last executing test programs: 3m52.237847258s ago: executing program 4 (id=168): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800090, &(0x7f0000000d80)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c726f6469722c636865636b3d7374726963742c726f6469722c757466383d302c696f636861727365743d63703836332c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c7379735f696d6d757461626c652c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d6d616363656c7469632c756e695f786c6174653d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c73686f72746e616d653d6d1f39e3d42c757466383d312c73686f72744c616d653d77696e39352c757466383d302c7365636c6162656c2c00"], 0x6, 0x2d1, &(0x7f00000021c0)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0) 3m51.92286887s ago: executing program 4 (id=169): syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f3200000be550020080000198c3b790000c19e57fc847c52a1695a251b480e31f9126b9b0b247df0690ca7d757194d0335d8e8a065e069e1290c00000000000000988309e751e0eec20f77"], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 3m51.537655811s ago: executing program 4 (id=170): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) 3m51.341340542s ago: executing program 4 (id=171): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$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") mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB="2373797a313b730c53797a302e626188"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 3m51.172345253s ago: executing program 4 (id=172): timer_create(0x0, 0x0, &(0x7f0000000680)=0x0) timer_getoverrun(r0) 3m50.718177295s ago: executing program 4 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0) 3m50.514256747s ago: executing program 32 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}}, 0x0) 1m22.312956619s ago: executing program 2 (id=2940): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000002c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 1m22.13343768s ago: executing program 2 (id=2944): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0xb101, 0x0) 1m22.022552631s ago: executing program 2 (id=2947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 1m21.905185341s ago: executing program 2 (id=2950): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75d, &(0x7f0000001100)="$eJzs3M9rHFUcAPDvTLJNf0Q3ggf1IEILLZROkubSnowX8VIoFLzWkExCyCRbspvaxEJbz0JtLgqC6N2jV6HUP8CbFBS8C6I1HsRLZDabtE1347ZNsho/H5jsezPv7fd9dyYvM5C3AfxvvVH+SCIGI+JiRFRb+9OIONQsHY64udFu7cH1yXJLYn390q9J2S3W1qtb75W0Xo9Fs0u8EhH3KhGnP3wybn15ZW6iKPLFVn24MX9luL68cmZ2fmImn8kXRsfOj5wbGzs3MrZruZ549/yRO9+9vbr6/deN26/3n0livJl3tHLbtUCP2PhMKjG+bf/CXgTroaSLNv37MA4AAHZW3uf3te7NKlGNPndpAAAAcOCsD6wDAAAAB14SvR4BAAAAsLc2/w9gc23vXq2D7eSXtyJiqF38/uYa4ojDUYmIo2vJYysTko1u8Fxu3oqIu+Ntrr+kdf09u5Ft9W7WSLO/7pbzz3i7+Sfdmn+izfzTv/ndCc+p8/z3MH5fh/nvYpcxvvn81UrH+LciXutvFz/Zip90iP9el/Fvr350p9Ox9S8jTrb9+5M8FmuH74cYnp4tdvzVuvfXqfs75X/0ifhJ0oya7Jz/lS7z/2Dt97lOc0kZ/9Txnc//RvyBx/qV18THrXGkEXGn9VrWV7fFOD7/w7dPRk5ubsaf6vD5tz//72zl/0WX+f/01cC1LpsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAUxoRg5Gk2VY5TbMs4lhEvBxH06JWb5yeri0tTJXHIoaikk7PFvlIRFQ36klZH22WH9bPbquPRcRLPx7ZCDpb5NlkrZjqdfIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsORYRg5GkWUSkEfFHNU2zrNejAgAAAHbdUK8HAAAAAOw5z/8AAABw8D3r83+yy+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrSLFy6U2/rag+uTZX3q6vLSXO3qmam8PpfNL01mk7XFK9lMrTZT5Nlkbf6f3i+NiNHzsXRtuJHXG8P15ZXL87Wlhcbl2fmJmfxyXtmXrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhag80tSbOISJvlNM2yiBciYigqyfRskY9ExIsRcb9aGSjro70eNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALuuvrwyN1EU+aLCf7EQSUSnNn1O7n4WIp6m143ofOL+HYVez0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRCfXllbqIo8sV6r0cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb6U/JxFRbierJwa3Hz2U/FltvkbE+59d+uTaRKOxOFru/21rf+PT1v6zj3S8sZ85AAAAwIH35tM03nxO33yOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6FZ9eWVuoijyxT0sxK1eZwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyLvwMAAP//88PCiA==") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000040, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x8}}]}) 1m21.325093994s ago: executing program 2 (id=2955): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="3000000000000000840000000100"/44, @ANYRES32=0x0, @ANYBLOB="180000000000000084000000150000"], 0x48}, 0x0) 1m20.582328228s ago: executing program 2 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 1m20.393529238s ago: executing program 33 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 53.741302015s ago: executing program 6 (id=3412): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) 53.667522915s ago: executing program 6 (id=3415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001d00000008000a"], 0x24}}, 0x0) 53.586552765s ago: executing program 6 (id=3417): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 53.453154396s ago: executing program 6 (id=3420): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@nls={'nls', 0x3d, 'maccyrillic'}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x8}}, {@type={'type', 0x3d, "dafd7c7f"}}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 53.145701297s ago: executing program 6 (id=3428): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0xdd, 0x166, &(0x7f0000000200)="$eJzs0E+LUmEUx/Hv7V7rRppFBRZUQoskM69XrDZBGkkuUirctBL0RoFiJJS7lGjXIpitCx1hVuJbcMaZjY4Dg/MiZjauZ+lw/zDMYsAXMOezufA7557zPM/bV3sRPQwKwGt4U699/2E1GlYl/LHwPvvpaDRK26XL+NA5W8exmYav9leDRRvseDsAX75VrWflerUCV9FZXgEy19zcsDO4BPQ03CyB+3/kEYzvuJl5Tpb0snsaZILePB8se/DY3nHzdJ5zpWYnOkwf5meTXOzJxn2Vv7now1vKUoEorWnwg50/sP6Z2bt9f0ilaO2sk1Gg3jmIT2L78eFgjidpms+TRsIwUvPC7iyXav1He+f/CZ8VZ48+mOZnmtesFeGPAmtObbGlBIBx97hQu/6i67a8fPpLtV++2SmXQr5+6faNFmrEPTZtVvi9qkEIIYQQQgghhBBCCCGEEEIIIcRFchIAAP//yMdcxw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 52.5534335s ago: executing program 6 (id=3433): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2c, 0x0, 0x108) 52.358753731s ago: executing program 34 (id=3433): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2c, 0x0, 0x108) 2.695874187s ago: executing program 7 (id=4279): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.063740779s ago: executing program 0 (id=4295): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f0000000380)={{}, 'port0\x00'}) 2.02684788s ago: executing program 1 (id=4296): r0 = getpid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 1.96929357s ago: executing program 0 (id=4298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(r0, 0x6, &(0x7f00000003c0)={0x0, 0x2, 0x5, 0x2}) 1.96547958s ago: executing program 1 (id=4299): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0xffffffffffffffff) 1.892401451s ago: executing program 1 (id=4301): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) 1.834419521s ago: executing program 0 (id=4302): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x8, 0xc, 0xfffffe01}, 0xc) 1.824273711s ago: executing program 1 (id=4303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6c}]}, 0x34}}, 0x0) 1.802820451s ago: executing program 0 (id=4304): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4044001}, 0x44) 1.724553331s ago: executing program 1 (id=4305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.662471832s ago: executing program 0 (id=4306): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x181040, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0xfffb7ffa, 0x800010, 0xffffff6e, 0xfffffff7, 0x4, "59dcf2cdeabaf1dd6dc3eb6f8e4497271fdae1", 0x4, 0xffffffff}) 1.560354592s ago: executing program 1 (id=4307): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x470b, &(0x7f0000008f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.479324872s ago: executing program 0 (id=4308): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f00000007c0)=ANY=[]) 577.379987ms ago: executing program 7 (id=4319): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x67}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 466.360377ms ago: executing program 5 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000009940)={0x0, 0x0, &(0x7f0000009900)={&(0x7f0000000400)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 401.763597ms ago: executing program 5 (id=4322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x1c}]}, 0x154}}, 0x0) 374.148118ms ago: executing program 7 (id=4324): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) 333.894838ms ago: executing program 5 (id=4325): r0 = socket(0x25, 0x801, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 330.850958ms ago: executing program 3 (id=4326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) 286.469248ms ago: executing program 7 (id=4327): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 271.096438ms ago: executing program 3 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 233.590798ms ago: executing program 5 (id=4329): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000380)=@secondary) 191.995068ms ago: executing program 7 (id=4330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 177.568498ms ago: executing program 3 (id=4331): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, 0x0) 156.916409ms ago: executing program 5 (id=4332): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYBLOB="0300000000000000140012800b0001006d61637365630000040002"], 0x44}}, 0x0) 99.793029ms ago: executing program 5 (id=4333): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000000d80)={[{@noadinicb}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000001a40)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) 71.349409ms ago: executing program 3 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 42.999259ms ago: executing program 3 (id=4335): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x27, 0x9, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 14.9037ms ago: executing program 3 (id=4336): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x1, &(0x7f0000000280)={0x0, "337154b49e54823613b59e688cab162931144d94d93fafbf44d7300c8e471c0747"}}) 0s ago: executing program 7 (id=4337): r0 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000000c0)=""/253, &(0x7f0000000000)=0xfd) kernel console output (not intermixed with test programs): ity change from 0 to 512 [ 195.789802][T13328] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.936455][T13328] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2437: casefold flag without casefold feature [ 195.958792][T13328] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2437: couldn't read orphan inode 15 (err -117) [ 195.979392][T13328] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 196.071963][T13354] delete_channel: no stack [ 196.126492][T13328] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.2437: Directory hole found for htree leaf block 0 [ 196.162556][ T4648] Bluetooth: hci3: command 0x0406 tx timeout [ 196.242054][T13360] loop2: detected capacity change from 0 to 4096 [ 196.244029][T13255] loop5: detected capacity change from 0 to 32768 [ 196.553298][T13255] XFS (loop5): Mounting V5 Filesystem [ 196.749104][T13397] loop1: detected capacity change from 0 to 4096 [ 196.774750][T13255] XFS (loop5): Ending clean mount [ 196.815669][T13255] XFS (loop5): Quotacheck needed: Please wait. [ 196.824885][T13423] loop2: detected capacity change from 0 to 128 [ 196.897862][T13423] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noquota,,errors=continue. Quota mode: none. [ 196.991384][T13397] ntfs: volume version 3.1. [ 197.095464][T13255] XFS (loop5): Quotacheck: Done. [ 197.130368][T13423] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 197.150647][T13423] ext4 filesystem being remounted at /489/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.182533][ T4216] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.240018][ T4657] XFS (loop5): Unmounting Filesystem [ 197.691508][T13459] loop2: detected capacity change from 0 to 1024 [ 197.753512][T13459] EXT4-fs (loop2): Ignoring removed orlov option [ 197.759895][T13459] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 197.796895][T13459] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 197.812752][T13459] System zones: 0-1, 3-36 [ 197.819796][T13467] loop1: detected capacity change from 0 to 1764 [ 197.820733][T13459] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 197.828622][ T4216] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=e1.35 [ 197.904767][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.992713][ T4216] usb 4-1: Product: syz [ 197.997008][ T4216] usb 4-1: Manufacturer: syz [ 198.000959][ C1] sd 0:0:1:0: tag#1355 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 198.001610][ T4216] usb 4-1: SerialNumber: syz [ 198.011476][ C1] sd 0:0:1:0: tag#1355 CDB: Test Unit Ready [ 198.011498][ C1] sd 0:0:1:0: tag#1355 CDB[00]: 00 00 00 00 00 00 c8 62 b7 79 b6 eb b7 bd 33 12 [ 198.011516][ C1] sd 0:0:1:0: tag#1355 CDB[10]: ba b8 5b e5 50 f7 67 9d 8e 9d 88 b8 86 ed d2 6b [ 198.011534][ C1] sd 0:0:1:0: tag#1355 CDB[20]: 0f 5d 53 d0 6b 1d [ 198.157695][ T4216] usb 4-1: config 0 descriptor?? [ 198.205727][ T4216] (null): radio-mr800 - initialization failed [ 198.212171][ T4216] radio-mr800: probe of 4-1:0.0 failed with error -22 [ 198.252044][ T4216] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 198.429867][T13516] loop5: detected capacity change from 0 to 16 [ 198.461452][T13216] usb 4-1: USB disconnect, device number 11 [ 198.625703][T13516] erofs: (device loop5): mounted with root inode @ nid 36. [ 198.652598][ T4398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 198.678509][T13516] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.710444][T13516] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -65 in[64, 4032] out[1851] [ 198.754578][T13516] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 198.942947][ T4398] usb 1-1: Using ep0 maxpacket: 8 [ 199.072822][ T4398] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 199.104361][ T4398] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.155353][ T4398] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 199.207031][ T4398] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 199.233326][ T4398] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.279370][ T4398] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.326211][ T4398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.380288][T13581] xt_policy: output policy not valid in PREROUTING and INPUT [ 199.433734][ T4398] usbtmc 1-1:16.0: bulk endpoints not found [ 199.590850][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 199.621891][T13606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2515'. [ 199.686559][ T4398] usb 1-1: USB disconnect, device number 12 [ 200.670966][T13597] loop2: detected capacity change from 0 to 32768 [ 200.716623][T13624] loop1: detected capacity change from 0 to 32768 [ 200.802640][T13216] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 200.843505][T13624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2519 (13624) [ 200.930218][ T4460] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (4460) [ 200.952784][T13624] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 200.964570][T13624] BTRFS info (device loop1): using free space tree [ 200.998814][T13624] BTRFS info (device loop1): has skinny extents [ 201.092493][T13216] usb 6-1: Using ep0 maxpacket: 8 [ 201.235943][T13216] usb 6-1: config 0 has an invalid interface number: 6 but max is 2 [ 201.247563][T13216] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 201.265032][T13216] usb 6-1: config 0 has no interface number 1 [ 201.278049][T13216] usb 6-1: config 0 has no interface number 2 [ 201.291191][T13216] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 201.310738][T13216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.332498][T13624] BTRFS info (device loop1): enabling ssd optimizations [ 201.365742][T13216] usb 6-1: config 0 descriptor?? [ 201.553014][T13694] loop3: detected capacity change from 0 to 32768 [ 201.665153][T13216] qcserial 6-1:0.6: Qualcomm USB modem converter detected [ 201.733617][T13694] (syz.3.2542,13694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.805476][T13694] (syz.3.2542,13694,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.911281][T10773] usb 6-1: USB disconnect, device number 7 [ 201.938559][T10773] qcserial 6-1:0.6: device disconnected [ 201.954323][T13694] JBD2: Ignoring recovery information on journal [ 202.048942][T13694] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 202.102568][T13216] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.151802][ T4180] ocfs2: Unmounting device (7,3) on (node local) [ 202.397615][T13216] usb 3-1: Using ep0 maxpacket: 16 [ 202.542540][T13216] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.560567][T13216] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.662936][T13781] loop3: detected capacity change from 0 to 4096 [ 202.682151][T13799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 202.761105][T13781] ntfs: volume version 3.1. [ 202.791406][T13807] loop5: detected capacity change from 0 to 512 [ 202.802705][T13216] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 202.815714][T13216] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 202.844863][T13216] usb 3-1: Product: syz [ 202.849066][T13216] usb 3-1: Manufacturer: syz [ 202.856159][T13216] usb 3-1: SerialNumber: syz [ 202.865684][T13807] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 202.865684][T13807] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 202.865684][T13807] [ 202.892738][T13807] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.903644][T13216] usb 3-1: config 0 descriptor?? [ 202.944425][T13216] usb 3-1: NFC: intf ffff8880652e2000 id ffffffff8d149b20 [ 202.997777][T13807] EXT4-fs (loop5): 1 truncate cleaned up [ 203.045242][T13807] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,noacl,quota,,errors=continue. Quota mode: writeback. [ 203.128451][T13832] netlink: 'syz.1.2569': attribute type 29 has an invalid length. [ 203.200296][T10778] usb 3-1: USB disconnect, device number 8 [ 203.303204][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'. [ 203.332486][T13854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2574'. [ 203.617246][T13892] loop5: detected capacity change from 0 to 64 [ 203.626279][T13891] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2587'. [ 203.741714][T13902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2589'. [ 203.815819][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2591'. [ 203.846207][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 203.971048][T13927] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2600'. [ 205.033487][T13976] loop2: detected capacity change from 0 to 4096 [ 205.152781][T13976] ntfs: volume version 3.1. [ 205.326210][T13930] loop3: detected capacity change from 0 to 32768 [ 205.450934][T13930] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 205.490933][T13930] BTRFS info (device loop3): force zlib compression, level 3 [ 205.506957][T13930] BTRFS info (device loop3): force clearing of disk cache [ 205.555588][T13930] BTRFS info (device loop3): setting nodatasum [ 205.561889][T13930] BTRFS info (device loop3): allowing degraded mounts [ 205.596807][T13942] loop5: detected capacity change from 0 to 32768 [ 205.612500][T13930] BTRFS info (device loop3): enabling disk space caching [ 205.642672][T13930] BTRFS info (device loop3): disk space caching is enabled [ 205.649909][T13930] BTRFS info (device loop3): has skinny extents [ 205.711152][T13956] loop1: detected capacity change from 0 to 32768 [ 205.777536][T13942] JBD2: Ignoring recovery information on journal [ 205.881375][T13956] XFS (loop1): Mounting V5 Filesystem [ 205.903652][T13942] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 205.973422][T13930] BTRFS info (device loop3): clearing free space tree [ 206.005146][T13930] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.068583][T14049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'. [ 206.070995][T13930] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.093172][T13956] XFS (loop1): Ending clean mount [ 206.140906][T13930] BTRFS error (device loop3): unable to set label with more than 255 bytes [ 206.151679][ T4657] ocfs2: Unmounting device (7,5) on (node local) [ 206.160269][ T4167] XFS (loop1): Unmounting Filesystem [ 206.725000][T14089] netlink: 'syz.0.2640': attribute type 3 has an invalid length. [ 206.759185][T14093] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.2641'. [ 206.803563][T14093] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 206.868841][T14097] netlink: 'syz.3.2633': attribute type 13 has an invalid length. [ 207.160418][T14119] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 207.172664][T14119] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2650'. [ 207.195588][T14119] nbd: couldn't find a device at index 33022 [ 207.502714][T14149] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2658'. [ 207.511737][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2658'. [ 207.629190][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2658'. [ 207.681325][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2658'. [ 207.921056][T14168] loop3: detected capacity change from 0 to 1024 [ 208.059486][T14168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.402127][T14121] loop2: detected capacity change from 0 to 32768 [ 208.513517][T14208] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 208.632740][T14146] loop1: detected capacity change from 0 to 32768 [ 208.669173][T14121] XFS (loop2): Mounting V5 Filesystem [ 208.745744][T14146] (syz.1.2657,14146,0):ocfs2_slot_map_physical_size:223 ERROR: Slot map file is too small! (size 2, needed 8) [ 208.867073][T14121] XFS (loop2): Ending clean mount [ 208.957535][T13216] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 209.024264][T14253] loop3: detected capacity change from 0 to 512 [ 209.062800][ T4166] XFS (loop2): Unmounting Filesystem [ 209.102149][T14253] EXT4-fs (loop3): Ignoring removed oldalloc option [ 209.142424][T14253] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 209.142424][T14253] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 209.142424][T14253] [ 209.242229][T14253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2687: Parent and EA inode have the same ino 15 [ 209.257182][T13216] usb 1-1: Using ep0 maxpacket: 16 [ 209.288555][T14253] EXT4-fs (loop3): Remounting filesystem read-only [ 209.313629][T14253] EXT4-fs (loop3): 1 orphan inode deleted [ 209.319395][T14253] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,errors=remount-ro,user_xattr,errors=remount-ro,oldalloc,noacl,. Quota mode: writeback. [ 209.422669][T13216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.449988][T13216] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.574143][T13216] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.599230][T14293] netlink: 'syz.5.2700': attribute type 40 has an invalid length. [ 209.614761][T13216] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.641347][T13216] usb 1-1: Manufacturer: syz [ 209.676661][T13216] usb 1-1: config 0 descriptor?? [ 209.734053][T14300] loop1: detected capacity change from 0 to 8 [ 209.890942][ T26] audit: type=1800 audit(1731568647.646:9): pid=14300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2701" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 209.935142][T14320] loop5: detected capacity change from 0 to 2048 [ 209.984594][ T4216] usb 1-1: USB disconnect, device number 13 [ 209.994750][T14320] UDF-fs: bad mount option "gidUignore" or missing value [ 210.028753][T14333] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 210.216687][T14353] loop5: detected capacity change from 0 to 64 [ 210.432733][T14362] loop1: detected capacity change from 0 to 4096 [ 210.529165][T14362] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 210.647046][T14390] loop5: detected capacity change from 0 to 256 [ 210.773026][T14390] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 211.146513][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2746'. [ 211.168137][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2746'. [ 211.207767][T14445] netlink: 'syz.1.2746': attribute type 6 has an invalid length. [ 211.429285][T14469] device bond1 entered promiscuous mode [ 211.436172][T14469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.762204][T14553] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 211.799315][T14553] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 211.989513][T14568] loop5: detected capacity change from 0 to 2048 [ 212.045258][T14559] loop1: detected capacity change from 0 to 4096 [ 212.091712][T14568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.111871][T14559] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 212.320511][T14596] sctp: [Deprecated]: syz.5.2779 (pid 14596) Use of int in maxseg socket option. [ 212.320511][T14596] Use struct sctp_assoc_value instead [ 212.393918][T14598] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 212.537994][T14614] loop3: detected capacity change from 0 to 1024 [ 212.608601][T14547] loop2: detected capacity change from 0 to 32768 [ 212.717624][T14547] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2767 (14547) [ 212.840726][T14547] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 212.861064][T14547] BTRFS info (device loop2): using free space tree [ 212.873296][T14547] BTRFS info (device loop2): has skinny extents [ 213.084304][T14681] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 213.133340][T14681] overlayfs: missing 'lowerdir' [ 213.149892][T14547] BTRFS info (device loop2): enabling ssd optimizations [ 213.335213][ T4216] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 213.762984][ T4216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.784466][ T4216] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 213.821454][ T4216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.876237][T14720] netlink: 'syz.5.2813': attribute type 1 has an invalid length. [ 213.920270][ T4216] usb 4-1: config 0 descriptor?? [ 214.025068][ T4216] rndis_wlan: probe of 4-1:0.0 failed with error -22 [ 214.067192][ T4216] rndis_host: probe of 4-1:0.0 failed with error -22 [ 214.113806][ T4216] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 214.178581][ T4216] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 214.207320][ T4216] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 214.257571][ T4216] usb 4-1: USB disconnect, device number 12 [ 214.749033][T14693] loop1: detected capacity change from 0 to 32768 [ 214.918221][T14693] ERROR: (device loop1): dtSearch: stack overrun! [ 214.918221][T14693] [ 214.945713][T14769] loop3: detected capacity change from 0 to 1764 [ 214.964744][T14693] ERROR: (device loop1): remounting filesystem as read-only [ 214.987792][T14772] loop5: detected capacity change from 0 to 2048 [ 214.995135][T14693] btstack dump: [ 214.998696][T14693] bn = 0, index = 4 [ 215.003154][T14693] bn = 0, index = 4 [ 215.007444][T14693] bn = 0, index = 4 [ 215.011420][T14693] bn = 0, index = 4 [ 215.018004][T14693] bn = 0, index = 4 [ 215.048473][T14693] bn = 0, index = 4 [ 215.063596][T14772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.082942][T14693] bn = 0, index = 4 [ 215.090336][T14693] bn = 0, index = 0 [ 215.160093][T14693] jfs_lookup: dtSearch returned -5 [ 215.245043][T14724] loop2: detected capacity change from 0 to 32768 [ 215.303697][T14724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2807 (14724) [ 215.395930][T14724] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 215.415006][T14724] BTRFS info (device loop2): using free space tree [ 215.424613][T14724] BTRFS info (device loop2): has skinny extents [ 215.472020][T14808] netlink: 'syz.5.2838': attribute type 21 has an invalid length. [ 215.482882][T14808] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2838'. [ 215.985315][T14724] BTRFS info (device loop2): enabling ssd optimizations [ 216.091666][T14869] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 216.870202][ T4460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4460) [ 216.977316][T14929] loop5: detected capacity change from 0 to 8 [ 217.064947][T14934] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2874'. [ 217.171173][ T4394] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.325571][T14954] loop1: detected capacity change from 0 to 128 [ 217.444462][ T4394] usb 1-1: Using ep0 maxpacket: 16 [ 217.466385][T14954] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.520537][T14954] ext4 filesystem being mounted at /548/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.743029][ T4394] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.768495][ T4394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.812726][ T4394] usb 1-1: Product: syz [ 217.816932][ T4394] usb 1-1: Manufacturer: syz [ 217.821547][ T4394] usb 1-1: SerialNumber: syz [ 217.869622][ T4394] r8152-cfgselector 1-1: config 0 descriptor?? [ 218.166999][T15010] netlink: 'syz.1.2896': attribute type 1 has an invalid length. [ 218.309476][T14957] loop3: detected capacity change from 0 to 40427 [ 218.362564][ T4168] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 218.392936][ T4394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 218.399349][ T4394] r8152-cfgselector 1-1: bad CDC descriptors [ 218.408155][T14957] F2FS-fs (loop3): invalid crc value [ 218.429483][T14957] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.454161][ T4394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 218.493327][ T4394] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 218.560614][T14957] F2FS-fs (loop3): recover fsync data on readonly fs [ 218.582003][T14957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.632427][ T4168] usb 6-1: Using ep0 maxpacket: 32 [ 218.679673][T14990] loop2: detected capacity change from 0 to 32768 [ 218.760951][T14990] JBD2: Ignoring recovery information on journal [ 218.852802][ T4168] usb 6-1: config 0 has no interfaces? [ 218.898196][T14990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 219.062819][ T4168] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.071902][ T4168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.115960][ T4168] usb 6-1: Product: syz [ 219.132474][ T4168] usb 6-1: Manufacturer: syz [ 219.137146][ T4168] usb 6-1: SerialNumber: syz [ 219.151253][ T4166] ocfs2: Unmounting device (7,2) on (node local) [ 219.180744][ T4168] usb 6-1: config 0 descriptor?? [ 219.536925][T13216] usb 6-1: USB disconnect, device number 8 [ 219.946018][T15124] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2928'. [ 220.343655][T15140] netlink: 'syz.2.2933': attribute type 1 has an invalid length. [ 220.483702][T15097] loop3: detected capacity change from 0 to 32768 [ 220.570124][T15110] loop1: detected capacity change from 0 to 32768 [ 220.738030][T15110] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 220.738030][T15110] [ 220.782208][T15110] ERROR: (device loop1): remounting filesystem as read-only [ 220.811337][T15110] ERROR: (device loop1): duplicateIXtree: [ 220.811337][T15110] [ 220.944440][T15164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2940'. [ 221.066259][T15168] (unnamed net_device) (uninitialized): option use_carrier: invalid value (3) [ 221.429593][T15192] loop2: detected capacity change from 0 to 2048 [ 221.442122][T15142] loop5: detected capacity change from 0 to 32768 [ 221.533049][T15142] [ 221.533049][T15142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.533049][T15142] [ 221.587595][T15142] [ 221.587595][T15142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.587595][T15142] [ 221.632921][T15192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.651494][T15192] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.672855][T15142] [ 221.672855][T15142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.672855][T15142] [ 221.702458][T10775] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 221.757356][ T274] [ 221.757356][ T274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.757356][ T274] [ 221.812199][ T3058] [ 221.812199][ T3058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.812199][ T3058] [ 221.835682][ T4166] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /573/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 221.863269][ T3058] [ 221.863269][ T3058] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.863269][ T3058] [ 221.885970][ T4657] [ 221.885970][ T4657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.885970][ T4657] [ 221.930605][ T274] [ 221.930605][ T274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.930605][ T274] [ 221.956933][T10775] usb 4-1: Using ep0 maxpacket: 32 [ 221.966599][ T4166] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 221.994480][ T4657] [ 221.994480][ T4657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 221.994480][ T4657] [ 222.016337][ T4166] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 222.243883][T10775] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 222.265092][T10775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.304589][T10775] usb 4-1: Product: syz [ 222.309446][T10775] usb 4-1: Manufacturer: syz [ 222.335459][T10775] usb 4-1: SerialNumber: syz [ 222.353410][T10775] usb 4-1: config 0 descriptor?? [ 222.466695][T15211] loop1: detected capacity change from 0 to 32768 [ 222.476313][T10563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.632834][T10775] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 222.646265][T10775] eb 9a 47 80 9b f8 7a f0 [ 222.646911][T10563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.650897][T10775] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 222.771482][T10563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.849930][T10563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.870107][T15248] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2963'. [ 222.903707][T10775] usb 4-1: USB disconnect, device number 13 [ 223.155772][T10563] device ðÿÿÿÿÿÿÿö left promiscuous mode [ 223.814113][T15357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'. [ 223.929041][T15385] usb usb1: usbfs: process 15385 (syz.3.2980) did not claim interface 0 before use [ 224.124991][T15294] loop1: detected capacity change from 0 to 32768 [ 224.239812][T15294] ea_get: invalid extended attribute [ 224.281468][T15294] ffff888062783170: 04 00 00 00 .... [ 224.454225][T15284] chnl_net:caif_netlink_parms(): no params data found [ 224.524559][T15463] loop3: detected capacity change from 0 to 64 [ 225.024952][T15488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2986'. [ 225.272835][T10759] Bluetooth: hci0: command 0x0409 tx timeout [ 225.526534][T15284] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.536810][T15284] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.563658][T15284] device bridge_slave_0 entered promiscuous mode [ 225.617475][T15284] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.669483][T15284] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.687719][T15284] device bridge_slave_1 entered promiscuous mode [ 225.695235][T15520] loop3: detected capacity change from 0 to 4096 [ 225.770388][T15520] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 225.801250][T15284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.911663][T15520] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 225.934630][T15284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.961804][T15520] ntfs3: loop3: mft corrupted [ 225.972540][T15520] ntfs3: loop3: Failed to load $Extend. [ 226.054187][T15520] ntfs3: loop3: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 226.125753][T15284] team0: Port device team_slave_0 added [ 226.192457][T10759] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 226.206696][T15284] team0: Port device team_slave_1 added [ 226.373476][T15284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.380700][T15284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.428890][T15284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.469764][T15284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.484906][T15284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.514638][T15687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3009'. [ 226.537446][T15687] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3009'. [ 226.551758][T15284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.590708][T15687] netlink: 'syz.3.3009': attribute type 5 has an invalid length. [ 226.732913][T10759] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 226.763053][T10759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.789564][T10759] usb 1-1: Product: syz [ 226.812677][T10759] usb 1-1: Manufacturer: syz [ 226.817318][T10759] usb 1-1: SerialNumber: syz [ 226.844521][T10759] usb 1-1: config 0 descriptor?? [ 226.903521][T10759] pwc: Philips PCA645VC USB webcam detected. [ 226.976028][T15284] device hsr_slave_0 entered promiscuous mode [ 227.004592][T15284] device hsr_slave_1 entered promiscuous mode [ 227.029327][T15284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.042781][T15284] Cannot create hsr debugfs directory [ 227.134797][T10563] device hsr_slave_0 left promiscuous mode [ 227.142572][T10759] pwc: send_video_command error -71 [ 227.147802][T10759] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 227.182586][T10759] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 227.222536][T10563] device hsr_slave_1 left promiscuous mode [ 227.224276][T10759] usb 1-1: USB disconnect, device number 15 [ 227.274596][T10563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.317027][T10563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.352689][ T4395] Bluetooth: hci0: command 0x041b tx timeout [ 227.371087][T10563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.401581][T10563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.430381][T10563] batman_adv: batadv0: Interface deactivated: vlan1 [ 227.470494][T10563] batman_adv: batadv0: Removing interface: vlan1 [ 227.481322][T10563] device bridge_slave_1 left promiscuous mode [ 227.548096][T10563] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.593742][T10563] device bridge_slave_0 left promiscuous mode [ 227.600034][T10563] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.614722][T15790] loop3: detected capacity change from 0 to 764 [ 227.649573][T10563] device veth1_macvtap left promiscuous mode [ 227.664865][T10563] device veth0_macvtap left promiscuous mode [ 227.671057][T10563] device veth1_vlan left promiscuous mode [ 227.677566][T10563] device veth0_vlan left promiscuous mode [ 227.720455][T15790] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.779497][T15790] Symlink component flag not implemented [ 227.791070][T15690] loop5: detected capacity change from 0 to 32768 [ 227.810882][T15790] Symlink component flag not implemented [ 227.830296][T15790] Symlink component flag not implemented (128) [ 227.862555][T15790] Symlink component flag not implemented (122) [ 227.877406][T15690] jfs_strtoUCS: char2uni returned -22. [ 227.891714][T15690] charset = cp932, char = 0xfc [ 228.218343][T10563] bond1 (unregistering): Released all slaves [ 228.726546][T10563] team0 (unregistering): Port device team_slave_1 removed [ 228.754368][T10563] team0 (unregistering): Port device team_slave_0 removed [ 228.804530][T10563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.812932][T15855] damon: min_nr_regions (0) must be at least 3 [ 228.833916][T10563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.023640][T10563] bond0 (unregistering): Released all slaves [ 229.121079][T15845] loop5: detected capacity change from 0 to 32768 [ 229.168900][T15829] device veth3 entered promiscuous mode [ 229.183794][T15845] (syz.5.3036,15845,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.199499][T15884] xt_TCPMSS: Only works on TCP SYN packets [ 229.252898][T15845] (syz.5.3036,15845,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.339784][T15909] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.3045'. [ 229.376451][T15845] JBD2: Ignoring recovery information on journal [ 229.416318][T15845] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 229.442724][ T4394] Bluetooth: hci0: command 0x040f tx timeout [ 229.709690][ T4657] ocfs2: Unmounting device (7,5) on (node local) [ 229.798206][T15966] loop3: detected capacity change from 0 to 512 [ 229.838806][T15284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.943743][T15284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.004417][T15284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.054122][T15284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.073214][T15966] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 230.122132][T16002] binfmt_misc: register: failed to install interpreter file ./file0 [ 230.195447][T15966] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.588739][T15284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.697365][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.721105][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.777649][T15284] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.851445][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.863487][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.912630][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.919752][T10547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.983939][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.031660][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.083148][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.090378][T10547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.224003][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.252155][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.291981][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.321800][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.367046][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.425187][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.454882][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.492077][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.522784][ T4212] Bluetooth: hci0: command 0x0419 tx timeout [ 231.538739][T15284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.610178][T15284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.657409][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.677815][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.717123][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.754798][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.804577][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.077082][T16110] loop1: detected capacity change from 0 to 2048 [ 232.189151][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.245079][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.261157][T16118] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.282367][T16110] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0 [ 232.319086][T15284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.352236][T16052] loop3: detected capacity change from 0 to 32768 [ 232.386455][T16110] Remounting filesystem read-only [ 232.411728][T16062] loop5: detected capacity change from 0 to 32768 [ 233.019240][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.093236][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.122581][T10773] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 233.184661][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.220648][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.262778][T15284] device veth0_vlan entered promiscuous mode [ 233.274182][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.318279][T16178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.336794][T10547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.362746][T10773] usb 2-1: Using ep0 maxpacket: 32 [ 233.370084][T15284] device veth1_vlan entered promiscuous mode [ 233.492700][T10773] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.506343][T15284] device veth0_macvtap entered promiscuous mode [ 233.523189][T10773] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.552458][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.567155][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.619928][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.644305][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.655072][T10554] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.671045][T15284] device veth1_macvtap entered promiscuous mode [ 233.682759][T10773] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.691827][T10773] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 233.710001][T10773] usb 2-1: Product: syz [ 233.714335][T10773] usb 2-1: Manufacturer: syz [ 233.771781][T10773] hub 2-1:4.0: USB hub found [ 233.806560][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.824808][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.854382][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.876601][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.878839][T16209] xt_hashlimit: max too large, truncated to 1048576 [ 233.895850][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.937961][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.961519][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.984692][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.002629][T10773] hub 2-1:4.0: 2 ports detected [ 234.048958][T15284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.073639][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.097984][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.127741][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.170107][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.198064][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.224164][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.228530][T10773] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 234.244859][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.267741][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.282871][T10773] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 234.338070][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.359045][T10773] usb 2-1: USB disconnect, device number 11 [ 234.382971][T15284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.422505][T15284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.474491][T15284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.692426][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.706620][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.720082][T15284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.777486][T15284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.811660][T15284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.862461][T15284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.907305][T16256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3119'. [ 235.100492][T16268] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 235.159257][T16271] loop5: detected capacity change from 0 to 16 [ 235.238741][T10542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.272141][T16271] erofs: (device loop5): mounted with root inode @ nid 36. [ 235.288000][T10542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.305992][T16288] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3127'. [ 235.342759][T16288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.377255][T10542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.445890][T10542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.494519][T10542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.540266][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.693266][T16321] loop1: detected capacity change from 0 to 2048 [ 235.781756][T16333] loop6: detected capacity change from 0 to 128 [ 235.850104][T16339] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.913933][T16340] cgroup: name respecified [ 236.073781][T16354] netlink: 'syz.6.3140': attribute type 4 has an invalid length. [ 236.282729][T16375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3146'. [ 236.549321][T16401] loop3: detected capacity change from 0 to 256 [ 236.661736][T16408] xt_connbytes: Forcing CT accounting to be enabled [ 236.691023][T16412] ipt_REJECT: TCP_RESET invalid for non-tcp [ 236.815224][T16422] delete_channel: no stack [ 236.929045][T16434] loop6: detected capacity change from 0 to 256 [ 237.101693][T16434] FAT-fs (loop6): Directory bread(block 64) failed [ 237.153148][T16434] FAT-fs (loop6): Directory bread(block 65) failed [ 237.182534][ T4648] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 237.196410][T16434] FAT-fs (loop6): Directory bread(block 66) failed [ 237.217809][T16434] FAT-fs (loop6): Directory bread(block 67) failed [ 237.245831][T16369] loop1: detected capacity change from 0 to 32768 [ 237.253018][T16434] FAT-fs (loop6): Directory bread(block 68) failed [ 237.292210][T16434] FAT-fs (loop6): Directory bread(block 69) failed [ 237.303274][T16369] XFS: attr2 mount option is deprecated. [ 237.310033][T16434] FAT-fs (loop6): Directory bread(block 70) failed [ 237.324814][T16434] FAT-fs (loop6): Directory bread(block 71) failed [ 237.331443][T16434] FAT-fs (loop6): Directory bread(block 72) failed [ 237.367815][T16434] FAT-fs (loop6): Directory bread(block 73) failed [ 237.403443][T16369] XFS (loop1): Mounting V5 Filesystem [ 237.433258][ T4648] usb 6-1: Using ep0 maxpacket: 8 [ 237.668968][T16369] XFS (loop1): Ending clean mount [ 237.697072][T16369] XFS (loop1): Quotacheck needed: Please wait. [ 237.712689][ T4648] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=de.43 [ 237.727640][ T4648] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.752436][ T4648] usb 6-1: Product: syz [ 237.763557][T10779] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.795392][ T4648] usb 6-1: Manufacturer: syz [ 237.810285][ T4648] usb 6-1: SerialNumber: syz [ 237.843114][ T4648] usb 6-1: config 0 descriptor?? [ 237.931543][ T4648] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 237.959092][ T4648] usb 6-1: selecting invalid altsetting 1 [ 238.032674][T10779] usb 4-1: Using ep0 maxpacket: 8 [ 238.044641][T16369] XFS (loop1): Quotacheck: Done. [ 238.102004][T16506] loop6: detected capacity change from 0 to 2048 [ 238.142471][ T4648] gspca_stk014: reg_r err -71 [ 238.147254][ T4648] stk014: probe of 6-1:0.0 failed with error -71 [ 238.155306][T10779] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 238.178810][T10779] usb 4-1: config 0 has no interface number 0 [ 238.218266][ T4648] usb 6-1: USB disconnect, device number 9 [ 238.226766][T10779] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.264209][ T4167] XFS (loop1): Unmounting Filesystem [ 238.292822][T16517] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.424363][T10779] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 238.448516][T10779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.497019][T10779] usb 4-1: Product: syz [ 238.501558][T10779] usb 4-1: Manufacturer: syz [ 238.532456][T10779] usb 4-1: SerialNumber: syz [ 238.547408][T10779] usb 4-1: config 0 descriptor?? [ 238.605745][T10779] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 238.649808][T10779] em28xx 4-1:0.191: Video interface 191 found: [ 238.724121][T16539] xt_TCPMSS: Only works on TCP SYN packets [ 238.855585][ T4648] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 238.968104][T16557] loop6: detected capacity change from 0 to 16 [ 239.032681][T10779] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 239.062201][T16557] erofs: (device loop6): mounted with root inode @ nid 36. [ 239.101069][T16557] attempt to access beyond end of device [ 239.101069][T16557] loop6: rw=0, want=34359739352, limit=16 [ 239.132537][ T4648] usb 1-1: Using ep0 maxpacket: 32 [ 239.153483][T10779] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 239.192687][T10779] em28xx 4-1:0.191: board has no eeprom [ 239.249930][T16583] netlink: 'syz.1.3191': attribute type 2 has an invalid length. [ 239.302746][T10779] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 239.329363][T10779] em28xx 4-1:0.191: analog set to bulk mode. [ 239.369703][T10779] usb 4-1: USB disconnect, device number 14 [ 239.382051][T16595] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3194'. [ 239.396611][T10779] em28xx 4-1:0.191: Disconnecting em28xx [ 239.422918][ T4648] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 239.443534][ T4648] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.451572][ T4648] usb 1-1: Product: syz [ 239.486735][ T4648] usb 1-1: Manufacturer: syz [ 239.491388][ T4648] usb 1-1: SerialNumber: syz [ 239.549979][ T4648] usb 1-1: config 0 descriptor?? [ 239.573328][T10773] em28xx 4-1:0.191: Registering V4L2 extension [ 239.653961][T16625] loop3: detected capacity change from 0 to 64 [ 239.894270][T10773] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 239.919796][T10773] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 239.944154][T10773] em28xx 4-1:0.191: No AC97 audio processor [ 239.952619][T16654] binder: 16653:16654 ioctl c018620c 20000240 returned -1 [ 239.976594][T10773] usb 4-1: Decoder not found [ 240.004762][T10773] em28xx 4-1:0.191: failed to create media graph [ 240.030901][T10773] em28xx 4-1:0.191: V4L2 device video103 deregistered [ 240.042556][ T4648] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 240.062470][ T4648] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 240.098773][T10773] em28xx 4-1:0.191: Remote control support is not available for this card. [ 240.120811][T10779] em28xx 4-1:0.191: Closing input extension [ 240.214440][T10779] em28xx 4-1:0.191: Freeing device [ 240.260282][T16691] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3220'. [ 240.349956][ T4648] peak_usb: probe of 1-1:0.0 failed with error -71 [ 240.381087][ T4648] usb 1-1: USB disconnect, device number 16 [ 240.475440][T16718] netlink: 'syz.1.3227': attribute type 30 has an invalid length. [ 240.502551][T16718] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 240.512062][T16720] loop3: detected capacity change from 0 to 1024 [ 240.522014][T16718] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 240.590414][T16720] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 240.603330][T16720] hfsplus: failed to load root directory [ 240.807282][T16749] loop5: detected capacity change from 0 to 2048 [ 240.904409][T16749] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 240.922697][ T4648] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 240.963363][T16767] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.145730][T16771] loop6: detected capacity change from 0 to 4096 [ 241.282704][ T4648] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.312526][ T4648] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 241.339906][ T4648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.377050][ T4648] usb 1-1: config 0 descriptor?? [ 241.751773][T16838] netlink: 'syz.1.3260': attribute type 1 has an invalid length. [ 241.762733][T10759] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 241.780365][T16838] netlink: 'syz.1.3260': attribute type 2 has an invalid length. [ 241.885225][ T4648] usb 1-1: USB disconnect, device number 17 [ 242.022378][T10759] usb 6-1: Using ep0 maxpacket: 16 [ 242.094586][T16848] loop1: detected capacity change from 0 to 2048 [ 242.137423][T16860] loop6: detected capacity change from 0 to 164 [ 242.144397][T10759] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 242.163102][T10759] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 242.176755][T10759] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 242.189510][T10759] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 242.210104][T10759] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 242.229007][T10759] usb 6-1: config 0 has no interface number 0 [ 242.237824][T16848] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3424, location=3424 [ 242.258753][T10759] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 242.277906][T10759] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 242.290019][T10759] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.301444][T16848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.330566][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.351772][T16795] loop3: detected capacity change from 0 to 32768 [ 242.358056][T10759] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.397670][T10759] usb 6-1: config 0 interface 125 has no altsetting 0 [ 242.443349][T10759] usb 6-1: config 0 interface 125 has no altsetting 2 [ 242.612999][T10759] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 242.663385][T10759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.749973][T10759] usb 6-1: Product: syz [ 242.762907][T10759] usb 6-1: Manufacturer: syz [ 242.777853][T10759] usb 6-1: SerialNumber: syz [ 242.828233][T10759] usb 6-1: config 0 descriptor?? [ 242.894814][T10759] usb 6-1: selecting invalid altsetting 2 [ 243.128477][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3278'. [ 243.157049][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3281'. [ 243.332390][ C1] usb 6-1: async_complete: urb error -71 [ 243.338160][ C1] usb 6-1: async_complete: urb error -71 [ 243.343888][ C1] usb 6-1: async_complete: urb error -71 [ 243.352401][T10759] get_1284_register: usb error -71 [ 243.357688][T10759] uss720: probe of 6-1:0.125 failed with error -71 [ 243.395931][T10759] usb 6-1: USB disconnect, device number 10 [ 243.751803][T16974] loop6: detected capacity change from 0 to 512 [ 243.831721][T16974] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 243.831721][T16974] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 243.831721][T16974] [ 243.959728][T16974] EXT4-fs (loop6): 1 orphan inode deleted [ 244.008032][T16974] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,usrquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,nouser_xattr,. Quota mode: writeback. [ 244.030958][T16974] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.560431][T17035] loop3: detected capacity change from 0 to 4096 [ 244.670927][ T26] audit: type=1326 audit(1731568682.426:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.767970][ T26] audit: type=1326 audit(1731568682.456:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.863389][ T26] audit: type=1326 audit(1731568682.456:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967546][ T26] audit: type=1326 audit(1731568682.456:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967597][ T26] audit: type=1326 audit(1731568682.456:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967635][ T26] audit: type=1326 audit(1731568682.466:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967673][ T26] audit: type=1326 audit(1731568682.466:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967711][ T26] audit: type=1326 audit(1731568682.466:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967748][ T26] audit: type=1326 audit(1731568682.466:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 244.967787][ T26] audit: type=1326 audit(1731568682.466:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd411f719 code=0x7ff00000 [ 245.170311][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3334'. [ 245.202706][T17102] mmap: syz.3.3331 (17102): VmData 54239232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 245.335723][T17109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.336176][T17109] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 245.337249][T17109] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 245.399807][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 245.612908][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.661800][T17138] kAFS: unparsable volume name [ 246.195443][T17185] loop3: detected capacity change from 0 to 64 [ 246.302398][T10759] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 246.595339][T17217] openvswitch: netlink: Flow key attr not present in new flow. [ 246.673444][T10759] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 246.697775][T10759] usb 2-1: config 0 has no interface number 0 [ 246.721563][T10759] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.889413][T17238] loop3: detected capacity change from 0 to 1024 [ 246.932647][T10759] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 246.977252][T10759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.998797][T10759] usb 2-1: Product: syz [ 247.043328][T17238] hfsplus: invalid catalog entry type in lookup [ 247.072143][T10759] usb 2-1: Manufacturer: syz [ 247.094940][T10759] usb 2-1: SerialNumber: syz [ 247.119750][T17244] loop5: detected capacity change from 0 to 1024 [ 247.136231][T10759] usb 2-1: config 0 descriptor?? [ 247.206814][T10759] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 247.462396][ C1] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 247.612428][ T4395] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 247.674029][ T4648] usb 2-1: USB disconnect, device number 12 [ 247.704073][ T4648] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 248.022722][ T4395] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 248.055708][ T4395] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 248.086308][ T4395] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 248.118230][ T4395] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 248.149599][ T4395] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 248.172645][ T4395] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.200398][ T4395] usb 7-1: config 0 descriptor?? [ 248.327048][ T4648] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 248.379572][ T150] block nbd1: Attempted send on invalid socket [ 248.385980][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.462710][ T4395] hdpvr 7-1:0.0: firmware version 0xd dated —jl;™S11´Ôø!ºvOp³ [ 248.462710][ T4395] 4(r¥ý [ 248.462710][ T4395] d×Å2}±dæ~ýýŠÙ­^r¤ [ 248.560959][T17337] loop5: detected capacity change from 0 to 512 [ 248.582051][T17340] kAFS: unable to lookup cell '' [ 248.634363][T17337] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 248.682681][ T4395] hdpvr 7-1:0.0: device init failed [ 248.692896][ T4395] hdpvr: probe of 7-1:0.0 failed with error -12 [ 248.729805][T17337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 248.741128][ T4395] usb 7-1: USB disconnect, device number 2 [ 248.760002][T17337] System zones: 1-12 [ 248.836068][T17337] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 248.853034][ T4648] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.862141][ T4648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.863225][T17337] EXT4-fs (loop5): 1 truncate cleaned up [ 248.871272][ T4648] usb 4-1: Product: syz [ 248.880198][ T4648] usb 4-1: Manufacturer: syz [ 248.884915][ T4648] usb 4-1: SerialNumber: syz [ 248.905775][T17337] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 248.943535][ T4648] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.279224][T17391] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 249.387837][T17402] SET target dimension over the limit! [ 249.562863][ T4648] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 249.811816][T17436] loop6: detected capacity change from 0 to 1024 [ 249.981240][T10773] usb 4-1: USB disconnect, device number 15 [ 250.028014][T15284] hfsplus: bad catalog entry type [ 250.160224][T17452] loop1: detected capacity change from 0 to 4096 [ 250.256996][T17452] __ntfs_error: 57 callbacks suppressed [ 250.257015][T17452] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 250.292511][T17452] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 250.331011][T17452] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 250.377086][T17452] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 250.410802][T17452] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 250.455791][T17452] ntfs: volume version 3.1. [ 250.460931][T17452] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 250.490129][T17452] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 250.503038][T10552] hfsplus: b-tree write err: -5, ino 4 [ 250.570761][T17452] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 250.576131][T10554] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.732035][T17452] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 250.792547][T17452] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 250.794114][T10554] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.816832][ T4648] usb 4-1: Service connection timeout for: 256 [ 250.833844][ T4648] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 250.870032][ T4648] ath9k_htc: Failed to initialize the device [ 250.910785][T10773] usb 4-1: ath9k_htc: USB layer deinitialized [ 250.993124][T10554] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.100784][T10554] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.160595][T17514] dlm: dev_write: no op 0 74000000000000 [ 251.240407][T17523] netlink: 'syz.1.3440': attribute type 8 has an invalid length. [ 251.262213][T17437] loop5: detected capacity change from 0 to 40427 [ 251.440599][T17437] F2FS-fs (loop5): Encrypt feature is off [ 251.682668][T10775] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.693431][ T4395] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 252.029384][T17535] loop3: detected capacity change from 0 to 32768 [ 252.042553][T10775] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.065720][T10775] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 252.086362][T10775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.112892][ T4395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 252.114070][T10775] usb 2-1: config 0 descriptor?? [ 252.134091][T17666] usb usb8: usbfs: process 17666 (syz.5.3447) did not claim interface 0 before use [ 252.179300][ T4395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 252.201809][ T4395] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.226811][T17526] chnl_net:caif_netlink_parms(): no params data found [ 252.362913][ T4395] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.386029][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.404124][ T4395] usb 1-1: SerialNumber: syz [ 252.422952][T10775] usb 2-1: USB disconnect, device number 13 [ 252.444403][T17553] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 252.459542][ T4395] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 252.687891][ T4395] usb 1-1: USB disconnect, device number 18 [ 252.758673][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.794919][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.810275][T17741] loop5: detected capacity change from 0 to 8192 [ 252.830269][T17526] device bridge_slave_0 entered promiscuous mode [ 252.874259][T17741] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 252.887764][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.897767][T17741] REISERFS (device loop5): using ordered data mode [ 252.906126][T17741] reiserfs: using flush barriers [ 252.916872][T17741] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 252.932423][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.934607][T17741] REISERFS (device loop5): checking transaction log (loop5) [ 252.987080][T17526] device bridge_slave_1 entered promiscuous mode [ 253.095869][T17741] REISERFS (device loop5): Using tea hash to sort names [ 253.153202][T17741] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 253.230743][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.315880][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.434036][ T4394] Bluetooth: hci0: command 0x0409 tx timeout [ 253.498234][T17526] team0: Port device team_slave_0 added [ 253.515993][T17843] loop3: detected capacity change from 0 to 1024 [ 253.598589][T10554] device hsr_slave_0 left promiscuous mode [ 253.647257][T17843] hfsplus: xattr searching failed [ 253.654628][T10554] device hsr_slave_1 left promiscuous mode [ 253.677301][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.708009][T10554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.746205][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.786296][T10554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.881560][T10554] device bridge_slave_1 left promiscuous mode [ 253.914130][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.926261][T10554] device bridge_slave_0 left promiscuous mode [ 253.977466][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.141565][T10554] device veth1_macvtap left promiscuous mode [ 254.158189][T10554] device veth0_macvtap left promiscuous mode [ 254.178896][T10554] device veth1_vlan left promiscuous mode [ 254.200085][T10554] device veth0_vlan left promiscuous mode [ 254.257667][T17905] loop1: detected capacity change from 0 to 4096 [ 254.316451][T17905] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 254.335463][T17912] loop3: detected capacity change from 0 to 1764 [ 254.464277][T17912] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 254.919235][T10554] team0 (unregistering): Port device team_slave_1 removed [ 254.952032][T10554] team0 (unregistering): Port device team_slave_0 removed [ 254.977246][T10554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.008431][T10554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.048971][T17926] loop5: detected capacity change from 0 to 32768 [ 255.103355][T17926] XFS: ikeep mount option is deprecated. [ 255.109035][T17926] XFS: noikeep mount option is deprecated. [ 255.130936][T10554] bond0 (unregistering): Released all slaves [ 255.173298][T17926] XFS (loop5): Mounting V5 Filesystem [ 255.213403][T17526] team0: Port device team_slave_1 added [ 255.318059][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.323714][T17926] XFS (loop5): Ending clean mount [ 255.329297][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.358278][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.376481][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.388012][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.421860][T17926] XFS (loop5): Quotacheck needed: Please wait. [ 255.450282][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.526598][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.533024][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.541835][ T4394] Bluetooth: hci0: command 0x041b tx timeout [ 255.647165][T17926] XFS (loop5): Quotacheck: Done. [ 255.719607][T17526] device hsr_slave_0 entered promiscuous mode [ 255.836277][T17526] device hsr_slave_1 entered promiscuous mode [ 255.861474][T17526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.884732][ T4657] XFS (loop5): Unmounting Filesystem [ 255.902838][T17526] Cannot create hsr debugfs directory [ 255.952544][ T4395] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 255.978325][T18049] loop1: detected capacity change from 0 to 256 [ 256.121104][T18049] FAT-fs (loop1): Directory bread(block 64) failed [ 256.136313][T18069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3493'. [ 256.146225][T18049] FAT-fs (loop1): Directory bread(block 65) failed [ 256.169929][T18049] FAT-fs (loop1): Directory bread(block 66) failed [ 256.190456][T18049] FAT-fs (loop1): Directory bread(block 67) failed [ 256.255230][T18049] FAT-fs (loop1): Directory bread(block 68) failed [ 256.291858][T18049] FAT-fs (loop1): Directory bread(block 69) failed [ 256.315058][T18049] FAT-fs (loop1): Directory bread(block 70) failed [ 256.326212][T18049] FAT-fs (loop1): Directory bread(block 71) failed [ 256.333422][T18049] FAT-fs (loop1): Directory bread(block 72) failed [ 256.343597][T18049] FAT-fs (loop1): Directory bread(block 73) failed [ 256.563070][ T4395] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 256.590416][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.633943][ T4395] usb 1-1: Product: syz [ 256.638146][ T4395] usb 1-1: Manufacturer: syz [ 256.661036][ T4395] usb 1-1: SerialNumber: syz [ 256.693254][ T4395] usb 1-1: config 0 descriptor?? [ 256.743682][ T4395] ch341 1-1:0.0: ch341-uart converter detected [ 256.834546][T17526] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.889422][T17526] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.921854][T17526] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.959832][T17526] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.022439][T18159] netlink: 'syz.3.3500': attribute type 1 has an invalid length. [ 257.173121][ T4395] usb 1-1: failed to send control message: -71 [ 257.179433][ T4395] ch341-uart: probe of ttyUSB0 failed with error -71 [ 257.231821][ T4395] usb 1-1: USB disconnect, device number 19 [ 257.253498][ T4395] ch341 1-1:0.0: device disconnected [ 257.368293][T17526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.503448][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.511354][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.540292][T17526] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.559612][T18204] IPv6: sit2: Disabled Multicast RS [ 257.593771][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.602224][ T4394] Bluetooth: hci0: command 0x040f tx timeout [ 257.663208][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.709107][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.716293][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.780318][T18219] loop5: detected capacity change from 0 to 1024 [ 257.798494][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.824618][T18218] Scaler: ================= START STATUS ================= [ 257.832027][T18218] Scaler: ================== END STATUS ================== [ 257.853549][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.883749][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.906536][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.913723][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.016372][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.073697][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 258.132424][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.151324][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.221890][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.259723][T18245] loop3: detected capacity change from 0 to 256 [ 258.283579][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.331941][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.369126][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.412177][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.462022][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.498281][T17526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.549923][T17526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.611160][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.630209][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.889548][T18270] loop3: detected capacity change from 0 to 4096 [ 258.980015][T18270] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 259.117615][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.146125][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.209579][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.373362][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'. [ 259.675075][ T4168] Bluetooth: hci0: command 0x0419 tx timeout [ 259.707399][T18248] loop1: detected capacity change from 0 to 32768 [ 259.754829][T18243] loop5: detected capacity change from 0 to 32768 [ 259.845840][T18243] JBD2: Ignoring recovery information on journal [ 259.856739][T18327] netlink: 'syz.0.3534': attribute type 4 has an invalid length. [ 259.876122][T18248] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.3520 (18248) [ 259.923983][T10552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.986046][T10552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.066289][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.086834][T18248] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 260.104836][T18243] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 260.133959][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.143734][T18248] BTRFS info (device loop1): enabling ssd optimizations [ 260.150726][T18248] BTRFS info (device loop1): not using ssd optimizations [ 260.171922][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.222507][T18248] BTRFS info (device loop1): turning off barriers [ 260.233522][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.261475][T18248] BTRFS info (device loop1): use no compression [ 260.278572][T17526] device veth0_vlan entered promiscuous mode [ 260.292619][T18248] BTRFS info (device loop1): using free space tree [ 260.341345][T17526] device veth1_vlan entered promiscuous mode [ 260.342868][T18248] BTRFS info (device loop1): has skinny extents [ 260.392914][T10542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.405012][T18355] loop3: detected capacity change from 0 to 8 [ 260.505191][ T4657] ocfs2: Unmounting device (7,5) on (node local) [ 260.513290][T18355] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 260.523886][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.532981][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.610839][T17526] device veth0_macvtap entered promiscuous mode [ 260.734057][T17526] device veth1_macvtap entered promiscuous mode [ 260.909183][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.955865][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.966071][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.976810][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.986782][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.997458][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.008286][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.020184][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.034076][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.062771][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.079635][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.092138][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.110646][T10563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.171129][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.227651][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.277001][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.318062][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.348216][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.389259][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.412581][T17526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.455227][T17526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.527766][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.576229][T18425] loop3: detected capacity change from 0 to 512 [ 261.592180][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.613467][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.673684][T17526] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.712360][T17526] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.721129][T17526] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.762378][T17526] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.878670][T18425] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 261.957431][T18425] ext4 filesystem being mounted at /702/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.321947][T18465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3562'. [ 262.518869][T10547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.577310][T10547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.636343][T10557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.653420][T10557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.662266][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 262.727115][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.770136][T18514] device erspan1 entered promiscuous mode [ 262.921899][T18533] loop5: detected capacity change from 0 to 64 [ 263.430636][T18561] loop3: detected capacity change from 0 to 512 [ 263.835448][T18561] EXT4-fs (loop3): Ignoring removed nobh option [ 263.841770][T18561] EXT4-fs (loop3): Ignoring removed bh option [ 263.982880][T18561] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,abort,delalloc,nobh,bh,. Quota mode: writeback. [ 264.045587][T18539] loop7: detected capacity change from 0 to 32768 [ 264.064983][T18561] ext4 filesystem being mounted at /710/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.117644][T18539] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[(" [ 264.145513][T18539] gfs2: fsid=[(: Now mounting FS (format 0)... [ 264.202955][T18539] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms [ 264.205125][T18561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 264.220549][T18622] libceph: resolve '. [ 264.220549][T18622] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 264.220549][T18622] ' (ret=-3): failed [ 264.263941][ T4216] gfs2: fsid=[(.0: jid=0, already locked for use [ 264.270313][ T4216] gfs2: fsid=[(.0: jid=0: Looking at journal... [ 264.297212][T18561] EXT4-fs (loop3): Remounting filesystem read-only [ 264.429550][ T4216] gfs2: fsid=[(.0: jid=0: Journal head lookup took 159ms [ 264.459310][ T4216] gfs2: fsid=[(.0: jid=0: Done [ 264.480768][T18539] gfs2: fsid=[(.0: first mount done, others may mount [ 265.649723][T18742] loop1: detected capacity change from 0 to 2048 [ 265.718058][T18742] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 265.734341][T18742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.202630][ T4399] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 266.572882][ T4399] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.601231][ T4399] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.742961][ T4399] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.752232][ T4399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.801513][ T4399] usb 1-1: SerialNumber: syz [ 267.115756][ T4399] usb 1-1: 0:2 : does not exist [ 267.121798][ T4399] usb 1-1: unit 5: unexpected type 0x03 [ 267.141053][T18853] loop3: detected capacity change from 0 to 4096 [ 267.158090][ T4399] usb 1-1: unit 255 not found! [ 267.240918][ T4399] usb 1-1: USB disconnect, device number 20 [ 267.402424][T10773] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 267.483759][T18910] device ðÿÿÿÿÿÿÿ entered promiscuous mode [ 267.666232][T10773] usb 6-1: Using ep0 maxpacket: 8 [ 267.782710][T10773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.892636][T10773] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 267.922052][T10773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 267.952875][T10773] usb 6-1: SerialNumber: syz [ 268.008126][T10773] usb 6-1: config 0 descriptor?? [ 268.081605][T10773] usb 6-1: Found UVC 0.24 device (05ac:8501) [ 268.101713][T10773] usb 6-1: No valid video chain found. [ 268.303168][ T4648] usb 6-1: USB disconnect, device number 11 [ 268.320150][T18979] loop1: detected capacity change from 0 to 16 [ 268.381314][T18987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3676'. [ 268.582707][T18998] binder: BC_ATTEMPT_ACQUIRE not supported [ 268.588554][T18998] binder: 18996:18998 ioctl c0306201 20000500 returned -22 [ 268.651437][T19001] netlink: 'syz.7.3679': attribute type 1 has an invalid length. [ 268.669527][T19001] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3679'. [ 268.899505][T18979] erofs: (device loop1): mounted with root inode @ nid 36. [ 268.963852][T18979] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 269.101622][T18979] CIFS mount error: No usable UNC path provided in device string! [ 269.101622][T18979] [ 269.162897][T18979] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 269.174367][T19027] loop3: detected capacity change from 0 to 8 [ 269.682276][T19042] loop5: detected capacity change from 0 to 4096 [ 269.835695][T19042] ntfs: volume version 3.1. [ 269.900809][T19042] ntfs: (device loop5): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 269.960099][T19042] ntfs: (device loop5): ntfs_lookup(): Failed to convert name to Unicode. [ 269.992698][T19042] ntfs: (device loop5): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 270.048288][T19042] ntfs: (device loop5): ntfs_lookup(): Failed to convert name to Unicode. [ 270.416748][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.512153][T19011] loop7: detected capacity change from 0 to 32768 [ 270.788261][T19011] XFS (loop7): Mounting V5 Filesystem [ 271.091825][T19011] XFS (loop7): Ending clean mount [ 271.161651][T19107] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3703'. [ 271.422443][T17526] XFS (loop7): Unmounting Filesystem [ 272.042650][ T4399] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 272.442768][ T4399] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 272.451891][ T4399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.509563][ T4399] usb 4-1: config 0 descriptor?? [ 272.642599][T19114] loop5: detected capacity change from 0 to 32768 [ 272.792646][T19114] XFS (loop5): Mounting V5 Filesystem [ 272.820825][T19221] loop7: detected capacity change from 0 to 64 [ 272.982507][T19114] XFS (loop5): Ending clean mount [ 273.003992][ T4399] ath6kl: Failed to submit usb control message: -71 [ 273.010809][ T4399] ath6kl: unable to send the bmi data to the device: -71 [ 273.030276][ T4399] ath6kl: Unable to send get target info: -71 [ 273.043151][ T4399] ath6kl: Failed to init ath6kl core: -71 [ 273.061957][T19229] loop1: detected capacity change from 0 to 4096 [ 273.111948][ T4399] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 273.135713][ T4399] usb 4-1: USB disconnect, device number 16 [ 273.140310][T19229] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 273.214504][ T4657] XFS (loop5): Unmounting Filesystem [ 273.320279][T19229] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 273.864124][T10560] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 273.894023][T19281] loop7: detected capacity change from 0 to 256 [ 273.902667][ T4167] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 274.274770][T19292] loop1: detected capacity change from 0 to 4096 [ 274.319031][T19292] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 274.365642][T19320] tmpfs: Bad value for 'mpol' [ 274.443506][T19292] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 274.447277][T19327] loop7: detected capacity change from 0 to 8 [ 274.513406][T19327] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 274.570170][T19327] cramfs: Error -3 while decompressing! [ 274.589707][T19327] cramfs: ffffffff969922a8(26)->ffff888060488000(4096) [ 274.638714][T19327] cramfs: Error -3 while decompressing! [ 274.673554][T19327] cramfs: ffffffff969922c2(26)->ffff888059284000(4096) [ 274.680539][T19327] cramfs: Error -3 while decompressing! [ 274.778671][T19327] cramfs: ffffffff969922dc(16)->ffff88805c84c000(4096) [ 274.812744][T19327] cramfs: Error -3 while decompressing! [ 274.818442][T19327] cramfs: ffffffff969922a8(26)->ffff888060488000(4096) [ 274.858057][T19339] loop3: detected capacity change from 0 to 8192 [ 274.981931][T19339] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 275.020147][T19339] REISERFS (device loop3): using ordered data mode [ 275.068748][T19339] reiserfs: using flush barriers [ 275.095366][T19379] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3768'. [ 275.141606][T19339] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.235819][T19339] REISERFS (device loop3): checking transaction log (loop3) [ 275.321419][T19339] REISERFS (device loop3): Using tea hash to sort names [ 275.334286][T19339] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 275.917988][T19440] netlink: 'syz.7.3791': attribute type 4 has an invalid length. [ 275.920411][T19443] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3793'. [ 276.205112][T19467] netlink: 518 bytes leftover after parsing attributes in process `syz.0.3800'. [ 276.540099][T19498] loop7: detected capacity change from 0 to 256 [ 276.575282][T19502] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 276.647004][T19407] loop1: detected capacity change from 0 to 32768 [ 276.654246][T19498] FAT-fs (loop7): Directory bread(block 64) failed [ 276.660811][T19498] FAT-fs (loop7): Directory bread(block 65) failed [ 276.691225][T19498] FAT-fs (loop7): Directory bread(block 66) failed [ 276.709643][T19498] FAT-fs (loop7): Directory bread(block 67) failed [ 276.727473][T19407] loop1: p1 p2 p3 < > [ 276.732570][T19407] loop1: p1 size 242222080 extends beyond EOD, truncated [ 276.744141][T19498] FAT-fs (loop7): Directory bread(block 68) failed [ 276.762592][ T13] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 276.822418][T19498] FAT-fs (loop7): Directory bread(block 69) failed [ 276.831485][T19498] FAT-fs (loop7): Directory bread(block 70) failed [ 276.835722][ T3545] loop1: p1 p2 p3 < > [ 276.842694][ T3545] loop1: p1 size 242222080 extends beyond EOD, truncated [ 276.852673][T19498] FAT-fs (loop7): Directory bread(block 71) failed [ 276.864250][T19528] overlayfs: missing 'workdir' [ 276.869268][T19498] FAT-fs (loop7): Directory bread(block 72) failed [ 276.887926][T19498] FAT-fs (loop7): Directory bread(block 73) failed [ 276.931305][T19533] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3820'. [ 277.152790][ T13] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 277.193678][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.214646][ T13] usb 4-1: config 0 descriptor?? [ 277.274076][ T13] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 277.534432][T10779] usb 4-1: USB disconnect, device number 17 [ 277.565271][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 277.565414][ T5472] udevd[5472]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 277.616764][ T4186] udevd[4186]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 277.617077][T19565] mip6: mip6_destopt_init_state: state's mode is not 2: 1 [ 277.827211][T19509] loop5: detected capacity change from 0 to 32768 [ 277.975989][T19577] netlink: 'syz.7.3829': attribute type 12 has an invalid length. [ 278.022496][T19577] netlink: 171932 bytes leftover after parsing attributes in process `syz.7.3829'. [ 278.225680][T19587] loop3: detected capacity change from 0 to 2048 [ 278.292051][T19587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.667585][T19614] Option ' ' to dns_resolver key: bad/missing value [ 278.838861][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 278.867909][T19628] netlink: 'syz.0.3842': attribute type 1 has an invalid length. [ 278.919321][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 278.993150][T19641] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.180983][T19644] loop7: detected capacity change from 0 to 4096 [ 279.243175][T19644] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 279.281059][T19644] ntfs3: loop7: Failed to load $MFTMirr. [ 279.383660][T19581] loop1: detected capacity change from 0 to 40427 [ 279.442662][ T4399] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 279.461999][T19581] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 279.499299][T19581] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 279.557517][T19581] F2FS-fs (loop1): invalid crc value [ 279.627522][T19581] F2FS-fs (loop1): Found nat_bits in checkpoint [ 279.687714][T19693] netlink: 'syz.3.3861': attribute type 16 has an invalid length. [ 279.716291][T19696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.723599][T19693] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3861'. [ 279.745784][ T4399] usb 1-1: Using ep0 maxpacket: 8 [ 279.803242][T19581] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 279.823603][T19581] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 279.849452][T19711] loop7: detected capacity change from 0 to 512 [ 279.880618][T19581] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 279.902698][ T4399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.929572][T19581] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 279.951157][T19711] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.3864: bad orphan inode 15 [ 279.979038][T19711] ext4_test_bit(bit=14, block=5) = 0 [ 279.992694][T19711] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 280.018799][ T4399] usb 1-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 280.029638][ T4399] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 280.037852][ T4399] usb 1-1: Manufacturer: syz [ 280.052394][ T4399] usb 1-1: config 0 descriptor?? [ 280.082033][T19711] cgroup: No subsys list or none specified [ 280.123971][ T4399] appledisplay 1-1:0.0: Could not find int-in endpoint [ 280.132087][ T4399] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 280.380153][T19744] ERROR: device name not specified. [ 280.387823][ T4399] usb 1-1: USB disconnect, device number 21 [ 280.912039][T19782] netlink: 'syz.3.3884': attribute type 3 has an invalid length. [ 281.303328][T19791] loop1: detected capacity change from 0 to 4096 [ 281.346103][T19811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.393023][T19791] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 281.442488][T19791] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 281.525410][T19791] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 281.586167][T19791] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 281.631962][T19791] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 281.643835][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3899'. [ 281.700917][T19791] ntfs: volume version 3.1. [ 281.719112][T19791] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 281.732922][T19745] loop7: detected capacity change from 0 to 32768 [ 281.740002][T19791] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 281.756341][T19791] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 281.780268][T19791] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 281.800355][T19835] loop3: detected capacity change from 0 to 512 [ 281.811726][T19791] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 281.900016][T19835] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 281.909242][T19835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 281.932598][T19745] XFS (loop7): Mounting V5 Filesystem [ 281.961436][T19835] System zones: 0-1, 15-15, 18-18, 34-34 [ 281.969993][T19835] EXT4-fs (loop3): orphan cleanup on readonly fs [ 281.977161][T19835] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 281.993669][T19835] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 282.001756][T19835] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.3901: bad orphan inode 16 [ 282.113898][T19835] ext4_test_bit(bit=15, block=18) = 1 [ 282.119526][T19835] is_bad_inode(inode)=0 [ 282.142162][T19835] NEXT_ORPHAN(inode)=0 [ 282.143256][T19745] XFS (loop7): Ending clean mount [ 282.167348][T19835] max_ino=32 [ 282.170626][T19835] i_nlink=2 [ 282.217560][T19835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.291928][T19835] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 282.316441][T17526] XFS (loop7): Unmounting Filesystem [ 282.590408][T19886] xt_socket: unknown flags 0x8 [ 282.670361][T19889] affs: Unrecognized mount option "ß" or missing value [ 282.692902][T19889] affs: Error parsing options [ 282.812555][ T13] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.072451][ T13] usb 4-1: Using ep0 maxpacket: 16 [ 283.098831][T19920] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 283.212687][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.252364][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 283.276884][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 283.292025][T19929] loop7: detected capacity change from 0 to 764 [ 283.308998][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.429388][T19929] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 283.502825][ T13] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 283.532458][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.562175][ T13] usb 4-1: Product: syz [ 283.570910][ T13] usb 4-1: Manufacturer: syz [ 283.593043][ T13] usb 4-1: SerialNumber: syz [ 283.640490][ T13] usb 4-1: config 0 descriptor?? [ 283.715533][T19969] device sit0 entered promiscuous mode [ 283.724782][ T13] xbox_remote_probe: Unexpected endpoint_in [ 283.748114][T19969] netlink: 'syz.5.3934': attribute type 1 has an invalid length. [ 283.803021][T19969] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3934'. [ 283.957922][ T13] usb 4-1: USB disconnect, device number 18 [ 284.027872][T20000] netlink: 'syz.5.3940': attribute type 10 has an invalid length. [ 284.062636][T20000] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3940'. [ 284.092012][T20003] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 284.112466][T20000] device bond0 entered promiscuous mode [ 284.118357][T20000] device bond_slave_0 entered promiscuous mode [ 284.227847][T20000] device bond_slave_1 entered promiscuous mode [ 284.261265][T20000] bridge0: port 3(bond0) entered blocking state [ 284.294573][T20000] bridge0: port 3(bond0) entered disabled state [ 284.396306][T20000] bridge0: port 3(bond0) entered blocking state [ 284.403401][T20000] bridge0: port 3(bond0) entered forwarding state [ 285.112195][T20099] Cannot find set identified by id 0 to match [ 285.122449][T20098] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 285.212458][ T4648] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 285.482771][ T4648] usb 4-1: Using ep0 maxpacket: 8 [ 285.516468][T20132] loop7: detected capacity change from 0 to 2048 [ 285.606990][T20132] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.651597][ T4648] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.721810][T20157] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.772584][ T4648] usb 4-1: config 132 has an invalid interface number: 8 but max is 2 [ 285.814834][ T4648] usb 4-1: config 132 has no interface number 2 [ 285.821256][ T4648] usb 4-1: config 132 interface 1 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 285.878734][ T4648] usb 4-1: config 132 interface 0 has no altsetting 0 [ 285.929485][ T4648] usb 4-1: config 132 interface 8 has no altsetting 0 [ 285.974340][ T4648] usb 4-1: config 132 interface 1 has no altsetting 0 [ 286.066589][T20174] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 286.113550][T20174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.172682][ T4648] usb 4-1: New USB device found, idVendor=1199, idProduct=9011, bcdDevice=77.dc [ 286.197065][ T4648] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.230368][ T4648] usb 4-1: Product: syz [ 286.262564][ T4648] usb 4-1: Manufacturer: syz [ 286.273569][ T4648] usb 4-1: SerialNumber: syz [ 286.486321][T20208] loop1: detected capacity change from 0 to 512 [ 286.496516][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4001'. [ 286.643594][ T4648] usb 4-1: selecting invalid altsetting 0 [ 286.644075][T20208] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 286.659744][ T4648] usb 4-1: Could not set interface, error -22 [ 286.703571][ T4648] usb 4-1: selecting invalid altsetting 0 [ 286.711834][ T4648] usb 4-1: Could not set interface, error -22 [ 286.733152][ T4648] usb 4-1: USB disconnect, device number 19 [ 286.792747][T20208] ext4 filesystem being mounted at /787 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.041148][T20254] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4008'. [ 287.380224][T20198] loop5: detected capacity change from 0 to 32768 [ 287.625479][T20304] loop1: detected capacity change from 0 to 64 [ 287.682638][ T13] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 287.808850][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4025'. [ 287.976280][T20335] netlink: 'syz.1.4027': attribute type 13 has an invalid length. [ 288.072587][T10773] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 288.093735][ T13] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 288.102002][ T13] usb 4-1: config 0 has no interface number 0 [ 288.117357][T20344] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4029'. [ 288.153065][ T13] usb 4-1: config 0 interface 156 has no altsetting 0 [ 288.167886][ T13] usb 4-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 288.208709][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.272186][ T13] usb 4-1: config 0 descriptor?? [ 288.286419][T20356] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 288.312493][T10773] usb 1-1: Using ep0 maxpacket: 16 [ 288.333229][ T13] hub 4-1:0.156: bad descriptor, ignoring hub [ 288.339411][ T13] hub: probe of 4-1:0.156 failed with error -5 [ 288.371486][ T13] option 4-1:0.156: GSM modem (1-port) converter detected [ 288.541953][T20383] xt_connbytes: Forcing CT accounting to be enabled [ 288.568838][T20383] --map-set only usable from mangle table [ 288.593305][T10773] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 288.602736][T10773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.611692][T10773] usb 1-1: Product: syz [ 288.616677][T10773] usb 1-1: Manufacturer: syz [ 288.632663][T10773] usb 1-1: SerialNumber: syz [ 288.677523][T10773] usb 1-1: config 0 descriptor?? [ 288.684956][T10775] usb 4-1: USB disconnect, device number 20 [ 288.691928][T10775] option 4-1:0.156: device disconnected [ 288.712446][ T4648] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 288.800792][T20390] loop7: detected capacity change from 0 to 8192 [ 288.962703][T10773] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 288.970172][T10773] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 289.031788][T10773] usb 1-1: USB disconnect, device number 22 [ 289.092723][ T4648] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 289.102168][ T4648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.127105][ T4648] usb 2-1: config 0 descriptor?? [ 289.184763][ T4648] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 289.712588][ T4648] gspca_zc3xx: reg_w_i err -110 [ 289.717811][ T4648] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 289.909321][ T4648] usb 2-1: USB disconnect, device number 14 [ 290.104109][T20492] loop3: detected capacity change from 0 to 256 [ 290.220000][T20492] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 290.406456][T20503] loop7: detected capacity change from 0 to 4096 [ 290.479271][T20446] loop5: detected capacity change from 0 to 32768 [ 290.491100][T20503] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 290.584803][T20503] ntfs3: loop7: ntfs_evict_inode r=3 failed, -22. [ 290.591464][T20503] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 290.615335][ T13] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 290.666404][T20503] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 290.666575][T20540] netlink: 'syz.3.4071': attribute type 49 has an invalid length. [ 290.892716][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 290.902659][ T4648] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 291.042973][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.098418][T20563] loop7: detected capacity change from 0 to 512 [ 291.162682][ T13] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 291.175107][T20568] loop5: detected capacity change from 0 to 256 [ 291.188373][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 291.222686][ T13] usb 1-1: SerialNumber: syz [ 291.246512][T20563] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 291.273458][T20563] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.284311][ T4648] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 291.285798][ T13] usb 1-1: config 0 descriptor?? [ 291.293284][ T4648] usb 2-1: config 0 has no interface number 0 [ 291.410571][T20586] loop3: detected capacity change from 0 to 256 [ 291.425008][ T13] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 291.452556][ T13] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 291.461812][ T13] usb 1-1: Failed to create links for entity 255 [ 291.481451][ T13] usb 1-1: Failed to register entities (-22). [ 291.493993][ T4648] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=9e.3c [ 291.503627][ T4648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.519263][ T4648] usb 2-1: Product: syz [ 291.524516][ T4648] usb 2-1: Manufacturer: syz [ 291.530762][ T4648] usb 2-1: SerialNumber: syz [ 291.587990][ T4648] usb 2-1: config 0 descriptor?? [ 291.665016][ T4648] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 291.671671][ T13] usb 1-1: USB disconnect, device number 23 [ 291.703409][ T4648] dvb-usb: bulk message failed: -22 (3/0) [ 291.762881][ T4648] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.813143][ T4648] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 291.834728][ T4648] usb 2-1: media controller created [ 291.889878][ T4648] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.039330][ T4648] DVB: Unable to find symbol mt352_attach() [ 292.048520][ T4648] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 292.103387][ T4648] dvb-usb: bulk message failed: -22 (3/0) [ 292.132748][ T4648] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 292.148586][ T4648] usb 2-1: USB disconnect, device number 15 [ 292.246167][ T4648] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 292.280353][T20661] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 292.307484][T20652] loop3: detected capacity change from 0 to 4096 [ 292.324511][T20652] __ntfs_warning: 7 callbacks suppressed [ 292.324526][T20652] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 292.487380][T20652] ntfs: volume version 3.1. [ 292.624025][T20687] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4101'. [ 292.723312][ T4399] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 292.797020][T20703] loop7: detected capacity change from 0 to 256 [ 292.992506][ T4399] usb 6-1: Using ep0 maxpacket: 32 [ 293.122484][T10779] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 293.142878][ T4399] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 293.184877][ T4399] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 293.197901][T20733] loop7: detected capacity change from 0 to 4096 [ 293.259647][T20738] loop1: detected capacity change from 0 to 4096 [ 293.324194][T20738] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 293.327106][T20733] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 293.392506][T10779] usb 4-1: Using ep0 maxpacket: 16 [ 293.412682][ T4399] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 293.440418][ T4399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.451892][T20738] ntfs3: loop1: failed to convert "c46c" to cp864 [ 293.472685][ T4399] usb 6-1: Product: syz [ 293.480896][ T4399] usb 6-1: Manufacturer: syz [ 293.508974][ T4399] usb 6-1: SerialNumber: syz [ 293.512752][T10779] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.516574][ T4399] usb 6-1: config 0 descriptor?? [ 293.532412][T10779] usb 4-1: config 0 has no interface number 0 [ 293.574077][T20754] netlink: 'syz.0.4119': attribute type 20 has an invalid length. [ 293.591538][ T4399] empeg 6-1:0.0: empeg converter detected [ 293.608461][ T4399] usb 6-1: active config #0 != 1 ?? [ 293.692564][T10779] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 293.712090][T10779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.754846][T10779] usb 4-1: Product: syz [ 293.762759][T10779] usb 4-1: Manufacturer: syz [ 293.778737][T10779] usb 4-1: SerialNumber: syz [ 293.816281][ T4399] usb 6-1: USB disconnect, device number 12 [ 293.819326][T10779] usb 4-1: config 0 descriptor?? [ 293.829546][ T26] audit: type=1326 audit(1731568731.586:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20769 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0b6e4a719 code=0x7ffc0000 [ 293.912809][T10779] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 294.342587][T10779] gspca_spca1528: reg_w err -71 [ 294.382486][T10779] spca1528: probe of 4-1:0.1 failed with error -71 [ 294.391327][T10779] usb 4-1: USB disconnect, device number 21 [ 294.675352][T20859] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4147'. [ 294.772223][T20865] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4151'. [ 294.798607][T20870] netlink: 'syz.1.4152': attribute type 10 has an invalid length. [ 295.072043][T20900] loop3: detected capacity change from 0 to 512 [ 295.141539][T20909] loop5: detected capacity change from 0 to 8 [ 295.159855][T20900] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.228536][T20900] ext4 filesystem being mounted at /808/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.251966][T20919] loop1: detected capacity change from 0 to 256 [ 295.420781][T20919] FAT-fs (loop1): Directory bread(block 64) failed [ 295.438580][T20935] rdma_rxe: rxe creation allowed on top of a real device only [ 295.438915][T20919] FAT-fs (loop1): Directory bread(block 65) failed [ 295.504494][T20919] FAT-fs (loop1): Directory bread(block 66) failed [ 295.522170][T20919] FAT-fs (loop1): Directory bread(block 67) failed [ 295.557429][T20919] FAT-fs (loop1): Directory bread(block 68) failed [ 295.577988][T20919] FAT-fs (loop1): Directory bread(block 69) failed [ 295.588105][T20919] FAT-fs (loop1): Directory bread(block 70) failed [ 295.601121][T20919] FAT-fs (loop1): Directory bread(block 71) failed [ 295.610540][T20919] FAT-fs (loop1): Directory bread(block 72) failed [ 295.661428][T20919] FAT-fs (loop1): Directory bread(block 73) failed [ 295.693576][T20959] overlayfs: missing 'lowerdir' [ 295.715286][T20950] loop7: detected capacity change from 0 to 2048 [ 296.238136][T20999] netlink: 'syz.3.4191': attribute type 1 has an invalid length. [ 296.270962][T20999] netlink: 'syz.3.4191': attribute type 2 has an invalid length. [ 296.379972][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4195'. [ 296.623703][T21063] loop3: detected capacity change from 0 to 256 [ 296.647085][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4203'. [ 296.770642][T21063] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 296.888244][T21063] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 297.405871][T21087] loop5: detected capacity change from 0 to 4096 [ 297.455534][T21085] loop3: detected capacity change from 0 to 4096 [ 297.497056][T21085] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 297.504486][T21055] loop7: detected capacity change from 0 to 32768 [ 297.554293][T21049] loop1: detected capacity change from 0 to 32768 [ 297.561024][T21099] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.578163][T21055] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.4200 (21055) [ 297.605074][T21087] attempt to access beyond end of device [ 297.605074][T21087] loop5: rw=524288, want=2097328, limit=4096 [ 297.629107][T21085] ntfs3: loop3: failed to convert "c46c" to cp864 [ 297.641252][T21087] attempt to access beyond end of device [ 297.641252][T21087] loop5: rw=0, want=2097328, limit=4096 [ 297.678310][ T26] audit: type=1800 audit(1731568735.426:78): pid=21087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4210" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 297.719404][T21055] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 297.732768][T21055] BTRFS info (device loop7): force zlib compression, level 3 [ 297.740281][T21055] BTRFS info (device loop7): force clearing of disk cache [ 297.836732][T21055] BTRFS info (device loop7): setting nodatasum [ 297.922912][T21055] BTRFS info (device loop7): allowing degraded mounts [ 297.929733][T21055] BTRFS info (device loop7): enabling disk space caching [ 297.961618][T21049] XFS (loop1): Mounting V5 Filesystem [ 298.011267][T21055] BTRFS info (device loop7): disk space caching is enabled [ 298.116604][T21055] BTRFS info (device loop7): has skinny extents [ 298.166723][T21049] XFS (loop1): Ending clean mount [ 298.335064][ T4167] XFS (loop1): Unmounting Filesystem [ 298.544848][T21164] netlink: 'syz.3.4224': attribute type 1 has an invalid length. [ 298.563599][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4224'. [ 298.582499][T21165] loop5: detected capacity change from 0 to 1764 [ 298.665851][T21055] BTRFS info (device loop7): clearing free space tree [ 298.712770][T21055] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 298.758844][T21055] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 298.895466][T21055] BTRFS error (device loop7): balance: invalid convert metadata profile raid10 [ 299.084199][T21208] netlink: 'syz.1.4236': attribute type 21 has an invalid length. [ 299.123496][T21208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4236'. [ 299.422667][T21236] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.4246'. [ 299.954324][T21283] delete_channel: no stack [ 299.965254][T21286] netlink: 'syz.1.4261': attribute type 1 has an invalid length. [ 300.132744][ T4157] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 300.412728][ T4157] usb 6-1: Using ep0 maxpacket: 32 [ 300.439986][T21328] loop3: detected capacity change from 0 to 2048 [ 300.520441][T21328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.548690][ T26] audit: type=1800 audit(1731568738.306:79): pid=21328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4275" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 300.569136][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.612679][ T4157] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.703428][ T4157] usb 6-1: config 247 has an invalid interface number: 166 but max is 1 [ 300.711873][ T4157] usb 6-1: config 247 has an invalid interface number: 237 but max is 1 [ 300.758401][ T4157] usb 6-1: config 247 has no interface number 0 [ 300.772710][ T4157] usb 6-1: config 247 has no interface number 1 [ 300.790355][ T4157] usb 6-1: config 247 interface 166 has no altsetting 0 [ 300.805615][ T4157] usb 6-1: config 247 interface 237 has no altsetting 0 [ 300.832687][ T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 301.002831][ T4157] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=4f.04 [ 301.011911][ T4157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.060030][ T4157] usb 6-1: Product: syz [ 301.068716][ T4157] usb 6-1: Manufacturer: syz [ 301.082602][ T4157] usb 6-1: SerialNumber: syz [ 301.092776][ T13] usb 8-1: Using ep0 maxpacket: 8 [ 301.196233][T21413] device macsec0 entered promiscuous mode [ 301.236302][ T13] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 301.247872][ T13] usb 8-1: config 2 has no interface number 0 [ 301.268139][ T13] usb 8-1: config 2 interface 31 has no altsetting 0 [ 301.462635][ T4157] qmi_wwan: probe of 6-1:247.166 failed with error -22 [ 301.516425][T21427] loop3: detected capacity change from 0 to 8192 [ 301.522856][ T13] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 301.522889][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.522912][ T13] usb 8-1: Product: syz [ 301.522929][ T13] usb 8-1: Manufacturer: syz [ 301.522945][ T13] usb 8-1: SerialNumber: syz [ 301.556916][ T4157] usb 6-1: USB disconnect, device number 13 [ 301.671955][T21427] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.763787][T21427] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 301.770969][T21427] FAT-fs (loop3): Filesystem has been set read-only [ 301.840860][T21427] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 301.899880][T21427] FAT-fs (loop3): error, clusters badly computed (3 != 2) [ 301.942512][T21427] FAT-fs (loop3): error, clusters badly computed (4 != 3) [ 301.968242][T21427] FAT-fs (loop3): error, clusters badly computed (5 != 4) [ 302.058375][T10775] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 302.252705][ T13] ch9200: probe of 8-1:2.31 failed with error -22 [ 302.292701][ T13] usb 8-1: USB disconnect, device number 2 [ 302.602662][T10775] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 302.642433][T10775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.650670][T10775] usb 1-1: Product: syz [ 302.679375][T10775] usb 1-1: Manufacturer: syz [ 302.701836][T10775] usb 1-1: SerialNumber: syz [ 302.753162][T21456] loop1: detected capacity change from 0 to 32768 [ 302.763467][T10775] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 302.909287][T21456] (syz.1.4307,21456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.950422][T21456] (syz.1.4307,21456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 303.041617][T21538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4332'. [ 303.064558][T21456] JBD2: Ignoring recovery information on journal [ 303.150463][T21456] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 303.234960][T21456] [ 303.236792][T21542] loop5: detected capacity change from 0 to 2048 [ 303.237316][T21456] ====================================================== [ 303.250652][T21456] WARNING: possible circular locking dependency detected [ 303.257682][T21456] 5.15.171-syzkaller #0 Not tainted [ 303.262889][T21456] ------------------------------------------------------ [ 303.270039][T21456] syz.1.4307/21456 is trying to acquire lock: [ 303.276156][T21456] ffff8880627c5be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 303.287089][T21456] [ 303.287089][T21456] but task is already holding lock: [ 303.294468][T21456] ffff8880627c5f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 303.307040][T21456] [ 303.307040][T21456] which lock already depends on the new lock. [ 303.307040][T21456] [ 303.317452][T21456] [ 303.317452][T21456] the existing dependency chain (in reverse order) is: [ 303.326558][T21456] [ 303.326558][T21456] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 303.337073][T21456] lock_acquire+0x1db/0x4f0 [ 303.342099][T21456] down_write+0x38/0x60 [ 303.346772][T21456] ocfs2_lock_global_qf+0x202/0x2a0 [ 303.352574][T21456] ocfs2_acquire_dquot+0x299/0xb40 [ 303.358196][T21456] dqget+0x762/0xe90 [ 303.362601][T21456] dquot_get_next_dqblk+0xb6/0x3a0 [ 303.368240][T21456] quota_getnextquota+0x2bc/0x6b0 [ 303.373775][T21456] __se_sys_quotactl+0x2b1/0x770 [ 303.379220][T21456] do_syscall_64+0x3b/0xb0 [ 303.384168][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.390571][T21456] [ 303.390571][T21456] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 303.398199][T21456] lock_acquire+0x1db/0x4f0 [ 303.403212][T21456] __mutex_lock_common+0x1da/0x25a0 [ 303.408922][T21456] mutex_lock_nested+0x17/0x20 [ 303.414634][T21456] dquot_commit+0x57/0x510 [ 303.419562][T21456] ext4_write_dquot+0x1fd/0x360 [ 303.424924][T21456] mark_all_dquot_dirty+0xf7/0x400 [ 303.430544][T21456] __dquot_free_space+0x932/0xe40 [ 303.436078][T21456] ext4_free_blocks+0x1f5c/0x2e90 [ 303.441617][T21456] ext4_ext_remove_space+0x24da/0x4db0 [ 303.447869][T21456] ext4_ext_truncate+0x191/0x250 [ 303.453351][T21456] ext4_truncate+0x9fd/0x1130 [ 303.458658][T21456] ext4_process_orphan+0x1aa/0x2d0 [ 303.464289][T21456] ext4_orphan_cleanup+0x9d9/0x1240 [ 303.470024][T21456] ext4_fill_super+0x98de/0xa110 [ 303.475504][T21456] mount_bdev+0x2c9/0x3f0 [ 303.480371][T21456] legacy_get_tree+0xeb/0x180 [ 303.485565][T21456] vfs_get_tree+0x88/0x270 [ 303.490556][T21456] do_new_mount+0x2ba/0xb40 [ 303.495571][T21456] __se_sys_mount+0x2d5/0x3c0 [ 303.500762][T21456] do_syscall_64+0x3b/0xb0 [ 303.505685][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.512099][T21456] [ 303.512099][T21456] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 303.519729][T21456] lock_acquire+0x1db/0x4f0 [ 303.524758][T21456] down_write+0x38/0x60 [ 303.529433][T21456] ext4_truncate+0x974/0x1130 [ 303.534632][T21456] ext4_setattr+0xf96/0x1990 [ 303.539895][T21456] notify_change+0xc6d/0xf50 [ 303.545010][T21456] do_truncate+0x21c/0x300 [ 303.549970][T21456] do_sys_ftruncate+0x2eb/0x390 [ 303.555346][T21456] do_syscall_64+0x3b/0xb0 [ 303.560281][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.566698][T21456] [ 303.566698][T21456] -> #3 (jbd2_handle){++++}-{0:0}: [ 303.573982][T21456] lock_acquire+0x1db/0x4f0 [ 303.578998][T21456] start_this_handle+0x12e1/0x1570 [ 303.584623][T21456] jbd2__journal_start+0x2d1/0x5c0 [ 303.590250][T21456] jbd2_journal_start+0x25/0x30 [ 303.595625][T21456] ocfs2_start_trans+0x3c2/0x6f0 [ 303.601100][T21456] ocfs2_reserve_local_alloc_bits+0xbf9/0x27a0 [ 303.607782][T21456] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 303.614644][T21456] ocfs2_symlink+0x1424/0x2e20 [ 303.619944][T21456] vfs_symlink+0x247/0x3d0 [ 303.624904][T21456] do_symlinkat+0x1fd/0x600 [ 303.629919][T21456] __x64_sys_symlink+0x7a/0x90 [ 303.635200][T21456] do_syscall_64+0x3b/0xb0 [ 303.640133][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.646541][T21456] [ 303.646541][T21456] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 303.655044][T21456] lock_acquire+0x1db/0x4f0 [ 303.660059][T21456] down_read+0x45/0x2e0 [ 303.664721][T21456] ocfs2_start_trans+0x3b7/0x6f0 [ 303.670168][T21456] ocfs2_reserve_local_alloc_bits+0xbf9/0x27a0 [ 303.676830][T21456] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 303.683669][T21456] ocfs2_symlink+0x1424/0x2e20 [ 303.688941][T21456] vfs_symlink+0x247/0x3d0 [ 303.693871][T21456] do_symlinkat+0x1fd/0x600 [ 303.698927][T21456] __x64_sys_symlink+0x7a/0x90 [ 303.704206][T21456] do_syscall_64+0x3b/0xb0 [ 303.709142][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.715548][T21456] [ 303.715548][T21456] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 303.723009][T21456] lock_acquire+0x1db/0x4f0 [ 303.728026][T21456] ocfs2_start_trans+0x2b2/0x6f0 [ 303.733558][T21456] ocfs2_write_info+0x124/0x3a0 [ 303.738915][T21456] dquot_set_dqinfo+0x488/0x6f0 [ 303.744276][T21456] quota_setinfo+0x3d6/0x4f0 [ 303.749399][T21456] __se_sys_quotactl+0x2b1/0x770 [ 303.754850][T21456] do_syscall_64+0x3b/0xb0 [ 303.759791][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.766209][T21456] [ 303.766209][T21456] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 303.775068][T21456] validate_chain+0x1649/0x5930 [ 303.780518][T21456] __lock_acquire+0x1295/0x1ff0 [ 303.785876][T21456] lock_acquire+0x1db/0x4f0 [ 303.790909][T21456] down_write+0x38/0x60 [ 303.795663][T21456] ocfs2_lock_global_qf+0x221/0x2a0 [ 303.801373][T21456] ocfs2_acquire_dquot+0x299/0xb40 [ 303.806994][T21456] dqget+0x762/0xe90 [ 303.811400][T21456] dquot_get_next_dqblk+0xb6/0x3a0 [ 303.817034][T21456] quota_getnextquota+0x2bc/0x6b0 [ 303.822586][T21456] __se_sys_quotactl+0x2b1/0x770 [ 303.828034][T21456] do_syscall_64+0x3b/0xb0 [ 303.832961][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.839366][T21456] [ 303.839366][T21456] other info that might help us debug this: [ 303.839366][T21456] [ 303.849578][T21456] Chain exists of: [ 303.849578][T21456] &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8 [ 303.849578][T21456] [ 303.866693][T21456] Possible unsafe locking scenario: [ 303.866693][T21456] [ 303.874134][T21456] CPU0 CPU1 [ 303.879484][T21456] ---- ---- [ 303.884852][T21456] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 303.892133][T21456] lock(&dquot->dq_lock); [ 303.899062][T21456] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 303.908874][T21456] lock(&ocfs2_quota_ip_alloc_sem_key); [ 303.914516][T21456] [ 303.914516][T21456] *** DEADLOCK *** [ 303.914516][T21456] [ 303.922660][T21456] 3 locks held by syz.1.4307/21456: [ 303.927839][T21456] #0: ffff8880802d80e0 (&type->s_umount_key#72){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 303.938021][T21456] #1: ffff88808ac1a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x28c/0xb40 [ 303.948022][T21456] #2: ffff8880627c5f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 303.960982][T21456] [ 303.960982][T21456] stack backtrace: [ 303.966860][T21456] CPU: 1 PID: 21456 Comm: syz.1.4307 Not tainted 5.15.171-syzkaller #0 [ 303.975088][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.985133][T21456] Call Trace: [ 303.988409][T21456] [ 303.991331][T21456] dump_stack_lvl+0x1e3/0x2d0 [ 303.996445][T21456] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 304.002086][T21456] ? print_circular_bug+0x12b/0x1a0 [ 304.007303][T21456] check_noncircular+0x2f8/0x3b0 [ 304.012240][T21456] ? add_chain_block+0x850/0x850 [ 304.017191][T21456] ? lockdep_lock+0x11f/0x2a0 [ 304.021877][T21456] validate_chain+0x1649/0x5930 [ 304.026734][T21456] ? stack_trace_save+0x113/0x1c0 [ 304.031753][T21456] ? reacquire_held_locks+0x660/0x660 [ 304.037117][T21456] ? stack_trace_snprint+0xe0/0xe0 [ 304.042223][T21456] ? lockdep_unlock+0x166/0x300 [ 304.047093][T21456] ? lockdep_unlock+0x166/0x300 [ 304.051968][T21456] ? mark_lock+0x98/0x340 [ 304.056302][T21456] __lock_acquire+0x1295/0x1ff0 [ 304.061153][T21456] lock_acquire+0x1db/0x4f0 [ 304.065822][T21456] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 304.071189][T21456] ? read_lock_is_recursive+0x10/0x10 [ 304.076554][T21456] ? __might_sleep+0xc0/0xc0 [ 304.081363][T21456] ? rwsem_write_trylock+0x166/0x210 [ 304.086653][T21456] ? clear_nonspinnable+0x60/0x60 [ 304.091677][T21456] ? do_raw_spin_unlock+0x137/0x8b0 [ 304.096893][T21456] down_write+0x38/0x60 [ 304.101151][T21456] ? ocfs2_lock_global_qf+0x221/0x2a0 [ 304.106517][T21456] ocfs2_lock_global_qf+0x221/0x2a0 [ 304.111860][T21456] ? lock_buffer+0x80/0x80 [ 304.116283][T21456] ? __mutex_lock_common+0x444/0x25a0 [ 304.121661][T21456] ocfs2_acquire_dquot+0x299/0xb40 [ 304.126775][T21456] ? dqget+0x6dc/0xe90 [ 304.130846][T21456] ? mutex_unlock+0x10/0x10 [ 304.135366][T21456] ? ocfs2_destroy_dquot+0x40/0x40 [ 304.140477][T21456] ? percpu_counter_add_batch+0x142/0x160 [ 304.146198][T21456] dqget+0x762/0xe90 [ 304.150098][T21456] dquot_get_next_dqblk+0xb6/0x3a0 [ 304.155208][T21456] quota_getnextquota+0x2bc/0x6b0 [ 304.160251][T21456] ? quota_getquota+0x6d0/0x6d0 [ 304.165095][T21456] ? read_lock_is_recursive+0x10/0x10 [ 304.170472][T21456] ? bpf_lsm_capable+0x5/0x10 [ 304.175150][T21456] ? security_capable+0x86/0xb0 [ 304.179999][T21456] ? bpf_lsm_quotactl+0x5/0x10 [ 304.184762][T21456] ? security_quotactl+0x86/0xb0 [ 304.189698][T21456] ? do_quotactl+0x508/0x6c0 [ 304.194297][T21456] __se_sys_quotactl+0x2b1/0x770 [ 304.199272][T21456] ? __lock_acquire+0x1ff0/0x1ff0 [ 304.204331][T21456] ? __x64_sys_quotactl+0xa0/0xa0 [ 304.209371][T21456] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 304.215365][T21456] ? print_irqtrace_events+0x210/0x210 [ 304.220907][T21456] ? vtime_user_exit+0x2d1/0x400 [ 304.225835][T21456] ? syscall_enter_from_user_mode+0x2e/0x240 [ 304.231813][T21456] ? lockdep_hardirqs_on+0x94/0x130 [ 304.237016][T21456] ? syscall_enter_from_user_mode+0x2e/0x240 [ 304.243014][T21456] do_syscall_64+0x3b/0xb0 [ 304.247454][T21456] ? clear_bhb_loop+0x15/0x70 [ 304.252139][T21456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.258027][T21456] RIP: 0033:0x7f3b52291719 [ 304.262462][T21456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.282064][T21456] RSP: 002b:00007f3b50709038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 304.290467][T21456] RAX: ffffffffffffffda RBX: 00007f3b52448f80 RCX: 00007f3b52291719 [ 304.298433][T21456] RDX: 0000000000000000 RSI: 0000000020000c80 RDI: ffffffff80000900 [ 304.306397][T21456] RBP: 00007f3b5230475e R08: 0000000000000000 R09: 0000000000000000 [ 304.314359][T21456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.322349][T21456] R13: 0000000000000000 R14: 00007f3b52448f80 R15: 00007ffc40185528 [ 304.330331][T21456] [ 304.339029][T21456] (syz.1.4307,21456,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 304.352853][T21456] (syz.1.4307,21456,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 304.366523][T21456] (syz.1.4307,21456,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 304.375142][T21456] (syz.1.4307,21456,1):ocfs2_quota_read:201 ERROR: status = -5 [ 304.382933][T21456] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 304.385411][T21542] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.392472][T10775] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 304.410115][T21456] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 304.421728][T10775] usb 1-1: ath9k_htc: USB layer deinitialized [ 304.428705][T21456] (syz.1.4307,21456,1):ocfs2_acquire_dquot:873 ERROR: status = -5 [ 304.494096][T10779] usb 1-1: USB disconnect, device number 24 [ 304.509072][ T26] audit: type=1800 audit(1731568742.266:80): pid=21542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4333" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 304.542137][ T4167] ocfs2: Unmounting device (7,1) on (node local)