last executing test programs: 5.003757406s ago: executing program 4 (id=7183): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000180)={[{@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@sys_tz}, {@gid}, {@utf8}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@umask={'umask', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x1}}]}, 0x1, 0x1505, &(0x7f0000002c80)="$eJzs3Au8jdXWMPAx5pwPm6SV5D7HHA8ruUySJJeEXJIkSZLcEpIkSUJyyy0JScg95B6SW0ju9/s9SY4kSUJCkvn9VOd1ztd7vvrec77Pe949/r/fs/cc+1ljrPGssfdaz3p+e+9v2g2sVKdy+VrMDP8U/PVTVwBIAYA+AHAdAEQAUCxTsUyX96fT2PWfuxPxr/Xw1KvdgbiaZP6pm8w/dZP5p24y/9RN5p+6yfxTN5l/6ibzFyI12zot+/Wypd7tz1//d//n3XL9/9+QvP7/j/WnftJk/qmbzD91k/mnbjL/1E3mn7rJ/FM3mX/qJvMXIjW72tef/w22vz5UV7uPP9ii/1Le1f3uE0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRWpwPVxgA+Ov6avclhBBCCCGEEEKIf52Q9mp3IIQQQgghhBBCiP/3EMBoMNFf43SQHq6BDHAtZITrIAHXQya4ATLDjZAFskI2yA45ICfkAgsEDhhiyA15IAk3QV64GfJBfigABcFDISgMt0ARuBWKwm1QDGYvBLgDSkBJKAWl4U4oA3dBWSgH5eFuqAAVoRJUhnugCtwLVeE+qAb3Q3V4AGrAg1ATHoJa8DDUhkegDjwKdeExqAf1oQE0hEb/pfyXoBO8DJ2hC3SFbtAdXoEe0BN6QW/oA69CX3gN+sHr0B8GwEB4AwbBmzAY3oIhMBSGwdswHEbASBgFo2EMjIV3YByMhwnwLkyESTAZpsBUmAbT4T2YATNhFrwPs+EDmANzYR7MhwXwISyERbAYPoIl8DEshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO2AW7YU+5vfAJ7INPYT98Bgfg8//L/HPw9/ntERBQoUKDBtNgGkzBFEyP6TEDZsCMmBETmMBMmAkzY2bMglkwG2bDHJgDc2EuJCRkZMyNuTGJScyLeTEf5sMCWAA9eiyMhbEI3opFsSgWw2JYHItjCSyJJbE0lsYyWAbLYlksf8dcAKyAlbAS3oP34L1YFatiNayG1bE61sAaWBNrYi2shbWxNtbBOlgX62I9rIcNsAE2wkbYGBtjE2yCzbAZNsfm2AJbYEtsia2wFbbG1tgG22BbbIvtsB22xw7YAV/Cl/BlfBm7YAXVDbtjd+yBPbAX9sbe+Cr2xdfwNXwd++MAHIhv4Bv4Jg7GszgEh+IwHIZl1AgciaOQ1Rgci2NxHI7DCTgBJ+IknIRTcCpOw+k4HWfgTJyJ7+Ns/AA/wLk4F+fjAlyAC3ERLsbFuATP4VJchstxBa7EVbgS1+BaXIPrcQOux024CbfgFtyG23AH7sBduAv34B78BD/BT/FT7I8H8AAexIN4CA/hYTyMR/AIHsWj264BwON4HE/gCTyJp/A0nsIzeAbP4jk8j+fxAl7Ai/hCjq9q78m/rj+oy4wyKo1Ko1JUikqv0qsMKoPKqDKqhEqoTCqTyqwyqywqi8qmsqkcKofKpXIpUqRYxSq3yq2SKqnyqrwqn8qnCqgCyiuvCqvCqogqooqqoqqYul0VV3eoEqqkaupLq9KqjGrmy6pyqrwqryqoiqqSqqwqqyqqiqqqqqpqqpqqrqqrGupBVVN1w174sLo8mTpqANZVA7Geqq8aqIbqTXxcNVaDsYlqqpqpJ9VQHIItVGPfUj2jWqmR2Fo9p0bh86qtGoPt1IuqveqgOqqXVCfVxHdWXdRE7Ka6qynYQ/VUvVRvNQMrqssTq6ReV/3VADVQvaHm45tqsHpLDVFD1TD1thquRqiRapQarcaoseodNU6NVxPUu2qimqQmqylqqpqmpqv31Aw1U81S76vZ6gM1R81V89R8tUB9qBaqRWqx+kgtUR+rpWqZWq5WqJVqlVqt1qi1ap1arzaojWqT2qy2qK1qm9qudqidapfarfaoveoTtU99qvarz9QB9bk6qP6iDqkv1GH1pTqivlJH1dfqmPpGHVffqhOqizqpTqnT6nt1Rv2gzqpz6rz6UV1QP6mL6md1SQUFGrXSWhsd6TQ6rU7R6XR6fY3OoK/VGfV1OqGv15n0DTqzvlFn0Vl1Np1d59A5dS5tNWmnWcc6t86jk/omnVffrPPp/LqALqi9LqQL61t0EX2rLqpv08X07bq4vkOX0CV1KV1a36nL6Lt0WV1Ol9d36wq6oq6kK+t7dBV9r66q79PV9P26un5A19AP6pr6IV1LP6xr60d0Hf2orqsf0/V0fd1AN9SN9OO6sX5CN9FNdTP9pG6un9It9NO6pX5Gt9LP6tb6Od1GP6/b6hd0O/2ibq876I76Z31JB91Zd9FddTfdXb+ie+ieupfurfvoV3Vf/Zrup1/X/fUAPVC/oQfpN/Vg/ZYeoofqYfptPVyP0CP1KD1aj9Fj9Tt6nB6vJ+h39UQ9SU/WU/RUPU33+q3SrD+RP/4/ye/3y71v0Vv1Nr1d79A79S69W+/Re/VevU/v0/v1fn1AH9AH9UF9SB/Sh/VhfUQf0Uf1UX1MH9PH9XF9Qp/QJ/Up/aP+Xp/RP+iz+pw+p3/UF/QFffG3xwAMGmW0MSYyaUxak2LSmfTmGpPBXGsymutMwlxvMpkbTGZzo8lisppsJrvJYXKaXMYaMs6wiU1uk8ckzU0mr7nZ5DP5TQFT0HhTyBQ2t/zT+f+gvxWTfz1ZMY1MI9PYNDZNTBPTzDQzzU1z08K0MC1NS9PKtDKtTWvTxrQxbU1b0860M+1Ne9PRdDSdTCfTGcF0NV1Nd/OK6WF6ml6mt+ljXjV9TV/Tz/Qz/U1/M9AMNIPMIDPYDDZDzBBjAGC4GW5GmpFmtBltxpqxZpwZZyaYCWaimWgmm8lmqplqppvpZoaZYWaZWWa2mW3mmDlmnplnFpgFZqFZaBabxWaJWWKWmmVmmVlhVphVZpVZY9aYdWad2WA2mE1mk1lqtpqtZrvZbnaanWa32W32mr1mn9ln9pv95oA5YA6ag+aQOWQOm8PmiDlijpqj5pg5Zo6b4+aEOWFOmpPmtDltzpgz5qw5a86b8+aCuWAumovmkrlkIIJIRSoykYnSRGmilCglSh+ljzJEGaKMUcYoESWiTFGmKHN0Y5Qlyhpli7JHOaKcUa7IRhS5iKM4yh3liZLRTVHe6OYoX5Q/KhAVjHxUKCoc3RIViW6Nika3RcWi26Pi0R1RiahkVCoqHd0ZlYnuispG5aLy0d1RhahiVCmqHN0TVYnujapG90XVovuj6tEDUY3owahm9FBUK3o4qh09EtWJHo3qRo9F9aL6UYOoYdToX1o/hLNZn/CdbRebFrrZ7vYV28P2tL1sb9vHvmr72tdsP/u67W8H2IH2DTvIvmkH27fsEDvUDrNv2+F2hB1pR9nRdowda9+x4+x4O8G+ayfaSXaynWKn2ml2un3PzrAz7Sz7vp1tP7Bz7Fw7z863C+yHdqFdZBfbj+wS+7FdapfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wq32e12h91pd9nddo/daz+x++yndr/9zB6wn9uDNuW38/kv7RH7lT1qv7bH7Df2uP3WnrDf2ZP2lD1tv7dn7A/2rD1nz9sf7QX7k71of7aXbLh8cn/55Z0MGUpDaSiFUig9pacMlIEyUkZKUIIyUSbKTJkpC2WhbJSNclAOykW56DImptyUm5KUpLyUl/JRPipABciTp8JUmIpQESpKRakYFaPiVJxKUAkqRaXoTrqT7qK7qByVo7vpbqpIFakyVaYqVIWqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9agBNaBG1IgaU2NqQk2oGTWj5tScWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UkfqRJ2oM3WmrtSVulN36kE9qBf1oj7Uh/pSX+pH/ag/9aeBNJAG0SAaTINpCA2lYfQ2DacRNJJG0WgaQ2NpLI2jcTSBJtBEmkiTaTJNpak0nabTDJpBs2gWzabZNIfm0DyaRwtoAS2khbSYFtMSWkJLaSktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22n7bSTdtJu2k17aS/to320n/bTATpAB+kgHaJDdJgO0xE6QkfpKB2jY3ScjtMJOkEn6SSdptN0hs7QWTpL5+k8XaCf6CL9TJcoUIpL59K7a1wGd63L6K5z/3uczWV3OVxOl8tZl8Vl/buYnHP5XH5XwBV03hVyhd0tv4tLuJKulCvt7nRl3F2u7O/iKmt3/vqL6O5+V9nd46q4e11Vd5+r5u531d0DroZ71NV0j7larr6r7Rq6Ou5RV9c95uq5+q6Ba+iau6dcC/e0a+meca3cs7+LF7pFbq1b59a7DW6f+9Sddz+6Y+4bd8H95Dq7Lq6Pe9X1da+5fu51198N+F08zL3thrsRbqQb5Ua7Mb+LJ7spbqqb5qa799wMN/N38QL3oZvtFrs5bq6b5+b/El/uabH7yC1xH7ulbplb7la4lW6VW+3W/EevK9wmt9ltcXvdJ2672+F2ul1ut9vzS3z5OPa7z9wB97k76r52h9wX7rA77o64r36JLx/fcfetO+G+cyfdKXfafe/OuB/cWXful+O/fOzfu5/dJRccMLJizYYjTsNpOYXTcXq+hjPwtZyRr+MEX8+Z+AbOzDdyFs7K2Tg75+CcnIstEztmjjk35+Ek38R5+WbOx/m5ABdkz4W4MN/CRfhWLsq3cTG+nYvzHVyCS3IpLs13chm+i8tyOS7Pd3MFrsiVuDLfw1X4Xq7K93E1vp+r8wNcgx/kmvwQ1+KHuTY/wnX4Ua7Lj3E9rs8NuCE34se5MT/BTbgpN+MnuTk/9evTYRHgVvwst+bnuA0/z235BW7HL3J77sAd+SXuxC9zZ+7CXbkbd+dXuAf35F7cm/vwq9yXX+N+/Dr35wE8kN/gQfwmD+a3eAgP5WH8Ng/nETySR/FoHsNj+R0ex+N5Ar/LE3kST+YpPJWn8XR+j2fwTJ7F7/Ns/oDn8Fyex/N5AX/IC3kRL+aPeAl/zEt5GS/nFbySV/FqXsNreR2v5w28kTfxZt7CW3kbb+cdjLyLd/Me3suf8D7+lPfzZ3yAP+eD/Bc+xF/wYf6Sj/BXfJS/5mP8DR/nb/kEf8cn+RSf5u/5DP/AZ/kcn+cf+QL/xBf5Z77EgSHGWMU6NnEUp4nTxilxujh9fE2cIb42zhhfFyfi6+NM8Q1x5vjGOEucNc4WZ49zxDnjXLGNKXYxx3GcO84TJ+Ob4rzxzXG+OH9cIC4Y+7hQXDi+JS4S3xoXjW+Li8W3x8XjO+ISccn40ftLx3fGZeK74rJxubh8fHdcIa4YV4orx/fEVeJ746rxfXG1+P64aPxAXCN+MK4ZPxTXih+Oa8ePxHXiR+O68WNxvbh+3CBuGDeKH48bx0/ETeKmcbP4ybh5/FTcIn46bhk/E7eKn/3D/V3jbnH3+JX4lTiE+/S85PzkguSHyYXJRcnFyY+SS5IfJ5cmlyWXJ1ckVyZXJVcn1yTXJtcl1yc3JDcmNyU3J7ckQ6icFjx65bU3PvJpfFqf4tP59P4an8Ff6zP663zCX+8z+Rt8Zn+jz+Kz+mw+u8/hc/pc3nryzrOPfW6fxyf9TT6vv9nn8/l9AV/Qe1/IF/YNfSPfyDf2T/gmvqlv5p/0T/qn/FP+af+0f8a38s/61v4538Y/79v6F/wL/kXf3nfwHf1LvpN/2Xf2XXxX39V39919D9/D9/K9fB/fx/f1fX0/38/39/39QD/QD/KD/GA/2A/xQ/wwP8wP98P9SD/Sj/aj/Vg/1o/z4/wEP8FP9BP9ZD/ZT/VT/XQ/3c/wM/wsP8vPzjfbz/Fz/Dw/zy/wC/xCv9Av9ov9Er/EL/VL/XK/3K/0K/1qv9qv9Wv9er/eb/Qb/Wa/2W/1W/12v93v9Dv9br/b7/V7/T6/z+/3+/0Bf8Af9AfPB3/IH/Zf+iP+K3/Uf+2P+W/8cf+tP+G/8yf9KX/af+/P+B/8WX/On/c/+gv+J3/R/+wv+eDHJt5JjEuMT0xIvJuYmJiUmJyYkpiamJaYnngvMSMxMzEr8X5iduKDxJzE3MS8xPzEgsSHiYWJRYnFiY8SSxIfJ5YmliWWJ1YkViZWJULIuT0OuUOekAw3hbzh5pAv5A8FQsHgQ6FQONwSioRbQ9FwWygWbg/Fwx2hRCgZSoXHQr1QPzQIDUOj8HhoHJ4ITULT0Cw8GZqHp0KL8HRoGZ4JrcKzoXV4LrQJz4e24YXQLrwY2ocOoWN4KXQKL4fOQYeuoVvoHl4JPULP0Cv0Dn3Cq6FveC30C6+H/mFAGBjeCIPCm2FweCsMCUPDsPB2GB5GhJFhVBgdxoSx4Z0wLowPE8K7YWKYFCaHKWFqmBamh/fCjDAzzArvh9nhgzAnzA3zwvywIHwYFoZFYXH4KCwJH4elYVlYHlYESFkVVoc1YW1YF9aHDWFj2BQ2hy1ha9gWtocdYWfYFXaHPWFv+CTsC5+G/eGzcCB8Hg6Gv4RD4YtwOHwZjoSvwtHwdTgWvgnHw7fhRPgunAynwunwfTgTfghnw7lwPvwYLoSfwsXwc7gkf7MmhBBCCPGnjP+D/d3+LlL/8VH99pXuAHDtjuxH/vZWGgA2Zvl13VPlaJ4AgGe6tHv4r1uFCl27dv3ttks1RHnmAkDiSn4auBIvg2bwFLSEplDkP+2vp+pwgf+gfvJ2gPR/k5MCV+Ir9W/9B/VHzP7D+nMB8uW5kpMOrsRX6hf9Xe3ol/pZG/9B/XRfjAVo8jd5GeBKfKV+YXgCnoWWf3dLIYQQQgghhBDiVz1VqTZ/9P728vvzHOZKTlq4Ev/R+3MhhBBCCCGEEEJcfc936Pj04y1bNm3zDxbl/vEuWaSWRZr/Hm382y8A/lu08ecWV/uZSQghhBBCCPGvduWk/2p3IoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpF7/P/6d2NU+RiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOJq+18BAAD//6/mMEE=") rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4.286879611s ago: executing program 4 (id=7193): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4000000, &(0x7f0000000000)={[{@nolazytime}, {@grpquota}, {@lazytime}]}, 0xff, 0x98d0, &(0x7f0000013040)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 3.976018577s ago: executing program 3 (id=7198): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x0, 0x1, 0xfe, 0x0}) 3.714002815s ago: executing program 3 (id=7203): r0 = syz_open_dev$video(&(0x7f0000000240), 0x81, 0xa082) ioctl$VIDIOC_G_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xd, @sdr={0x0, 0x4000000}}) 3.501160239s ago: executing program 0 (id=7206): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f00000001c0)=ANY=[], 0x4, 0xf82, &(0x7f0000000f00)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 3.451743185s ago: executing program 3 (id=7208): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001a148b442bbd7000fcdbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x84) 3.136170722s ago: executing program 3 (id=7212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x3e}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x342}}]}, 0x154}}, 0x0) 2.945418394s ago: executing program 5 (id=7215): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) 2.891738598s ago: executing program 3 (id=7216): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000880)={@id={0x2, 0x0, @b}, 0x5d, 0x0, '\x00', @b}) 2.801662395s ago: executing program 5 (id=7217): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 2.674328647s ago: executing program 0 (id=7219): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d7, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x4003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000001]}) 2.245558501s ago: executing program 0 (id=7223): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) 2.207082405s ago: executing program 5 (id=7225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x29, 0xb, 0x70bd27, 0x4000, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="78a449a0"]}]}, 0x1c}}, 0x4040080) 2.091760017s ago: executing program 4 (id=7226): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x5) 2.09106779s ago: executing program 3 (id=7227): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000180)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@resv_level={'resv_level', 0x3d, 0x3}}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7ffffffc, 0x7ff, 0x200000fffe, 0xfffffffffffffffe, 0x5, 0x2000, 0x1}) 1.946289324s ago: executing program 0 (id=7229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 1.839500497s ago: executing program 2 (id=7230): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000380)="5ed4", 0x2}], 0x1) 1.719335009s ago: executing program 5 (id=7231): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0x1, 0xffff}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.704830399s ago: executing program 1 (id=7232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "000000fd80"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x500}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) 1.522365431s ago: executing program 2 (id=7233): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1000007ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752424760608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 1.464045655s ago: executing program 0 (id=7234): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000ac0), 0x4) 1.463653237s ago: executing program 1 (id=7235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.372343102s ago: executing program 5 (id=7236): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100024f27101004233b025c7bf9cce0610902120001060780ff0904"], 0xfffffffffffffffe) flock(0xffffffffffffffff, 0x1) 1.282292343s ago: executing program 0 (id=7237): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000380)={[{@gqnoenforce}, {@nodiscard}, {@pquota}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000005c00)={0x6, 0xfff, 0x6, 0x8000000000000001, 0x2, 0x9, 0xd7, 0x80004, 0x4040c405}) 1.195987085s ago: executing program 2 (id=7238): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@uni_xlateno}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8no}, {@fat=@showexec}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@rodir}, {@utf8}, {@fat=@debug}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlateno}, {@uni_xlate}]}, 0x35, 0x353, &(0x7f0000000840)="$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") chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) 1.189752432s ago: executing program 4 (id=7239): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r0, 0x7b3, &(0x7f0000000080)) 1.120550868s ago: executing program 1 (id=7240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, 0x0, 0x30, 0x1d, @void}, 0x10) 934.970416ms ago: executing program 4 (id=7241): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 810.167893ms ago: executing program 1 (id=7242): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpgid(0x0) 503.67249ms ago: executing program 1 (id=7243): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x5}) 501.843305ms ago: executing program 2 (id=7244): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 274.012371ms ago: executing program 2 (id=7245): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xc, 0x0, 0x0, @generic}) 195.787744ms ago: executing program 2 (id=7246): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) time(0x0) 194.627601ms ago: executing program 4 (id=7247): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000000)) 160.930356ms ago: executing program 1 (id=7248): sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) sigaltstack(0x0, &(0x7f0000000340)={0x0}) 0s ago: executing program 5 (id=7249): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000240)={0x0, 0x2d207b81, 0x9, 0x1, 0x3}) kernel console output (not intermixed with test programs): 1: encryption failed: -22 [ 733.465990][T18915] lo speed is unknown, defaulting to 1000 [ 733.569074][T18915] lo speed is unknown, defaulting to 1000 [ 733.590976][T18915] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 733.673657][T18915] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 733.898193][T18915] lo speed is unknown, defaulting to 1000 [ 733.975234][T18929] loop5: detected capacity change from 0 to 2048 [ 733.993619][T18915] lo speed is unknown, defaulting to 1000 [ 734.048914][T18929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.085153][T18929] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 734.181423][T18915] lo speed is unknown, defaulting to 1000 [ 734.205996][ T6374] Bluetooth: hci6: BCM: Reset failed (-71) [ 734.215973][ T6545] usb 4-1: USB disconnect, device number 16 [ 734.226924][T18915] lo speed is unknown, defaulting to 1000 [ 734.302049][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.311995][T18915] lo speed is unknown, defaulting to 1000 [ 734.320008][T18915] lo speed is unknown, defaulting to 1000 [ 734.583205][ T30] audit: type=1326 audit(2000524887.520:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 734.665900][ T30] audit: type=1326 audit(2000524887.520:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 734.713728][ T6545] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 734.779994][ T30] audit: type=1326 audit(2000524887.520:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 734.818329][T18960] netlink: 'syz.0.5647': attribute type 4 has an invalid length. [ 734.861419][ T30] audit: type=1326 audit(2000524887.548:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 734.898080][T18960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5647'. [ 734.898127][ T6545] usb 4-1: Using ep0 maxpacket: 8 [ 734.945545][ T6545] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 734.965001][ T30] audit: type=1326 audit(2000524887.548:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 734.973866][T18965] loop4: detected capacity change from 0 to 64 [ 734.996933][ T6545] usb 4-1: config 0 has no interface number 0 [ 735.043304][T18960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 735.058049][ T6545] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 735.067782][ T6545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.090211][ T30] audit: type=1326 audit(2000524887.548:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 735.133419][ T6545] usb 4-1: Product: syz [ 735.163590][ T6545] usb 4-1: Manufacturer: syz [ 735.193305][ T6545] usb 4-1: SerialNumber: syz [ 735.226592][ T6545] usb 4-1: config 0 descriptor?? [ 735.275939][ T30] audit: type=1326 audit(2000524887.548:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 735.296144][T18967] loop5: detected capacity change from 0 to 4096 [ 735.347180][ T6545] as10x_usb: device has been detected [ 735.353436][ T6545] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 735.409570][ T30] audit: type=1326 audit(2000524887.557:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18951 comm="syz.5.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 735.497296][ T6545] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 735.583203][ T6545] as10x_usb: error during firmware upload part1 [ 735.590133][ T6545] Registered device PCTV Systems picoStick (74e) [ 735.738912][T13654] usb 4-1: USB disconnect, device number 17 [ 735.802402][T13654] Unregistered device PCTV Systems picoStick (74e) [ 735.822624][T13654] as10x_usb: device has been disconnected [ 736.137555][T18993] loop4: detected capacity change from 0 to 1024 [ 736.252826][T18993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.300602][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5663'. [ 736.430412][T18993] EXT4-fs warning (device loop4): ext4_rmdir:3184: inode #11: comm syz.4.5659: empty directory 'file1' has too many links (111) [ 736.615998][T19011] loop5: detected capacity change from 0 to 16 [ 736.654640][T19012] openvswitch: netlink: Message has 9 unknown bytes. [ 736.668966][T19011] erofs (device loop5): mounted with root inode @ nid 36. [ 736.732156][ T6380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.275514][T19028] loop5: detected capacity change from 0 to 512 [ 737.338187][T19028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 737.390526][T19028] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 737.398454][T19028] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 737.442802][T19028] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 737.452287][T19028] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 737.467569][T19028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 737.647627][T19028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 737.686405][T19028] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 737.905873][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.153241][T19058] loop5: detected capacity change from 0 to 256 [ 738.227130][T19058] exfat: Deprecated parameter 'utf8' [ 738.296804][T19058] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 738.964409][T19036] loop3: detected capacity change from 0 to 32768 [ 740.820932][T19141] loop4: detected capacity change from 0 to 256 [ 740.881611][T19144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5718'. [ 740.922857][T19141] FAT-fs (loop4): Directory bread(block 1285) failed [ 741.055968][T19150] usb usb8: usbfs: process 19150 (syz.0.5721) did not claim interface 0 before use [ 741.076856][T19141] FAT-fs (loop4): Directory bread(block 1285) failed [ 741.126940][T19141] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 741.195375][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5722'. [ 741.576857][T19162] netlink: 'syz.3.5725': attribute type 4 has an invalid length. [ 741.627905][T19162] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5725'. [ 741.659570][T19162] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 741.683578][T19166] loop0: detected capacity change from 0 to 2048 [ 741.742953][T19166] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 741.819879][T19166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 742.028528][T19175] loop5: detected capacity change from 0 to 164 [ 742.116043][T19175] rock: directory entry would overflow storage [ 742.157314][T19175] rock: sig=0x4543, size=28, remaining=18 [ 742.580053][T19185] loop0: detected capacity change from 0 to 2048 [ 742.680249][T19185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.725357][T19193] loop5: detected capacity change from 0 to 1764 [ 742.883343][T19185] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 743.032573][ T6369] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 743.104676][ T6369] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 743.208622][ T6362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.438512][T19221] netlink: 'syz.5.5742': attribute type 1 has an invalid length. [ 743.471942][T19221] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5742'. [ 744.120531][T19248] loop2: detected capacity change from 0 to 1764 [ 744.511591][T19262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 744.587316][T19265] loop5: detected capacity change from 0 to 256 [ 744.805580][T19270] capability: warning: `syz.0.5766' uses 32-bit capabilities (legacy support in use) [ 744.849019][T19265] FAT-fs (loop5): Directory bread(block 64) failed [ 744.892538][T19265] FAT-fs (loop5): Directory bread(block 65) failed [ 744.914659][T19265] FAT-fs (loop5): Directory bread(block 66) failed [ 744.981360][T19265] FAT-fs (loop5): Directory bread(block 67) failed [ 744.987999][T19265] FAT-fs (loop5): Directory bread(block 68) failed [ 745.047828][T19265] FAT-fs (loop5): Directory bread(block 69) failed [ 745.077467][T19265] FAT-fs (loop5): Directory bread(block 70) failed [ 745.111287][T19265] FAT-fs (loop5): Directory bread(block 71) failed [ 745.117932][T19265] FAT-fs (loop5): Directory bread(block 72) failed [ 745.121508][T19276] loop0: detected capacity change from 0 to 256 [ 745.169846][T19265] FAT-fs (loop5): Directory bread(block 73) failed [ 745.188386][T19276] FAT-fs (loop0): count of clusters too big (178174) [ 745.214408][T19276] FAT-fs (loop0): Can't find a valid FAT filesystem [ 745.360081][T19281] netlink: 'syz.1.5771': attribute type 8 has an invalid length. [ 745.394295][T19279] loop4: detected capacity change from 0 to 1764 [ 745.406141][T19234] loop3: detected capacity change from 0 to 32768 [ 745.464213][T19234] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 745.499304][T19279] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 745.507103][ T24] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 745.593713][T19234] XFS (loop3): Ending clean mount [ 745.654692][T19234] XFS (loop3): Quotacheck needed: Please wait. [ 745.699819][ T24] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 745.739667][ T24] usb 1-1: config 0 has no interface number 1 [ 745.750893][T19234] XFS (loop3): Quotacheck: Done. [ 745.760438][ T24] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 745.799707][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 745.847528][T19301] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5776'. [ 745.857177][ T24] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 745.878552][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 745.886580][ T24] usb 1-1: SerialNumber: syz [ 745.933359][ T24] usb 1-1: config 0 descriptor?? [ 746.179007][ T24] uvcvideo 1-1:0.199: Found UVC 0.00 device (0002:0000) [ 746.186738][ T6377] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 746.259689][ T24] uvcvideo 1-1:0.199: No valid video chain found. [ 746.335161][ T24] usb 1-1: USB disconnect, device number 121 [ 746.359851][T19307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 746.420919][T19307] block device autoloading is deprecated and will be removed. [ 746.532574][T19309] loop4: detected capacity change from 0 to 4096 [ 746.607512][T19314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 746.988711][T19326] loop3: detected capacity change from 0 to 512 [ 747.021722][T19329] netlink: 'syz.1.5788': attribute type 4 has an invalid length. [ 747.021753][T19329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5788'. [ 747.057951][T19329] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 747.207477][T19335] loop4: detected capacity change from 0 to 128 [ 747.220686][T19335] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 747.223052][T19335] hpfs: filesystem error: improperly stopped [ 747.223083][T19335] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 747.223112][T19335] hpfs: You really don't want any checks? You are crazy... [ 747.223519][T19335] hpfs: hpfs_map_sector(): read error [ 747.223538][T19335] hpfs: code page support is disabled [ 747.223664][T19335] hpfs: hpfs_map_4sectors(): unaligned read [ 747.223816][T19335] hpfs: hpfs_map_4sectors(): unaligned read [ 747.223836][T19335] hpfs: filesystem error: unable to find root dir [ 747.936762][T19356] loop1: detected capacity change from 0 to 2048 [ 747.974642][T19356] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=26504, location=26504 [ 748.008495][T19356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.660063][ T30] audit: type=1326 audit(2000524900.691:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 748.774414][ T30] audit: type=1326 audit(2000524900.709:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 748.807452][T19382] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5815'. [ 748.855968][ T30] audit: type=1326 audit(2000524900.709:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 748.945394][ T30] audit: type=1326 audit(2000524900.709:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 749.055475][ T30] audit: type=1326 audit(2000524900.691:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 749.150216][ T30] audit: type=1326 audit(2000524900.709:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 749.242885][T19348] loop3: detected capacity change from 0 to 32768 [ 749.252050][ T30] audit: type=1326 audit(2000524900.709:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 749.352845][ T30] audit: type=1326 audit(2000524900.709:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 749.375107][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.411981][T19348] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 749.498174][ T30] audit: type=1326 audit(2000524900.719:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.4.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 749.588329][T19348] XFS (loop3): Ending clean mount [ 749.704216][T19366] loop0: detected capacity change from 0 to 32768 [ 749.769009][T19366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5807 (19366) [ 749.830362][T19366] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 749.875203][T19366] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 749.908520][ T6377] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 750.134942][T19366] BTRFS info (device loop0): enabling ssd optimizations [ 750.141955][T19366] BTRFS info (device loop0): enabling free space tree [ 750.196245][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5830'. [ 750.615410][T19439] loop2: detected capacity change from 0 to 4096 [ 750.778821][T19439] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 750.830163][T19439] ntfs3(loop2): Failed to load $Extend (-22). [ 750.836291][T19439] ntfs3(loop2): Failed to initialize $Extend. [ 750.870164][ T6362] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 751.047413][T19446] loop1: detected capacity change from 0 to 2048 [ 751.099242][T19452] loop3: detected capacity change from 0 to 64 [ 751.130472][T19446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.575080][T19458] Illegal XDP return value 3617973934 on prog (id 312) dev N/A, expect packet loss! [ 752.494579][ T24] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 752.676353][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 752.686601][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 752.707278][ T24] usb 2-1: config 0 has no interface number 0 [ 752.734964][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 752.771250][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 752.797311][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 752.809141][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 752.863020][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 752.889442][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.920377][ T24] usb 2-1: config 0 descriptor?? [ 752.984444][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 753.068635][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5856'. [ 753.084552][T19490] nvme_fabrics: missing parameter 'transport=%s' [ 753.091629][T19490] nvme_fabrics: missing parameter 'nqn=%s' [ 753.091797][T19488] loop5: detected capacity change from 0 to 2048 [ 753.155522][T19488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 753.272724][ T24] usb 2-1: USB disconnect, device number 122 [ 753.293250][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 753.359801][T19468] loop2: detected capacity change from 0 to 32768 [ 753.425825][T19468] (syz.2.5845,19468,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 753.499467][T19468] (syz.2.5845,19468,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 753.685303][T19468] JBD2: Ignoring recovery information on journal [ 753.773546][T19468] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 754.047571][T19518] loop4: detected capacity change from 0 to 64 [ 754.117106][T19523] netlink: 'syz.1.5870': attribute type 1 has an invalid length. [ 754.120786][T19522] QAT: Device 7 not found [ 754.148685][ T6363] ocfs2: Unmounting device (7,2) on (node local) [ 754.148710][T19518] hfs: filesystem is marked locked, mounting read-only. [ 754.282929][T19525] loop0: detected capacity change from 0 to 256 [ 754.283125][T19518] hfs: filesystem is marked locked, leaving read-only. [ 754.518046][T19525] FAT-fs (loop0): Directory bread(block 64) failed [ 754.571009][T19525] FAT-fs (loop0): Directory bread(block 65) failed [ 754.578178][T19525] FAT-fs (loop0): Directory bread(block 66) failed [ 754.629634][T19525] FAT-fs (loop0): Directory bread(block 67) failed [ 754.651389][T19525] FAT-fs (loop0): Directory bread(block 68) failed [ 754.696841][T19525] FAT-fs (loop0): Directory bread(block 69) failed [ 754.703453][T19525] FAT-fs (loop0): Directory bread(block 70) failed [ 754.751845][T19525] FAT-fs (loop0): Directory bread(block 71) failed [ 754.795758][T19525] FAT-fs (loop0): Directory bread(block 72) failed [ 754.802320][T19525] FAT-fs (loop0): Directory bread(block 73) failed [ 754.953524][T19544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5880'. [ 755.340694][T19553] loop2: detected capacity change from 0 to 1764 [ 755.369803][T19557] loop3: detected capacity change from 0 to 256 [ 755.435814][T19553] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 755.515666][T19557] FAT-fs (loop3): Directory bread(block 64) failed [ 755.531361][T19557] FAT-fs (loop3): Directory bread(block 65) failed [ 755.565398][T19557] FAT-fs (loop3): Directory bread(block 66) failed [ 755.571992][T19557] FAT-fs (loop3): Directory bread(block 67) failed [ 755.616764][T19557] FAT-fs (loop3): Directory bread(block 68) failed [ 755.658975][T19557] FAT-fs (loop3): Directory bread(block 69) failed [ 755.701799][T19557] FAT-fs (loop3): Directory bread(block 70) failed [ 755.708384][T19557] FAT-fs (loop3): Directory bread(block 71) failed [ 755.787536][T19557] FAT-fs (loop3): Directory bread(block 72) failed [ 755.830056][T19557] FAT-fs (loop3): Directory bread(block 73) failed [ 756.384312][T19586] loop2: detected capacity change from 0 to 65 [ 756.438119][T19586] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 756.455755][T19586] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 756.471908][T19588] loop0: detected capacity change from 0 to 1024 [ 756.574032][T19588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.716268][T19559] loop5: detected capacity change from 0 to 32768 [ 756.793278][T19593] loop1: detected capacity change from 0 to 4096 [ 756.990406][ T6362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.161766][T19606] netlink: 'syz.3.5912': attribute type 6 has an invalid length. [ 757.372545][T19612] loop4: detected capacity change from 0 to 256 [ 757.549788][T19612] FAT-fs (loop4): Directory bread(block 64) failed [ 757.561885][T19612] FAT-fs (loop4): Directory bread(block 65) failed [ 757.604760][T19612] FAT-fs (loop4): Directory bread(block 66) failed [ 757.638308][T19612] FAT-fs (loop4): Directory bread(block 67) failed [ 757.644963][T19612] FAT-fs (loop4): Directory bread(block 68) failed [ 757.701494][T19612] FAT-fs (loop4): Directory bread(block 69) failed [ 757.731918][T19612] FAT-fs (loop4): Directory bread(block 70) failed [ 757.775836][T19612] FAT-fs (loop4): Directory bread(block 71) failed [ 757.782500][T19612] FAT-fs (loop4): Directory bread(block 72) failed [ 757.840559][T19622] netlink: 'syz.1.5919': attribute type 1 has an invalid length. [ 757.857012][T19612] FAT-fs (loop4): Directory bread(block 73) failed [ 757.864284][T19626] netlink: 'syz.2.5920': attribute type 1 has an invalid length. [ 757.897922][T19626] netlink: 'syz.2.5920': attribute type 6 has an invalid length. [ 757.931197][T19626] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5920'. [ 758.266369][T19637] loop5: detected capacity change from 0 to 64 [ 758.294994][T19637] syz.5.5911: attempt to access beyond end of device [ 758.294994][T19637] loop5: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 758.481320][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 758.559279][T19646] loop4: detected capacity change from 0 to 256 [ 758.663048][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 758.680903][ T24] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 758.698597][ T24] usb 3-1: config 0 has no interface number 0 [ 758.737340][ T24] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 758.780533][ T24] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 758.845263][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 758.885930][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.922438][ T24] usb 3-1: Product: syz [ 758.926655][ T24] usb 3-1: Manufacturer: syz [ 758.953319][ T24] usb 3-1: SerialNumber: syz [ 758.987096][ T24] usb 3-1: config 0 descriptor?? [ 759.250977][ T43] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 759.262110][ T24] radio-si470x 3-1:0.35: this is not a si470x device. [ 759.443603][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 759.457439][T19674] netlink: 'syz.5.5944': attribute type 1 has an invalid length. [ 759.465595][ T43] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 759.485651][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.496574][ T24] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 759.531423][ T24] usb 3-1: USB disconnect, device number 8 [ 759.552333][ T43] usb 2-1: config 0 descriptor?? [ 759.589205][ T43] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 759.656356][T19680] bad cache= option: no%e [ 759.656356][T19680] [ 759.714120][T19680] CIFS: VFS: bad cache= option: no%e [ 759.745855][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5949'. [ 759.767955][T19684] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 759.788605][ T43] usb 2-1: Detected FT232B [ 759.806602][ T5822] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 759.921151][T19688] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5951'. [ 760.004340][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 760.013294][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 760.026616][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 760.048572][ T5822] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 760.058311][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.059866][ T43] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 760.100165][ T5822] usb 5-1: config 0 descriptor?? [ 760.144660][ T43] usb 2-1: USB disconnect, device number 123 [ 760.174576][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 760.231030][T19697] loop2: detected capacity change from 0 to 8 [ 760.265963][ T43] ftdi_sio 2-1:0.0: device disconnected [ 760.365819][ T5822] ath6kl: Failed to submit usb control message: -71 [ 760.383641][ T5822] ath6kl: unable to send the bmi data to the device: -71 [ 760.408099][ T5822] ath6kl: Unable to send get target info: -71 [ 760.424444][ T5822] ath6kl: Failed to init ath6kl core: -71 [ 760.447003][ T5822] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 760.498248][ T5822] usb 5-1: USB disconnect, device number 8 [ 761.158211][T19719] comedi comedi0: comedi_config --init_data is deprecated [ 761.448100][T19733] loop1: detected capacity change from 0 to 64 [ 761.521292][T19733] hfs: filesystem is marked locked, mounting read-only. [ 761.537939][T19735] loop5: detected capacity change from 0 to 1024 [ 761.557518][T19735] EXT4-fs: Ignoring removed bh option [ 761.568766][T19733] hfs: filesystem is marked locked, leaving read-only. [ 761.577577][T19735] EXT4-fs: inline encryption not supported [ 761.585021][T19735] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 761.626368][T19735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 761.733755][T19745] loop2: detected capacity change from 0 to 16 [ 761.737871][T19735] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.5974: lblock 2 mapped to illegal pblock 2 (length 1) [ 761.787898][T19745] erofs (device loop2): mounted with root inode @ nid 36. [ 761.822518][T19741] loop0: detected capacity change from 0 to 4096 [ 761.833069][T19735] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 761.841451][T19747] loop4: detected capacity change from 0 to 64 [ 761.859503][T19735] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.5974: lblock 0 mapped to illegal pblock 48 (length 1) [ 761.928975][T19741] ntfs3(loop0): MFT: r=b, expect seq=b instead of 1ff! [ 761.942039][T19747] Trying to free block not in datazone [ 761.950167][T19735] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 761.960166][T19747] Trying to free block not in datazone [ 761.965745][T19741] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 761.972791][T19735] EXT4-fs error (device loop5): ext4_acquire_dquot:6941: comm syz.5.5974: Failed to acquire dquot type 0 [ 762.009533][T19747] Trying to free block not in datazone [ 762.024623][T19741] ntfs3(loop0): Failed to load $Extend (-22). [ 762.042650][T19747] Trying to free block not in datazone [ 762.054427][T19735] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 762.068269][T19741] ntfs3(loop0): Failed to initialize $Extend. [ 762.076832][T19747] minix_free_block (loop4:6): bit already cleared [ 762.099802][T19747] Trying to free block not in datazone [ 762.112287][T19735] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5974: mark_inode_dirty error [ 762.153350][T19747] Trying to free block not in datazone [ 762.183797][T19735] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 762.276889][T19735] EXT4-fs (loop5): 1 orphan inode deleted [ 762.299923][ T36] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 762.321511][T19735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.376111][ T36] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 762.427783][ T36] EXT4-fs error (device loop5): ext4_release_dquot:6977: comm kworker/u8:2: Failed to release dquot type 0 [ 762.476062][T19735] EXT4-fs error (device loop5): __ext4_get_inode_loc:4860: comm syz.5.5974: Invalid inode table block 1 in block_group 0 [ 762.555746][T19735] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 762.590459][T19761] loop2: detected capacity change from 0 to 764 [ 762.648018][T19761] rock: directory entry would overflow storage [ 762.686662][T19761] rock: sig=0x5245, size=8, remaining=5 [ 762.806943][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.824354][T17516] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 762.877365][T17516] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 762.919772][T17516] EXT4-fs error (device loop5): ext4_release_dquot:6977: comm kworker/u8:3: Failed to release dquot type 0 [ 762.972080][ T6369] EXT4-fs error (device loop5): __ext4_get_inode_loc:4860: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 763.035703][ T6369] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 763.058652][T19775] IPv6: NLM_F_CREATE should be specified when creating new route [ 763.067932][ T6369] EXT4-fs error (device loop5): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error [ 763.101191][T19779] CIFS: iocharset name too long [ 763.321469][T19785] loop5: detected capacity change from 0 to 512 [ 763.406538][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5999'. [ 763.443413][T19785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.516600][T19785] ext4 filesystem being mounted at /951/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 763.910107][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.687917][T19831] loop0: detected capacity change from 0 to 4096 [ 765.163385][T19849] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 765.738132][T19871] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6039'. [ 765.845305][T19876] netlink: 'syz.5.6041': attribute type 2 has an invalid length. [ 766.008330][T19881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.048749][ T43] lo speed is unknown, defaulting to 1000 [ 766.056507][ T43] syz0: Port: 1 Link DOWN [ 766.062104][T19877] loop3: detected capacity change from 0 to 4096 [ 766.167156][T19839] loop2: detected capacity change from 0 to 32768 [ 766.184514][T19886] overlayfs: cannot append lower layer [ 766.249389][T19839] jfs_lookup: iget failed on inum 32 [ 766.280360][T19839] jfs_lookup: iget failed on inum 32 [ 766.692488][T19898] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 767.076441][T13654] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 767.217416][T19914] process 'syz.4.6059' launched './file0' with NULL argv: empty string added [ 767.270298][T13654] usb 2-1: Using ep0 maxpacket: 8 [ 767.298237][T13654] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 767.339813][T13654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.365390][T13654] usb 2-1: Product: syz [ 767.369612][T13654] usb 2-1: Manufacturer: syz [ 767.393789][T13654] usb 2-1: SerialNumber: syz [ 767.485660][T13654] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 767.492420][T19924] loop5: detected capacity change from 0 to 8 [ 767.937904][T13654] gspca_m5602: Failed to find a sensor [ 767.952992][T13654] ALi m5602 2-1:8.0: ALi m5602 webcam failed [ 767.985357][T13654] usb 2-1: USB disconnect, device number 124 [ 768.077110][T19945] CIFS: iocharset name too long [ 768.237348][T19939] loop3: detected capacity change from 0 to 4096 [ 768.264739][T19939] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 768.354971][T19939] ntfs3(loop3): ino=19, mi_enum_attr [ 768.394332][T19939] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 768.476988][T19939] ntfs3(loop3): failed to convert "c46c" to cp1250 [ 768.551700][T19939] ntfs3(loop3): ino=20, mi_enum_attr [ 768.689692][T19960] loop4: detected capacity change from 0 to 8 [ 768.895290][ T5822] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 769.052929][T19974] loop5: detected capacity change from 0 to 2048 [ 769.095868][T19974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.136544][ T5822] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 769.147947][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.184044][ T5822] usb 3-1: config 0 descriptor?? [ 769.228765][ T5822] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 769.314601][T19984] loop1: detected capacity change from 0 to 256 [ 769.365244][T19984] exfat: Deprecated parameter 'utf8' [ 769.391476][T19984] exfat: Deprecated parameter 'namecase' [ 769.423274][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.458827][T19984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 769.661317][ T5822] gp8psk: usb in 138 operation failed. [ 769.699777][ T5822] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 769.737653][ T5822] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 769.782482][ T5822] usb 3-1: USB disconnect, device number 9 [ 770.160838][T20005] loop0: detected capacity change from 0 to 64 [ 770.433295][T20013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6107'. [ 770.572336][T20007] loop1: detected capacity change from 0 to 4096 [ 770.598017][T20007] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 770.824722][T20025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6112'. [ 771.576353][T20050] loop5: detected capacity change from 0 to 2048 [ 771.670803][T20050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.912278][T20065] syz.4.6132: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 771.973255][T20065] CPU: 1 UID: 0 PID: 20065 Comm: syz.4.6132 Not tainted syzkaller #0 PREEMPT(full) [ 771.973304][T20065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.973327][T20065] Call Trace: [ 771.973339][T20065] [ 771.973353][T20065] dump_stack_lvl+0x16c/0x1f0 [ 771.973400][T20065] warn_alloc+0x248/0x3a0 [ 771.973458][T20065] ? __pfx_warn_alloc+0x10/0x10 [ 771.973514][T20065] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.973553][T20065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.973615][T20065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.973659][T20065] ? kasan_save_stack+0x42/0x60 [ 771.973692][T20065] ? kasan_save_stack+0x33/0x60 [ 771.973723][T20065] ? kasan_save_track+0x14/0x30 [ 771.973757][T20065] ? xskq_create+0x52/0x1d0 [ 771.973812][T20065] ? xsk_setsockopt+0x74e/0x9a0 [ 771.973864][T20065] ? do_sock_setsockopt+0xf3/0x1d0 [ 771.973916][T20065] ? xskq_create+0xfb/0x1d0 [ 771.973980][T20065] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 771.974044][T20065] ? xskq_create+0xfb/0x1d0 [ 771.974114][T20065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 771.974178][T20065] ? xskq_create+0xfb/0x1d0 [ 771.974236][T20065] vmalloc_user_noprof+0x9e/0xe0 [ 771.974280][T20065] ? xskq_create+0xfb/0x1d0 [ 771.974339][T20065] xskq_create+0xfb/0x1d0 [ 771.974401][T20065] xsk_setsockopt+0x74e/0x9a0 [ 771.974453][T20065] ? __pfx_aa_sk_perm+0x10/0x10 [ 771.974514][T20065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 771.974567][T20065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.974612][T20065] ? find_held_lock+0x2b/0x80 [ 771.974672][T20065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.974716][T20065] ? aa_sock_opt_perm+0xfd/0x1c0 [ 771.974758][T20065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 771.974816][T20065] do_sock_setsockopt+0xf3/0x1d0 [ 771.974872][T20065] __sys_setsockopt+0x1a0/0x230 [ 771.974919][T20065] __x64_sys_setsockopt+0xbd/0x160 [ 771.974956][T20065] ? do_syscall_64+0x91/0x4e0 [ 771.974995][T20065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.975040][T20065] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.975078][T20065] do_syscall_64+0xcd/0x4e0 [ 771.975124][T20065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.975161][T20065] RIP: 0033:0x7fe2d618eec9 [ 771.975190][T20065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.975227][T20065] RSP: 002b:00007fe2d6fb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 771.975262][T20065] RAX: ffffffffffffffda RBX: 00007fe2d63e5fa0 RCX: 00007fe2d618eec9 [ 771.975288][T20065] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 771.975310][T20065] RBP: 00007fe2d6211f91 R08: 0000000000000004 R09: 0000000000000000 [ 771.975335][T20065] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.975359][T20065] R13: 00007fe2d63e6038 R14: 00007fe2d63e5fa0 R15: 00007ffc28aa43f8 [ 771.975409][T20065] [ 771.975422][T20065] Mem-Info: [ 772.074261][ T6369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.300334][T20027] loop0: detected capacity change from 0 to 40427 [ 772.330481][T20027] F2FS-fs: heap/no_heap options were deprecated [ 772.351040][T20065] active_anon:14202 inactive_anon:0 isolated_anon:0 [ 772.351040][T20065] active_file:3406 inactive_file:51122 isolated_file:0 [ 772.351040][T20065] unevictable:768 dirty:517 writeback:0 [ 772.351040][T20065] slab_reclaimable:11430 slab_unreclaimable:102594 [ 772.351040][T20065] mapped:36287 shmem:6405 pagetables:1482 [ 772.351040][T20065] sec_pagetables:0 bounce:0 [ 772.351040][T20065] kernel_misc_reclaimable:0 [ 772.351040][T20065] free:1284804 free_pcp:7347 free_cma:0 [ 772.396363][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.424031][T20027] F2FS-fs (loop0): build fault injection rate: 23 [ 772.431719][T20027] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 772.438821][T20065] Node 0 active_anon:55508kB inactive_anon:0kB active_file:13624kB inactive_file:202884kB unevictable:4336kB isolated(anon):0kB isolated(file):0kB mapped:145148kB dirty:2064kB writeback:0kB shmem:24084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12616kB pagetables:5688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 772.525568][T20027] F2FS-fs (loop0): invalid crc value [ 772.540128][T20065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 772.617061][T20027] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x207/0xfe0 [ 772.646561][T20065] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 772.676531][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.758193][T20065] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 772.788110][T20065] Node 0 DMA32 free:1208844kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56944kB inactive_anon:0kB active_file:13552kB inactive_file:204676kB unevictable:1536kB writepending:2068kB zspages:0kB present:3129332kB managed:2548184kB mlocked:0kB bounce:0kB free_pcp:23632kB local_pcp:11500kB free_cma:0kB [ 772.821640][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.853432][T20065] lowmem_reserve[]: 0 0 0 0 0 [ 772.881956][T20065] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 772.977522][T20065] lowmem_reserve[]: 0 0 0 0 0 [ 772.983929][T20065] Node 1 Normal free:3915272kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4736kB local_pcp:2560kB free_cma:0kB [ 773.016241][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.080999][T20065] lowmem_reserve[]: 0 0 0 0 0 [ 773.089709][T20027] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 773.097482][T20065] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 773.120873][T20065] Node 0 DMA32: 1167*4kB (UME) 711*8kB (UME) 800*16kB (UME) 810*32kB (UME) 585*64kB (UME) 290*128kB (UM) 97*256kB (UM) 29*512kB (M) 9*1024kB (UME) 2*2048kB (UM) 252*4096kB (UM) = 1208820kB [ 773.150481][T20065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 773.153096][T20027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 773.170004][T20065] Node 1 Normal: 162*4kB (UE) 46*8kB (UME) 35*16kB (UME) 221*32kB (UME) 99*64kB (UME) 25*128kB (UME) 9*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3915272kB [ 773.239114][T20065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.256416][T20065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 773.298193][T20065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 773.307776][T20065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 773.317834][T20027] F2FS-fs (loop0): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x64/0x240 [ 773.339562][T20065] 60871 total pagecache pages [ 773.349501][T20065] 0 pages in swap cache [ 773.354393][T20065] Free swap = 124996kB [ 773.358551][T20065] Total swap = 124996kB [ 773.372495][T20065] 2097051 pages RAM [ 773.380618][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 773.402928][T20065] 0 pages HighMem/MovableOnly [ 773.426944][T20065] 428363 pages reserved [ 773.431111][T20065] 0 pages cma reserved [ 773.588984][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 773.635725][ T43] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 773.645491][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.656009][T20100] loop2: detected capacity change from 0 to 4096 [ 773.674004][ T43] usb 4-1: Product: syz [ 773.679890][ T43] usb 4-1: Manufacturer: syz [ 773.704499][ T43] usb 4-1: SerialNumber: syz [ 773.725030][T20100] ntfs3(loop2): MFT: r=b, expect seq=b instead of 1ff! [ 773.740848][T20100] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 773.749504][ T43] usb 4-1: config 0 descriptor?? [ 773.789538][T20100] ntfs3(loop2): Failed to load $Extend (-22). [ 773.801936][T20100] ntfs3(loop2): Failed to initialize $Extend. [ 773.987275][ T43] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 774.001999][ T43] eb 9a 47 80 9b f8 7a f0 [ 774.014487][ T43] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 774.229107][T20115] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6155'. [ 774.250723][ T24] usb 4-1: USB disconnect, device number 18 [ 774.271666][T20115] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6155'. [ 774.471506][T20121] netlink: 'syz.2.6159': attribute type 21 has an invalid length. [ 774.581518][T20126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6149'. [ 775.522651][T20164] netlink: 'syz.2.6179': attribute type 1 has an invalid length. [ 775.530413][T20164] netlink: 'syz.2.6179': attribute type 1 has an invalid length. [ 775.791315][T20172] loop5: detected capacity change from 0 to 24 [ 775.832477][T20172] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 775.843803][T20172] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 776.092538][T20184] loop1: detected capacity change from 0 to 64 [ 776.696686][T20154] loop4: detected capacity change from 0 to 32768 [ 776.753612][T20154] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6174 (20154) [ 776.826437][T20154] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 776.858164][T20154] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 776.899880][T20208] sit1: entered promiscuous mode [ 777.075707][T20154] BTRFS info (device loop4): enabling ssd optimizations [ 777.137516][T20154] BTRFS info (device loop4): enabling free space tree [ 777.337488][T20154] BTRFS info (device loop4): balance: start -susage=34359738372,drange=7..107,limit=3330..0 [ 777.384025][T20154] BTRFS info (device loop4): balance: ended with status: 0 [ 777.769143][ T6380] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 777.916569][T20260] netlink: 'syz.1.6218': attribute type 1 has an invalid length. [ 777.984297][T20261] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6220'. [ 778.240024][T20266] delete_channel: no stack [ 778.412593][T20276] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 778.438127][T20272] loop1: detected capacity change from 0 to 2048 [ 778.464962][ T30] audit: type=1326 audit(2000524928.566:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 778.509464][T20272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.518565][T20276] bond0: (slave lo): Error: Device type is different from other slaves [ 778.569890][ T30] audit: type=1326 audit(2000524928.566:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 778.693260][T20283] loop3: detected capacity change from 0 to 512 [ 778.695094][ T30] audit: type=1326 audit(2000524928.613:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 778.781933][T20283] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 778.813743][ T30] audit: type=1326 audit(2000524928.613:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 778.891876][T20283] EXT4-fs (loop3): 1 truncate cleaned up [ 778.925875][ T30] audit: type=1326 audit(2000524928.613:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20274 comm="syz.5.6226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda4f8eec9 code=0x7ffc0000 [ 778.954266][T20283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.028416][T20289] loop0: detected capacity change from 0 to 256 [ 779.042119][T20289] exfat: Deprecated parameter 'utf8' [ 779.063222][T20289] exfat: Deprecated parameter 'namecase' [ 779.065902][T20283] EXT4-fs error (device loop3): ext4_find_dest_de:2051: inode #2: block 13: comm syz.3.6230: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 779.150361][T20289] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 779.264476][T20295] veth0_to_bond: entered promiscuous mode [ 779.374100][ T6377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.564575][T20308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6241'. [ 779.588285][T20309] bpf: Bad value for 'mode' [ 779.859936][T20305] loop5: detected capacity change from 0 to 4096 [ 779.888587][T20305] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 779.934862][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6246'. [ 779.965054][T20305] ntfs3(loop5): ino=19, mi_enum_attr [ 779.986277][T20305] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 780.087959][T20305] ntfs3(loop5): failed to convert "c46c" to cp1250 [ 780.102811][T20305] ntfs3(loop5): ino=20, mi_enum_attr [ 780.681497][T20337] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6256'. [ 780.835630][T20341] loop5: detected capacity change from 0 to 256 [ 780.884051][T20341] exfat: Deprecated parameter 'namecase' [ 780.932017][T20341] exfat: Deprecated parameter 'namecase' [ 780.937707][T20341] exfat: Deprecated parameter 'namecase' [ 781.016693][T20341] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 781.110429][T20341] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 781.302262][T20353] loop0: detected capacity change from 0 to 256 [ 781.479895][T20353] FAT-fs (loop0): Directory bread(block 64) failed [ 781.486461][T20353] FAT-fs (loop0): Directory bread(block 65) failed [ 781.519308][T20353] FAT-fs (loop0): Directory bread(block 66) failed [ 781.588744][T20353] FAT-fs (loop0): Directory bread(block 67) failed [ 781.605998][T20353] FAT-fs (loop0): Directory bread(block 68) failed [ 781.612531][T20353] FAT-fs (loop0): Directory bread(block 69) failed [ 781.661196][T20353] FAT-fs (loop0): Directory bread(block 70) failed [ 781.667736][T20353] FAT-fs (loop0): Directory bread(block 71) failed [ 781.711688][T20353] FAT-fs (loop0): Directory bread(block 72) failed [ 781.718224][T20353] FAT-fs (loop0): Directory bread(block 73) failed [ 781.799010][T20370] loop1: detected capacity change from 0 to 2048 [ 781.832716][T20370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 781.918175][ T30] audit: type=1800 audit(2000524931.793:46): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6272" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 782.228395][T20381] sit1: entered promiscuous mode [ 784.444799][T20472] loop1: detected capacity change from 0 to 2048 [ 784.512860][T20472] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 784.587170][ T30] audit: type=1326 audit(2000524934.291:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20480 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 784.589603][T20472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 784.731073][ T30] audit: type=1326 audit(2000524934.291:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20480 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 784.833180][ T30] audit: type=1326 audit(2000524934.328:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20480 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 784.834827][T20488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6330'. [ 784.940258][T20488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6330'. [ 784.957477][ T30] audit: type=1326 audit(2000524934.328:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20480 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 785.062135][ T30] audit: type=1326 audit(2000524934.328:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20480 comm="syz.4.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 785.272537][T20496] bond2: entered allmulticast mode [ 785.278126][T20496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.520272][T20509] loop0: detected capacity change from 0 to 8 [ 785.625936][T20509] SQUASHFS error: Failed to read block 0x636: -5 [ 785.656430][T20509] SQUASHFS error: Unable to read metadata cache entry [634] [ 785.699465][T20509] SQUASHFS error: Unable to read metadata cache entry [634] [ 785.706794][T20509] SQUASHFS error: Unable to read directory block [629:0] [ 785.861581][T20491] loop4: detected capacity change from 0 to 32768 [ 785.898665][T20491] (syz.4.6332,20491,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 785.938780][T20519] loop2: detected capacity change from 0 to 164 [ 785.983217][T20491] (syz.4.6332,20491,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 786.045236][T20519] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 786.086719][T20491] JBD2: Ignoring recovery information on journal [ 786.096056][T20528] loop0: detected capacity change from 0 to 16 [ 786.174577][T20528] erofs (device loop0): mounted with root inode @ nid 36. [ 786.188507][T20528] erofs (device loop0): inconsistent algorithmtype 0 for nid 36 [ 786.196472][T20528] erofs (device loop0): inconsistent algorithmtype 0 for nid 36 [ 786.204161][T20528] erofs (device loop0): read error -117 @ 72 of nid 36 [ 786.340605][T20491] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 786.358473][T20533] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6351'. [ 786.552218][T20539] netlink: 'syz.0.6353': attribute type 4 has an invalid length. [ 786.592531][T20539] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6353'. [ 786.798235][ T6380] ocfs2: Unmounting device (7,4) on (node local) [ 786.969619][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 787.014175][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 787.291031][T20559] loop3: detected capacity change from 0 to 1764 [ 787.373607][T20559] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 787.514595][T20565] loop2: detected capacity change from 0 to 2048 [ 787.566267][T20565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.612730][ T30] audit: type=1800 audit(2000524937.125:52): pid=20565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6368" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 787.630198][T20571] tmpfs: User quota block hardlimit too large. [ 787.719016][T20573] veth0_to_bond: entered promiscuous mode [ 788.157693][T20585] loop1: detected capacity change from 0 to 256 [ 788.259375][T20585] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 788.768255][T20607] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 788.773400][T20599] loop0: detected capacity change from 0 to 4096 [ 788.793643][T20599] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 788.960930][T20599] ntfs3(loop0): ino=1a, mi_enum_attr [ 789.000016][T20599] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 789.080647][T20616] netlink: 'syz.3.6390': attribute type 9 has an invalid length. [ 789.122598][T20616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6390'. [ 789.448814][T20626] loop4: detected capacity change from 0 to 16 [ 789.503265][T20626] erofs (device loop4): mounted with root inode @ nid 36. [ 789.986041][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 789.998243][T20649] random: crng reseeded on system resumption [ 790.023234][T20650] loop3: detected capacity change from 0 to 16 [ 790.067800][T20646] loop5: detected capacity change from 0 to 2048 [ 790.072737][T20650] erofs (device loop3): mounted with root inode @ nid 36. [ 790.109925][T20646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 790.174198][ T30] audit: type=1800 audit(2000524939.520:53): pid=20646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6406" name="file1" dev="loop5" ino=1367 res=0 errno=0 [ 790.176444][T20650] erofs (device loop3): bogus dirent @ nid 36 [ 790.242618][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.266440][ T43] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.304918][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.314447][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.360442][ T43] usb 3-1: Product: syz [ 790.392191][ T43] usb 3-1: Manufacturer: syz [ 790.396825][ T43] usb 3-1: SerialNumber: syz [ 790.473102][ T43] cdc_ncm 3-1:1.0: skipping garbage [ 790.488438][ T43] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 790.512587][ T43] cdc_ncm 3-1:1.0: bind() failure [ 790.608359][ T43] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 790.638279][ T43] cdc_ncm 3-1:1.1: bind() failure [ 790.701234][T20668] netlink: 'syz.1.6415': attribute type 3 has an invalid length. [ 790.730304][ T43] usb 3-1: USB disconnect, device number 10 [ 790.745050][T20668] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6415'. [ 790.917307][ T5822] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 791.152654][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 791.160232][ T5822] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 791.191118][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.249136][ T5822] usb 4-1: config 0 descriptor?? [ 791.299885][ T5822] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 791.445746][T20691] loop4: detected capacity change from 0 to 64 [ 791.516469][ T5822] usb 4-1: Detected FT232A [ 791.535259][ T5822] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 791.763107][ T5822] usb 4-1: USB disconnect, device number 19 [ 791.806194][ T5822] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 791.841052][ T5822] ftdi_sio 4-1:0.0: device disconnected [ 792.161166][T20708] loop2: detected capacity change from 0 to 128 [ 792.178911][T20708] befs: (loop2): No write support. Marking filesystem read-only [ 792.199507][T20708] befs: (loop2): invalid magic header [ 792.324197][T20686] loop1: detected capacity change from 0 to 32768 [ 792.361307][T20686] (syz.1.6421,20686,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 792.416915][T20686] (syz.1.6421,20686,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 792.464964][T20686] JBD2: Ignoring recovery information on journal [ 792.545722][T20686] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 792.580790][T20720] loop3: detected capacity change from 0 to 1024 [ 792.612109][T20720] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 792.749453][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6438'. [ 792.915046][T20729] binder: 20728:20729 unknown command 0 [ 792.923932][T20729] binder: 20728:20729 ioctl c0306201 200000000480 returned -22 [ 792.972088][ T6364] ocfs2: Unmounting device (7,1) on (node local) [ 793.541847][T20748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6448'. [ 793.599919][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6448'. [ 793.742092][T20754] loop1: detected capacity change from 0 to 16 [ 793.782194][T20754] erofs (device loop1): mounted with root inode @ nid 36. [ 793.838872][T20754] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 793.989816][T20762] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6457'. [ 794.223841][T20766] sit1: entered allmulticast mode [ 794.567218][T20742] loop3: detected capacity change from 0 to 32768 [ 794.689983][T20742] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6446 (20742) [ 794.722190][T20783] netlink: 'syz.5.6468': attribute type 10 has an invalid length. [ 794.754124][T20742] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 794.764299][T20742] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 794.806307][T20783] team0: Port device dummy0 added [ 795.074411][T20742] BTRFS info (device loop3): enabling ssd optimizations [ 795.122224][T20742] BTRFS info (device loop3): enabling free space tree [ 795.397590][T20820] loop5: detected capacity change from 0 to 16 [ 795.438331][T20820] erofs (device loop5): mounted with root inode @ nid 36. [ 795.452118][ T6377] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 795.497449][T20820] erofs (device loop5): bogus dirent @ nid 36 [ 795.662733][T20824] netlink: 'syz.2.6480': attribute type 10 has an invalid length. [ 795.694970][T20824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6480'. [ 795.765624][T20824] team0: Port device geneve0 added [ 798.223947][T20910] netlink: 'syz.3.6521': attribute type 8 has an invalid length. [ 798.438057][T20917] loop5: detected capacity change from 0 to 256 [ 798.603578][T20917] FAT-fs (loop5): Directory bread(block 64) failed [ 798.634667][T20917] FAT-fs (loop5): Directory bread(block 65) failed [ 798.704025][T20917] FAT-fs (loop5): Directory bread(block 66) failed [ 798.742076][T20917] FAT-fs (loop5): Directory bread(block 67) failed [ 798.748708][T20917] FAT-fs (loop5): Directory bread(block 68) failed [ 798.810391][T20917] FAT-fs (loop5): Directory bread(block 69) failed [ 798.841823][T20917] FAT-fs (loop5): Directory bread(block 70) failed [ 798.878600][T20917] FAT-fs (loop5): Directory bread(block 71) failed [ 798.921214][T20917] FAT-fs (loop5): Directory bread(block 72) failed [ 798.975338][T20917] FAT-fs (loop5): Directory bread(block 73) failed [ 799.099072][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 799.106904][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 799.224781][ T30] audit: type=1326 audit(2000524947.994:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.4.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 799.335904][ T30] audit: type=1326 audit(2000524947.994:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.4.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 799.440813][ T30] audit: type=1326 audit(2000524948.041:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.4.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 799.556983][ T30] audit: type=1326 audit(2000524948.041:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.4.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 799.668407][ T30] audit: type=1326 audit(2000524948.041:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.4.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d618eec9 code=0x7ffc0000 [ 800.080701][ T43] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 800.178281][T20984] loop0: detected capacity change from 0 to 64 [ 800.291611][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 800.304680][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 800.377530][ T43] usb 2-1: config 4 has an invalid interface number: 146 but max is 0 [ 800.385725][ T43] usb 2-1: config 4 has no interface number 0 [ 800.419865][ T43] usb 2-1: config 4 interface 146 has no altsetting 0 [ 800.436124][ T43] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 800.445663][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.497834][ T43] usb 2-1: Product: syz [ 800.502146][ T43] usb 2-1: Manufacturer: syz [ 800.510199][T20992] netlink: 'syz.5.6556': attribute type 1 has an invalid length. [ 800.539983][ T43] usb 2-1: SerialNumber: syz [ 800.623437][T20996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6559'. [ 800.853751][ T43] comedi comedi5: could not set alternate setting 3 in high speed [ 800.897284][ T43] usbduxsigma 2-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 800.953457][ T43] usbduxsigma 2-1:4.146: probe with driver usbduxsigma failed with error -71 [ 800.988721][ T43] usb 2-1: USB disconnect, device number 125 [ 801.480461][T21020] loop2: detected capacity change from 0 to 4096 [ 801.600264][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6571'. [ 802.124855][T21020] ntfs3(loop2): ino=b, mi_enum_attr [ 802.183178][T21020] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 802.208461][T21020] ntfs3(loop2): Failed to load $Extend (-22). [ 802.214829][T21020] ntfs3(loop2): Failed to initialize $Extend. [ 802.502875][T21006] loop5: detected capacity change from 0 to 32768 [ 802.532427][T21006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6561 (21006) [ 802.590886][ T24] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 802.611685][T21006] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 802.636305][T21006] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 802.794695][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 802.831583][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.831629][ T24] usb 2-1: Product: syz [ 802.831657][ T24] usb 2-1: Manufacturer: syz [ 802.831686][ T24] usb 2-1: SerialNumber: syz [ 802.856587][T21006] BTRFS info (device loop5): enabling ssd optimizations [ 802.856624][T21006] BTRFS info (device loop5): enabling free space tree [ 802.912287][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 802.933776][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 802.966393][T21006] BTRFS warning (device loop5): can't clear the default_subvol,compress_zstd feature bits while mounted [ 803.167859][ T6369] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 803.328146][ T9] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 803.532783][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.532841][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 43926, setting to 64 [ 803.535581][ T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 803.535626][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.535664][ T9] usb 1-1: Product: syz [ 803.535692][ T9] usb 1-1: Manufacturer: syz [ 803.535721][ T9] usb 1-1: SerialNumber: syz [ 803.539245][ T9] usb 1-1: config 0 descriptor?? [ 803.540573][T21068] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 803.994737][ T9] rc_core: IR keymap rc-streamzap not found [ 803.994772][ T9] Registered IR keymap rc-empty [ 803.996027][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 803.998432][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input53 [ 804.024231][T21077] loop5: detected capacity change from 0 to 16 [ 804.042204][T21077] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 804.091754][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 804.091966][ T43] ath9k_htc: Failed to initialize the device [ 804.120996][ T9] usb 1-1: USB disconnect, device number 122 [ 804.130872][T21077] cramfs: Error -3 while decompressing! [ 804.130917][T21077] cramfs: ffffffff9a95d0e8(27)->ffff888040bab000(4096) [ 804.130959][T21077] cramfs: Error -3 while decompressing! [ 804.130977][T21077] cramfs: ffffffff9a95d103(16)->ffff88804f8ef000(4096) [ 804.131036][T21077] cramfs: Error -3 while decompressing! [ 804.131053][T21077] cramfs: ffffffff9a95d0e8(27)->ffff888040bab000(4096) [ 804.183489][ T30] audit: type=1800 audit(2000524952.578:59): pid=21077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6590" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 804.231345][ T24] usb 2-1: USB disconnect, device number 126 [ 804.280574][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 804.358658][T21080] loop4: detected capacity change from 0 to 512 [ 804.418916][T21080] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 804.418991][T21080] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 804.420268][T21080] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.6591: invalid indirect mapped block 512 (level 0) [ 804.422811][T21080] EXT4-fs (loop4): 1 truncate cleaned up [ 804.467007][T21080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.494082][T21066] loop2: detected capacity change from 0 to 32768 [ 804.507598][T21066] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6586 (21066) [ 804.521913][T21080] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.6591: lblock 0 mapped to illegal pblock 4 (length 1) [ 804.620876][T21066] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 804.781672][T21066] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 804.843452][T21082] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 804.961143][T21066] BTRFS info (device loop2): enabling ssd optimizations [ 804.961173][T21066] BTRFS info (device loop2): enabling free space tree [ 805.115121][ T6380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.178019][T21066] BTRFS info (device loop2): balance: start -susage=34359738372,drange=7..107,limit=3330..0 [ 805.220822][T21105] loop0: detected capacity change from 0 to 2048 [ 805.229143][T21066] BTRFS info (device loop2): balance: ended with status: 0 [ 805.274018][T21105] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 805.370198][T21105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 805.472343][T21105] UDF-fs: unknown compression code (0) [ 805.548959][ T6363] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 805.711741][ T5822] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 805.914902][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 805.935273][ T5822] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 805.975723][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.022816][ T5822] usb 2-1: config 0 descriptor?? [ 806.053915][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 806.105641][ T5822] as10x_usb: device has been detected [ 806.139283][ T5822] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 806.168079][T21134] loop3: detected capacity change from 0 to 1764 [ 806.252725][ T5822] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 806.266776][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 806.282214][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.309242][ T5822] as10x_usb: error during firmware upload part1 [ 806.322757][ T9] usb 5-1: Product: syz [ 806.340979][ T9] usb 5-1: Manufacturer: syz [ 806.350356][ T5822] Registered device nBox DVB-T Dongle [ 806.353061][ T9] usb 5-1: SerialNumber: syz [ 806.361412][ T5822] usb 2-1: USB disconnect, device number 127 [ 806.380984][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 806.420496][ T6545] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 806.616484][ T5822] Unregistered device nBox DVB-T Dongle [ 806.628798][ T5822] as10x_usb: device has been disconnected [ 807.213875][ T10] usb 5-1: USB disconnect, device number 9 [ 807.588364][ T6545] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 807.614746][ T6545] ath9k_htc: Failed to initialize the device [ 807.657889][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 807.671211][T21163] loop3: detected capacity change from 0 to 64 [ 807.710285][T21163] hfs: unable to locate alternate MDB [ 807.754015][T21163] hfs: continuing without an alternate MDB [ 807.983651][T21176] loop0: detected capacity change from 0 to 64 [ 808.214990][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 808.405229][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6636'. [ 808.416313][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 808.428610][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.464892][T21192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6636'. [ 808.486656][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 808.512576][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.537078][ T10] usb 5-1: Product: syz [ 808.550827][ T10] usb 5-1: Manufacturer: syz [ 808.563721][ T10] usb 5-1: SerialNumber: syz [ 808.586595][ T10] usb 5-1: config 0 descriptor?? [ 808.641274][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 808.643911][T21199] CIFS mount error: No usable UNC path provided in device string! [ 808.643911][T21199] [ 808.660490][ T10] gspca_stv06xx: st6422 sensor detected [ 808.671908][T21199] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 809.195331][ T10] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 809.230705][ T10] usb 5-1: USB disconnect, device number 10 [ 809.411864][T21194] loop1: detected capacity change from 0 to 32768 [ 809.418926][T21219] loop3: detected capacity change from 0 to 256 [ 809.442493][T21219] vfat: Deprecated parameter 'posix' [ 809.448700][T21219] FAT-fs: "posix" option is obsolete, not supported now [ 809.464178][T21194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6639 (21194) [ 809.501729][T21194] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 809.549403][T21194] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 809.766532][T21194] BTRFS info (device loop1): enabling ssd optimizations [ 809.773538][T21194] BTRFS info (device loop1): enabling free space tree [ 810.319712][ T6364] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 810.694724][T21268] Unsupported ieee802154 address type: 0 [ 810.724303][ T5822] IPVS: starting estimator thread 0... [ 810.857589][T21271] IPVS: using max 23 ests per chain, 55200 per kthread [ 811.376242][T21248] loop5: detected capacity change from 0 to 32768 [ 811.526789][T21248] JBD2: Ignoring recovery information on journal [ 811.752782][T21297] loop2: detected capacity change from 0 to 8 [ 811.768999][T21248] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 811.918427][T21297] SQUASHFS error: xz decompression failed, data probably corrupt [ 811.933909][T21297] SQUASHFS error: Failed to read block 0x60: -5 [ 811.959626][T21248] OCFS2: ERROR (device loop5): ocfs2_claim_suballoc_bits: Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 811.988177][T21297] SQUASHFS error: xz decompression failed, data probably corrupt [ 811.995956][T21297] SQUASHFS error: Failed to read block 0x60: -5 [ 812.028380][T21248] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 812.059295][T21310] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6687'. [ 812.061736][ T30] audit: type=1800 audit(2000524959.986:60): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6683" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 812.072450][T21248] OCFS2: File system is now read-only. [ 812.131754][T21310] batadv_slave_1: entered promiscuous mode [ 812.162998][T21248] (syz.5.6658,21248,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 812.192208][T21248] (syz.5.6658,21248,0):ocfs2_claim_metadata:2088 ERROR: status = -30 [ 812.221956][T21248] (syz.5.6658,21248,0):ocfs2_claim_metadata:2101 ERROR: status = -30 [ 812.259546][T21248] (syz.5.6658,21248,0):ocfs2_dx_dir_attach_index:2336 ERROR: status = -30 [ 812.272816][T21312] loop1: detected capacity change from 0 to 1024 [ 812.324349][T21248] (syz.5.6658,21248,0):ocfs2_expand_inline_dir:3029 ERROR: status = -30 [ 812.338938][T21312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 812.351887][T21248] (syz.5.6658,21248,0):ocfs2_extend_dir:3211 ERROR: status = -30 [ 812.382293][T21248] (syz.5.6658,21248,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30 [ 812.391624][T21312] ext4 filesystem being mounted at /995/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.484101][T21248] (syz.5.6658,21248,0):ocfs2_mknod:301 ERROR: status = -30 [ 812.509939][T21319] loop3: detected capacity change from 0 to 512 [ 812.540511][T21248] (syz.5.6658,21248,0):ocfs2_mknod:505 ERROR: status = -30 [ 812.569996][T21312] EXT4-fs warning (device loop1): ext4_empty_dir:3099: inode #12: comm syz.1.6688: directory missing '..' [ 812.584600][T21248] (syz.5.6658,21248,0):ocfs2_mkdir:661 ERROR: status = -30 [ 812.725057][T21319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.823835][T21319] ext4 filesystem being mounted at /1041/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 812.934918][T21319] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #12: comm syz.3.6690: corrupted xattr block 6: invalid header [ 812.977958][ T6364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 813.006056][ T6369] ocfs2: Unmounting device (7,5) on (node local) [ 813.156681][ T6377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.190516][T21301] loop4: detected capacity change from 0 to 32768 [ 813.213852][T21301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6682 (21301) [ 813.306562][T21301] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 813.352712][T21301] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 813.387558][ T30] audit: type=1326 audit(2000524961.231:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21340 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b758eec9 code=0x7ffc0000 [ 813.474376][ T30] audit: type=1326 audit(2000524961.231:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21340 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b758eec9 code=0x7ffc0000 [ 813.570004][ T30] audit: type=1326 audit(2000524961.240:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21340 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f03b758eec9 code=0x7ffc0000 [ 813.595838][ T30] audit: type=1326 audit(2000524961.240:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21340 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b758eec9 code=0x7ffc0000 [ 813.618677][ T30] audit: type=1326 audit(2000524961.240:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21340 comm="syz.3.6700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b758eec9 code=0x7ffc0000 [ 813.668430][T21352] loop1: detected capacity change from 0 to 1024 [ 813.753102][T21301] BTRFS info (device loop4): enabling ssd optimizations [ 813.761668][T21301] BTRFS info (device loop4): enabling free space tree [ 814.072231][ T6380] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 814.194835][T21375] loop0: detected capacity change from 0 to 1024 [ 815.168603][T21394] loop3: detected capacity change from 0 to 4096 [ 815.289558][T21394] ntfs3(loop3): ino=19, mi_enum_attr [ 815.306592][T21394] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 815.403262][T21394] ntfs3(loop3): try to read out of volume at offset 0x3fffffc7000 [ 815.633705][T21379] loop5: detected capacity change from 0 to 32768 [ 815.642473][T21406] loop1: detected capacity change from 0 to 1764 [ 815.704840][T21379] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 815.886680][T21379] XFS (loop5): Ending clean mount [ 815.916969][T21379] XFS (loop5): Quotacheck needed: Please wait. [ 816.004994][T21379] XFS (loop5): Quotacheck: Done. [ 816.251973][ T6369] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 816.349942][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6733'. [ 816.844366][T21435] loop0: detected capacity change from 0 to 4096 [ 816.871057][T21435] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 817.357413][T21456] netlink: 'syz.5.6734': attribute type 1 has an invalid length. [ 817.391753][T21456] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6734'. [ 817.473142][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6748'. [ 817.501275][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6748'. [ 817.578085][ T43] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 817.652137][T21467] overlay: Bad value for 'workdir' [ 817.751566][ T43] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 817.751613][ T43] usb 4-1: config 0 has no interface number 0 [ 817.751670][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 817.751712][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 817.751761][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 817.751813][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 817.751862][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 817.751910][ T43] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 817.751978][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 817.752020][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.775951][ T43] usb 4-1: config 0 descriptor?? [ 817.777726][T21454] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 817.777889][T21454] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 817.823384][ T43] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 818.057688][ T43] usb 4-1: USB disconnect, device number 20 [ 818.082952][ T43] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 818.557002][T21498] loop1: detected capacity change from 0 to 256 [ 818.691950][T21498] FAT-fs (loop1): Directory bread(block 64) failed [ 818.698542][T21498] FAT-fs (loop1): Directory bread(block 65) failed [ 818.756062][T21498] FAT-fs (loop1): Directory bread(block 66) failed [ 818.784200][T21498] FAT-fs (loop1): Directory bread(block 67) failed [ 818.824545][T21498] FAT-fs (loop1): Directory bread(block 68) failed [ 818.856579][T21498] FAT-fs (loop1): Directory bread(block 69) failed [ 818.886179][T21498] FAT-fs (loop1): Directory bread(block 70) failed [ 818.936134][T21498] FAT-fs (loop1): Directory bread(block 71) failed [ 818.979917][T21498] FAT-fs (loop1): Directory bread(block 72) failed [ 819.047741][T21498] FAT-fs (loop1): Directory bread(block 73) failed [ 819.614838][T21524] rtc_cmos 00:00: Alarms can be up to one day in the future [ 819.752284][T21496] loop2: detected capacity change from 0 to 32768 [ 819.776080][T21496] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6765 (21496) [ 819.867257][T21496] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 819.908997][T21496] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 819.954621][T21535] netlink: 'syz.0.6784': attribute type 1 has an invalid length. [ 819.991083][T21535] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6784'. [ 820.084006][T21496] BTRFS info (device loop2): enabling ssd optimizations [ 820.093623][T21496] BTRFS info (device loop2): enabling free space tree [ 820.116926][T21551] loop4: detected capacity change from 0 to 256 [ 820.163054][T21533] loop1: detected capacity change from 0 to 4096 [ 820.188642][T21533] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 820.216810][T21496] BTRFS warning (device loop2): can't clear the default_subvol,compress_zstd feature bits while mounted [ 820.331848][T21551] FAT-fs (loop4): Directory bread(block 64) failed [ 820.357934][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 820.370945][T21533] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 820.391086][T21551] FAT-fs (loop4): Directory bread(block 65) failed [ 820.397698][T21551] FAT-fs (loop4): Directory bread(block 66) failed [ 820.440164][ T6363] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 820.451483][T21551] FAT-fs (loop4): Directory bread(block 67) failed [ 820.494952][T21551] FAT-fs (loop4): Directory bread(block 68) failed [ 820.534789][T21551] FAT-fs (loop4): Directory bread(block 69) failed [ 820.564495][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 820.580667][T21551] FAT-fs (loop4): Directory bread(block 70) failed [ 820.593053][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 820.623880][ T24] usb 4-1: config 0 has no interface number 0 [ 820.630832][T21551] FAT-fs (loop4): Directory bread(block 71) failed [ 820.652920][T21551] FAT-fs (loop4): Directory bread(block 72) failed [ 820.665576][ T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 820.688975][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.697370][T21551] FAT-fs (loop4): Directory bread(block 73) failed [ 820.741978][ T24] usb 4-1: Product: syz [ 820.763609][ T24] usb 4-1: Manufacturer: syz [ 820.776056][ T24] usb 4-1: SerialNumber: syz [ 820.875148][T21569] loop2: detected capacity change from 0 to 64 [ 820.885469][ T24] usb 4-1: config 0 descriptor?? [ 820.899986][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 821.273039][T21576] netlink: 'syz.2.6795': attribute type 10 has an invalid length. [ 821.327688][T21576] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.334588][ T24] gspca_spca1528: reg_w err -71 [ 821.340707][T21576] bond0: (slave team0): Enslaving as an active interface with an up link [ 821.358553][ T24] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 821.371812][ T24] usb 4-1: USB disconnect, device number 21 [ 822.087877][T21604] netlink: 'syz.1.6808': attribute type 1 has an invalid length. [ 822.132656][T21604] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6808'. [ 822.208569][T21605] ip6tnl1: entered promiscuous mode [ 822.235429][T21605] ip6tnl1: entered allmulticast mode [ 822.303506][T21611] QAT: Stopping all acceleration devices. [ 822.421001][ T5822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 822.608732][ T5822] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 822.630841][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.648804][ T5822] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 822.677682][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 822.685872][ T5822] usb 5-1: Product: syz [ 822.734467][ T5822] usb 5-1: Manufacturer: syz [ 822.739108][ T5822] usb 5-1: SerialNumber: syz [ 822.764872][ T5822] usb 5-1: config 0 descriptor?? [ 822.805672][ T5822] usb 5-1: selecting invalid altsetting 0 [ 823.133554][ T10] usb 5-1: USB disconnect, device number 11 [ 823.619805][T21620] loop0: detected capacity change from 0 to 32768 [ 823.643409][T21620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6818 (21620) [ 823.681124][T21620] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 823.724607][T21620] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 823.779419][T21662] netlink: 'syz.5.6836': attribute type 4 has an invalid length. [ 823.921023][T21620] BTRFS info (device loop0): enabling ssd optimizations [ 823.953585][T21620] BTRFS info (device loop0): enabling free space tree [ 824.204530][ T6362] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 825.226260][T21725] netlink: 'syz.4.6860': attribute type 11 has an invalid length. [ 825.525107][T21734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6876'. [ 825.993137][T21740] loop4: detected capacity change from 0 to 4096 [ 826.043186][T21740] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 826.067725][T21740] ntfs3(loop4): mft corrupted [ 826.072541][T21740] ntfs3(loop4): Failed to load $MFT. [ 826.105493][T21720] loop2: detected capacity change from 0 to 32768 [ 826.134390][T21720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6858 (21720) [ 826.226763][T21720] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 826.261461][T21720] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 826.355069][T13654] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 826.536665][T13654] usb 1-1: Using ep0 maxpacket: 8 [ 826.546278][T13654] usb 1-1: unable to get BOS descriptor or descriptor too short [ 826.554746][T21720] BTRFS info (device loop2): enabling ssd optimizations [ 826.564604][T21779] genirq: Flags mismatch irq 8. 00200000 (comedi_parport) vs. 00200000 (rtc0) [ 826.566430][T13654] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 826.575531][T21720] BTRFS info (device loop2): enabling free space tree [ 826.586781][T13654] usb 1-1: config 8 has no interface number 0 [ 826.595172][T13654] usb 1-1: config 8 interface 255 has no altsetting 0 [ 826.609011][T13654] usb 1-1: string descriptor 0 read error: -22 [ 826.621567][T13654] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice= e.bf [ 826.653058][T13654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.654657][ T6506] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 826.881805][ T6506] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.921246][ T6506] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 826.924303][T21788] loop4: detected capacity change from 0 to 16 [ 826.934837][ T6506] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 826.945590][ T6506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.954790][ T6363] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 826.988475][ T6506] usb 2-1: config 0 descriptor?? [ 826.994129][T21788] erofs (device loop4): mounted with root inode @ nid 36. [ 827.039931][T21788] erofs (device loop4): read error -22 @ 8200 of nid 36 [ 827.161649][T13654] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 827.317526][T13654] usb 1-1: USB disconnect, device number 123 [ 827.452555][ T6506] Bluetooth: Can't get version to change to load ram patch err [ 827.478328][ T6506] Bluetooth: Loading patch file failed [ 827.499219][ T6506] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 827.528741][ T6506] usb 2-1: USB disconnect, device number 2 [ 827.987773][T21804] loop4: detected capacity change from 0 to 1764 [ 828.007366][T21808] netlink: 'syz.0.6895': attribute type 3 has an invalid length. [ 828.033634][T21806] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 828.078513][T21808] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6895'. [ 828.500275][T21792] loop5: detected capacity change from 0 to 32768 [ 828.618212][T21819] bond3 (unregistering): Released all slaves [ 828.655266][T21826] netlink: 'syz.1.6903': attribute type 2 has an invalid length. [ 828.681124][T21826] netlink: 'syz.1.6903': attribute type 1 has an invalid length. [ 828.709639][T21826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6903'. [ 829.298096][T21847] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6913'. [ 829.869119][T21865] loop0: detected capacity change from 0 to 512 [ 829.888662][T21870] ksmbd: Unknown IPC event: 3, ignore. [ 830.049552][T21865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.113416][T21865] ext4 filesystem being mounted at /1143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.134711][T21865] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 830.163213][T21865] Quota error (device loop0): write_blk: dquota write failed [ 830.171770][T21865] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 830.235755][T21865] EXT4-fs error (device loop0): ext4_acquire_dquot:6941: comm syz.0.6921: Failed to acquire dquot type 0 [ 830.317134][T21886] loop3: detected capacity change from 0 to 164 [ 830.408396][T21886] rock: directory entry would overflow storage [ 830.414588][T21886] rock: sig=0x66, size=4, remaining=3 [ 830.447038][T21886] rock: directory entry would overflow storage [ 830.460679][ T6362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.465443][T21886] rock: sig=0x66, size=4, remaining=3 [ 830.636804][T21895] loop0: detected capacity change from 0 to 64 [ 830.677854][T21895] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 830.751110][T21898] loop1: detected capacity change from 0 to 512 [ 830.777460][T21902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6938'. [ 830.796238][T21898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 830.804379][T21898] System zones: 1-12 [ 830.808623][T21898] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.6936: Directory hole found for htree index block 0 [ 830.821782][T21902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6938'. [ 830.825665][T21898] EXT4-fs (loop1): Remounting filesystem read-only [ 830.839062][T21898] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 830.862440][T21898] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 830.872919][T21898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.887873][ T801] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 830.927194][T21900] loop5: detected capacity change from 0 to 4096 [ 831.030393][T21898] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 831.056374][T21900] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 831.081166][T21900] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 831.112185][ T801] usb 5-1: Using ep0 maxpacket: 16 [ 831.138849][ T801] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 831.167175][ T801] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 831.208430][ T801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.248488][ T6364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.251487][ T801] usb 5-1: config 0 has no interface number 0 [ 831.318258][ T801] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 831.363753][ T801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.396235][ T801] usb 5-1: Product: syz [ 831.400444][ T801] usb 5-1: Manufacturer: syz [ 831.440757][ T801] usb 5-1: SerialNumber: syz [ 831.464311][ T801] usb 5-1: config 0 descriptor?? [ 831.550160][T21920] loop2: detected capacity change from 0 to 256 [ 831.717622][ T801] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 831.753732][ T801] uvcvideo 5-1:0.105: No valid video chain found. [ 831.826021][T21924] loop1: detected capacity change from 0 to 1024 [ 831.917255][T21924] hfsplus: xattr searching failed [ 831.961905][ T43] usb 5-1: USB disconnect, device number 12 [ 832.996752][T21963] ip6gre2: entered allmulticast mode [ 833.400048][T21974] loop5: detected capacity change from 0 to 16 [ 833.441392][T21974] erofs (device loop5): mounted with root inode @ nid 36. [ 833.488675][T21974] syz.5.6972: attempt to access beyond end of device [ 833.488675][T21974] loop5: rw=524288, sector=128, nr_sectors = 1 limit=16 [ 833.562746][T21974] syz.5.6972: attempt to access beyond end of device [ 833.562746][T21974] loop5: rw=524288, sector=0, nr_sectors = 1024 limit=16 [ 833.621493][T21974] syz.5.6972: attempt to access beyond end of device [ 833.621493][T21974] loop5: rw=0, sector=128, nr_sectors = 1 limit=16 [ 833.659160][T21974] syz.5.6972: attempt to access beyond end of device [ 833.659160][T21974] loop5: rw=0, sector=0, nr_sectors = 1024 limit=16 [ 833.678963][T21974] erofs (device loop5): read error -5 @ 0 of nid 89 [ 833.708222][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6977'. [ 833.743424][ T30] audit: type=1800 audit(2000524980.285:66): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6972" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 833.774907][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 833.912775][T21955] loop4: detected capacity change from 0 to 32768 [ 833.958746][ T5822] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 833.977437][ T5822] usb 2-1: config 0 has no interface number 0 [ 834.009388][T21955] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6963 (21955) [ 834.017727][T21991] loop0: detected capacity change from 0 to 256 [ 834.023972][ T30] audit: type=1326 audit(2000524980.528:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f8eec9 code=0x7ffc0000 [ 834.051481][ T5822] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 834.083159][ T5822] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 834.105960][ T5822] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 834.124460][T21955] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 834.135258][ T30] audit: type=1326 audit(2000524980.528:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e5f8eec9 code=0x7ffc0000 [ 834.158023][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.179668][T21955] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 834.197470][ T5822] usb 2-1: config 0 descriptor?? [ 834.218538][ T5822] ttusbir 2-1:0.83: cannot find expected altsetting [ 834.227420][ T30] audit: type=1326 audit(2000524980.528:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06e5f8d710 code=0x7ffc0000 [ 834.256204][ T30] audit: type=1326 audit(2000524980.528:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06e5f8eacb code=0x7ffc0000 [ 834.298568][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 834.350448][ T30] audit: type=1326 audit(2000524980.528:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06e5f8eacb code=0x7ffc0000 [ 834.395145][ T30] audit: type=1326 audit(2000524980.556:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06e5f8eacb code=0x7ffc0000 [ 834.425907][ T30] audit: type=1326 audit(2000524980.556:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21993 comm="syz.2.6981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06e5f8eacb code=0x7ffc0000 [ 834.446982][ T5822] usb 2-1: USB disconnect, device number 3 [ 834.465490][T22013] loop5: detected capacity change from 0 to 1024 [ 834.472197][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 834.486488][ T43] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 834.498858][ T43] usb 3-1: config 0 has no interface number 0 [ 834.514929][ T43] usb 3-1: config 0 interface 48 has no altsetting 0 [ 834.518549][T21955] BTRFS info (device loop4): enabling ssd optimizations [ 834.526754][ T43] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 834.543429][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.565231][ T43] usb 3-1: Product: syz [ 834.575971][ T43] usb 3-1: Manufacturer: syz [ 834.586375][ T43] usb 3-1: SerialNumber: syz [ 834.588676][T21955] BTRFS info (device loop4): enabling free space tree [ 834.605440][ T43] usb 3-1: config 0 descriptor?? [ 834.651875][T22000] loop3: detected capacity change from 0 to 8192 [ 834.698843][T21955] BTRFS warning (device loop4): get dev_stats failed, device not found [ 834.756197][ T1323] hfsplus: b-tree write err: -5, ino 4 [ 834.916474][ T43] usb 3-1: USB disconnect, device number 11 [ 834.945315][ T6380] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 835.142581][T22023] loop3: detected capacity change from 0 to 512 [ 835.217754][T22023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 835.297533][T22023] EXT4-fs (loop3): 1 orphan inode deleted [ 835.334873][T22023] EXT4-fs (loop3): 1 truncate cleaned up [ 835.387690][T22023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.546821][T22023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.6989: bg 0: block 360: padding at end of block bitmap is not set [ 835.698518][T22023] EXT4-fs (loop3): Remounting filesystem read-only [ 835.731127][T22023] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1597: inode #17: comm syz.3.6989: cleanup dec ref error -28 [ 835.853256][T22044] netlink: 'syz.5.6997': attribute type 10 has an invalid length. [ 835.913645][T22044] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.985456][T22044] bond0: (slave team0): Enslaving as an active interface with an up link [ 836.104196][ T6377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.596819][ T5822] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 836.725272][ T801] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 836.779398][T22078] overlayfs: conflicting options: userxattr,metacopy=on [ 836.810835][ T5822] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 836.832645][ T5822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 836.880569][ T5822] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 836.906355][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 836.914595][ T5822] usb 6-1: Product: syz [ 836.924807][ T5822] usb 6-1: Manufacturer: syz [ 836.927807][ T801] usb 5-1: Using ep0 maxpacket: 8 [ 836.939123][ T5822] usb 6-1: SerialNumber: syz [ 836.964081][ T801] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 836.976229][ T5822] usb 6-1: config 0 descriptor?? [ 836.996722][ T801] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 837.017493][ T5822] usb 6-1: selecting invalid altsetting 0 [ 837.031982][ T801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 837.088144][ T801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 837.131308][ T801] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 837.180208][ T801] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 837.223131][ T801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.255699][ T801] usb 5-1: Product: syz [ 837.269894][ T801] usb 5-1: Manufacturer: syz [ 837.274613][ T801] usb 5-1: SerialNumber: syz [ 837.296190][T22090] loop0: detected capacity change from 0 to 1024 [ 837.345551][ T801] usb 5-1: config 0 descriptor?? [ 837.384122][T13654] usb 6-1: USB disconnect, device number 6 [ 837.560649][ T1323] hfsplus: b-tree write err: -5, ino 4 [ 837.601308][ T801] rc_core: IR keymap rc-imon-rsc not found [ 837.617995][ T801] Registered IR keymap rc-empty [ 837.637092][ T801] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 837.688793][ T801] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 837.751714][ T801] usb 5-1: USB disconnect, device number 13 [ 838.449303][T22125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7036'. [ 838.461207][T22127] loop2: detected capacity change from 0 to 8 [ 838.510295][T22125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7036'. [ 838.544691][T22130] QAT: failed to copy from user. [ 838.834589][T22139] loop1: detected capacity change from 0 to 128 [ 838.890447][T22139] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 838.912287][T22139] ext4 filesystem being mounted at /1063/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.034397][T22139] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.7044: No space for directory leaf checksum. Please run e2fsck -D. [ 839.079109][T22139] EXT4-fs error (device loop1): __ext4_find_entry:1624: inode #2: comm syz.1.7044: checksumming directory block 0 [ 839.297235][ T6364] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 839.393633][T22153] loop4: detected capacity change from 0 to 4096 [ 839.419406][ T6545] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 839.452625][T22153] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 839.532811][T22153] ntfs3(loop4): ino=18, mi_enum_attr [ 839.567933][T22153] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 839.590733][ T6545] usb 6-1: Using ep0 maxpacket: 32 [ 839.607228][ T6545] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 839.616338][ T6545] usb 6-1: config 0 has no interface number 0 [ 839.640932][ T6545] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 839.666805][ T6545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.712763][ T6545] usb 6-1: Product: syz [ 839.716963][ T6545] usb 6-1: Manufacturer: syz [ 839.734034][ T6545] usb 6-1: SerialNumber: syz [ 839.832243][ T6545] usb 6-1: config 0 descriptor?? [ 839.865995][ T6545] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 839.906112][T22173] macvlan0: entered allmulticast mode [ 839.911735][ T6545] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 839.947155][T22173] veth1_vlan: entered allmulticast mode [ 840.102960][ T6545] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 840.349914][ T6545] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 840.383891][ T6545] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 840.406484][ T6545] usb 6-1: USB disconnect, device number 7 [ 840.445626][ T6545] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 840.887164][T22206] loop4: detected capacity change from 0 to 164 [ 840.929233][T22206] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 840.992997][T22206] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 841.417404][T22226] ip6gre1: entered allmulticast mode [ 841.466026][ T6545] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 841.673276][ T6545] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 841.706415][ T6545] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 841.738256][ T6545] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 841.775927][ T6545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.845785][T22241] loop2: detected capacity change from 0 to 256 [ 841.868653][T22241] exfat: Deprecated parameter 'namecase' [ 841.899078][T22241] exfat: Deprecated parameter 'utf8' [ 841.980390][T22241] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 842.056768][ T6545] usb 4-1: string descriptor 0 read error: -71 [ 842.183388][ T6545] usb 4-1: USB disconnect, device number 22 [ 842.233005][ T6662] udevd[6662]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.646163][T22257] loop4: detected capacity change from 0 to 4096 [ 842.655202][T22259] sit0: left promiscuous mode [ 842.692589][T22257] ntfs3(loop4): ino=3, Correct links count -> 2. [ 842.713585][T22261] netlink: 'syz.2.7104': attribute type 1 has an invalid length. [ 842.776364][T22261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7104'. [ 842.927700][T22259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.051212][T22231] loop5: detected capacity change from 0 to 40427 [ 843.260495][T22270] ip6gre1: entered allmulticast mode [ 843.281464][T22273] loop0: detected capacity change from 0 to 256 [ 843.323436][T22273] exfat: Deprecated parameter 'utf8' [ 843.345466][T22273] exfat: Deprecated parameter 'utf8' [ 843.372986][T22273] exfat: Deprecated parameter 'utf8' [ 843.457054][T22273] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 843.509481][T22231] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 843.560312][T22231] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 843.590740][T22273] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 843.647255][T22273] exFAT-fs (loop0): Filesystem has been set read-only [ 843.665476][T22281] loop4: detected capacity change from 0 to 16 [ 843.705115][T22281] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 843.787569][T22249] loop1: detected capacity change from 0 to 32768 [ 843.924735][T22249] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 844.083864][T22249] XFS (loop1): Ending clean mount [ 844.152022][T22249] XFS (loop1): Quotacheck needed: Please wait. [ 844.300131][T22249] XFS (loop1): Quotacheck: Done. [ 844.618192][ T6364] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 845.379127][T22333] loop3: detected capacity change from 0 to 256 [ 845.397387][T22333] exfat: Deprecated parameter 'namecase' [ 845.403202][T22333] exfat: Deprecated parameter 'utf8' [ 845.460125][T22333] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 845.758826][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 845.758852][ T30] audit: type=1326 audit(2000524991.510:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe258f8eec9 code=0x7ffc0000 [ 845.854795][ T30] audit: type=1326 audit(2000524991.547:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe258f8eec9 code=0x7ffc0000 [ 845.906959][ T30] audit: type=1326 audit(2000524991.585:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe258f8d710 code=0x7ffc0000 [ 845.996609][ T30] audit: type=1326 audit(2000524991.585:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.058399][T22357] netlink: 'syz.4.7146': attribute type 10 has an invalid length. [ 846.121571][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 846.130474][ T30] audit: type=1326 audit(2000524991.585:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.174324][T22360] loop3: detected capacity change from 0 to 64 [ 846.212700][ T30] audit: type=1326 audit(2000524991.594:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.313977][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 846.330683][ T30] audit: type=1326 audit(2000524991.594:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.358594][ T5822] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 846.366700][ T5822] usb 2-1: config 0 has no interface number 0 [ 846.373255][ T5822] usb 2-1: config 0 interface 48 has no altsetting 0 [ 846.380747][ T30] audit: type=1326 audit(2000524991.734:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.409199][T22363] loop2: detected capacity change from 0 to 1764 [ 846.417388][ T5822] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 846.429035][ T30] audit: type=1326 audit(2000524991.809:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.452094][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.461033][ T5822] usb 2-1: Product: syz [ 846.467443][ T5822] usb 2-1: Manufacturer: syz [ 846.472175][ T5822] usb 2-1: SerialNumber: syz [ 846.478579][ T30] audit: type=1326 audit(2000524991.875:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe258f8eacb code=0x7ffc0000 [ 846.541224][ T5822] usb 2-1: config 0 descriptor?? [ 846.848300][ T43] usb 2-1: USB disconnect, device number 4 [ 847.216629][T22347] loop0: detected capacity change from 0 to 32768 [ 847.278042][T22347] JBD2: Ignoring recovery information on journal [ 847.296076][T22389] new mount options do not match the existing superblock, will be ignored [ 847.459333][T22347] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 847.614239][T22347] OCFS2: ERROR (device loop0): ocfs2_claim_suballoc_bits: Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 847.685185][T22347] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 847.733618][T22347] OCFS2: File system is now read-only. [ 847.746614][T22347] (syz.0.7140,22347,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 847.755179][T22347] (syz.0.7140,22347,1):ocfs2_claim_metadata:2088 ERROR: status = -30 [ 847.802355][T22347] (syz.0.7140,22347,1):ocfs2_claim_metadata:2101 ERROR: status = -30 [ 847.810507][T22347] (syz.0.7140,22347,1):ocfs2_dx_dir_attach_index:2336 ERROR: status = -30 [ 847.883778][T22347] (syz.0.7140,22347,1):ocfs2_expand_inline_dir:3029 ERROR: status = -30 [ 847.924991][T22347] (syz.0.7140,22347,1):ocfs2_extend_dir:3211 ERROR: status = -30 [ 847.960404][T22347] (syz.0.7140,22347,1):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30 [ 848.013924][T22347] (syz.0.7140,22347,1):ocfs2_mknod:301 ERROR: status = -30 [ 848.021228][T22347] (syz.0.7140,22347,1):ocfs2_mknod:505 ERROR: status = -30 [ 848.050638][T22347] (syz.0.7140,22347,1):ocfs2_mkdir:661 ERROR: status = -30 [ 848.262773][ T6362] ocfs2: Unmounting device (7,0) on (node local) [ 848.584840][T22432] loop2: detected capacity change from 0 to 8 [ 848.939535][T22440] loop4: detected capacity change from 0 to 256 [ 848.995567][T22440] exfat: Deprecated parameter 'utf8' [ 849.039406][T22440] exfat: Deprecated parameter 'utf8' [ 849.075671][T22440] exfat: Deprecated parameter 'utf8' [ 849.166713][T22440] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 849.467881][T22456] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7192'. [ 850.040903][T22477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7201'. [ 850.607572][T22492] loop0: detected capacity change from 0 to 4096 [ 850.700009][T22501] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.765567][T22492] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 850.813235][T22461] loop4: detected capacity change from 0 to 32768 [ 850.833849][T22492] Remounting filesystem read-only [ 850.858251][ T6506] IPVS: starting estimator thread 0... [ 850.908719][T22461] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 850.975873][T22514] geneve2: entered promiscuous mode [ 850.981558][T22514] geneve2: entered allmulticast mode [ 851.039586][T22509] IPVS: using max 23 ests per chain, 55200 per kthread [ 851.126016][T22519] loop3: detected capacity change from 0 to 128 [ 851.233951][T22461] XFS (loop4): Ending clean mount [ 851.254336][T22461] XFS (loop4): Quotacheck needed: Please wait. [ 851.265974][T22519] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 851.327329][T22461] XFS (loop4): Quotacheck: Done. [ 851.377970][T22519] ext4 filesystem being mounted at /1129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 851.579614][ T6380] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 851.652666][ T6377] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 851.652767][T22537] nbd: couldn't find a device at index -1605786504 [ 851.901890][T22544] netlink: 'syz.0.7229': attribute type 3 has an invalid length. [ 851.958109][T22544] netlink: 'syz.0.7229': attribute type 3 has an invalid length. [ 851.991488][T22544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7229'. [ 852.572739][T22564] loop2: detected capacity change from 0 to 256 [ 852.643754][T22564] FAT-fs (loop2): Directory bread(block 64) failed [ 852.672016][T22564] FAT-fs (loop2): Directory bread(block 65) failed [ 852.704491][T22564] FAT-fs (loop2): Directory bread(block 66) failed [ 852.711389][T13654] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 852.739187][T22564] FAT-fs (loop2): Directory bread(block 67) failed [ 852.757246][T22564] FAT-fs (loop2): Directory bread(block 68) failed [ 852.768046][T22564] FAT-fs (loop2): Directory bread(block 69) failed [ 852.789090][T22564] FAT-fs (loop2): Directory bread(block 70) failed [ 852.797332][T22564] FAT-fs (loop2): Directory bread(block 71) failed [ 852.833750][T22564] FAT-fs (loop2): Directory bread(block 72) failed [ 852.851450][T22564] FAT-fs (loop2): Directory bread(block 73) failed [ 852.900119][T13654] usb 6-1: Using ep0 maxpacket: 16 [ 852.911901][T13654] usb 6-1: too many configurations: 97, using maximum allowed: 8 [ 852.978323][T13654] usb 6-1: string descriptor 0 read error: -71 [ 852.993569][T13654] usb 6-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 853.022254][T22570] loop4: detected capacity change from 0 to 4096 [ 853.024723][T13654] usb 6-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 853.070937][T22542] loop3: detected capacity change from 0 to 32768 [ 853.073555][T22570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.082163][T13654] usb 6-1: rejected 8 configurations due to insufficient available bus power [ 853.098832][T13654] usb 6-1: no configuration chosen from 8 choices [ 853.100939][T22542] (syz.3.7227,22542,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 853.107345][T13654] usb 6-1: USB disconnect, device number 8 [ 853.222385][T22542] (syz.3.7227,22542,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 853.300255][T22542] JBD2: Ignoring recovery information on journal [ 853.585350][ T6380] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.614282][T22542] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 853.815119][T22542] [ 853.817471][T22542] ====================================================== [ 853.824476][T22542] WARNING: possible circular locking dependency detected [ 853.831481][T22542] syzkaller #0 Not tainted [ 853.835883][T22542] ------------------------------------------------------ [ 853.842883][T22542] syz.3.7227/22542 is trying to acquire lock: [ 853.848932][T22542] ffff888053cbbf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 853.859852][T22542] [ 853.859852][T22542] but task is already holding lock: [ 853.867198][T22542] ffff888053cbc2c0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x194/0x2d0 [ 853.879852][T22542] [ 853.879852][T22542] which lock already depends on the new lock. [ 853.879852][T22542] [ 853.890241][T22542] [ 853.890241][T22542] the existing dependency chain (in reverse order) is: [ 853.899239][T22542] [ 853.899239][T22542] -> #6 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 853.909764][T22542] down_write+0x92/0x200 [ 853.914543][T22542] ocfs2_lock_global_qf+0x194/0x2d0 [ 853.920282][T22542] ocfs2_acquire_dquot+0x258/0xb00 [ 853.925930][T22542] dqget+0x693/0x1180 [ 853.930436][T22542] dquot_set_dqblk+0x2b/0x1290 [ 853.935723][T22542] quota_setquota+0x4c4/0x5e0 [ 853.940943][T22542] do_quotactl+0xaf6/0x13d0 [ 853.945984][T22542] __x64_sys_quotactl+0x1b3/0x440 [ 853.951523][T22542] do_syscall_64+0xcd/0x4e0 [ 853.956553][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.962967][T22542] [ 853.962967][T22542] -> #5 (&dquot->dq_lock){+.+.}-{4:4}: [ 853.970624][T22542] __mutex_lock+0x193/0x1060 [ 853.975737][T22542] dqget+0x5f1/0x1180 [ 853.980246][T22542] dquot_transfer+0x3a8/0x6a0 [ 853.985451][T22542] ext4_setattr+0x885/0x2ae0 [ 853.990574][T22542] notify_change+0x6a9/0x1230 [ 853.995789][T22542] chown_common+0x54e/0x680 [ 854.000814][T22542] do_fchownat+0x1a7/0x200 [ 854.005751][T22542] __x64_sys_fchownat+0xbd/0x160 [ 854.011217][T22542] do_syscall_64+0xcd/0x4e0 [ 854.016247][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.022660][T22542] [ 854.022660][T22542] -> #4 (&ei->xattr_sem){++++}-{4:4}: [ 854.030232][T22542] down_read+0x9b/0x480 [ 854.034915][T22542] ext4_setattr+0x875/0x2ae0 [ 854.040042][T22542] notify_change+0x6a9/0x1230 [ 854.045253][T22542] chown_common+0x54e/0x680 [ 854.050283][T22542] do_fchownat+0x1a7/0x200 [ 854.055221][T22542] __x64_sys_chown+0x7b/0xc0 [ 854.060337][T22542] do_syscall_64+0xcd/0x4e0 [ 854.065364][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.071779][T22542] [ 854.071779][T22542] -> #3 (jbd2_handle){++++}-{0:0}: [ 854.079092][T22542] start_this_handle+0x5ea/0x1410 [ 854.084660][T22542] jbd2__journal_start+0x394/0x6a0 [ 854.090315][T22542] jbd2_journal_start+0x29/0x40 [ 854.095706][T22542] ocfs2_start_trans+0x3b9/0x970 [ 854.101351][T22542] ocfs2_modify_bh+0xbd/0x490 [ 854.106648][T22542] ocfs2_local_read_info+0xdad/0x16b0 [ 854.112554][T22542] dquot_load_quota_sb+0x83d/0x1050 [ 854.118283][T22542] dquot_load_quota_inode+0x2a3/0x470 [ 854.124183][T22542] ocfs2_enable_quotas+0x28a/0x5a0 [ 854.129821][T22542] ocfs2_fill_super+0x1d7c/0x43b0 [ 854.135372][T22542] get_tree_bdev_flags+0x38c/0x620 [ 854.141025][T22542] vfs_get_tree+0x8e/0x340 [ 854.145972][T22542] path_mount+0x1516/0x2060 [ 854.150997][T22542] __x64_sys_mount+0x28d/0x310 [ 854.156283][T22542] do_syscall_64+0xcd/0x4e0 [ 854.161309][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.167723][T22542] [ 854.167723][T22542] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 854.176257][T22542] down_read+0x9b/0x480 [ 854.180940][T22542] ocfs2_start_trans+0x3ae/0x970 [ 854.186400][T22542] ocfs2_modify_bh+0xbd/0x490 [ 854.191610][T22542] ocfs2_local_read_info+0xdad/0x16b0 [ 854.197607][T22542] dquot_load_quota_sb+0x83d/0x1050 [ 854.203336][T22542] dquot_load_quota_inode+0x2a3/0x470 [ 854.209250][T22542] ocfs2_enable_quotas+0x28a/0x5a0 [ 854.214897][T22542] ocfs2_fill_super+0x1d7c/0x43b0 [ 854.220454][T22542] get_tree_bdev_flags+0x38c/0x620 [ 854.226112][T22542] vfs_get_tree+0x8e/0x340 [ 854.231060][T22542] path_mount+0x1516/0x2060 [ 854.236086][T22542] __x64_sys_mount+0x28d/0x310 [ 854.241373][T22542] do_syscall_64+0xcd/0x4e0 [ 854.246400][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.252814][T22542] [ 854.252814][T22542] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 854.260312][T22542] ocfs2_start_trans+0x29d/0x970 [ 854.265775][T22542] ocfs2_write_info+0xf0/0x460 [ 854.271080][T22542] dquot_set_dqinfo+0x4d5/0x5d0 [ 854.276457][T22542] do_quotactl+0xe94/0x13d0 [ 854.281501][T22542] __x64_sys_quotactl+0x1b3/0x440 [ 854.287043][T22542] do_syscall_64+0xcd/0x4e0 [ 854.292069][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.298485][T22542] [ 854.298485][T22542] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 854.307359][T22542] __lock_acquire+0x12a6/0x1ce0 [ 854.312732][T22542] lock_acquire+0x179/0x350 [ 854.317763][T22542] down_write+0x92/0x200 [ 854.322552][T22542] ocfs2_lock_global_qf+0x1c1/0x2d0 [ 854.328297][T22542] ocfs2_acquire_dquot+0x258/0xb00 [ 854.333946][T22542] dqget+0x693/0x1180 [ 854.338458][T22542] dquot_set_dqblk+0x2b/0x1290 [ 854.343753][T22542] quota_setquota+0x4c4/0x5e0 [ 854.348979][T22542] do_quotactl+0xaf6/0x13d0 [ 854.354022][T22542] __x64_sys_quotactl+0x1b3/0x440 [ 854.359574][T22542] do_syscall_64+0xcd/0x4e0 [ 854.364602][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.371017][T22542] [ 854.371017][T22542] other info that might help us debug this: [ 854.371017][T22542] [ 854.381229][T22542] Chain exists of: [ 854.381229][T22542] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] [ 854.381229][T22542] [ 854.398379][T22542] Possible unsafe locking scenario: [ 854.398379][T22542] [ 854.405817][T22542] CPU0 CPU1 [ 854.411166][T22542] ---- ---- [ 854.416518][T22542] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 854.423807][T22542] lock(&dquot->dq_lock); [ 854.430743][T22542] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 854.440558][T22542] lock(&ocfs2_quota_ip_alloc_sem_key); [ 854.446191][T22542] [ 854.446191][T22542] *** DEADLOCK *** [ 854.446191][T22542] [ 854.454317][T22542] 3 locks held by syz.3.7227/22542: [ 854.459503][T22542] #0: ffff88804b6160e0 (&type->s_umount_key#90){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 854.469397][T22542] #1: ffff888053f380a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x24b/0xb00 [ 854.479478][T22542] #2: ffff888053cbc2c0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x194/0x2d0 [ 854.492496][T22542] [ 854.492496][T22542] stack backtrace: [ 854.498374][T22542] CPU: 0 UID: 0 PID: 22542 Comm: syz.3.7227 Not tainted syzkaller #0 PREEMPT(full) [ 854.498412][T22542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 854.498433][T22542] Call Trace: [ 854.498444][T22542] [ 854.498457][T22542] dump_stack_lvl+0x116/0x1f0 [ 854.498496][T22542] print_circular_bug+0x275/0x350 [ 854.498532][T22542] check_noncircular+0x14c/0x170 [ 854.498578][T22542] __lock_acquire+0x12a6/0x1ce0 [ 854.498621][T22542] lock_acquire+0x179/0x350 [ 854.498656][T22542] ? ocfs2_lock_global_qf+0x1c1/0x2d0 [ 854.498709][T22542] ? __pfx___might_resched+0x10/0x10 [ 854.498763][T22542] down_write+0x92/0x200 [ 854.498800][T22542] ? ocfs2_lock_global_qf+0x1c1/0x2d0 [ 854.498852][T22542] ? __pfx_down_write+0x10/0x10 [ 854.498893][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.498934][T22542] ? do_raw_spin_unlock+0x172/0x230 [ 854.498979][T22542] ocfs2_lock_global_qf+0x1c1/0x2d0 [ 854.499031][T22542] ? __pfx_ocfs2_lock_global_qf+0x10/0x10 [ 854.499089][T22542] ocfs2_acquire_dquot+0x258/0xb00 [ 854.499146][T22542] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 854.499200][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499245][T22542] dqget+0x693/0x1180 [ 854.499286][T22542] ? __pfx_dqget+0x10/0x10 [ 854.499323][T22542] ? map_id_range_down+0x2bc/0x3b0 [ 854.499368][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499408][T22542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 854.499459][T22542] dquot_set_dqblk+0x2b/0x1290 [ 854.499503][T22542] quota_setquota+0x4c4/0x5e0 [ 854.499563][T22542] ? __pfx_quota_setquota+0x10/0x10 [ 854.499616][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499672][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499712][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499752][T22542] ? security_capable+0x7e/0x260 [ 854.499785][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499829][T22542] do_quotactl+0xaf6/0x13d0 [ 854.499882][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.499922][T22542] ? __pfx_do_quotactl+0x10/0x10 [ 854.499976][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.500020][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.500060][T22542] ? user_get_super+0x109/0x1b0 [ 854.500114][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.500154][T22542] ? quotactl_block+0x17e/0x690 [ 854.500206][T22542] ? __pfx_quotactl_block+0x10/0x10 [ 854.500265][T22542] __x64_sys_quotactl+0x1b3/0x440 [ 854.500296][T22542] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 854.500350][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.500390][T22542] ? xfd_validate_state+0x61/0x180 [ 854.500425][T22542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 854.500470][T22542] do_syscall_64+0xcd/0x4e0 [ 854.500508][T22542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.500546][T22542] RIP: 0033:0x7f03b758eec9 [ 854.500572][T22542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.500606][T22542] RSP: 002b:00007f03b84d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 854.500636][T22542] RAX: ffffffffffffffda RBX: 00007f03b77e5fa0 RCX: 00007f03b758eec9 [ 854.500659][T22542] RDX: 0000000000000000 RSI: 0000200000002540 RDI: ffffffff80000800 [ 854.500681][T22542] RBP: 00007f03b7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 854.500702][T22542] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 854.500723][T22542] R13: 00007f03b77e6038 R14: 00007f03b77e5fa0 R15: 00007ffebd1551d8 [ 854.500756][T22542] [ 854.895505][T22590] delete_channel: no stack [ 854.917840][ T5822] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 854.934598][T22562] loop0: detected capacity change from 0 to 32768 [ 854.989000][ T6377] ocfs2: Unmounting device (7,3) on (node local) [ 855.011107][T22562] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 855.149856][T22562] XFS (loop0): Ending clean mount [ 855.157984][T22562] XFS (loop0): Quotacheck needed: Please wait. [ 855.173126][T22562] XFS (loop0): Quotacheck: Done. [ 855.212221][ T6362] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791