSS volume 'H}!RͩZ' [ 134.076580][ T4214] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 134.096516][ T6274] ALSA: mixer_oss: invalid OSS volume ';po^3#/Yj}l@;69' [ 134.105030][ T4214] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 134.116901][ T6274] ALSA: mixer_oss: invalid OSS volume 'Yե\&a}X=ȉ5xi$q' [ 134.145878][ T6274] ALSA: mixer_oss: invalid OSS volume '?٭qoIyMto>lg9' [ 134.165803][ T6274] ALSA: mixer_oss: invalid OSS volume ')֭I;MoB0{?' [ 134.186103][ T6274] ALSA: mixer_oss: invalid OSS volume 'S7sW{ZN++_[' [ 134.211756][ T6274] ALSA: mixer_oss: invalid OSS volume '' [ 134.219902][ T6261] loop3: detected capacity change from 0 to 40427 [ 134.221327][ T6274] ALSA: mixer_oss: invalid OSS volume 'csϑ=ZO҉y/ƓĥS&RJ4j' [ 134.264247][ T6274] ALSA: mixer_oss: invalid OSS volume 'c :3٣/D@aItհfx' [ 134.273073][ T6274] ALSA: mixer_oss: invalid OSS volume 'T{ʒw4M{ j%t' [ 134.286619][ T4214] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 134.292476][ T6261] F2FS-fs (loop3): invalid crc value [ 134.295834][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.295861][ T4214] usb 5-1: Product: syz [ 134.322276][ T6274] ALSA: mixer_oss: invalid OSS volume '6o?ton]i' [ 134.354116][ T6274] ALSA: mixer_oss: invalid OSS volume 'ΦuL?΅v4+C' [ 134.362535][ T4214] usb 5-1: Manufacturer: syz [ 134.375550][ T6261] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.376033][ T4214] usb 5-1: SerialNumber: syz [ 134.390532][ T6274] ALSA: mixer_oss: invalid OSS volume 'y3g՘F8JK`V e>ÓM' [ 134.414132][ T4214] usb 5-1: config 0 descriptor?? [ 134.420528][ T6274] ALSA: mixer_oss: invalid OSS volume '' [ 134.437096][ T6274] ALSA: mixer_oss: invalid OSS volume 'C43KJD֞47=8qPK^P' [ 134.445476][ T6274] ALSA: mixer_oss: invalid OSS volume '}cLurbzI{%' [ 134.454786][ T6264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.472649][ T6264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.491237][ T6274] ALSA: mixer_oss: invalid OSS volume 'Te0R+!ؘs1N2+Oq' [ 134.510440][ T6268] loop0: detected capacity change from 0 to 32768 [ 134.536489][ T6274] ALSA: mixer_oss: invalid OSS volume 'x'Ybe:x^' [ 134.546630][ T6261] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 134.551828][ T6274] ALSA: mixer_oss: invalid OSS volume '?2oZݓX^Ɩ7' [ 134.562299][ T6274] ALSA: mixer_oss: invalid OSS volume 'zzvavgw4-=A*үcPT' [ 134.567649][ T6261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.571749][ T6274] ALSA: mixer_oss: invalid OSS volume '-ĉԱKU$FZY"2' [ 134.587330][ T6274] ALSA: mixer_oss: invalid OSS volume '-/9M=+ihԣx|ߝ/' [ 134.605897][ T6268] XFS: attr2 mount option is deprecated. [ 134.612563][ T6268] XFS: ikeep mount option is deprecated. [ 134.618866][ T6274] ALSA: mixer_oss: invalid OSS volume 'Å~SAdgاL~EVbA]q4b' [ 134.630827][ T6268] XFS: noikeep mount option is deprecated. [ 134.638471][ T6274] ALSA: mixer_oss: invalid OSS volume 'ǴTrz3")?\]diTb' [ 134.657729][ T6274] ALSA: mixer_oss: invalid OSS volume 'hJKu+?snd' [ 134.686019][ T4177] attempt to access beyond end of device [ 134.686019][ T4177] loop3: rw=2049, want=45104, limit=40427 [ 134.712618][ T6264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.717723][ T6274] ALSA: mixer_oss: invalid OSS volume '>(v[.zPW[l٪Hv9I*' [ 134.729037][ T6264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.745458][ T6274] ALSA: mixer_oss: invalid OSS volume 'IM}' [ 134.751724][ T6274] ALSA: mixer_oss: invalid OSS volume 'ޚ]ZXWK' [ 134.787420][ T6268] XFS (loop0): Mounting V5 Filesystem [ 134.793955][ T6274] ALSA: mixer_oss: invalid OSS volume 'gl f' [ 134.886070][ T6274] ALSA: mixer_oss: invalid OSS volume 'pǭ-gl>•?5b(UmH' [ 134.898144][ T6268] XFS (loop0): Ending clean mount [ 134.905848][ T6268] XFS (loop0): Quotacheck needed: Please wait. [ 134.927149][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 134.937081][ T6274] ALSA: mixer_oss: invalid OSS volume ' HD-5G:y_$RtsCo' [ 134.945433][ T6274] ALSA: mixer_oss: invalid OSS volume 'OSlR$X`DE' [ 134.958240][ T6274] ALSA: mixer_oss: invalid OSS volume 'jbhOS{e}YyA!"L' [ 134.969592][ T6302] device dummy0 entered promiscuous mode [ 135.006643][ T6274] ALSA: mixer_oss: invalid OSS volume ''c+әbnR٫b2pBM' [ 135.015044][ T6274] ALSA: mixer_oss: invalid OSS volume '])@:T1U2cn&C[g7xD' [ 135.025327][ T6274] ALSA: mixer_oss: invalid OSS volume 'wUosL!NζWK' [ 135.041189][ T6268] XFS (loop0): Quotacheck: Done. [ 135.072575][ T6268] XFS (loop0): User initiated shutdown received. [ 135.083066][ T6268] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 135.083622][ T6274] ALSA: mixer_oss: invalid OSS volume 'ޭ1ؽF&' [ 135.106867][ T6268] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 135.156483][ T4167] XFS (loop0): Unmounting Filesystem [ 135.246533][ T4214] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 135.469887][ T4214] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 135.493341][ T4214] usb 5-1: USB disconnect, device number 5 [ 135.628266][ T6319] loop3: detected capacity change from 0 to 16 [ 135.659667][ T6319] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 135.766783][ T6179] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.924120][ T6333] netlink: 140 bytes leftover after parsing attributes in process `syz.3.790'. [ 136.011788][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 136.027051][ T6179] usb 3-1: Using ep0 maxpacket: 32 [ 136.124386][ T6341] loop0: detected capacity change from 0 to 512 [ 136.297245][ T6341] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 136.305509][ T6324] loop1: detected capacity change from 0 to 40427 [ 136.320757][ T6341] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.369407][ T6179] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 136.378872][ T6179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.386499][ T4731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.397305][ T6179] usb 3-1: Product: syz [ 136.401498][ T6179] usb 3-1: Manufacturer: syz [ 136.406174][ T6324] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 136.419566][ T6179] usb 3-1: SerialNumber: syz [ 136.443030][ T6350] loop0: detected capacity change from 0 to 64 [ 136.451277][ T6324] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 136.460820][ T6179] usb 3-1: config 0 descriptor?? [ 136.470007][ T6324] F2FS-fs (loop1): invalid crc value [ 136.505714][ T6324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.505801][ T6350] attempt to access beyond end of device [ 136.505801][ T6350] loop0: rw=16812033, want=164, limit=64 [ 136.548969][ T6350] attempt to access beyond end of device [ 136.548969][ T6350] loop0: rw=16812033, want=168, limit=64 [ 136.560504][ T4212] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.568843][ T6350] attempt to access beyond end of device [ 136.568843][ T6350] loop0: rw=16812033, want=170, limit=64 [ 136.575885][ T6324] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 136.589783][ T6350] attempt to access beyond end of device [ 136.589783][ T6350] loop0: rw=16812033, want=178, limit=64 [ 136.601832][ T6324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 136.615081][ T6350] attempt to access beyond end of device [ 136.615081][ T6350] loop0: rw=16812033, want=742, limit=64 [ 136.691090][ T6324] attempt to access beyond end of device [ 136.691090][ T6324] loop1: rw=2049, want=78776, limit=40427 [ 136.750678][ T6179] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 007 [ 136.807789][ T4212] usb 5-1: Using ep0 maxpacket: 8 [ 136.931692][ T4731] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.941290][ T4212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.958339][ T6360] loop0: detected capacity change from 0 to 2048 [ 136.965783][ T4731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.975106][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.992853][ T4731] usb 4-1: Product: syz [ 136.997147][ T4731] usb 4-1: Manufacturer: syz [ 137.000372][ T6179] usb 3-1: USB disconnect, device number 7 [ 137.002062][ T4212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.023853][ T4731] usb 4-1: SerialNumber: syz [ 137.029653][ T4212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.044006][ T4731] usb 4-1: config 0 descriptor?? [ 137.086561][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.126787][ T4212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.153797][ T4212] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 137.195838][ T4212] usb 5-1: Product: syz [ 137.472352][ T4215] usb 4-1: USB disconnect, device number 3 [ 137.506617][ T4212] usb 5-1: GET_CAPABILITIES returned 0 [ 137.512352][ T4212] usbtmc 5-1:16.0: can't read capabilities [ 137.618939][ T6370] loop0: detected capacity change from 0 to 2048 [ 137.713569][ T6370] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.742776][ T4297] udevd[4297]: incorrect nilfs2 checksum on /dev/loop0 [ 137.760765][ T6373] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.786633][ T6370] NILFS (loop0): failed to count free inodes: err=-34 [ 137.803442][ T6370] NILFS (loop0): failed to count free inodes: err=-34 [ 137.896494][ T4215] usb 5-1: USB disconnect, device number 6 [ 137.955374][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.964407][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.559482][ T6392] loop0: detected capacity change from 0 to 256 [ 138.746925][ T4743] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.764492][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.794827][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.024196][ T6364] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.034485][ T6364] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.044922][ T6364] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.054241][ T6364] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.116655][ T4743] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.152678][ T4743] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.176733][ T4743] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.186070][ T4743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.237201][ T6389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.340210][ T6386] device bond0 entered promiscuous mode [ 139.346671][ T6386] device bond_slave_0 entered promiscuous mode [ 139.353042][ T6386] device bond_slave_1 entered promiscuous mode [ 139.404600][ T6386] netlink: 10 bytes leftover after parsing attributes in process `syz.4.812'. [ 139.537358][ T4213] usb 4-1: USB disconnect, device number 4 [ 139.663961][ T6411] loop2: detected capacity change from 0 to 8 [ 139.754527][ T6419] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 139.765103][ T6419] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 139.877628][ T1110] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.083326][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 140.092656][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 140.162852][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 140.286755][ T1110] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 140.304381][ T1110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.307722][ T6417] loop4: detected capacity change from 0 to 32768 [ 140.326083][ T1110] usb 2-1: config 0 has no interface number 0 [ 140.418253][ T6417] JBD2: Ignoring recovery information on journal [ 140.489230][ T6417] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 140.506562][ T1110] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 140.526055][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.536192][ T1110] usb 2-1: Product: syz [ 140.540517][ T1110] usb 2-1: Manufacturer: syz [ 140.566353][ T1110] usb 2-1: SerialNumber: syz [ 140.573428][ T1110] usb 2-1: config 0 descriptor?? [ 140.587205][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 140.612424][ T6449] netlink: 72 bytes leftover after parsing attributes in process `syz.0.839'. [ 140.634252][ T6417] (syz.4.826,6417,0):ocfs2_remove_inode_range:1797 ERROR: status = -22 [ 140.652949][ T6417] (syz.4.826,6417,0):__ocfs2_change_file_space:2048 ERROR: status = -22 [ 140.739672][ T4178] ocfs2: Unmounting device (7,4) on (node local) [ 140.856455][ T1110] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 140.871241][ T6442] loop2: detected capacity change from 0 to 32768 [ 140.878257][ T1110] usb 2-1: No valid video chain found. [ 140.897101][ T1110] usb 2-1: USB disconnect, device number 5 [ 141.056148][ T6442] XFS (loop2): Mounting V5 Filesystem [ 141.165336][ T6451] loop0: detected capacity change from 0 to 40427 [ 141.176050][ T6442] XFS (loop2): Ending clean mount [ 141.187197][ T6442] XFS (loop2): Quotacheck needed: Please wait. [ 141.236185][ T6442] XFS (loop2): Quotacheck: Done. [ 141.326485][ T4168] XFS (loop2): Unmounting Filesystem [ 141.327461][ T6451] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.390951][ T6474] program syz.3.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.429905][ T6451] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.481438][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 141.585598][ T4167] attempt to access beyond end of device [ 141.585598][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 141.966529][ T1110] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.106722][ T4215] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.263445][ T6500] loop0: detected capacity change from 0 to 512 [ 142.330496][ T6487] loop4: detected capacity change from 0 to 40427 [ 142.330921][ T1110] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 142.354677][ T1110] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.365121][ T1110] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.384885][ T6500] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 142.400139][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.414657][ T6487] F2FS-fs (loop4): invalid crc value [ 142.427125][ T6488] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.453743][ T6487] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.477405][ T6500] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 142.536993][ T4215] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 142.579627][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.645972][ T4215] usb 4-1: config 0 descriptor?? [ 142.722148][ T4737] usb 2-1: USB disconnect, device number 6 [ 142.723196][ T6487] F2FS-fs (loop4): Start checkpoint disabled! [ 142.743237][ T4215] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 142.785480][ T6487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 142.973464][ T6504] loop2: detected capacity change from 0 to 32768 [ 142.977957][ T1160] attempt to access beyond end of device [ 142.977957][ T1160] loop4: rw=2049, want=40976, limit=40427 [ 143.170886][ T6504] XFS (loop2): Mounting V5 Filesystem [ 143.176991][ T4215] gspca_cpia1: usb_control_msg 03, error -32 [ 143.216861][ T4215] gspca_cpia1: usb_control_msg 03, error -71 [ 143.236669][ T4215] gspca_cpia1: usb_control_msg 01, error -71 [ 143.242834][ T4215] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 143.276558][ T4215] usb 4-1: USB disconnect, device number 5 [ 143.385753][ T6531] loop0: detected capacity change from 0 to 4096 [ 143.411312][ T6504] XFS (loop2): Ending clean mount [ 143.489908][ T6531] ntfs: volume version 3.1. [ 143.619446][ T4168] XFS (loop2): Unmounting Filesystem [ 143.925599][ T6545] loop3: detected capacity change from 0 to 64 [ 144.021565][ T6545] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 144.840019][ T6538] loop4: detected capacity change from 0 to 40427 [ 144.894564][ T6538] F2FS-fs (loop4): invalid crc value [ 144.992796][ T6538] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.002465][ T6582] loop0: detected capacity change from 0 to 128 [ 145.171200][ T6538] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 145.292475][ T6594] loop1: detected capacity change from 0 to 256 [ 145.694964][ T6611] loop1: detected capacity change from 0 to 2048 [ 145.752499][ T6615] Failed to get privilege flags for destination (handle=0x2:0x8) [ 145.818779][ T6611] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 145.869085][ T6611] UDF-fs: Scanning with blocksize 512 failed [ 145.909522][ T6611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.954500][ T26] audit: type=1800 audit(1733516632.015:45): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.903" name="file2" dev="loop1" ino=819 res=0 errno=0 [ 145.977254][ T6625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 146.001714][ T6622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 146.008694][ T6622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.024731][ T6625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 146.050166][ T6622] vhci_hcd vhci_hcd.0: Device attached [ 146.056212][ T6625] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 146.062839][ T6625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 146.071302][ T6625] vhci_hcd vhci_hcd.0: Device attached [ 146.080579][ T6626] vhci_hcd: connection closed [ 146.083855][ T6623] vhci_hcd: connection closed [ 146.113575][ T4726] vhci_hcd: stop threads [ 146.152514][ T6620] loop2: detected capacity change from 0 to 8192 [ 146.160475][ T6629] loop1: detected capacity change from 0 to 512 [ 146.172490][ T4726] vhci_hcd: release socket [ 146.193304][ T4726] vhci_hcd: disconnect device [ 146.217866][ T4726] vhci_hcd: stop threads [ 146.222254][ T4726] vhci_hcd: release socket [ 146.232458][ T4726] vhci_hcd: disconnect device [ 146.246531][ T4737] vhci_hcd: vhci_device speed not set [ 146.279002][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 146.285663][ T6629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.308974][ T6629] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.423053][ T6629] EXT4-fs (loop1): Cannot change journaled quota options when quota turned on [ 146.672315][ T6616] loop3: detected capacity change from 0 to 40427 [ 146.793391][ T6616] F2FS-fs (loop3): invalid crc value [ 146.825848][ T6616] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.867981][ T6659] loop1: detected capacity change from 0 to 128 [ 146.879939][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 146.900621][ T6661] loop4: detected capacity change from 0 to 512 [ 146.908364][ T6659] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.977463][ T6659] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.007577][ T6616] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.015603][ T6661] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 147.057518][ T6661] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 147.079036][ T6661] EXT4-fs (loop4): group descriptors corrupted! [ 147.128571][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.168493][ T4177] attempt to access beyond end of device [ 147.168493][ T4177] loop3: rw=2049, want=45104, limit=40427 [ 147.256395][ T1110] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.506393][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 147.629641][ T1110] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 147.656876][ T1110] usb 1-1: config 0 has no interface number 0 [ 147.686346][ T1110] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 147.728114][ T1110] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 147.755371][ T1110] usb 1-1: config 0 interface 126 has no altsetting 0 [ 147.940474][ T1110] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 147.961128][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.984693][ T1110] usb 1-1: Product: syz [ 147.994847][ T1110] usb 1-1: Manufacturer: syz [ 148.006365][ T1110] usb 1-1: SerialNumber: syz [ 148.038425][ T1110] usb 1-1: config 0 descriptor?? [ 148.056760][ T6665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.064055][ T6665] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.195730][ T6677] loop4: detected capacity change from 0 to 32768 [ 148.228180][ T6698] netlink: 616 bytes leftover after parsing attributes in process `syz.2.941'. [ 148.231099][ T6684] loop1: detected capacity change from 0 to 32768 [ 148.281352][ T6684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.935 (6684) [ 148.350911][ T6684] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 148.371243][ T6684] BTRFS info (device loop1): using free space tree [ 148.379111][ T6677] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 148.426338][ T6684] BTRFS info (device loop1): has skinny extents [ 148.441248][ T4178] ocfs2: Unmounting device (7,4) on (node local) [ 148.529146][ T6713] loop3: detected capacity change from 0 to 512 [ 148.538260][ T1110] ir_usb 1-1:0.126: IR Dongle converter detected [ 148.763976][ T1110] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 148.818043][ T6730] nft_compat: unsupported protocol 0 [ 148.866644][ T6684] BTRFS info (device loop1): enabling ssd optimizations [ 148.968452][ T1110] usb 1-1: USB disconnect, device number 9 [ 149.006927][ T1110] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 149.036036][ T1110] ir_usb 1-1:0.126: device disconnected [ 149.086617][ T6731] loop3: detected capacity change from 0 to 4096 [ 149.184693][ T6731] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 149.237152][ T6708] loop2: detected capacity change from 0 to 32768 [ 149.264940][ T6740] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 149.383089][ T6708] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.944 (6708) [ 149.573810][ T6708] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 149.613594][ T6708] BTRFS info (device loop2): using free space tree [ 149.624672][ T6731] ntfs3: loop3: ino=19, "file1" The size of extended attributes must not exceed 64KiB [ 149.647592][ T6708] BTRFS info (device loop2): has skinny extents [ 149.898414][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 149.975366][ T6777] loop0: detected capacity change from 0 to 64 [ 150.032943][ T6708] BTRFS info (device loop2): enabling ssd optimizations [ 150.056345][ T1110] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.056465][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.306469][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 150.416608][ T6775] loop3: detected capacity change from 0 to 32768 [ 150.428641][ T1110] usb 2-1: config 6 has an invalid interface number: 193 but max is 0 [ 150.438652][ T1110] usb 2-1: config 6 has no interface number 0 [ 150.451459][ T1110] usb 2-1: config 6 interface 193 altsetting 179 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 150.480316][ T1110] usb 2-1: config 6 interface 193 altsetting 179 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 150.492703][ T1110] usb 2-1: config 6 interface 193 has no altsetting 0 [ 150.547182][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 150.556340][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 150.566192][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping [ 150.595054][ T6775] XFS (loop3): Mounting V5 Filesystem [ 150.640720][ T6788] loop2: detected capacity change from 0 to 128 [ 150.652932][ T6788] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 150.657916][ T1110] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=81.6b [ 150.699163][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.707871][ T1110] usb 2-1: Product: syz [ 150.712507][ T1110] usb 2-1: Manufacturer: syz [ 150.716909][ T7] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 150.717953][ T1110] usb 2-1: SerialNumber: syz [ 150.726165][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 150.771485][ T6775] XFS (loop3): Ending clean mount [ 150.781656][ T6788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.810556][ T26] audit: type=1800 audit(1733516636.875:46): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.956" name="file1" dev="loop3" ino=7430 res=0 errno=0 [ 150.819881][ T7] usb 5-1: SerialNumber: syz [ 150.893855][ T7] usb 5-1: config 0 descriptor?? [ 150.955167][ T4177] XFS (loop3): Unmounting Filesystem [ 150.961192][ T6752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.975961][ T6752] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.997920][ T7] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 151.069554][ T1110] hdpvr 2-1:6.193: Could not find bulk-in endpoint [ 151.076179][ T1110] hdpvr: probe of 2-1:6.193 failed with error -12 [ 151.083122][ T6798] loop0: detected capacity change from 0 to 512 [ 151.105415][ T1110] usb 2-1: USB disconnect, device number 7 [ 151.217360][ T7] usb 5-1: USB disconnect, device number 7 [ 151.254304][ T6798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.280484][ T6798] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.457926][ T6798] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 151.485777][ T6798] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 151.513965][ T6798] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.966: Failed to acquire dquot type 0 [ 151.591141][ T6800] loop2: detected capacity change from 0 to 32768 [ 151.645195][ T6814] loop1: detected capacity change from 0 to 1024 [ 151.703177][ T6814] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.820492][ T6814] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 151.856676][ T6800] XFS (loop2): Mounting V5 Filesystem [ 151.904358][ T6831] loop0: detected capacity change from 0 to 1024 [ 151.980915][ T6831] EXT4-fs (loop0): Ignoring removed nobh option [ 151.987438][ T6800] XFS (loop2): Ending clean mount [ 152.021334][ T6831] EXT4-fs (loop0): Ignoring removed bh option [ 152.038348][ T6831] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.096613][ T4168] XFS (loop2): Unmounting Filesystem [ 152.157938][ T6831] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 152.184125][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.219477][ T6831] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.974: Allocating blocks 385-513 which overlap fs metadata [ 152.382827][ T6847] EXT4-fs (loop0): pa ffff88801e610000: logic 16, phys. 129, len 24 [ 152.391457][ T6847] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 152.495365][ T6849] device bridge_slave_1 left promiscuous mode [ 152.525159][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.965243][ T6865] loop1: detected capacity change from 0 to 512 [ 153.080559][ T6865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.120758][ T6865] EXT4-fs (loop1): 1 truncate cleaned up [ 153.186347][ T6865] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 153.227120][ T6872] loop3: detected capacity change from 0 to 256 [ 153.335998][ T6851] loop4: detected capacity change from 0 to 32768 [ 153.347277][ T6872] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 153.417027][ T6851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.981 (6851) [ 153.606448][ T6851] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 153.615177][ T6851] BTRFS info (device loop4): using free space tree [ 153.636954][ T6862] loop2: detected capacity change from 0 to 32768 [ 153.643784][ T6883] loop1: detected capacity change from 0 to 1024 [ 153.656666][ T6851] BTRFS info (device loop4): has skinny extents [ 153.780942][ T6862] XFS (loop2): Mounting V5 Filesystem [ 153.789690][ T6883] hfsplus: bad catalog entry type [ 153.877785][ T6851] BTRFS info (device loop4): enabling ssd optimizations [ 153.913729][ T144] hfsplus: b-tree write err: -5, ino 4 [ 153.953964][ T6906] loop0: detected capacity change from 0 to 128 [ 154.093895][ T6862] XFS (loop2): Ending clean mount [ 154.129825][ T6862] XFS (loop2): Quotacheck needed: Please wait. [ 154.155504][ T6925] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.587160][ T6862] XFS (loop2): Quotacheck: Done. [ 154.698066][ T6935] loop3: detected capacity change from 0 to 4096 [ 154.749321][ T4168] XFS (loop2): Unmounting Filesystem [ 154.919228][ T6935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.966460][ T4991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.121586][ T6935] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.1007: corrupted inode contents [ 155.204870][ T6935] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #15: comm syz.3.1007: mark_inode_dirty error [ 155.219259][ T6935] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.1007: corrupted inode contents [ 155.233040][ T6935] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.1007: mark_inode_dirty error [ 155.250720][ T6935] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.1007: corrupted inode contents [ 155.316497][ T4743] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.338237][ T6935] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.1007: mark_inode_dirty error [ 155.437540][ T6935] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.1007: corrupted inode contents [ 155.482402][ T6935] EXT4-fs error (device loop3): ext4_truncate:4272: inode #15: comm syz.3.1007: mark_inode_dirty error [ 155.504161][ T6935] EXT4-fs error (device loop3) in ext4_setattr:5578: Corrupt filesystem [ 155.607076][ T4991] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 155.616168][ T4991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.652711][ T4991] usb 2-1: Product: syz [ 155.654012][ T6973] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.663287][ T4991] usb 2-1: Manufacturer: syz [ 155.682340][ T4991] usb 2-1: SerialNumber: syz [ 155.686632][ T4743] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.701746][ T4991] usb 2-1: config 0 descriptor?? [ 155.706569][ T4743] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.761862][ T4743] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.786881][ T4743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.857743][ T6950] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 155.914474][ T6979] loop0: detected capacity change from 0 to 1024 [ 156.017987][ T4743] usb 2-1: USB disconnect, device number 8 [ 156.096540][ T4991] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.123114][ T1110] usb 5-1: USB disconnect, device number 8 [ 156.351943][ T6935] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #15: comm syz.3.1007: corrupted inode contents [ 156.376758][ T4991] usb 3-1: Using ep0 maxpacket: 8 [ 156.411609][ T4177] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 156.509637][ T4991] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 156.554606][ T4991] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 156.586352][ T4991] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.596447][ T4991] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.613062][ T4991] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.622425][ T4991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.892223][ T4991] usb 3-1: GET_CAPABILITIES returned 0 [ 156.905078][ T4991] usbtmc 3-1:16.0: can't read capabilities [ 156.915110][ T7011] loop1: detected capacity change from 0 to 256 [ 156.963621][ T7011] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 157.049897][ T1110] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 157.075152][ T7011] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 157.083487][ T7011] exFAT-fs (loop1): Filesystem has been set read-only [ 157.091237][ T7011] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 157.107505][ T6179] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.126346][ T6977] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 157.134875][ T4991] usb 3-1: USB disconnect, device number 8 [ 157.426425][ T1110] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 157.435637][ T1110] usb 4-1: config 54 has no interface number 0 [ 157.511493][ T7025] loop4: detected capacity change from 0 to 40427 [ 157.547032][ T6179] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.557568][ T6179] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.567330][ T6179] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.577089][ T6179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.587291][ T6179] usb 1-1: config 0 descriptor?? [ 157.606925][ T1110] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 157.617225][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.625775][ T1110] usb 4-1: Product: syz [ 157.630517][ T7025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.630742][ T1110] usb 4-1: Manufacturer: syz [ 157.670864][ T1110] usb 4-1: SerialNumber: syz [ 157.719740][ T7025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.801285][ T26] audit: type=1804 audit(1733516643.855:47): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1046" name="/newroot/201/file2/file0" dev="loop4" ino=10 res=1 errno=0 [ 157.835061][ T4178] attempt to access beyond end of device [ 157.835061][ T4178] loop4: rw=2049, want=45104, limit=40427 [ 157.877294][ T4735] usb 1-1: USB disconnect, device number 10 [ 157.979371][ T1110] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 157.997902][ T1110] usb 4-1: USB disconnect, device number 6 [ 158.006712][ T144] usb 4-1: Failed to submit usb control message: -71 [ 158.013821][ T144] usb 4-1: unable to send the bmi data to the device: -71 [ 158.022207][ T144] usb 4-1: unable to get target info from device [ 158.029681][ T144] usb 4-1: could not get target info (-71) [ 158.036059][ T144] usb 4-1: could not probe fw (-71) [ 158.152072][ T4743] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.280309][ T7041] Falling back ldisc for ttyS3. [ 158.320162][ T7048] program syz.4.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.450892][ T7054] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 158.516444][ T4743] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.546600][ T4743] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.592847][ T4743] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.609474][ T7066] loop1: detected capacity change from 0 to 256 [ 158.637381][ T4743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.654785][ T7066] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.702310][ T7036] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 158.726893][ T7066] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.814680][ T7075] netlink: 4156 bytes leftover after parsing attributes in process `syz.0.1060'. [ 159.039055][ T1110] usb 3-1: USB disconnect, device number 9 [ 159.402132][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'. [ 159.494118][ T7115] loop3: detected capacity change from 0 to 128 [ 159.569778][ T7123] loop4: detected capacity change from 0 to 256 [ 159.798035][ T7121] loop1: detected capacity change from 0 to 32768 [ 159.820236][ T4177] sysv_free_block: flc_count > flc_size [ 159.836086][ T4177] sysv_free_block: flc_count > flc_size [ 159.842085][ T4177] sysv_free_block: flc_count > flc_size [ 159.857343][ T4177] sysv_free_block: flc_count > flc_size [ 159.865191][ T4177] sysv_free_block: flc_count > flc_size [ 159.874909][ T7121] (syz.1.1078,7121,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.890484][ T7121] (syz.1.1078,7121,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 159.913549][ T4177] sysv_free_block: flc_count > flc_size [ 159.926522][ T4177] sysv_free_block: flc_count > flc_size [ 159.928146][ T7121] JBD2: Ignoring recovery information on journal [ 159.932099][ T4177] sysv_free_block: flc_count > flc_size [ 159.983327][ T7121] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 160.017907][ T4177] sysv_free_block: flc_count > flc_size [ 160.081368][ T4177] sysv_free_block: flc_count > flc_size [ 160.088731][ T7117] loop0: detected capacity change from 0 to 32768 [ 160.109264][ T7121] [ 160.111629][ T7121] ====================================================== [ 160.113637][ T4177] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 160.118819][ T7121] WARNING: possible circular locking dependency detected [ 160.118830][ T7121] 5.15.173-syzkaller #0 Not tainted [ 160.118840][ T7121] ------------------------------------------------------ [ 160.118847][ T7121] syz.1.1078/7121 is trying to acquire lock: [ 160.118858][ T7121] ffff888062224da0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 160.161483][ T7121] [ 160.161483][ T7121] but task is already holding lock: [ 160.168990][ T7121] ffff888062225108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 160.181843][ T7121] [ 160.181843][ T7121] which lock already depends on the new lock. [ 160.181843][ T7121] [ 160.192255][ T7121] [ 160.192255][ T7121] the existing dependency chain (in reverse order) is: [ 160.201275][ T7121] [ 160.201275][ T7121] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 160.211824][ T7121] lock_acquire+0x1db/0x4f0 [ 160.216855][ T7121] down_write+0x38/0x60 [ 160.221529][ T7121] ocfs2_lock_global_qf+0x202/0x2a0 [ 160.227245][ T7121] ocfs2_acquire_dquot+0x299/0xb40 [ 160.232874][ T7121] dqget+0x762/0xe90 [ 160.237281][ T7121] __dquot_initialize+0x2d9/0xea0 [ 160.242848][ T7121] ocfs2_get_init_inode+0x154/0x1c0 [ 160.248562][ T7121] ocfs2_mknod+0xdcb/0x2cd0 [ 160.253579][ T7121] ocfs2_create+0x194/0x430 [ 160.258596][ T7121] path_openat+0x130a/0x2f20 [ 160.263703][ T7121] do_filp_open+0x21c/0x460 [ 160.268805][ T7121] do_sys_openat2+0x13b/0x4f0 [ 160.274020][ T7121] __x64_sys_openat+0x243/0x290 [ 160.279390][ T7121] do_syscall_64+0x3b/0xb0 [ 160.284323][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.291013][ T7121] [ 160.291013][ T7121] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 160.298651][ T7121] lock_acquire+0x1db/0x4f0 [ 160.303671][ T7121] __mutex_lock_common+0x1da/0x25a0 [ 160.309385][ T7121] mutex_lock_nested+0x17/0x20 [ 160.314662][ T7121] dquot_commit+0x57/0x510 [ 160.319593][ T7121] ext4_write_dquot+0x1fd/0x360 [ 160.324962][ T7121] mark_all_dquot_dirty+0xf7/0x400 [ 160.330587][ T7121] __dquot_free_space+0x932/0xe40 [ 160.336156][ T7121] ext4_free_blocks+0x1f5c/0x2e90 [ 160.341699][ T7121] ext4_ext_remove_space+0x24da/0x4db0 [ 160.347684][ T7121] ext4_ext_truncate+0x191/0x250 [ 160.353137][ T7121] ext4_truncate+0x9fd/0x1130 [ 160.358440][ T7121] ext4_evict_inode+0xba1/0x1100 [ 160.363896][ T7121] evict+0x529/0x930 [ 160.368304][ T7121] ext4_orphan_cleanup+0x9d9/0x1240 [ 160.374106][ T7121] ext4_fill_super+0x98de/0xa110 [ 160.379558][ T7121] mount_bdev+0x2c9/0x3f0 [ 160.384407][ T7121] legacy_get_tree+0xeb/0x180 [ 160.389602][ T7121] vfs_get_tree+0x88/0x270 [ 160.394535][ T7121] do_new_mount+0x2ba/0xb40 [ 160.399576][ T7121] __se_sys_mount+0x2d5/0x3c0 [ 160.404774][ T7121] do_syscall_64+0x3b/0xb0 [ 160.409702][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.416112][ T7121] [ 160.416112][ T7121] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 160.423748][ T7121] lock_acquire+0x1db/0x4f0 [ 160.428772][ T7121] down_write+0x38/0x60 [ 160.433444][ T7121] ext4_truncate+0x974/0x1130 [ 160.438642][ T7121] ext4_setattr+0xf96/0x1990 [ 160.443748][ T7121] notify_change+0xc6d/0xf50 [ 160.448853][ T7121] do_truncate+0x21c/0x300 [ 160.453782][ T7121] do_sys_ftruncate+0x2eb/0x390 [ 160.459148][ T7121] do_syscall_64+0x3b/0xb0 [ 160.464079][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.470523][ T7121] [ 160.470523][ T7121] -> #3 (jbd2_handle){++++}-{0:0}: [ 160.477931][ T7121] lock_acquire+0x1db/0x4f0 [ 160.482954][ T7121] start_this_handle+0x12e1/0x1570 [ 160.488579][ T7121] jbd2__journal_start+0x2d1/0x5c0 [ 160.494210][ T7121] jbd2_journal_start+0x25/0x30 [ 160.499577][ T7121] ocfs2_start_trans+0x3c2/0x6f0 [ 160.505480][ T7121] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 160.511741][ T7121] ocfs2_dismount_volume+0x1db/0x8b0 [ 160.517552][ T7121] generic_shutdown_super+0x130/0x310 [ 160.523447][ T7121] kill_block_super+0x7a/0xe0 [ 160.528639][ T7121] deactivate_locked_super+0xa0/0x110 [ 160.534534][ T7121] cleanup_mnt+0x44e/0x500 [ 160.539475][ T7121] task_work_run+0x129/0x1a0 [ 160.544587][ T7121] exit_to_user_mode_loop+0x106/0x130 [ 160.550477][ T7121] exit_to_user_mode_prepare+0xb1/0x140 [ 160.556542][ T7121] syscall_exit_to_user_mode+0x5d/0x240 [ 160.562613][ T7121] do_syscall_64+0x47/0xb0 [ 160.567544][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.573959][ T7121] [ 160.573959][ T7121] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 160.582467][ T7121] lock_acquire+0x1db/0x4f0 [ 160.587747][ T7121] down_read+0x45/0x2e0 [ 160.592418][ T7121] ocfs2_start_trans+0x3b7/0x6f0 [ 160.597874][ T7121] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 160.604115][ T7121] ocfs2_dismount_volume+0x1db/0x8b0 [ 160.609943][ T7121] generic_shutdown_super+0x130/0x310 [ 160.615829][ T7121] kill_block_super+0x7a/0xe0 [ 160.621459][ T7121] deactivate_locked_super+0xa0/0x110 [ 160.627351][ T7121] cleanup_mnt+0x44e/0x500 [ 160.632283][ T7121] task_work_run+0x129/0x1a0 [ 160.637391][ T7121] exit_to_user_mode_loop+0x106/0x130 [ 160.643280][ T7121] exit_to_user_mode_prepare+0xb1/0x140 [ 160.649340][ T7121] syscall_exit_to_user_mode+0x5d/0x240 [ 160.655404][ T7121] do_syscall_64+0x47/0xb0 [ 160.660338][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.666753][ T7121] [ 160.666753][ T7121] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 160.674369][ T7121] lock_acquire+0x1db/0x4f0 [ 160.679387][ T7121] ocfs2_start_trans+0x2b2/0x6f0 [ 160.684845][ T7121] ocfs2_write_begin_nolock+0x2242/0x4d20 [ 160.691096][ T7121] ocfs2_write_begin+0x1fd/0x390 [ 160.696563][ T7121] generic_perform_write+0x2bf/0x5b0 [ 160.702378][ T7121] __generic_file_write_iter+0x243/0x4f0 [ 160.708646][ T7121] ocfs2_file_write_iter+0x17d5/0x1fa0 [ 160.714638][ T7121] vfs_write+0xacd/0xe50 [ 160.719432][ T7121] ksys_write+0x1a2/0x2c0 [ 160.724284][ T7121] do_syscall_64+0x3b/0xb0 [ 160.729260][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.735765][ T7121] [ 160.735765][ T7121] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 160.744623][ T7121] validate_chain+0x1649/0x5930 [ 160.749996][ T7121] __lock_acquire+0x1295/0x1ff0 [ 160.755368][ T7121] lock_acquire+0x1db/0x4f0 [ 160.760385][ T7121] down_write+0x38/0x60 [ 160.765055][ T7121] ocfs2_lock_global_qf+0x221/0x2a0 [ 160.770768][ T7121] ocfs2_acquire_dquot+0x299/0xb40 [ 160.776426][ T7121] dqget+0x762/0xe90 [ 160.780856][ T7121] __dquot_initialize+0x2d9/0xea0 [ 160.786444][ T7121] ocfs2_get_init_inode+0x154/0x1c0 [ 160.792176][ T7121] ocfs2_mknod+0xdcb/0x2cd0 [ 160.797350][ T7121] ocfs2_create+0x194/0x430 [ 160.802384][ T7121] path_openat+0x130a/0x2f20 [ 160.807492][ T7121] do_filp_open+0x21c/0x460 [ 160.812513][ T7121] do_sys_openat2+0x13b/0x4f0 [ 160.817708][ T7121] __x64_sys_openat+0x243/0x290 [ 160.823073][ T7121] do_syscall_64+0x3b/0xb0 [ 160.828003][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.834415][ T7121] [ 160.834415][ T7121] other info that might help us debug this: [ 160.834415][ T7121] [ 160.844630][ T7121] Chain exists of: [ 160.844630][ T7121] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 [ 160.844630][ T7121] [ 160.861752][ T7121] Possible unsafe locking scenario: [ 160.861752][ T7121] [ 160.869199][ T7121] CPU0 CPU1 [ 160.874550][ T7121] ---- ---- [ 160.879906][ T7121] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 160.887187][ T7121] lock(&dquot->dq_lock); [ 160.894112][ T7121] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 160.904015][ T7121] lock(&ocfs2_quota_ip_alloc_sem_key); [ 160.909639][ T7121] [ 160.909639][ T7121] *** DEADLOCK *** [ 160.909639][ T7121] [ 160.917893][ T7121] 5 locks held by syz.1.1078/7121: [ 160.923018][ T7121] #0: ffff888042b0c460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 160.932251][ T7121] #1: ffff888062226d88 (&type->i_mutex_dir_key#14){+.+.}-{3:3}, at: path_openat+0x824/0x2f20 [ 160.942517][ T7121] #2: ffff88805ece1808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 160.956185][ T7121] #3: ffff88805ee520a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 160.966212][ T7121] #4: ffff888062225108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 160.979181][ T7121] [ 160.979181][ T7121] stack backtrace: [ 160.985059][ T7121] CPU: 0 PID: 7121 Comm: syz.1.1078 Not tainted 5.15.173-syzkaller #0 [ 160.993202][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.003252][ T7121] Call Trace: [ 161.006526][ T7121] [ 161.009454][ T7121] dump_stack_lvl+0x1e3/0x2d0 [ 161.014135][ T7121] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 161.019772][ T7121] ? print_circular_bug+0x12b/0x1a0 [ 161.024967][ T7121] check_noncircular+0x2f8/0x3b0 [ 161.029899][ T7121] ? add_chain_block+0x850/0x850 [ 161.034830][ T7121] ? lockdep_lock+0x11f/0x2a0 [ 161.039508][ T7121] validate_chain+0x1649/0x5930 [ 161.044361][ T7121] ? stack_trace_save+0x113/0x1c0 [ 161.049384][ T7121] ? reacquire_held_locks+0x660/0x660 [ 161.054749][ T7121] ? stack_trace_snprint+0xe0/0xe0 [ 161.059855][ T7121] ? lockdep_unlock+0x166/0x300 [ 161.064706][ T7121] ? lockdep_unlock+0x166/0x300 [ 161.069603][ T7121] ? mark_lock+0x98/0x340 [ 161.073926][ T7121] __lock_acquire+0x1295/0x1ff0 [ 161.078779][ T7121] lock_acquire+0x1db/0x4f0 [ 161.083300][ T7121] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 161.088669][ T7121] ? read_lock_is_recursive+0x10/0x10 [ 161.094036][ T7121] ? __might_sleep+0xc0/0xc0 [ 161.098618][ T7121] ? rwsem_write_trylock+0x166/0x210 [ 161.103902][ T7121] ? clear_nonspinnable+0x60/0x60 [ 161.108922][ T7121] ? do_raw_spin_unlock+0x137/0x8b0 [ 161.114120][ T7121] down_write+0x38/0x60 [ 161.118270][ T7121] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 161.123644][ T7121] ocfs2_lock_global_qf+0x221/0x2a0 [ 161.128839][ T7121] ? lock_buffer+0x80/0x80 [ 161.133248][ T7121] ? __mutex_lock_common+0x444/0x25a0 [ 161.138705][ T7121] ocfs2_acquire_dquot+0x299/0xb40 [ 161.143816][ T7121] ? dqget+0x6dc/0xe90 [ 161.147879][ T7121] ? mutex_unlock+0x10/0x10 [ 161.152379][ T7121] ? ocfs2_destroy_dquot+0x40/0x40 [ 161.157490][ T7121] dqget+0x762/0xe90 [ 161.161381][ T7121] __dquot_initialize+0x2d9/0xea0 [ 161.166402][ T7121] ? new_inode+0x1ba/0x1d0 [ 161.170823][ T7121] ? dquot_initialize+0x20/0x20 [ 161.175666][ T7121] ? do_raw_spin_unlock+0x137/0x8b0 [ 161.180873][ T7121] ? inode_init_owner+0x292/0x430 [ 161.185904][ T7121] ocfs2_get_init_inode+0x154/0x1c0 [ 161.191094][ T7121] ? ocfs2_create_inode_in_orphan+0x15a0/0x15a0 [ 161.197332][ T7121] ocfs2_mknod+0xdcb/0x2cd0 [ 161.201835][ T7121] ? ocfs2_mkdir+0x430/0x430 [ 161.206416][ T7121] ? mark_lock+0x98/0x340 [ 161.210833][ T7121] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 161.216807][ T7121] ? print_irqtrace_events+0x210/0x210 [ 161.222276][ T7121] ? read_lock_is_recursive+0x10/0x10 [ 161.227645][ T7121] ? ocfs2_inode_unlock+0xa3/0x150 [ 161.232751][ T7121] ? __lock_acquire+0x1ff0/0x1ff0 [ 161.237768][ T7121] ? do_raw_spin_lock+0x14a/0x370 [ 161.242786][ T7121] ? do_raw_spin_unlock+0x137/0x8b0 [ 161.247982][ T7121] ? do_raw_spin_unlock+0x137/0x8b0 [ 161.253178][ T7121] ? __d_add+0x4d7/0x7f0 [ 161.257417][ T7121] ? _raw_spin_unlock+0x24/0x40 [ 161.262265][ T7121] ? rcu_is_watching+0x11/0xa0 [ 161.267040][ T7121] ? ocfs2_lookup+0x4ed/0x9f0 [ 161.271727][ T7121] ocfs2_create+0x194/0x430 [ 161.276228][ T7121] ? ocfs2_lookup+0x9f0/0x9f0 [ 161.280904][ T7121] ? inode_permission+0xf7/0x450 [ 161.285838][ T7121] ? ocfs2_getattr+0x380/0x380 [ 161.290596][ T7121] ? bpf_lsm_inode_create+0x5/0x10 [ 161.295704][ T7121] ? security_inode_create+0xb4/0x100 [ 161.301069][ T7121] ? ocfs2_lookup+0x9f0/0x9f0 [ 161.305743][ T7121] path_openat+0x130a/0x2f20 [ 161.310340][ T7121] ? do_filp_open+0x460/0x460 [ 161.315016][ T7121] do_filp_open+0x21c/0x460 [ 161.319512][ T7121] ? vfs_tmpfile+0x2e0/0x2e0 [ 161.324116][ T7121] ? _raw_spin_unlock+0x24/0x40 [ 161.328960][ T7121] ? alloc_fd+0x598/0x630 [ 161.333295][ T7121] do_sys_openat2+0x13b/0x4f0 [ 161.337966][ T7121] ? do_sys_open+0x220/0x220 [ 161.342556][ T7121] __x64_sys_openat+0x243/0x290 [ 161.347399][ T7121] ? __ia32_sys_open+0x270/0x270 [ 161.352331][ T7121] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.358308][ T7121] ? lockdep_hardirqs_on+0x94/0x130 [ 161.363506][ T7121] ? syscall_enter_from_user_mode+0x2e/0x240 [ 161.369489][ T7121] do_syscall_64+0x3b/0xb0 [ 161.373953][ T7121] ? clear_bhb_loop+0x15/0x70 [ 161.378630][ T7121] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.384538][ T7121] RIP: 0033:0x7f736c7e6ed9 [ 161.389065][ T7121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.408673][ T7121] RSP: 002b:00007f736a65d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.417086][ T7121] RAX: ffffffffffffffda RBX: 00007f736c9acfa0 RCX: 00007f736c7e6ed9 [ 161.425052][ T7121] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 161.433019][ T7121] RBP: 00007f736c85acc8 R08: 0000000000000000 R09: 0000000000000000 [ 161.440985][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.448949][ T7121] R13: 0000000000000000 R14: 00007f736c9acfa0 R15: 00007ffd400b8c18 [ 161.456925][ T7121] [ 161.459988][ C0] sched: RT throttling activated [ 161.475348][ T7117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1076 (7117) [ 161.488209][ T7121] (syz.1.1078,7121,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 161.501586][ T7121] (syz.1.1078,7121,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 161.514139][ T7121] (syz.1.1078,7121,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 161.522616][ T7121] (syz.1.1078,7121,0):ocfs2_quota_read:201 ERROR: status = -5 [ 161.530123][ T7121] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 161.539613][ T7121] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 161.549171][ T7121] (syz.1.1078,7121,0):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 161.556962][ T7121] (syz.1.1078,7121,0):ocfs2_mknod:312 ERROR: status = -5 [ 161.564315][ T7121] (syz.1.1078,7121,0):ocfs2_mknod:500 ERROR: status = -5 [ 161.571668][ T7121] (syz.1.1078,7121,0):ocfs2_create:674 ERROR: status = -5 [ 161.621169][ T7117] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 161.633920][ T7117] BTRFS info (device loop0): using free space tree [ 161.641051][ T7117] BTRFS info (device loop0): has skinny extents [ 161.651426][ T4166] ocfs2: Unmounting device (7,1) on (node local) [ 161.673437][ T4166] VFS: Busy inodes after unmount of loop1. Self-destruct in 5 seconds. Have a nice day... [ 161.865495][ T7117] BTRFS info (device loop0): enabling ssd optimizations [ 161.916001][ T7117] BTRFS warning (device loop0): this kernel does not support the compat:0 feature bit