last executing test programs: 2m7.632313482s ago: executing program 3 (id=520): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x210014, &(0x7f0000000040)=ANY=[], 0x5, 0x1c4, &(0x7f00000002c0)="$eJzsVc1u00AQ/tbexDEHxBWExAEEySGJY36ucEJ5AB6AKDEhwhEQR4JEHMwp74GQ8hocUF+hh1a9pIeqUg/ttapc7e74L4mU/ihNDvtJ9nzz7axn1mvPfg6+BxaACwNtvIOEifvYYwwcwBOmtPeWssdFZWvkH3FlK6T/IbtPNhiNv7R83xssJVEZyCsm5pXVJGZVXGtaSqwrBttqTbhBivUTtmQovNtSdywsbEEIYCvez+YJfT3ID8HYaGF2VjFW/rHrJYznFOu2D0zdt78NnMhetnv6qy3IRwBRFEVC66iLZWNEJ/qvYuR//4jLi5mIkhjR/ITzAsD53/63ejAaV3v9Vtfresx1X75xXjnOa7f+qed7jrqzTAqDPghhKwAsydPxAoADarD3sIi4fBpn9lz5McpPU84oXzw3IsLwL5lLvR3iGR/wHCUAP0J1Eti5CuSSmmAwwaXT4Jk8am0lOVBrf/U7EzAwinSm4DDiaTMUEsdNHJ5LNgEeitKekd8kOyU7E7diembFZxEXPQiH5JVDEfSzNRwOGkJSTGpxzUpzH4TIbJDIelbML+6xtWRXNDQ0NDQ0NDS2GpcBAAD//z7uSuY=") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 2m7.496194803s ago: executing program 3 (id=523): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file2\x00', 0x22200c8c, &(0x7f0000000180)=ANY=[], 0x84, 0x151f, &(0x7f00000017c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x141) 2m7.192863734s ago: executing program 3 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x24}}, 0x0) 2m6.971726895s ago: executing program 3 (id=534): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@nls={'nls', 0x3d, 'maccyrillic'}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x8}}, {@type={'type', 0x3d, "dafd7c7f"}}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m6.623483057s ago: executing program 3 (id=540): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setuid(0x0) 2m5.94683937s ago: executing program 3 (id=555): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x3, @output={0x0, 0x0, {0xfffffe01, 0x9}, 0x5, 0x1}}) 2m5.850313101s ago: executing program 32 (id=555): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x3, @output={0x0, 0x0, {0xfffffe01, 0x9}, 0x5, 0x1}}) 2.744339105s ago: executing program 1 (id=2948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000001900010000000000000000001d0100000c000b00000000000000000008000900", @ANYRES32=0x0, @ANYBLOB="08000a00e4"], 0x30}}, 0x0) 2.500711755s ago: executing program 1 (id=2949): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x24}}, 0x0) 2.481585555s ago: executing program 1 (id=2951): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1800000038000900000000000000000004000000040045"], 0x18}}, 0x0) 2.319825756s ago: executing program 1 (id=2953): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000040)) 2.084687576s ago: executing program 1 (id=2959): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xd, 0xa0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x4}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0xdc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x800, 0x4, 0x2, 0x3, {0x7, 0x25, 0x1, 0x2, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x49, 0x7, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x2, 0x0, 0x7, 0x40, 0x4}, 0x50, &(0x7f0000000240)=ANY=[@ANYBLOB="050f5000061c100a20440100000000a900cf3f000017c0ff00cf3fff0000000000141004068819c7ac774913570bcd00cdfa173cae0a1003020800a3271ebc1c"]}) 1.857213997s ago: executing program 2 (id=2966): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) 1.710451227s ago: executing program 5 (id=2968): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0) 1.683516717s ago: executing program 5 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) 1.620635347s ago: executing program 2 (id=2970): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES32], 0x11, 0x698, &(0x7f0000004200)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVRQIxI7VgrhkoAQClKFqnLgbDVOY2WTBsdFaQ/EBSSuHPgDyiFc4ARCSEhIkcoZboibxQkJiQuntAcG7ezseu3u+iUvfqGfTzQ7v2eemWd+85ud2ZfI2gCfWVfOpPkgrVw58/rdTnv9/kJ7/f7CzV6cZDJJI2l2ZyluJcVHyeV0p3yus7Aerhi1n18sX3zzb/9Z/2e31czGeJ2H1ugEm7s5irV6ymySsXr+GDaN99ajjTe5ERb9ynQKdrpXODho40nKTX5wcqNnmHJsoDHyegeOjqL7ujmge/3PJMeSTPVe0Na6nY39z3BHe7oXrT29PAAAAODQOP7wXnI30wedBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwl9e//F/XU6MWzKXq//z8x8Bv7Ewec7mjbZzbVCx409iMZAAAAAAAAAHi6vvAwv36zLKd77bKo/s//5apxonp8Ju/mTpaykrO5m8WsZjUrmU8yMzDQxN3F1dWV+d6Wn5RlOWLL80O3PL/LhFtP4qgBAAAAAAAA4P/GpXr+41zJ9AHnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmxTJWHdWTSd68UwazSRTSSY6660lf+3FR9mDg04AAAAA9sHxh3mYu5nutcui+sx/svrcP5V3cyurWc5q2lnK1eq7gO6n/sb6/YX2+v2Fm53p0+N+498b8e+md0yjGjHd7x6G7/lUtUYr17JcLTmbt/JO2rmaRrVlx6lePsPz+qCTU3Gpqyx3V6Cr9bxz5D+v54fDTFWR8X5F5urcOtV4dvtKDJ6dR9jTfBr9b35O7KHml7bdS/Hf3jk51luSPPOdnWs+vqeDeSxbK3F+4Nl3cvtKJF/6/W++f71968b1Yu3M4Xka7cHkPzaumq2VWBioxIu7rsS1O0ezEls18kI/vpJv53s5k9m8kZUs54dZzGqWMptvVdFi/XzuPM5sX6nLm1pv7JTFRH1exrbk9MXj3fl2Ob1cbTud5Xw37+RqlvJa9e985vPVXMiFXBw4wy/s4qpvDLnq/zA6+dNfroNWkp/V88Pj2YG6Dt5zZ6q+wSWNlJPdbZ57YvfGvubn66BzJn5Szw+HfiWm0n+V6GX3fK8C40Mr8cvqtnKnfevGyvXF21vGLdaG7++VbD78Pd1Ixvay8l51rsPnOieram1+dnT6nh/aN1/1nej3Nbb2/arV79vpSp2o38N9eqTzVd+LQ/sWqr5TA30b77c+Kcuy+34LgEPv2KvHJlr/av2l9WHrp63rrdenvjn5tcmXJjL+5/GvN+fGXmm8VPw2H+ZH2fkTOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKM7771/Y7HdXlrZEpRleW9E11MJ0kw2LfnTHwfWSVL9GNDuB+ysfbmRVEuaqYO9JXbv0Q7ng0ctwt/rc7IvBX8iwdTI58/W4OOyLA9HzrsJytphyecpBK+WZbntOgd6WwL2wbnVm7fP3Xnv/a8s31x8e+ntpVsXL1y4OHfxwmsL564tt5fmuo8HnSXwNAy8AwcAAAAAAAAAAACOiN39cU7xeH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAYrpxJ80GKzM+dneu01+8vtDtTL95Y8+MkjSTFbFJ8lFxOd8rMwHDFqP2Mb2o166lav7HddruzVk+ZTTJWz4eYGrawvDdqvKIa5/bo8bYYdRRFv69TsNO9wsFB+18AAAD//1ybF7Q=") link(&(0x7f0000000340)='./file1\x00', &(0x7f0000000540)='./bus\x00') 1.608876067s ago: executing program 5 (id=2971): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='vfat\x00', 0x0, 0x0) 1.464562068s ago: executing program 2 (id=2973): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x788ab513c11953fb}, 0x1c}}, 0x0) 1.463211078s ago: executing program 5 (id=2974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e0001000000", @ANYBLOB='\x00\x00\x00\x00\bL\x00@'], 0x24}}, 0x0) 1.393042518s ago: executing program 5 (id=2975): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)=0x6) 1.231275548s ago: executing program 5 (id=2976): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000080)={0x40, 0xf, 0x3, '?wA'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.223165318s ago: executing program 2 (id=2977): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x23404}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x8, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x4}]}]}, 0x30}, 0x1, 0xffffa888}, 0x0) 1.110956568s ago: executing program 2 (id=2979): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) 920.499729ms ago: executing program 2 (id=2980): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x1) 536.72504ms ago: executing program 4 (id=2984): timer_create(0x1, 0x0, &(0x7f00000002c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000001e00)={{}, {0x0, 0x3938700}}, &(0x7f0000001e40)) 507.75644ms ago: executing program 0 (id=2985): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="093800000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32, @ANYBLOB="000000000000000008001f"], 0x50}}, 0x0) 489.974889ms ago: executing program 4 (id=2986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) 364.68534ms ago: executing program 0 (id=2987): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp_trap\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 358.82768ms ago: executing program 4 (id=2988): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x103}) 271.04172ms ago: executing program 0 (id=2989): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @private=0xa010101}], 0x12) 196.67982ms ago: executing program 4 (id=2990): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40bc5311, &(0x7f0000000500)={0x80, 0x1}) 183.62176ms ago: executing program 0 (id=2991): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000090c0), 0x101000, 0x0) lseek(r0, 0x4, 0x0) 133.27735ms ago: executing program 4 (id=2992): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)) 105.38278ms ago: executing program 0 (id=2993): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xc00, 0x20323159, 0x500, 0x2cf, 0x4, @stepwise={{0x1, 0xfffffffb}, {0x4, 0x4c3}, {0xa9, 0xb16}}}) 1.386061ms ago: executing program 0 (id=2994): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0xa5a7cebd58ae989b}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 475.611µs ago: executing program 1 (id=2995): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/137, 0x89}], 0x1, 0x4, 0xf5) 0s ago: executing program 4 (id=2996): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000200)=""/80, &(0x7f0000000280)=0x97) kernel console output (not intermixed with test programs): ors [ 126.364986][ T4212] usb 3-1: USB disconnect, device number 6 [ 126.486305][ T6460] usb 1-1: USB disconnect, device number 7 [ 126.799439][ T7101] loop5: detected capacity change from 0 to 8 [ 126.826354][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 126.837586][ T7103] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1024) [ 127.112758][ T7121] loop1: detected capacity change from 0 to 128 [ 127.134959][ T7124] loop4: detected capacity change from 0 to 256 [ 127.156453][ T7125] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1079'. [ 127.181090][ T26] audit: type=1400 audit(1732107417.097:7): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=22 pid=7126 comm="syz.2.1081" [ 127.244411][ T7121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.271191][ T7121] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.478929][ T7146] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.498447][ T7148] netlink: 'syz.5.1089': attribute type 1 has an invalid length. [ 127.603797][ T7153] 9pnet_virtio: no channels available for device [ 127.751036][ T7167] x_tables: duplicate underflow at hook 1 [ 127.898746][ T7168] loop1: detected capacity change from 0 to 4096 [ 127.965070][ T7168] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 128.127407][ T7192] openvswitch: netlink: IPv4 tunnel dst address is zero [ 128.399280][ T7210] tc_dump_action: action bad kind [ 128.563382][ T7223] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1124'. [ 129.330406][ T7272] loop1: detected capacity change from 0 to 64 [ 129.372915][ T7270] loop2: detected capacity change from 0 to 4096 [ 129.440369][ T7270] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 129.463199][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 129.496058][ T7270] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 129.594081][ T7270] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 129.636378][ T7270] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 129.663311][ T7289] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 129.677988][ T7270] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 129.741529][ T7270] ntfs: volume version 3.1. [ 129.784357][ T7270] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 129.883169][ T7270] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 129.917765][ T7292] loop1: detected capacity change from 0 to 736 [ 129.934656][ T7294] vivid-001: ================= START STATUS ================= [ 129.968747][ T7270] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 129.996947][ T7294] vivid-001: Generate PTS: true [ 130.030510][ T7294] vivid-001: Generate SCR: true [ 130.035914][ T7270] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 130.067989][ T7294] tpg source WxH: 640x360 (Y'CbCr) [ 130.084733][ T7294] tpg field: 1 [ 130.108626][ T7294] tpg crop: 640x360@0x0 [ 130.117478][ T7294] tpg compose: 640x360@0x0 [ 130.127330][ T7254] loop4: detected capacity change from 0 to 32768 [ 130.164872][ T7294] tpg colorspace: 8 [ 130.168741][ T7294] tpg transfer function: 0/0 [ 130.235904][ T7254] [ 130.235904][ T7254] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.235904][ T7254] [ 130.269346][ T7294] tpg Y'CbCr encoding: 0/0 [ 130.280563][ T7294] tpg quantization: 0/0 [ 130.290783][ T7294] tpg RGB range: 0/2 [ 130.294731][ T7294] vivid-001: ================== END STATUS ================== [ 130.435452][ T7254] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 130.435452][ T7254] [ 130.617613][ T5110] read_mapping_page failed! [ 130.652079][ T5110] ERROR: (device loop4): txCommit: [ 130.652079][ T5110] [ 130.682904][ T5110] jfs_write_inode: jfs_commit_inode failed! [ 130.688930][ T4178] [ 130.688930][ T4178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.688930][ T4178] [ 130.725414][ T4178] [ 130.725414][ T4178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 130.725414][ T4178] [ 131.082631][ T7288] loop5: detected capacity change from 0 to 32768 [ 131.096528][ T7311] loop1: detected capacity change from 0 to 8192 [ 131.119257][ T7321] loop2: detected capacity change from 0 to 1024 [ 131.171112][ T7288] [ 131.171112][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.171112][ T7288] [ 131.207851][ T7311] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 131.227371][ T7288] [ 131.227371][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.227371][ T7288] [ 131.299076][ T7311] REISERFS (device loop1): using ordered data mode [ 131.306992][ T7311] reiserfs: using flush barriers [ 131.322431][ T7288] [ 131.322431][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.322431][ T7288] [ 131.333761][ T7288] [ 131.333761][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.333761][ T7288] [ 131.345232][ T7288] [ 131.345232][ T7288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.345232][ T7288] [ 131.347088][ T7311] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.399858][ T275] [ 131.399858][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.399858][ T275] [ 131.427408][ T5110] hfsplus: b-tree write err: -5, ino 4 [ 131.477398][ T5566] [ 131.477398][ T5566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.477398][ T5566] [ 131.509165][ T5566] [ 131.509165][ T5566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.509165][ T5566] [ 131.521154][ T7311] REISERFS (device loop1): checking transaction log (loop1) [ 131.529056][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1180'. [ 131.548995][ T7311] REISERFS (device loop1): Using r5 hash to sort names [ 131.594115][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 131.675819][ T7311] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 131.796541][ T7311] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 132.026313][ T7350] loop2: detected capacity change from 0 to 256 [ 132.090681][ T7319] loop0: detected capacity change from 0 to 32768 [ 132.150976][ T7319] XFS: ikeep mount option is deprecated. [ 132.157821][ T7350] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 132.207110][ T7361] delete_channel: no stack [ 132.236802][ T7319] XFS (loop0): Mounting V5 Filesystem [ 132.237981][ T7350] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 132.254542][ T7350] exFAT-fs (loop2): Filesystem has been set read-only [ 132.465201][ T7376] loop4: detected capacity change from 0 to 512 [ 132.467795][ T7375] usb usb8: usbfs: process 7375 (syz.2.1194) did not claim interface 0 before use [ 132.504751][ T7319] XFS (loop0): Ending clean mount [ 132.529898][ T7319] XFS (loop0): Quotacheck needed: Please wait. [ 132.557117][ T7376] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 132.621356][ T7382] netlink: 616 bytes leftover after parsing attributes in process `syz.1.1199'. [ 132.634723][ T7319] XFS (loop0): Quotacheck: Done. [ 132.634765][ T7376] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.692941][ T7376] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.772845][ T7376] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1195: Invalid block bitmap block 0 in block_group 0 [ 132.791620][ T4167] XFS (loop0): Unmounting Filesystem [ 132.839281][ T7376] __quota_error: 7 callbacks suppressed [ 132.839298][ T7376] Quota error (device loop4): write_blk: dquota write failed [ 132.886426][ T7376] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 132.932492][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933829][ T7376] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1195: Failed to acquire dquot type 1 [ 132.938826][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.019573][ T7404] overlayfs: missing 'lowerdir' [ 133.051116][ T7376] EXT4-fs (loop4): 1 orphan inode deleted [ 133.057421][ T155] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 133.079550][ T155] EXT4-fs error (device loop4): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 1 [ 133.239824][ T7376] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,nodiscard,noblock_validity,noquota,resuid=0x0000000000000000,stripe=0x0000000000000004,abort,noload,auto_da_alloc=0x0000000000000001,grpjquota=,,errors=continue. Quota mode: writeback. [ 133.540874][ T4212] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.800371][ T4212] usb 3-1: Using ep0 maxpacket: 16 [ 133.812325][ T7406] loop5: detected capacity change from 0 to 32768 [ 133.840479][ T6461] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.861270][ T7406] XFS: ikeep mount option is deprecated. [ 133.867102][ T7406] XFS: noikeep mount option is deprecated. [ 133.910864][ T7406] XFS (loop5): Mounting V5 Filesystem [ 133.920559][ T4212] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.984040][ T7406] XFS (loop5): Ending clean mount [ 133.992501][ T7406] XFS (loop5): Quotacheck needed: Please wait. [ 134.012521][ T7420] loop0: detected capacity change from 0 to 32768 [ 134.020344][ T6460] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.046962][ T7406] XFS (loop5): Quotacheck: Done. [ 134.079712][ T7420] (syz.0.1216,7420,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.093775][ T4212] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 134.104285][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.111436][ T5566] XFS (loop5): Unmounting Filesystem [ 134.117713][ T4212] usb 3-1: Product: syz [ 134.122256][ T7420] (syz.0.1216,7420,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.136453][ T4212] usb 3-1: Manufacturer: syz [ 134.141632][ T4212] usb 3-1: SerialNumber: syz [ 134.148503][ T4212] usb 3-1: config 0 descriptor?? [ 134.259103][ T7420] JBD2: Ignoring recovery information on journal [ 134.260719][ T6460] usb 5-1: Using ep0 maxpacket: 32 [ 134.289751][ T7420] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 134.380483][ T6461] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25 [ 134.389577][ T6461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.411012][ T6460] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.419058][ T6460] usb 5-1: config 0 has no interface number 0 [ 134.431408][ T4597] usb 3-1: USB disconnect, device number 7 [ 134.437650][ T6461] usb 2-1: Product: syz [ 134.437675][ T6461] usb 2-1: Manufacturer: syz [ 134.437692][ T6461] usb 2-1: SerialNumber: syz [ 134.446972][ T6461] usb 2-1: config 0 descriptor?? [ 134.486311][ T6461] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 134.509470][ T4167] ocfs2: Unmounting device (7,0) on (node local) [ 134.620482][ T6460] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 134.629582][ T6460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.639394][ T6460] usb 5-1: Product: syz [ 134.644325][ T6460] usb 5-1: Manufacturer: syz [ 134.649603][ T6460] usb 5-1: SerialNumber: syz [ 134.656473][ T6460] usb 5-1: config 0 descriptor?? [ 134.700454][ T3529] bcm5974 2-1:0.0: could not read from device [ 134.712530][ T6460] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 134.725271][ T6460] usb 5-1: selecting invalid altsetting 1 [ 134.731370][ T6460] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 134.755458][ T6461] usb 2-1: USB disconnect, device number 5 [ 134.775993][ T3529] bcm5974 2-1:0.0: could not read from device [ 134.809770][ T6460] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.830696][ T6460] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 134.839359][ T6460] usb 5-1: media controller created [ 134.882458][ T6460] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.991162][ T6460] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 135.011789][ T6460] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 135.104256][ T6460] DVB: Unable to find symbol mxl5005s_attach() [ 135.205995][ T6460] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 135.234061][ T7467] openvswitch: netlink: Missing key (keys=48, expected=200000) [ 135.286010][ T6460] usb 5-1: USB disconnect, device number 7 [ 135.338238][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 135.480701][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.542721][ T7483] loop5: detected capacity change from 0 to 256 [ 135.690755][ T4586] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 135.740695][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 135.755727][ T7490] loop1: detected capacity change from 0 to 1024 [ 135.894456][ T7490] hfsplus: keylen 65060 too large [ 135.950353][ T4586] usb 1-1: Using ep0 maxpacket: 8 [ 136.025177][ T1107] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 136.059722][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.081576][ T1107] usb 3-1: Product: syz [ 136.085884][ T1107] usb 3-1: Manufacturer: syz [ 136.095260][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 136.111868][ T4586] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 136.122772][ T1107] usb 3-1: SerialNumber: syz [ 136.131294][ T4586] usb 1-1: config 0 has no interface number 0 [ 136.137496][ T4586] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 136.142622][ T1107] usb 3-1: config 0 descriptor?? [ 136.187790][ T4586] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 136.217226][ T1107] gspca_main: spca500-2.14.0 probing 046d:0900 [ 136.218389][ T4586] usb 1-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.244902][ T7497] overlayfs: conflicting options: nfs_export=on,index=off [ 136.316433][ T7491] loop5: detected capacity change from 0 to 40427 [ 136.443258][ T7491] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 136.459133][ T7493] loop4: detected capacity change from 0 to 32768 [ 136.460920][ T1107] gspca_spca500: reg write: error -71 [ 136.466039][ T4586] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=10.15 [ 136.480565][ T7491] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 136.489524][ T4586] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.490137][ T7491] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 136.498745][ T4586] usb 1-1: Product: syz [ 136.510949][ T4586] usb 1-1: Manufacturer: syz [ 136.515580][ T4586] usb 1-1: SerialNumber: syz [ 136.516876][ T7491] F2FS-fs (loop5): invalid crc value [ 136.528811][ T4586] usb 1-1: config 0 descriptor?? [ 136.530531][ T1107] gspca_spca500: reg write: error -71 [ 136.541504][ T7491] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.550333][ T1107] gspca_spca500: reg write: error -71 [ 136.570360][ T1107] gspca_spca500: reg write: error -71 [ 136.572179][ T4586] keyspan 1-1:0.95: Keyspan 1 port adapter converter detected [ 136.590405][ T1107] gspca_spca500: reg write: error -71 [ 136.606654][ T4586] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 87 [ 136.611496][ T1107] gspca_spca500: reg write: error -71 [ 136.617431][ T4586] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 7 [ 136.629430][ T4586] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 81 [ 136.638500][ T4586] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 1 [ 136.646552][ T4586] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 2 [ 136.665180][ T4586] keyspan 1-1:0.95: found no endpoint descriptor for endpoint 85 [ 136.670410][ T1107] gspca_spca500: reg write: error -71 [ 136.679512][ T7491] F2FS-fs (loop5): Start checkpoint disabled! [ 136.682846][ T4586] keyspan 1-1:0.95: unsupported endpoint type 0 [ 136.700413][ T1107] gspca_spca500: reg write: error -71 [ 136.727865][ T1107] gspca_spca500: reg write: error -71 [ 136.750887][ T7491] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 136.750984][ T4586] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 136.762742][ T1107] gspca_spca500: reg write: error -71 [ 136.780622][ T7491] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 136.790004][ T4586] usb 1-1: USB disconnect, device number 8 [ 136.802380][ T7505] loop1: detected capacity change from 0 to 256 [ 136.811947][ T4586] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 136.849209][ T1107] gspca_spca500: reg write: error -71 [ 136.849798][ T4586] keyspan 1-1:0.95: device disconnected [ 136.870595][ T1107] gspca_spca500: reg write: error -71 [ 136.890484][ T1107] gspca_spca500: reg write: error -71 [ 136.914710][ T1107] gspca_spca500: reg write: error -71 [ 136.941214][ T7505] FAT-fs (loop1): Directory bread(block 64) failed [ 136.947812][ T7505] FAT-fs (loop1): Directory bread(block 65) failed [ 136.998416][ T1107] usb 3-1: USB disconnect, device number 8 [ 137.010433][ T7505] FAT-fs (loop1): Directory bread(block 66) failed [ 137.017014][ T7505] FAT-fs (loop1): Directory bread(block 67) failed [ 137.058671][ T7505] FAT-fs (loop1): Directory bread(block 68) failed [ 137.076938][ T7505] FAT-fs (loop1): Directory bread(block 69) failed [ 137.125672][ T7505] FAT-fs (loop1): Directory bread(block 70) failed [ 137.134031][ T7505] FAT-fs (loop1): Directory bread(block 71) failed [ 137.174894][ T7505] FAT-fs (loop1): Directory bread(block 72) failed [ 137.194826][ T7505] FAT-fs (loop1): Directory bread(block 73) failed [ 137.238643][ T5110] attempt to access beyond end of device [ 137.238643][ T5110] loop5: rw=2049, want=40992, limit=40427 [ 137.568007][ T7521] loop1: detected capacity change from 0 to 512 [ 137.611322][ T7522] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 137.652494][ T7521] EXT4-fs (loop1): inline encryption not supported [ 137.749921][ T7521] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1260: bg 0: block 248: padding at end of block bitmap is not set [ 137.837076][ T7537] loop4: detected capacity change from 0 to 256 [ 137.856866][ T7521] Quota error (device loop1): write_blk: dquota write failed [ 137.897028][ T7521] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 137.907413][ T7521] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1260: Failed to acquire dquot type 1 [ 137.928839][ T7521] EXT4-fs (loop1): 1 truncate cleaned up [ 137.986001][ T7521] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inlinecrypt,,errors=continue. Quota mode: writeback. [ 138.016150][ T7521] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.044017][ T7521] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.1260: deleted inode referenced: 12 [ 138.170309][ T4586] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.190427][ T6460] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.326830][ T7524] loop0: detected capacity change from 0 to 32768 [ 138.460729][ T7524] XFS (loop0): Mounting V5 Filesystem [ 138.547656][ T7571] loop4: detected capacity change from 0 to 64 [ 138.555727][ T7524] XFS (loop0): Ending clean mount [ 138.587647][ T7571] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 138.599345][ T7524] XFS (loop0): Quotacheck needed: Please wait. [ 138.600542][ T4586] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 138.614745][ T4586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.646357][ T4586] usb 6-1: config 0 descriptor?? [ 138.693564][ T4586] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 138.702120][ T7524] XFS (loop0): Quotacheck: Done. [ 138.720497][ T6460] usb 3-1: New USB device found, idVendor=0a07, idProduct=00c8, bcdDevice=3a.98 [ 138.739997][ T6460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.748731][ T6460] usb 3-1: Product: syz [ 138.766220][ T6460] usb 3-1: Manufacturer: syz [ 138.777077][ T6460] usb 3-1: SerialNumber: syz [ 138.790036][ T4167] XFS (loop0): Unmounting Filesystem [ 138.796154][ T6460] usb 3-1: config 0 descriptor?? [ 138.862124][ T6460] adutux 3-1:0.0: interrupt endpoints not found [ 138.930335][ T3529] bcm5974 6-1:0.0: could not read from device [ 138.966828][ T4586] usb 6-1: USB disconnect, device number 2 [ 138.970390][ T3529] bcm5974 6-1:0.0: could not read from device [ 138.981742][ T3529] bcm5974 6-1:0.0: could not read from device [ 139.018716][ T3529] bcm5974 6-1:0.0: could not read from device [ 139.091925][ T7541] udc-core: couldn't find an available UDC or it's busy [ 139.098974][ T7541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 139.119259][ T6460] usb 3-1: USB disconnect, device number 9 [ 139.184289][ T7575] loop4: detected capacity change from 0 to 4096 [ 139.188177][ T7569] loop1: detected capacity change from 0 to 40427 [ 139.253436][ T7569] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.278883][ T7575] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 139.280473][ T7569] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.343663][ T7575] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 139.389535][ T7569] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.411298][ T7575] ntfs: volume version 3.1. [ 139.471475][ T7582] loop0: detected capacity change from 0 to 256 [ 139.499752][ T7575] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 139.535868][ T7575] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 139.540725][ T7569] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.566096][ T7569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.606982][ T7582] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 139.810343][ T4586] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 140.007940][ T7596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 140.110296][ T4586] usb 6-1: Using ep0 maxpacket: 16 [ 140.240624][ T4586] usb 6-1: config 253 has an invalid interface number: 157 but max is 3 [ 140.253704][ T4586] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 140.287590][ T4586] usb 6-1: config 253 has 1 interface, different from the descriptor's value: 4 [ 140.299606][ T4586] usb 6-1: config 253 has no interface number 0 [ 140.307881][ T7610] loop2: detected capacity change from 0 to 64 [ 140.460474][ T4586] usb 6-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 140.469842][ T4586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.488424][ T4586] usb 6-1: Product: syz [ 140.497878][ T4586] usb 6-1: Manufacturer: syz [ 140.507178][ T4586] usb 6-1: SerialNumber: syz [ 140.552984][ T4586] r8712u: register rtl8712_netdev_ops to netdev_ops [ 140.559785][ T4586] usb 6-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 140.696428][ T7628] loop1: detected capacity change from 0 to 128 [ 140.766190][ T7628] EXT4-fs (loop1): Test dummy encryption mode enabled [ 140.789978][ T7628] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 140.803784][ T7628] ext4 filesystem being mounted at /282/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.820719][ T4586] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 140.830011][ T4586] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 140.841164][ T4586] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 140.859726][ T4586] usb 6-1: USB disconnect, device number 3 [ 140.881018][ T7628] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm syz.1.1306: bg 0: bad block bitmap checksum [ 141.010049][ T7636] loop1: detected capacity change from 0 to 512 [ 141.091809][ T7636] EXT4-fs (loop1): Ignoring removed bh option [ 141.115202][ T7636] EXT4-fs error (device loop1): __ext4_iget:4872: inode #15: block 1803188595: comm syz.1.1309: invalid block [ 141.128502][ T7636] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1309: couldn't read orphan inode 15 (err -117) [ 141.151891][ T7636] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 141.384230][ T7650] netlink: 'syz.4.1314': attribute type 7 has an invalid length. [ 141.392570][ T7651] netlink: 'syz.1.1316': attribute type 8 has an invalid length. [ 141.432546][ T7655] netlink: 'syz.2.1317': attribute type 32 has an invalid length. [ 141.476595][ T7650] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1314'. [ 141.501963][ T7657] loop0: detected capacity change from 0 to 8 [ 142.003355][ T7689] netlink: 'syz.0.1334': attribute type 5 has an invalid length. [ 142.155024][ T7700] kAFS: No cell specified [ 142.435898][ T7717] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 142.470982][ T7711] loop4: detected capacity change from 0 to 4096 [ 142.662918][ T7711] ntfs: volume version 3.1. [ 143.057962][ T7746] loop2: detected capacity change from 0 to 512 [ 143.132744][ T7748] loop4: detected capacity change from 0 to 256 [ 143.162665][ T7746] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 143.181312][ T7746] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 143.245609][ T7746] EXT4-fs (loop2): 1 truncate cleaned up [ 143.251314][ T7746] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,grpquota,data_err=ignore,grpjquota="nodiscard,errors=remount-ro,nodelalloc,sysvgroups,norecovery,. Quota mode: writeback. [ 143.366644][ T7746] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 4: comm syz.2.1362: lblock 0 mapped to illegal pblock 4 (length 1) [ 143.459323][ T7746] EXT4-fs (loop2): Remounting filesystem read-only [ 143.469524][ T7740] loop0: detected capacity change from 0 to 32768 [ 143.590656][ T7740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1359 (7740) [ 143.692994][ T7740] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 143.707262][ T7759] openvswitch: netlink: EtherType 0 is less than min 600 [ 143.752158][ T7740] BTRFS info (device loop0): using free space tree [ 143.792113][ T7740] BTRFS info (device loop0): has skinny extents [ 144.028506][ T7779] loop4: detected capacity change from 0 to 512 [ 144.114703][ T7787] tmpfs: Bad value for 'mpol' [ 144.124007][ T7734] loop1: detected capacity change from 0 to 32768 [ 144.176664][ T7740] BTRFS info (device loop0): enabling ssd optimizations [ 144.199259][ T7779] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.237385][ T7779] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1373: casefold flag without casefold feature [ 144.257368][ T7779] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1373: couldn't read orphan inode 15 (err -117) [ 144.284028][ T7779] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 144.332402][ T7795] loop2: detected capacity change from 0 to 4096 [ 144.349552][ T7779] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.1373: Directory hole found for htree leaf block 0 [ 144.405592][ T7795] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 144.780979][ T7795] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 145.077016][ T7813] QAT: failed to copy from user cfg_data. [ 145.391072][ T7835] loop1: detected capacity change from 0 to 512 [ 145.471719][ T7835] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.539127][ T7835] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.572424][ T7835] EXT4-fs (loop1): 1 truncate cleaned up [ 145.578102][ T7835] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 145.615504][ T7847] tmpfs: Bad value for 'mpol' [ 145.655594][ T7841] loop0: detected capacity change from 0 to 4096 [ 145.760487][ T7849] loop5: detected capacity change from 0 to 2048 [ 145.826863][ T7841] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 145.875700][ T7841] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 146.025440][ T7841] ntfs: volume version 3.1. [ 146.097187][ T7841] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 146.131627][ T7862] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.186757][ T7841] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 146.318645][ T7849] NILFS error (device loop5): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 146.364244][ T7849] Remounting filesystem read-only [ 146.553393][ T7879] loop1: detected capacity change from 0 to 128 [ 146.574764][ T7833] loop4: detected capacity change from 0 to 32768 [ 146.643863][ T7879] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 146.719008][ T7879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.826780][ T7833] XFS (loop4): Mounting V5 Filesystem [ 146.858275][ T7898] loop0: detected capacity change from 0 to 2048 [ 146.886319][ T7900] loop2: detected capacity change from 0 to 4096 [ 146.951069][ T7898] loop0: p4 < > [ 147.001324][ T7900] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 147.030003][ T7900] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.069909][ T7833] XFS (loop4): Ending clean mount [ 147.088300][ T7833] XFS (loop4): Quotacheck needed: Please wait. [ 147.160042][ T7900] ntfs: volume version 3.1. [ 147.205174][ T7833] XFS (loop4): Quotacheck: Done. [ 147.250278][ T7913] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.275327][ T7900] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 147.337823][ T4178] XFS (loop4): Unmounting Filesystem [ 147.344267][ T7900] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 147.665788][ T7929] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 147.683600][ T7931] netlink: 'syz.5.1436': attribute type 27 has an invalid length. [ 147.932550][ T7946] loop2: detected capacity change from 0 to 256 [ 147.960698][ T7947] netlink: 491 bytes leftover after parsing attributes in process `syz.0.1455'. [ 148.163056][ T7949] loop5: detected capacity change from 0 to 4096 [ 148.211528][ T7957] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 148.224865][ T7949] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 148.251714][ T7949] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 148.266692][ T7959] loop1: detected capacity change from 0 to 64 [ 148.358416][ T7949] ntfs: volume version 3.1. [ 148.495209][ T7971] loop4: detected capacity change from 0 to 256 [ 148.561291][ T7975] loop0: detected capacity change from 0 to 1024 [ 148.635009][ T7971] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 148.699761][ T7971] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 149.023876][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1468'. [ 149.222039][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 149.341058][ T8017] sctp: [Deprecated]: syz.2.1477 (pid 8017) Use of int in maxseg socket option. [ 149.341058][ T8017] Use struct sctp_assoc_value instead [ 149.591515][ T8031] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1486'. [ 149.968355][ T8045] loop1: detected capacity change from 0 to 4096 [ 150.042546][ T8045] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 150.187434][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 150.248110][ T8065] loop2: detected capacity change from 0 to 2048 [ 150.305563][ T8071] loop4: detected capacity change from 0 to 1024 [ 150.354604][ T8071] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.363327][ T8065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.385824][ T8071] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 150.501235][ T8077] loop1: detected capacity change from 0 to 4096 [ 150.562642][ T8077] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 150.572737][ T4596] Bluetooth: hci0: command 0x0c20 tx timeout [ 150.770556][ T8095] SET target dimension over the limit! [ 150.916985][ T8105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1519'. [ 150.917508][ T8104] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1523'. [ 150.967365][ T8105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1519'. [ 150.979701][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1519'. [ 151.007935][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1519'. [ 151.021472][ T4212] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.151660][ T8115] xt_l2tp: v2 doesn't support IP mode [ 151.292384][ T4212] usb 3-1: Using ep0 maxpacket: 32 [ 151.595951][ T4212] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 151.612430][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.634301][ T4212] usb 3-1: Product: syz [ 151.638539][ T4212] usb 3-1: Manufacturer: syz [ 151.658542][ T4212] usb 3-1: SerialNumber: syz [ 151.679948][ T4212] usb 3-1: config 0 descriptor?? [ 151.786648][ T8118] loop5: detected capacity change from 0 to 32768 [ 151.823269][ T6460] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.893994][ T8118] [ 151.893994][ T8118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.893994][ T8118] [ 151.925318][ T8118] [ 151.925318][ T8118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.925318][ T8118] [ 151.938130][ T8118] [ 151.938130][ T8118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.938130][ T8118] [ 151.959543][ T8118] [ 151.959543][ T8118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.959543][ T8118] [ 151.975449][ T4212] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 151.984349][ T4212] eb 9a 47 80 9b f8 7a f0 [ 151.995669][ T8118] [ 151.995669][ T8118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 151.995669][ T8118] [ 152.013529][ T4212] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 152.023674][ T8118] [ 152.023674][ T8118] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.023674][ T8118] [ 152.030472][ T8142] loop1: detected capacity change from 0 to 32768 [ 152.046694][ T276] [ 152.046694][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.046694][ T276] [ 152.082637][ T8142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1541 (8142) [ 152.094439][ T5566] [ 152.094439][ T5566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.094439][ T5566] [ 152.107287][ T5566] [ 152.107287][ T5566] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 152.107287][ T5566] [ 152.118807][ T6460] usb 5-1: Using ep0 maxpacket: 32 [ 152.134914][ T8142] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 152.148784][ T8142] BTRFS info (device loop1): using free space tree [ 152.155338][ T8142] BTRFS info (device loop1): has skinny extents [ 152.186673][ T8142] BTRFS info (device loop1): enabling ssd optimizations [ 152.201427][ T4823] usb 3-1: USB disconnect, device number 10 [ 152.245976][ T6460] usb 5-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 152.283605][ T6460] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.318426][ T6460] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 152.334589][ T6460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.397249][ T6460] usb 5-1: config 0 descriptor?? [ 152.521214][ T6460] usb 5-1: bad CDC descriptors [ 152.539141][ T6460] usb 5-1: bad CDC descriptors [ 152.550883][ T8170] loop0: detected capacity change from 0 to 512 [ 152.602665][ T1091] block nbd5: Attempted send on invalid socket [ 152.609451][ T1091] blk_update_request: I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 152.632133][ T8172] hfsplus: unable to find HFS+ superblock [ 152.749278][ T8170] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.773996][ T8170] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1546: bg 0: block 248: padding at end of block bitmap is not set [ 152.809443][ T8170] __quota_error: 2 callbacks suppressed [ 152.809461][ T8170] Quota error (device loop0): write_blk: dquota write failed [ 152.822944][ T21] usb 5-1: USB disconnect, device number 8 [ 152.851167][ T8176] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 152.917625][ T8170] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 152.927618][ T8170] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.1546: Failed to acquire dquot type 1 [ 152.966050][ T8178] loop5: detected capacity change from 0 to 256 [ 152.992044][ T8170] EXT4-fs (loop0): 1 truncate cleaned up [ 153.005771][ T8170] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,noauto_da_alloc,nojournal_checksum,noquota,abort,nodiscard,noload,,errors=continue. Quota mode: writeback. [ 153.147677][ T8170] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.1546: corrupted xattr block 19 [ 153.595603][ T8209] loop5: detected capacity change from 0 to 2048 [ 153.639131][ T26] audit: type=1800 audit(1732107442.545:8): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1546" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 153.659198][ T8170] syz.0.1546 (8170) used greatest stack depth: 19000 bytes left [ 153.715805][ T8209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.960008][ T8233] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 154.004407][ T8233] Error parsing options; rc = [-22] [ 154.742354][ T8277] loop4: detected capacity change from 0 to 4096 [ 154.828337][ T8277] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 154.862293][ T8277] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.906290][ T8277] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 154.929938][ T8277] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.931159][ T8301] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 154.976546][ T8277] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 155.026347][ T8305] loop1: detected capacity change from 0 to 8 [ 155.051941][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.059968][ T8277] ntfs: volume version 3.1. [ 155.074160][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 155.089398][ T8277] ntfs: (device loop4): ntfs_read_locked_inode(): Inode is not in use! [ 155.138553][ T8277] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 155.316209][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 155.337386][ T8315] loop0: detected capacity change from 0 to 4096 [ 155.441362][ T8315] ntfs: volume version 3.1. [ 155.442150][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.463553][ T21] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.481209][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.657331][ T8327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.681289][ T21] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 155.717159][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.743320][ T21] usb 6-1: Product: syz [ 155.752732][ T21] usb 6-1: Manufacturer: syz [ 155.764808][ T21] usb 6-1: SerialNumber: syz [ 155.817008][ T21] usb 6-1: config 0 descriptor?? [ 155.885503][ T21] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 156.234450][ T8357] dlm: no locking on control device [ 156.351438][ T21] usb 6-1: USB disconnect, device number 4 [ 156.502792][ T8374] loop2: detected capacity change from 0 to 256 [ 156.651108][ T8374] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 156.703943][ T8390] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 156.723449][ T8374] exFAT-fs (loop2): failed to load upcase table [ 156.748319][ T8374] exFAT-fs (loop2): failed to recognize exfat type [ 157.363877][ T8426] xt_HMARK: proto mask must be zero with L3 mode [ 157.525482][ T8437] loop5: detected capacity change from 0 to 16 [ 157.608551][ T8437] erofs: (device loop5): mounted with root inode @ nid 36. [ 157.956876][ T8452] loop1: detected capacity change from 0 to 1024 [ 158.093312][ T8452] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.177762][ T8463] loop4: detected capacity change from 0 to 1024 [ 158.345255][ T8435] loop2: detected capacity change from 0 to 32768 [ 158.380413][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 158.411021][ T8469] netlink: 'syz.5.1691': attribute type 1 has an invalid length. [ 158.431385][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1691'. [ 158.481237][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 158.527636][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1690'. [ 158.542751][ T8435] XFS (loop2): Mounting V5 Filesystem [ 158.668738][ T8489] overlayfs: unrecognized mount option "fsname=/$\+" or missing value [ 158.683396][ T8435] XFS (loop2): Ending clean mount [ 158.732165][ T8492] kAFS: unable to lookup cell '(>.DzsfIvNh\D%aD'+i8BcNo~F^($)3k 8S72gՑfo$ .~' [ 158.764954][ T4166] XFS (loop2): Unmounting Filesystem [ 158.827598][ T8496] loop5: detected capacity change from 0 to 16 [ 158.932987][ T8496] erofs: (device loop5): mounted with root inode @ nid 36. [ 158.979203][ T8501] ipt_CLUSTERIP: unknown mode 1850529072 [ 159.003400][ T8496] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 159.029498][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.055449][ T8496] CIFS mount error: No usable UNC path provided in device string! [ 159.055449][ T8496] [ 159.079562][ T8496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.120395][ T8505] netlink: 'syz.4.1704': attribute type 10 has an invalid length. [ 159.191951][ T8505] team0: Device ipvlan1 failed to register rx_handler [ 159.286034][ T8510] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.528738][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1712'. [ 159.877302][ T8531] loop5: detected capacity change from 0 to 4096 [ 159.924272][ T8531] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 160.024741][ T8531] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 160.078247][ T8557] loop1: detected capacity change from 0 to 164 [ 160.197740][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 160.467534][ T8579] loop5: detected capacity change from 0 to 1024 [ 160.553622][ T8579] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 160.581064][ T8592] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 160.640199][ T8579] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 160.694466][ T8593] loop2: detected capacity change from 0 to 4096 [ 160.865655][ T8593] __ntfs_error: 19 callbacks suppressed [ 160.865674][ T8593] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 160.902370][ T8593] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 160.938028][ T8593] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 160.967842][ T8593] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 161.010865][ T8593] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 161.064274][ T8593] ntfs: volume version 3.1. [ 161.069033][ T8593] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 161.110202][ T8593] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 161.155856][ T8593] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 161.218574][ T8589] loop1: detected capacity change from 0 to 32768 [ 161.271366][ T8589] XFS: attr2 mount option is deprecated. [ 161.293132][ T8593] ntfs: (device loop2): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 161.320811][ T8593] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 161.369028][ T8629] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 161.399843][ T8589] XFS (loop1): Mounting V5 Filesystem [ 161.559647][ T8589] XFS (loop1): Ending clean mount [ 161.567514][ T8589] XFS (loop1): Quotacheck needed: Please wait. [ 161.655223][ T8589] XFS (loop1): Quotacheck: Done. [ 161.783911][ T8651] netlink: 'syz.2.1770': attribute type 2 has an invalid length. [ 161.973029][ T4165] XFS (loop1): Unmounting Filesystem [ 162.150443][ T8659] loop0: detected capacity change from 0 to 16 [ 162.194998][ T8659] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.513959][ T8671] tmpfs: Unknown parameter ',0' [ 162.922615][ T8682] loop1: detected capacity change from 0 to 4096 [ 162.930379][ T8691] loop0: detected capacity change from 0 to 512 [ 162.980617][ T8691] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 163.044092][ T8691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1791: inode #1: comm syz.0.1791: iget: illegal inode # [ 163.104092][ T8682] ntfs: volume version 3.1. [ 163.162989][ T8691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1791: error while reading EA inode 1 err=-117 [ 163.178193][ T8691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1791: inode #1: comm syz.0.1791: iget: illegal inode # [ 163.195922][ T8691] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1791: error while reading EA inode 1 err=-117 [ 163.233104][ T8691] EXT4-fs (loop0): 1 orphan inode deleted [ 163.239239][ T8691] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 163.414628][ T8715] loop4: detected capacity change from 0 to 256 [ 163.473565][ T8715] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 163.751324][ T8741] delete_channel: no stack [ 163.816862][ T1324] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 163.830683][ T8744] loop5: detected capacity change from 0 to 512 [ 163.940618][ T8744] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 163.975556][ T8744] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.109348][ T1324] usb 5-1: Using ep0 maxpacket: 32 [ 164.239363][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 100, changing to 7 [ 164.275051][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41106, setting to 1024 [ 164.310181][ T8767] loop2: detected capacity change from 0 to 4096 [ 164.369193][ T8767] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 164.473872][ T4596] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.495322][ T1324] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 164.509851][ T8767] ntfs3: loop2: failed to convert "c46c" to iso8859-6 [ 164.521603][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.529676][ T1324] usb 5-1: Product: syz [ 164.550727][ T1324] usb 5-1: Manufacturer: syz [ 164.558386][ T1324] usb 5-1: SerialNumber: syz [ 164.580498][ T8767] ntfs3: loop2: failed to convert "0030" to iso8859-6 [ 164.588843][ T1324] usb 5-1: config 0 descriptor?? [ 164.606154][ T8767] ntfs3: loop2: failed to convert "0031" to iso8859-6 [ 164.651806][ T1324] hub 5-1:0.0: bad descriptor, ignoring hub [ 164.658806][ T1324] hub: probe of 5-1:0.0 failed with error -5 [ 164.693299][ T1324] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 164.726393][ T1324] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 164.748495][ T1324] usbtouchscreen: probe of 5-1:0.0 failed with error -22 [ 164.759431][ T4596] usb 2-1: Using ep0 maxpacket: 8 [ 164.889571][ T4596] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 164.897960][ T4596] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.939512][ T4596] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.986427][ T4596] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.015582][ T4596] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.029192][ T4596] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.067227][ T4596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.155639][ T8797] loop5: detected capacity change from 0 to 8 [ 165.236752][ T1324] usb 5-1: USB disconnect, device number 9 [ 165.378303][ T8777] loop0: detected capacity change from 0 to 32768 [ 165.652745][ T1324] usb 2-1: USB disconnect, device number 6 [ 165.676941][ T8822] sctp: [Deprecated]: syz.2.1854 (pid 8822) Use of int in max_burst socket option. [ 165.676941][ T8822] Use struct sctp_assoc_value instead [ 165.710544][ T8821] loop5: detected capacity change from 0 to 256 [ 165.797226][ T8821] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 165.801533][ T8826] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 165.801533][ T8826] z,@qJ#"h/.W1ȱnNC"C׈E)8+' [ 165.986508][ T8834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.053910][ T8838] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 166.112879][ T8838] overlayfs: missing 'lowerdir' [ 166.250936][ T8848] sctp: [Deprecated]: syz.4.1867 (pid 8848) Use of int in maxseg socket option. [ 166.250936][ T8848] Use struct sctp_assoc_value instead [ 166.389961][ T8859] netlink: 'syz.1.1872': attribute type 21 has an invalid length. [ 166.788810][ T8884] loop0: detected capacity change from 0 to 8 [ 166.858229][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 166.858246][ T26] audit: type=1800 audit(1732107454.747:11): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1885" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 166.869208][ T8892] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1888'. [ 167.001549][ T8897] loop5: detected capacity change from 0 to 256 [ 167.061629][ T8903] ipt_CLUSTERIP: bad local_nodes[2] 0 [ 167.546470][ T8937] tmpfs: Bad value for 'mpol' [ 167.558001][ T8939] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 167.801239][ T8944] netlink: 'syz.5.1914': attribute type 5 has an invalid length. [ 167.880124][ T8944] netlink: 'syz.5.1914': attribute type 11 has an invalid length. [ 168.178935][ T8960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1921'. [ 168.188341][ T8946] loop0: detected capacity change from 0 to 4096 [ 168.218708][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1921'. [ 168.295808][ T8946] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 168.345885][ T8946] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 168.393648][ T8946] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 168.453845][ T8946] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 168.478387][ T8946] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 168.508348][ T8946] ntfs: volume version 3.1. [ 168.520463][ T8946] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 168.567044][ T8946] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 168.568715][ T8968] loop2: detected capacity change from 0 to 4096 [ 168.597177][ T8946] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 168.624274][ T8946] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 168.745925][ T8979] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.825283][ T8968] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 168.889035][ T8987] loop1: detected capacity change from 0 to 64 [ 168.891055][ T8968] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 168.938176][ T8968] Remounting filesystem read-only [ 168.955073][ T8968] NILFS (loop2): error -5 truncating bmap (ino=12) [ 169.053102][ T8997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1939'. [ 169.087165][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1939'. [ 169.122577][ T4166] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 169.123234][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1939'. [ 169.145782][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1939'. [ 169.164657][ T4166] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 169.190483][ T1324] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.209475][ T4166] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 169.237090][ T4166] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 169.243864][ T4166] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 169.280665][ T4166] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 169.287709][ T4166] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 169.306446][ T4166] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 169.333990][ T4166] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 169.585104][ T9023] netlink: 'syz.2.1952': attribute type 8 has an invalid length. [ 169.614970][ T9023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.851723][ T1324] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 169.860906][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.899236][ T1324] usb 6-1: Product: syz [ 169.907937][ T9036] printk: syz.4.1959 (9036): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 169.930514][ T1324] usb 6-1: Manufacturer: syz [ 169.941512][ T1324] usb 6-1: SerialNumber: syz [ 169.969568][ T1324] r8152-cfgselector 6-1: config 0 descriptor?? [ 170.127725][ T9045] loop0: detected capacity change from 0 to 2048 [ 170.242993][ T9052] loop4: detected capacity change from 0 to 16 [ 170.249843][ T9052] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 170.282381][ T9053] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.371495][ T9055] loop2: detected capacity change from 0 to 512 [ 170.377705][ T9017] loop1: detected capacity change from 0 to 32768 [ 170.419338][ T9017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1949 (9017) [ 170.462129][ T9055] EXT4-fs (loop2): Ignoring removed nobh option [ 170.515094][ T9017] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 170.534137][ T1324] r8152-cfgselector 6-1: Unknown version 0x0000 [ 170.548629][ T9017] BTRFS info (device loop1): using free space tree [ 170.555295][ T9017] BTRFS info (device loop1): has skinny extents [ 170.572647][ T1324] r8152-cfgselector 6-1: bad CDC descriptors [ 170.602164][ T9055] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 170.653529][ T9055] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.664056][ T1324] r8152-cfgselector 6-1: Unknown version 0x0000 [ 170.665948][ T1324] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 170.801398][ T9055] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.2.1967: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 170.888636][ T9055] EXT4-fs (loop2): Remounting filesystem read-only [ 170.897950][ T9055] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 170.952201][ T9017] BTRFS info (device loop1): enabling ssd optimizations [ 170.969669][ T9055] EXT4-fs (loop2): Remounting filesystem read-only [ 171.066629][ T9101] binder: 9100:9101 ioctl c00c620f 0 returned -14 [ 171.693476][ T9134] loop4: detected capacity change from 0 to 256 [ 171.700431][ T9134] exfat: Deprecated parameter 'namecase' [ 171.836336][ T9134] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 172.027899][ T9149] loop2: detected capacity change from 0 to 1024 [ 172.174762][ T9149] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.202215][ T9151] loop0: detected capacity change from 0 to 4096 [ 172.210310][ T9149] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.257658][ T9151] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 172.282022][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 172.282041][ T26] audit: type=1326 audit(1732107459.759:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.4.2008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cbfd2e819 code=0x0 [ 172.291979][ T9149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.2003: inode #262275072: comm syz.2.2003: iget: illegal inode # [ 172.365178][ T4598] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 172.408385][ T9149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.2003: error while reading EA inode 262275072 err=-117 [ 172.465792][ T9151] ntfs3: loop0: failed to convert "c46c" to cp864 [ 172.525279][ T9174] netlink: 'syz.1.2013': attribute type 4 has an invalid length. [ 172.594954][ T9176] openvswitch: netlink: Missing key (keys=100040, expected=200000) [ 172.682759][ T4598] usb 6-1: Using ep0 maxpacket: 8 [ 172.842124][ T4598] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 172.850384][ T4598] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.882015][ T9191] netlink: 'syz.1.2021': attribute type 3 has an invalid length. [ 172.885431][ T4598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.903129][ T9191] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2021'. [ 172.913993][ T4598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.925201][ T4598] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.951404][ T4598] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.992362][ T4598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.007669][ T9194] overlayfs: conflicting options: userxattr,metacopy=on [ 173.126667][ T9200] ubi0: attaching mtd0 [ 173.168929][ T9200] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 173.210083][ T4596] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 173.221298][ T9202] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2027'. [ 173.457834][ T9180] loop2: detected capacity change from 0 to 32768 [ 173.523448][ T9219] loop1: detected capacity change from 0 to 16 [ 173.532740][ T21] usb 6-1: USB disconnect, device number 6 [ 173.544663][ T9180] XFS (loop2): Mounting V5 Filesystem [ 173.599715][ T9180] XFS (loop2): Ending clean mount [ 173.645279][ T4596] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 173.654532][ T4596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.654681][ T4166] XFS (loop2): Unmounting Filesystem [ 173.673828][ T4596] usb 5-1: config 0 descriptor?? [ 173.703263][ T9219] erofs: (device loop1): mounted with root inode @ nid 36. [ 173.715182][ T9219] tmpfs: Bad value for 'size' [ 173.764524][ T4596] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 173.946050][ T9230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.132018][ T9236] xt_connbytes: Forcing CT accounting to be enabled [ 174.171446][ T9236] --map-set only usable from mangle table [ 174.250180][ T4596] gp8psk: usb in 137 operation failed. [ 174.255697][ T4596] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 174.282774][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2044'. [ 174.300074][ T4596] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 174.365125][ T4596] usb 5-1: USB disconnect, device number 10 [ 174.512858][ T9260] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2052'. [ 174.542617][ T9260] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2052'. [ 174.730023][ T9274] device geneve2 entered promiscuous mode [ 174.975941][ T8174] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 175.212823][ T9305] loop4: detected capacity change from 0 to 256 [ 175.257629][ T8174] usb 6-1: Using ep0 maxpacket: 32 [ 175.431331][ T8174] usb 6-1: unable to get BOS descriptor or descriptor too short [ 175.528790][ T8174] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 175.537476][ T8174] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 175.556567][ T8174] usb 6-1: config 255 has no interface number 0 [ 175.563699][ T8174] usb 6-1: config 255 interface 81 altsetting 3 has an invalid endpoint with address 0x93, skipping [ 175.574977][ T6454] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.583068][ T8174] usb 6-1: config 255 interface 81 has no altsetting 0 [ 175.842871][ T8174] usb 6-1: string descriptor 0 read error: -22 [ 175.849166][ T8174] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 175.889518][ T8174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.931227][ T9324] loop4: detected capacity change from 0 to 32768 [ 176.110700][ T9353] loop2: detected capacity change from 0 to 4096 [ 176.135660][ T6454] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=e1.35 [ 176.144735][ T6454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.153094][ T6454] usb 2-1: Product: syz [ 176.157363][ T6454] usb 2-1: Manufacturer: syz [ 176.161987][ T6454] usb 2-1: SerialNumber: syz [ 176.176396][ T6454] usb 2-1: config 0 descriptor?? [ 176.185918][ T9353] ntfs: volume version 3.1. [ 176.216131][ T4597] usb 6-1: USB disconnect, device number 7 [ 176.224893][ T6454] (null): radio-mr800 - initialization failed [ 176.235474][ T6454] radio-mr800: probe of 2-1:0.0 failed with error -22 [ 176.242445][ T6454] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 176.446932][ T4212] usb 2-1: USB disconnect, device number 7 [ 176.928923][ T9385] netlink: 'syz.0.2113': attribute type 3 has an invalid length. [ 176.952684][ T9385] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2113'. [ 177.006478][ T9388] loop4: detected capacity change from 0 to 1764 [ 177.094573][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 177.420348][ T9423] loop0: detected capacity change from 0 to 64 [ 177.477703][ T9428] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2134'. [ 177.806298][ T9454] loop5: detected capacity change from 0 to 1024 [ 177.893393][ T9454] hfsplus: Filesystem is marked locked, mounting read-only. [ 177.931788][ T9454] hfsplus: filesystem is marked locked, leaving read-only. [ 178.098600][ T9472] loop5: detected capacity change from 0 to 512 [ 178.200453][ T9472] EXT4-fs (loop5): orphan cleanup on readonly fs [ 178.217711][ T9476] loop4: detected capacity change from 0 to 4096 [ 178.235249][ T9472] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2155: bg 0: block 248: padding at end of block bitmap is not set [ 178.237348][ T4212] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 178.266772][ T9472] Quota error (device loop5): write_blk: dquota write failed [ 178.275355][ T9472] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 178.286863][ T9472] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.2155: Failed to acquire dquot type 1 [ 178.302606][ T9472] EXT4-fs (loop5): 1 truncate cleaned up [ 178.322781][ T9472] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,noauto_da_alloc,nojournal_checksum,noquota,abort,nodiscard,noload,,errors=continue. Quota mode: writeback. [ 178.324373][ T9476] ntfs: (device loop4): ntfs_external_attr_find(): Base inode 0x1 contains corrupt attribute list attribute. Unmount and run chkdsk. [ 178.372472][ T9476] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 178.401950][ T9472] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #15: comm syz.5.2155: corrupted xattr block 19 [ 178.408264][ T9476] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 178.472267][ T9476] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 178.585422][ T9476] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 178.647789][ T9476] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 178.649317][ T4212] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 178.681882][ T9476] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 178.703224][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.746143][ T4212] usb 2-1: config 0 descriptor?? [ 178.760736][ T9476] ntfs: volume version 3.1. [ 178.790817][ T9476] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 178.816162][ T4212] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 178.997777][ T9493] cgroup: none used incorrectly [ 179.288028][ T4212] gp8psk: usb in 137 operation failed. [ 179.293757][ T4212] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 179.326981][ T4212] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 179.357650][ T4212] usb 2-1: USB disconnect, device number 8 [ 179.648967][ T9503] loop5: detected capacity change from 0 to 128 [ 179.685801][ T9495] loop4: detected capacity change from 0 to 32768 [ 179.750175][ T9495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2167 (9495) [ 179.759087][ T9497] loop2: detected capacity change from 0 to 32768 [ 179.812780][ T9495] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 179.820083][ T9497] gfs2: quota_quantum mount option requires a positive numeric argument [ 179.831020][ T5566] sysv_free_block: flc_count > flc_size [ 179.837100][ T9495] BTRFS info (device loop4): using free space tree [ 179.844199][ T5566] sysv_free_block: flc_count > flc_size [ 179.864884][ T9495] BTRFS info (device loop4): has skinny extents [ 179.876870][ T5566] sysv_free_block: flc_count > flc_size [ 179.882481][ T5566] sysv_free_block: flc_count > flc_size [ 179.903891][ T5566] sysv_free_block: flc_count > flc_size [ 179.910146][ T5566] sysv_free_block: flc_count > flc_size [ 179.915959][ T5566] sysv_free_block: flc_count > flc_size [ 179.922527][ T5566] sysv_free_block: flc_count > flc_size [ 179.934569][ T5566] sysv_free_block: flc_count > flc_size [ 179.940562][ T5566] sysv_free_block: flc_count > flc_size [ 179.954093][ T5566] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 180.073639][ T9518] netlink: 'syz.5.2172': attribute type 10 has an invalid length. [ 180.154840][ T9495] BTRFS info (device loop4): enabling ssd optimizations [ 180.209116][ T9495] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 180.389450][ T9533] loop1: detected capacity change from 0 to 8192 [ 180.449083][ T9537] loop2: detected capacity change from 0 to 2048 [ 180.509547][ T9533] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 180.528763][ T9533] REISERFS (device loop1): using ordered data mode [ 180.535610][ T9533] reiserfs: using flush barriers [ 180.542457][ T9533] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.599462][ T9533] REISERFS (device loop1): checking transaction log (loop1) [ 180.606927][ T9539] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.621080][ T9533] REISERFS (device loop1): Using r5 hash to sort names [ 180.849891][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 181.122246][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2187'. [ 181.227663][ T9564] SET target dimension over the limit! [ 181.238619][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.281623][ T4597] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 181.444435][ T23] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.472049][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.502313][ T23] usb 6-1: Product: syz [ 181.506536][ T23] usb 6-1: Manufacturer: syz [ 181.513264][ T23] usb 6-1: SerialNumber: syz [ 181.546576][ T23] usb 6-1: config 0 descriptor?? [ 181.833632][ T9590] loop4: detected capacity change from 0 to 4096 [ 181.888461][ T4597] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5 [ 181.909149][ T4597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.928293][ T4597] usb 3-1: Product: syz [ 181.936570][ T4597] usb 3-1: Manufacturer: syz [ 181.941218][ T4597] usb 3-1: SerialNumber: syz [ 181.976953][ T4597] usb 3-1: config 0 descriptor?? [ 181.983961][ T9605] loop1: detected capacity change from 0 to 4096 [ 182.045080][ T23] usb 6-1: USB disconnect, device number 8 [ 182.047015][ T4597] comedi comedi0: Wrong number of endpoints [ 182.072206][ T9605] ntfs: volume version 3.1. [ 182.094010][ T4597] ni6501 3-1:0.0: driver 'ni6501' failed to auto-configure device. [ 182.347059][ T6461] usb 3-1: USB disconnect, device number 11 [ 182.408002][ T9617] blk_update_request: I/O error, dev loop1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 182.426558][ T4157] udevd[4157]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.432912][ T9617] gfs2: error 10 reading superblock [ 182.887039][ T9633] loop1: detected capacity change from 0 to 4096 [ 183.014488][ T9633] ntfs: volume version 3.1. [ 183.580627][ T9623] loop0: detected capacity change from 0 to 32768 [ 183.592505][ T9662] loop1: detected capacity change from 0 to 512 [ 183.649028][ T9626] loop4: detected capacity change from 0 to 32768 [ 183.686776][ T9667] loop2: detected capacity change from 0 to 1024 [ 183.736241][ T9662] EXT4-fs (loop1): orphan cleanup on readonly fs [ 183.778671][ T9667] hfsplus: bad catalog entry type [ 183.793742][ T9674] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.2242'. [ 183.840580][ T9662] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2235: bg 0: block 248: padding at end of block bitmap is not set [ 183.850393][ T9] hfsplus: b-tree write err: -5, ino 4 [ 183.940074][ T9662] __quota_error: 33 callbacks suppressed [ 183.940096][ T9662] Quota error (device loop1): write_blk: dquota write failed [ 183.979330][ T9662] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 184.021865][ T9662] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.2235: Failed to acquire dquot type 1 [ 184.063701][ T9662] EXT4-fs (loop1): 1 truncate cleaned up [ 184.081546][ T9662] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,noauto_da_alloc,nojournal_checksum,noquota,abort,nodiscard,noload,,errors=continue. Quota mode: writeback. [ 184.237306][ T9662] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.2235: corrupted xattr block 19 [ 184.374927][ T9700] device caif0 entered promiscuous mode [ 184.422514][ T9702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2255'. [ 184.584201][ T26] audit: type=1800 audit(1732107471.102:14): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2235" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 185.040999][ T1110] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 185.126290][ T9738] loop5: detected capacity change from 0 to 16 [ 185.332677][ T9742] loop4: detected capacity change from 0 to 2048 [ 185.466313][ T9742] loop4: p2 < > p3 p4 < > [ 185.470835][ T9742] loop4: partition table partially beyond EOD, truncated [ 185.491923][ T9742] loop4: p2 start 4294902784 is beyond EOD, truncated [ 185.533138][ T9742] loop4: p3 start 3724543488 is beyond EOD, truncated [ 185.601206][ T9756] loop0: detected capacity change from 0 to 8 [ 185.648268][ T1110] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=e1.35 [ 185.663414][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.702680][ T9760] loop5: detected capacity change from 0 to 256 [ 185.715026][ T1110] usb 3-1: Product: syz [ 185.730345][ T1110] usb 3-1: Manufacturer: syz [ 185.747435][ T1110] usb 3-1: SerialNumber: syz [ 185.773259][ T1110] usb 3-1: config 0 descriptor?? [ 185.796892][ T9760] FAT-fs (loop5): Directory bread(block 64) failed [ 185.810299][ T9760] FAT-fs (loop5): Directory bread(block 65) failed [ 185.817058][ T9760] FAT-fs (loop5): Directory bread(block 66) failed [ 185.825325][ T9760] FAT-fs (loop5): Directory bread(block 67) failed [ 185.844035][ T9760] FAT-fs (loop5): Directory bread(block 68) failed [ 185.855171][ T1110] (null): radio-mr800 - initialization failed [ 185.861497][ T1110] radio-mr800: probe of 3-1:0.0 failed with error -22 [ 185.882643][ T4183] udevd[4183]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 185.895103][ T9760] FAT-fs (loop5): Directory bread(block 69) failed [ 185.915244][ T1110] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 185.939173][ T9760] FAT-fs (loop5): Directory bread(block 70) failed [ 185.963532][ T9768] usb usb8: usbfs: process 9768 (syz.0.2288) did not claim interface 0 before use [ 185.981217][ T9760] FAT-fs (loop5): Directory bread(block 71) failed [ 185.993743][ T9760] FAT-fs (loop5): Directory bread(block 72) failed [ 186.011763][ T9760] FAT-fs (loop5): Directory bread(block 73) failed [ 186.024231][ T9770] loop1: detected capacity change from 0 to 1024 [ 186.083762][ T9540] usb 3-1: USB disconnect, device number 12 [ 186.194558][ T9776] loop0: detected capacity change from 0 to 512 [ 186.212804][ T9780] loop5: detected capacity change from 0 to 256 [ 186.288981][ T9780] exfat: Deprecated parameter 'namecase' [ 186.296204][ T9776] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 186.304374][ T9776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880fc018, mo2=0002] [ 186.313952][ T9776] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 186.323774][ T9776] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 186.342889][ T9776] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,nogrpid,noauto_da_alloc,noblock_validity,usrquota,jqfmt=vfsold,lazytime,barrier=0x000000000000d95a,lazytime,,errors=continue. Quota mode: writeback. [ 186.357831][ T9780] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 186.396651][ T9776] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.2293: dx entry: limit 65535 != root limit 120 [ 186.452838][ T9776] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2293: Corrupt directory, running e2fsck is recommended [ 186.731889][ T9805] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2306'. [ 186.870279][ T9820] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2312'. [ 186.936732][ T9823] loop5: detected capacity change from 0 to 1024 [ 186.947449][ T9825] loop0: detected capacity change from 0 to 256 [ 186.996532][ T9825] exfat: Deprecated parameter 'namecase' [ 187.078264][ T9825] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 187.142152][ T9833] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 187.390086][ T9845] loop1: detected capacity change from 0 to 2048 [ 187.449891][ T9851] loop4: detected capacity change from 0 to 512 [ 187.467564][ T9845] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.549028][ T9851] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.612921][ T9851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2328: bg 0: block 248: padding at end of block bitmap is not set [ 187.685762][ T9821] loop2: detected capacity change from 0 to 32768 [ 187.696233][ T9851] Quota error (device loop4): write_blk: dquota write failed [ 187.708207][ T9851] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 187.721620][ T9821] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2313 (9821) [ 187.773450][ T9851] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.2328: Failed to acquire dquot type 1 [ 187.801278][ T9821] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.839224][ T9821] BTRFS info (device loop2): using free space tree [ 187.857453][ T9821] BTRFS info (device loop2): has skinny extents [ 187.957108][ T9851] EXT4-fs (loop4): 1 truncate cleaned up [ 187.973267][ T9851] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,noauto_da_alloc,nojournal_checksum,noquota,abort,nodiscard,noload,,errors=continue. Quota mode: writeback. [ 188.030415][ T9871] loop1: detected capacity change from 0 to 256 [ 188.056625][ T9851] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.2328: corrupted xattr block 19 [ 188.104323][ T9871] exfat: Deprecated parameter 'namecase' [ 188.196307][ T9871] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 188.359077][ T26] audit: type=1800 audit(1732107474.601:15): pid=9851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2328" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 188.451741][ T9821] BTRFS info (device loop2): enabling ssd optimizations [ 188.526635][ T9821] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 188.664374][ T9897] loop4: detected capacity change from 0 to 64 [ 188.703660][ T9898] loop1: detected capacity change from 0 to 1024 [ 188.881916][ T9898] hfsplus: bad catalog entry type [ 188.949202][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.236307][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2350'. [ 189.267172][ T155] hfsplus: b-tree write err: -5, ino 4 [ 189.314519][ T9910] netlink: 'syz.2.2343': attribute type 3 has an invalid length. [ 189.355502][ T9910] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2343'. [ 189.556521][ T9874] loop0: detected capacity change from 0 to 32768 [ 189.626256][ T9922] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:0 [ 189.703012][ T9874] XFS (loop0): Mounting V5 Filesystem [ 189.790902][ T9935] loop1: detected capacity change from 0 to 256 [ 189.909900][ T9935] FAT-fs (loop1): Directory bread(block 64) failed [ 189.933764][ T9935] FAT-fs (loop1): Directory bread(block 65) failed [ 189.936792][ T9874] XFS (loop0): Ending clean mount [ 189.946756][ T9935] FAT-fs (loop1): Directory bread(block 66) failed [ 189.957969][ T9935] FAT-fs (loop1): Directory bread(block 67) failed [ 189.969114][ T9935] FAT-fs (loop1): Directory bread(block 68) failed [ 189.976094][ T9935] FAT-fs (loop1): Directory bread(block 69) failed [ 189.988337][ T9935] FAT-fs (loop1): Directory bread(block 70) failed [ 189.995067][ T9935] FAT-fs (loop1): Directory bread(block 71) failed [ 190.002011][ T9935] FAT-fs (loop1): Directory bread(block 72) failed [ 190.012149][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 190.014147][ T4217] Bluetooth: hci0: command 0x0406 tx timeout [ 190.021970][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 190.035228][ T4217] Bluetooth: hci4: command 0x0406 tx timeout [ 190.055613][ T9935] FAT-fs (loop1): Directory bread(block 73) failed [ 190.084188][ T4167] XFS (loop0): Unmounting Filesystem [ 190.504165][ T9916] loop5: detected capacity change from 0 to 32768 [ 190.646318][ T9916] gfs2: fsid=[(: Trying to join cluster "lock_nolock", "[(" [ 190.685863][ T9916] gfs2: fsid=[(: Now mounting FS (format 0)... [ 190.807756][ T9916] gfs2: fsid=[(.0: journal 0 mapped with 20 extents in 0ms [ 190.847544][ T6454] gfs2: fsid=[(.0: jid=0, already locked for use [ 190.866951][ T6454] gfs2: fsid=[(.0: jid=0: Looking at journal... [ 190.940645][ T9962] loop0: detected capacity change from 0 to 1024 [ 191.050704][ T6454] gfs2: fsid=[(.0: jid=0: Journal head lookup took 169ms [ 191.077830][ T9962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.103453][ T9979] loop4: detected capacity change from 0 to 164 [ 191.112078][ T6454] gfs2: fsid=[(.0: jid=0: Done [ 191.119222][ T9916] gfs2: fsid=[(.0: first mount done, others may mount [ 191.211094][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2378'. [ 191.221258][ T9979] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 191.567940][ T9999] loop1: detected capacity change from 0 to 64 [ 191.587947][ T9998] loop2: detected capacity change from 0 to 164 [ 191.643339][T10005] loop5: detected capacity change from 0 to 256 [ 191.679095][ T9999] attempt to access beyond end of device [ 191.679095][ T9999] loop1: rw=0, want=268435470, limit=64 [ 191.731064][ T9999] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 191.756888][ T9999] attempt to access beyond end of device [ 191.756888][ T9999] loop1: rw=0, want=268435470, limit=64 [ 191.765812][T10007] loop0: detected capacity change from 0 to 512 [ 191.776416][ T9999] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 191.901755][T10007] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 192.001527][T10007] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.062054][T10007] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 192.126179][T10007] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.164039][T10007] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 192.214475][T10007] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2401: bg 0: block 40: padding at end of block bitmap is not set [ 192.275553][T10007] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 192.326634][T10007] EXT4-fs (loop0): 1 truncate cleaned up [ 192.332528][T10007] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.380560][T10007] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 192.428665][T10033] loop2: detected capacity change from 0 to 764 [ 192.534710][T10030] loop5: detected capacity change from 0 to 8192 [ 192.551278][ T9540] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 192.595918][T10030] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.621261][T10037] loop1: detected capacity change from 0 to 1764 [ 192.650420][T10030] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 192.676886][T10030] FAT-fs (loop5): Filesystem has been set read-only [ 192.680326][T10037] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.733997][T10030] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 192.767958][T10030] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 192.937559][T10054] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 193.134384][ T9540] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 193.153365][ T9540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.192426][ T9540] usb 5-1: Product: syz [ 193.208945][ T9540] usb 5-1: Manufacturer: syz [ 193.218649][ T9540] usb 5-1: SerialNumber: syz [ 193.254518][ T9540] usb 5-1: config 0 descriptor?? [ 193.309666][ T9540] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 193.319058][T10069] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 193.326845][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2422'. [ 193.400766][T10071] loop0: detected capacity change from 0 to 1764 [ 193.435694][T10073] netlink: 'syz.2.2423': attribute type 5 has an invalid length. [ 193.522759][T10071] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 193.675541][T10086] loop1: detected capacity change from 0 to 256 [ 193.759907][T10086] FAT-fs (loop1): Directory bread(block 64) failed [ 193.784561][ T9540] sonixb 5-1:0.0: Error writing register 01: -71 [ 193.791214][ T9540] sonixb: probe of 5-1:0.0 failed with error -71 [ 193.802153][T10086] FAT-fs (loop1): Directory bread(block 65) failed [ 193.837492][ T9540] usb 5-1: USB disconnect, device number 11 [ 193.843724][T10086] FAT-fs (loop1): Directory bread(block 66) failed [ 193.861622][T10086] FAT-fs (loop1): Directory bread(block 67) failed [ 193.868934][T10086] FAT-fs (loop1): Directory bread(block 68) failed [ 193.900993][T10086] FAT-fs (loop1): Directory bread(block 69) failed [ 193.917822][T10086] FAT-fs (loop1): Directory bread(block 70) failed [ 193.947992][T10086] FAT-fs (loop1): Directory bread(block 71) failed [ 193.954668][T10086] FAT-fs (loop1): Directory bread(block 72) failed [ 194.006875][T10086] FAT-fs (loop1): Directory bread(block 73) failed [ 194.158727][T10110] netlink: 'syz.5.2441': attribute type 2 has an invalid length. [ 194.185320][T10110] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 194.378995][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 194.808612][T10141] loop2: detected capacity change from 0 to 4096 [ 194.990172][T10141] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 195.026481][T10141] ntfs3: loop2: Failed to load $Extend. [ 195.047935][T10141] ntfs3: Cannot use different iocharset when remounting! [ 195.277764][ T1091] block nbd0: Attempted send on invalid socket [ 195.287583][ T1091] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.321205][ T1091] block nbd0: Attempted send on invalid socket [ 195.327575][ T1091] blk_update_request: I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 195.339730][T10155] Mount JFS Failure: -5 [ 195.343936][T10155] jfs_mount failed w/return code = -5 [ 195.440033][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2466'. [ 195.507543][T10145] loop4: detected capacity change from 0 to 32768 [ 196.161745][T10205] (unnamed net_device) (uninitialized): option lacp_active: invalid value (6) [ 196.442155][T10225] usb usb7: usbfs: process 10225 (syz.2.2498) did not claim interface 0 before use [ 196.593518][T10222] loop1: detected capacity change from 0 to 4096 [ 197.116359][T10256] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2513'. [ 197.196022][T10193] loop5: detected capacity change from 0 to 32768 [ 197.224650][T10261] netlink: 'syz.2.2515': attribute type 1 has an invalid length. [ 197.246457][T10261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2515'. [ 197.303762][T10261] nbd: illegal input index 33022 [ 197.405527][T10193] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 197.405527][T10193] [ 197.447118][T10193] ERROR: (device loop5): remounting filesystem as read-only [ 197.469654][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 197.478779][T10193] ERROR: (device loop5): duplicateIXtree: [ 197.478779][T10193] [ 197.635362][T10277] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 197.759102][T10281] loop0: detected capacity change from 0 to 512 [ 197.862821][T10285] loop1: detected capacity change from 0 to 256 [ 197.893182][ T4596] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.094343][T10257] loop4: detected capacity change from 0 to 32768 [ 198.182745][T10257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2514 (10257) [ 198.229648][T10295] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 198.284648][T10257] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 198.318482][T10299] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2535'. [ 198.345721][ T4596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.356006][ T4596] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 198.366138][T10257] BTRFS info (device loop4): using free space tree [ 198.387446][T10257] BTRFS info (device loop4): has skinny extents [ 198.394135][ T4596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.423372][ T4596] usb 3-1: config 0 descriptor?? [ 198.467512][T10304] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.482663][ T4596] usb 3-1: bad CDC descriptors [ 198.487247][T10304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.493040][ T4596] usb 3-1: bad CDC descriptors [ 198.494710][T10304] IPv6: NLM_F_CREATE should be set when creating new route [ 198.506798][T10304] IPv6: NLM_F_CREATE should be set when creating new route [ 198.584318][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'. [ 198.685909][ T4596] usb 3-1: USB disconnect, device number 13 [ 198.706798][T10257] BTRFS info (device loop4): enabling ssd optimizations [ 198.849766][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.856204][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.151534][T10352] nfs: Unknown parameter 'smackfsroot' [ 199.237549][T10356] sctp: [Deprecated]: syz.1.2553 (pid 10356) Use of int in maxseg socket option. [ 199.237549][T10356] Use struct sctp_assoc_value instead [ 199.514197][T10369] loop2: detected capacity change from 0 to 512 [ 199.578288][T10372] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.690176][T10369] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 199.708332][T10369] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 199.722944][T10369] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 199.737928][T10369] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 199.751390][T10369] EXT4-fs (loop2): 1 truncate cleaned up [ 199.757880][T10369] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,data_err=abort,noinit_itable,nouid32,grpjquota=.subj_type=[]*:[,,errors=continue. Quota mode: writeback. [ 199.786792][T10369] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 199.800435][T10374] loop1: detected capacity change from 0 to 4096 [ 199.935927][T10374] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 199.985508][T10374] ntfs3: loop1: Failed to load $Extend. [ 200.064784][T10374] ntfs3: Cannot use different iocharset when remounting! [ 200.079829][T10398] tmpfs: Bad value for 'mpol' [ 200.144142][ T4597] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 200.317098][T10410] program syz.0.2579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.435924][T10417] damon: min_nr_regions (0) must be at least 3 [ 200.482298][T10421] loop0: detected capacity change from 0 to 2048 [ 200.503180][T10424] loop4: detected capacity change from 0 to 256 [ 200.556966][T10421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.574838][T10426] xt_CT: No such helper "pptp" [ 200.593190][T10424] FAT-fs (loop4): Directory bread(block 64) failed [ 200.633743][T10424] FAT-fs (loop4): Directory bread(block 65) failed [ 200.640815][T10424] FAT-fs (loop4): Directory bread(block 66) failed [ 200.656195][T10424] FAT-fs (loop4): Directory bread(block 67) failed [ 200.662905][T10424] FAT-fs (loop4): Directory bread(block 68) failed [ 200.670678][T10424] FAT-fs (loop4): Directory bread(block 69) failed [ 200.677827][T10424] FAT-fs (loop4): Directory bread(block 70) failed [ 200.684405][T10424] FAT-fs (loop4): Directory bread(block 71) failed [ 200.695340][T10424] FAT-fs (loop4): Directory bread(block 72) failed [ 200.723049][T10424] FAT-fs (loop4): Directory bread(block 73) failed [ 200.736392][ T4596] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 200.783247][ T4597] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 200.805617][ T4597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.835687][ T4597] usb 6-1: Product: syz [ 200.851327][ T4597] usb 6-1: Manufacturer: syz [ 200.855972][ T4597] usb 6-1: SerialNumber: syz [ 200.880301][ T4597] usb 6-1: config 0 descriptor?? [ 200.948445][ T4597] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 201.390093][ T4596] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 201.411553][ T4597] sonixb 6-1:0.0: Error writing register 01: -71 [ 201.418164][ T4597] sonixb: probe of 6-1:0.0 failed with error -71 [ 201.436117][ T4596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.451154][ T4597] usb 6-1: USB disconnect, device number 9 [ 201.479887][ T4596] usb 3-1: Product: syz [ 201.484106][ T4596] usb 3-1: Manufacturer: syz [ 201.508991][ T4596] usb 3-1: SerialNumber: syz [ 201.517398][ T4596] usb 3-1: config 0 descriptor?? [ 201.571355][ T4596] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 201.726486][ C0] sd 0:0:1:0: tag#537 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 201.736483][ C0] sd 0:0:1:0: tag#537 CDB: Test Unit Ready [ 201.742386][ C0] sd 0:0:1:0: tag#537 CDB[00]: 00 00 00 00 00 00 c8 62 b7 79 b6 eb b7 bd 33 12 [ 201.751423][ C0] sd 0:0:1:0: tag#537 CDB[10]: ba b8 5b e5 50 f7 67 9d 8e 9d 88 b8 86 ed d2 6b [ 201.760422][ C0] sd 0:0:1:0: tag#537 CDB[20]: 0f 5d 53 d0 6b 1d [ 201.846838][T10487] loop1: detected capacity change from 0 to 1024 [ 201.944980][T10487] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.079949][ T4596] usb 3-1: USB disconnect, device number 14 [ 202.411516][T10510] loop4: detected capacity change from 0 to 512 [ 202.487984][T10485] loop0: detected capacity change from 0 to 32768 [ 202.501203][T10510] EXT4-fs (loop4): inodes count not valid: 1 vs 32 [ 202.590952][T10485] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 202.590952][T10485] [ 202.628432][T10516] netlink: 476 bytes leftover after parsing attributes in process `syz.5.2629'. [ 202.636038][T10518] trusted_key: encrypted_key: master key parameter is missing [ 202.656409][T10485] ERROR: (device loop0): remounting filesystem as read-only [ 202.677248][T10485] ERROR: (device loop0): duplicateIXtree: [ 202.677248][T10485] [ 202.816110][T10527] loop1: detected capacity change from 0 to 128 [ 202.889058][T10527] FAT-fs (loop1): Directory bread(block 11554) failed [ 202.900582][T10527] FAT-fs (loop1): Directory bread(block 11555) failed [ 202.918434][T10527] FAT-fs (loop1): Directory bread(block 11556) failed [ 202.947444][T10527] FAT-fs (loop1): Directory bread(block 11557) failed [ 202.993702][T10527] FAT-fs (loop1): Directory bread(block 11558) failed [ 203.000538][T10527] FAT-fs (loop1): Directory bread(block 11559) failed [ 203.048587][T10527] FAT-fs (loop1): Directory bread(block 11560) failed [ 203.067275][T10541] loop2: detected capacity change from 0 to 8 [ 203.080059][T10527] FAT-fs (loop1): Directory bread(block 11561) failed [ 203.117727][T10527] FAT-fs (loop1): Directory bread(block 11562) failed [ 203.131443][T10541] SQUASHFS error: Unable to read directory block [629:26] [ 203.176943][T10527] FAT-fs (loop1): Directory bread(block 11563) failed [ 203.426691][ T4596] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 203.528781][T10559] loop2: detected capacity change from 0 to 64 [ 204.066252][ T4596] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 204.083335][T10579] loop2: detected capacity change from 0 to 512 [ 204.086815][ T4596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.099094][ T4596] usb 5-1: Product: syz [ 204.103301][ T4596] usb 5-1: Manufacturer: syz [ 204.107921][ T4596] usb 5-1: SerialNumber: syz [ 204.138534][ T4596] usb 5-1: config 0 descriptor?? [ 204.162519][T10553] loop1: detected capacity change from 0 to 32768 [ 204.169667][T10579] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 204.208969][ T4596] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 204.320965][T10553] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 204.320965][T10553] [ 204.340054][T10553] ERROR: (device loop1): remounting filesystem as read-only [ 204.349676][T10553] ERROR: (device loop1): duplicateIXtree: [ 204.349676][T10553] [ 204.400567][T10573] loop5: detected capacity change from 0 to 32768 [ 204.460616][T10573] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2658 (10573) [ 204.529764][T10573] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 204.543081][T10573] BTRFS info (device loop5): force zlib compression, level 3 [ 204.550604][T10573] BTRFS info (device loop5): force clearing of disk cache [ 204.563614][T10573] BTRFS info (device loop5): setting nodatasum [ 204.574223][T10573] BTRFS info (device loop5): use zlib compression, level 3 [ 204.601649][T10573] BTRFS info (device loop5): allowing degraded mounts [ 204.652998][T10573] BTRFS info (device loop5): enabling disk space caching [ 204.660084][T10573] BTRFS info (device loop5): disk space caching is enabled [ 204.682882][T10573] BTRFS info (device loop5): has skinny extents [ 204.722275][ T9540] usb 5-1: USB disconnect, device number 12 [ 204.964473][T10573] BTRFS info (device loop5): enabling ssd optimizations [ 204.975496][T10573] BTRFS info (device loop5): clearing free space tree [ 204.987573][T10573] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.051918][T10573] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.287426][T10573] BTRFS info (device loop5): balance: start -f -ssoft,usage=8,limit=0..131072 [ 205.299639][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 205.372442][T10573] BTRFS info (device loop5): relocating block group 1048576 flags system [ 205.585409][T10573] BTRFS info (device loop5): balance: ended with status: 0 [ 205.713002][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2693'. [ 205.776959][T10669] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 205.938029][T10678] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 206.269858][T10687] Restarting kernel threads ... done. [ 206.534049][T10706] netlink: set zone limit has 4 unknown bytes [ 206.928807][T10728] netlink: 'syz.0.2724': attribute type 12 has an invalid length. [ 206.937071][ T4597] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 207.116391][T10737] device ip6gre2 entered promiscuous mode [ 207.328513][T10748] Unsupported ieee802154 address type: 0 [ 207.457255][T10707] loop2: detected capacity change from 0 to 32768 [ 207.543015][T10707] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2713 (10707) [ 207.567423][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2741'. [ 207.598074][ T4597] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 207.618208][ T4597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.637843][ T4597] usb 2-1: Product: syz [ 207.652268][ T4597] usb 2-1: Manufacturer: syz [ 207.665359][T10707] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 207.668071][ T4597] usb 2-1: SerialNumber: syz [ 207.710279][ T4597] usb 2-1: config 0 descriptor?? [ 207.721405][T10707] BTRFS info (device loop2): using free space tree [ 207.739965][T10707] BTRFS info (device loop2): has skinny extents [ 207.804819][ T4597] ch341 2-1:0.0: ch341-uart converter detected [ 207.864453][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 208.018305][T10796] loop5: detected capacity change from 0 to 256 [ 208.042176][ T4597] usb 2-1: short control message received (0 < 2) [ 208.050624][ T4597] usb 2-1: failed to receive control message: -5 [ 208.057877][ T4597] ch341-uart: probe of ttyUSB0 failed with error -5 [ 208.122973][T10796] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 208.124462][T10804] loop4: detected capacity change from 0 to 512 [ 208.142682][T10707] BTRFS info (device loop2): enabling ssd optimizations [ 208.204196][T10804] EXT4-fs (loop4): Ignoring removed nobh option [ 208.453045][T10804] EXT4-fs (loop4): 1 orphan inode deleted [ 208.498550][T10804] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,nobh,noquota,resgid=0x0000000000000000,delalloc,resgid=0x0000000000000000,nombcache,delalloc,usrquota,,errors=continue. Quota mode: writeback. [ 208.529697][ T4591] usb 2-1: USB disconnect, device number 9 [ 208.536450][ T4591] ch341 2-1:0.0: device disconnected [ 208.616450][T10804] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.693852][T10804] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.2754: bad entry in directory: directory entry overrun - offset=12, inode=2, rec_len=38924, size=4096 fake=1 [ 208.788236][T10820] xt_limit: Overflow, try lower: 33554432/384 [ 208.916053][T10822] loop5: detected capacity change from 0 to 1764 [ 208.943055][T10824] loop2: detected capacity change from 0 to 512 [ 209.033589][T10824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.079224][T10822] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 209.099842][T10807] loop0: detected capacity change from 0 to 32768 [ 209.119200][T10824] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2761: bad orphan inode 15 [ 209.172694][T10824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.350712][T10807] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 209.456615][T10807] XFS (loop0): Quotacheck needed: Please wait. [ 209.629540][T10807] XFS (loop0): Quotacheck: Done. [ 209.630342][T10869] Restarting kernel threads ... done. [ 209.712695][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2781'. [ 209.868595][ T4167] XFS (loop0): Unmounting Filesystem [ 209.882118][T10882] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 209.991186][T10884] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 210.031642][T10884] overlayfs: missing 'lowerdir' [ 210.090301][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2790'. [ 210.301160][T10897] loop5: detected capacity change from 0 to 512 [ 210.386128][T10897] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 210.414840][T10897] UDF-fs: Scanning with blocksize 512 failed [ 210.438565][T10897] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 210.446436][T10897] UDF-fs: Scanning with blocksize 1024 failed [ 210.512606][T10897] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 210.520121][T10897] UDF-fs: Scanning with blocksize 2048 failed [ 210.578763][T10897] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 210.636939][T10897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.746239][T10915] loop4: detected capacity change from 0 to 512 [ 210.812831][T10914] loop2: detected capacity change from 0 to 1024 [ 210.848247][T10915] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.882783][T10919] netlink: 'syz.5.2803': attribute type 4 has an invalid length. [ 210.951834][T10914] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.2801: bad orphan inode 2097152 [ 210.974666][T10915] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 211.065322][T10914] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.100567][T10915] EXT4-fs (loop4): 1 truncate cleaned up [ 211.106271][T10915] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.160421][T10914] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.2801: reserved inode found cleared - inode=18 [ 211.990390][T10973] loop4: detected capacity change from 0 to 2048 [ 211.996008][T10975] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 212.149126][T10984] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.227798][T10973] NILFS (loop4): error -2 truncating bmap (ino=16) [ 212.321549][T10973] syz.4.2825 (10973) used greatest stack depth: 18736 bytes left [ 212.407977][T10940] loop5: detected capacity change from 0 to 32768 [ 212.543989][T11001] loop2: detected capacity change from 0 to 256 [ 212.621226][T10940] XFS (loop5): Mounting V5 Filesystem [ 212.622800][T11013] loop4: detected capacity change from 0 to 256 [ 212.654281][T11001] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 212.686166][T11020] netlink: 432 bytes leftover after parsing attributes in process `syz.1.2845'. [ 212.731516][T11022] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34504) [ 212.742120][T11022] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 212.801442][T10940] XFS (loop5): Ending clean mount [ 212.824855][T11013] FAT-fs (loop4): Directory bread(block 64) failed [ 212.847092][T11013] FAT-fs (loop4): Directory bread(block 65) failed [ 212.854315][T11013] FAT-fs (loop4): Directory bread(block 66) failed [ 212.866969][T11013] FAT-fs (loop4): Directory bread(block 67) failed [ 212.873840][T11013] FAT-fs (loop4): Directory bread(block 68) failed [ 212.884777][ T5566] XFS (loop5): Unmounting Filesystem [ 212.891495][T11013] FAT-fs (loop4): Directory bread(block 69) failed [ 212.898558][T11013] FAT-fs (loop4): Directory bread(block 70) failed [ 212.905327][T11013] FAT-fs (loop4): Directory bread(block 71) failed [ 212.922404][T11013] FAT-fs (loop4): Directory bread(block 72) failed [ 212.944026][T11013] FAT-fs (loop4): Directory bread(block 73) failed [ 213.652313][T11056] device bond4 entered promiscuous mode [ 213.658803][T11056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.751760][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.859673][T11067] netlink: 'syz.5.2868': attribute type 11 has an invalid length. [ 213.879761][T11067] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.2868'. [ 213.988060][T11040] loop1: detected capacity change from 0 to 32768 [ 213.992692][T11075] netlink: 'syz.2.2872': attribute type 1 has an invalid length. [ 214.014353][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 214.095583][T11040] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 214.141876][ T23] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.148992][T11040] XFS (loop1): Quotacheck needed: Please wait. [ 214.150958][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.177638][ T23] usb 5-1: config 0 descriptor?? [ 214.218834][ T23] cp210x 5-1:0.0: cp210x converter detected [ 214.264130][T11040] XFS (loop1): Quotacheck: Done. [ 214.385525][ T4165] XFS (loop1): Unmounting Filesystem [ 214.389157][T11099] loop5: detected capacity change from 0 to 128 [ 214.515084][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.583836][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.595406][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.604136][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.612645][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.621654][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.630381][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.638868][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.672725][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.688412][ T23] usb 5-1: cp210x converter now attached to ttyUSB0 [ 214.696443][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.711929][ T23] usb 5-1: USB disconnect, device number 13 [ 214.727281][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.736538][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.759584][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.762991][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 214.768066][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.808508][ T23] cp210x 5-1:0.0: device disconnected [ 214.826497][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.836671][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.849183][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.867289][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.867394][ T4217] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 214.885209][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.897080][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.920499][T11111] loop1: detected capacity change from 0 to 512 [ 214.922017][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.939542][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.948599][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.957983][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.967018][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.975690][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 214.984548][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.003069][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.011803][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.011883][T11111] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 215.021082][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.037173][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.040669][T11111] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2886: bad orphan inode 15 [ 215.045823][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.045855][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.045880][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.045904][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.093906][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.102666][T11111] ext4_test_bit(bit=14, block=4) = 1 [ 215.102716][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.108947][T11111] is_bad_inode(inode)=0 [ 215.116544][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.129564][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.139148][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.147823][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.156710][T11099] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 215.160153][T11111] NEXT_ORPHAN(inode)=0 [ 215.169271][T11111] max_ino=32 [ 215.188586][T11111] i_nlink=1 [ 215.191789][T11111] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,jqfmt=vfsold,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 215.218020][ T26] audit: type=1800 audit(1732107499.355:16): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2880" name="file1" dev="loop5" ino=1048629 res=0 errno=0 [ 215.414790][ T4217] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 215.439692][ T4217] usb 3-1: config 0 has no interface number 0 [ 215.471536][ T4217] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 215.504928][ T4217] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 215.536678][ T4217] usb 3-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 215.564379][ T4217] usb 3-1: config 0 interface 128 has no altsetting 0 [ 215.700880][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 215.764321][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 215.792157][ T4217] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 215.819751][ T4217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.850233][ T4217] usb 3-1: Product: syz [ 215.860440][ T4217] usb 3-1: Manufacturer: syz [ 215.871306][ T4217] usb 3-1: SerialNumber: syz [ 215.922122][ T4217] usb 3-1: config 0 descriptor?? [ 215.965131][ T4217] radio-si470x 3-1:0.128: could not find interrupt in endpoint [ 215.987149][ T4217] radio-si470x: probe of 3-1:0.128 failed with error -5 [ 216.020881][ T4217] usbhid 3-1:0.128: couldn't find an input interrupt endpoint [ 216.187477][ T4217] usb 3-1: USB disconnect, device number 15 [ 216.307425][T11164] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 216.501593][T11173] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 216.589364][T11127] loop5: detected capacity change from 0 to 32768 [ 216.651183][T11182] netlink: 'syz.4.2920': attribute type 4 has an invalid length. [ 216.822752][T11127] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 216.868833][T11196] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 216.944607][T11127] XFS (loop5): Quotacheck needed: Please wait. [ 217.021735][T11209] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2930'. [ 217.068901][T11127] XFS (loop5): Quotacheck: Done. [ 217.183391][ T5566] XFS (loop5): Unmounting Filesystem [ 217.185126][T11227] kAFS: No cell specified [ 218.229860][T11272] loop2: detected capacity change from 0 to 1024 [ 218.237839][T11223] loop4: detected capacity change from 0 to 32768 [ 218.295139][T11223] XFS: attr2 mount option is deprecated. [ 218.407202][T11223] XFS (loop4): Mounting V5 Filesystem [ 218.437717][ T6079] hfsplus: b-tree write err: -5, ino 4 [ 218.444853][T11289] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2965'. [ 218.486356][ T3814] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.503826][T11238] loop0: detected capacity change from 0 to 40427 [ 218.525208][T11223] XFS (loop4): Ending clean mount [ 218.555442][T11223] XFS (loop4): Quotacheck needed: Please wait. [ 218.654584][T11300] loop2: detected capacity change from 0 to 1024 [ 218.669325][T11223] XFS (loop4): Quotacheck: Done. [ 218.676659][T11238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 218.731053][ T4178] XFS (loop4): Unmounting Filesystem [ 218.757248][ T3814] usb 2-1: Using ep0 maxpacket: 8 [ 218.851699][T11238] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 218.862377][T11238] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 218.936058][T11238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 218.982947][ T3814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.009358][ T3814] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.022478][ T3814] usb 2-1: config 1 has no interface number 1 [ 219.036482][ T3814] usb 2-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 219.083604][ T3814] usb 2-1: config 1 interface 2 has no altsetting 0 [ 219.121771][T11314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.296355][ T3814] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.309883][ T3814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.317935][ T3814] usb 2-1: Product: syz [ 219.342349][ T3814] usb 2-1: Manufacturer: syz [ 219.347035][ T3814] usb 2-1: SerialNumber: syz [ 219.450537][ T1324] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 219.753870][ T1324] usb 6-1: Using ep0 maxpacket: 32 [ 219.830149][ T3814] usb 2-1: USB disconnect, device number 10 [ 219.894962][ T1324] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 219.935539][ T1324] usb 6-1: config 0 has no interface number 0 [ 220.005766][T11320] loop2: detected capacity change from 0 to 32768 [ 220.076384][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.133166][ T1324] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 220.163303][T11320] JBD2: Ignoring recovery information on journal [ 220.191364][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.219776][ T1324] usb 6-1: Product: syz [ 220.238919][ T1324] usb 6-1: Manufacturer: syz [ 220.284579][T11320] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 220.290324][ T1324] usb 6-1: SerialNumber: syz [ 220.343839][T11356] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 220.354328][T11320] [ 220.356693][T11320] ====================================================== [ 220.363772][T11320] WARNING: possible circular locking dependency detected [ 220.370804][T11320] 5.15.173-syzkaller #0 Not tainted [ 220.376014][T11320] ------------------------------------------------------ [ 220.383050][T11320] syz.2.2980/11320 is trying to acquire lock: [ 220.389136][T11320] ffff888060e1bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x398/0x930 [ 220.398492][T11320] [ 220.398492][T11320] but task is already holding lock: [ 220.405876][T11320] ffff8880239a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570 [ 220.415232][T11320] [ 220.415232][T11320] which lock already depends on the new lock. [ 220.415232][T11320] [ 220.418217][T11363] netlink: 'syz.4.2998': attribute type 15 has an invalid length. [ 220.425758][T11320] [ 220.425758][T11320] the existing dependency chain (in reverse order) is: [ 220.425772][T11320] [ 220.425772][T11320] -> #5 (jbd2_handle){++++}-{0:0}: [ 220.425809][T11320] lock_acquire+0x1db/0x4f0 [ 220.425833][T11320] start_this_handle+0x12e1/0x1570 [ 220.460851][T11320] jbd2__journal_start+0x2d1/0x5c0 [ 220.463305][ T1324] usb 6-1: config 0 descriptor?? [ 220.466643][T11320] jbd2_journal_start+0x25/0x30 [ 220.466685][T11320] ocfs2_start_trans+0x3c2/0x6f0 [ 220.466705][T11320] ocfs2_modify_bh+0xe9/0x4c0 [ 220.487648][T11320] ocfs2_local_read_info+0x1587/0x19e0 [ 220.493789][T11320] dquot_load_quota_sb+0x754/0xb90 [ 220.499455][T11320] dquot_load_quota_inode+0x318/0x600 [ 220.505383][T11320] ocfs2_enable_quotas+0x165/0x440 [ 220.511072][T11320] ocfs2_fill_super+0x440e/0x58a0 [ 220.516651][T11320] mount_bdev+0x2c9/0x3f0 [ 220.521537][T11320] legacy_get_tree+0xeb/0x180 [ 220.526775][T11320] vfs_get_tree+0x88/0x270 [ 220.531784][T11320] do_new_mount+0x2ba/0xb40 [ 220.536834][T11320] __se_sys_mount+0x2d5/0x3c0 [ 220.542066][T11320] do_syscall_64+0x3b/0xb0 [ 220.547033][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.553476][T11320] [ 220.553476][T11320] -> #4 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 220.562019][T11320] lock_acquire+0x1db/0x4f0 [ 220.567074][T11320] down_read+0x45/0x2e0 [ 220.571779][T11320] ocfs2_start_trans+0x3b7/0x6f0 [ 220.577263][T11320] ocfs2_modify_bh+0xe9/0x4c0 [ 220.582666][T11320] ocfs2_local_read_info+0x1587/0x19e0 [ 220.588678][T11320] dquot_load_quota_sb+0x754/0xb90 [ 220.594428][T11320] dquot_load_quota_inode+0x318/0x600 [ 220.600350][T11320] ocfs2_enable_quotas+0x165/0x440 [ 220.606232][T11320] ocfs2_fill_super+0x440e/0x58a0 [ 220.611818][T11320] mount_bdev+0x2c9/0x3f0 [ 220.616808][T11320] legacy_get_tree+0xeb/0x180 [ 220.622049][T11320] vfs_get_tree+0x88/0x270 [ 220.627142][T11320] do_new_mount+0x2ba/0xb40 [ 220.632197][T11320] __se_sys_mount+0x2d5/0x3c0 [ 220.637417][T11320] do_syscall_64+0x3b/0xb0 [ 220.642378][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.649280][T11320] [ 220.649280][T11320] -> #3 (sb_internal#3){.+.+}-{0:0}: [ 220.656779][T11320] lock_acquire+0x1db/0x4f0 [ 220.661821][T11320] ocfs2_start_trans+0x2b2/0x6f0 [ 220.667303][T11320] ocfs2_reserve_suballoc_bits+0x9ec/0x4c70 [ 220.673884][T11320] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 220.680774][T11320] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 220.686958][T11320] ocfs2_xattr_set+0xf46/0x1930 [ 220.692359][T11320] __vfs_setxattr+0x3e7/0x420 [ 220.697587][T11320] __vfs_setxattr_noperm+0x12a/0x5e0 [ 220.703491][T11320] vfs_setxattr+0x21d/0x420 [ 220.708549][T11320] setxattr+0x27e/0x2e0 [ 220.713259][T11320] path_setxattr+0x1bc/0x2a0 [ 220.718392][T11320] __x64_sys_lsetxattr+0xb4/0xd0 [ 220.723903][T11320] do_syscall_64+0x3b/0xb0 [ 220.728878][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.735324][T11320] [ 220.735324][T11320] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 220.745868][T11320] lock_acquire+0x1db/0x4f0 [ 220.750925][T11320] down_write+0x38/0x60 [ 220.755632][T11320] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 220.762076][T11320] ocfs2_reserve_clusters_with_limit+0x3d9/0xb50 [ 220.768950][T11320] ocfs2_reserve_suballoc_bits+0x9d0/0x4c70 [ 220.775380][T11320] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 220.782267][T11320] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 220.788450][T11320] ocfs2_xattr_set+0xf46/0x1930 [ 220.793852][T11320] __vfs_setxattr+0x3e7/0x420 [ 220.799076][T11320] __vfs_setxattr_noperm+0x12a/0x5e0 [ 220.804910][T11320] vfs_setxattr+0x21d/0x420 [ 220.809963][T11320] setxattr+0x27e/0x2e0 [ 220.814653][T11320] path_setxattr+0x1bc/0x2a0 [ 220.819908][T11320] __x64_sys_lsetxattr+0xb4/0xd0 [ 220.825389][T11320] do_syscall_64+0x3b/0xb0 [ 220.830375][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.836858][T11320] [ 220.836858][T11320] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 220.837494][ T1324] radio-si470x 6-1:0.35: this is not a si470x device. [ 220.847373][T11320] lock_acquire+0x1db/0x4f0 [ 220.847403][T11320] down_write+0x38/0x60 [ 220.847423][T11320] ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 220.847447][T11320] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 220.877085][T11320] ocfs2_init_xattr_set_ctxt+0x38f/0x8c0 [ 220.883549][T11320] ocfs2_xattr_set+0xf46/0x1930 [ 220.888945][T11320] __vfs_setxattr+0x3e7/0x420 [ 220.894162][T11320] __vfs_setxattr_noperm+0x12a/0x5e0 [ 220.900018][T11320] vfs_setxattr+0x21d/0x420 [ 220.905081][T11320] setxattr+0x27e/0x2e0 [ 220.910127][T11320] path_setxattr+0x1bc/0x2a0 [ 220.915256][T11320] __x64_sys_lsetxattr+0xb4/0xd0 [ 220.920709][T11320] do_syscall_64+0x3b/0xb0 [ 220.925772][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.932192][T11320] [ 220.932192][T11320] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 220.940004][T11320] validate_chain+0x1649/0x5930 [ 220.945458][T11320] __lock_acquire+0x1295/0x1ff0 [ 220.950840][T11320] lock_acquire+0x1db/0x4f0 [ 220.955899][T11320] down_read+0x45/0x2e0 [ 220.960572][T11320] ocfs2_init_acl+0x398/0x930 [ 220.965785][T11320] ocfs2_mknod+0x1e8f/0x2cd0 [ 220.970913][T11320] vfs_mknod+0x444/0x4d0 [ 220.975686][T11320] do_mknodat+0x392/0x690 [ 220.980550][T11320] __x64_sys_mknod+0x8a/0xa0 [ 220.985768][T11320] do_syscall_64+0x3b/0xb0 [ 220.990717][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.997562][T11320] [ 220.997562][T11320] other info that might help us debug this: [ 220.997562][T11320] [ 221.008929][T11320] Chain exists of: [ 221.008929][T11320] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 221.008929][T11320] [ 221.022741][T11320] Possible unsafe locking scenario: [ 221.022741][T11320] [ 221.030204][T11320] CPU0 CPU1 [ 221.035591][T11320] ---- ---- [ 221.040969][T11320] lock(jbd2_handle); [ 221.045061][T11320] lock(&journal->j_trans_barrier); [ 221.052897][T11320] lock(jbd2_handle); [ 221.059494][T11320] lock(&oi->ip_xattr_sem); [ 221.064110][T11320] [ 221.064110][T11320] *** DEADLOCK *** [ 221.064110][T11320] [ 221.072266][T11320] 8 locks held by syz.2.2980/11320: [ 221.077548][T11320] #0: ffff888147f54460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 221.086820][T11320] #1: ffff888060e1c2c8 (&type->i_mutex_dir_key#13/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 221.097537][T11320] #2: ffff88805f1bc2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 221.108337][ T1324] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 221.111207][T11320] #3: ffff888060e1d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70 [ 221.131994][T11320] #4: ffff88805f1b89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x12e/0x27a0 [ 221.145957][T11320] #5: ffff888147f54650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0x15bb/0x2cd0 [ 221.155297][T11320] #6: ffff888024cec8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3b7/0x6f0 [ 221.166001][T11320] #7: ffff8880239a0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570 [ 221.175703][T11320] [ 221.175703][T11320] stack backtrace: [ 221.181613][T11320] CPU: 1 PID: 11320 Comm: syz.2.2980 Not tainted 5.15.173-syzkaller #0 [ 221.189865][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 221.199977][T11320] Call Trace: [ 221.203358][T11320] [ 221.206283][T11320] dump_stack_lvl+0x1e3/0x2d0 [ 221.210970][T11320] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 221.216630][T11320] ? print_circular_bug+0x12b/0x1a0 [ 221.221852][T11320] check_noncircular+0x2f8/0x3b0 [ 221.226830][T11320] ? add_chain_block+0x850/0x850 [ 221.230854][ T1324] usb 6-1: USB disconnect, device number 10 [ 221.231794][T11320] ? lockdep_lock+0x11f/0x2a0 [ 221.242389][T11320] ? reacquire_held_locks+0x660/0x660 [ 221.247795][T11320] validate_chain+0x1649/0x5930 [ 221.252675][T11320] ? lockdep_init_map_type+0x9d/0x8d0 [ 221.258074][T11320] ? mark_lock+0x98/0x340 [ 221.262430][T11320] ? reacquire_held_locks+0x660/0x660 [ 221.267810][T11320] ? __lock_acquire+0x1295/0x1ff0 [ 221.272869][T11320] ? mark_lock+0x98/0x340 [ 221.277214][T11320] __lock_acquire+0x1295/0x1ff0 [ 221.282071][T11320] lock_acquire+0x1db/0x4f0 [ 221.286582][T11320] ? ocfs2_init_acl+0x398/0x930 [ 221.291435][T11320] ? read_lock_is_recursive+0x10/0x10 [ 221.296828][T11320] ? __might_sleep+0xc0/0xc0 [ 221.301447][T11320] ? trace_ocfs2_claim_new_inode_at_loc+0x1e0/0x1e0 [ 221.308055][T11320] ? set_current_blocked+0x40/0x40 [ 221.313162][T11320] down_read+0x45/0x2e0 [ 221.317330][T11320] ? ocfs2_init_acl+0x398/0x930 [ 221.322176][T11320] ocfs2_init_acl+0x398/0x930 [ 221.326864][T11320] ? ocfs2_mknod_locked+0x21e/0x3a0 [ 221.332089][T11320] ? ocfs2_acl_chmod+0x360/0x360 [ 221.337033][T11320] ? ocfs2_start_trans+0x4dc/0x6f0 [ 221.342148][T11320] ? __ocfs2_abort+0x230/0x230 [ 221.346912][T11320] ? ocfs2_init_security_get+0x130/0x190 [ 221.352554][T11320] ocfs2_mknod+0x1e8f/0x2cd0 [ 221.357149][T11320] ? ocfs2_mkdir+0x430/0x430 [ 221.361740][T11320] ? reacquire_held_locks+0x660/0x660 [ 221.367127][T11320] ? mark_lock+0x98/0x340 [ 221.371471][T11320] ? __lock_acquire+0x1295/0x1ff0 [ 221.376518][T11320] ? __lock_acquire+0x1295/0x1ff0 [ 221.381566][T11320] ? rcu_lock_release+0x5/0x20 [ 221.386372][T11320] ? __lock_acquire+0x1ff0/0x1ff0 [ 221.391401][T11320] ? bpf_lsm_inode_mknod+0x5/0x10 [ 221.396437][T11320] ? security_inode_mknod+0xc6/0x110 [ 221.401723][T11320] vfs_mknod+0x444/0x4d0 [ 221.405965][T11320] do_mknodat+0x392/0x690 [ 221.410310][T11320] ? __phys_addr_symbol+0x2b/0x70 [ 221.415351][T11320] ? 0xffffffff81000000 [ 221.419544][T11320] ? may_open+0x400/0x400 [ 221.423874][T11320] ? getname_flags+0x1ec/0x4e0 [ 221.428645][T11320] __x64_sys_mknod+0x8a/0xa0 [ 221.433242][T11320] do_syscall_64+0x3b/0xb0 [ 221.437676][T11320] ? clear_bhb_loop+0x15/0x70 [ 221.442379][T11320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.448277][T11320] RIP: 0033:0x7fbcd53f7819 [ 221.452864][T11320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.472480][T11320] RSP: 002b:00007fbcd326f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 221.480916][T11320] RAX: ffffffffffffffda RBX: 00007fbcd55aefa0 RCX: 00007fbcd53f7819 [ 221.488898][T11320] RDX: 0000000000000705 RSI: 0000000000006000 RDI: 0000000020000080 [ 221.496887][T11320] RBP: 00007fbcd546a75e R08: 0000000000000000 R09: 0000000000000000 [ 221.504865][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.512851][T11320] R13: 0000000000000000 R14: 00007fbcd55aefa0 R15: 00007ffe6542cad8 [ 221.520856][T11320] [ 221.572502][ T4166] ocfs2: Unmounting device (7,2) on (node local) [ 228.832973][ T7802] Bluetooth: hci3: command 0x0406 tx timeout