last executing test programs: 3.366061342s ago: executing program 0 (id=9585): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8917, 0x0) 3.197568552s ago: executing program 0 (id=9587): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x28d02, 0x0) writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000005ac0)='-', 0x1}], 0x2) 3.065824607s ago: executing program 1 (id=9588): r0 = io_uring_setup(0x3157, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) 2.943569471s ago: executing program 0 (id=9590): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)) 2.541910427s ago: executing program 1 (id=9594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}]}}}]}, 0x3c}}, 0x40000) 2.371222987s ago: executing program 0 (id=9597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001200), &(0x7f0000000500)=0x4) 1.99831236s ago: executing program 1 (id=9602): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.962638454s ago: executing program 0 (id=9603): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) 1.810496312s ago: executing program 4 (id=9606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, 0x38, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x7ff}]}, 0x1c}}, 0x0) 1.711665143s ago: executing program 0 (id=9607): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1.647906241s ago: executing program 4 (id=9608): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x14, &(0x7f0000000380)={[{@jqfmt_vfsv0}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@init_itable}, {@lazytime}]}, 0xfe, 0x25f, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 1.510143257s ago: executing program 1 (id=9611): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x935b, 0x6, 0x34524742, 0x7, 0x7, 0xfff, 0xa, 0xc, 0x0, 0x1, 0x0, 0x6}}) 1.178822605s ago: executing program 3 (id=9614): r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000940)={0x0, 0x0, 0x103}) 1.097973224s ago: executing program 4 (id=9615): r0 = syz_open_dev$video(&(0x7f0000000080), 0x40431, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x9, 0x3}) 1.04551705s ago: executing program 2 (id=9616): r0 = socket(0x23, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x113, 0x4, 0x0, 0x20000024) 985.908457ms ago: executing program 3 (id=9617): r0 = syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0x40085618, &(0x7f0000000000)) 836.940434ms ago: executing program 2 (id=9618): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) 827.809645ms ago: executing program 4 (id=9619): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000100)=@ethtool_cmd={0x3}}) 778.49965ms ago: executing program 1 (id=9620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x78}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 737.716975ms ago: executing program 4 (id=9621): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x50323234}}) 708.734769ms ago: executing program 3 (id=9622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) 671.059163ms ago: executing program 2 (id=9623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ipt={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 495.621943ms ago: executing program 3 (id=9624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 437.44514ms ago: executing program 2 (id=9625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 308.642885ms ago: executing program 3 (id=9626): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, r0}}, 0x18) 297.948296ms ago: executing program 2 (id=9627): syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@map_acorn}, {@nocompress}, {@map_off}, {@mode={'mode', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@map_off}, {@map_normal}, {@mode}, {@utf8}, {@check_relaxed}, {@cruft}]}, 0x3, 0x3ec, &(0x7f0000000c40)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) 195.478648ms ago: executing program 1 (id=9628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x39, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x9}]}]}, 0x24}}, 0x0) 146.276174ms ago: executing program 4 (id=9629): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x80284504, 0x0) 100.915909ms ago: executing program 3 (id=9630): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b400000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010065727370616e"], 0xb4}}, 0x0) 0s ago: executing program 2 (id=9631): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$eJzs3T9rZFUYB+D3JpOZWQUnhZUIHtDCatlsazOL7IKYymUKtdDgZmHJBCWBgH/wupWtjYWFn0AQ/CA2fgPBVrBzhYUj9869eyebMJu7OBHd5ymSkzPnN+c9d4bkpsibD18+PLiT4u79L36N8biIjWlM40ER27ERra/ilOk3AQD8lz3IOf7IC31yRUSM11cWALBGF/v5P+iGP11KWQDAGt1+9723b+zu3nwnpXHcOvz6ZFb9Zl99vtIuuRfz2I9rMYmHEfWNwlbUdwvV8FbOuRykyna8dliezE5mEYcf/NyEb/weUed3YhLb9dSju406/9buzZ06nj55ocuXVR3PVfm7cW9a5a/HJF58FD6Vv55SGkVKS/uXMRvG668u8vX+V2MSv3wUH8c87tRFdPkvd1J6M3/75+fvV+VV+aI8mY3qdZ28eakvDAAAAAAAAAAAAAAAAAAAAAAA/2tXF7130ijq/j3VVNN/Z/Nh9cVWpNZyf5+y+hhNH+Dacn+gnHOZ4/u2v861lFJuFnb5Qbw0WG4sCAAAAAAAAAAAAAAAAAAAAM+u408/O9ibz/eP/pFB2w1gEBF/3Y542ueZLs28EqsXj5o99+bzjWZ4es1geSY22zVFxMoyqkM87dUYRK+zXzlTczP44ce+u4+fvGar2qvoV2HPQfvuOtgrzr+Go2hnxk0Z3w0jujXDuOBew8dn8mTxPLnXAYfnPjTpffbh8/WgXLEmilWFvfHb4so1M2depmF9Vc+NbzWDpfhj740LvZ9jvIif/V5R6NYBAAAAAAAAAAAAAAAAAABr1f317zkP3l8Z3cijtZUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJeq+///PQZlE94/Oh48YfEwjo7/5SMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwDPg7AAD//+RmV1Y=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): an invalid descriptor of length 0, skipping remainder of the config [ 612.266743][ T4003] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 612.293484][ T4003] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 612.323962][ T4003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.370464][ T4003] usb 2-1: config 0 descriptor?? [ 612.431138][T22506] loop0: detected capacity change from 0 to 128 [ 612.441454][T22505] Unknown options in mask 5 [ 612.458513][T22507] tmpfs: Bad value for 'nr_blocks' [ 612.551517][T22506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 612.591859][T22506] ext4 filesystem being mounted at /1654/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.835445][ T3998] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 612.883812][ T4003] Bluetooth: Can't get state to change to load configuration err [ 612.894445][ T4003] Bluetooth: Loading sysconfig file failed [ 612.900333][ T4003] ath3k: probe of 2-1:0.0 failed with error -16 [ 612.909306][ T4003] usb 2-1: USB disconnect, device number 40 [ 612.933552][ T5763] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 612.963543][ T4000] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 613.135765][ T38] IPVS: stopping backup sync thread 10021 ... [ 613.215242][T22510] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 613.253917][ T3998] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 613.270517][ T3998] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.281848][ T3998] usb 5-1: config 0 has no interface number 0 [ 613.296171][ T3998] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 613.306674][ T3998] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.322714][ T5763] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 613.342341][ T4000] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 613.351532][ T4000] usb 1-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 613.370537][ T5763] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 613.380263][ T5763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.390877][ T4000] usb 1-1: config 0 has no interface number 0 [ 613.405897][ T4000] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7 [ 613.423435][ T5763] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 613.436095][ T5763] usb 4-1: config 0 has no interface number 0 [ 613.442239][ T5763] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 613.462897][ T4000] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024 [ 613.483085][ T4000] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 613.503375][ T5763] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.520854][ T4000] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 613.531672][ T5763] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 613.553112][ T4000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.562639][ T5763] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 613.574434][ T3998] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 613.592084][ T4000] usb 1-1: config 0 descriptor?? [ 613.597603][ T3998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.606152][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.616068][ T3998] usb 5-1: Product: syz [ 613.620284][ T3998] usb 5-1: Manufacturer: syz [ 613.643403][ T3998] usb 5-1: SerialNumber: syz [ 613.658396][ T5763] usb 4-1: config 0 descriptor?? [ 613.696208][ T3998] usb 5-1: config 0 descriptor?? [ 613.706853][ T5763] gspca_main: spca561-2.14.0 probing abcd:cdee [ 613.727469][ T4000] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 613.787686][T22541] loop2: detected capacity change from 0 to 256 [ 613.931560][ T3688] usb 1-1: USB disconnect, device number 36 [ 613.950242][ T3697] usb 1-1: Failed to submit usb control message: -71 [ 613.962017][ T3697] usb 1-1: unable to send the bmi data to the device: -71 [ 613.997493][ T3697] usb 1-1: unable to get target info from device [ 614.003880][ T5763] spca561: probe of 4-1:0.156 failed with error -22 [ 614.013495][ T5763] usb 4-1: MIDIStreaming interface descriptor not found [ 614.020907][ T3697] usb 1-1: could not get target info (-71) [ 614.034328][ T3697] usb 1-1: could not probe fw (-71) [ 614.219828][ T4003] usb 5-1: USB disconnect, device number 35 [ 614.247609][ T5763] usb 4-1: USB disconnect, device number 38 [ 614.294227][ T38] device hsr_slave_0 left promiscuous mode [ 614.305690][ T38] device hsr_slave_1 left promiscuous mode [ 614.325975][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.351222][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.360396][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.368194][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.378904][ T38] device bridge_slave_1 left promiscuous mode [ 614.385561][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.413083][ T38] device bridge_slave_0 left promiscuous mode [ 614.421894][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.460138][T22548] netlink: 'syz.2.8298': attribute type 11 has an invalid length. [ 614.492239][ T38] device veth1_macvtap left promiscuous mode [ 614.512009][ T38] device veth1_vlan left promiscuous mode [ 614.543908][T22534] loop1: detected capacity change from 0 to 32768 [ 614.576015][ T38] device veth0_vlan left promiscuous mode [ 614.596629][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 614.604465][T22534] XFS (loop1): Mounting V5 Filesystem [ 614.816006][T22565] loop3: detected capacity change from 0 to 512 [ 614.918389][T22565] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 615.007164][T22565] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 615.033602][T22565] System zones: 0-1, 15-15, 18-18, 34-34 [ 615.040514][T22565] EXT4-fs (loop3): orphan cleanup on readonly fs [ 615.055432][T22565] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 615.071866][T22534] XFS (loop1): Ending clean mount [ 615.080228][ T38] bond1 (unregistering): Released all slaves [ 615.104356][T22565] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 615.119369][T22565] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 615.128634][T22565] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.8302: bad orphan inode 16 [ 615.168875][T22565] ext4_test_bit(bit=15, block=18) = 1 [ 615.181447][T22565] is_bad_inode(inode)=0 [ 615.190496][T19151] XFS (loop1): Unmounting Filesystem [ 615.197770][T22565] NEXT_ORPHAN(inode)=0 [ 615.210798][T22565] max_ino=32 [ 615.219770][T22565] i_nlink=2 [ 615.229223][T22565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 615.290294][T22565] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 615.337146][T20792] EXT4-fs (loop3): unmounting filesystem. [ 615.759112][T22585] loop0: detected capacity change from 0 to 4096 [ 615.761952][T22589] binfmt_misc: register: failed to install interpreter file ./file0 [ 615.812089][T22585] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 616.212309][ T38] team0 (unregistering): Port device vlan0 removed [ 616.542178][ T38] team0 (unregistering): Port device team_slave_1 removed [ 616.648295][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.719252][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.335704][ T38] bond0 (unregistering): Released all slaves [ 617.431128][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8306'. [ 617.443500][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8306'. [ 617.452574][T22575] netlink: 'syz.4.8306': attribute type 4 has an invalid length. [ 617.753796][T22612] QAT: Stopping all acceleration devices. [ 617.864785][T22618] loop3: detected capacity change from 0 to 16 [ 617.970445][T22618] erofs: (device loop3): mounted with root inode @ nid 36. [ 618.193209][T22627] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54739 - 0 [ 618.260412][T22632] netlink: 26 bytes leftover after parsing attributes in process `syz.4.8334'. [ 618.263590][T22627] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54739 - 0 [ 618.299968][T22627] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54739 - 0 [ 618.328954][T22627] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54739 - 0 [ 618.782730][T22652] ceph: Path missing in source [ 619.587223][T22692] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 620.024010][T22710] fuse: Invalid rootmode [ 620.739456][ T3690] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 620.941090][T22707] loop1: detected capacity change from 0 to 32768 [ 620.980935][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8393'. [ 621.024827][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8393'. [ 621.045108][T22753] netlink: 'syz.0.8394': attribute type 4 has an invalid length. [ 621.053547][T22751] netlink: 'syz.4.8393': attribute type 6 has an invalid length. [ 621.061576][T22753] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.8394'. [ 621.143513][ T3690] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 621.151821][ T3690] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 621.193476][ T3690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.233366][ T3690] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 621.242284][ T3690] usb 3-1: config 0 has no interface number 0 [ 621.301767][ T3690] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 621.323471][ T3690] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 621.356102][ T3690] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 621.400049][ T3690] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 621.423439][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.462552][ T3690] usb 3-1: config 0 descriptor?? [ 621.515760][ T3690] gspca_main: spca561-2.14.0 probing abcd:cdee [ 621.557245][T22767] SET target dimension over the limit! [ 621.801201][T22775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8405'. [ 621.810772][ T3690] spca561: probe of 3-1:0.156 failed with error -22 [ 621.833145][ T3690] usb 3-1: MIDIStreaming interface descriptor not found [ 621.860772][T22775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8405'. [ 621.919242][ T3690] usb 3-1: USB disconnect, device number 32 [ 622.213188][T22759] loop4: detected capacity change from 0 to 32768 [ 622.240259][T22759] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 622.301852][ T3758] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 622.918205][T22815] loop4: detected capacity change from 0 to 64 [ 623.189054][T22827] loop3: detected capacity change from 0 to 1024 [ 623.235017][T22827] hfsplus: unable to parse mount options [ 623.351667][T22827] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 623.442580][T22835] loop0: detected capacity change from 0 to 2048 [ 623.544996][T22841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 623.603516][T22843] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 623.643684][T22835] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 623.691157][T22835] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 623.736519][T22835] Remounting filesystem read-only [ 623.742095][T22846] loop4: detected capacity change from 0 to 256 [ 623.763654][T22835] NILFS (loop0): error -5 truncating bmap (ino=16) [ 623.905152][ T3646] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 623.939227][T22805] loop1: detected capacity change from 0 to 32768 [ 623.949422][ T3646] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 623.966189][ T3646] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 623.982142][T22805] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.8420 (22805) [ 623.996815][ T3646] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 624.010804][ T3646] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 624.021030][T22805] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 624.036806][T22856] tmpfs: Bad value for 'size' [ 624.041857][ T3646] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 624.050711][T22855] loop4: detected capacity change from 0 to 1024 [ 624.061219][T22805] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 624.082216][ T3646] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 624.083522][T22855] hfsplus: Filesystem is marked locked, mounting read-only. [ 624.103863][ T3646] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 624.122013][T22805] BTRFS info (device loop1): force zlib compression, level 3 [ 624.143496][ T3646] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 624.152455][ T3646] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 624.175570][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.181920][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.193910][T22855] hfsplus: invalid catalog entry type in lookup [ 624.199195][T22805] BTRFS info (device loop1): force clearing of disk cache [ 624.213702][ T3646] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 624.232526][T22805] BTRFS info (device loop1): setting nodatasum [ 624.249430][T22805] BTRFS info (device loop1): allowing degraded mounts [ 624.294252][T22805] BTRFS info (device loop1): enabling disk space caching [ 624.301357][T22805] BTRFS info (device loop1): disk space caching is enabled [ 624.531193][T22877] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8448'. [ 624.589333][T22873] loop3: detected capacity change from 0 to 1024 [ 624.647925][T22890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8452'. [ 624.657851][T22890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8452'. [ 624.669958][T22805] BTRFS info (device loop1): rebuilding free space tree [ 624.683256][T22873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 624.801676][T22805] BTRFS info (device loop1): disabling free space tree [ 624.815175][T22805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 624.848242][T22805] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 624.997651][T22805] BTRFS info (device loop1): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 625.173903][T19151] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 625.397077][T22917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8463'. [ 625.447180][T22917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8463'. [ 625.741621][T22928] loop2: detected capacity change from 0 to 256 [ 625.799057][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8461'. [ 625.982182][T22939] loop1: detected capacity change from 0 to 64 [ 626.188742][T22945] IPv6: Can't replace route, no match found [ 626.313184][T22951] netlink: 'syz.1.8481': attribute type 2 has an invalid length. [ 626.359314][T22951] netlink: 'syz.1.8481': attribute type 1 has an invalid length. [ 626.390233][T22951] netlink: 'syz.1.8481': attribute type 1 has an invalid length. [ 626.439099][T22957] x_tables: unsorted entry at hook 3 [ 626.448147][T22959] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 626.776952][T22972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8491'. [ 626.826338][T22973] loop2: detected capacity change from 0 to 1024 [ 626.890019][T22975] loop0: detected capacity change from 0 to 256 [ 626.942194][T22975] FAT-fs (loop0): Directory bread(block 64) failed [ 626.961435][T22977] loop4: detected capacity change from 0 to 64 [ 626.981738][T22975] FAT-fs (loop0): Directory bread(block 65) failed [ 626.998961][T22975] FAT-fs (loop0): Directory bread(block 66) failed [ 627.023668][T22975] FAT-fs (loop0): Directory bread(block 67) failed [ 627.050690][T22975] FAT-fs (loop0): Directory bread(block 68) failed [ 627.092267][T22975] FAT-fs (loop0): Directory bread(block 69) failed [ 627.143500][T22975] FAT-fs (loop0): Directory bread(block 70) failed [ 627.150083][T22975] FAT-fs (loop0): Directory bread(block 71) failed [ 627.200083][T22975] FAT-fs (loop0): Directory bread(block 72) failed [ 627.225963][T22975] FAT-fs (loop0): Directory bread(block 73) failed [ 627.409486][ T26] audit: type=1800 audit(2000000507.650:2126): pid=22975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8493" name="file1" dev="loop0" ino=1048722 res=0 errno=0 [ 627.539181][T22956] loop3: detected capacity change from 0 to 32768 [ 627.579483][T22991] netlink: 'syz.1.8501': attribute type 10 has an invalid length. [ 627.654462][T22956] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 627.654462][T22956] [ 627.702127][T22956] ialloc: diAlloc returned -5! [ 627.720475][T22997] netlink: 'syz.0.8503': attribute type 1 has an invalid length. [ 628.060475][T23007] loop1: detected capacity change from 0 to 2048 [ 628.113721][ T3644] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 628.152966][T23012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 628.186024][T23012] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 628.210686][T23012] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 628.242801][T23012] Remounting filesystem read-only [ 628.366393][T19151] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 628.376052][ T3644] usb 5-1: Using ep0 maxpacket: 8 [ 628.402485][T19151] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 628.421513][T19151] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 628.445561][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.462279][T23026] loop0: detected capacity change from 0 to 64 [ 628.470060][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.481551][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.503894][ T3644] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 628.512030][ T3644] usb 5-1: config 0 has no interface number 0 [ 628.525735][T19151] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 628.533098][T23026] Trying to free block not in datazone [ 628.533989][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.553694][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.562798][T19151] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 628.566809][T23026] Trying to free block not in datazone [ 628.578349][T19151] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 628.588871][T19151] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 628.598198][T19151] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 628.601233][T23026] Trying to free block not in datazone [ 628.612169][T23026] Trying to free block not in datazone [ 628.615746][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.627366][T23026] Trying to free block not in datazone [ 628.632631][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.642594][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.652485][T19151] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 628.653209][T23026] minix_free_block (loop0:6): bit already cleared [ 628.660443][T19151] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 628.674931][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.686093][T23026] Trying to free block not in datazone [ 628.687283][ T3644] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 628.712740][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.732013][ T3644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.748026][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 628.757128][ T3644] usb 5-1: Product: syz [ 628.761337][ T3644] usb 5-1: Manufacturer: syz [ 628.766370][T19151] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 628.773165][ T3644] usb 5-1: SerialNumber: syz [ 628.779782][ T3644] usb 5-1: config 0 descriptor?? [ 628.786225][T19151] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 628.797692][T19151] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 628.805650][T19151] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 628.825021][ T4894] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 628.831995][T19151] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 629.072846][ T3714] usb 5-1: USB disconnect, device number 36 [ 629.088060][ T4894] usb 3-1: Using ep0 maxpacket: 16 [ 629.323944][T23030] loop3: detected capacity change from 0 to 32768 [ 629.346879][T23030] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.370519][T23030] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 629.379509][T23030] BTRFS info (device loop3): using free space tree [ 629.393761][ T4894] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 629.410314][ T4894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.439597][T23044] infiniband syz2: set active [ 629.445824][T23044] infiniband syz2: added veth0_vlan [ 629.454037][ T4894] usb 3-1: Product: syz [ 629.465069][ T4894] usb 3-1: Manufacturer: syz [ 629.477792][ T4894] usb 3-1: SerialNumber: syz [ 629.511798][T23044] RDS/IB: syz2: added [ 629.517195][T23044] smc: adding ib device syz2 with port count 1 [ 629.522868][ T4894] usb 3-1: config 0 descriptor?? [ 629.529629][T23044] smc: ib device syz2 port 1 has pnetid [ 629.587301][T23030] BTRFS info (device loop3): enabling ssd optimizations [ 629.595918][ T4894] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 629.736407][T20792] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.813764][ T4894] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 629.829655][ T4894] visor: probe of 3-1:0.0 failed with error -5 [ 629.937229][T23074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8529'. [ 629.977572][T23074] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8529'. [ 630.368017][ T5211] usb 3-1: USB disconnect, device number 33 [ 630.816896][T23092] qrtr: Invalid version 27 [ 630.839274][ T4002] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 631.123718][ T4002] usb 5-1: Using ep0 maxpacket: 16 [ 631.283814][ T4002] usb 5-1: config index 0 descriptor too short (expected 25964, got 18) [ 631.292250][ T4002] usb 5-1: config 115 has too many interfaces: 114, using maximum allowed: 32 [ 631.331614][ T4002] usb 5-1: config 115 descriptor has 1 excess byte, ignoring [ 631.370127][ T4002] usb 5-1: config 115 has 0 interfaces, different from the descriptor's value: 114 [ 631.380072][ T3656] Bluetooth: hci1: command 0x0406 tx timeout [ 631.573822][ T4002] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 631.593519][ T4002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.601577][ T4002] usb 5-1: Product: syz [ 631.650064][ T4002] usb 5-1: Manufacturer: syz [ 631.674200][ T4002] usb 5-1: SerialNumber: syz [ 631.730599][T23121] loop1: detected capacity change from 0 to 1764 [ 631.951360][ T4002] r8152-cfgselector 5-1: Unknown version 0x0000 [ 631.982533][ T4002] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 632.306966][T23143] loop1: detected capacity change from 0 to 1764 [ 632.352699][T23143] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 632.754567][T23152] loop2: detected capacity change from 0 to 4096 [ 632.779129][T23152] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 632.885208][T23152] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 632.933079][T23171] dlm: no locking on control device [ 632.933123][T23152] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 632.969268][T23174] rdma_rxe: rxe_register_device failed with error -23 [ 632.999438][T23152] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 633.003984][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8578'. [ 633.019454][T23174] rdma_rxe: failed to add veth0_vlan [ 633.048943][T23152] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 633.150602][T23152] ntfs: volume version 3.1. [ 633.185541][T23152] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 633.230391][T23152] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 633.341870][T23152] ntfs: (device loop2): ntfs_nlstoucs(): Name using character set cp932 contains characters that cannot be converted to Unicode. [ 633.423553][T23152] ntfs: (device loop2): ntfs_lookup(): Failed to convert name to Unicode. [ 633.424608][T23186] loop0: detected capacity change from 0 to 2048 [ 633.469902][T23186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.553674][ T3644] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 633.813471][ T3644] usb 5-1: Using ep0 maxpacket: 8 [ 633.855128][T23206] program syz.0.8593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.966016][T23210] loop2: detected capacity change from 0 to 512 [ 633.995069][ T3644] usb 5-1: unable to get BOS descriptor or descriptor too short [ 634.013955][T23210] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 634.049132][T23210] EXT4-fs (loop2): invalid journal inode [ 634.090803][T23210] EXT4-fs (loop2): can't get journal size [ 634.109259][ T3644] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 634.137794][T23210] EXT4-fs (loop2): 1 truncate cleaned up [ 634.163406][ T3644] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.223587][ T3644] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 634.248210][T23210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 634.277411][ T3644] usb 5-1: config 1 has no interface number 1 [ 634.322369][ T3644] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 634.387934][ T3644] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 634.518110][T22064] EXT4-fs (loop2): unmounting filesystem. [ 634.596530][ T3644] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.608971][ T3644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.627304][ T3644] usb 5-1: Product: syz [ 634.631650][ T3644] usb 5-1: Manufacturer: syz [ 634.637539][ T3644] usb 5-1: SerialNumber: syz [ 635.000933][ T3644] usb 5-1: USB disconnect, device number 38 [ 635.067271][ T3758] udevd[3758]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.383742][T23266] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 635.986184][T23254] loop1: detected capacity change from 0 to 32768 [ 636.047512][T23254] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.8615 (23254) [ 636.115361][T23244] loop2: detected capacity change from 0 to 32768 [ 636.140926][T23254] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 636.171962][T23244] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 636.181873][T23254] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 636.213547][T23244] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 636.222103][T23254] BTRFS info (device loop1): doing ref verification [ 636.257030][T23254] BTRFS info (device loop1): max_inline at 0 [ 636.284593][T23244] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 636.293408][T23254] BTRFS info (device loop1): using free space tree [ 636.324755][ T3690] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 636.332010][ T3690] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 636.457078][ T3690] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 636.466125][T23303] tmpfs: Bad value for 'mpol' [ 636.493998][ T3690] gfs2: fsid=syz:syz.0: jid=0: Done [ 636.533441][T23244] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 636.569885][T23254] BTRFS info (device loop1): enabling ssd optimizations [ 636.677532][T19151] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 637.151318][T23282] loop3: detected capacity change from 0 to 32768 [ 637.219014][T23282] XFS (loop3): Mounting V5 Filesystem [ 637.507678][T23282] XFS (loop3): Ending clean mount [ 637.561687][T23282] XFS (loop3): Quotacheck needed: Please wait. [ 637.704503][T23282] XFS (loop3): Quotacheck: Done. [ 637.814889][T20792] XFS (loop3): Unmounting Filesystem [ 637.884945][T23358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.997499][T23361] loop4: detected capacity change from 0 to 8192 [ 638.005977][T23361] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 638.031952][T23361] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 638.041794][T23361] REISERFS (device loop4): using ordered data mode [ 638.049130][T23361] reiserfs: using flush barriers [ 638.058829][T23361] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 638.076004][T23361] REISERFS (device loop4): checking transaction log (loop4) [ 638.220587][T23361] REISERFS (device loop4): Using tea hash to sort names [ 638.251806][T23361] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 639.063900][T23402] binder: 23400:23402 ioctl c0046209 100000000000000 returned -22 [ 639.223899][ T5320] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 639.603930][ T5320] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 639.622030][ T5320] usb 2-1: config 0 has no interface number 0 [ 639.659531][ T5320] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 639.694001][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.728600][ T5320] usb 2-1: config 0 descriptor?? [ 640.000657][ T5320] usb 2-1: USB disconnect, device number 41 [ 640.047125][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.078293][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.113679][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.141413][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.173045][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.188595][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.199712][T23438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.211310][T23438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.379928][T23414] loop3: detected capacity change from 0 to 32768 [ 640.518717][T23447] loop0: detected capacity change from 0 to 4096 [ 640.640250][T23447] ntfs: volume version 3.1. [ 640.997190][T23466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8707'. [ 641.041827][T23466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8707'. [ 641.202113][T23470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 641.271018][T23475] xt_TCPMSS: Only works on TCP SYN packets [ 641.483548][T23481] ipt_CLUSTERIP: Please specify destination IP [ 641.756217][T23495] loop3: detected capacity change from 0 to 128 [ 641.947599][T23468] loop4: detected capacity change from 0 to 32768 [ 641.976441][T23468] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[(" [ 642.003591][T23468] gfs2: fsid=[(: Now mounting FS (format 0)... [ 642.027565][T23468] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms [ 642.070287][ T3690] gfs2: fsid=[(.0: jid=0, already locked for use [ 642.083032][ T3690] gfs2: fsid=[(.0: jid=0: Looking at journal... [ 642.222832][ T3690] gfs2: fsid=[(.0: jid=0: Journal head lookup took 139ms [ 642.233137][T23511] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8729'. [ 642.252705][ T3690] gfs2: fsid=[(.0: jid=0: Done [ 642.260675][T23468] gfs2: fsid=[(.0: first mount done, others may mount [ 642.353413][ T5211] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 642.472263][T23518] netlink: 'syz.1.8732': attribute type 10 has an invalid length. [ 642.700263][T23523] loop0: detected capacity change from 0 to 512 [ 642.734146][ T5211] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 642.747154][T23518] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 642.753762][T23523] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 642.768587][ T5211] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.820939][ T5211] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 642.871724][T23523] EXT4-fs (loop0): 1 truncate cleaned up [ 642.898944][ T5211] usb 4-1: config 1 has no interface number 1 [ 642.927007][T23523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 642.930696][T23536] tmpfs: Bad value for 'mpol' [ 642.948120][ T5211] usb 4-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 642.967435][T23534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8738'. [ 642.997041][ T5211] usb 4-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 643.012944][T23534] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8738'. [ 643.047814][ T5211] usb 4-1: config 1 interface 2 has no altsetting 1 [ 643.093191][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 643.251907][T23543] loop1: detected capacity change from 0 to 1024 [ 643.299194][T23549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8747'. [ 643.323594][ T5211] usb 4-1: string descriptor 0 read error: -22 [ 643.329941][ T5211] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 643.363382][ T5211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.407671][T23551] loop2: detected capacity change from 0 to 256 [ 643.421119][T23553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8749'. [ 643.446558][ T5211] usb 4-1: MIDIStreaming interface descriptor not found [ 643.525735][T23551] FAT-fs (loop2): Directory bread(block 64) failed [ 643.532556][T23551] FAT-fs (loop2): Directory bread(block 65) failed [ 643.556834][T23555] xt_nfacct: accounting object `sy' does not exists [ 643.563550][T23551] FAT-fs (loop2): Directory bread(block 66) failed [ 643.563595][T23551] FAT-fs (loop2): Directory bread(block 67) failed [ 643.563678][T23551] FAT-fs (loop2): Directory bread(block 68) failed [ 643.563715][T23551] FAT-fs (loop2): Directory bread(block 69) failed [ 643.563800][T23551] FAT-fs (loop2): Directory bread(block 70) failed [ 643.721900][ T41] usb 4-1: USB disconnect, device number 39 [ 643.763086][T23551] FAT-fs (loop2): Directory bread(block 71) failed [ 643.766549][T23561] device vlan2 entered promiscuous mode [ 643.779629][T23551] FAT-fs (loop2): Directory bread(block 72) failed [ 643.792087][T23551] FAT-fs (loop2): Directory bread(block 73) failed [ 643.800706][T23565] loop1: detected capacity change from 0 to 16 [ 643.837150][T23565] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 644.323499][ T41] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 644.539268][T23591] netlink: 'syz.3.8768': attribute type 4 has an invalid length. [ 644.593406][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 644.873900][ T41] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 644.883063][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.905437][ T41] usb 2-1: Product: syz [ 644.922561][ T41] usb 2-1: Manufacturer: syz [ 644.930677][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8775'. [ 644.952973][ T41] usb 2-1: SerialNumber: syz [ 644.959904][ T41] r8152-cfgselector 2-1: config 0 descriptor?? [ 645.325911][T23619] loop2: detected capacity change from 0 to 4096 [ 645.371086][T23619] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 645.465092][ T41] r8152-cfgselector 2-1: Unknown version 0x0000 [ 645.471745][ T41] r8152-cfgselector 2-1: bad CDC descriptors [ 645.493941][T23619] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 645.523685][ T41] r8152-cfgselector 2-1: Unknown version 0x0000 [ 645.549816][ T41] r8152-cfgselector 2-1: USB disconnect, device number 42 [ 645.987167][T23649] netlink: 'syz.4.8796': attribute type 10 has an invalid length. [ 646.013921][T23649] wlan1: mtu less than device minimum [ 646.019386][T23649] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 646.583436][ T41] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 646.843500][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 646.902829][T23692] loop4: detected capacity change from 0 to 256 [ 646.978315][ T41] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 646.999124][ T41] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 647.019873][ T41] usb 3-1: config 0 interface 0 has no altsetting 0 [ 647.069135][T23698] vivid-000: disconnect [ 647.080825][T23696] vivid-000: reconnect [ 647.201496][T23702] loop3: detected capacity change from 0 to 512 [ 647.216321][ T41] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 647.245162][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.254250][T23702] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 647.263711][ T41] usb 3-1: Product: syz [ 647.270701][T23702] UDF-fs: Scanning with blocksize 512 failed [ 647.273830][ T41] usb 3-1: Manufacturer: syz [ 647.281561][ T41] usb 3-1: SerialNumber: syz [ 647.296177][ T41] usb 3-1: config 0 descriptor?? [ 647.305178][T23702] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 647.314403][T23702] UDF-fs: Scanning with blocksize 1024 failed [ 647.340759][T23702] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 647.381168][T23702] UDF-fs: Scanning with blocksize 2048 failed [ 647.427851][T23702] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 647.478593][T23702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 647.496291][ T26] audit: type=1326 audit(2000000527.740:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8f77dff9 code=0x7ffc0000 [ 647.603911][ T26] audit: type=1326 audit(2000000527.800:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8f77dff9 code=0x7ffc0000 [ 647.618479][T23711] xt_hashlimit: max too large, truncated to 1048576 [ 647.660670][ T26] audit: type=1326 audit(2000000527.800:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fed8f77dff9 code=0x7ffc0000 [ 647.720053][ T26] audit: type=1326 audit(2000000527.960:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8f77dff9 code=0x7ffc0000 [ 647.757696][ T4002] usb 3-1: USB disconnect, device number 34 [ 647.832188][T23713] misc userio: Invalid payload size [ 647.838309][ T26] audit: type=1326 audit(2000000527.960:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23708 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8f77dff9 code=0x7ffc0000 [ 648.084108][T23695] loop0: detected capacity change from 0 to 32768 [ 648.114666][T23695] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 648.140596][T23695] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 648.188564][T23695] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 648.218097][ T3690] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 648.233005][ T3690] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 648.416723][ T3690] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 183ms [ 648.450741][ T3690] gfs2: fsid=syz:syz.0: jid=0: Done [ 648.476406][T23695] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 648.744894][T23747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8845'. [ 649.022604][T23756] loop4: detected capacity change from 0 to 8 [ 649.313161][T23765] cgroup2: Unexpected value for 'nsdelegate' [ 649.493594][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8856'. [ 649.519141][T23737] loop2: detected capacity change from 0 to 32768 [ 649.583498][T23737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8838 (23737) [ 649.632587][T23737] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 649.684055][T23737] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 649.755693][T23737] BTRFS info (device loop2): using free space tree [ 649.877450][T23792] loop0: detected capacity change from 0 to 512 [ 650.014541][T23792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 650.048954][T23792] ext4 filesystem being mounted at /1793/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.071749][T23737] BTRFS info (device loop2): enabling ssd optimizations [ 650.212764][T23818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8868'. [ 650.251187][T22064] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 650.275547][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 650.395104][T23821] loop3: detected capacity change from 0 to 256 [ 650.466522][T23821] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 651.626751][T23870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.911780][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8899'. [ 652.133409][ T5206] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 652.383507][ T5206] usb 3-1: Using ep0 maxpacket: 8 [ 652.388802][T23859] loop1: detected capacity change from 0 to 32768 [ 652.503667][ T5206] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 652.520568][ T5206] usb 3-1: config 1 has no interface number 1 [ 652.540403][ T5206] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.733855][ T5206] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.744116][T23909] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre2: link becomes ready [ 652.772580][ T5206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.789412][ T5206] usb 3-1: Product: syz [ 652.799308][ T5206] usb 3-1: Manufacturer: syz [ 652.804856][ T5206] usb 3-1: SerialNumber: syz [ 652.977538][ T5320] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 653.071655][T23922] dlm: no locking on control device [ 653.143623][ T5206] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 653.171333][ T5206] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 653.197694][T23927] loop0: detected capacity change from 0 to 64 [ 653.233635][ T5320] usb 4-1: Using ep0 maxpacket: 32 [ 653.337988][ T5206] usb 3-1: USB disconnect, device number 35 [ 653.366762][ T5320] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 653.393853][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.423087][ T5320] usb 4-1: config 0 descriptor?? [ 653.432926][ T3804] udevd[3804]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.447184][T23933] loop1: detected capacity change from 0 to 1024 [ 653.476265][ T5320] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 653.693681][ T5320] gspca_vc032x: reg_r err -71 [ 653.698477][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.738396][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.774290][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.779642][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.816742][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.827614][T23939] xt_bpf: check failed: parse error [ 653.837803][T23941] loop2: detected capacity change from 0 to 256 [ 653.856362][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.875690][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.882437][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.906659][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.917703][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.927441][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.932766][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.944097][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.949448][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.976073][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.981414][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 653.983902][T23931] loop4: detected capacity change from 0 to 32768 [ 654.019949][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.053618][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 654.073600][ T5320] gspca_vc032x: Unknown sensor... [ 654.076422][T23931] jfs_rename: dtInsert returned -EIO [ 654.078731][ T5320] vc032x: probe of 4-1:0.0 failed with error -22 [ 654.095439][ T5320] usb 4-1: USB disconnect, device number 40 [ 654.353216][T23954] binder: 23950:23954 ioctl c018620b 0 returned -14 [ 655.079640][T23984] loop2: detected capacity change from 0 to 164 [ 655.782448][T23973] loop3: detected capacity change from 0 to 32768 [ 655.807384][T23973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.8944 (23973) [ 655.836693][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8965'. [ 655.880504][T23973] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 655.902302][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8964'. [ 655.921660][T23973] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 655.962635][T23973] BTRFS info (device loop3): using free space tree [ 656.241823][T24040] netlink: zone id is out of range [ 656.248303][T24040] netlink: zone id is out of range [ 656.254531][T24040] netlink: zone id is out of range [ 656.259725][T24040] netlink: zone id is out of range [ 656.265568][T24040] netlink: zone id is out of range [ 656.274748][T24040] netlink: zone id is out of range [ 656.279903][T24040] netlink: zone id is out of range [ 656.288821][T24040] netlink: zone id is out of range [ 656.335691][T24040] netlink: zone id is out of range [ 656.369884][T23973] BTRFS info (device loop3): enabling ssd optimizations [ 656.548416][T20792] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 656.558634][T24060] x_tables: duplicate underflow at hook 3 [ 656.613756][ T4002] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 656.733639][ T5320] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 657.002405][ T5320] usb 2-1: Using ep0 maxpacket: 16 [ 657.019837][T24073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8984'. [ 657.071178][ T4002] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 657.098521][ T4002] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 657.123932][ T5320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.125057][ T4002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.157154][ T5320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.217345][ T4002] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 657.280645][T24081] netlink: 'syz.3.8987': attribute type 7 has an invalid length. [ 657.304596][T24081] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8987'. [ 657.363725][ T5320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.388375][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.406753][ T5320] usb 2-1: Product: syz [ 657.410980][ T5320] usb 2-1: Manufacturer: syz [ 657.424393][ T5320] usb 2-1: SerialNumber: syz [ 657.601104][T24093] loop3: detected capacity change from 0 to 64 [ 657.712064][T24097] libceph: resolve '0..' (ret=-3): failed [ 657.773775][ T5320] usb 2-1: 0:2 : does not exist [ 657.845640][ T5320] usb 2-1: USB disconnect, device number 43 [ 657.902149][ T3758] udevd[3758]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.119107][T24113] ERROR: device name not specified. [ 658.124246][T24114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9003'. [ 658.308155][ T4002] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 658.321105][T24120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9006'. [ 658.350052][T24120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9006'. [ 658.517256][T24128] netlink: 'syz.2.9010': attribute type 8 has an invalid length. [ 658.539149][ T4002] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 658.566316][ T4002] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 658.590053][ T4002] usb 5-1: USB disconnect, device number 39 [ 658.964634][T24150] loop2: detected capacity change from 0 to 256 [ 659.073279][T24154] loop3: detected capacity change from 0 to 512 [ 659.171625][T24154] EXT4-fs (loop3): 1 truncate cleaned up [ 659.218716][T24154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 659.341142][T24166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9026'. [ 659.374890][T24166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9026'. [ 659.391208][T20792] EXT4-fs (loop3): unmounting filesystem. [ 659.448787][T24166] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9026'. [ 659.822996][T24186] x_tables: duplicate entry at hook 3 [ 660.184802][ T3690] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 660.375271][T24211] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 660.600656][T24221] loop0: detected capacity change from 0 to 512 [ 660.649368][T24221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.9055: inode #1: comm syz.0.9055: iget: illegal inode # [ 660.738393][T24221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.9055: error while reading EA inode 1 err=-117 [ 660.753934][ T3690] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 660.771905][ T3690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.783454][ T3690] usb 3-1: Product: syz [ 660.787723][ T3690] usb 3-1: Manufacturer: syz [ 660.793519][ T3690] usb 3-1: SerialNumber: syz [ 660.805865][ T3690] r8152-cfgselector 3-1: config 0 descriptor?? [ 660.825145][T24221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.9055: inode #1: comm syz.0.9055: iget: illegal inode # [ 660.872796][T24221] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.9055: error while reading EA inode 1 err=-117 [ 660.885853][T24234] loop1: detected capacity change from 0 to 256 [ 660.904523][T24234] exfat: Deprecated parameter 'utf8' [ 660.909918][T24234] exfat: Deprecated parameter 'utf8' [ 660.923637][T24221] EXT4-fs (loop0): 1 orphan inode deleted [ 660.940873][T24221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 660.944858][T24234] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 661.021424][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 661.065778][ T26] audit: type=1326 audit(2000000541.290:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24238 comm="syz.4.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 661.166467][ T26] audit: type=1326 audit(2000000541.310:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24238 comm="syz.4.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 661.250107][ T26] audit: type=1326 audit(2000000541.310:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24238 comm="syz.4.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 661.293692][ T3690] r8152-cfgselector 3-1: Unknown version 0x0000 [ 661.310382][ T3690] r8152-cfgselector 3-1: USB disconnect, device number 36 [ 661.398026][ T26] audit: type=1326 audit(2000000541.310:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24238 comm="syz.4.9064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 661.424247][T24251] __nla_validate_parse: 1 callbacks suppressed [ 661.424267][T24251] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9070'. [ 661.597589][T24253] loop1: detected capacity change from 0 to 4096 [ 661.632201][T24260] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.643243][T24260] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.654172][T24260] Mount JFS Failure: -5 [ 661.658452][T24260] jfs_mount failed w/return code = -5 [ 661.688619][T24253] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 661.946504][T24268] wlan0 speed is unknown, defaulting to 1000 [ 661.972570][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.012328][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.062929][T24268] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 662.107623][T24268] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 662.185074][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.213245][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.226576][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.243649][ T5320] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 662.274759][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.292171][T24268] wlan0 speed is unknown, defaulting to 1000 [ 662.363810][T24286] netlink: 'syz.2.9086': attribute type 8 has an invalid length. [ 662.493934][ T5320] usb 4-1: Using ep0 maxpacket: 8 [ 662.653624][ T5320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 662.748902][ T5320] usb 4-1: config 15 has an invalid interface number: 102 but max is 1 [ 662.787480][ T5320] usb 4-1: config 15 has an invalid interface number: 102 but max is 1 [ 662.819235][ T5320] usb 4-1: config 15 contains an unexpected descriptor of type 0x1, skipping [ 662.850368][ T5320] usb 4-1: config 15 has 1 interface, different from the descriptor's value: 2 [ 662.866781][T24308] loop1: detected capacity change from 0 to 128 [ 662.888624][ T5320] usb 4-1: config 15 has no interface number 0 [ 662.913376][ T5320] usb 4-1: config 15 interface 102 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 662.925929][ T5320] usb 4-1: config 15 interface 102 has no altsetting 0 [ 662.952079][T24308] syz.1.9097: attempt to access beyond end of device [ 662.952079][T24308] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 662.995754][T24308] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 663.013682][T24308] syz.1.9097: attempt to access beyond end of device [ 663.013682][T24308] loop1: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 663.039303][T24308] Buffer I/O error on dev loop1, logical block 8833403, async page read [ 663.083666][T24308] syz.1.9097: attempt to access beyond end of device [ 663.083666][T24308] loop1: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 663.103592][ T5320] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0381, bcdDevice=d5.6c [ 663.113145][ T5320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.141070][T24308] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 663.143982][T24316] loop2: detected capacity change from 0 to 736 [ 663.162074][ T5320] usb 4-1: Product: syz [ 663.169814][T24308] syz.1.9097: attempt to access beyond end of device [ 663.169814][T24308] loop1: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 663.194335][ T5320] usb 4-1: Manufacturer: syz [ 663.198991][ T5320] usb 4-1: SerialNumber: syz [ 663.225640][T24308] Buffer I/O error on dev loop1, logical block 8073606, async page read [ 663.255242][T24308] syz.1.9097: attempt to access beyond end of device [ 663.255242][T24308] loop1: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 663.270504][T24308] Buffer I/O error on dev loop1, logical block 3245771, async page read [ 663.280147][T24308] syz.1.9097: attempt to access beyond end of device [ 663.280147][T24308] loop1: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 663.323814][T24308] Buffer I/O error on dev loop1, logical block 8834171, async page read [ 663.344111][T24308] syz.1.9097: attempt to access beyond end of device [ 663.344111][T24308] loop1: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 663.375864][T24308] Buffer I/O error on dev loop1, logical block 13466417, async page read [ 663.421866][T24308] syz.1.9097: attempt to access beyond end of device [ 663.421866][T24308] loop1: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 663.475922][T24308] Buffer I/O error on dev loop1, logical block 8073606, async page read [ 663.495033][T24308] syz.1.9097: attempt to access beyond end of device [ 663.495033][T24308] loop1: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 663.560582][ T5320] usb 4-1: USB disconnect, device number 41 [ 663.600624][T24308] Buffer I/O error on dev loop1, logical block 3245774, async page read [ 663.649315][T24308] syz.1.9097: attempt to access beyond end of device [ 663.649315][T24308] loop1: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 663.658335][ T26] audit: type=1326 audit(2000000543.890:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.0.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1597dff9 code=0x7ffc0000 [ 663.688881][T24308] Buffer I/O error on dev loop1, logical block 8834939, async page read [ 663.695269][T24340] loop2: detected capacity change from 0 to 512 [ 663.705875][ T26] audit: type=1326 audit(2000000543.950:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.0.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1597dff9 code=0x7ffc0000 [ 663.737885][ T26] audit: type=1326 audit(2000000543.980:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.0.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2c1597dff9 code=0x7ffc0000 [ 663.772593][T24340] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.9111: iget: bad extended attribute block 128 [ 663.834165][T24340] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9111: couldn't read orphan inode 16 (err -117) [ 663.886860][ T26] audit: type=1326 audit(2000000543.980:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.0.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1597dff9 code=0x7ffc0000 [ 663.924836][T24340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 663.944365][T24340] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.998909][ T26] audit: type=1326 audit(2000000543.980:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24337 comm="syz.0.9110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1597dff9 code=0x7ffc0000 [ 664.034486][T24340] Quota error (device loop2): do_check_range: Getting dqdh_entries 964 out of range 0-14 [ 664.084231][T24340] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.9111: Failed to acquire dquot type 1 [ 664.192482][T24354] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.9117'. [ 664.347775][T22064] EXT4-fs (loop2): unmounting filesystem. [ 664.480864][T24363] overlayfs: missing 'lowerdir' [ 664.815165][T24370] loop0: detected capacity change from 0 to 4096 [ 665.393131][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9136'. [ 665.521216][T24397] loop2: detected capacity change from 0 to 4096 [ 665.558445][T24397] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 665.643518][ T3685] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 665.893459][ T3685] usb 4-1: Using ep0 maxpacket: 32 [ 665.931208][T24391] loop0: detected capacity change from 0 to 32768 [ 665.960725][T24391] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9133 (24391) [ 665.999331][T24391] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.046737][T24391] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 666.056149][ T3685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 666.113815][T24391] BTRFS info (device loop0): using free space tree [ 666.153623][ T3685] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 666.168728][ T3685] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 666.196409][ T3685] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 666.216957][ T3685] usb 4-1: config 128 has no interface number 0 [ 666.223427][ T3685] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 666.235062][ T3685] usb 4-1: config 128 interface 127 has no altsetting 0 [ 666.393709][ T3685] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 666.402836][ T3685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.433419][ T3685] usb 4-1: Product: syz [ 666.437633][ T3685] usb 4-1: Manufacturer: syz [ 666.442244][ T3685] usb 4-1: SerialNumber: syz [ 666.483757][T24393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 666.491228][T24391] BTRFS info (device loop0): enabling ssd optimizations [ 666.644714][ T3646] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.916232][ T3685] usb 4-1: USB disconnect, device number 42 [ 666.965760][ T3758] udevd[3758]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.429591][T24445] netlink: 'syz.3.9154': attribute type 10 has an invalid length. [ 667.482793][T24445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9154'. [ 667.549329][T24445] batman_adv: batadv0: Adding interface: virt_wifi0 [ 667.567830][T24445] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.590670][T24450] loop2: detected capacity change from 0 to 1024 [ 667.621042][T24450] EXT4-fs: Ignoring removed orlov option [ 667.631224][T24445] batman_adv: batadv0: Interface activated: virt_wifi0 [ 667.646642][T24450] EXT4-fs (loop2): filesystem is read-only [ 667.664753][T24450] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 38698 [ 668.267247][T24474] loop2: detected capacity change from 0 to 128 [ 668.304574][T24474] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 668.438679][T24479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9170'. [ 668.477553][T24479] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.532571][T24479] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.580353][T24479] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.613624][T24479] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.641504][T24487] netlink: 'syz.4.9175': attribute type 3 has an invalid length. [ 668.769715][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9173'. [ 669.120762][T24503] loop3: detected capacity change from 0 to 256 [ 669.185093][T24505] loop2: detected capacity change from 0 to 16 [ 669.208431][T24503] FAT-fs (loop3): Directory bread(block 64) failed [ 669.224609][T24505] erofs: (device loop2): mounted with root inode @ nid 36. [ 669.233427][ T3687] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 669.243609][T24503] FAT-fs (loop3): Directory bread(block 65) failed [ 669.282323][T24503] FAT-fs (loop3): Directory bread(block 66) failed [ 669.309518][T24503] FAT-fs (loop3): Directory bread(block 67) failed [ 669.331560][T24503] FAT-fs (loop3): Directory bread(block 68) failed [ 669.338360][T24503] FAT-fs (loop3): Directory bread(block 69) failed [ 669.369208][T24503] FAT-fs (loop3): Directory bread(block 70) failed [ 669.390925][T24503] FAT-fs (loop3): Directory bread(block 71) failed [ 669.409139][T24503] FAT-fs (loop3): Directory bread(block 72) failed [ 669.428997][T24503] FAT-fs (loop3): Directory bread(block 73) failed [ 669.623826][ T3687] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 669.645420][ T3687] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.696213][ T3687] usb 1-1: config 0 has no interface number 0 [ 669.702365][ T3687] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 669.757437][ T3687] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.943790][ T3687] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 669.963100][ T3687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.010012][ T3687] usb 1-1: Product: syz [ 670.014859][ T3687] usb 1-1: Manufacturer: syz [ 670.019504][ T3687] usb 1-1: SerialNumber: syz [ 670.054194][ T3687] usb 1-1: config 0 descriptor?? [ 670.080240][T24501] loop4: detected capacity change from 0 to 32768 [ 670.206350][T24501] XFS (loop4): Mounting V5 Filesystem [ 670.329121][T24529] netlink: 'syz.2.9191': attribute type 1 has an invalid length. [ 670.378229][T24529] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9191'. [ 670.394884][T24501] XFS (loop4): Ending clean mount [ 670.405405][T24501] XFS (loop4): Quotacheck needed: Please wait. [ 670.461061][T24516] loop3: detected capacity change from 0 to 32768 [ 670.493163][T24516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.9188 (24516) [ 670.536924][T24501] XFS (loop4): Quotacheck: Done. [ 670.547723][ T3687] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 670.603765][ T3687] usb 1-1: USB disconnect, device number 37 [ 670.645101][T24516] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.684382][ T3654] XFS (loop4): Unmounting Filesystem [ 670.691261][T24516] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 670.713629][T24516] BTRFS info (device loop3): using free space tree [ 670.983629][T24516] BTRFS info (device loop3): enabling ssd optimizations [ 671.077535][T20792] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 671.440032][T24561] loop0: detected capacity change from 0 to 1024 [ 671.589142][T24561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 671.704535][T24571] netlink: 'syz.3.9203': attribute type 11 has an invalid length. [ 671.769662][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 672.149087][T24583] netlink: 'syz.0.9209': attribute type 26 has an invalid length. [ 672.272675][T24585] overlayfs: conflicting options: nfs_export=on,index=off [ 672.623579][T24593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9193'. [ 672.933345][T24602] netlink: 'syz.3.9218': attribute type 2 has an invalid length. [ 673.063436][ T3644] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 673.271896][T24610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9222'. [ 673.456752][T24581] loop2: detected capacity change from 0 to 40427 [ 673.495542][T24581] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 673.503244][T24581] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 673.504659][ T3644] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.524849][ T3643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 673.536343][ T3643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 673.554382][T24581] F2FS-fs (loop2): invalid crc value [ 673.573538][ T3643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 673.590928][ T3643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 673.591868][T24581] F2FS-fs (loop2): Found nat_bits in checkpoint [ 673.610956][ T3643] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 673.619562][ T3643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.654928][ T3644] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 673.715401][ T3644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.731514][ T3644] usb 5-1: config 0 descriptor?? [ 673.770540][T24581] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 673.799815][T24581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 673.809146][T24613] lo speed is unknown, defaulting to 1000 [ 673.860663][T24581] syz.2.9208: attempt to access beyond end of device [ 673.860663][T24581] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 674.021502][T22064] syz-executor: attempt to access beyond end of device [ 674.021502][T22064] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 674.255591][ T3644] usb 5-1: USB disconnect, device number 40 [ 674.384334][T24623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9228'. [ 674.565024][T24613] wlan0 speed is unknown, defaulting to 1000 [ 674.601877][T24608] loop3: detected capacity change from 0 to 32768 [ 674.668762][T24608] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.9221 (24608) [ 674.728034][T24608] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 674.763520][T24608] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 674.786038][T24608] BTRFS info (device loop3): force clearing of disk cache [ 674.808746][T24608] BTRFS info (device loop3): setting nodatasum [ 674.833403][T24608] BTRFS info (device loop3): allowing degraded mounts [ 674.840400][T24608] BTRFS info (device loop3): enabling disk space caching [ 674.863527][T24608] BTRFS info (device loop3): disk space caching is enabled [ 675.079627][T24641] loop2: detected capacity change from 0 to 256 [ 675.096946][T24613] chnl_net:caif_netlink_parms(): no params data found [ 675.264338][T24608] BTRFS info (device loop3): rebuilding free space tree [ 675.318236][T24608] BTRFS info (device loop3): disabling free space tree [ 675.337684][T24608] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 675.367802][T24608] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 675.422351][T24662] loop2: detected capacity change from 0 to 1024 [ 675.503583][ T3644] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 675.519582][T24662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 675.570937][T24613] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.603601][T24613] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.649709][T24613] device bridge_slave_0 entered promiscuous mode [ 675.669458][T24613] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.693897][ T3643] Bluetooth: hci0: command tx timeout [ 675.713555][T24613] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.736905][T24613] device bridge_slave_1 entered promiscuous mode [ 675.760404][T20792] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 675.773842][T24670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9237'. [ 675.794846][T22064] EXT4-fs (loop2): unmounting filesystem. [ 675.853008][T24670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9237'. [ 675.904850][ T3644] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 675.913715][ T3644] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 675.929047][ T3644] usb 5-1: config 0 has no interface number 1 [ 675.941570][T24670] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 675.970184][T24670] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 675.972466][ T3644] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 676.015224][ T3644] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 676.049278][ T3644] usb 5-1: too many endpoints for config 0 interface 100 altsetting 7: 237, using maximum allowed: 30 [ 676.083839][ T3644] usb 5-1: config 0 interface 100 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 237 [ 676.129742][ T3644] usb 5-1: config 0 interface 100 has no altsetting 0 [ 676.332108][T24613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.342026][ T3644] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 676.390406][ T3644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.423874][ T3644] usb 5-1: Product: syz [ 676.442590][ T3644] usb 5-1: Manufacturer: syz [ 676.459913][ T3644] usb 5-1: SerialNumber: syz [ 676.482394][ T3644] usb 5-1: config 0 descriptor?? [ 676.511119][T24613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.671808][T24613] team0: Port device team_slave_0 added [ 676.694713][T24680] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 676.707181][T24682] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 676.731417][T24680] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 676.754414][T24613] team0: Port device team_slave_1 added [ 676.790931][ T3644] kaweth 5-1:0.0: Firmware present in device. [ 676.807347][T24613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.865628][T24613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.943823][T24613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.985468][T24613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.992448][T24613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.030240][ T3644] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 677.073571][ T3644] kaweth: probe of 5-1:0.0 failed with error -5 [ 677.093979][T24613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.124785][T24692] netlink: 'syz.3.9248': attribute type 1 has an invalid length. [ 677.193576][ T3644] kaweth 5-1:0.100: Firmware present in device. [ 677.243590][ T3644] kaweth 5-1:0.100: Error reading configuration (-71), no net device created [ 677.258586][T24613] device hsr_slave_0 entered promiscuous mode [ 677.274418][ T3644] kaweth: probe of 5-1:0.100 failed with error -5 [ 677.293186][T24613] device hsr_slave_1 entered promiscuous mode [ 677.324410][ T3644] usb 5-1: USB disconnect, device number 41 [ 677.333791][T24613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.348375][T24613] Cannot create hsr debugfs directory [ 677.411868][T24698] loop3: detected capacity change from 0 to 2048 [ 677.473460][T24701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.538553][T24698] NILFS (loop3): error -2 truncating bmap (ino=16) [ 677.683525][ T5204] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 677.773671][ T3643] Bluetooth: hci0: command tx timeout [ 677.945260][T24613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.021677][T24613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 54739 - 0 [ 678.063787][ T5204] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 678.082858][ T5204] usb 1-1: config 0 has no interface number 0 [ 678.093002][ T5204] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 678.159391][ T5204] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.328840][T24613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.373657][ T5204] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 678.382758][ T5204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.400358][T24613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54739 - 0 [ 678.432394][ T5204] usb 1-1: Product: syz [ 678.449619][ T5204] usb 1-1: Manufacturer: syz [ 678.463423][ T5204] usb 1-1: SerialNumber: syz [ 678.488298][T24729] Cannot find del_set index 0 as target [ 678.495509][ T5204] usb 1-1: config 0 descriptor?? [ 678.518984][T24700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 678.554766][ T5204] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 678.584467][ T5204] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 678.741222][T24613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.768853][T24613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54739 - 0 [ 678.819990][T24735] loop3: detected capacity change from 0 to 2048 [ 678.834542][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 678.869022][T24735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.010399][T24613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.027351][ T125] usb 1-1: USB disconnect, device number 38 [ 679.041569][T24613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54739 - 0 [ 679.064626][ T125] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 679.140272][ T125] cyberjack 1-1:0.69: device disconnected [ 679.242194][T24741] netlink: 'syz.3.9272': attribute type 8 has an invalid length. [ 679.471286][T24613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.512219][T24613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.547339][T24613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.573692][T24613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.656693][T24731] loop4: detected capacity change from 0 to 32768 [ 679.713531][T24731] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.9267 (24731) [ 679.780875][T24731] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 679.827182][T24731] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 679.849206][T24731] BTRFS info (device loop4): turning off barriers [ 679.856155][ T3643] Bluetooth: hci0: command tx timeout [ 679.868428][T24731] BTRFS info (device loop4): enabling all of the rescue options [ 679.879056][T24731] BTRFS info (device loop4): ignoring data csums [ 679.885772][T24731] BTRFS info (device loop4): ignoring bad roots [ 679.902327][T24731] BTRFS info (device loop4): disabling log replay at mount time [ 679.922809][T24731] BTRFS info (device loop4): disabling tree log [ 679.929933][T24731] BTRFS info (device loop4): turning on flush-on-commit [ 679.935656][T24613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.947401][T24731] BTRFS info (device loop4): using free space tree [ 680.020940][T24613] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.073900][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 680.081997][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 680.162175][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 680.199708][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 680.296818][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.304020][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.311621][T24731] BTRFS info (device loop4: state C): enabling ssd optimizations [ 680.321895][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 680.394268][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 680.395046][T24782] loop2: detected capacity change from 0 to 2048 [ 680.412965][ T3654] BTRFS info (device loop4: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 680.432418][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.439620][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.466613][T24782] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 680.483955][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 680.543513][ T3690] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 680.597254][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.606351][T24782] syz.2.9283: attempt to access beyond end of device [ 680.606351][T24782] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 680.639344][T24789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.668255][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 680.685022][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 680.708753][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 680.774988][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 680.871577][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 680.943793][ T3690] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 680.954525][ T3690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.959629][T24613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.986277][ T3690] usb 4-1: config 0 descriptor?? [ 681.045889][ T3690] gspca_main: spca508-2.14.0 probing 8086:0110 [ 681.061285][T24613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.105596][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 681.145923][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 681.182949][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 681.199166][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 681.211128][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 681.259856][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 681.453627][ T3992] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 681.495763][ T3690] gspca_spca508: reg_read err -71 [ 681.513551][ T3690] gspca_spca508: reg_read err -71 [ 681.533722][ T3690] gspca_spca508: reg_read err -71 [ 681.553719][ T3690] gspca_spca508: reg_read err -71 [ 681.573988][ T3690] gspca_spca508: reg write: error -71 [ 681.579479][ T3690] spca508: probe of 4-1:0.0 failed with error -71 [ 681.621124][ T3690] usb 4-1: USB disconnect, device number 43 [ 681.743669][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.751206][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.831214][T24817] loop0: detected capacity change from 0 to 8 [ 681.858678][T24613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.875743][ T3992] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 681.895100][ T3992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.933510][ T3643] Bluetooth: hci0: command tx timeout [ 681.976052][ T3992] pwc: Logitech ViewPort AV 100 webcam detected. [ 682.006270][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.036589][T24819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9299'. [ 682.036910][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.127396][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.175095][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.205367][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.254099][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.288801][T24613] device veth0_vlan entered promiscuous mode [ 682.373139][T24613] device veth1_vlan entered promiscuous mode [ 682.423691][ T3992] pwc: send_video_command error -71 [ 682.428974][ T3992] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 682.457490][ T3992] Philips webcam: probe of 3-1:127.0 failed with error -71 [ 682.483907][ T3992] usb 3-1: USB disconnect, device number 37 [ 682.490434][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 682.501001][T17162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 682.543404][ T3690] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 682.563593][T24613] device veth0_macvtap entered promiscuous mode [ 682.574045][ T3643] Bluetooth: hci5: command 0x0406 tx timeout [ 682.635783][T24613] device veth1_macvtap entered promiscuous mode [ 682.664585][T24835] xt_TCPMSS: Only works on TCP SYN packets [ 682.727896][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.762783][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.775076][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.803375][ T3690] usb 5-1: Using ep0 maxpacket: 8 [ 682.813963][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.840676][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.887758][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.901185][T24839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9309'. [ 682.907133][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.921298][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.951138][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.997978][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.033177][T24613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.095897][T17175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 683.110326][T17175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 683.139310][T17175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.148762][ T3690] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 683.168911][ T3690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.190139][T17175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.198686][ T3690] usb 5-1: Product: syz [ 683.208678][ T3690] usb 5-1: Manufacturer: syz [ 683.216039][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.223388][ T3690] usb 5-1: SerialNumber: syz [ 683.233887][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.252840][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.261781][ T3690] usb 5-1: config 0 descriptor?? [ 683.281999][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.315911][ T3690] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 683.320495][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.351597][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.399024][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.427933][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.445795][T24613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.465708][T24613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.515996][T24613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.535976][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.565157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 683.604334][T24613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.613083][T24613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.635349][T24613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.651308][T24613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.682208][T24855] netlink: 'syz.0.9317': attribute type 21 has an invalid length. [ 683.691701][T24859] loop2: detected capacity change from 0 to 256 [ 683.698900][T24855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9317'. [ 683.711858][T24857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9318'. [ 683.780763][T24859] FAT-fs (loop2): Directory bread(block 64) failed [ 683.839689][T24859] FAT-fs (loop2): Directory bread(block 65) failed [ 683.867938][T24859] FAT-fs (loop2): Directory bread(block 66) failed [ 683.901822][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.910877][ T3690] gspca_m5602: Failed to find a sensor [ 683.914463][T24859] FAT-fs (loop2): Directory bread(block 67) failed [ 683.916654][ T3690] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 683.922961][T24859] FAT-fs (loop2): Directory bread(block 68) failed [ 683.944002][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.976962][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 683.976980][ T26] audit: type=1400 audit(683.942:2145): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=24860 comm="syz.0.9320" [ 683.984410][ T3690] usb 5-1: USB disconnect, device number 42 [ 684.038515][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 684.053527][T24859] FAT-fs (loop2): Directory bread(block 69) failed [ 684.060175][T24859] FAT-fs (loop2): Directory bread(block 70) failed [ 684.093698][T24859] FAT-fs (loop2): Directory bread(block 71) failed [ 684.112758][T24859] FAT-fs (loop2): Directory bread(block 72) failed [ 684.123858][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.128756][T24859] FAT-fs (loop2): Directory bread(block 73) failed [ 684.169637][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.210662][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 684.423385][ T5204] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 684.437589][T24870] loop3: detected capacity change from 0 to 64 [ 684.803699][ T5204] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 684.818841][ T5204] usb 1-1: config 4 has no interface number 0 [ 684.955194][T24889] loop2: detected capacity change from 0 to 512 [ 684.974656][T24889] EXT4-fs (loop2): Test dummy encryption mode enabled [ 685.013692][ T5204] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 685.035688][ T5204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.085937][T24889] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.9333: invalid block [ 685.117481][ T5204] usb 1-1: Product: syz [ 685.121690][ T5204] usb 1-1: Manufacturer: syz [ 685.168722][T24889] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9333: couldn't read orphan inode 11 (err -117) [ 685.202348][ T5204] usb 1-1: SerialNumber: syz [ 685.212381][T24888] loop3: detected capacity change from 0 to 4096 [ 685.212736][T24889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 685.233402][ T26] audit: type=1326 audit(685.192:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.4.9337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 685.244237][T24888] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 685.298452][ T26] audit: type=1326 audit(685.202:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.4.9337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 685.323377][ T5204] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 685.382485][ T26] audit: type=1326 audit(685.202:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.4.9337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 685.441373][T22064] EXT4-fs (loop2): unmounting filesystem. [ 685.447867][T24888] ntfs3: loop3: failed to convert "c46c" to macceltic [ 685.448029][ T26] audit: type=1326 audit(685.202:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24898 comm="syz.4.9337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 685.615503][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.621857][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.753694][ T5204] vp7045: USB control message 'in' went wrong. [ 685.759970][ T5204] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 685.783892][ T5204] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 685.814570][ T5204] usb 1-1: USB disconnect, device number 39 [ 685.966685][T24913] netlink: 'syz.2.9344': attribute type 21 has an invalid length. [ 686.346505][T24919] loop4: detected capacity change from 0 to 8192 [ 686.353448][ T5204] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 686.365489][T24919] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 686.393238][T24919] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 686.402660][T24919] REISERFS (device loop4): using ordered data mode [ 686.414110][T24919] reiserfs: using flush barriers [ 686.430138][T24919] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 686.456222][T24919] REISERFS (device loop4): checking transaction log (loop4) [ 686.480838][T24919] REISERFS (device loop4): Using tea hash to sort names [ 686.488634][T24919] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 686.693557][ T5208] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 686.709989][T24929] loop4: detected capacity change from 0 to 1024 [ 686.723964][ T5204] usb 3-1: config 0 interface 0 has no altsetting 0 [ 686.725241][T24929] EXT4-fs: Ignoring removed orlov option [ 686.730609][ T5204] usb 3-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 686.730639][ T5204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.754798][ T5204] usb 3-1: config 0 descriptor?? [ 686.800392][T24929] EXT4-fs: Ignoring removed nomblk_io_submit option [ 686.812608][T24929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 686.813216][ T5204] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 found [ 686.823713][T24929] System zones: 0-1, 3-36 [ 686.845023][T24929] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 686.915283][ T3654] EXT4-fs (loop4): unmounting filesystem. [ 686.947039][ T5208] usb 4-1: Using ep0 maxpacket: 32 [ 687.034234][ T5204] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 687.042076][ T5204] snd_usb_toneport 3-1:0.0: Line 6 POD Studio UX1 now disconnected [ 687.065653][ T5204] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 687.088208][ T5208] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 687.199702][T24936] dlm: plock device version mismatch: kernel (1.2.0), user (1.768.0) [ 687.260897][ T5204] usb 3-1: USB disconnect, device number 38 [ 687.267400][ T5208] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 687.296502][ T5208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.318329][ T5208] usb 4-1: Product: syz [ 687.325688][ T5208] usb 4-1: Manufacturer: syz [ 687.332602][ T5208] usb 4-1: SerialNumber: syz [ 687.354065][ T5208] usb 4-1: config 0 descriptor?? [ 687.374439][T24924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 687.668530][ T5208] usb 4-1: USB disconnect, device number 44 [ 688.368657][T24970] loop3: detected capacity change from 0 to 8 [ 688.771303][T24976] loop3: detected capacity change from 0 to 2048 [ 688.846479][T24976] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.9374: bad orphan inode 8192 [ 688.872855][T24976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 688.880359][T24984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9377'. [ 688.924354][T24988] loop2: detected capacity change from 0 to 256 [ 688.960123][T24952] loop0: detected capacity change from 0 to 32768 [ 689.024525][T24952] XFS (loop0): Invalid device [./file0], error=-16 [ 689.561861][T20792] EXT4-fs (loop3): unmounting filesystem. [ 690.005111][T25020] loop4: detected capacity change from 0 to 256 [ 690.176528][ T5204] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 690.400968][T25030] loop4: detected capacity change from 0 to 128 [ 690.452698][T25030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 690.540659][ T3654] EXT4-fs (loop4): unmounting filesystem. [ 690.553733][ T5204] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 690.583446][ T5204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.604441][ T5204] usb 3-1: config 0 descriptor?? [ 690.651713][ T5204] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 690.883955][T25009] loop0: detected capacity change from 0 to 32768 [ 690.970315][T25009] ERROR: (device loop0): diWrite: ixpxd invalid [ 690.970315][T25009] [ 690.988152][ T125] usb 3-1: USB disconnect, device number 39 [ 691.082650][T25009] ERROR: (device loop0): remounting filesystem as read-only [ 691.149990][T25009] ERROR: (device loop0): txCommit: [ 691.149990][T25009] [ 691.174710][T25009] imap: ffff8880744c8000: 07ffffff 00000000 00000000 00000000 [ 691.192465][T25009] imap: ffff8880744c8010: 00000004 00000002 00000000 00000000 [ 691.232929][T25009] ERROR: (device loop0): diFree: inum = 7, iagno = 0, nextiag = 0 [ 691.232929][T25009] [ 691.742100][T25032] loop3: detected capacity change from 0 to 32768 [ 691.804700][T25032] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.9400 (25032) [ 691.853825][T25032] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 691.860989][T25055] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 691.901567][T25032] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 691.902618][T25055] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 691.944794][T25032] BTRFS info (device loop3): turning off barriers [ 692.014294][T25032] BTRFS info (device loop3): enabling all of the rescue options [ 692.034380][T25032] BTRFS info (device loop3): ignoring data csums [ 692.040781][T25032] BTRFS info (device loop3): ignoring bad roots [ 692.094827][T25032] BTRFS info (device loop3): disabling log replay at mount time [ 692.133468][T25032] BTRFS info (device loop3): disabling tree log [ 692.143754][T25032] BTRFS info (device loop3): turning on flush-on-commit [ 692.150767][T25032] BTRFS info (device loop3): using free space tree [ 692.357175][ T26] audit: type=1326 audit(692.322:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.4.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 692.516854][ T26] audit: type=1326 audit(692.352:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.4.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 692.564465][ T26] audit: type=1326 audit(692.352:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.4.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 692.613493][T25032] BTRFS info (device loop3: state C): enabling ssd optimizations [ 692.623547][ T5204] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 692.729296][ T26] audit: type=1326 audit(692.352:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25074 comm="syz.4.9419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd98d7dff9 code=0x7ffc0000 [ 692.771535][T20792] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 693.026642][ T5208] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 693.233633][ T5204] usb 3-1: string descriptor 0 read error: -22 [ 693.240373][ T5204] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 693.254433][T25081] loop4: detected capacity change from 0 to 32768 [ 693.284129][T25081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9421 (25081) [ 693.303369][ T5208] usb 1-1: Using ep0 maxpacket: 16 [ 693.328947][ T5204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.374097][ T5204] usb 3-1: config 0 descriptor?? [ 693.381073][T25102] netlink: 'syz.1.9426': attribute type 3 has an invalid length. [ 693.392637][T25081] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.413731][T25081] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 693.423703][ T5208] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 693.437049][ T5204] usbtest 3-1:0.0: FX2 device [ 693.441787][ T5204] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 693.443574][T25081] BTRFS info (device loop4): using free space tree [ 693.458434][ T5208] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 693.504012][ T5208] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 693.533473][ T5208] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 693.544075][ T5208] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 693.561911][ T5208] usb 1-1: config 1 interface 0 has no altsetting 0 [ 693.573550][ T5208] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 693.593393][ T5208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.644602][ T5208] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 693.686637][ T125] usb 3-1: USB disconnect, device number 40 [ 693.818419][T25081] BTRFS info (device loop4): enabling ssd optimizations [ 693.885385][ T5208] scsi host1: usb-storage 1-1:1.0 [ 694.070049][ T3654] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 694.082021][ T5208] usb 1-1: USB disconnect, device number 40 [ 694.366965][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9437'. [ 694.776498][T25150] loop3: detected capacity change from 0 to 128 [ 694.866512][T25150] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 694.887743][T25150] FAT-fs (loop3): Filesystem has been set read-only [ 695.015813][T20792] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 695.801838][T25189] loop4: detected capacity change from 0 to 4096 [ 695.866940][T25189] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 695.907301][T25189] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 695.983347][T25189] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 696.012704][T25189] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 696.039334][T25204] loop2: detected capacity change from 0 to 64 [ 696.043527][T25189] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 696.095680][T25189] ntfs: volume version 3.1. [ 696.100272][T25189] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is not in use! [ 696.260892][T25211] loop3: detected capacity change from 0 to 512 [ 696.378852][T25211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 696.465044][T25220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9475'. [ 696.476093][T25220] net_ratelimit: 3 callbacks suppressed [ 696.476122][T25220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.578522][T20792] EXT4-fs (loop3): unmounting filesystem. [ 696.608073][T25225] device gre1 entered promiscuous mode [ 696.796808][T25232] netlink: 'syz.4.9479': attribute type 13 has an invalid length. [ 696.835471][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9480'. [ 696.987453][T25241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9484'. [ 697.020239][T25241] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9484'. [ 697.253399][ T125] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 697.721469][T25259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9492'. [ 697.743822][T25259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9492'. [ 697.756496][T25262] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 697.774290][ T125] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 697.793557][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.801705][ T125] usb 2-1: Product: syz [ 697.839075][ T125] usb 2-1: Manufacturer: syz [ 697.865133][ T125] usb 2-1: SerialNumber: syz [ 697.944392][ T125] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 698.226574][T25273] netlink: 'syz.2.9499': attribute type 7 has an invalid length. [ 698.264771][T25273] netlink: 'syz.2.9499': attribute type 5 has an invalid length. [ 698.293508][T25273] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9499'. [ 698.572976][T25254] loop0: detected capacity change from 0 to 32768 [ 698.590734][T25254] XFS: noikeep mount option is deprecated. [ 698.613545][ T125] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 698.688683][T25254] XFS (loop0): Mounting V5 Filesystem [ 698.733624][ T5208] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 698.778496][T25254] XFS (loop0): Ending clean mount [ 698.798119][T25254] XFS (loop0): Quotacheck needed: Please wait. [ 698.889703][T25254] XFS (loop0): Quotacheck: Done. [ 698.933539][T24793] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 698.973639][ T5208] usb 4-1: Using ep0 maxpacket: 32 [ 699.062667][ T5211] usb 2-1: USB disconnect, device number 44 [ 699.078216][ T3646] XFS (loop0): Unmounting Filesystem [ 699.093705][ T5208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 699.156581][T25303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9510'. [ 699.167712][T25303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9510'. [ 699.227806][T24793] usb 5-1: Using ep0 maxpacket: 16 [ 699.275729][ T5208] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 699.313417][ T5208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.340821][ T5208] usb 4-1: Product: syz [ 699.345374][ T5208] usb 4-1: Manufacturer: syz [ 699.345780][T25307] program syz.2.9513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.349979][ T5208] usb 4-1: SerialNumber: syz [ 699.363373][T24793] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 699.379834][T24793] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 699.394329][ T5208] usb 4-1: config 0 descriptor?? [ 699.410823][T24793] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 699.437329][ T5208] hub 4-1:0.0: bad descriptor, ignoring hub [ 699.441597][T24793] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 699.443911][ T5208] hub: probe of 4-1:0.0 failed with error -5 [ 699.478697][T24793] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 699.499285][ T5208] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input35 [ 699.508138][T24793] usb 5-1: config 1 interface 0 has no altsetting 0 [ 699.521814][ T5208] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 699.531349][T24793] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 699.531380][T24793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.584688][T24793] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 699.614203][ T5208] usbtouchscreen: probe of 4-1:0.0 failed with error -22 [ 699.693899][ T125] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 699.702201][ T5208] usb 4-1: USB disconnect, device number 45 [ 699.713873][ T125] ath9k_htc: Failed to initialize the device [ 699.782614][ T5211] usb 2-1: ath9k_htc: USB layer deinitialized [ 699.802391][T24793] scsi host1: usb-storage 5-1:1.0 [ 699.966197][T25319] netlink: 'syz.2.9518': attribute type 1 has an invalid length. [ 700.010317][T12407] usb 5-1: USB disconnect, device number 43 [ 700.140709][T25322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.275526][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9522'. [ 700.465334][T25336] loop2: detected capacity change from 0 to 512 [ 700.496988][T25336] EXT4-fs: Ignoring removed orlov option [ 700.537578][T25336] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 700.553515][T25336] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 700.578961][T25336] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.9526: Corrupt directory, running e2fsck is recommended [ 700.672685][T25344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9529'. [ 700.717720][T25336] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 700.736805][T25336] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.9526: corrupted in-inode xattr [ 700.765939][T25346] loop3: detected capacity change from 0 to 256 [ 700.794158][T25346] exfat: Deprecated parameter 'namecase' [ 700.801352][T25336] EXT4-fs (loop2): Remounting filesystem read-only [ 700.814342][T25336] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9526: couldn't read orphan inode 15 (err -117) [ 700.850417][T25336] EXT4-fs (loop2): Remounting filesystem read-only [ 700.864151][T25346] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf794f3fa, utbl_chksum : 0xe619d30d) [ 700.889591][T25336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 700.991518][T25336] EXT4-fs error (device loop2): ext4_xattr_set_entry:1619: inode #2: comm syz.2.9526: corrupted xattr entries [ 701.044410][T25354] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9533'. [ 701.068845][T25336] EXT4-fs (loop2): Remounting filesystem read-only [ 701.234932][T22064] EXT4-fs (loop2): unmounting filesystem. [ 701.413259][T25366] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 701.815454][T25380] loop4: detected capacity change from 0 to 1024 [ 701.897084][T25380] hfsplus: keylen 65060 too large [ 702.373466][ T3644] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 702.393485][ T5211] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 702.446445][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9554'. [ 702.650006][ T5211] usb 3-1: Using ep0 maxpacket: 8 [ 702.676080][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9556'. [ 702.743924][ T3644] usb 4-1: config 0 interface 0 has no altsetting 0 [ 702.933724][ T3644] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 702.937378][ T5211] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 702.942864][ T3644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.960721][T25379] loop0: detected capacity change from 0 to 32768 [ 702.967372][ T5211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.991707][ T5211] usb 3-1: Product: syz [ 703.001927][ T5211] usb 3-1: Manufacturer: syz [ 703.008701][T25379] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 703.022413][ T5211] usb 3-1: SerialNumber: syz [ 703.027881][T25379] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 703.043161][ T3644] usb 4-1: Product: syz [ 703.059262][T25405] [U] Ò [ 703.059507][ T3644] usb 4-1: Manufacturer: syz [ 703.062809][ T5211] r8152-cfgselector 3-1: config 0 descriptor?? [ 703.093369][ T3644] usb 4-1: SerialNumber: syz [ 703.115570][T25379] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 703.144647][ T125] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 703.145615][ T3644] usb 4-1: config 0 descriptor?? [ 703.162721][ T125] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 703.216568][ T3644] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 703.249550][ T3644] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 703.293799][ T3644] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 703.301106][ T3644] usb 4-1: media controller created [ 703.310145][ T125] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 147ms [ 703.331045][ T125] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 703.338016][T25379] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 703.368381][ T3644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 703.450989][T25414] loop4: detected capacity change from 0 to 256 [ 703.475524][T25414] FAT-fs (loop4): Directory bread(block 257) failed [ 703.493500][ T3644] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 703.501913][T25414] FAT-fs (loop4): Directory bread(block 257) failed [ 703.525226][T25414] FAT-fs (loop4): Directory bread(block 257) failed [ 703.531931][T25414] FAT-fs (loop4): Directory bread(block 257) failed [ 703.553566][ T5211] r8152-cfgselector 3-1: Unknown version 0x0000 [ 703.563595][ T5211] r8152-cfgselector 3-1: bad CDC descriptors [ 703.593562][ T5211] r8152-cfgselector 3-1: Unknown version 0x0000 [ 703.612422][ T5211] r8152-cfgselector 3-1: USB disconnect, device number 41 [ 703.713597][ T3644] rc_core: IR keymap rc-twinhan1027 not found [ 703.720133][ T3644] Registered IR keymap rc-empty [ 703.750459][ T3644] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 703.795635][ T3644] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input36 [ 703.828918][ T3644] dvb-usb: schedule remote query interval to 150 msecs. [ 703.862509][ T3644] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 703.903712][ T3644] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 703.960546][ T3644] usb 4-1: USB disconnect, device number 46 [ 704.018216][T12407] m920x_read = error: -19 [ 704.023105][T12407] dvb-usb: error -19 while querying for an remote control event. [ 704.203469][ T3690] m920x_read = error: -19 [ 704.207881][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 704.386368][ T3644] m920x_read = error: -19 [ 704.390749][ T3644] dvb-usb: error -19 while querying for an remote control event. [ 704.573421][ T3690] m920x_read = error: -19 [ 704.577856][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 704.773517][ T3690] m920x_read = error: -19 [ 704.777922][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 704.973646][ T3690] m920x_read = error: -19 [ 704.978089][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 705.122749][T25455] loop2: detected capacity change from 0 to 4096 [ 705.176000][ T3644] m920x_read = error: -19 [ 705.183382][ T3644] dvb-usb: error -19 while querying for an remote control event. [ 705.212707][T25455] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 705.264327][T25455] ntfs3: loop2: Failed to load $Extend. [ 705.344023][ T3690] m920x_read = error: -19 [ 705.348429][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 705.369422][T25469] loop0: detected capacity change from 0 to 512 [ 705.429860][T25469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 705.554150][ T3690] m920x_read = error: -19 [ 705.561245][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 705.603204][T25469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 705.793542][ T3690] m920x_read = error: -19 [ 705.797948][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 705.837400][T25431] loop4: detected capacity change from 0 to 32768 [ 705.882214][ T3646] EXT4-fs (loop0): unmounting filesystem. [ 705.900380][T25431] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 705.959947][T25431] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 706.003538][ T3690] m920x_read = error: -19 [ 706.007937][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 706.019452][T25431] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 706.063553][ T3690] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 706.090723][ T3690] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 706.114302][T25491] sctp: [Deprecated]: syz.0.9597 (pid 25491) Use of int in max_burst socket option. [ 706.114302][T25491] Use struct sctp_assoc_value instead [ 706.235983][T12407] m920x_read = error: -19 [ 706.240469][T12407] dvb-usb: error -19 while querying for an remote control event. [ 706.253872][ T3690] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms [ 706.279483][ T3690] gfs2: fsid=syz:syz.0: jid=0: Done [ 706.290753][T25431] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 706.433490][ T3690] m920x_read = error: -19 [ 706.437898][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 706.545221][T25504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9606'. [ 706.643577][ T3690] m920x_read = error: -19 [ 706.647979][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 706.714476][T25510] loop4: detected capacity change from 0 to 128 [ 706.785685][T25510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 706.868971][T12407] m920x_read = error: -19 [ 706.912637][T12407] dvb-usb: error -19 while querying for an remote control event. [ 706.920939][T25510] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.9608: No space for directory leaf checksum. Please run e2fsck -D. [ 707.000091][T25510] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.9608: checksumming directory block 0 [ 707.143971][ T3690] m920x_read = error: -19 [ 707.148411][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 707.177158][ T3654] EXT4-fs (loop4): unmounting filesystem. [ 707.345359][ T3690] m920x_read = error: -19 [ 707.355980][ T3690] dvb-usb: error -19 while querying for an remote control event. [ 707.544152][T12407] m920x_read = error: -19 [ 707.548553][T12407] dvb-usb: error -19 while querying for an remote control event. [ 707.746467][T12407] m920x_read = error: -19 [ 707.750864][T12407] dvb-usb: error -19 while querying for an remote control event. [ 707.811823][T25508] loop0: detected capacity change from 0 to 32768 [ 707.880614][T25508] JBD2: Ignoring recovery information on journal [ 707.953444][T12407] m920x_read = error: -19 [ 707.957840][T12407] dvb-usb: error -19 while querying for an remote control event. [ 708.091287][T25551] loop2: detected capacity change from 0 to 136 [ 708.131252][T25508] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 708.163661][T12407] m920x_read = error: -19 [ 708.168059][T12407] dvb-usb: error -19 while querying for an remote control event. [ 708.254834][T25556] netlink: 124 bytes leftover after parsing attributes in process `syz.3.9630'. [ 708.266088][T25508] [ 708.268555][T25508] ====================================================== [ 708.271588][T25556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9630'. [ 708.275575][T25508] WARNING: possible circular locking dependency detected [ 708.275588][T25508] 6.1.114-syzkaller #0 Not tainted [ 708.275599][T25508] ------------------------------------------------------ [ 708.275607][T25508] syz.0.9607/25508 is trying to acquire lock: [ 708.275620][T25508] ffff888027608650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xd99/0x1f80 [ 708.275689][T25508] [ 708.275689][T25508] but task is already holding lock: [ 708.275696][T25508] ffff888075350660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd87/0x1f80 [ 708.275749][T25508] [ 708.275749][T25508] which lock already depends on the new lock. [ 708.275749][T25508] [ 708.275756][T25508] [ 708.275756][T25508] the existing dependency chain (in reverse order) is: [ 708.275764][T25508] [ 708.275764][T25508] -> #4 [ 708.303528][T25558] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 708.303782][T25508] (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 708.375431][T25508] lock_acquire+0x1f8/0x5a0 [ 708.380501][T25508] down_write+0x36/0x60 [ 708.385205][T25508] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 708.391739][T25508] ocfs2_xattr_set+0xa4b/0x1930 [ 708.397139][T25508] ocfs2_set_acl+0x4cb/0x570 [ 708.402289][T25508] ocfs2_iop_set_acl+0x252/0x3c0 [ 708.407799][T25508] posix_acl_xattr_set+0x37b/0x3e0 [ 708.413478][T25508] __vfs_removexattr+0x3ce/0x410 [ 708.419143][T25508] __vfs_removexattr_locked+0x1fe/0x410 [ 708.425242][T25508] vfs_removexattr+0xff/0x2a0 [ 708.430474][T25508] path_removexattr+0x22a/0x320 [ 708.435882][T25508] __x64_sys_lremovexattr+0x59/0x70 [ 708.441634][T25508] do_syscall_64+0x3b/0xb0 [ 708.446615][T25508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.453066][T25508] [ 708.453066][T25508] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 708.460947][T25508] lock_acquire+0x1f8/0x5a0 [ 708.466111][T25508] down_read+0xad/0xa30 [ 708.470828][T25508] ocfs2_init_acl+0x398/0x930 [ 708.476068][T25508] ocfs2_mknod+0x1f75/0x2e20 [ 708.481211][T25508] vfs_mknod+0x444/0x4d0 [ 708.486016][T25508] do_mknodat+0x3f8/0x5a0 [ 708.490911][T25508] __x64_sys_mknodat+0xa5/0xc0 [ 708.496238][T25508] do_syscall_64+0x3b/0xb0 [ 708.501208][T25508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.507667][T25508] [ 708.507667][T25508] -> #2 (jbd2_handle){++++}-{0:0}: [ 708.515006][T25508] lock_acquire+0x1f8/0x5a0 [ 708.520096][T25508] start_this_handle+0x1f71/0x21b0 [ 708.525773][T25508] jbd2__journal_start+0x2d1/0x5c0 [ 708.531444][T25508] jbd2_journal_start+0x25/0x30 [ 708.536858][T25508] ocfs2_start_trans+0x3c0/0x6f0 [ 708.542351][T25508] ocfs2_modify_bh+0xe9/0x4c0 [ 708.547586][T25508] ocfs2_local_read_info+0x1587/0x19e0 [ 708.553610][T25508] dquot_load_quota_sb+0x754/0xb90 [ 708.559278][T25508] dquot_load_quota_inode+0x318/0x600 [ 708.565213][T25508] ocfs2_enable_quotas+0x165/0x440 [ 708.570879][T25508] ocfs2_fill_super+0x4c7a/0x5730 [ 708.576461][T25508] mount_bdev+0x2c9/0x3f0 [ 708.581341][T25508] legacy_get_tree+0xeb/0x180 [ 708.586579][T25508] vfs_get_tree+0x88/0x270 [ 708.591551][T25508] do_new_mount+0x2ba/0xb40 [ 708.596605][T25508] __se_sys_mount+0x2d5/0x3c0 [ 708.601831][T25508] do_syscall_64+0x3b/0xb0 [ 708.606802][T25508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.613276][T25508] [ 708.613276][T25508] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 708.621827][T25508] lock_acquire+0x1f8/0x5a0 [ 708.626894][T25508] down_read+0xad/0xa30 [ 708.631605][T25508] ocfs2_start_trans+0x3b5/0x6f0 [ 708.637096][T25508] ocfs2_modify_bh+0xe9/0x4c0 [ 708.642330][T25508] ocfs2_local_read_info+0x1587/0x19e0 [ 708.648019][T25560] loop2: detected capacity change from 0 to 256 [ 708.648329][T25508] dquot_load_quota_sb+0x754/0xb90 [ 708.660219][T25508] dquot_load_quota_inode+0x318/0x600 [ 708.666152][T25508] ocfs2_enable_quotas+0x165/0x440 [ 708.671917][T25508] ocfs2_fill_super+0x4c7a/0x5730 [ 708.677506][T25508] mount_bdev+0x2c9/0x3f0 [ 708.682396][T25508] legacy_get_tree+0xeb/0x180 [ 708.687632][T25508] vfs_get_tree+0x88/0x270 [ 708.692588][T25508] do_new_mount+0x2ba/0xb40 [ 708.697621][T25508] __se_sys_mount+0x2d5/0x3c0 [ 708.702834][T25508] do_syscall_64+0x3b/0xb0 [ 708.707790][T25508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.714226][T25508] [ 708.714226][T25508] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 708.721718][T25508] validate_chain+0x1661/0x5950 [ 708.727097][T25508] __lock_acquire+0x125b/0x1f80 [ 708.732476][T25508] lock_acquire+0x1f8/0x5a0 [ 708.737508][T25508] ocfs2_start_trans+0x2b0/0x6f0 [ 708.742976][T25508] ocfs2_setattr+0xd99/0x1f80 [ 708.748180][T25508] notify_change+0xce3/0xfc0 [ 708.753294][T25508] chmod_common+0x2a7/0x4b0 [ 708.758331][T25508] __x64_sys_fchmodat+0x117/0x1a0 [ 708.763886][T25508] do_syscall_64+0x3b/0xb0 [ 708.768825][T25508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 708.775245][T25508] [ 708.775245][T25508] other info that might help us debug this: [ 708.775245][T25508] [ 708.785467][T25508] Chain exists of: [ 708.785467][T25508] sb_internal#2 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 708.785467][T25508] [ 708.799728][T25508] Possible unsafe locking scenario: [ 708.799728][T25508] [ 708.807189][T25508] CPU0 CPU1 [ 708.812548][T25508] ---- ---- [ 708.817923][T25508] lock(&ocfs2_file_ip_alloc_sem_key); [ 708.823467][T25508] lock(&oi->ip_xattr_sem); [ 708.830576][T25508] lock(&ocfs2_file_ip_alloc_sem_key); [ 708.838655][T25508] lock(sb_internal#2); [ 708.842922][T25508] [ 708.842922][T25508] *** DEADLOCK *** [ 708.842922][T25508] [ 708.851079][T25508] 3 locks held by syz.0.9607/25508: [ 708.856280][T25508] #0: ffff888027608460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 708.865540][T25508] #1: ffff8880753509c8 (&type->i_mutex_dir_key#11){+.+.}-{3:3}, at: chmod_common+0x1b7/0x4b0 [ 708.876097][T25508] #2: ffff888075350660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0xd87/0x1f80 [ 708.886812][T25508] [ 708.886812][T25508] stack backtrace: [ 708.892792][T25508] CPU: 0 PID: 25508 Comm: syz.0.9607 Not tainted 6.1.114-syzkaller #0 [ 708.900953][T25508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.911444][T25508] Call Trace: [ 708.914731][T25508] [ 708.917665][T25508] dump_stack_lvl+0x1e3/0x2cb [ 708.922353][T25508] ? nf_tcp_handle_invalid+0x642/0x642 [ 708.927915][T25508] ? print_circular_bug+0x12b/0x1a0 [ 708.933241][T25508] check_noncircular+0x2fa/0x3b0 [ 708.938182][T25508] ? add_chain_block+0x850/0x850 [ 708.943118][T25508] ? lockdep_lock+0x11f/0x2a0 [ 708.947807][T25508] ? add_lock_to_list+0x1de/0x2e0 [ 708.952832][T25508] ? _find_first_zero_bit+0xd0/0x100 [ 708.958149][T25508] validate_chain+0x1661/0x5950 [ 708.963025][T25508] ? reacquire_held_locks+0x660/0x660 [ 708.968414][T25508] ? look_up_lock_class+0x77/0x140 [ 708.973540][T25508] ? register_lock_class+0x100/0x990 [ 708.978841][T25508] ? mark_lock+0x9a/0x340 [ 708.983209][T25508] ? is_dynamic_key+0x260/0x260 [ 708.988103][T25508] ? mark_lock+0x9a/0x340 [ 708.992456][T25508] __lock_acquire+0x125b/0x1f80 [ 708.997325][T25508] lock_acquire+0x1f8/0x5a0 [ 709.001838][T25508] ? ocfs2_setattr+0xd99/0x1f80 [ 709.006705][T25508] ? read_lock_is_recursive+0x10/0x10 [ 709.012083][T25508] ? __lock_acquire+0x1f80/0x1f80 [ 709.017197][T25508] ? __might_sleep+0xb0/0xb0 [ 709.021797][T25508] ? do_raw_spin_unlock+0x137/0x8a0 [ 709.027085][T25508] ocfs2_start_trans+0x2b0/0x6f0 [ 709.032032][T25508] ? ocfs2_setattr+0xd99/0x1f80 [ 709.036895][T25508] ? ocfs2_recovery_exit+0x280/0x280 [ 709.042187][T25508] ? setattr_prepare+0x1e0/0xc20 [ 709.047152][T25508] ocfs2_setattr+0xd99/0x1f80 [ 709.051858][T25508] ? ocfs2_extend_allocation+0x1d00/0x1d00 [ 709.057689][T25508] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 709.063952][T25508] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 709.069858][T25508] ? current_time+0x1ba/0x300 [ 709.074553][T25508] ? atime_needs_update+0x7b0/0x7b0 [ 709.079763][T25508] ? common_perm_cond+0x31b/0x3f0 [ 709.084804][T25508] ? bpf_lsm_inode_setattr+0x5/0x10 [ 709.090007][T25508] ? ocfs2_extend_allocation+0x1d00/0x1d00 [ 709.095822][T25508] notify_change+0xce3/0xfc0 [ 709.100419][T25508] chmod_common+0x2a7/0x4b0 [ 709.104936][T25508] ? __ia32_sys_chroot+0x40/0x40 [ 709.109887][T25508] ? kasan_quarantine_put+0xd4/0x220 [ 709.115194][T25508] ? lockdep_hardirqs_on+0x94/0x130 [ 709.120413][T25508] ? user_path_at_empty+0x48/0x60 [ 709.125453][T25508] __x64_sys_fchmodat+0x117/0x1a0 [ 709.130493][T25508] ? __ia32_sys_fchmod+0x150/0x150 [ 709.135635][T25508] ? syscall_enter_from_user_mode+0x2e/0x230 [ 709.141624][T25508] ? lockdep_hardirqs_on+0x94/0x130 [ 709.146828][T25508] ? syscall_enter_from_user_mode+0x2e/0x230 [ 709.152819][T25508] do_syscall_64+0x3b/0xb0 [ 709.157233][T25508] ? clear_bhb_loop+0x45/0xa0 [ 709.161903][T25508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.167804][T25508] RIP: 0033:0x7f2c1597dff9 [ 709.172231][T25508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.191833][T25508] RSP: 002b:00007f2c16817038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 709.200251][T25508] RAX: ffffffffffffffda RBX: 00007f2c15b35f80 RCX: 00007f2c1597dff9 [ 709.208223][T25508] RDX: 00000000fffffed3 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 709.216196][T25508] RBP: 00007f2c159f0296 R08: 0000000000000000 R09: 0000000000000000 [ 709.224167][T25508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.232140][T25508] R13: 0000000000000000 R14: 00007f2c15b35f80 R15: 00007fff758ca9d8 [ 709.240116][T25508] [ 709.246425][T12407] m920x_read = error: -19 [ 709.250802][T12407] dvb-usb: error -19 while querying for an remote control event. [ 709.280066][ T3646] ocfs2: Unmounting device (7,0) on (node local) [ 709.443366][T12407] m920x_read = error: -19 [ 709.455817][T12407] dvb-usb: error -19 while querying for an remote control event. [ 709.465198][T25560] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 709.643398][T12407] m920x_read = error: -19 [ 709.647787][T12407] dvb-usb: error -19 while querying for an remote control event. [ 709.823428][T12407] m920x_read = error: -19 [ 709.827815][T12407] dvb-usb: error -19 while querying for an remote control event. [ 709.993417][T12407] m920x_read = error: -19 [ 709.997811][T12407] dvb-usb: error -19 while querying for an remote control event. [ 710.164899][T12407] m920x_read = error: -19 [ 710.169298][T12407] dvb-usb: error -19 while querying for an remote control event. [ 710.344001][T12407] m920x_read = error: -19 [ 710.348462][T12407] dvb-usb: error -19 while querying for an remote control event. [ 710.523413][T12407] m920x_read = error: -19 [ 710.527805][T12407] dvb-usb: error -19 while querying for an remote control event. [ 710.693484][T12407] m920x_read = error: -19 [ 710.697881][T12407] dvb-usb: error -19 while querying for an remote control event. [ 710.863417][T12407] m920x_read = error: -19 [ 710.867908][T12407] dvb-usb: error -19 while querying for an remote control event. [ 711.043392][T12407] m920x_read = error: -19 [ 711.047787][T12407] dvb-usb: error -19 while querying for an remote control event. [ 711.213955][T12407] m920x_read = error: -19 [ 711.218344][T12407] dvb-usb: error -19 while querying for an remote control event. [ 711.385810][T12407] m920x_read = error: -19 [ 711.390460][T12407] dvb-usb: error -19 while querying for an remote control event. [ 711.573488][T12407] m920x_read = error: -19 [ 711.577886][T12407] dvb-usb: error -19 while querying for an remote control event. [ 711.743404][T12407] m920x_read = error: -19 [ 711.747800][T12407] dvb-usb: error -19 while querying for an remote control event. [ 711.913492][T12407] m920x_read = error: -19 [ 711.917954][T12407] dvb-usb: error -19 while querying for an remote control event. [ 712.083486][T12407] m920x_read = error: -19 [ 712.087952][T12407] dvb-usb: error -19 while querying for an remote control event. [ 712.253406][T12407] m920x_read = error: -19 [ 712.257808][T12407] dvb-usb: error -19 while querying for an remote control event. [ 712.423966][T12407] m920x_read = error: -19 [ 712.428351][T12407] dvb-usb: error -19 while querying for an remote control event. [ 712.593489][T12407] m920x_read = error: -19 [ 712.597908][T12407] dvb-usb: error -19 while querying for an remote control event. [ 712.763386][T12407] m920x_read = error: -19 [ 712.767769][T12407] dvb-usb: error -19 while querying for an remote control event. [ 712.933370][T12407] m920x_read = error: -19 [ 712.938015][T12407] dvb-usb: error -19 while querying for an remote control event. [ 713.103410][T12407] m920x_read = error: -19 [ 713.107854][T12407] dvb-usb: error -19 while querying for an remote control event. [ 713.273532][T12407] m920x_read = error: -19 [ 713.277986][T12407] dvb-usb: error -19 while querying for an remote control event. [ 713.443487][T24793] m920x_read = error: -19 [ 713.450627][T24793] dvb-usb: error -19 while querying for an remote control event. [ 713.615014][T24793] m920x_read = error: -19 [ 713.619401][T24793] dvb-usb: error -19 while querying for an remote control event. [ 713.783444][T24793] m920x_read = error: -19 [ 713.787836][T24793] dvb-usb: error -19 while querying for an remote control event. [ 713.953375][T24793] m920x_read = error: -19 [ 713.957832][T24793] dvb-usb: error -19 while querying for an remote control event. [ 714.123399][T24793] m920x_read = error: -19 [ 714.127789][T24793] dvb-usb: error -19 while querying for an remote control event. [ 714.293361][T24793] m920x_read = error: -19 [ 714.297747][T24793] dvb-usb: error -19 while querying for an remote control event. [ 714.463519][T12407] m920x_read = error: -19 [ 714.467968][T12407] dvb-usb: error -19 while querying for an remote control event. [ 714.633464][T12407] m920x_read = error: -19 [ 714.637914][T12407] dvb-usb: error -19 while querying for an remote control event. [ 714.803416][T12407] m920x_read = error: -19 [ 714.807807][T12407] dvb-usb: error -19 while querying for an remote control event. [ 714.973366][T12407] m920x_read = error: -19 [ 714.977763][T12407] dvb-usb: error -19 while querying for an remote control event. [ 715.143402][T12407] m920x_read = error: -19 [ 715.147888][T12407] dvb-usb: error -19 while querying for an remote control event. [ 715.313368][T12407] m920x_read = error: -19 [ 715.317817][T12407] dvb-usb: error -19 while querying for an remote control event. [ 715.484849][T24793] m920x_read = error: -19 [ 715.489262][T24793] dvb-usb: error -19 while querying for an remote control event. [ 715.653457][T24793] m920x_read = error: -19 [ 715.657833][T24793] dvb-usb: error -19 while querying for an remote control event. [ 715.825663][T12407] m920x_read = error: -19 [ 715.830111][T12407] dvb-usb: error -19 while querying for an remote control event. [ 715.993381][T12407] m920x_read = error: -19 [ 715.997787][T12407] dvb-usb: error -19 while querying for an remote control event. [ 716.163399][T12407] m920x_read = error: -19 [ 716.167833][T12407] dvb-usb: error -19 while querying for an remote control event. [ 716.334194][T12407] m920x_read = error: -19 [ 716.338579][T12407] dvb-usb: error -19 while querying for an remote control event. [ 716.503394][T24793] m920x_read = error: -19 [ 716.507771][T24793] dvb-usb: error -19 while querying for an remote control event. [ 716.673373][T12407] m920x_read = error: -19 [ 716.677816][T12407] dvb-usb: error -19 while querying for an remote control event. [ 716.843508][T12407] m920x_read = error: -19 [ 716.848450][T12407] dvb-usb: error -19 while querying for an remote control event. [ 717.013407][T24793] m920x_read = error: -19 [ 717.017870][T24793] dvb-usb: error -19 while querying for an remote control event. [ 717.183490][T24793] m920x_read = error: -19 [ 717.187938][T24793] dvb-usb: error -19 while querying for an remote control event. [ 717.354776][T24793] m920x_read = error: -19 [ 717.359598][T24793] dvb-usb: error -19 while querying for an remote control event. [ 717.523401][T24793] m920x_read = error: -19 [ 717.527790][T24793] dvb-usb: error -19 while querying for an remote control event. [ 717.693578][T24793] m920x_read = error: -19 [ 717.698121][T24793] dvb-usb: error -19 while querying for an remote control event. [ 717.863505][T24793] m920x_read = error: -19 [ 717.868000][T24793] dvb-usb: error -19 while querying for an remote control event. [ 718.033359][T24793] m920x_read = error: -19 [ 718.037755][T24793] dvb-usb: error -19 while querying for an remote control event. [ 718.203482][T24793] m920x_read = error: -19 [ 718.207880][T24793] dvb-usb: error -19 while querying for an remote control event.