last executing test programs: 3.896385162s ago: executing program 5 (id=10128): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0) sendfile(r0, r0, 0x0, 0x6) 3.822770102s ago: executing program 2 (id=10129): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xcd, 0x26, 0x20203143, 0x0, [0x2], [0x10001, 0x7, 0x0, 0xff], [0x0, 0x0, 0x2000004, 0xcc7], [0x3ff, 0x7, 0x0, 0x200000200000001]}) 3.610327686s ago: executing program 5 (id=10131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13, 0x4}]}, 0x24}}, 0x0) 3.551812515s ago: executing program 4 (id=10133): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000eafa7240936901b02926f400000109021b000124a80080090400000103000000090563"], 0x0) 3.487966459s ago: executing program 2 (id=10134): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) 3.337240527s ago: executing program 5 (id=10137): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8100) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 3.124197536s ago: executing program 2 (id=10139): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac000000030000000000000005000084040000000d00000000000000f9ffffff0e00000004000000434b00000200000001000000080000000f"], 0x0, 0xc7, 0x0, 0x1, 0x2}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000080000000100000f0200000002000000feffffff01000000497700000000000f020000001760000800"], 0x0, 0x4a, 0x0, 0x1}, 0x28) 3.041433387s ago: executing program 5 (id=10141): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x204440, &(0x7f0000000d80)=ANY=[], 0x23, 0x7e2, &(0x7f0000001000)="$eJzs3U9oHOfZAPBnFMl/FPAX8n3kM8ZxxnY+Ppu6yq6UKBU5JJvVSJ5E2hW7q2JTShJiG4zlJMSEND408SVpS0vpqcc015BLoYdCD4Ue2kKh0Bx66aEQyKmk0EJpKQGVmd21VrJWkhPLTt3fT1jv7LvPvPPM7HieHUk7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAJPXZSqWaHIiI5TPpcPXZVnNxi+f74/18XbPFciOS4l/s2xcHu10H/2ft6QeKb8ficPfR4dhXNPvi6r0P3PfEf4+O9OffIqHP6ugO45KIt4qkLr2wsnL+1V1I5Db6zs9uepZ/rBbf57NG3m7mi7X5LM3bzXRmerryyOm5djqXL2Tts+1OtpjWW1mt02ylJ+on0+rMzFSaTZxtLjfmZ2sLWb/z8S9PVirT6TMTS1mt1W42Hnlmol0/nS8s5I35Mmay8noUMY8XO+KzeSftZLXFNL1wceX81HapFkHVdT171+04hx++7+PXPvrrxfPFDjlskKS3Y05Wq5OT1enHZh57vFIZnaxMru+obBDXI2IkoojYlZ2WL7r9cX3funUHb/icRrr1P2Ih8mjEcpyJNNIYKb+vfY3FvpiNVjRjsXj8+7ENz99Q///vkT//dqvlDtb/fpU/uPb0oSjr/5HuoyND6n9xUN6Yxy59Xf5NxAfdbAb7r8QbcTUuxQuxEitxPl69Xfl81q+RHcbt678SW8fNRxaNyKMdzchjMWplT9rrSWMmpmM6KvFcnI65aEcac5HHQmTRjrPRjk5k5R5Vj1ZkUYtONKMVaZyIepyMNKoxEzMxFWlkMRFnoxnL0Yj5mI1aOcqFuFhu96kNeT3wzeeTt3738bvF9PWg6hYrkhRv5oqgv2wR1CvmD8WO6v/+3hZcH6H+3236/1V2Gn8Ljtpwa6yW9X/0TqcBAAAA7KKk/Ol7EhFj8WA5NZcvZF+702kBAAAAt1D5d82Hi2asmHowkuL8v7JJ5Ie3PTcAAADg1kjKz9glETEeD3Wn+h+X2uyHAAAAAMC/ofL3/0eKZjzizbLD+T8AAADcZb417Br7H+3pXaO3vbQ3uacXvXTm4eRyrZiqXe719ZqvXh+xM3coOdAbpGymR6/em0TEaD07nPSvfvnp3m77STnCobULEA671n/Sao0l14YnEFsnUD6K78bRbszRc932XP+Z7lLG5/KFbKLeXHiimvR+ONJ57aWL34golv7txuKBJC5cXDk/8eLLK+fKXK4Vo1y73Ls8fHITuaz2tkA8uPkaj5UfxOgtd7y73Mrg+o90Zx/ZepnJ4DLfjmPdmGPj3XZ8/frvK5ZZnXiiGrXagZFOdqbz2urA2veyqH7ONX87jndjjp843m02yWJyXRYv3ZjF5GAWO9sWW2ZR6Gfx7tE3z/ztl80km9oui6nPmQXAnXKhvOrPWhXaX1ahf652FfV/Q93tX9V806Pc//+kdwzdcJS7sPYuoz//QK0bjVtT3d+OE92YE933E6OH1tWVp8q6UtnkiP7KxVd+1TuiP/r+D3/09SO//vHQ6vZU913B8Czej5PdyF4T9//ihupWDFEtt+z3NlTV94o53htaVdsLk0mMxcjqf11/unydImJyarryaKXy2GSMlW8Ves3wTPfufC8B4G6z7T12dnAXnkc3P6uOfsW7//qfFEzEi/FyrMS5OFV+2iAiHtp81PGBP0M4tc1Z6/jAHV5ObXNuuRY7uTF27/EkhsRODWyx//1B2fx9914TANhtx7apwzup/6e2Pu/eUMtPdm+c2z87juG1fDNf2e0NAgD/AbLWJ8l4552k1cqXnqvOzFRrndNZ2mrWn01b+ex8luaNTtaqn6415rN0qdXsNOv9X1rOZu20vby01Py0k841W+lSs52fKe/8nvZu/d7OFmuN16PeXlrIau0srTcbnVq9k87m7Xq6tPz0Qt4+nbXKmdtLWT2fy+u1Tt5spO3mcqueTaRpO8sGAvPZrNHJ5/JispEutfLFWutaRCwsL2bpbNaut/KlTrM7YH9ZeWOu2Vosh524cfX/dLu3NwB8EVx54+qlF1ZWzr+6fmI12diz+cQfdhBzJWL1Tq8mADBgsEoDAAAAAAAAAAAAAABfTDd+XK/o3fYjfYMTY3ETwRsm9sZnmevunfjSB92X5VYMuMk4e7ac6561nv3rXtM9vZ3lzm+fm554/sknLw2LefrNg6f/mEVsP87m/1Ou3HvD3hvvHIjY89Pvd3ueul1r+mF01yJGb2r21WSLmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAof4VAAD//5lPUOA=") stat(&(0x7f0000000300)='./file1\x00', 0x0) 2.802462082s ago: executing program 2 (id=10143): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x5}) 2.576050708s ago: executing program 5 (id=10145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000b4000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000010c0009800800014000008f"], 0xfc}}, 0x0) 2.470713458s ago: executing program 2 (id=10148): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 2.386627807s ago: executing program 1 (id=10149): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200c440, 0x0) 2.153904087s ago: executing program 2 (id=10152): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x141, 0x39, 0xc9, 0x12, 0x20, 0xc45, 0x62b0, 0x7090, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x17, 0x2, 0x0, 0x13, 0x5a, 0xd3}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.095316839s ago: executing program 5 (id=10153): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x84d0, 0x2000000000000000, 0x200002, 0x2, 0x2, 0x7b, 0xfffffffffffffffd, 0x9}) 1.982535426s ago: executing program 0 (id=10154): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x1, 0x51}], 0x10}, 0x4000) 1.981845011s ago: executing program 3 (id=10155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}}, 0x0) 1.924203353s ago: executing program 1 (id=10156): r0 = socket(0x10, 0x80002, 0x2) connect$netlink(r0, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc) 1.768021734s ago: executing program 1 (id=10157): syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000000900)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) 1.733579024s ago: executing program 4 (id=10158): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'team0\x00', @random="0100"}) 1.683387484s ago: executing program 0 (id=10159): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084523, &(0x7f0000001f40)=""/231) 1.640196811s ago: executing program 3 (id=10160): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') pread64(r0, &(0x7f0000000000)=""/65, 0x41, 0x96) 1.429967896s ago: executing program 0 (id=10161): personality(0x400000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000009, 0x2172, 0xffffffffffffffff, 0x60f4b000) 1.425452261s ago: executing program 4 (id=10162): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000400, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.300339604s ago: executing program 3 (id=10163): r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000000c0)=[0xd, 0x7, 0x7ff, 0x7, 0x4b, 0x6]) 1.146033345s ago: executing program 1 (id=10164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=@newlink={0x48, 0x10, 0x439, 0x0, 0x40, {0x0, 0x0, 0x0, 0x0, 0x0, 0x110d1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0xfffffffd}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x40000880) 976.074446ms ago: executing program 3 (id=10165): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x8a000, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000004c0)={0x1, 0xc}) 951.263646ms ago: executing program 0 (id=10166): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 811.914069ms ago: executing program 4 (id=10167): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x4a1, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x8, 0x0, 0x0) 676.144853ms ago: executing program 3 (id=10168): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) 623.722092ms ago: executing program 0 (id=10169): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={@none, 0x1ff}) 623.506034ms ago: executing program 1 (id=10170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) 401.174788ms ago: executing program 3 (id=10171): syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x8, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x1, 0x45}}]}}}]}}]}}, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) 243.316354ms ago: executing program 4 (id=10172): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000140)={0x10, 0x2}, 0x10) 192.087981ms ago: executing program 0 (id=10173): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fgetxattr(r0, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) 162.353338ms ago: executing program 1 (id=10174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) 0s ago: executing program 4 (id=10175): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x800008, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x2, 0x489, &(0x7f0000000580)="$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") mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) kernel console output (not intermixed with test programs): ed capacity change from 0 to 512 [ 1037.856231][T25075] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1037.882213][T25039] loop5: detected capacity change from 0 to 40427 [ 1037.902727][T25075] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.8517: invalid indirect mapped block 2683928664 (level 1) [ 1037.921650][T14226] usb 3-1: USB disconnect, device number 23 [ 1037.938353][T25039] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1037.969407][T25075] EXT4-fs (loop1): 1 truncate cleaned up [ 1037.995332][T25039] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1038.026486][T25075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.089830][T25039] F2FS-fs (loop5): invalid crc value [ 1038.131155][ T6421] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1038.257123][ T6297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.306769][ T6421] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1038.344853][ T6421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.376848][ T6421] usb 5-1: Product: syz [ 1038.392073][ T6421] usb 5-1: Manufacturer: syz [ 1038.396677][ T6421] usb 5-1: SerialNumber: syz [ 1038.410358][T25039] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1038.440185][T18149] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.451286][ T6421] usb 5-1: config 0 descriptor?? [ 1038.482721][T25039] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1038.496904][ T6421] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 111 [ 1038.510155][T25098] loop1: detected capacity change from 0 to 64 [ 1038.526674][T25039] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1038.935732][ T6421] (null): failure reading functionality [ 1038.971081][ T6421] i2c i2c-1: failure reading functionality [ 1039.011495][ T6421] i2c i2c-1: connected i2c-tiny-usb device [ 1039.067010][ T6421] usb 5-1: USB disconnect, device number 111 [ 1039.189363][ T5848] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1039.371739][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 1039.414275][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1039.446989][ T5848] usb 2-1: config 0 has no interface number 0 [ 1039.453137][ T5848] usb 2-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1039.527554][ T5848] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x83 has invalid maxpacket 15813, setting to 1024 [ 1039.574192][ T5848] usb 2-1: config 0 interface 2 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1039.622435][ T5848] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1039.641767][ T5848] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1039.699739][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.716839][ T5848] usb 2-1: Product: syz [ 1039.721162][ T5848] usb 2-1: Manufacturer: syz [ 1039.745446][ T5848] usb 2-1: SerialNumber: syz [ 1039.789578][ T5848] usb 2-1: config 0 descriptor?? [ 1039.795476][T25106] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1040.058131][ T5848] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1040.198874][ T5848] usb 2-1: USB disconnect, device number 125 [ 1040.361686][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.702278][ T30] audit: type=1326 audit(2000525213.353:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25151 comm="syz.2.8553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aaff8eec9 code=0x7ffc0000 [ 1040.802535][ T30] audit: type=1326 audit(2000525213.353:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25151 comm="syz.2.8553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aaff8eec9 code=0x7ffc0000 [ 1040.891410][ T30] audit: type=1326 audit(2000525213.382:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25151 comm="syz.2.8553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8aaff8eec9 code=0x7ffc0000 [ 1040.985620][ T30] audit: type=1326 audit(2000525213.382:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25151 comm="syz.2.8553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aaff8eec9 code=0x7ffc0000 [ 1041.078626][ T30] audit: type=1326 audit(2000525213.382:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25151 comm="syz.2.8553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aaff8eec9 code=0x7ffc0000 [ 1041.950114][T25144] loop5: detected capacity change from 0 to 32768 [ 1042.321274][T25159] loop4: detected capacity change from 0 to 32768 [ 1043.509029][T25227] loop1: detected capacity change from 0 to 8 [ 1043.599870][T25227] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1043.632025][T25227] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1043.674127][T25227] SQUASHFS error: Unable to read directory block [247:26] [ 1044.382914][T25206] loop2: detected capacity change from 0 to 32768 [ 1044.511427][T25206] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1044.662834][T25206] XFS (loop2): Ending clean mount [ 1044.718607][T25206] XFS (loop2): Quotacheck needed: Please wait. [ 1044.888197][T25206] XFS (loop2): Quotacheck: Done. [ 1045.071249][T25229] loop3: detected capacity change from 0 to 32768 [ 1045.080269][T25229] XFS: ikeep mount option is deprecated. [ 1045.174030][ T6301] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1045.199700][T25229] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1045.272289][T25229] XFS (loop3): Ending clean mount [ 1045.346622][T25229] XFS (loop3): Quotacheck needed: Please wait. [ 1045.472268][T25229] XFS (loop3): Quotacheck: Done. [ 1045.715961][ T6302] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1045.805199][T25245] loop1: detected capacity change from 0 to 32768 [ 1046.437612][ T30] audit: type=1400 audit(2000525218.713:224): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=25290 comm="syz.2.8615" [ 1046.951118][T25303] loop3: detected capacity change from 0 to 512 [ 1047.104592][T25303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.158022][T25303] ext4 filesystem being mounted at /1363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1047.272651][ T6376] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1047.368065][T25320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.457004][ T6376] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1047.502462][ T6302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.515014][ T6376] usb 2-1: not running at top speed; connect to a high speed hub [ 1047.535740][ T6376] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 1047.583098][ T6376] usb 2-1: config 1 has no interface number 0 [ 1047.596858][T25283] loop5: detected capacity change from 0 to 32768 [ 1047.599735][ T6376] usb 2-1: config 1 interface 138 has no altsetting 0 [ 1047.678284][ T6376] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1047.722452][T25283] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1047.738426][ T6376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.801417][ T6376] usb 2-1: Product: syz [ 1047.805623][ T6376] usb 2-1: Manufacturer: syz [ 1047.806647][T25283] XFS (loop5): Ending clean mount [ 1047.825303][T25283] XFS (loop5): Quotacheck needed: Please wait. [ 1047.875363][ T6376] usb 2-1: SerialNumber: syz [ 1047.923723][T25339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1047.980737][T25283] XFS (loop5): Quotacheck: Done. [ 1047.988968][T25339] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8632'. [ 1048.239778][ T6376] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1048.271263][ T6311] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1048.434905][ T6376] usb 2-1: USB disconnect, device number 126 [ 1048.636076][T11177] udevd[11177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.743724][T25352] bond4: entered allmulticast mode [ 1048.791156][T25352] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1049.419102][T25380] loop4: detected capacity change from 0 to 256 [ 1049.422577][T25381] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1049.464583][ T6483] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1049.640421][ T6421] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1049.667488][ T6483] usb 4-1: Using ep0 maxpacket: 16 [ 1049.675379][ T6483] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1049.697595][ T6483] usb 4-1: config 0 has no interface number 0 [ 1049.720299][ T6483] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1049.759767][ T6483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.792859][ T6483] usb 4-1: Product: syz [ 1049.808295][ T6483] usb 4-1: Manufacturer: syz [ 1049.824203][ T6483] usb 4-1: SerialNumber: syz [ 1049.842916][ T6421] usb 3-1: config 255 has an invalid interface number: 38 but max is 0 [ 1049.861267][ T6483] usb 4-1: config 0 descriptor?? [ 1049.870838][ T6421] usb 3-1: config 255 has no interface number 0 [ 1049.904106][ T6421] usb 3-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 1.7d [ 1049.914195][ T6483] hub 4-1:0.132: bad descriptor, ignoring hub [ 1049.920290][ T6483] hub 4-1:0.132: probe with driver hub failed with error -5 [ 1049.943675][ T6421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.962390][ T6483] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input70 [ 1049.979008][ T6421] usb 3-1: Product: syz [ 1049.983184][ T6421] usb 3-1: Manufacturer: syz [ 1049.987803][ T6421] usb 3-1: SerialNumber: syz [ 1050.270406][ T6421] dvb-usb: found a 'DiBcom STK7070P reference design' in cold state, will try to load a firmware [ 1050.313828][ T6421] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1050.341860][ T6421] dib0700: firmware download failed at 7 with -22 [ 1050.399098][ T6421] usb 3-1: USB disconnect, device number 24 [ 1050.474963][T25408] netlink: 'syz.1.8666': attribute type 4 has an invalid length. [ 1050.712854][T25416] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1050.811692][ T5848] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1050.995377][ T5848] usb 6-1: Using ep0 maxpacket: 8 [ 1051.043853][ T5848] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1051.075246][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1051.119422][ T5848] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1051.163917][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1051.188200][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1051.209667][ T5848] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1051.209790][ T5215] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 1051.226239][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1051.258303][T25434] netlink: 'syz.1.8679': attribute type 5 has an invalid length. [ 1051.266786][ T5215] usb 4-1: device reset changed ep0 maxpacket size! [ 1051.269381][ T5848] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1051.284964][ T6483] usb 4-1: USB disconnect, device number 11 [ 1051.297169][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1051.310788][T25434] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.8679'. [ 1051.324012][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1051.327852][ T6421] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 1051.343366][ T5848] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1051.362852][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1051.394640][ T5848] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1051.428149][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1051.440756][T14226] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1051.471393][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1051.485269][ T6483] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1051.510887][ T5848] usb 6-1: string descriptor 0 read error: -22 [ 1051.520661][ T5848] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1051.540321][T25438] loop2: detected capacity change from 0 to 512 [ 1051.549619][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.558965][ T6421] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1051.569808][ T6421] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1051.580374][ T6421] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1051.591795][ T5848] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1051.613099][T25438] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8681: casefold flag without casefold feature [ 1051.624321][T14226] usb 1-1: Using ep0 maxpacket: 16 [ 1051.634883][ T6421] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1051.638941][T14226] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.656434][T14226] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1051.669113][T25438] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.8681: couldn't read orphan inode 15 (err -117) [ 1051.684347][T14226] usb 1-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=88.56 [ 1051.688332][ T6421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1051.693774][T14226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.705668][ T6483] usb 4-1: Using ep0 maxpacket: 8 [ 1051.711776][T14226] usb 1-1: Product: syz [ 1051.711809][T14226] usb 1-1: Manufacturer: syz [ 1051.711838][T14226] usb 1-1: SerialNumber: syz [ 1051.773192][T25438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.791532][ T6421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1051.833289][ T6421] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1051.858704][ T6483] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1051.879760][ T6483] usb 4-1: config 179 has no interface number 0 [ 1051.889619][ T6483] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1051.904122][ T6483] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1051.917250][ T6483] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1051.929478][ T6421] usb 5-1: string descriptor 0 read error: -22 [ 1051.936069][ T6421] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1051.959658][ T6421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.969148][T14226] ums-cypress 1-1:2.0: USB Mass Storage device detected [ 1051.979481][ T6483] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1051.991440][ T6980] usb 6-1: USB disconnect, device number 3 [ 1052.000535][ T6483] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1052.018044][ T6421] usb 5-1: config 0 descriptor?? [ 1052.023680][ T6483] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1052.033267][ T6483] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1052.042746][ T6483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.055172][ T6421] hub 5-1:0.0: bad descriptor, ignoring hub [ 1052.061112][ T6421] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1052.102399][ T6421] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input72 [ 1052.116398][ T6483] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input71 [ 1052.185709][T14226] usb 1-1: USB disconnect, device number 125 [ 1052.199622][ T5215] input input71: unable to receive magic message: -110 [ 1052.270119][ T5215] input input71: unable to receive magic message: -32 [ 1052.279204][ T6301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.362361][ T5215] input input71: unable to receive magic message: -32 [ 1052.388443][ T5215] input input71: unable to receive magic message: -32 [ 1052.447501][ T5865] input input71: unable to receive magic message: -32 [ 1052.504744][ T6421] usb 5-1: USB disconnect, device number 112 [ 1052.612515][ T5215] input input71: unable to receive magic message: -71 [ 1052.618843][ T6980] usb 4-1: USB disconnect, device number 12 [ 1052.619752][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1052.634637][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1053.147026][T25464] netlink: 'syz.4.8691': attribute type 1 has an invalid length. [ 1053.168314][T25457] loop5: detected capacity change from 0 to 4096 [ 1053.237600][T25457] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1053.473468][T25471] loop1: detected capacity change from 0 to 8 [ 1053.672650][T25471] SQUASHFS error: xz decompression failed, data probably corrupt [ 1053.703627][T25474] netlink: set zone limit has 4 unknown bytes [ 1053.721241][T25471] SQUASHFS error: Failed to read block 0xa8: -5 [ 1053.795206][T25471] SQUASHFS error: xz decompression failed, data probably corrupt [ 1053.815119][T25471] SQUASHFS error: Failed to read block 0xa8: -5 [ 1053.850646][ T30] audit: type=1800 audit(2000525225.652:225): pid=25471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8695" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 1054.577819][T25500] loop3: detected capacity change from 0 to 1024 [ 1054.641021][T25500] EXT4-fs: Ignoring removed bh option [ 1054.731642][T25500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.787244][T25500] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz.3.8709: directory missing '.' [ 1055.046614][T25519] netlink: 'syz.1.8717': attribute type 11 has an invalid length. [ 1055.079939][ T6302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.143112][T25552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8733'. [ 1056.209098][T25551] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8732'. [ 1056.774491][T25570] openvswitch: netlink: Unknown key attributes 2 [ 1056.822980][T25564] loop1: detected capacity change from 0 to 1764 [ 1057.242535][T25572] bond0: entered allmulticast mode [ 1057.284298][T25572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.600101][T25588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8750'. [ 1057.703217][T25595] loop1: detected capacity change from 0 to 64 [ 1057.809712][T25598] QAT: Invalid ioctl 21531 [ 1059.302969][T25638] loop4: detected capacity change from 0 to 512 [ 1059.439101][T25638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.494050][T25638] ext4 filesystem being mounted at /1363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.654102][ T6309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.875736][T25651] loop3: detected capacity change from 0 to 1024 [ 1060.373664][T25665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8786'. [ 1060.419054][T25665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8786'. [ 1060.824428][T25677] loop1: detected capacity change from 0 to 256 [ 1060.918821][T25677] FAT-fs (loop1): Directory bread(block 64) failed [ 1060.938312][T25677] FAT-fs (loop1): Directory bread(block 65) failed [ 1060.976847][T25677] FAT-fs (loop1): Directory bread(block 66) failed [ 1061.018315][T25677] FAT-fs (loop1): Directory bread(block 67) failed [ 1061.033510][ T6483] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1061.048406][T25677] FAT-fs (loop1): Directory bread(block 68) failed [ 1061.079716][T25677] FAT-fs (loop1): Directory bread(block 69) failed [ 1061.107884][T25677] FAT-fs (loop1): Directory bread(block 70) failed [ 1061.183140][T25677] FAT-fs (loop1): Directory bread(block 71) failed [ 1061.189889][T25677] FAT-fs (loop1): Directory bread(block 72) failed [ 1061.249783][ T6483] usb 4-1: Using ep0 maxpacket: 8 [ 1061.265827][T25677] FAT-fs (loop1): Directory bread(block 73) failed [ 1061.275021][ T6483] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.320327][ T6483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1061.364856][ T6483] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1061.407417][ T6483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.418604][T25690] netlink: 'syz.4.8800': attribute type 3 has an invalid length. [ 1061.426432][ T6483] usb 4-1: Product: syz [ 1061.446437][ T6483] usb 4-1: Manufacturer: syz [ 1061.467957][ T6483] usb 4-1: SerialNumber: syz [ 1061.485467][ T6483] usb 4-1: config 0 descriptor?? [ 1061.540076][ T6483] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1061.762022][ T6483] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1061.779158][ T6483] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1061.795173][ T6483] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1061.981598][ T6483] usb 4-1: USB disconnect, device number 13 [ 1062.246172][ T30] audit: type=1326 audit(2000525233.499:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.347506][ T30] audit: type=1326 audit(2000525233.527:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.434139][ T30] audit: type=1326 audit(2000525233.527:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.521171][ T30] audit: type=1326 audit(2000525233.527:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.673326][ T30] audit: type=1326 audit(2000525233.527:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.756599][ T30] audit: type=1326 audit(2000525233.527:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.842453][T25725] openvswitch: netlink: Flow key attr not present in new flow. [ 1062.865136][ T30] audit: type=1326 audit(2000525233.527:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1062.966280][ T30] audit: type=1326 audit(2000525233.527:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1063.086024][ T30] audit: type=1326 audit(2000525233.527:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1063.182276][ T30] audit: type=1326 audit(2000525233.527:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25709 comm="syz.0.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1063.718273][T25750] loop4: detected capacity change from 0 to 512 [ 1063.787135][T25750] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1063.858456][T25756] loop1: detected capacity change from 0 to 128 [ 1063.901077][T25750] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1063.949120][T25756] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1063.984978][T25756] ext4 filesystem being mounted at /1370/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.031412][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8836'. [ 1064.087231][T25756] EXT4-fs warning (device loop1): verify_group_input:136: Cannot add at group 3 (only 1 groups) [ 1064.163954][T25764] loop5: detected capacity change from 0 to 128 [ 1064.301834][T25764] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1064.386574][T25770] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1064.410658][T25764] ext4 filesystem being mounted at /1455/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.427399][ T6297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1064.679456][ T6980] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1064.722114][T25764] EXT4-fs warning (device loop5): verify_group_input:136: Cannot add at group 1025 (only 1 groups) [ 1064.909118][ T6980] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1064.941028][ T6980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.992722][ T6980] usb 3-1: Product: syz [ 1064.996940][ T6980] usb 3-1: Manufacturer: syz [ 1065.053363][ T6980] usb 3-1: SerialNumber: syz [ 1065.076071][ T6980] usb 3-1: config 0 descriptor?? [ 1065.114294][ T6980] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1065.126960][ T6311] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1065.138874][ T6980] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1065.161028][T14226] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1065.192566][ T6980] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1065.356974][T14226] usb 5-1: Using ep0 maxpacket: 16 [ 1065.369537][T14226] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1065.381960][T14226] usb 5-1: config 0 has no interface number 0 [ 1065.427311][T14226] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1065.470324][T14226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.508826][T14226] usb 5-1: Product: syz [ 1065.513409][T14226] usb 5-1: Manufacturer: syz [ 1065.518018][T14226] usb 5-1: SerialNumber: syz [ 1065.557026][ T6980] usb 3-1: USB disconnect, device number 25 [ 1065.578333][T14226] usb 5-1: config 0 descriptor?? [ 1065.603196][T14226] hub 5-1:0.132: bad descriptor, ignoring hub [ 1065.661160][T14226] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1065.708692][T14226] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input73 [ 1065.788052][T25806] loop3: detected capacity change from 0 to 256 [ 1065.926017][T25806] FAT-fs (loop3): Directory bread(block 64) failed [ 1065.972992][T25806] FAT-fs (loop3): Directory bread(block 65) failed [ 1065.979644][T25806] FAT-fs (loop3): Directory bread(block 66) failed [ 1066.024432][T25803] loop1: detected capacity change from 0 to 4096 [ 1066.066255][T25806] FAT-fs (loop3): Directory bread(block 67) failed [ 1066.073020][T25803] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1066.107551][T25806] FAT-fs (loop3): Directory bread(block 68) failed [ 1066.149714][T25806] FAT-fs (loop3): Directory bread(block 69) failed [ 1066.167385][T25806] FAT-fs (loop3): Directory bread(block 70) failed [ 1066.187011][T25806] FAT-fs (loop3): Directory bread(block 71) failed [ 1066.226380][T25806] FAT-fs (loop3): Directory bread(block 72) failed [ 1066.252903][T25806] FAT-fs (loop3): Directory bread(block 73) failed [ 1067.440220][T25838] loop4: detected capacity change from 0 to 64 [ 1067.850613][T25801] loop5: detected capacity change from 0 to 32768 [ 1067.936830][T25801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8848 (25801) [ 1067.993671][T25801] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1068.056624][T25801] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1068.197960][T25864] netlink: 'syz.0.8880': attribute type 11 has an invalid length. [ 1068.250408][T25860] loop2: detected capacity change from 0 to 256 [ 1068.257740][T25860] exfat: Deprecated parameter 'utf8' [ 1068.340397][T25860] exfat: Deprecated parameter 'utf8' [ 1068.376444][T25860] exfat: Deprecated parameter 'utf8' [ 1068.392239][T25801] BTRFS info (device loop5): enabling ssd optimizations [ 1068.399227][T25801] BTRFS info (device loop5): enabling free space tree [ 1068.531747][T25860] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1068.731800][ T6311] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1069.238814][T14226] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1069.316634][T25850] loop3: detected capacity change from 0 to 32768 [ 1069.417840][T14226] usb 1-1: Using ep0 maxpacket: 32 [ 1069.432839][T14226] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1069.466791][T14226] usb 1-1: config 0 has no interface number 0 [ 1069.489565][T14226] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1069.517827][T25850] JBD2: Ignoring recovery information on journal [ 1069.602335][T14226] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1069.650493][ T6980] usb 5-1: USB disconnect, device number 113 [ 1069.672830][T14226] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1069.716782][T14226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.757994][T25850] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1069.758661][T14226] usb 1-1: Product: syz [ 1069.812407][T14226] usb 1-1: Manufacturer: syz [ 1069.817033][T14226] usb 1-1: SerialNumber: syz [ 1069.918938][T14226] usb 1-1: config 0 descriptor?? [ 1069.937208][T25891] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1070.168533][T25912] random: crng reseeded on system resumption [ 1070.252173][T14226] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1070.262702][ T6302] ocfs2: Unmounting device (7,3) on (node local) [ 1070.290370][T25894] loop2: detected capacity change from 0 to 32768 [ 1070.308955][T14226] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1070.360918][T25894] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1070.417085][T14226] usb 1-1: USB disconnect, device number 126 [ 1070.502097][T25919] loop1: detected capacity change from 0 to 512 [ 1070.600609][T25919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1070.628279][T25894] XFS (loop2): Ending clean mount [ 1070.694444][T25919] System zones: 1-12 [ 1070.712869][T25919] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.8899: Directory hole found for htree index block 0 [ 1070.741015][T25919] EXT4-fs (loop1): Remounting filesystem read-only [ 1070.783509][T25919] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1070.821839][T25919] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1070.857019][T25919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.904411][T25919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.923680][ T6301] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1071.232643][T25933] loop5: detected capacity change from 0 to 1024 [ 1071.277415][T25933] EXT4-fs: Ignoring removed oldalloc option [ 1071.302942][T25933] EXT4-fs: Ignoring removed bh option [ 1071.419630][T25933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.685025][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.824178][T25951] loop2: detected capacity change from 0 to 2048 [ 1071.893443][T25951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.187180][ T6301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.544774][T25972] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8919'. [ 1072.545473][T25930] loop4: detected capacity change from 0 to 32768 [ 1072.751107][ T30] audit: type=1800 audit(2000525243.320:236): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8903" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1073.375639][T25996] kAFS: unable to lookup cell '.,' [ 1073.734016][T26008] netlink: 'syz.1.8936': attribute type 1 has an invalid length. [ 1073.771236][T26008] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8936'. [ 1074.011996][T26017] netlink: 'syz.3.8941': attribute type 3 has an invalid length. [ 1074.049301][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1074.104318][T26017] netlink: 'syz.3.8941': attribute type 1 has an invalid length. [ 1074.141583][T26017] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1074.469867][T26034] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.8948' sets config #0 [ 1074.743034][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8954'. [ 1075.241704][T26062] loop5: detected capacity change from 0 to 512 [ 1075.290161][T26062] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1075.321312][T26064] loop1: detected capacity change from 0 to 256 [ 1075.332409][T26064] exfat: Deprecated parameter 'namecase' [ 1075.389159][T26064] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1075.406398][T26062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.499672][T26062] ext4 filesystem being mounted at /1471/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1075.670684][T26077] usb usb8: usbfs: process 26077 (syz.4.8970) did not claim interface 0 before use [ 1075.831036][T14226] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1075.861038][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.004185][T26084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8975'. [ 1076.020528][T14226] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1076.036119][T14226] usb 1-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 1076.070245][T14226] usb 1-1: config 0 has no interface number 0 [ 1076.089761][T14226] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1076.121446][T14226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.146723][T14226] usb 1-1: Product: syz [ 1076.150921][T14226] usb 1-1: Manufacturer: syz [ 1076.189684][T14226] usb 1-1: SerialNumber: syz [ 1076.216978][T14226] usb 1-1: config 0 descriptor?? [ 1076.238291][T25394] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1076.242441][T14226] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 1076.438142][T25394] usb 2-1: Using ep0 maxpacket: 32 [ 1076.453439][T25394] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1076.469396][T25394] usb 2-1: config 0 has no interface number 0 [ 1076.482986][ T6376] usb 1-1: USB disconnect, device number 127 [ 1076.489263][T25394] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1076.531767][T25394] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1076.590436][T25394] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1076.599525][T25394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.659708][T25394] usb 2-1: Product: syz [ 1076.668520][T25394] usb 2-1: Manufacturer: syz [ 1076.673139][T25394] usb 2-1: SerialNumber: syz [ 1076.690159][ T30] audit: type=1326 audit(2000525247.014:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.3.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1076.716486][T25394] usb 2-1: config 0 descriptor?? [ 1076.752166][T26086] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1076.787884][ T30] audit: type=1326 audit(2000525247.014:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.3.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1076.870666][ T30] audit: type=1326 audit(2000525247.033:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.3.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1076.974153][ T30] audit: type=1326 audit(2000525247.033:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.3.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1077.036129][ T30] audit: type=1326 audit(2000525247.033:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.3.8984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1077.041355][T25394] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1077.114435][T25394] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 1077.140769][T25394] usb 2-1: USB disconnect, device number 127 [ 1077.267803][T26118] loop2: detected capacity change from 0 to 512 [ 1077.311741][T26118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1077.358850][T26120] openvswitch: netlink: Flow key attribute not present in set flow. [ 1077.384353][T26118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.413469][T26118] ext4 filesystem being mounted at /1425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.739176][ T6301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.160805][T26139] usb usb8: usbfs: process 26139 (syz.0.8999) did not claim interface 0 before use [ 1078.364077][T26148] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9003'. [ 1078.437076][T26144] bond0: entered promiscuous mode [ 1078.494991][T26116] loop4: detected capacity change from 0 to 32768 [ 1078.514327][T26144] bond0: entered allmulticast mode [ 1078.547398][T26144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.602377][T26116] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1078.911310][T26116] XFS (loop4): Ending clean mount [ 1078.961552][T26116] XFS (loop4): Quotacheck needed: Please wait. [ 1079.092062][T26116] XFS (loop4): Quotacheck: Done. [ 1079.448866][T26185] loop1: detected capacity change from 0 to 64 [ 1079.466669][ T6309] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1079.634349][T26190] loop3: detected capacity change from 0 to 512 [ 1079.706353][T26190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.721526][T26191] loop2: detected capacity change from 0 to 1024 [ 1079.809176][T26190] ext4 filesystem being mounted at /1429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.137823][ T6302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.235746][T26152] loop5: detected capacity change from 0 to 32768 [ 1080.350956][T26152] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 1080.503410][T26213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.874628][ T6311] ocfs2: Unmounting device (7,5) on (node local) [ 1081.460475][T26239] loop3: detected capacity change from 0 to 64 [ 1081.565583][T26239] syz.3.9042: attempt to access beyond end of device [ 1081.565583][T26239] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 1081.649886][T26239] Buffer I/O error on dev loop3, logical block 32767, async page read [ 1081.742245][T26246] netlink: 'syz.0.9045': attribute type 1 has an invalid length. [ 1081.776936][T26246] netlink: 'syz.0.9045': attribute type 1 has an invalid length. [ 1082.374538][ T6483] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1082.574073][ T6483] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 1082.584498][ T6483] usb 3-1: config 0 has no interface number 0 [ 1082.628430][ T6483] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1082.678132][ T6483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.716897][ T6483] usb 3-1: Product: syz [ 1082.725235][ T6483] usb 3-1: Manufacturer: syz [ 1082.735656][ T6483] usb 3-1: SerialNumber: syz [ 1082.751851][T26273] loop1: detected capacity change from 0 to 4096 [ 1082.755213][ T6483] usb 3-1: config 0 descriptor?? [ 1082.787523][T26273] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1082.817929][ T6483] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1082.866650][ T6483] pctv452e: pctv452e_power_ctrl: 1 [ 1082.866650][ T6483] [ 1082.889489][ T6483] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1082.889489][ T6483] [ 1082.889718][T26273] ntfs3(loop1): ino=19, mi_enum_attr [ 1082.934350][ T6483] dvb-usb: bulk message failed: -22 (5/0) [ 1082.969976][T26273] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1083.018708][T26273] ntfs3(loop1): ino=19, mi_enum_attr [ 1083.019275][ T6483] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1083.057534][T26273] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1083.099830][ T6483] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1083.176893][ T6483] usb 3-1: USB disconnect, device number 26 [ 1083.761885][T26302] netlink: 'syz.5.9073': attribute type 8 has an invalid length. [ 1083.815604][T26303] IPv6: Can't replace route, no match found [ 1083.923966][T26307] netlink: 'syz.1.9076': attribute type 7 has an invalid length. [ 1083.955682][T26307] netlink: 'syz.1.9076': attribute type 8 has an invalid length. [ 1084.250179][T26319] loop2: detected capacity change from 0 to 64 [ 1084.410279][T26287] loop4: detected capacity change from 0 to 32768 [ 1084.446412][T26287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9066 (26287) [ 1084.576714][T26287] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1084.602651][T26328] veth1_vlan: entered allmulticast mode [ 1084.641290][T26287] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 1084.894906][T26287] BTRFS info (device loop4): enabling ssd optimizations [ 1084.934826][T26287] BTRFS info (device loop4): enabling free space tree [ 1085.060255][T26354] loop1: detected capacity change from 0 to 256 [ 1085.480504][ T6309] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1086.193053][T26383] vxcan3: entered promiscuous mode [ 1086.198219][T26383] vxcan3: entered allmulticast mode [ 1086.341297][T26389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1086.620038][T26391] loop2: detected capacity change from 0 to 4096 [ 1086.661008][T26391] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1086.930739][T26391] ntfs3(loop2): ino=19, mi_enum_attr [ 1086.936082][T26391] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1087.026323][T26391] ntfs3(loop2): ino=19, mi_enum_attr [ 1087.046876][T26391] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1087.909774][T26440] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1087.951421][T14226] kernel write not supported for file /3069/clear_refs (pid: 14226 comm: kworker/1:1) [ 1088.225764][T26449] batman_adv: batadv0: Interface deactivated: vlan1 [ 1088.621238][T26464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1088.724414][T26449] batman_adv: batadv0: Removing interface: vlan1 [ 1089.405252][T26489] delete_channel: no stack [ 1089.421770][T26488] netlink: 'syz.0.9155': attribute type 10 has an invalid length. [ 1089.472192][T26488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9155'. [ 1089.632337][T26497] loop2: detected capacity change from 0 to 256 [ 1089.661790][T26497] exfat: Deprecated parameter 'utf8' [ 1089.685360][T26497] exfat: Deprecated parameter 'namecase' [ 1089.767432][T26500] loop3: detected capacity change from 0 to 256 [ 1089.798909][T26497] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1089.825840][T26502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9161'. [ 1090.134104][ T6980] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1090.212976][T26512] netlink: 755 bytes leftover after parsing attributes in process `syz.5.9166'. [ 1090.340170][ T6980] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1090.348299][ T6980] usb 4-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config [ 1090.380726][T26519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9169'. [ 1090.385596][ T6980] usb 4-1: config 0 has no interface number 0 [ 1090.468791][ T6980] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1090.482589][ T6980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.536053][ T6980] usb 4-1: Product: syz [ 1090.540255][ T6980] usb 4-1: Manufacturer: syz [ 1090.583417][ T6980] usb 4-1: SerialNumber: syz [ 1090.615095][ T6980] usb 4-1: config 0 descriptor?? [ 1090.649520][ T6980] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 1090.889864][T26528] loop4: detected capacity change from 0 to 4096 [ 1090.932598][ T6483] usb 4-1: USB disconnect, device number 14 [ 1090.955585][T26528] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 1091.016343][T26538] netlink: 'syz.0.9179': attribute type 12 has an invalid length. [ 1091.133317][T26528] ntfs3(loop4): ino=19, mi_enum_attr [ 1091.164184][T26528] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1091.206995][T26528] ntfs3(loop4): ino=19, mi_enum_attr [ 1091.216914][T26528] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 1091.376521][ T30] audit: type=1326 audit(2000525260.744:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1091.473552][ T30] audit: type=1326 audit(2000525260.744:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1091.575788][ T30] audit: type=1326 audit(2000525260.781:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1091.698020][ T30] audit: type=1326 audit(2000525260.791:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26545 comm="syz.0.9184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1091.773903][T26558] netlink: 'syz.2.9189': attribute type 33 has an invalid length. [ 1091.847883][T26558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9189'. [ 1092.780155][T26592] tmpfs: User quota block hardlimit too large. [ 1092.896136][T26600] loop2: detected capacity change from 0 to 256 [ 1092.948666][T26600] exfat: Deprecated parameter 'utf8' [ 1092.972012][T26600] exfat: Deprecated parameter 'namecase' [ 1092.978237][T26600] exfat: Deprecated parameter 'namecase' [ 1093.013048][T26600] exfat: Deprecated parameter 'utf8' [ 1093.090421][T26606] loop4: detected capacity change from 0 to 22 [ 1093.112972][T26600] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 1093.127169][T26606] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1093.158350][T26606] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1093.214858][T26612] loop5: detected capacity change from 0 to 256 [ 1093.803595][T26627] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1094.050990][T26636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9227'. [ 1094.285731][T26642] loop3: detected capacity change from 0 to 512 [ 1094.324876][T26642] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1094.375540][T26642] EXT4-fs error (device loop3): ext4_quota_enable:7128: inode #15: comm syz.3.9230: iget: bad i_size value: 360287970189639690 [ 1094.448100][T26642] EXT4-fs error (device loop3): ext4_quota_enable:7130: comm syz.3.9230: Bad quota inode: 15, type: 2 [ 1094.462143][T26642] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 1094.505614][T26642] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1094.534215][T26642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1094.643590][T26655] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1094.674488][T26655] FAT-fs (loop1): unable to read boot sector [ 1094.733510][ T6302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.898477][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9240'. [ 1094.943411][T26663] random: crng reseeded on system resumption [ 1094.984342][T26641] xfrm0: entered promiscuous mode [ 1094.989527][T26641] xfrm0: entered allmulticast mode [ 1095.011054][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.019691][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.033089][T26663] Restarting kernel threads ... [ 1095.039693][T26663] Done restarting kernel threads. [ 1095.055344][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.078009][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.086486][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.129154][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.205253][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.247746][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.255569][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.316808][T26648] netlink: 'syz.5.9233': attribute type 3 has an invalid length. [ 1095.862850][T26691] loop4: detected capacity change from 0 to 16 [ 1095.911982][T26691] erofs: Unknown parameter 'ÿÿÿÿ0xffffffffffffffffÿÿ18446744073709551615' [ 1095.962038][T26691] cgroup: Invalid name [ 1096.247566][T26705] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9262'. [ 1096.498885][T25394] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1096.659762][T26717] loop1: detected capacity change from 0 to 4096 [ 1096.691339][T25394] usb 4-1: Using ep0 maxpacket: 8 [ 1096.702497][T25394] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1096.710724][T25394] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1096.816739][T25394] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1096.883733][T25394] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1096.893691][T25394] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.958840][T25394] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1096.967909][T25394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.009434][ T30] audit: type=1800 audit(2000525266.009:246): pid=26717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9267" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 1097.556503][T25394] usb 4-1: USB disconnect, device number 15 [ 1098.006665][ T6483] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1098.053404][ T30] audit: type=1400 audit(2000525266.982:247): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=26756 comm="syz.0.9288" [ 1098.209808][ T6483] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1098.218101][ T6483] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.267056][ T6483] usb 5-1: config 220 has no interface number 2 [ 1098.306853][ T6483] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1098.338896][ T6483] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1098.361475][ T6483] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1098.379882][ T6483] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1098.419377][ T6483] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1098.461472][ T6483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.480544][T26770] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9293'. [ 1098.488548][ T6483] usb 5-1: Product: syz [ 1098.498658][ T6483] usb 5-1: Manufacturer: syz [ 1098.540869][ T6483] usb 5-1: SerialNumber: syz [ 1098.574666][T26772] loop5: detected capacity change from 0 to 1024 [ 1098.697291][T26772] hfsplus: invalid extended attribute record [ 1098.797992][ T6483] usb 5-1: selecting invalid altsetting 0 [ 1098.841582][ T6483] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1098.847959][ T6483] usb 5-1: No valid video chain found. [ 1098.929349][ T6483] usb 5-1: selecting invalid altsetting 0 [ 1098.935116][ T6483] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1098.952989][T18138] hfsplus: b-tree write err: -5, ino 4 [ 1099.025500][ T6483] usb 5-1: USB disconnect, device number 114 [ 1099.863502][T26803] loop1: detected capacity change from 0 to 1024 [ 1099.921968][T26803] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1100.046284][T26803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.175178][T26803] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.9310: missing EA_INODE flag [ 1100.290406][T26803] EXT4-fs (loop1): Remounting filesystem read-only [ 1100.510040][ T6297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.622831][T26826] comedi comedi3: dt2817: I/O port conflict (0x3,5) [ 1101.023079][T26838] validate_nla: 36 callbacks suppressed [ 1101.023105][T26838] netlink: 'syz.5.9323': attribute type 5 has an invalid length. [ 1101.066212][T26840] loop1: detected capacity change from 0 to 16 [ 1101.125162][T26840] erofs (device loop1): mounted with root inode @ nid 36. [ 1101.255991][T26847] netlink: 'syz.4.9328': attribute type 33 has an invalid length. [ 1101.285754][T26847] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9328'. [ 1101.477089][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1101.515780][T26855] netlink: 'syz.3.9330': attribute type 1 has an invalid length. [ 1101.523550][T26855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9330'. [ 1103.786778][T26930] netlink: 'syz.4.9363': attribute type 1 has an invalid length. [ 1103.818222][T26930] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9363'. [ 1104.594645][T26928] orangefs_mount: mount request failed with -4 [ 1105.249209][T26969] netlink: 'syz.5.9378': attribute type 1 has an invalid length. [ 1105.363419][T26971] loop3: detected capacity change from 0 to 64 [ 1105.989511][ T30] audit: type=1326 audit(2000525274.408:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1106.101433][ T30] audit: type=1326 audit(2000525274.408:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1106.123801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.189757][ T30] audit: type=1326 audit(2000525274.408:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1106.212548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.352005][ T30] audit: type=1326 audit(2000525274.408:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1106.374358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.485268][T26997] loop4: detected capacity change from 0 to 512 [ 1106.492987][T26997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1106.499377][ T30] audit: type=1326 audit(2000525274.408:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26982 comm="syz.0.9384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1106.611409][T26997] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1106.619378][T26997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1106.634916][T26997] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 1106.644388][T26997] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1106.656066][ T6980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1106.658895][T26997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1106.693315][T26997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1106.745877][T26997] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 1106.869984][ T6980] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1106.886156][ T6980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1106.912885][ T6980] usb 1-1: SerialNumber: syz [ 1106.951529][ T6980] usb 1-1: config 0 descriptor?? [ 1107.047231][ T6309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.144509][T27014] loop1: detected capacity change from 0 to 2048 [ 1107.228226][T27014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.392259][T27023] affs: No valid root block on device nbd4 [ 1107.414068][ T6980] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 1107.446030][ T6980] hackrf 1-1:0.0: Could not detect board [ 1107.468702][ T6980] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 1107.512396][ T6980] usb 1-1: USB disconnect, device number 2 [ 1107.541661][ T6297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.568081][T27028] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1108.803663][T27059] loop5: detected capacity change from 0 to 4096 [ 1108.839713][T27059] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1109.309403][ T6421] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1109.477811][T27087] netlink: 'syz.4.9434': attribute type 2 has an invalid length. [ 1109.500604][T27087] netlink: 'syz.4.9434': attribute type 8 has an invalid length. [ 1109.530580][T27087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9434'. [ 1109.539985][ T6421] usb 6-1: Using ep0 maxpacket: 8 [ 1109.567076][ T6421] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1109.590295][ T6421] usb 6-1: config 0 has no interface number 0 [ 1109.619532][ T6421] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1109.653742][ T6421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.690404][ T6421] usb 6-1: Product: syz [ 1109.708238][ T6421] usb 6-1: Manufacturer: syz [ 1109.723315][ T6421] usb 6-1: SerialNumber: syz [ 1109.764389][ T6421] usb 6-1: config 0 descriptor?? [ 1110.027817][ T6421] ath6kl: Failed to submit usb control message: -71 [ 1110.034504][ T6421] ath6kl: unable to send the bmi data to the device: -71 [ 1110.091772][ T6421] ath6kl: Unable to send get target info: -71 [ 1110.143004][ T6421] ath6kl: Failed to init ath6kl core: -71 [ 1110.185780][ T6421] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1110.229992][ T6421] usb 6-1: USB disconnect, device number 4 [ 1110.371450][T27111] dlm: plock device version mismatch: kernel (1.2.0), user (1.45.0) [ 1110.457563][T27113] loop2: detected capacity change from 0 to 1024 [ 1110.578207][T27113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.598655][T27121] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1110.715678][T27122] ip6erspan0: entered promiscuous mode [ 1110.785018][ T6301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.221326][T27139] loop0: detected capacity change from 0 to 256 [ 1111.523243][T27148] trusted_key: encrypted_key: keyword 'up‰~te' not recognized [ 1111.651911][ T30] audit: type=1326 audit(2000525279.711:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27149 comm="syz.5.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266a98eec9 code=0x7ffc0000 [ 1111.766557][ T30] audit: type=1326 audit(2000525279.739:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27149 comm="syz.5.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266a98eec9 code=0x7ffc0000 [ 1111.888715][ T30] audit: type=1326 audit(2000525279.749:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27149 comm="syz.5.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f266a98eec9 code=0x7ffc0000 [ 1111.991961][ T30] audit: type=1326 audit(2000525279.749:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27149 comm="syz.5.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266a98eec9 code=0x7ffc0000 [ 1112.109055][ T30] audit: type=1326 audit(2000525279.749:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27149 comm="syz.5.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266a98eec9 code=0x7ffc0000 [ 1112.131460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1112.261018][T27154] loop1: detected capacity change from 0 to 8192 [ 1112.326589][T27154] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1112.919531][T27138] loop4: detected capacity change from 0 to 32768 [ 1112.959048][T27144] loop2: detected capacity change from 0 to 32768 [ 1113.091766][T27144] read_mapping_page failed! [ 1113.104437][T27144] ERROR: (device loop2): txAbort: [ 1113.104437][T27144] [ 1113.114177][T27179] netlink: 'syz.5.9476': attribute type 1 has an invalid length. [ 1113.121916][T27179] netlink: 232 bytes leftover after parsing attributes in process `syz.5.9476'. [ 1113.231072][T27183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1114.958891][T27230] loop5: detected capacity change from 0 to 64 [ 1115.521826][T27235] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1115.666546][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1116.396723][T27271] trusted_key: encrypted_key: master key parameter is missing [ 1116.415611][T27268] ALSA: mixer_oss: invalid OSS volume '' [ 1116.467500][T27268] ALSA: mixer_oss: invalid OSS volume 'ÊÒ±BËÂì;T`¿@$™¿¾E÷ócXÆMYdŸè,' [ 1116.546215][T27268] ALSA: mixer_oss: invalid OSS volume 'b«Ž@hé#' [ 1116.576159][T27268] ALSA: mixer_oss: invalid OSS volume '•‘h4¿–ÐX¬„S4v=0_>¤&äÏ' [ 1116.630622][T27268] ALSA: mixer_oss: invalid OSS volume '|œ/"tj' [ 1116.653099][T27268] ALSA: mixer_oss: invalid OSS volume '-z5²Šc^÷Jƒå6$̹' [ 1116.696680][T27268] ALSA: mixer_oss: invalid OSS volume '0ÉóT„®°yòÝäî¬ó‰´ª‡—‚j–P&†³aït' [ 1116.705032][T27268] ALSA: mixer_oss: invalid OSS volume '÷|á¥ó~‚\' [ 1116.755388][T27268] ALSA: mixer_oss: invalid OSS volume '­É@ô^3bÉœ‘}˜ÔG$º#\Ä("/øoúLÛ' [ 1116.815438][T27268] ALSA: mixer_oss: invalid OSS volume 'I ‹È:•þàâ' [ 1116.821986][T27268] ALSA: mixer_oss: invalid OSS volume '%^Óvƒªhc¾GJPÿÃÐöø¬rª('â¯Q=' [ 1116.828348][T27279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.859506][T27279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.866742][T27279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.873648][T27268] ALSA: mixer_oss: invalid OSS volume ' ‰Gjä;4÷ÊÃŒðÙÆzÜ3¸W´Ò¼0ÙF=%¾' [ 1116.911749][T27286] loop5: detected capacity change from 0 to 164 [ 1116.922071][T27268] ALSA: mixer_oss: invalid OSS volume ';4— å‚«4òfhÊ߇G¥ŽIב°Q÷5o“J' [ 1116.930496][T27268] ALSA: mixer_oss: invalid OSS volume 'WöŒ’ló]Y1Õ-¬ž¾ÙJ<´¶³ªAÆ>ƒïo' [ 1116.958823][T27286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1117.062784][T27288] loop3: detected capacity change from 0 to 64 [ 1117.082304][T27286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1117.101202][T27286] Symlink component flag not implemented [ 1117.111598][T27286] Symlink component flag not implemented [ 1117.131746][T27286] Symlink component flag not implemented (7) [ 1117.177070][T27286] Symlink component flag not implemented (116) [ 1117.329350][ T6421] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1117.561962][ T6421] usb 5-1: Using ep0 maxpacket: 8 [ 1117.582411][ T6421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1117.626679][ T6421] usb 5-1: config 8 has an invalid interface number: 61 but max is 2 [ 1117.634971][ T6421] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 1117.651207][T27304] kAFS: unable to lookup cell '' [ 1117.683737][ T6421] usb 5-1: config 8 has no interface number 0 [ 1117.689934][ T6421] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1117.707503][ T6421] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1117.718728][ T6421] usb 5-1: config 8 interface 61 has no altsetting 0 [ 1117.820432][ T6421] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 1117.829740][ T6421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.850594][ T6421] usb 5-1: Product: syz [ 1117.864219][ T6421] usb 5-1: Manufacturer: syz [ 1117.882675][ T6421] usb 5-1: SerialNumber: syz [ 1118.173941][ T6421] bfusb 5-1:8.61: probe with driver bfusb failed with error -5 [ 1118.346570][ T6421] usb 5-1: USB disconnect, device number 115 [ 1118.431584][T27325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9547'. [ 1118.969226][T27340] bridge2: entered promiscuous mode [ 1119.497133][T27361] CIFS mount error: No usable UNC path provided in device string! [ 1119.497133][T27361] [ 1119.566385][T27361] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1119.698863][T27371] libceph: resolve '4' (ret=-3): failed [ 1120.027700][T27381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9567'. [ 1120.248023][ T30] audit: type=1326 audit(2000525287.736:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.346423][T27388] loop0: detected capacity change from 0 to 1024 [ 1120.364576][ T30] audit: type=1326 audit(2000525287.736:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.423222][T27393] netlink: 'syz.5.9576': attribute type 1 has an invalid length. [ 1120.449419][T27388] EXT4-fs: inline encryption not supported [ 1120.455278][T27388] EXT4-fs: Ignoring removed i_version option [ 1120.491568][ T30] audit: type=1326 audit(2000525287.736:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.547639][T27388] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1120.621449][ T30] audit: type=1326 audit(2000525287.792:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.776174][ T30] audit: type=1326 audit(2000525287.792:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.809983][T27388] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.9573: lblock 2 mapped to illegal pblock 2 (length 1) [ 1120.870738][T27388] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1120.883506][ T30] audit: type=1326 audit(2000525287.792:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.902226][T27388] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.9573: lblock 0 mapped to illegal pblock 48 (length 1) [ 1120.939320][ T30] audit: type=1326 audit(2000525287.792:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1120.990410][ T30] audit: type=1326 audit(2000525287.792:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27383 comm="syz.4.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36e18eec9 code=0x7ffc0000 [ 1121.036645][T27388] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1121.091898][T27388] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9573: Failed to acquire dquot type 0 [ 1121.207281][T27388] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1121.274479][T27388] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.9573: mark_inode_dirty error [ 1121.351411][T27388] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 1121.379901][T27388] EXT4-fs (loop0): 1 orphan inode deleted [ 1121.400989][T18138] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1121.428820][T27388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.468383][T18138] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0 [ 1121.530548][T27388] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm syz.0.9573: lblock 1 mapped to illegal pblock 1 (length 1) [ 1121.738978][T27426] netlink: 200 bytes leftover after parsing attributes in process `syz.5.9589'. [ 1121.772950][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.853222][ T6298] EXT4-fs error (device loop0): __ext4_get_inode_loc:4860: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1121.903340][ T6298] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1121.940447][ T6298] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1122.056982][T27386] loop1: detected capacity change from 0 to 32768 [ 1122.155159][T27386] ialloc: diAlloc returned -17! [ 1123.000984][T27457] netlink: 'syz.1.9602': attribute type 1 has an invalid length. [ 1123.430348][T27428] loop3: detected capacity change from 0 to 32768 [ 1123.493700][T27428] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9591 (27428) [ 1123.591145][T27428] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1123.647000][T27428] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1123.981703][T27428] BTRFS info (device loop3): enabling ssd optimizations [ 1124.038017][T27428] BTRFS info (device loop3): enabling free space tree [ 1124.434942][T27518] netlink: 'syz.5.9625': attribute type 21 has an invalid length. [ 1124.467644][ T6302] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1124.662741][T27524] loop0: detected capacity change from 0 to 16 [ 1124.768576][T27524] erofs (device loop0): mounted with root inode @ nid 36. [ 1124.784391][T27526] netlink: 288 bytes leftover after parsing attributes in process `syz.2.9630'. [ 1124.824170][T27524] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 1124.831492][T27524] erofs (device loop0): readahead error at folio 1 @ nid 89 [ 1124.902366][T27524] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 1124.923617][T27524] erofs (device loop0): read error -117 @ 0 of nid 89 [ 1125.249870][T27534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.250934][T27538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1125.293418][T27537] loop5: detected capacity change from 0 to 1024 [ 1125.309928][T27537] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1125.801704][T27548] loop1: detected capacity change from 0 to 256 [ 1125.823905][T27552] loop3: detected capacity change from 0 to 256 [ 1125.826185][T27550] loop5: detected capacity change from 0 to 16 [ 1125.861023][T27507] loop4: detected capacity change from 0 to 32768 [ 1125.862193][T27548] exfat: Deprecated parameter 'namecase' [ 1125.922975][T27550] erofs (device loop5): mounted with root inode @ nid 36. [ 1125.965167][T27507] JBD2: Ignoring recovery information on journal [ 1126.032465][T27548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1126.094960][T27550] erofs (device loop5): failed to read inode meta block (nid: 18446744071562067967): -117 [ 1126.266601][T27507] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1126.282681][T27555] vlan0: left promiscuous mode [ 1126.360298][T27507] OCFS2: ERROR (device loop4): ocfs2_xattr_find_entry: corrupted xattr entries [ 1126.360373][T27507] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1126.407369][T27555] netdevsim netdevsim2 : left promiscuous mode [ 1126.410689][T27507] OCFS2: File system is now read-only. [ 1126.486109][T27507] (syz.4.9622,27507,1):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1126.494282][T27555] geneve2: left promiscuous mode [ 1126.536482][T27555] bond0: left promiscuous mode [ 1126.539161][T27507] (syz.4.9622,27507,1):ocfs2_mknod:337 ERROR: status = -117 [ 1126.605558][T27564] loop5: detected capacity change from 0 to 256 [ 1126.661188][T27507] (syz.4.9622,27507,0):ocfs2_mknod:505 ERROR: status = -117 [ 1126.681142][T27507] (syz.4.9622,27507,0):ocfs2_create:678 ERROR: status = -117 [ 1126.761495][T27564] FAT-fs (loop5): Directory bread(block 64) failed [ 1126.802861][T27564] FAT-fs (loop5): Directory bread(block 65) failed [ 1126.809476][T27564] FAT-fs (loop5): Directory bread(block 66) failed [ 1126.857751][T27564] FAT-fs (loop5): Directory bread(block 67) failed [ 1126.915206][T27564] FAT-fs (loop5): Directory bread(block 68) failed [ 1126.924861][T27570] loop0: detected capacity change from 0 to 1024 [ 1126.939206][T27564] FAT-fs (loop5): Directory bread(block 69) failed [ 1126.945825][T27564] FAT-fs (loop5): Directory bread(block 70) failed [ 1127.004002][ T6309] ocfs2: Unmounting device (7,4) on (node local) [ 1127.010666][T27564] FAT-fs (loop5): Directory bread(block 71) failed [ 1127.054435][T27564] FAT-fs (loop5): Directory bread(block 72) failed [ 1127.078744][T27564] FAT-fs (loop5): Directory bread(block 73) failed [ 1127.881168][T27589] loop0: detected capacity change from 0 to 2048 [ 1127.932224][T27589] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1127.998940][T27593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1128.040215][T25394] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1128.247247][T25394] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1128.264745][T25394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.309786][T25394] usb 5-1: config 0 descriptor?? [ 1128.538152][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1128.546131][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1128.553516][T25394] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1128.561227][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1128.575790][T25394] [drm:udl_init] *ERROR* Selecting channel failed [ 1128.683466][T25394] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1128.690181][T25394] [drm] Initialized udl on minor 2 [ 1128.724600][T27574] loop1: detected capacity change from 0 to 32768 [ 1128.740870][T27611] loop3: detected capacity change from 0 to 256 [ 1128.757546][T25394] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1128.788725][T27574] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9651 (27574) [ 1128.817579][T25394] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1128.851218][T27611] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1128.880413][ T6421] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1128.900501][T25394] usb 5-1: USB disconnect, device number 116 [ 1128.902161][T27611] FAT-fs (loop3): Filesystem has been set read-only [ 1128.914634][T27574] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1128.936063][ T6421] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1128.980595][T27574] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1129.070327][T27614] netlink: 'syz.0.9670': attribute type 5 has an invalid length. [ 1129.158049][T27614] ip6erspan0: entered promiscuous mode [ 1129.234194][T27574] BTRFS info (device loop1): enabling ssd optimizations [ 1129.280448][T27574] BTRFS info (device loop1): enabling free space tree [ 1129.621445][ T6297] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1129.719792][ T5848] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1129.912004][ T5848] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1129.920231][ T5848] usb 4-1: config 0 has no interface number 0 [ 1129.940570][T27651] loop4: detected capacity change from 0 to 128 [ 1129.974430][ T5848] usb 4-1: too many endpoints for config 0 interface 119 altsetting 226: 105, using maximum allowed: 30 [ 1129.984173][T27651] FAT-fs (loop4): Directory bread(block 11554) failed [ 1129.997898][T27654] syz.0.9682 (27654): /proc/27653/oom_adj is deprecated, please use /proc/27653/oom_score_adj instead. [ 1130.025580][T27651] FAT-fs (loop4): Directory bread(block 11555) failed [ 1130.039200][ T5848] usb 4-1: config 0 interface 119 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1130.053761][T27651] FAT-fs (loop4): Directory bread(block 11556) failed [ 1130.053808][T27651] FAT-fs (loop4): Directory bread(block 11557) failed [ 1130.053849][T27651] FAT-fs (loop4): Directory bread(block 11558) failed [ 1130.053891][T27651] FAT-fs (loop4): Directory bread(block 11559) failed [ 1130.053933][T27651] FAT-fs (loop4): Directory bread(block 11560) failed [ 1130.053974][T27651] FAT-fs (loop4): Directory bread(block 11561) failed [ 1130.106068][ T5848] usb 4-1: config 0 interface 119 has no altsetting 0 [ 1130.151677][ T5848] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1130.161962][T27651] FAT-fs (loop4): Directory bread(block 11562) failed [ 1130.177942][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.202583][ T5848] usb 4-1: Product: syz [ 1130.206769][ T5848] usb 4-1: Manufacturer: syz [ 1130.245202][ T5848] usb 4-1: SerialNumber: syz [ 1130.247293][T27651] FAT-fs (loop4): Directory bread(block 11563) failed [ 1130.264431][T25394] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1130.283748][ T5848] usb 4-1: config 0 descriptor?? [ 1130.337485][T27657] loop5: detected capacity change from 0 to 4096 [ 1130.448755][T25394] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1130.480781][T25394] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1130.510019][T25394] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.533032][ T5848] usb 4-1: USB disconnect, device number 16 [ 1130.542480][T25394] usb 2-1: config 220 has no interface number 2 [ 1130.549216][T25394] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1130.647524][T25394] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1130.699154][T25394] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1130.756250][T25394] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1130.791093][T25394] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1130.822584][T25394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.851225][T25394] usb 2-1: Product: syz [ 1130.866550][T25394] usb 2-1: Manufacturer: syz [ 1130.871164][T25394] usb 2-1: SerialNumber: syz [ 1130.948410][ T6421] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1131.094084][T27669] cgroup: release_agent respecified [ 1131.132500][ T6421] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1131.168780][T25394] usb 2-1: selecting invalid altsetting 0 [ 1131.178604][ T6421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1131.211790][T25394] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1131.246012][T25394] usb 2-1: No valid video chain found. [ 1131.254445][ T6421] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1131.274447][ T6421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.306010][ T6421] usb 3-1: Product: syz [ 1131.315019][T25394] usb 2-1: selecting invalid altsetting 0 [ 1131.339283][ T6421] usb 3-1: Manufacturer: syz [ 1131.356139][T25394] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1131.364685][ T6421] usb 3-1: SerialNumber: syz [ 1131.396295][ T6421] usb 3-1: config 0 descriptor?? [ 1131.408734][T25394] usb 2-1: USB disconnect, device number 2 [ 1131.658921][ T6421] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 1131.734410][ C0] powermate: config urb returned -71 [ 1131.740105][ C0] powermate: config urb returned -71 [ 1131.746108][ C0] powermate: config urb returned -71 [ 1131.751858][ C0] powermate: config urb returned -71 [ 1131.779808][ T6421] usb 3-1: USB disconnect, device number 27 [ 1131.785784][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1131.802250][T27681] loop5: detected capacity change from 0 to 512 [ 1131.836890][T27681] EXT4-fs: Ignoring removed mblk_io_submit option [ 1131.954212][T27681] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1132.013840][T27681] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1132.060428][T27681] __quota_error: 10 callbacks suppressed [ 1132.060463][T27681] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1132.157705][T27665] loop4: detected capacity change from 0 to 32768 [ 1132.160161][T27681] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1132.224270][T27681] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1132.252148][T27681] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.9695: bg 0: block 40: padding at end of block bitmap is not set [ 1132.304618][T27665] find_entry called with index >= next_index [ 1132.351022][T27665] find_entry called with index >= next_index [ 1132.369356][T27665] find_entry called with index >= next_index [ 1132.375749][T27681] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 1132.417264][T27681] EXT4-fs (loop5): 1 truncate cleaned up [ 1132.441984][T27693] loop1: detected capacity change from 0 to 1024 [ 1132.494831][T27681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1132.605672][T27697] wireguard1: entered promiscuous mode [ 1132.611351][T27697] wireguard1: entered allmulticast mode [ 1132.671176][T27681] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.9695: bad symlink. [ 1132.748740][ T13] hfsplus: b-tree write err: -5, ino 4 [ 1132.896939][ T6311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.039412][T27710] loop1: detected capacity change from 0 to 512 [ 1133.201301][T27710] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1133.238885][T27714] loop5: detected capacity change from 0 to 1764 [ 1133.315425][T27710] EXT4-fs error (device loop1): ext4_quota_enable:7128: inode #15: comm syz.1.9706: iget: bad i_size value: 360287970189639690 [ 1133.407058][T27710] EXT4-fs error (device loop1): ext4_quota_enable:7130: comm syz.1.9706: Bad quota inode: 15, type: 2 [ 1133.416364][T27714] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1133.484095][T27726] loop2: detected capacity change from 0 to 8 [ 1133.503263][T27710] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 1133.616163][T27710] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1133.660749][T27710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1133.860050][T27710] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1133.902617][T27710] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 2 [ 1134.069045][ T6297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.117955][ T6421] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1134.329966][ T6421] usb 6-1: Using ep0 maxpacket: 8 [ 1134.404219][ T6421] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1134.424865][ T6421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.454454][ T6421] usb 6-1: Product: syz [ 1134.476096][ T6421] usb 6-1: Manufacturer: syz [ 1134.492615][ T6421] usb 6-1: SerialNumber: syz [ 1134.509176][ T6421] usb 6-1: config 0 descriptor?? [ 1134.555124][ T6421] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1134.982224][ T6421] gspca_sn9c2028: read1 error -71 [ 1135.011446][ T6421] gspca_sn9c2028: read1 error -71 [ 1135.035467][ T6421] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1135.069156][T27758] netlink: 'syz.3.9730': attribute type 10 has an invalid length. [ 1135.093347][T27758] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9730'. [ 1135.124903][T27758] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1135.176783][ T6421] usb 6-1: USB disconnect, device number 5 [ 1135.219235][T27765] loop1: detected capacity change from 0 to 256 [ 1135.245788][T27764] loop4: detected capacity change from 0 to 1024 [ 1135.300478][T27764] EXT4-fs: inline encryption not supported [ 1135.334433][T27764] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1135.420824][T27764] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.9732: lblock 2 mapped to illegal pblock 2 (length 1) [ 1135.466741][T27764] EXT4-fs (loop4): Remounting filesystem read-only [ 1135.473802][T27764] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1135.484365][T27764] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1135.493320][T27764] EXT4-fs (loop4): 1 orphan inode deleted [ 1135.544456][T27764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.620079][T27764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.922192][T27783] loop5: detected capacity change from 0 to 256 [ 1136.028525][T27783] exfat: Deprecated parameter 'namecase' [ 1136.209180][T27783] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1136.245548][T27793] netlink: 'syz.3.9746': attribute type 1 has an invalid length. [ 1137.163105][T27819] netlink: 'syz.4.9759': attribute type 2 has an invalid length. [ 1137.224724][T27819] netlink: 'syz.4.9759': attribute type 3 has an invalid length. [ 1137.232672][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9760'. [ 1137.639734][T27795] loop0: detected capacity change from 0 to 32768 [ 1137.673948][T27795] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9747 (27795) [ 1137.767697][T27795] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1137.802469][T27795] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1138.042128][T27795] BTRFS info (device loop0): enabling ssd optimizations [ 1138.075677][T27795] BTRFS info (device loop0): enabling free space tree [ 1138.230261][T27795] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same [ 1138.395395][T27869] loop2: detected capacity change from 0 to 64 [ 1138.414993][ T6298] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1138.445623][T27862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1138.741714][T27817] loop1: detected capacity change from 0 to 32768 [ 1138.751498][T27871] loop3: detected capacity change from 0 to 64 [ 1138.796742][T27817] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9757 (27817) [ 1138.948599][T27817] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1139.020877][T27817] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1139.034504][T27874] loop4: detected capacity change from 0 to 1764 [ 1139.486850][T27817] BTRFS info (device loop1): enabling ssd optimizations [ 1139.523522][T27817] BTRFS info (device loop1): enabling free space tree [ 1139.839315][ T6297] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1139.927557][T27868] loop5: detected capacity change from 0 to 40427 [ 1139.950195][T27868] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1140.004465][T27868] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1140.106269][T27868] F2FS-fs (loop5): invalid crc value [ 1140.661900][T27868] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1140.770786][T27868] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1140.802410][T27868] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1141.046149][T27868] syz.5.9774: attempt to access beyond end of device [ 1141.046149][T27868] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1141.057578][T27941] loop3: detected capacity change from 0 to 512 [ 1141.060654][T27940] loop0: detected capacity change from 0 to 64 [ 1141.231598][T27941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1141.351834][T27941] ext4 filesystem being mounted at /1562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.606802][T27960] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1141.637788][T27960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9809'. [ 1141.775327][ T6302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.821188][T27964] loop0: detected capacity change from 0 to 128 [ 1141.830186][T27964] EXT4-fs warning (device loop0): ext4_init_metadata_csum:4626: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1141.890775][T27964] EXT4-fs (loop0): Encoding requested by superblock is unknown [ 1141.950859][T27964] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1142.334968][T27974] netlink: 45 bytes leftover after parsing attributes in process `syz.3.9816'. [ 1142.371192][T27979] openvswitch: netlink: IP tunnel dst address not specified [ 1143.109353][T28002] usb usb8: check_ctrlrecip: process 28002 (syz.0.9826) requesting ep 01 but needs 81 [ 1143.159012][T28002] usb usb8: usbfs: process 28002 (syz.0.9826) did not claim interface 0 before use [ 1143.362720][T28013] loop1: detected capacity change from 0 to 256 [ 1143.455409][T28013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 1143.576331][ T6483] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1143.694571][T25394] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1143.766381][ T6483] usb 6-1: Using ep0 maxpacket: 32 [ 1143.788592][ T6483] usb 6-1: config 36 has an invalid interface number: 113 but max is 1 [ 1143.808354][ T6483] usb 6-1: config 36 has an invalid interface number: 113 but max is 1 [ 1143.863376][T28022] loop3: detected capacity change from 0 to 4096 [ 1143.876187][ T6483] usb 6-1: config 36 has 1 interface, different from the descriptor's value: 2 [ 1143.901851][ T6483] usb 6-1: config 36 has no interface number 0 [ 1143.939986][T25394] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 1143.949043][T25394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.957274][T28022] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1143.966642][ T6483] usb 6-1: config 36 interface 113 altsetting 6 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1144.003622][ T6483] usb 6-1: config 36 interface 113 has no altsetting 1 [ 1144.010623][T25394] usb 1-1: Product: syz [ 1144.018671][T25394] usb 1-1: Manufacturer: syz [ 1144.026695][T25394] usb 1-1: SerialNumber: syz [ 1144.040332][ T6483] usb 6-1: New USB device found, idVendor=13b1, idProduct=0018, bcdDevice=78.9a [ 1144.066804][T25394] usb 1-1: config 0 descriptor?? [ 1144.072614][ T6483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.117180][ T6483] usb 6-1: Product: syz [ 1144.145669][ T6483] usb 6-1: Manufacturer: syz [ 1144.150314][ T6483] usb 6-1: SerialNumber: syz [ 1144.170711][T28022] ntfs3(loop3): ino=19, mi_enum_attr [ 1144.195798][T28022] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1144.245561][T28022] ntfs3(loop3): failed to convert "c46c" to cp1250 [ 1144.283095][T28022] ntfs3(loop3): ino=20, mi_enum_attr [ 1144.346012][T25394] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 1144.434116][ T6483] asix 6-1:36.113 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1144.475298][ T6483] asix 6-1:36.113: probe with driver asix failed with error -71 [ 1144.548788][ T6483] usb 6-1: USB disconnect, device number 6 [ 1144.604998][T25394] usb 1-1: USB disconnect, device number 3 [ 1144.967066][ T30] audit: type=1326 audit(2000525310.875:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28049 comm="syz.3.9852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1145.018083][ T30] audit: type=1326 audit(2000525310.893:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28049 comm="syz.3.9852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1145.086321][ T30] audit: type=1326 audit(2000525310.912:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28049 comm="syz.3.9852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1145.108673][ C0] vkms_vblank_simulate: vblank timer overrun [ 1145.143378][ T30] audit: type=1326 audit(2000525310.912:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28049 comm="syz.3.9852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1145.270117][ T30] audit: type=1326 audit(2000525310.912:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28049 comm="syz.3.9852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe386b8eec9 code=0x7ffc0000 [ 1145.424966][T28062] nvme_fabrics: unknown parameter or missing value '‚' in ctrl creation request [ 1145.595800][T28070] loop3: detected capacity change from 0 to 8 [ 1145.636825][T28070] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1145.705308][T28070] cramfs: Error -3 while decompressing! [ 1145.711292][T28070] cramfs: ffffffff9af32e28(26)->ffff8880722ac000(4096) [ 1145.774839][T28070] cramfs: bad data blocksize 3489655184 [ 1145.803387][T28070] cramfs: Error -3 while decompressing! [ 1145.838576][T28070] cramfs: ffffffff9af32e28(26)->ffff8880722ac000(4096) [ 1145.851505][ T6278] udevd[6278]: incorrect cramfs checksum on /dev/loop3 [ 1145.881049][ T30] audit: type=1800 audit(2000525311.726:279): pid=28070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9862" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 1146.036847][ T6278] udevd[6278]: incorrect cramfs checksum on /dev/loop3 [ 1146.343304][T28093] loop1: detected capacity change from 0 to 8 [ 1146.418659][T28093] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1146.514616][T28093] SQUASHFS error: Failed to read block 0x1c0: -5 [ 1146.546241][T28093] SQUASHFS error: Unable to read metadata cache entry [1be] [ 1146.801529][T28103] loop0: detected capacity change from 0 to 512 [ 1146.826976][T28103] EXT4-fs: Ignoring removed nobh option [ 1146.886818][T28103] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.9878: corrupted inode contents [ 1146.890281][ T5848] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1146.910543][T28103] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.9878: mark_inode_dirty error [ 1147.043921][T28103] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.9878: corrupted inode contents [ 1147.082674][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 1147.094479][T28103] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.9878: mark_inode_dirty error [ 1147.114735][ T5848] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1147.133509][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.162347][T28084] loop2: detected capacity change from 0 to 32768 [ 1147.183616][ T5848] usb 4-1: config 0 descriptor?? [ 1147.196669][ T5848] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1147.205244][T28103] Quota error (device loop0): write_blk: dquota write failed [ 1147.255197][T28084] (syz.2.9868,28084,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1147.272325][T28103] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1147.282873][T28112] loop1: detected capacity change from 0 to 8 [ 1147.308315][T28103] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.9878: Failed to acquire dquot type 0 [ 1147.344795][T28084] (syz.2.9868,28084,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1147.397956][T28103] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.9878: corrupted inode contents [ 1147.424945][ T5848] usb 4-1: Detected FT232A [ 1147.436584][T28112] SQUASHFS error: xz decompression failed, data probably corrupt [ 1147.446387][T28103] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.9878: mark_inode_dirty error [ 1147.469787][ T5848] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1147.479660][T28112] SQUASHFS error: Failed to read block 0x60: -5 [ 1147.503149][T28112] SQUASHFS error: xz decompression failed, data probably corrupt [ 1147.529712][T28103] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.9878: corrupted inode contents [ 1147.542151][T28112] SQUASHFS error: Failed to read block 0x60: -5 [ 1147.557535][T28084] JBD2: Ignoring recovery information on journal [ 1147.606243][ T30] audit: type=1800 audit(2000525313.334:280): pid=28112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9881" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 1147.659643][ T5848] usb 4-1: USB disconnect, device number 17 [ 1147.670297][ T5848] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1147.690312][T28103] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.9878: mark_inode_dirty error [ 1147.759190][T28103] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.9878: corrupted inode contents [ 1147.779119][ T5848] ftdi_sio 4-1:0.0: device disconnected [ 1147.816499][T28084] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1147.861090][T28103] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1147.924199][T28103] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.9878: corrupted inode contents [ 1148.004683][T28103] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.9878: mark_inode_dirty error [ 1148.068083][T28103] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1148.128013][T28103] EXT4-fs (loop0): 1 truncate cleaned up [ 1148.142664][T28103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.173426][ T6301] ocfs2: Unmounting device (7,2) on (node local) [ 1148.182418][T28103] ext4 filesystem being mounted at /1659/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.522461][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.141134][T28180] (unnamed net_device) (uninitialized): down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 1150.209763][T28185] netlink: 'syz.1.9914': attribute type 30 has an invalid length. [ 1150.372648][T28180] bond2: entered promiscuous mode [ 1150.383640][T28180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1151.007178][T28164] loop0: detected capacity change from 0 to 32768 [ 1151.080710][T28164] OCFS2: ERROR (device loop0): ocfs2_validate_inode_block: Invalid dinode #70: OCFS2_VALID_FL not set [ 1151.112081][T28164] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1151.137110][T28164] OCFS2: File system is now read-only. [ 1151.188410][T28164] (syz.0.9905,28164,1):ocfs2_read_locked_inode:597 ERROR: status = -30 [ 1151.252775][T28164] (syz.0.9905,28164,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 1151.261780][T28164] (syz.0.9905,28164,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30 [ 1151.361414][T28164] (syz.0.9905,28164,0):ocfs2_init_global_system_inodes:466 ERROR: Unable to load system inode 3, possibly corrupt fs? [ 1151.361473][T28164] (syz.0.9905,28164,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30 [ 1151.418362][T28216] netlink: 'syz.2.9929': attribute type 21 has an invalid length. [ 1151.445230][T28216] netlink: 'syz.2.9929': attribute type 6 has an invalid length. [ 1151.453044][T28164] (syz.0.9905,28164,0):ocfs2_initialize_super:2198 ERROR: status = -30 [ 1151.506973][T28216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9929'. [ 1151.516372][T28164] (syz.0.9905,28164,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 1152.486892][T28251] loop4: detected capacity change from 0 to 256 [ 1152.524160][T28255] loop0: detected capacity change from 0 to 256 [ 1152.607299][T28255] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 1153.166988][T28265] dlm: no locking on control device [ 1153.274230][T28270] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1153.903132][T28288] loop2: detected capacity change from 0 to 512 [ 1153.968257][T28288] EXT4-fs (loop2): filesystem is read-only [ 1154.018390][T28288] EXT4-fs (loop2): filesystem is read-only [ 1154.041764][T28293] netlink: 'syz.1.9966': attribute type 1 has an invalid length. [ 1154.051745][T28297] loop3: detected capacity change from 0 to 64 [ 1154.058123][T28288] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1154.067601][T28293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9966'. [ 1154.117282][T28288] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.9963: bad orphan inode 16 [ 1154.175541][T28298] geneve3: entered allmulticast mode [ 1154.199117][T18154] netdevsim netdevsim5 : set [1, 2] type 2 family 0 port 20004 - 0 [ 1154.224230][T28288] ext4_test_bit(bit=15, block=3) = 0 [ 1154.237093][T18154] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1154.260459][T28288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1154.310915][T18154] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1154.365902][T18154] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1154.427825][T28302] loop0: detected capacity change from 0 to 4096 [ 1154.524426][T28302] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1154.632343][ T6301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.768580][T28302] ntfs3(loop0): ino=19, mi_enum_attr [ 1154.793170][T28302] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1154.930313][T28302] ntfs3(loop0): failed to convert "c46c" to cp1250 [ 1154.960262][T28302] ntfs3(loop0): ino=20, mi_enum_attr [ 1155.112373][ T6483] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1155.337160][ T6483] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1155.346241][ T6483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.422923][ T6483] usb 3-1: config 0 descriptor?? [ 1155.700735][ T6483] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1155.711441][ T6483] [drm:udl_init] *ERROR* Selecting channel failed [ 1155.759397][ T6483] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1155.809474][ T6483] [drm] Initialized udl on minor 2 [ 1155.835315][ T6483] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1155.874216][ T6483] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1155.886823][ T6421] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1155.940199][ T6421] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1155.954006][ T6483] usb 3-1: USB disconnect, device number 28 [ 1155.985388][ T6421] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1156.609081][T28358] team0: entered promiscuous mode [ 1156.614637][T28358] team_slave_0: entered promiscuous mode [ 1156.648723][T28353] loop1: detected capacity change from 0 to 4096 [ 1156.679168][T28358] team_slave_1: entered promiscuous mode [ 1156.711170][T28353] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1156.737230][T28358] dummy0: entered promiscuous mode [ 1156.805341][T28353] ntfs3(loop1): ino=19, mi_enum_attr [ 1156.812311][T28353] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1156.984093][T28353] ntfs3(loop1): failed to convert "c46c" to cp1250 [ 1157.013768][T28353] ntfs3(loop1): ino=20, mi_enum_attr [ 1157.033528][T28370] loop0: detected capacity change from 0 to 8 [ 1157.193381][T28370] SQUASHFS error: xz decompression failed, data probably corrupt [ 1157.250849][T28370] SQUASHFS error: Failed to read block 0x60: -5 [ 1157.284206][T28370] SQUASHFS error: xz decompression failed, data probably corrupt [ 1157.335351][T28370] SQUASHFS error: Failed to read block 0x60: -5 [ 1157.396041][ T30] audit: type=1800 audit(2000525322.481:281): pid=28370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10003" name="file1" dev="loop0" ino=1 res=0 errno=0 [ 1157.459164][T28376] loop2: detected capacity change from 0 to 4096 [ 1157.509874][T28376] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1158.223753][ T6421] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1158.278639][T28366] loop4: detected capacity change from 0 to 32768 [ 1158.406311][ T6421] usb 2-1: Using ep0 maxpacket: 16 [ 1158.416558][ T6421] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.441365][ T6421] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1158.469021][ T6421] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1158.492132][ T6421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.500146][ T6421] usb 2-1: Product: syz [ 1158.539783][ T6421] usb 2-1: Manufacturer: syz [ 1158.566106][ T6421] usb 2-1: SerialNumber: syz [ 1158.584227][ T30] audit: type=1326 audit(2000525323.604:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28407 comm="syz.0.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1158.623871][ T6421] usb 2-1: config 0 descriptor?? [ 1158.684223][ T30] audit: type=1326 audit(2000525323.604:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28407 comm="syz.0.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1158.750643][ T30] audit: type=1326 audit(2000525323.650:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28407 comm="syz.0.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1158.830503][ T30] audit: type=1326 audit(2000525323.650:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28407 comm="syz.0.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1158.894998][ T30] audit: type=1326 audit(2000525323.650:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28407 comm="syz.0.10022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a33b8eec9 code=0x7ffc0000 [ 1158.962688][T28418] loop0: detected capacity change from 0 to 2048 [ 1159.002892][T28418] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1159.096944][T28420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1159.108042][ T6421] usb 2-1: USB disconnect, device number 3 [ 1159.111145][ T6980] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1159.152873][T28418] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1159.219236][T28418] Remounting filesystem read-only [ 1159.314332][ T6980] usb 3-1: Using ep0 maxpacket: 16 [ 1159.347157][ T6980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.389334][ T6980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1159.428977][ T6980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.460335][ T6980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.479442][ T6980] usb 3-1: Product: syz [ 1159.488897][ T6980] usb 3-1: Manufacturer: syz [ 1159.489113][T28430] netlink: 'syz.4.10024': attribute type 30 has an invalid length. [ 1159.501643][ T6980] usb 3-1: SerialNumber: syz [ 1159.632477][T28434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10035'. [ 1159.817446][T28436] loop0: detected capacity change from 0 to 4096 [ 1159.906771][T28436] NILFS (loop0): mounting unchecked fs [ 1159.912294][T28436] NILFS (loop0): recovery required for readonly filesystem [ 1159.988400][ T6980] usb 3-1: 0:2 : does not exist [ 1160.008200][T28436] NILFS (loop0): write access will be enabled during recovery [ 1160.057885][T28436] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1160.074545][ T6980] usb 3-1: USB disconnect, device number 29 [ 1160.119100][T28436] NILFS (loop0): trying rollback from an earlier position [ 1160.179024][T28436] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 1160.280808][T28436] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 1160.335571][T28451] netlink: 'syz.5.10042': attribute type 1 has an invalid length. [ 1160.377045][T28452] loop1: detected capacity change from 0 to 256 [ 1160.394333][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10042'. [ 1161.383889][T28473] loop3: detected capacity change from 0 to 4096 [ 1161.462748][T28482] loop1: detected capacity change from 0 to 16 [ 1161.535640][T28484] loop2: detected capacity change from 0 to 1024 [ 1161.543019][T28482] erofs (device loop1): mounted with root inode @ nid 36. [ 1161.695621][T28473] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 1161.708252][T28484] hfsplus: trying to free free bnode 0(1) [ 1161.752116][T28473] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1161.791820][T18138] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 1161.807792][T28473] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 1161.833321][T28473] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1161.878542][T28473] ntfs3(loop3): ino=3, ntfs_set_state failed, -22. [ 1161.978397][T18138] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22. [ 1161.992877][T18159] hfsplus: b-tree write err: -5, ino 4 [ 1162.005690][T28490] netlink: 'syz.1.10062': attribute type 8 has an invalid length. [ 1162.076399][T28490] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10062'. [ 1162.091085][T28493] loop0: detected capacity change from 0 to 512 [ 1162.169186][T28493] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.10063: bad orphan inode 15 [ 1162.264959][T28493] ext4_test_bit(bit=14, block=5) = 0 [ 1162.276257][T28493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.367804][T28462] loop5: detected capacity change from 0 to 32768 [ 1162.380331][T28493] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz.0.10063: reserved inode found cleared - inode=1 [ 1162.474232][T28462] JBD2: Ignoring recovery information on journal [ 1162.500518][ T6980] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1162.599057][ T6298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.677826][ T6980] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 1162.694763][ T6980] usb 5-1: config 0 has no interface number 0 [ 1162.701393][ T6980] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1162.712457][ T6980] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1162.766104][T28462] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1162.770948][ T6980] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1162.805494][ T6980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.846173][ T6980] usb 5-1: Product: syz [ 1162.850362][ T6980] usb 5-1: Manufacturer: syz [ 1162.885208][ T6980] usb 5-1: SerialNumber: syz [ 1162.899707][T28514] overlayfs: missing 'lowerdir' [ 1162.918672][ T6980] usb 5-1: config 0 descriptor?? [ 1162.937888][T28499] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1162.955027][ T6980] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1162.968338][T28462] OCFS2: ERROR (device loop5): ocfs2_xattr_find_entry: corrupted xattr entries [ 1162.968374][T28462] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1162.994778][T28462] OCFS2: File system is now read-only. [ 1163.029332][ T6980] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1163.035319][T28462] (syz.5.10049,28462,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 1163.174103][T28462] (syz.5.10049,28462,0):ocfs2_mknod:337 ERROR: status = -117 [ 1163.181623][T28462] (syz.5.10049,28462,0):ocfs2_mknod:505 ERROR: status = -117 [ 1163.266971][T28462] (syz.5.10049,28462,0):ocfs2_create:678 ERROR: status = -117 [ 1163.324679][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1163.440155][T28524] loop3: detected capacity change from 0 to 256 [ 1163.553034][ T6980] usb 5-1: USB disconnect, device number 117 [ 1163.564067][ T6311] ocfs2: Unmounting device (7,5) on (node local) [ 1163.594915][T28524] FAT-fs (loop3): Directory bread(block 64) failed [ 1163.601543][T28524] FAT-fs (loop3): Directory bread(block 65) failed [ 1163.633087][ T6980] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1163.681303][ T6980] cyberjack 5-1:0.69: device disconnected [ 1163.687379][T28524] FAT-fs (loop3): Directory bread(block 66) failed [ 1163.693920][T28524] FAT-fs (loop3): Directory bread(block 67) failed [ 1163.751625][T28524] FAT-fs (loop3): Directory bread(block 68) failed [ 1163.758166][T28524] FAT-fs (loop3): Directory bread(block 69) failed [ 1163.806704][T28524] FAT-fs (loop3): Directory bread(block 70) failed [ 1163.847668][T28524] FAT-fs (loop3): Directory bread(block 71) failed [ 1163.908930][T28524] FAT-fs (loop3): Directory bread(block 72) failed [ 1163.939529][T28524] FAT-fs (loop3): Directory bread(block 73) failed [ 1164.070661][T28536] netlink: 'syz.0.10084': attribute type 1 has an invalid length. [ 1164.462025][T28546] dvmrp1: entered allmulticast mode [ 1164.681908][ T5848] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1164.888195][ T5848] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1164.927631][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.959336][ T5848] usb 6-1: config 0 descriptor?? [ 1165.235363][ T5848] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1165.269797][ T5848] [drm:udl_init] *ERROR* Selecting channel failed [ 1165.383361][ T5848] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1165.406315][ T5848] [drm] Initialized udl on minor 2 [ 1165.470739][ T5848] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1165.497032][ T5848] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1165.527163][T14226] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1165.549433][ T5848] usb 6-1: USB disconnect, device number 7 [ 1165.576058][T14226] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1165.920075][T28550] loop3: detected capacity change from 0 to 32768 [ 1166.528284][T28605] netlink: 'syz.4.10117': attribute type 4 has an invalid length. [ 1166.841502][T28614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1167.166541][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1167.252298][ T6421] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1167.439303][ T6421] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1167.470159][ T6421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.538444][ T6421] usb 2-1: config 0 descriptor?? [ 1167.651671][T28643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.697405][T14226] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1167.777097][ T6421] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1167.810729][ T6421] [drm:udl_init] *ERROR* Selecting channel failed [ 1167.865561][ T6421] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1167.870316][T14226] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 1167.910673][ T6421] [drm] Initialized udl on minor 2 [ 1167.915049][T14226] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1167.937564][ T6421] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1167.965833][ T6421] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1167.966108][T14226] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1167.996905][ T6504] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1168.021441][T14226] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 1168.027242][ T6504] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1168.058816][ T6421] usb 2-1: USB disconnect, device number 4 [ 1168.061934][T28652] loop5: detected capacity change from 0 to 764 [ 1168.065001][ T6504] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1168.080660][T14226] usb 5-1: Manufacturer: syz [ 1168.163449][T28655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10142'. [ 1168.216267][T28658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10144'. [ 1168.246659][T28658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10144'. [ 1168.459760][T14226] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1168.484902][T28660] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10145'. [ 1168.532553][T14226] usb 5-1: USB disconnect, device number 118 [ 1169.129718][T14226] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1169.320003][T28684] loop1: detected capacity change from 0 to 2048 [ 1169.352535][T14226] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 1169.376817][T14226] usb 3-1: config 0 has no interface number 0 [ 1169.380717][T28684] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1169.382933][T14226] usb 3-1: config 0 interface 23 has no altsetting 0 [ 1169.482493][T28692] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1169.493593][T14226] usb 3-1: New USB device found, idVendor=0c45, idProduct=62b0, bcdDevice=70.90 [ 1169.502666][T14226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.572371][T28684] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1169.578604][T14226] usb 3-1: Product: syz [ 1169.627260][T28684] Remounting filesystem read-only [ 1169.638067][T14226] usb 3-1: Manufacturer: syz [ 1169.662497][T28695] loop4: detected capacity change from 0 to 256 [ 1169.669454][T14226] usb 3-1: SerialNumber: syz [ 1169.692508][T14226] usb 3-1: config 0 descriptor?? [ 1169.751309][T14226] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b0 [ 1170.232942][T14226] gspca_sn9c20x: Write register 1001 failed -71 [ 1170.245599][T28706] loop4: detected capacity change from 0 to 128 [ 1170.246556][T28676] loop5: detected capacity change from 0 to 32768 [ 1170.269160][T14226] gspca_sn9c20x: Device initialization failed [ 1170.288101][T14226] gspca_sn9c20x 3-1:0.23: probe with driver gspca_sn9c20x failed with error -71 [ 1170.296520][T28706] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1170.318665][T14226] usb 3-1: USB disconnect, device number 30 [ 1170.329801][T28676] (syz.5.10153,28676,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1170.349776][T28706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1170.392701][T28711] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10170'. [ 1170.429452][T28676] (syz.5.10153,28676,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1170.471394][T28676] JBD2: Ignoring recovery information on journal [ 1170.685637][T28676] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1170.855598][T28676] [ 1170.857962][T28676] ====================================================== [ 1170.864977][T28676] WARNING: possible circular locking dependency detected [ 1170.871991][T28676] syzkaller #0 Not tainted [ 1170.876401][T28676] ------------------------------------------------------ [ 1170.883410][T28676] syz.5.10153/28676 is trying to acquire lock: [ 1170.889563][T28676] ffff888031b5c618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x563/0xb00 [ 1170.899038][T28676] [ 1170.899038][T28676] but task is already holding lock: [ 1170.906395][T28676] ffff888054a25be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 1170.917330][T28676] [ 1170.917330][T28676] which lock already depends on the new lock. [ 1170.917330][T28676] [ 1170.926219][ T6980] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1170.927725][T28676] [ 1170.927725][T28676] the existing dependency chain (in reverse order) is: [ 1170.927741][T28676] [ 1170.927741][T28676] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 1170.953124][T28676] down_write+0x92/0x200 [ 1170.957912][T28676] ocfs2_lock_global_qf+0x1c1/0x2d0 [ 1170.963660][T28676] ocfs2_acquire_dquot+0x258/0xb00 [ 1170.969322][T28676] dqget+0x693/0x1180 [ 1170.973847][T28676] dquot_set_dqblk+0x2b/0x1290 [ 1170.979160][T28676] quota_setquota+0x4c4/0x5e0 [ 1170.984391][T28676] do_quotactl+0xaf6/0x13d0 [ 1170.989451][T28676] __x64_sys_quotactl+0x1b3/0x440 [ 1170.990174][T28724] loop4: detected capacity change from 0 to 128 [ 1170.995025][T28676] do_syscall_64+0xcd/0x4e0 [ 1170.995060][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.012656][T28676] [ 1171.012656][T28676] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 1171.023188][T28676] down_write+0x92/0x200 [ 1171.028071][T28676] ocfs2_lock_global_qf+0x194/0x2d0 [ 1171.033822][T28676] ocfs2_acquire_dquot+0x258/0xb00 [ 1171.039468][T28676] dqget+0x693/0x1180 [ 1171.043980][T28676] dquot_set_dqblk+0x2b/0x1290 [ 1171.049270][T28676] quota_setquota+0x4c4/0x5e0 [ 1171.054486][T28676] do_quotactl+0xaf6/0x13d0 [ 1171.059534][T28676] __x64_sys_quotactl+0x1b3/0x440 [ 1171.065096][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.070119][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.076533][T28676] [ 1171.076533][T28676] -> #4 (&dquot->dq_lock){+.+.}-{4:4}: [ 1171.084205][T28676] __mutex_lock+0x193/0x1060 [ 1171.089315][T28676] dqget+0x5f1/0x1180 [ 1171.093818][T28676] dquot_transfer+0x3a8/0x6a0 [ 1171.099022][T28676] ext4_setattr+0x885/0x2ae0 [ 1171.104142][T28676] notify_change+0x6a9/0x1230 [ 1171.109350][T28676] chown_common+0x54e/0x680 [ 1171.114378][T28676] do_fchownat+0x1a7/0x200 [ 1171.119317][T28676] __x64_sys_chown+0x7b/0xc0 [ 1171.124430][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.129449][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.135873][T28676] [ 1171.135873][T28676] -> #3 (&ei->xattr_sem){++++}-{4:4}: [ 1171.143447][T28676] down_read+0x9b/0x480 [ 1171.148130][T28676] ext4_setattr+0x875/0x2ae0 [ 1171.153250][T28676] notify_change+0x6a9/0x1230 [ 1171.158462][T28676] chown_common+0x54e/0x680 [ 1171.163494][T28676] do_fchownat+0x1a7/0x200 [ 1171.168442][T28676] __x64_sys_chown+0x7b/0xc0 [ 1171.173576][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.178602][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.185023][T28676] [ 1171.185023][T28676] -> #2 (jbd2_handle){++++}-{0:0}: [ 1171.192335][T28676] start_this_handle+0x5ea/0x1410 [ 1171.197897][T28676] jbd2__journal_start+0x394/0x6a0 [ 1171.203546][T28676] jbd2_journal_start+0x29/0x40 [ 1171.208930][T28676] ocfs2_start_trans+0x3b9/0x970 [ 1171.214408][T28676] ocfs2_modify_bh+0xbd/0x490 [ 1171.219620][T28676] ocfs2_local_read_info+0xdad/0x16b0 [ 1171.225527][T28676] dquot_load_quota_sb+0x83d/0x1050 [ 1171.231250][T28676] dquot_load_quota_inode+0x2a3/0x470 [ 1171.237148][T28676] ocfs2_enable_quotas+0x28a/0x5a0 [ 1171.242782][T28676] ocfs2_fill_super+0x1d7c/0x43b0 [ 1171.248327][T28676] get_tree_bdev_flags+0x38c/0x620 [ 1171.253979][T28676] vfs_get_tree+0x8e/0x340 [ 1171.258924][T28676] path_mount+0x1513/0x2000 [ 1171.263954][T28676] __x64_sys_mount+0x28d/0x310 [ 1171.269241][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.274261][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.280678][T28676] [ 1171.280678][T28676] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 1171.289207][T28676] down_read+0x9b/0x480 [ 1171.293888][T28676] ocfs2_start_trans+0x3ae/0x970 [ 1171.299368][T28676] ocfs2_modify_bh+0xbd/0x490 [ 1171.304571][T28676] ocfs2_local_read_info+0xdad/0x16b0 [ 1171.310477][T28676] dquot_load_quota_sb+0x83d/0x1050 [ 1171.316206][T28676] dquot_load_quota_inode+0x2a3/0x470 [ 1171.322108][T28676] ocfs2_enable_quotas+0x28a/0x5a0 [ 1171.327742][T28676] ocfs2_fill_super+0x1d7c/0x43b0 [ 1171.333288][T28676] get_tree_bdev_flags+0x38c/0x620 [ 1171.338939][T28676] vfs_get_tree+0x8e/0x340 [ 1171.343889][T28676] path_mount+0x1513/0x2000 [ 1171.348916][T28676] __x64_sys_mount+0x28d/0x310 [ 1171.354204][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.359225][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.365649][T28676] [ 1171.365649][T28676] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 1171.373146][T28676] __lock_acquire+0x12a6/0x1ce0 [ 1171.378535][T28676] lock_acquire+0x179/0x350 [ 1171.383577][T28676] ocfs2_start_trans+0x29d/0x970 [ 1171.389058][T28676] ocfs2_acquire_dquot+0x563/0xb00 [ 1171.394702][T28676] dqget+0x693/0x1180 [ 1171.399205][T28676] dquot_set_dqblk+0x2b/0x1290 [ 1171.404492][T28676] quota_setquota+0x4c4/0x5e0 [ 1171.409729][T28676] do_quotactl+0xaf6/0x13d0 [ 1171.414787][T28676] __x64_sys_quotactl+0x1b3/0x440 [ 1171.420348][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.425370][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.431785][T28676] [ 1171.431785][T28676] other info that might help us debug this: [ 1171.431785][T28676] [ 1171.441997][T28676] Chain exists of: [ 1171.441997][T28676] sb_internal#2 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key [ 1171.441997][T28676] [ 1171.458977][T28676] Possible unsafe locking scenario: [ 1171.458977][T28676] [ 1171.466412][T28676] CPU0 CPU1 [ 1171.471767][T28676] ---- ---- [ 1171.477114][T28676] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1171.482746][T28676] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 1171.492551][T28676] lock(&ocfs2_quota_ip_alloc_sem_key); [ 1171.500703][T28676] rlock(sb_internal#2); [ 1171.505042][T28676] [ 1171.505042][T28676] *** DEADLOCK *** [ 1171.505042][T28676] [ 1171.513167][T28676] 4 locks held by syz.5.10153/28676: [ 1171.518439][T28676] #0: ffff888031b5c0e0 (&type->s_umount_key#69){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 1171.528330][T28676] #1: ffff8880521de0a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x24b/0xb00 [ 1171.538386][T28676] #2: ffff888054a25f40 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x194/0x2d0 [ 1171.551395][T28676] #3: ffff888054a25be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1c1/0x2d0 [ 1171.562750][T28676] [ 1171.562750][T28676] stack backtrace: [ 1171.568628][T28676] CPU: 0 UID: 0 PID: 28676 Comm: syz.5.10153 Not tainted syzkaller #0 PREEMPT(full) [ 1171.568674][T28676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1171.568695][T28676] Call Trace: [ 1171.568707][T28676] [ 1171.568720][T28676] dump_stack_lvl+0x116/0x1f0 [ 1171.568774][T28676] print_circular_bug+0x275/0x350 [ 1171.568828][T28676] check_noncircular+0x14c/0x170 [ 1171.568884][T28676] __lock_acquire+0x12a6/0x1ce0 [ 1171.568946][T28676] lock_acquire+0x179/0x350 [ 1171.568997][T28676] ? ocfs2_acquire_dquot+0x563/0xb00 [ 1171.569044][T28676] ? __pfx___might_resched+0x10/0x10 [ 1171.569091][T28676] ocfs2_start_trans+0x29d/0x970 [ 1171.569143][T28676] ? ocfs2_acquire_dquot+0x563/0xb00 [ 1171.569189][T28676] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 1171.569241][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.569282][T28676] ? do_raw_spin_unlock+0x172/0x230 [ 1171.569319][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.569359][T28676] ? _raw_spin_unlock+0x28/0x50 [ 1171.569408][T28676] ocfs2_acquire_dquot+0x563/0xb00 [ 1171.569457][T28676] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 1171.569505][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.569551][T28676] dqget+0x693/0x1180 [ 1171.569590][T28676] ? __pfx_dqget+0x10/0x10 [ 1171.569623][T28676] ? map_id_range_down+0x2bc/0x3b0 [ 1171.569665][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.569705][T28676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.569745][T28676] dquot_set_dqblk+0x2b/0x1290 [ 1171.569787][T28676] quota_setquota+0x4c4/0x5e0 [ 1171.569838][T28676] ? __pfx_quota_setquota+0x10/0x10 [ 1171.569888][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.569945][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.569984][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570024][T28676] ? security_capable+0x7e/0x260 [ 1171.570055][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570098][T28676] do_quotactl+0xaf6/0x13d0 [ 1171.570149][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570190][T28676] ? __pfx_do_quotactl+0x10/0x10 [ 1171.570240][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570285][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570326][T28676] ? user_get_super+0x109/0x1b0 [ 1171.570379][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570419][T28676] ? quotactl_block+0x17e/0x690 [ 1171.570468][T28676] ? __pfx_quotactl_block+0x10/0x10 [ 1171.570524][T28676] __x64_sys_quotactl+0x1b3/0x440 [ 1171.570577][T28676] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 1171.570628][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570672][T28676] ? xfd_validate_state+0x61/0x180 [ 1171.570728][T28676] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.570773][T28676] do_syscall_64+0xcd/0x4e0 [ 1171.570805][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.570839][T28676] RIP: 0033:0x7f266a98eec9 [ 1171.570865][T28676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.570899][T28676] RSP: 002b:00007f266b8d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1171.570930][T28676] RAX: ffffffffffffffda RBX: 00007f266abe5fa0 RCX: 00007f266a98eec9 [ 1171.570952][T28676] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffff80000800 [ 1171.570974][T28676] RBP: 00007f266aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1171.570996][T28676] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1171.571018][T28676] R13: 00007f266abe6038 R14: 00007f266abe5fa0 R15: 00007ffe6ceef6c8 [ 1171.571051][T28676] [ 1171.591560][ T6980] usb 4-1: Using ep0 maxpacket: 8 [ 1171.593850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.601135][ T6980] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 1171.738828][T28724] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1171.842286][ T6980] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1171.919691][T28724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1171.949742][ T6311] ocfs2: Unmounting device (7,5) on (node local) [ 1171.986239][ T6980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1172.003063][ T6980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.036739][ T6980] usb 4-1: Product: syz [ 1172.041109][ T6980] usb 4-1: Manufacturer: syz [ 1172.045759][ T6980] usb 4-1: SerialNumber: syz [ 1172.061039][T28716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1172.288770][ T6980] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 1172.302095][ T6980] usb 4-1: USB disconnect, device number 18 [ 1172.309577][ T6980] usblp0: removed