last executing test programs: 3m12.535847567s ago: executing program 3 (id=1358): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="978738", 0x3}], 0x1, 0x0, 0x0, 0x3000000}, 0x2400c045) 3m12.453151144s ago: executing program 3 (id=1360): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000064a000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000699000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000734000/0x2000)=nil, &(0x7f0000b27000/0x4000)=nil, 0x0}, 0x68) 3m12.26278358s ago: executing program 3 (id=1363): syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {@nodecompose}, {@umask}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@force}, {@nobarrier}, {@nobarrier}]}, 0x0, 0x718, &(0x7f00000011c0)="$eJzs3U9sW3cdAPDvsx0n7kTqbe02EFKjVVSwQpvEjBYJiTIhlMOEKu3AOJo2WaM4WZVkKK0QzYDBEU6ohx2GUDjshHZAGuKAGGckpN17r8S92gGj9/zs2E7i2M2/rnw+0sv7vfd+f77vm/d+sZ9bOYD/W3NvxthmJDF38fWNdPvBVq3xYKu23C5HxHhEFCJKrVUkKxHJJxHXorXEF9OdeXfJXuO8+vDj9y/c/7DW2irlS1a/MKjdtuaAETbzJaYiopivR1Taq78b8dqO/u6N1HXSiTtN2Pl24uCkNZvNpLVq2xyl+RD3LfCkuxdRHNtlfzXiVERM5K8DIp8dCscc3qEbaZYDAACAJ1NxvwqnH8Wj2IjJ4wkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAng5J6zsDk3wptMtTkbS//7+c70uVyycc72Bf3+f4ewvHFAgAAAAAAAAAHJZmsWvjo/yD+3OP4lFsxGSnUpJ95v9ytnEm+/lMvBNrMR+rcSk2oh7rsR6rMRMxNtnVYXmjvr6+OrOz5e8jbdlsNu/lLWcjorqj5ewRnjkAAAAAAAAAPP1+EXMxedJBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAtySi2Fply5l2uRqFUkRMREQ5rbcZ8bd2+fPs7ycdAAAAABy9Sr6eTP7bKjST7D3/C9n7/ol4J1ZiPRZjPRoxHzezZwGtd/2Ff2/WGg+2asvpsrPj7/1npDiyHiOiGO/uMfJ0VuNsp8Vc/CDeiIsxFddjNRbjp1GP9ZiPqaikJxH1SKJaaT29qLbj3D3eaz1b1/tjO9e3/VIWSSUWYjGL7VLcKEfrsUl2DumYL3WN9pdyRN+I76bZSb6bGzJHN7t+X7/Ln8vkmqeH7ONoVLMzH+tkZDrNfZ6NZwfnfsTrpH+kmSh0nkGd2R4l3cxH+qyZH27n/Cej5PxUvk5z/evenB+2ER+l9WdiNgr51RfxQm/Ob3/l/nO9jb/26T+u3yqsLN1aWLt4hKd0EFP7VRhrF/ozUevKxIuDr748E400E5vDZ2Ksf8fEsC2PVjnPRjYVDTlbfj8r1ePlrkvw7bgZ83ElpmMmrsZ0fDtmo9a5wtLlbE9eS7Xl3pxk91ph5/xWGRD8+a92VfrNPpWP0o927Enz8mxXXrtnump2LN9z7bcx3XX1PTf46hv5r0A6/pfycjrGLzt/cZ4EPZnI5+Z2dM8PzsQfskl6rbGytHqrfnvI8S7k6/S2fa93bv7j8FH3/3U/DOn1ks64pWwry0mlfb2kx57vRNubr3L+iUurXWHHsbOdY9WYjMX44Z53ajl/Dbezp9axF7uOfSGPOp05y/nrm/axnlc58XY0slchffadqgE4ZqdeOVWuPKz8q/JB5VeVW5XXJ14bvzr+5XKM/bP01+KfC38qfCd5JT6In8fkSUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPg7U7d5fqjcb8aqcQE/17Dloo7znW4EIU9q2z9cxwHUY1YvBYSV4oH+65H15hPM9ivueN7UOfHvJYlejb0/6GpYP2/FFEDKhTPnDwydDX2OnHHaLrV3CwbLS/OC3b0yyO0LzUbrV7nVKsTcRSPSntcseNb98FUV2qNz5r9jSvRNctAzzlLq8v3768dufuNxaX62/NvzW/Mnv1ytUrtW/NfPPywmJjfrr186SjBI7C2p27xSGrLvz4iGMBAAAAAAAAAAAAhpP/6//1x/7PDKV96pRX13Yf+dxxnyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOTX3ZoxtRhIz05em0+0HW7VGurTL2zVLEVGIiORnEcknEdeitUS1q7tkr3Feffjx+xfuf1jb7qvUrl8Y1G44m/kSUxFRzNf7G9+lm5393ejqb/Oxwks6Z5gm7Hw7cXDS/hcAAP//OonviA==") lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 3m12.055224279s ago: executing program 3 (id=1367): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x8, 0x1cc, &(0x7f00000006c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3m11.705669799s ago: executing program 3 (id=1375): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0x0, 0x800}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd=r0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 3m5.607194469s ago: executing program 3 (id=1469): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) 3m5.430718885s ago: executing program 32 (id=1469): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) 2.089829345s ago: executing program 0 (id=4467): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000004100)='./file0\x00', 0x1010000, &(0x7f0000002300)={[{@shortname_winnt}, {@numtail}, {@uni_xlate}, {@rodir}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@utf8}]}, 0x1, 0x371, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.507846797s ago: executing program 2 (id=4475): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5524866109fb7c41d265f50e8e24c37e", 0x10) 1.411647665s ago: executing program 2 (id=4477): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x340, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 1.204631294s ago: executing program 2 (id=4480): r0 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, &(0x7f00000002c0), 0x2, 0x2) 1.204049144s ago: executing program 0 (id=4481): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES8=0x0], 0x21, 0x1cd, &(0x7f0000000280)="$eJzsVT+PEkEU/w07LGih1saEQqJYCMuixsZIZfgSRgmsSFz8w5IohMS14nvY8DUs7G1MNDGx0UJNLDC2BvNm3uB4cOHuOHJ3yfySvd+8vzNv3vHmYfIsAYA/s3ELdSj4OINPQkACKAitu5PT/MPXXGb5m9R8hfWvmeeMZDh61IzjqL/FxWpbRh8E+8lI/jtN72d3z67KI+T6hB/hY8vFq4WHDcLFAS5q7QKpTrr92o/N4p5nSqbiN034+7AOVtjtf2Nd3+UeuozlLufpN3QULRDLpn/i7VcZ/FQVf5iNW7S4z1OKdG39CduHuvnW8jkv1Sc8zBc+NPxIuAygMug9rSTD0dVur9mJOtHjMKzdCK4FwfWw8qAbR4H+K6wtzIgirt/KgWbqKcueBfCZB+xpWPhuIvXR2C7sWJrDcx7SpYv4DxmrLMMCbxaxHAa6gjwugVr6PBWWtqiySKiSGhDwlMBD/yVfi94rr7zKrSdxewKh9lNhU0idI7twlfBhCeRWu5ka1YS5yNxgnjJ/YTZvlnmLpMrwlaVSSjf6ojkY9Kv+Ow6p0qundKFvrOG51L4w2vUX5zDFXcjBwcHBwcHBweGE4W8AAAD//0r3TsU=") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.109879762s ago: executing program 2 (id=4483): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf25020000000000000000000000080002"], 0x24}}, 0x20000050) 1.065164896s ago: executing program 1 (id=4485): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[r1], 0x1}) 960.717506ms ago: executing program 2 (id=4486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x800001, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 909.45663ms ago: executing program 5 (id=4487): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 908.98374ms ago: executing program 1 (id=4488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 867.563274ms ago: executing program 0 (id=4489): r0 = syz_open_dev$media(&(0x7f0000000000), 0xfc0, 0x8a040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f00000002c0), 0x0, 0x0) 798.215859ms ago: executing program 2 (id=4490): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 766.293912ms ago: executing program 1 (id=4491): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019", 0x21}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) 755.106284ms ago: executing program 5 (id=4492): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00d8f714000000002f1eafbcf706e1050000008847000f1102ee1680ca8286cee84400", 0x26}], 0x1}, 0x0) 710.516348ms ago: executing program 0 (id=4493): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 635.506334ms ago: executing program 5 (id=4494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfaa}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 635.015494ms ago: executing program 1 (id=4495): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x8, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x35f, @tick=0x4, 0xfe, {}, 0x0, 0x2}) 634.920534ms ago: executing program 0 (id=4496): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0xfffffffc, 0x0, 0x3000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) 539.042882ms ago: executing program 1 (id=4498): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x20}, {0x20, 0x0, 0x3, 0xfffff010}, {0x6, 0x0, 0xff, 0x2000003}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) 534.867793ms ago: executing program 0 (id=4499): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 451.454841ms ago: executing program 1 (id=4500): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3f}, 0x1c) 286.961425ms ago: executing program 4 (id=4503): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000540)=ANY=[@ANYBLOB='errors=continue,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303031312c6572726f72733d72656d6f756e742d726f2c646973636172642c006c14f8bed854ab133d59b88f7b1533e33d733a4624df6e7fa1f6ee30dd9cf2a822f2"], 0x5, 0x1531, &(0x7f0000002f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000a00)=""/4096, 0x1000) 175.902045ms ago: executing program 5 (id=4504): quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, &(0x7f0000000280)={0x10000, 0x6d0, 0x0, 0x2}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 175.804905ms ago: executing program 4 (id=4505): r0 = syz_io_uring_setup(0x2780, &(0x7f0000000340)={0x0, 0x6d89, 0x1, 0x1, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 155.719957ms ago: executing program 5 (id=4506): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000640)=[{0x40, 0x0, 0x46}, {0x6, 0x0, 0x0, 0x401}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 107.006321ms ago: executing program 4 (id=4507): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffe, 0xf44, 0x4e24, 0x800, 0x2}, {0x3, 0xe072, 0x26f49972, 0xfffffffffffffefe, 0x80, 0x7ff, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x2, 0x1}, 0xa, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0xda, 0x0}, 0x4d3, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0xfffffffb, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 76.236064ms ago: executing program 5 (id=4508): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x2c, r0, 0xb01, 0x1003, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 75.758684ms ago: executing program 4 (id=4509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x14, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 493.79µs ago: executing program 4 (id=4510): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001001440000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 0s ago: executing program 4 (id=4511): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x1c020000) kernel console output (not intermixed with test programs): comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 234.831296][T10668] loop0: detected capacity change from 0 to 32768 [ 234.866757][ T26] audit: type=1326 audit(1771887164.675:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 234.967554][T10668] ERROR: (device loop0): diRead: i_ino != di_number [ 234.967554][T10668] [ 234.970655][ T26] audit: type=1326 audit(1771887164.675:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 235.106924][ T26] audit: type=1326 audit(1771887164.675:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 235.279769][ T26] audit: type=1326 audit(1771887164.675:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 235.319512][ T26] audit: type=1326 audit(1771887164.675:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 235.413143][ T26] audit: type=1326 audit(1771887164.675:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 235.546574][ T26] audit: type=1326 audit(1771887164.675:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6ac7c629 code=0x7fc00000 [ 235.680719][T10714] loop0: detected capacity change from 0 to 2048 [ 235.695475][T10685] loop1: detected capacity change from 0 to 32768 [ 235.837948][T10714] NILFS (loop0): invalid segment: Magic number mismatch [ 235.850539][T10714] NILFS (loop0): trying rollback from an earlier position [ 235.870997][T10728] tipc: Enabling of bearer rejected, failed to enable media [ 235.913726][T10714] NILFS (loop0): recovery complete [ 235.957639][T10735] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.121137][ T4175] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 236.134521][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2592'. [ 236.521494][ T4175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.555033][ T4175] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 236.582274][ T4175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.618002][ T4175] usb 3-1: config 0 descriptor?? [ 236.628532][T10538] kernel write not supported for file /sg0 (pid: 10538 comm: kworker/0:20) [ 237.119048][ T4175] smartjoyplus 0003:0925:8866.0025: item fetching failed at offset 5/7 [ 237.133265][ T4175] smartjoyplus 0003:0925:8866.0025: parse failed [ 237.151888][ T4175] smartjoyplus: probe of 0003:0925:8866.0025 failed with error -22 [ 237.287927][T10761] loop1: detected capacity change from 0 to 40427 [ 237.320883][ T4175] usb 3-1: USB disconnect, device number 17 [ 237.342843][T10761] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 237.349237][T10761] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 237.386666][T10761] F2FS-fs (loop1): invalid crc value [ 237.418315][T10761] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 237.598193][T10761] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 237.605570][T10761] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.678905][ T4187] attempt to access beyond end of device [ 237.678905][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 238.092831][T10805] loop2: detected capacity change from 0 to 512 [ 238.154902][T10805] EXT4-fs (loop2): Ignoring removed bh option [ 238.258798][T10805] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 238.277420][T10805] ext4 filesystem being mounted at /501/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.292558][T10805] EXT4-fs error (device loop2): ext4_resize_begin:61: comm syz.2.2620: resize_inode disabled but reserved GDT blocks non-zero [ 238.685555][T10835] loop1: detected capacity change from 0 to 512 [ 238.786655][T10835] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 238.860857][T10818] loop0: detected capacity change from 0 to 40427 [ 238.867657][T10835] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 238.916892][T10818] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 238.929720][T10818] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 238.962664][T10818] F2FS-fs (loop0): invalid crc value [ 238.964872][T10835] EXT4-fs (loop1): 1 truncate cleaned up [ 238.983508][T10818] F2FS-fs (loop0): Found nat_bits in checkpoint [ 239.051238][T10835] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 239.181472][T10818] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 239.203591][T10865] loop2: detected capacity change from 0 to 256 [ 239.210014][T10818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 239.322809][T10865] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 239.737632][T10891] loop2: detected capacity change from 0 to 256 [ 239.846208][T10899] loop0: detected capacity change from 0 to 1024 [ 239.858611][T10891] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 239.926764][T10899] hfsplus: bad catalog entry type [ 240.057773][ T9] hfsplus: b-tree write err: -5, ino 4 [ 240.236133][T10914] loop1: detected capacity change from 0 to 512 [ 240.367716][T10914] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.385999][T10914] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.797199][T10936] comedi comedi3: pcl816: I/O port conflict (0xd,16) [ 240.948805][T10941] loop2: detected capacity change from 0 to 2048 [ 241.067301][T10941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.219770][T10961] loop0: detected capacity change from 0 to 1024 [ 241.289838][T10961] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.548556][T10970] loop1: detected capacity change from 0 to 1024 [ 241.557433][T10961] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 241.568702][T10961] System zones: 0-1, 3-36 [ 241.598897][T10961] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,grpid,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 241.639096][T10976] loop2: detected capacity change from 0 to 2048 [ 241.736997][T10976] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=27485, location=27485 [ 241.772593][T10976] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 241.825586][T10976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.838330][T10987] loop0: detected capacity change from 0 to 256 [ 241.876000][T10987] exfat: Deprecated parameter 'namecase' [ 241.920361][T10987] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 241.997756][T11001] futex_wake_op: syz.5.2703 tries to shift op by 32; fix this program [ 242.005691][T10998] lo speed is unknown, defaulting to 1000 [ 242.007128][T11000] loop1: detected capacity change from 0 to 64 [ 242.257030][T11012] loop2: detected capacity change from 0 to 256 [ 242.328661][T11012] FAT-fs (loop2): Directory bread(block 64) failed [ 242.342378][T11012] FAT-fs (loop2): Directory bread(block 65) failed [ 242.382633][T11012] FAT-fs (loop2): Directory bread(block 66) failed [ 242.405376][T11012] FAT-fs (loop2): Directory bread(block 67) failed [ 242.466398][T11012] FAT-fs (loop2): Directory bread(block 68) failed [ 242.514011][T11012] FAT-fs (loop2): Directory bread(block 69) failed [ 242.561235][T11012] FAT-fs (loop2): Directory bread(block 70) failed [ 242.580987][T11021] device bridge0 entered promiscuous mode [ 242.598252][T11012] FAT-fs (loop2): Directory bread(block 71) failed [ 242.623840][T11021] device macvtap1 entered promiscuous mode [ 242.658976][T11012] FAT-fs (loop2): Directory bread(block 72) failed [ 242.715691][T11012] FAT-fs (loop2): Directory bread(block 73) failed [ 242.911822][T11029] mkiss: ax0: crc mode is auto. [ 243.169541][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2722'. [ 243.335045][ T4175] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 243.581220][ T4175] usb 2-1: Using ep0 maxpacket: 16 [ 243.701278][ T4175] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 243.711816][ T4175] usb 2-1: config 0 has no interface number 0 [ 243.720246][ T4175] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 243.737822][ T4175] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 243.871305][ T4175] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 243.886372][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 243.898859][ T4175] usb 2-1: Product: syz [ 243.907875][ T4175] usb 2-1: SerialNumber: syz [ 243.922800][ T4175] usb 2-1: config 0 descriptor?? [ 243.967848][ T4175] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 243.989978][ T4175] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input38 [ 244.172027][T10646] usb 2-1: USB disconnect, device number 17 [ 244.191210][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 244.198198][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 244.213573][T10646] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 244.224580][T11052] futex_wake_op: syz.2.2724 tries to shift op by 32; fix this program [ 244.269149][T11051] lo speed is unknown, defaulting to 1000 [ 244.435993][T11060] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2729'. [ 244.461804][T11056] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2729'. [ 244.895006][T11086] loop2: detected capacity change from 0 to 1024 [ 244.907651][T10538] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 245.003155][T11094] futex_wake_op: syz.1.2744 tries to shift op by 32; fix this program [ 245.059360][T11091] lo speed is unknown, defaulting to 1000 [ 245.067394][ T144] hfsplus: b-tree write err: -5, ino 4 [ 245.133953][T11098] binder: 11097:11098 ioctl 541b 0 returned -22 [ 245.316149][T10538] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 245.345630][T10538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.373236][T10538] usb 6-1: config 0 descriptor?? [ 245.432929][T10538] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 245.452319][T11111] loop1: detected capacity change from 0 to 256 [ 245.472800][T11114] UBIFS error (pid: 11114): cannot open "upperdir=./file1,", error -22 [ 245.597574][T11111] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 245.963709][T11137] loop2: detected capacity change from 0 to 64 [ 246.071180][T10538] gspca_cpia1: usb_control_msg 01, error -71 [ 246.087812][T10538] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 246.136936][T10538] usb 6-1: USB disconnect, device number 7 [ 246.310902][T11147] netlink: 'syz.2.2771': attribute type 16 has an invalid length. [ 246.359487][T11147] netlink: 'syz.2.2771': attribute type 2 has an invalid length. [ 246.360074][T11128] loop0: detected capacity change from 0 to 32768 [ 246.406827][T11128] XFS (loop0): Mounting V5 Filesystem [ 246.411615][T11147] netlink: 64102 bytes leftover after parsing attributes in process `syz.2.2771'. [ 246.454738][ T5134] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 246.490282][ T5134] Bluetooth: hci3: Injecting HCI hardware error event [ 246.519118][ T4193] Bluetooth: hci3: hardware error 0x00 [ 246.542992][T11128] XFS (loop0): Ending clean mount [ 246.605046][ T4194] XFS (loop0): Unmounting Filesystem [ 246.664449][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2776'. [ 247.157693][T11183] syz.1.2785 (11183): /proc/11182/oom_adj is deprecated, please use /proc/11182/oom_score_adj instead. [ 247.329415][T11189] loop2: detected capacity change from 0 to 128 [ 247.331847][T11196] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2790'. [ 247.761322][T11217] loop0: detected capacity change from 0 to 512 [ 248.160982][T11217] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.191311][T11217] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.302212][T11209] loop2: detected capacity change from 0 to 32768 [ 248.308385][T11217] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 2175 (only 1 groups) [ 248.342293][T11209] XFS: attr2 mount option is deprecated. [ 248.572600][T11240] loop1: detected capacity change from 0 to 64 [ 248.604217][T11209] XFS (loop2): Mounting V5 Filesystem [ 248.792245][T11209] XFS (loop2): Ending clean mount [ 248.835478][ T4187] hfs: node 4:3 still has 1 user(s)! [ 248.914120][T11209] XFS (loop2): Quotacheck needed: Please wait. [ 249.025259][T11209] XFS (loop2): Quotacheck: Done. [ 249.067637][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 249.067651][ T26] audit: type=1800 audit(1771887179.125:126): pid=11209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2795" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 249.141009][T11263] loop1: detected capacity change from 0 to 2048 [ 249.232277][T11263] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.232378][T11263] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.437556][ T4196] XFS (loop2): Unmounting Filesystem [ 249.761374][T11284] loop1: detected capacity change from 0 to 128 [ 250.174357][T11306] loop2: detected capacity change from 0 to 64 [ 250.976133][T11319] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 251.216194][T11330] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2847'. [ 251.252084][T11328] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2847'. [ 251.687753][T11360] loop1: detected capacity change from 0 to 1024 [ 251.811074][T11360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 251.848535][T11360] System zones: 0-1, 3-12 [ 251.889720][T11360] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 252.500785][T11392] loop1: detected capacity change from 0 to 128 [ 252.781939][T11392] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.821535][T11392] ext4 filesystem being mounted at /542/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.467123][T11395] loop2: detected capacity change from 0 to 32768 [ 253.541580][T11395] ialloc: diAlloc returned -5! [ 253.555806][T11395] ialloc: diAlloc returned -5! [ 253.939302][T11438] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2898'. [ 254.024830][T11440] loop2: detected capacity change from 0 to 1024 [ 254.129635][T11440] EXT4-fs (loop2): inline encryption not supported [ 254.197728][T11440] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #3: block 1: comm syz.2.2893: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.321145][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 254.327850][T11440] Quota error (device loop2): write_blk: dquota write failed [ 254.335337][T11440] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 254.345495][T11440] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.2893: Failed to acquire dquot type 0 [ 254.357155][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 254.364170][T11440] EXT4-fs error (device loop2): ext4_free_blocks:6234: comm syz.2.2893: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.380442][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 254.389114][T11440] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2893: Invalid inode bitmap blk 0 in block_group 0 [ 254.402035][ T9] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.416407][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 254.431161][T11440] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 254.463701][ T9] EXT4-fs (loop2): Remounting filesystem read-only [ 254.470258][ T9] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 254.482446][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 254.489005][T11440] EXT4-fs (loop2): 1 orphan inode deleted [ 254.525426][T11440] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; dioread_lock,min_batch_time=0x0000000000000008,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 254.548341][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 0 [ 254.590122][ T9] EXT4-fs (loop2): Remounting filesystem read-only [ 254.637495][T11440] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.2893: path /556/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 254.729429][T11440] EXT4-fs (loop2): Remounting filesystem read-only [ 255.127834][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 255.155949][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'. [ 255.165493][T11498] Zero length message leads to an empty skb [ 255.585661][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.592004][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.630438][T11495] loop2: detected capacity change from 0 to 40427 [ 255.650815][T11495] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 255.664747][T11495] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.727068][T11495] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.840416][T11495] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.857789][T11495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.960150][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 256.037174][T11527] tipc: Enabling of bearer rejected, failed to enable media [ 256.057624][ T4196] attempt to access beyond end of device [ 256.057624][ T4196] loop2: rw=2049, want=45104, limit=40427 [ 256.403518][T11540] loop0: detected capacity change from 0 to 128 [ 256.495124][T11540] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 256.547554][T11540] hpfs: filesystem error: improperly stopped [ 256.601201][T11540] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 256.619239][T11540] hpfs: You really don't want any checks? You are crazy... [ 256.639550][T11540] hpfs: Code page index out of array [ 256.649646][T11540] hpfs: code page support is disabled [ 256.670145][T11540] hpfs: hpfs_map_4sectors(): unaligned read [ 256.680061][T11540] hpfs: hpfs_map_4sectors(): unaligned read [ 256.711131][T11540] hpfs: filesystem error: unable to find root dir [ 256.889725][T11548] loop2: detected capacity change from 0 to 2048 [ 256.968202][T11548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.215262][T11558] loop0: detected capacity change from 0 to 256 [ 258.282257][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 258.327112][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 258.371271][T11622] netlink: 'syz.0.2984': attribute type 12 has an invalid length. [ 258.445832][T11573] loop2: detected capacity change from 0 to 32768 [ 258.683879][T11641] loop0: detected capacity change from 0 to 2048 [ 258.744159][T11641] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 258.756475][T11641] UDF-fs: Scanning with blocksize 512 failed [ 258.793548][T11641] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 258.807478][T11641] UDF-fs: Scanning with blocksize 1024 failed [ 258.826873][T11641] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=515, location=515 [ 258.858725][T11641] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 258.869203][T11641] UDF-fs: Scanning with blocksize 2048 failed [ 258.879700][T11641] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=259, location=259 [ 258.891985][T11641] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=515, location=515 [ 258.916670][T11641] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 258.941229][T11641] UDF-fs: Scanning with blocksize 4096 failed [ 258.960749][T11641] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 259.141950][T11656] loop2: detected capacity change from 0 to 1024 [ 259.358210][ T4175] kernel read not supported for file /dsp (pid: 4175 comm: kworker/0:3) [ 259.810761][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3017'. [ 259.990046][T11691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.998135][T11691] IPv6: NLM_F_CREATE should be set when creating new route [ 260.005412][T11691] IPv6: NLM_F_CREATE should be set when creating new route [ 260.121702][T11693] loop2: detected capacity change from 0 to 1764 [ 260.276174][T11698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3021'. [ 260.400813][T11676] loop1: detected capacity change from 0 to 40427 [ 260.494440][T11676] F2FS-fs (loop1): invalid crc value [ 260.542010][T11676] F2FS-fs (loop1): Found nat_bits in checkpoint [ 260.543616][T11693] loop2: detected capacity change from 0 to 8192 [ 260.660151][T11693] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 260.660161][T11687] loop0: detected capacity change from 0 to 32768 [ 260.699544][T11717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3029'. [ 260.710843][T11717] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3029'. [ 260.719969][T11717] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3029'. [ 260.756010][T11676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 260.756520][T11693] REISERFS (device loop2): using ordered data mode [ 260.780881][T11693] reiserfs: using flush barriers [ 260.791239][T11693] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 260.791553][T11693] REISERFS (device loop2): checking transaction log (loop2) [ 260.796516][T11687] [ 260.796516][T11687] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 260.796516][T11687] [ 260.846888][T11693] REISERFS (device loop2): Using r5 hash to sort names [ 260.847150][T11693] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 261.049027][T11687] ERROR: (device loop0): diWrite: ixpxd invalid [ 261.049027][T11687] [ 261.056072][T11687] ERROR: (device loop0): txCommit: [ 261.056072][T11687] [ 261.130909][T11725] ERROR: (device loop0): diWrite: ixpxd invalid [ 261.130909][T11725] [ 261.131002][T11725] ERROR: (device loop0): txCommit: [ 261.131002][T11725] [ 261.551877][ T4194] [ 261.551877][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.551877][ T4194] [ 261.596399][ T4194] [ 261.596399][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.596399][ T4194] [ 261.903771][T11748] binder: 11747:11748 ioctl c0306201 2000000001c0 returned -14 [ 262.024208][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 262.182556][T11772] ptrace attach of "./syz-executor exec"[4196] was attempted by " %-5鎢D|VTy\x22͚KN/)/HM&CsnVkת{Jv1%_)$n:,\x5c]n+]2yrrL˕-6^%D\x5c~zw'Mc\x22o٫`ˤ=sN8|?ޔBr9ɳbF{i$]끕 [ 262.207794][ T26] audit: type=1326 audit(1771887192.265:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.294777][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.329976][T11777] loop2: detected capacity change from 0 to 256 [ 262.458461][T11777] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d) [ 262.518677][T11777] exFAT-fs (loop2): failed to load alloc-bitmap [ 262.537105][T11782] loop1: detected capacity change from 0 to 256 [ 262.550793][T11777] exFAT-fs (loop2): failed to recognize exfat type [ 262.623525][T11782] FAT-fs (loop1): Directory bread(block 64) failed [ 262.646648][T11782] FAT-fs (loop1): Directory bread(block 65) failed [ 262.688839][T11782] FAT-fs (loop1): Directory bread(block 66) failed [ 262.707632][T11777] loop2: detected capacity change from 0 to 512 [ 262.721584][ T26] audit: type=1326 audit(1771887192.275:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.731236][T11782] FAT-fs (loop1): Directory bread(block 67) failed [ 262.786154][T11782] FAT-fs (loop1): Directory bread(block 68) failed [ 262.802800][T11782] FAT-fs (loop1): Directory bread(block 69) failed [ 262.817514][T11782] FAT-fs (loop1): Directory bread(block 70) failed [ 262.823939][ T26] audit: type=1326 audit(1771887192.275:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.844650][T11782] FAT-fs (loop1): Directory bread(block 71) failed [ 262.848434][T11777] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 262.879940][T11777] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.910721][T11782] FAT-fs (loop1): Directory bread(block 72) failed [ 262.917693][T11782] FAT-fs (loop1): Directory bread(block 73) failed [ 262.951208][ T26] audit: type=1326 audit(1771887192.275:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.951241][ T26] audit: type=1326 audit(1771887192.275:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.951265][ T26] audit: type=1326 audit(1771887192.275:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.951347][ T26] audit: type=1326 audit(1771887192.275:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.951373][ T26] audit: type=1326 audit(1771887192.275:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.951399][ T26] audit: type=1326 audit(1771887192.275:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 262.951426][ T26] audit: type=1326 audit(1771887192.275:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.5.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525cd1c629 code=0x7ffc0000 [ 263.482151][T11803] sp0: Synchronizing with TNC [ 263.513105][T11798] [U] [ 264.315589][T11826] bridge_slave_1: default FDB implementation only supports local addresses [ 264.366646][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'. [ 264.930558][T11859] loop0: detected capacity change from 0 to 2048 [ 264.985625][T11859] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 265.025819][T11859] NILFS (loop0): mounting unchecked fs [ 265.062569][ T4179] udevd[4179]: incorrect nilfs2 checksum on /dev/loop0 [ 265.084231][T11859] NILFS (loop0): recovery complete [ 265.116857][T11864] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.141140][T10646] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 265.213789][T11853] loop2: detected capacity change from 0 to 40427 [ 265.306587][T11853] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 265.329857][T11853] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 265.396532][T11853] F2FS-fs (loop2): invalid crc value [ 265.430965][T11853] F2FS-fs (loop2): Found nat_bits in checkpoint [ 265.501306][T10534] Bluetooth: hci4: command 0x0405 tx timeout [ 265.511289][T10646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.531751][T11881] loop1: detected capacity change from 0 to 16 [ 265.540243][T10646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.580877][T10646] usb 6-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 265.604809][T10646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.607092][T11881] erofs: (device loop1): mounted with root inode @ nid 36. [ 265.616583][T11853] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 265.645344][T10646] usb 6-1: config 0 descriptor?? [ 265.713457][ T4196] attempt to access beyond end of device [ 265.713457][ T4196] loop2: rw=2049, want=45104, limit=40427 [ 265.807120][T11868] loop0: detected capacity change from 0 to 32768 [ 265.897489][T11868] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3098 (11868) [ 265.937092][T11868] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 265.961296][T11868] BTRFS info (device loop0): force zlib compression, level 3 [ 265.978247][T11868] BTRFS info (device loop0): force clearing of disk cache [ 265.989557][T11868] BTRFS info (device loop0): setting nodatasum [ 265.997655][T11868] BTRFS info (device loop0): use zlib compression, level 3 [ 266.005550][T11868] BTRFS info (device loop0): allowing degraded mounts [ 266.013281][T11868] BTRFS info (device loop0): enabling disk space caching [ 266.020458][T11868] BTRFS info (device loop0): disk space caching is enabled [ 266.053610][T11868] BTRFS info (device loop0): has skinny extents [ 266.103574][T11896] loop1: detected capacity change from 0 to 256 [ 266.113931][T10646] waltop 0003:172F:0032.0026: unknown main item tag 0x0 [ 266.131225][T10646] waltop 0003:172F:0032.0026: unknown main item tag 0x0 [ 266.141375][T10646] waltop 0003:172F:0032.0026: unknown main item tag 0x0 [ 266.158676][T10646] waltop 0003:172F:0032.0026: unknown main item tag 0x0 [ 266.176091][T10646] waltop 0003:172F:0032.0026: unknown main item tag 0x0 [ 266.186039][T10646] waltop 0003:172F:0032.0026: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.5-1/input0 [ 266.349850][T11868] BTRFS info (device loop0): enabling ssd optimizations [ 266.366191][T11868] BTRFS info (device loop0): clearing free space tree [ 266.399253][T11868] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 266.437873][T11920] netlink: 'syz.1.3112': attribute type 10 has an invalid length. [ 266.440816][T11868] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 266.448646][T10534] usb 6-1: USB disconnect, device number 8 [ 266.492156][T11920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3112'. [ 266.551351][T11920] device bond0 entered promiscuous mode [ 266.567221][T11920] device bond_slave_0 entered promiscuous mode [ 266.591307][T11920] device bond_slave_1 entered promiscuous mode [ 266.597924][T11920] device team0 entered promiscuous mode [ 266.609547][T11920] device team_slave_0 entered promiscuous mode [ 266.629471][T11920] device team_slave_1 entered promiscuous mode [ 266.644838][T11920] bridge0: port 3(bond0) entered blocking state [ 266.657375][T11920] bridge0: port 3(bond0) entered disabled state [ 266.669286][T11920] bridge0: port 3(bond0) entered blocking state [ 266.675828][T11920] bridge0: port 3(bond0) entered forwarding state [ 267.141007][T11945] 9pnet: p9_fd_create_tcp (11945): problem binding to privport [ 267.182103][T11947] loop2: detected capacity change from 0 to 256 [ 267.274948][T11947] FAT-fs (loop2): Directory bread(block 64) failed [ 267.309650][T11947] FAT-fs (loop2): Directory bread(block 65) failed [ 267.321541][T11947] FAT-fs (loop2): Directory bread(block 66) failed [ 267.340616][T11947] FAT-fs (loop2): Directory bread(block 67) failed [ 267.362596][T11947] FAT-fs (loop2): Directory bread(block 68) failed [ 267.381197][T11947] FAT-fs (loop2): Directory bread(block 69) failed [ 267.399811][T11947] FAT-fs (loop2): Directory bread(block 70) failed [ 267.420070][T11947] FAT-fs (loop2): Directory bread(block 71) failed [ 267.432938][T11947] FAT-fs (loop2): Directory bread(block 72) failed [ 267.440184][T11947] FAT-fs (loop2): Directory bread(block 73) failed [ 267.451882][T11957] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (192) [ 267.552204][T10533] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 267.824609][T10533] usb 6-1: Using ep0 maxpacket: 16 [ 268.053600][T11997] loop2: detected capacity change from 0 to 64 [ 268.135926][T10533] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 268.153831][T10533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.175854][T10533] usb 6-1: Product: syz [ 268.190013][T10533] usb 6-1: Manufacturer: syz [ 268.197551][T10533] usb 6-1: SerialNumber: syz [ 268.217609][T10533] usb 6-1: config 0 descriptor?? [ 268.281501][T10533] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 268.352672][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3145'. [ 268.714378][T12039] netlink: 'syz.1.3155': attribute type 49 has an invalid length. [ 268.717437][T10533] ssu100: probe of 6-1:0.0 failed with error -71 [ 268.766928][T10533] usb 6-1: USB disconnect, device number 9 [ 268.891626][T12047] device vlan4 entered promiscuous mode [ 268.912205][T12050] loop0: detected capacity change from 0 to 512 [ 268.921944][T12047] device bridge0 entered promiscuous mode [ 268.947388][T12050] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.994700][T12050] EXT4-fs error (device loop0): __ext4_iget:4912: inode #11: block 1: comm syz.0.3159: invalid block [ 269.023155][T12050] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3159: couldn't read orphan inode 11 (err -117) [ 269.097199][T12059] loop1: detected capacity change from 0 to 2048 [ 269.105860][T12050] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,stripe=0x000000000000f8dc,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 269.155459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan4: link becomes ready [ 269.159093][T12059] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 269.240082][T12059] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000080000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 269.317062][T12059] EXT4-fs error (device loop1): empty_inline_dir:1873: inode #12: block 5: comm syz.1.3161: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 269.330383][T12050] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.3159: Directory hole found for htree leaf block 0 [ 269.358378][T12059] EXT4-fs (loop1): Remounting filesystem read-only [ 269.375454][T12059] EXT4-fs warning (device loop1): empty_inline_dir:1880: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 269.403356][T12035] loop2: detected capacity change from 0 to 32768 [ 269.467298][T12035] (syz.2.3154,12035,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.539368][T12035] (syz.2.3154,12035,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 269.649529][T12035] JBD2: Ignoring recovery information on journal [ 269.683415][T12075] loop1: detected capacity change from 0 to 512 [ 269.701108][T12078] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 269.708388][T12078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 269.721408][T12078] vhci_hcd vhci_hcd.0: Device attached [ 269.798138][T12075] EXT4-fs (loop1): orphan cleanup on readonly fs [ 269.807596][T12075] EXT4-fs error (device loop1): ext4_quota_enable:6438: comm syz.1.3164: Bad quota inum: 2, type: 2 [ 269.848109][T12075] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 269.863321][T12075] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 269.866415][T12035] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 269.872198][T12075] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000514,grpjquota=,stripe=0x0000000000000007,journal_ioprio=0x0000000000000001,grpid,,errors=continue. Quota mode: writeback. [ 269.923926][T10533] vhci_hcd: vhci_device speed not set [ 270.024962][T10533] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 270.318530][ T4196] ocfs2: Unmounting device (7,2) on (node local) [ 270.557499][T12123] tipc: Started in network mode [ 270.562513][T12123] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 270.592306][T12125] loop1: detected capacity change from 0 to 128 [ 270.596874][T12123] tipc: Enabling of bearer rejected, failed to enable media [ 270.659982][T12125] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.690366][T12125] ext4 filesystem being mounted at /627/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.567650][T12152] loop1: detected capacity change from 0 to 32768 [ 271.645762][T12152] (syz.1.3185,12152,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 271.679531][T12152] (syz.1.3185,12152,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 271.730787][T12152] JBD2: Ignoring recovery information on journal [ 271.767349][T12192] device netdevsim0 entered promiscuous mode [ 271.776875][T12192] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 271.784738][T12192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 271.898785][T12152] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 272.074899][T12207] loop2: detected capacity change from 0 to 512 [ 272.107125][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 272.214994][T12207] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.233390][T12207] ext4 filesystem being mounted at /608/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.383306][T12207] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #12: comm syz.2.3206: directory missing '..' [ 272.616742][T12221] loop1: detected capacity change from 0 to 4096 [ 272.666846][T12079] vhci_hcd: connection reset by peer [ 272.707047][ T1294] vhci_hcd: stop threads [ 272.711364][ T1294] vhci_hcd: release socket [ 272.721876][T12233] sp0: Synchronizing with TNC [ 272.759002][ T1294] vhci_hcd: disconnect device [ 272.790140][T12237] bond0: option downdelay: invalid value (18446744073709551607) [ 272.809970][T12237] bond0: option downdelay: allowed values 0 - 2147483647 [ 272.912948][ T4187] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 272.919411][ T4187] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 273.507256][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3239'. [ 273.681397][T12235] loop0: detected capacity change from 0 to 32768 [ 273.724989][ T24] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 273.736615][T12235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3219 (12235) [ 273.798881][T12235] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 273.830537][T12235] BTRFS info (device loop0): using free space tree [ 273.899563][T12235] BTRFS info (device loop0): has skinny extents [ 274.078131][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.097701][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.150330][ T24] usb 2-1: config 0 descriptor?? [ 274.196792][ T24] cp210x 2-1:0.0: cp210x converter detected [ 274.262950][T12235] BTRFS info (device loop0): enabling ssd optimizations [ 274.630548][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 274.735754][T12344] netlink: 'syz.2.3263': attribute type 1 has an invalid length. [ 275.068578][T10533] vhci_hcd: vhci_device speed not set [ 275.153322][ T4395] usb 2-1: USB disconnect, device number 18 [ 275.180921][ T4395] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 275.228636][ T4395] cp210x 2-1:0.0: device disconnected [ 276.057288][T12356] loop0: detected capacity change from 0 to 32768 [ 276.089990][ T4550] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 276.112331][T12356] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3264 (12356) [ 276.156588][T12356] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 276.202923][T12356] BTRFS info (device loop0): enabling auto defrag [ 276.217851][T12356] BTRFS info (device loop0): use no compression [ 276.224132][T12356] BTRFS info (device loop0): force clearing of disk cache [ 276.257248][T12356] BTRFS info (device loop0): max_inline at 4096 [ 276.263703][T12356] BTRFS info (device loop0): disabling free space tree [ 276.276358][T12356] BTRFS info (device loop0): has skinny extents [ 276.288887][T12369] loop1: detected capacity change from 0 to 32768 [ 276.325761][ T4550] usb 6-1: Using ep0 maxpacket: 32 [ 276.398800][T12399] option changes via remount are deprecated (pid=12398 comm=syz.4.3287) [ 276.399070][T12356] BTRFS info (device loop0): enabling ssd optimizations [ 276.399906][T12356] BTRFS info (device loop0): clearing free space tree [ 276.422116][T12356] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 276.430347][T12369] (syz.1.3274,12369,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.449257][T12356] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.460740][ T4550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.508471][ T4550] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 276.545688][T12403] loop2: detected capacity change from 0 to 1024 [ 276.552190][T12369] (syz.1.3274,12369,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 276.558464][ T4550] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 276.604142][T12369] JBD2: Ignoring recovery information on journal [ 276.630572][ T4550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.657448][ T4550] usb 6-1: config 0 descriptor?? [ 276.773515][T12369] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 277.142195][ T4550] magicmouse 0003:05AC:0269.0027: hidraw0: USB HID v0.08 Device [HID 05ac:0269] on usb-dummy_hcd.5-1/input0 [ 277.252990][ T144] hfsplus: b-tree write err: -5, ino 4 [ 277.267254][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 277.352152][ T4551] usb 6-1: USB disconnect, device number 10 [ 277.386841][T10533] hid-generic 07FF:0004:0009.0028: unknown main item tag 0x0 [ 277.425656][T10533] hid-generic 07FF:0004:0009.0028: unknown main item tag 0x0 [ 277.444403][T10533] hid-generic 07FF:0004:0009.0028: unknown main item tag 0x0 [ 277.480765][T10533] hid-generic 07FF:0004:0009.0028: hidraw0: HID v0.04 Device [syz1] on syz1 [ 277.612024][T12440] Cannot find del_set index 3 as target [ 277.619238][T12444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3300'. [ 277.926146][T12458] genirq: Flags mismatch irq 2. 00000000 (pcmmio) vs. 00000000 (pcl816) [ 278.015317][T12455] fido_id[12455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 278.169002][T12469] loop0: detected capacity change from 0 to 1024 [ 278.268727][T12469] EXT4-fs (loop0): Ignoring removed orlov option [ 278.403148][T12469] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 278.700329][T12486] loop0: detected capacity change from 0 to 1764 [ 278.774394][T12486] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 278.895172][T12486] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 279.233770][T12497] loop0: detected capacity change from 0 to 128 [ 279.357621][T12497] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 279.521456][T12463] loop2: detected capacity change from 0 to 40427 [ 279.567552][ T4194] sysv_free_block: trying to free block not in datazone [ 279.584994][ T4194] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 279.742862][T12463] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 279.809629][T12463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 279.826440][T12514] loop0: detected capacity change from 0 to 64 [ 279.837129][T12515] loop1: detected capacity change from 0 to 512 [ 279.895690][T12463] F2FS-fs (loop2): invalid crc value [ 279.992100][T12515] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.012734][T12515] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.015265][T12463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 280.266712][T12463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 280.289826][T12527] loop1: detected capacity change from 0 to 1024 [ 280.296528][T12463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 280.446548][T12527] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,barrier=0x0000000000000007,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 280.531981][T12527] ext4 filesystem being mounted at /649/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.559817][T12463] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 280.679321][T12527] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.3333: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.753526][T12527] EXT4-fs (loop1): Remounting filesystem read-only [ 280.768389][T12527] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #15: comm syz.1.3333: lblock 0 mapped to illegal pblock 0 (length 1) [ 280.848356][T12527] EXT4-fs (loop1): Remounting filesystem read-only [ 280.932808][T12527] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.3333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 280.964271][T12562] loop0: detected capacity change from 0 to 1024 [ 281.014660][T12527] EXT4-fs (loop1): Remounting filesystem read-only [ 281.277426][ T144] hfsplus: b-tree write err: -5, ino 4 [ 281.290785][T12567] option changes via remount are deprecated (pid=12566 comm=syz.1.3351) [ 281.754215][T12580] loop0: detected capacity change from 0 to 256 [ 281.841767][T12580] exfat: Deprecated parameter 'utf8' [ 281.848730][T12580] exfat: Deprecated parameter 'namecase' [ 281.896824][T12580] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 282.482562][T12576] loop1: detected capacity change from 0 to 32768 [ 282.564459][T12576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3356 (12576) [ 282.630921][T12576] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 282.695331][T12576] BTRFS info (device loop1): using free space tree [ 282.709859][T12576] BTRFS info (device loop1): has skinny extents [ 283.189858][T12576] BTRFS info (device loop1): enabling ssd optimizations [ 283.347609][T12652] loop0: detected capacity change from 0 to 2048 [ 283.421241][T12581] loop2: detected capacity change from 0 to 32768 [ 283.509938][T12652] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 283.576839][T12652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.577191][T12581] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3346 (12581) [ 283.646373][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3376'. [ 283.740876][T12662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3376'. [ 284.012711][T12662] device gretap0 entered promiscuous mode [ 284.023829][T12581] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 284.033514][T12662] device gretap0 left promiscuous mode [ 284.070254][T12581] BTRFS info (device loop2): force zlib compression, level 3 [ 284.077783][T12581] BTRFS info (device loop2): force clearing of disk cache [ 284.139715][T12581] BTRFS info (device loop2): setting nodatasum [ 284.145919][T12581] BTRFS info (device loop2): use zlib compression, level 3 [ 284.185063][T12581] BTRFS info (device loop2): allowing degraded mounts [ 284.233456][T12581] BTRFS info (device loop2): enabling disk space caching [ 284.270334][T12581] BTRFS info (device loop2): disk space caching is enabled [ 284.338729][T12581] BTRFS info (device loop2): has skinny extents [ 284.593510][T12581] BTRFS info (device loop2): enabling ssd optimizations [ 284.607180][T12581] BTRFS info (device loop2): clearing free space tree [ 284.634590][T12581] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.698166][T12581] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 284.898925][T12722] loop1: detected capacity change from 0 to 2048 [ 284.961267][ T13] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 285.082592][T12722] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.382284][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.415218][ T13] usb 6-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 285.434860][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.465405][ T13] usb 6-1: config 0 descriptor?? [ 285.854548][T12757] loop2: detected capacity change from 0 to 2048 [ 285.883650][T12760] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3410'. [ 285.912566][T12760] device gretap0 entered promiscuous mode [ 285.952333][T12764] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3410'. [ 285.961307][T12764] 0XD: renamed from gretap0 [ 285.968232][T12757] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.986028][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.014642][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.034076][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.046788][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.056276][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.067185][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.076565][ T13] logitech 0003:046D:C287.0029: unknown main item tag 0x0 [ 286.086885][T12768] loop1: detected capacity change from 0 to 512 [ 286.089141][ T13] logitech 0003:046D:C287.0029: hidraw0: USB HID v0.07 Device [HID 046d:c287] on usb-dummy_hcd.5-1/input0 [ 286.110020][T12768] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 286.119535][ T13] logitech 0003:046D:C287.0029: no inputs found [ 286.135602][T12764] device 30XD left promiscuous mode [ 286.174307][T12764] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 286.202025][T12768] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,mb_optimize_scan=0x0000000000000001,quota,bsddf,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 286.202437][ T4245] usb 6-1: USB disconnect, device number 11 [ 286.222670][T12768] ext4 filesystem being mounted at /662/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.157593][T12832] loop1: detected capacity change from 0 to 1024 [ 287.232905][T12835] loop2: detected capacity change from 0 to 4096 [ 287.301086][T12835] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 287.362984][ T6124] hfsplus: b-tree write err: -5, ino 4 [ 287.565199][T12843] loop0: detected capacity change from 0 to 512 [ 287.600621][ T4196] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 287.624682][ T4196] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 287.627210][T12843] EXT4-fs (loop0): Ignoring removed oldalloc option [ 287.632041][ T4196] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 287.695380][T12843] EXT4-fs (loop0): 1 truncate cleaned up [ 287.704303][T12843] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 288.029708][T12864] loop0: detected capacity change from 0 to 256 [ 288.083537][ T13] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 288.142849][ T4551] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 288.381019][ T4551] usb 2-1: Using ep0 maxpacket: 16 [ 288.482798][T12881] loop0: detected capacity change from 0 to 256 [ 288.500135][ T4551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.526130][ T4551] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.549540][ T4551] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.576587][T12881] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 288.579355][ T4551] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.628173][ T4551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.658927][ T13] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 288.684653][ T13] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 288.686774][ T4551] usb 2-1: config 0 descriptor?? [ 288.714354][T12883] sp0: Synchronizing with TNC [ 288.723223][ T13] usb 3-1: Product: syz [ 288.733554][ T13] usb 3-1: Manufacturer: syz [ 288.738367][ T13] usb 3-1: SerialNumber: syz [ 288.800223][ T13] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 289.196638][ T4551] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 289.203386][T12906] loop0: detected capacity change from 0 to 8192 [ 289.222344][T12906] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 289.230499][ T4551] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002A/input/input39 [ 289.232670][ T13] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 289.254267][ T13] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 289.254824][T12906] REISERFS (device loop0): using ordered data mode [ 289.278167][T12906] reiserfs: using flush barriers [ 289.287052][T12906] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 289.304238][T12906] REISERFS (device loop0): checking transaction log (loop0) [ 289.313015][T12906] REISERFS (device loop0): Using r5 hash to sort names [ 289.330331][ T4551] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 289.345364][T12906] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 289.416817][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 289.416829][ T26] audit: type=1800 audit(1771887219.853:140): pid=12906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3478" name="file1" dev="loop0" ino=2 res=0 errno=0 [ 289.550242][ T13] usb 3-1: USB disconnect, device number 18 [ 289.665125][ T4551] usb 2-1: USB disconnect, device number 19 [ 289.785179][T12918] ptrace attach of ""[12919] was attempted by "./syz-executor exec"[12918] [ 290.301426][T12940] loop0: detected capacity change from 0 to 512 [ 290.356847][T12940] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 290.367301][T12940] EXT4-fs (loop0): orphan cleanup on readonly fs [ 290.402931][T12940] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 290.465634][T12940] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 290.474041][T12937] loop2: detected capacity change from 0 to 8192 [ 290.482795][T12940] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.3494: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 290.518869][T12940] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3494: couldn't read orphan inode 13 (err -117) [ 290.556999][T12940] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,nobarrier,debug,stripe=0x0000000000000007,journal_ioprio=0x0000000000000003,grpid,,errors=continue. Quota mode: writeback. [ 290.627225][T12937] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 290.677077][T12937] REISERFS (device loop2): using ordered data mode [ 290.683618][T12937] reiserfs: using flush barriers [ 290.754865][T12937] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 290.773162][T12940] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 290.822058][T12937] REISERFS (device loop2): checking transaction log (loop2) [ 290.833010][T12940] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 290.849032][T12937] REISERFS (device loop2): Using r5 hash to sort names [ 290.910587][T12937] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 290.912530][T12940] EXT4-fs (loop0): can't change dax mount option while remounting [ 291.029455][ T26] audit: type=1800 audit(1771887221.474:141): pid=12937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3492" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 291.206838][T12963] loop0: detected capacity change from 0 to 1024 [ 291.683333][T12942] loop1: detected capacity change from 0 to 40427 [ 291.725576][T12942] F2FS-fs (loop1): invalid crc value [ 291.781980][T12942] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.845069][T12990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.873975][T12983] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 291.916137][T12942] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.985752][T12983] Remounting filesystem read-only [ 292.159808][ T4187] attempt to access beyond end of device [ 292.159808][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 292.525458][T12979] set_capacity_and_notify: 1 callbacks suppressed [ 292.525473][T12979] loop2: detected capacity change from 0 to 32768 [ 292.920807][T13026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 293.011400][ T6124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 293.100294][T13036] loop0: detected capacity change from 0 to 512 [ 293.218509][T13036] EXT4-fs (loop0): 1 truncate cleaned up [ 293.224200][T13036] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 293.290471][T13040] sp0: Synchronizing with TNC [ 293.344691][ T26] audit: type=1800 audit(1771887223.799:142): pid=13036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3536" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 293.388800][T13045] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 293.388800][T13045] The task syz.5.3538 (13045) triggered the difference, watch for misbehavior. [ 293.590072][T13054] loop0: detected capacity change from 0 to 8 [ 293.637091][T13054] SQUASHFS error: lzo decompression failed, data probably corrupt [ 293.645000][T13054] SQUASHFS error: Failed to read block 0x91: -5 [ 293.665858][T13054] SQUASHFS error: Unable to read metadata cache entry [8f] [ 293.686254][T13054] SQUASHFS error: Unable to read inode 0x11f [ 293.842759][T13066] loop0: detected capacity change from 0 to 2048 [ 293.864661][ T5135] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 293.940086][T13066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.984205][T13068] smc: net device ip6tnl0 applied user defined pnetid SYZ1 [ 294.023680][ T4550] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 294.110626][T13072] xt_HMARK: proto mask must be zero with L3 mode [ 294.190792][ T4551] kernel write not supported for file /snd/seq (pid: 4551 comm: kworker/1:14) [ 294.232780][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.248395][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.258585][ T5135] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 294.268358][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.285660][ T5135] usb 2-1: config 0 descriptor?? [ 294.381751][ T4550] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.394557][ T4550] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.451264][ T4245] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 294.481167][ T4550] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.490472][ T4550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.501991][ T4550] usb 3-1: SerialNumber: syz [ 294.764947][ T5135] lua 0003:1E7D:2C2E.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 294.781396][ T4550] usb 3-1: 0:2 : does not exist [ 294.813092][ T4550] usb 3-1: USB disconnect, device number 19 [ 294.966253][ T5135] usb 2-1: USB disconnect, device number 20 [ 294.988648][ T4245] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 294.997859][ T4245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.006250][ T4245] usb 6-1: Product: syz [ 295.010746][ T4245] usb 6-1: Manufacturer: syz [ 295.015321][ T4245] usb 6-1: SerialNumber: syz [ 295.060526][ T4245] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.092631][ T4519] udevd[4519]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.360370][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'. [ 295.449457][T13094] loop2: detected capacity change from 0 to 32768 [ 295.537502][T13094] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #68: fs_generation is 3919078593 [ 295.553920][T13094] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 295.563985][T13094] OCFS2: File system is now read-only. [ 295.569602][T13094] (syz.2.3562,13094,0):ocfs2_read_locked_inode:521 ERROR: status = -30 [ 295.578179][T13094] (syz.2.3562,13094,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30 [ 295.587168][T13094] (syz.2.3562,13094,0):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 295.596188][T13094] (syz.2.3562,13094,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 295.596220][T13094] (syz.2.3562,13094,0):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 295.617578][T13094] (syz.2.3562,13094,0):ocfs2_initialize_super:2281 ERROR: status = -30 [ 295.625885][T13094] (syz.2.3562,13094,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 295.668610][T13106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3568'. [ 295.761268][T13110] loop1: detected capacity change from 0 to 512 [ 295.853400][T13110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 295.874257][ T4245] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.896696][T13118] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.3574'. [ 295.913892][T13110] EXT4-fs (loop1): 1 truncate cleaned up [ 295.919570][T13110] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.976232][T13110] EXT4-fs error (device loop1): ext4_get_parent:1910: comm syz.1.3569: inode #2: comm syz.1.3569: iget: illegal inode # [ 296.316751][ T13] usb 6-1: USB disconnect, device number 12 [ 296.376471][T13104] loop0: detected capacity change from 0 to 32768 [ 296.425669][T13136] loop1: detected capacity change from 0 to 512 [ 296.441549][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 296.450465][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3584'. [ 296.460807][T13138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3584'. [ 296.501047][T13104] JBD2: Ignoring recovery information on journal [ 296.582739][T13136] EXT4-fs (loop1): 1 truncate cleaned up [ 296.588423][T13136] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 296.643681][T13104] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 296.663170][T13104] (syz.0.3567,13104,1):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize. [ 296.705170][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 296.724238][ T26] audit: type=1800 audit(1771887227.206:143): pid=13136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3582" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 296.909717][ T4245] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 296.942771][ T4245] ath9k_htc: Failed to initialize the device [ 296.984764][ T13] usb 6-1: ath9k_htc: USB layer deinitialized [ 297.032929][T13157] netlink: 'syz.5.3591': attribute type 5 has an invalid length. [ 297.183093][T13165] loop1: detected capacity change from 0 to 512 [ 297.229727][T13165] EXT4-fs (loop1): Test dummy encryption mode enabled [ 297.248929][T13165] EXT4-fs (loop1): Ignoring removed oldalloc option [ 297.274322][T13165] EXT4-fs (loop1): 1 truncate cleaned up [ 297.277483][ T5325] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.357191][T13165] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,test_dummy_encryption,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 297.385650][T13166] loop0: detected capacity change from 0 to 8192 [ 297.669267][ T5325] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.690922][ T5325] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 297.727215][ T5325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.758191][ T5325] usb 3-1: config 0 descriptor?? [ 297.836530][T13191] loop1: detected capacity change from 0 to 1024 [ 297.950147][ T144] hfsplus: b-tree write err: -5, ino 4 [ 298.092147][T13201] loop1: detected capacity change from 0 to 2048 [ 298.142977][T13204] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.256250][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.291254][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.308865][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.318947][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.336618][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.354146][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.371963][ T5325] uclogic 0003:5543:0004.002C: unknown main item tag 0x0 [ 298.389491][ T26] audit: type=1326 audit(1771887228.873:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13211 comm="syz.1.3616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda98478629 code=0x0 [ 298.410301][ T5325] uclogic 0003:5543:0004.002C: No inputs registered, leaving [ 298.443877][ T5325] uclogic 0003:5543:0004.002C: hidraw0: USB HID v10.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 298.481040][ T5325] usb 3-1: USB disconnect, device number 20 [ 298.553095][T13216] fido_id[13216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 298.651688][ T13] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 298.894096][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 299.015612][ T13] usb 6-1: config 7 has an invalid interface number: 152 but max is 0 [ 299.030212][ T13] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 299.047734][ T13] usb 6-1: config 7 has no interface number 0 [ 299.064672][ T13] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 299.086763][ T13] usb 6-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.105945][ T13] usb 6-1: config 7 interface 152 has no altsetting 0 [ 299.262972][T13252] netlink: 'syz.4.3634': attribute type 4 has an invalid length. [ 299.271234][ T13] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 299.277474][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3634'. [ 299.287410][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.298012][ T13] usb 6-1: Product: syz [ 299.311053][ T13] usb 6-1: Manufacturer: syz [ 299.315788][ T13] usb 6-1: SerialNumber: syz [ 299.451565][T13258] loop1: detected capacity change from 0 to 8192 [ 299.658625][ T13] usbtest 6-1:7.152: couldn't get endpoints, -71 [ 299.676347][ T13] usbtest: probe of 6-1:7.152 failed with error -71 [ 299.683568][T13273] loop1: detected capacity change from 0 to 1024 [ 299.686541][ T13] usb 6-1: USB disconnect, device number 13 [ 299.857164][ T4227] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 300.053434][T13277] loop1: detected capacity change from 0 to 32768 [ 300.092262][T13277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3647 (13277) [ 300.151829][T13277] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 300.163403][T13277] BTRFS info (device loop1): using free space tree [ 300.170461][T13277] BTRFS info (device loop1): has skinny extents [ 300.215868][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.227479][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.237827][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.248454][ T4227] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 300.257801][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.268369][ T4227] usb 3-1: config 0 descriptor?? [ 300.286096][T13277] BTRFS info (device loop1): enabling ssd optimizations [ 300.345219][ T13] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 300.714060][ T13] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 300.725605][ T13] usb 6-1: config 0 interface 0 has no altsetting 0 [ 300.732236][ T13] usb 6-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 300.741726][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.751487][ T13] usb 6-1: config 0 descriptor?? [ 300.773944][T13279] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 300.791231][ T4227] smartjoyplus 0003:6666:8802.002D: hidraw0: USB HID v4.00 Device [HID 6666:8802] on usb-dummy_hcd.2-1/input0 [ 300.810123][ T4227] smartjoyplus 0003:6666:8802.002D: no output reports found [ 300.975213][T13312] loop1: detected capacity change from 0 to 256 [ 300.999111][ T4227] usb 3-1: USB disconnect, device number 21 [ 301.066731][T13316] loop0: detected capacity change from 0 to 2048 [ 301.079746][T13312] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 301.108532][T13312] exFAT-fs (loop1): error, invalid size(size(0) > aligned(9223372036854777344) [ 301.108532][T13312] [ 301.121779][T13312] exFAT-fs (loop1): Filesystem has been set read-only [ 301.205082][T13316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.231683][ T13] wacom 0003:056A:00D4.002E: unbalanced delimiter at end of report description [ 301.250956][ T13] wacom 0003:056A:00D4.002E: parse failed [ 301.258666][ T13] wacom: probe of 0003:056A:00D4.002E failed with error -22 [ 301.434565][ T5135] usb 6-1: USB disconnect, device number 14 [ 301.593567][T13325] loop0: detected capacity change from 0 to 32768 [ 301.647649][T13325] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.3659 (13325) [ 301.671091][T13325] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 301.685900][T13325] BTRFS info (device loop0): using free space tree [ 301.696473][T13325] BTRFS info (device loop0): has skinny extents [ 301.742076][T13338] loop2: detected capacity change from 0 to 1024 [ 301.771750][T13325] BTRFS info (device loop0): enabling ssd optimizations [ 301.871713][T13338] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 302.540997][T13385] syz.5.3678 uses old SIOCAX25GETINFO [ 302.576877][T13381] loop0: detected capacity change from 0 to 4096 [ 302.731273][T13381] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 303.116309][T13413] loop1: detected capacity change from 0 to 512 [ 303.193980][T13413] EXT4-fs (loop1): Ignoring removed nobh option [ 303.220344][T13413] EXT4-fs (loop1): inline encryption not supported [ 303.243469][T13413] EXT4-fs (loop1): Test dummy encryption mode enabled [ 303.284961][T13413] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 303.320889][T13413] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3690: invalid indirect mapped block 2683928664 (level 1) [ 303.352440][ T26] audit: type=1326 audit(1771887233.851:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13422 comm="syz.5.3694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f525cd1c629 code=0x0 [ 303.382794][T13413] EXT4-fs (loop1): Remounting filesystem read-only [ 303.404278][T13390] loop2: detected capacity change from 0 to 32768 [ 303.405383][T13413] EXT4-fs (loop1): 1 truncate cleaned up [ 303.431710][T13390] XFS (loop2): Mounting V5 Filesystem [ 303.447616][T13413] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,errors=remount-ro,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,test_dummy_encryption,,. Quota mode: writeback. [ 303.518246][T13390] XFS (loop2): Ending clean mount [ 303.625253][ T4196] XFS (loop2): Unmounting Filesystem [ 303.751028][T13413] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 303.783688][T13413] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.3690: Invalid block bitmap block 3 in block_group 0 [ 303.860721][T13413] EXT4-fs (loop1): Remounting filesystem read-only [ 304.149798][T13460] loop0: detected capacity change from 0 to 512 [ 304.366890][T13460] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 304.409436][T13460] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.3707: bad orphan inode 131083 [ 304.434342][T13460] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,noquota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 304.436807][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3713'. [ 304.723736][T13484] sp0: Synchronizing with TNC [ 304.765151][T13483] [U] ` [ 304.963371][T13498] loop0: detected capacity change from 0 to 256 [ 304.987020][T13496] program syz.1.3724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.072284][T13498] FAT-fs (loop0): Directory bread(block 64) failed [ 305.089060][T13498] FAT-fs (loop0): Directory bread(block 65) failed [ 305.107195][T13498] FAT-fs (loop0): Directory bread(block 66) failed [ 305.119711][T13498] FAT-fs (loop0): Directory bread(block 67) failed [ 305.130396][T13498] FAT-fs (loop0): Directory bread(block 68) failed [ 305.137074][T13498] FAT-fs (loop0): Directory bread(block 69) failed [ 305.150916][T13498] FAT-fs (loop0): Directory bread(block 70) failed [ 305.174853][T13498] FAT-fs (loop0): Directory bread(block 71) failed [ 305.191998][T13498] FAT-fs (loop0): Directory bread(block 72) failed [ 305.204419][T13498] FAT-fs (loop0): Directory bread(block 73) failed [ 305.379554][ T4395] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 305.432817][T13523] loop2: detected capacity change from 0 to 764 [ 305.476241][T13526] loop0: detected capacity change from 0 to 256 [ 305.731068][T13537] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3743'. [ 305.788778][ T4395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 305.813607][ T4395] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 305.833241][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.859782][ T4395] usb 2-1: config 0 descriptor?? [ 305.992256][T13549] device macsec0 entered promiscuous mode [ 306.056522][T13553] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3750'. [ 306.183791][T13561] loop2: detected capacity change from 0 to 512 [ 306.303593][T13561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.325244][T13561] ext4 filesystem being mounted at /708/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.342462][ T4395] wacom 0003:056A:0027.002F: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 306.352344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 306.381665][ T4395] wacom 0003:056A:0027.002F: hidraw0: USB HID v0.02 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 306.416451][ T4395] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.002F/input/input40 [ 306.539719][ T4395] usb 2-1: USB disconnect, device number 21 [ 306.581501][T13572] loop2: detected capacity change from 0 to 2048 [ 306.634609][T13572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.637862][T13575] fido_id[13575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 307.880455][T13637] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 307.931997][T13640] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 308.032848][T13620] loop2: detected capacity change from 0 to 32768 [ 308.133257][ T5325] kernel write not supported for file /adsp1 (pid: 5325 comm: kworker/0:12) [ 308.142581][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3793'. [ 308.163964][T13627] loop1: detected capacity change from 0 to 32768 [ 308.221322][T13648] netlink: 'syz.2.3794': attribute type 11 has an invalid length. [ 308.275491][T13627] JBD2: Ignoring recovery information on journal [ 308.463482][T13627] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 308.622997][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 308.726296][ T6124] tipc: Subscription rejected, illegal request [ 309.020503][T13682] loop1: detected capacity change from 0 to 1024 [ 309.062478][T13687] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3811'. [ 309.068410][T13688] loop0: detected capacity change from 0 to 1024 [ 309.108736][T13682] EXT4-fs (loop1): inline encryption not supported [ 309.160818][T13682] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 309.226190][T13695] comedi comedi3: das16m1: I/O port conflict (0x20,16) [ 309.245610][T13682] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5b,data_err=ignore,nodiscard,user_xattr,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 309.755408][T13713] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3824'. [ 309.930382][T13717] loop2: detected capacity change from 0 to 1024 [ 310.019281][T13717] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 310.049491][ T4551] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 310.064152][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3826'. [ 310.318873][ T4551] usb 2-1: Using ep0 maxpacket: 32 [ 310.459703][ T4551] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 310.474947][ T4551] usb 2-1: config 0 has no interface number 0 [ 310.508073][ T4551] usb 2-1: config 0 interface 184 has no altsetting 0 [ 310.625640][T13750] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.708393][ T4551] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 310.723099][ T4551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.747130][ T4551] usb 2-1: Product: syz [ 310.763742][ T4551] usb 2-1: Manufacturer: syz [ 310.776474][T13754] loop0: detected capacity change from 0 to 512 [ 310.786578][ T4551] usb 2-1: SerialNumber: syz [ 310.810758][ T4551] usb 2-1: config 0 descriptor?? [ 310.837831][T13754] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 310.868856][ T4551] smsc75xx v1.0.0 [ 310.924844][T13754] EXT4-fs (loop0): 1 truncate cleaned up [ 310.973387][T13754] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,inode_readahead_blks=0x0000000004000000,noquota,,errors=continue. Quota mode: none. [ 311.159139][T13754] EXT4-fs warning (device loop0): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 311.498473][ T4551] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 311.528499][ T4551] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 311.579277][ T4551] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 311.626138][ T4551] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 311.657500][ T4551] usb 2-1: USB disconnect, device number 22 [ 312.046814][T13768] loop0: detected capacity change from 0 to 32768 [ 312.118211][T13782] rdma_op ffff888075ff51f0 conn xmit_rdma 0000000000000000 [ 312.213562][T13770] loop2: detected capacity change from 0 to 40427 [ 312.223389][T13768] JBD2: Ignoring recovery information on journal [ 312.264145][T13770] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 312.278846][T13770] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 312.305039][T13770] F2FS-fs (loop2): invalid crc value [ 312.361361][T13770] F2FS-fs (loop2): Found nat_bits in checkpoint [ 312.385831][T13787] ax25_connect(): syz.5.3859 uses autobind, please contact jreuter@yaina.de [ 312.454653][T13768] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 312.603133][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 312.621719][T13770] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 312.631759][T13770] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 312.801415][T13813] loop0: detected capacity change from 0 to 2048 [ 312.878709][T13813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.907113][T13810] loop1: detected capacity change from 0 to 8192 [ 313.017527][T13823] loop2: detected capacity change from 0 to 128 [ 313.025704][T13810] loop1: AHDI p1 p3 p4 [ 313.083413][T13810] loop1: p3 start 3996538112 is beyond EOD, truncated [ 313.108702][T13823] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 313.146505][T13829] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3875'. [ 313.153553][T13810] loop1: p4 start 4278231049 is beyond EOD, truncated [ 313.181120][T13823] hpfs: filesystem error: improperly stopped [ 313.187604][T13829] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3875'. [ 313.213404][T13823] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 313.221163][T13823] hpfs: You really don't want any checks? You are crazy... [ 313.275572][T13823] hpfs: hpfs_map_sector(): read error [ 313.285913][T13823] hpfs: code page support is disabled [ 313.291677][T13823] hpfs: hpfs_map_4sectors(): unaligned read [ 313.339535][T13823] hpfs: hpfs_map_4sectors(): unaligned read [ 313.368398][T13836] loop0: detected capacity change from 0 to 64 [ 313.404230][T13823] hpfs: filesystem error: unable to find root dir [ 313.499999][T13836] attempt to access beyond end of device [ 313.499999][T13836] loop0: rw=0, want=1026, limit=64 [ 313.603280][T13836] Buffer I/O error on dev loop0, logical block 512, async page read [ 313.634164][T13836] attempt to access beyond end of device [ 313.634164][T13836] loop0: rw=0, want=113154, limit=64 [ 313.671568][T13836] Buffer I/O error on dev loop0, logical block 56576, async page read [ 313.739903][T13854] loop2: detected capacity change from 0 to 64 [ 313.757053][T13851] loop1: detected capacity change from 0 to 1024 [ 314.390335][T13882] loop1: detected capacity change from 0 to 256 [ 314.701578][ T4551] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 314.770169][T13866] loop0: detected capacity change from 0 to 32768 [ 314.920971][ T5327] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 314.990196][T13866] XFS (loop0): Mounting V5 Filesystem [ 315.060299][T13866] XFS (loop0): Ending clean mount [ 315.111244][ T4551] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.129375][ T4551] usb 3-1: config 0 has no interface number 0 [ 315.137034][ T4551] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 315.146836][ T4551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.161648][ T4551] usb 3-1: config 0 descriptor?? [ 315.164762][ T4194] XFS (loop0): Unmounting Filesystem [ 315.172377][ T5327] usb 2-1: Using ep0 maxpacket: 16 [ 315.202800][ T4551] usb 3-1: selecting invalid altsetting 1 [ 315.229956][ T4551] dvb_ttusb_budget: ttusb_init_controller: error [ 315.236727][ T4551] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 315.290533][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.315401][ T5327] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.339995][ T5327] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.360326][ T5327] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 315.368916][ T4551] DVB: Unable to find symbol cx22700_attach() [ 315.370017][ T5327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.406953][ T5327] usb 2-1: config 0 descriptor?? [ 315.447311][ T4551] DVB: Unable to find symbol tda10046_attach() [ 315.460045][ T4551] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 315.500659][ T4551] usb 3-1: USB disconnect, device number 22 [ 315.894301][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 315.932179][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 315.951866][ T5327] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max [ 315.970345][ T26] audit: type=1400 audit(1771887246.507:146): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=13929 comm="syz.0.3910" [ 315.988692][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.022322][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.075737][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.119264][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.167344][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.194857][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.224481][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.233982][T13947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3928'. [ 316.256243][T13947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3928'. [ 316.267150][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.284288][T13944] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3928'. [ 316.301431][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.326117][T13951] siw: device registration error -23 [ 316.349060][ T5327] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 316.362149][ T5327] microsoft 0003:045E:07DA.0030: No inputs registered, leaving [ 316.402320][ T5327] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 316.428914][ T5327] microsoft 0003:045E:07DA.0030: no inputs found [ 316.435363][ T5327] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 316.488919][ T5327] usb 2-1: USB disconnect, device number 23 [ 316.547900][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.554270][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.731371][T13958] fido_id[13958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 317.192561][T13975] loop2: detected capacity change from 0 to 4096 [ 317.286668][T13953] loop0: detected capacity change from 0 to 32768 [ 317.324628][T13975] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 317.504480][T13953] XFS (loop0): Mounting V5 Filesystem [ 317.653875][T13997] loop1: detected capacity change from 0 to 64 [ 317.681768][ T26] audit: type=1326 audit(1771887248.209:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14000 comm="syz.5.3951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f525cd1c629 code=0x0 [ 317.825229][T14006] loop1: detected capacity change from 0 to 1024 [ 317.881060][T14006] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 317.889198][T13953] XFS (loop0): Ending clean mount [ 317.899236][T13953] XFS (loop0): Quotacheck needed: Please wait. [ 317.920144][T14006] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 317.994319][T14006] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,nogrpid,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,discard,init_itable,mblk_io_submit,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 318.019141][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.073921][T13953] XFS (loop0): Quotacheck: Done. [ 318.136904][ T5327] Bluetooth: hci4: command 0x0405 tx timeout [ 318.140327][T14012] loop2: detected capacity change from 0 to 4096 [ 318.216174][T14012] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 318.333546][ T4194] XFS (loop0): Unmounting Filesystem [ 318.403243][T14023] MPI: mpi too large (185152 bits) [ 318.642014][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 318.830581][T14038] loop1: detected capacity change from 0 to 512 [ 318.981429][T14038] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 319.005896][T14038] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 319.060633][T14038] EXT4-fs (loop1): group descriptors corrupted! [ 319.272261][T14057] netlink: 'syz.2.3976': attribute type 1 has an invalid length. [ 319.272884][T14058] tipc: Started in network mode [ 319.306465][T14058] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 319.332267][T14058] tipc: Enabled bearer , priority 10 [ 319.404609][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3981'. [ 319.716913][T14082] loop0: detected capacity change from 0 to 512 [ 319.887291][T14082] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.974311][T14082] ext4 filesystem being mounted at /776/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.089366][T14092] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3993'. [ 320.171928][T14082] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3989: bg 0: block 145: padding at end of block bitmap is not set [ 320.379178][ T4229] tipc: Node number set to 10463914 [ 320.687342][T14106] loop2: detected capacity change from 0 to 8192 [ 320.807272][T14117] loop0: detected capacity change from 0 to 4096 [ 320.939802][T14117] EXT4-fs (loop0): Test dummy encryption mode enabled [ 320.992425][T14106] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 321.006562][T14106] REISERFS (device loop2): using ordered data mode [ 321.018070][T14117] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 321.051191][T14106] reiserfs: using flush barriers [ 321.150936][T14106] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 321.234427][T14106] REISERFS (device loop2): checking transaction log (loop2) [ 321.244410][T14117] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 321.244437][T14117] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 321.253640][T14106] REISERFS (device loop2): Using r5 hash to sort names [ 321.254048][T14106] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 321.254078][T14106] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 321.373387][T14138] genirq: Flags mismatch irq 2. 00000000 (pcl818) vs. 00000000 (pcl816) [ 321.916282][T14156] loop0: detected capacity change from 0 to 512 [ 321.963878][T14159] overlayfs: maximum fs stacking depth exceeded [ 322.049739][T14156] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.4023: inode has both inline data and extents flags [ 322.134933][T14156] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.4023: couldn't read orphan inode 15 (err -117) [ 322.243096][T14156] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 322.297526][T14175] loop1: detected capacity change from 0 to 64 [ 322.699670][T14192] loop1: detected capacity change from 0 to 64 [ 322.989098][T14209] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 323.017398][T14212] loop2: detected capacity change from 0 to 64 [ 323.024575][T14209] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 323.031079][T14209] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 323.084537][T14209] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 323.132336][T14209] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 323.141943][T14209] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 323.162404][T14209] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 323.179602][T14209] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 323.239636][T14209] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 323.263773][T14209] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 323.283698][T14209] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 323.303576][T14209] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 323.323866][T14209] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 323.363154][T14209] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 323.413969][T14209] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 323.440325][T14209] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 323.476510][T14209] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 323.496362][T14209] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 323.517365][T14209] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 323.525252][T14209] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 323.537776][T14209] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 323.545404][T14209] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 323.623132][T14236] loop1: detected capacity change from 0 to 512 [ 323.663724][T14236] EXT4-fs (loop1): Ignoring removed bh option [ 323.720010][T14236] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 323.742220][T14236] ext4 filesystem being mounted at /779/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.949549][T14252] loop1: detected capacity change from 0 to 4096 [ 323.998307][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4066'. [ 324.093284][T14252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 324.145724][T14252] ntfs3: loop1: failed to convert "0080" to koi8-ru [ 324.257817][T14269] loop1: detected capacity change from 0 to 1024 [ 324.283868][T14269] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 324.432323][T14269] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 324.461839][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.535339][T14287] loop2: detected capacity change from 0 to 2048 [ 324.568157][T14287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.141587][ T5325] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 325.500213][ T5325] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.508630][ T5325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.615472][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4102'. [ 325.631447][ T5325] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 325.650029][ T5325] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 325.677838][ T5325] usb 3-1: Manufacturer: syz [ 325.698912][ T5325] usb 3-1: config 0 descriptor?? [ 325.879738][ T5325] rc_core: IR keymap rc-hauppauge not found [ 325.894715][T14354] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4111'. [ 325.895551][ T5325] Registered IR keymap rc-empty [ 325.920357][ T5325] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 325.954973][ T5325] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 326.132553][ T4263] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 326.239514][ C0] igorplugusb 3-1:0.0: receive overflow, at least 22 lost [ 326.447813][ T5325] usb 3-1: USB disconnect, device number 23 [ 326.549444][ T4263] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.589553][ T4263] usb 2-1: not running at top speed; connect to a high speed hub [ 326.690698][ T4263] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 326.699652][ T4263] usb 2-1: config 1 has no interface number 0 [ 326.705775][ T4263] usb 2-1: config 1 interface 8 has no altsetting 0 [ 326.889231][ T4263] usb 2-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=db.5f [ 326.907416][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.935957][ T4263] usb 2-1: Product: syz [ 326.957805][ T4263] usb 2-1: Manufacturer: syz [ 326.976833][ T4263] usb 2-1: SerialNumber: syz [ 327.053538][T14419] loop2: detected capacity change from 0 to 512 [ 327.066422][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.075639][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.138452][T14420] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.146210][T14420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.153804][T14420] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.160916][T14420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.225044][T14420] team0: Device bridge0 failed to register rx_handler [ 327.254230][T14419] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 327.283579][T14419] ext4 filesystem being mounted at /777/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.326165][T14420] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.333488][T14420] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.378794][ T4263] dvb-usb: found a 'DiBcom STK807xPVR reference design' in cold state, will try to load a firmware [ 327.455298][ T4263] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 327.486026][ T4263] dib0700: firmware download failed at 7 with -71 [ 327.516602][ T4263] usb 2-1: USB disconnect, device number 24 [ 327.914733][T14463] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 328.023810][T14464] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4160'. [ 328.417569][T14492] loop0: detected capacity change from 0 to 128 [ 328.509222][T14492] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 328.547078][T14492] ext4 filesystem being mounted at /805/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.020530][T14515] ubi31: attaching mtd0 [ 329.048195][ T4395] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 329.052421][T14515] ubi31 error: ubi_attach_mtd_dev: bad VID header (42) or data offsets (106) [ 329.448133][ T4395] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.488002][ T4395] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 329.537995][ T4395] usb 2-1: config 0 interface 0 has no altsetting 0 [ 329.544648][ T4395] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 329.583496][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.629146][ T4395] usb 2-1: config 0 descriptor?? [ 329.773209][T14544] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 330.162635][ T4395] sony 0003:054C:0268.0031: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 330.218798][T14559] comedi comedi3: rti802: a I/O base address must be specified [ 330.242732][ T4395] sony 0003:054C:0268.0031: failed to claim input [ 330.393360][ T4395] usb 2-1: USB disconnect, device number 25 [ 330.444354][T14511] loop2: detected capacity change from 0 to 32768 [ 330.482043][T14563] fido_id[14563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 330.683373][T14553] loop0: detected capacity change from 0 to 40427 [ 330.710917][T14553] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 330.754417][T14511] XFS (loop2): Mounting V5 Filesystem [ 330.777271][T14553] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 330.842473][T14553] F2FS-fs (loop0): invalid crc value [ 330.862879][T14553] F2FS-fs (loop0): Found nat_bits in checkpoint [ 330.919386][T14553] F2FS-fs (loop0): Start checkpoint disabled! [ 330.936772][T14553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 331.108275][T14511] XFS (loop2): Ending clean mount [ 331.127149][T14511] XFS (loop2): Quotacheck needed: Please wait. [ 331.218145][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 331.416600][T14511] XFS (loop2): Quotacheck: Done. [ 331.662603][ T4196] XFS (loop2): Unmounting Filesystem [ 332.027452][T14619] loop1: detected capacity change from 0 to 256 [ 332.076971][T14619] exfat: Deprecated parameter 'utf8' [ 332.079473][T14623] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4234'. [ 332.082332][T14619] exfat: Deprecated parameter 'namecase' [ 332.082391][T14619] exfat: Deprecated parameter 'namecase' [ 332.149517][T14619] exfat: Deprecated parameter 'utf8' [ 332.252047][T14619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 332.575136][T14640] device ipvlan2 entered promiscuous mode [ 332.605545][T14640] bridge0: port 4(ipvlan2) entered blocking state [ 332.624141][T14640] bridge0: port 4(ipvlan2) entered disabled state [ 333.163018][T14671] loop1: detected capacity change from 0 to 64 [ 333.261712][T14671] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 333.433501][T14676] loop1: detected capacity change from 0 to 256 [ 333.461981][ T5327] kernel write not supported for file /comedi4 (pid: 5327 comm: kworker/0:14) [ 333.494099][T14676] exfat: Deprecated parameter 'utf8' [ 333.581294][T14676] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 333.627001][T14687] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4265'. [ 333.656933][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4265'. [ 333.982209][T14703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4273'. [ 334.340249][T14718] batman_adv: batadv0: Adding interface: gretap1 [ 334.383392][T14718] batman_adv: batadv0: Interface activated: gretap1 [ 334.605645][ T4229] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 334.684919][T14698] loop1: detected capacity change from 0 to 32768 [ 334.736915][T14698] ERROR: (device loop1): diWrite: ixpxd invalid [ 334.736915][T14698] [ 334.753074][T14698] ERROR: (device loop1): remounting filesystem as read-only [ 334.761843][T14698] ERROR: (device loop1): txCommit: [ 334.761843][T14698] [ 334.985626][ T4229] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 334.990728][T14742] loop1: detected capacity change from 0 to 128 [ 335.015044][ T4229] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 335.033023][ T4229] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 335.054692][ T4229] usb 3-1: config 220 has no interface number 2 [ 335.061855][ T4229] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x2 has an invalid bInterval 193, changing to 7 [ 335.071130][T14742] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 335.073903][ T4229] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 335.106067][ T4229] usb 3-1: config 220 interface 0 has no altsetting 0 [ 335.113015][ T4229] usb 3-1: config 220 interface 76 has no altsetting 0 [ 335.120875][ T4229] usb 3-1: config 220 interface 1 has no altsetting 0 [ 335.154107][ T4395] Process accounting resumed [ 335.160978][ T4395] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 335.170292][ T4395] FAT-fs (loop1): Filesystem has been set read-only [ 335.191442][ T4187] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 335.305548][ T4229] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 335.314932][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.323112][ T4229] usb 3-1: Product: syz [ 335.357738][ T4229] usb 3-1: Manufacturer: syz [ 335.372368][ T4229] usb 3-1: SerialNumber: syz [ 335.378080][T14756] tmpfs: Bad value for 'mpol' [ 335.453172][T14758] netlink: 'syz.1.4299': attribute type 4 has an invalid length. [ 335.493659][T14758] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4299'. [ 335.671402][T14770] syz.1.4305 (14770) used obsolete PPPIOCDETACH ioctl [ 335.775377][ T4229] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 335.788404][ T4229] usb 3-1: No valid video chain found. [ 335.793978][ T4229] usb 3-1: selecting invalid altsetting 0 [ 335.925977][ T4229] usb 3-1: selecting invalid altsetting 0 [ 335.935019][ T4229] usbtest: probe of 3-1:220.1 failed with error -22 [ 335.965149][ T4229] usb 3-1: USB disconnect, device number 24 [ 335.986799][T14790] loop1: detected capacity change from 0 to 256 [ 336.311024][T14804] sp0: Synchronizing with TNC [ 336.338464][T14801] [U] ` [ 336.509646][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4327'. [ 336.788187][T14806] loop2: detected capacity change from 0 to 32768 [ 336.878536][T14806] XFS (loop2): Mounting V5 Filesystem [ 336.947131][T14806] XFS (loop2): Ending clean mount [ 336.956665][T14818] loop1: detected capacity change from 0 to 32768 [ 336.971557][T14806] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 337.088930][ T4196] XFS (loop2): Unmounting Filesystem [ 337.158939][ T4230] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 337.252415][T14840] loop1: detected capacity change from 0 to 1024 [ 337.389607][T14840] EXT4-fs (loop1): inline encryption not supported [ 337.422934][T14840] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.4337: lblock 2 mapped to illegal pblock 2 (length 1) [ 337.443418][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.451639][T14840] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 337.465476][T14840] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.4337: lblock 0 mapped to illegal pblock 48 (length 1) [ 337.504542][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.529328][T14840] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 337.543711][T14840] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.4337: Failed to acquire dquot type 0 [ 337.555620][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.572905][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.579856][ T4230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.595593][T14840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 337.608525][ T4230] usb 6-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 337.617768][T14846] loop2: detected capacity change from 0 to 4096 [ 337.620318][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.639668][T14840] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.4337: mark_inode_dirty error [ 337.639842][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.661241][ T4230] usb 6-1: config 0 descriptor?? [ 337.666294][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.673050][T14840] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 337.690551][T14840] EXT4-fs (loop1): 1 orphan inode deleted [ 337.697070][T14840] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,noblock_validity,grpquota,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback. [ 337.721240][ T1294] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 337.736222][ T1294] EXT4-fs (loop1): Remounting filesystem read-only [ 337.745839][ T1294] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 337.763931][ T1294] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 337.789838][ T1294] EXT4-fs (loop1): Remounting filesystem read-only [ 337.796359][T14848] device macsec1 entered promiscuous mode [ 337.796376][T14848] device virt_wifi0 entered promiscuous mode [ 337.831520][T14840] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.4337: Invalid inode table block 1 in block_group 0 [ 337.847757][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.863331][T14840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 337.880368][T14840] EXT4-fs (loop1): Remounting filesystem read-only [ 337.913340][ T1294] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 337.924433][T14850] loop0: detected capacity change from 0 to 4096 [ 337.971042][T14850] ntfs: volume version 3.1. [ 337.980512][ T1294] EXT4-fs (loop1): Remounting filesystem read-only [ 338.000810][ T1294] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 338.021475][ T1294] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 338.053126][ T1294] EXT4-fs (loop1): Remounting filesystem read-only [ 338.070304][ T4187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 338.106908][ T4187] EXT4-fs (loop1): Remounting filesystem read-only [ 338.121974][ T4187] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 338.137367][ T4187] EXT4-fs (loop1): Remounting filesystem read-only [ 338.146233][ T4187] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 338.182014][ T4187] EXT4-fs (loop1): Remounting filesystem read-only [ 338.191663][ T4230] elecom 0003:056E:010C.0032: hidraw0: USB HID v0.06 Device [HID 056e:010c] on usb-dummy_hcd.5-1/input0 [ 338.407174][ T4263] usb 6-1: USB disconnect, device number 15 [ 338.413419][T14870] loop1: detected capacity change from 0 to 512 [ 338.549639][T14870] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.1.4349: corrupted xattr block 95 [ 338.605056][T14870] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.4349: bg 0: block 7: invalid block bitmap [ 338.659668][T14870] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 338.708846][T14870] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2923: inode #11: comm syz.1.4349: corrupted xattr block 95 [ 338.783749][T14870] EXT4-fs warning (device loop1): ext4_evict_inode:302: xattr delete (err -117) [ 338.798882][T14870] EXT4-fs (loop1): 1 orphan inode deleted [ 338.813135][T14870] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.954919][T14937] loop1: detected capacity change from 0 to 8192 [ 340.001378][T14937] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 340.021191][T14937] REISERFS (device loop1): using ordered data mode [ 340.033541][T14937] reiserfs: using flush barriers [ 340.049754][T14937] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 340.074209][T14937] REISERFS (device loop1): checking transaction log (loop1) [ 340.234324][T14937] REISERFS (device loop1): Using tea hash to sort names [ 340.247544][T14937] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 340.283340][T14937] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 340.449779][ T4551] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 340.767202][T14956] sch_fq: defrate 4294967295 ignored. [ 340.825248][ T4551] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.855514][ T4551] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.887415][ T4551] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.913343][ T4551] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.930259][ T4551] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 340.953427][ T4551] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.007491][ T4551] usb 6-1: config 0 descriptor?? [ 341.421695][T14959] loop1: detected capacity change from 0 to 32768 [ 341.486086][ T4551] kye 0003:0458:5015.0033: unbalanced collection at end of report description [ 341.516445][ T4551] kye 0003:0458:5015.0033: parse failed [ 341.526090][T14959] XFS (loop1): Mounting V5 Filesystem [ 341.549289][ T4551] kye: probe of 0003:0458:5015.0033 failed with error -22 [ 341.631226][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'. [ 341.634263][T14959] XFS (loop1): Ending clean mount [ 341.701321][ T4551] usb 6-1: USB disconnect, device number 16 [ 341.730696][ T26] audit: type=1800 audit(1771887272.273:148): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4392" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 341.791344][T14991] loop0: detected capacity change from 0 to 512 [ 341.860969][T14991] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 341.915664][T14991] EXT4-fs (loop0): orphan cleanup on readonly fs [ 341.932296][T14991] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.4401: Block bitmap for bg 0 marked uninitialized [ 341.996906][T14996] loop2: detected capacity change from 0 to 64 [ 342.012308][T14991] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 342.068229][T14991] EXT4-fs (loop0): 1 orphan inode deleted [ 342.087133][ T4187] XFS (loop1): Unmounting Filesystem [ 342.118802][T14991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.147658][T14991] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 342.154023][T14996] hfs: keylen 1794 too large [ 342.215044][T14996] hfs: keylen 1794 too large [ 342.216826][T14991] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 342.298281][T14991] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.4401: Block bitmap for bg 0 marked uninitialized [ 342.372813][T14991] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.4401: Block bitmap for bg 0 marked uninitialized [ 342.424164][T14991] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.4401: Block bitmap for bg 0 marked uninitialized [ 342.676238][T15010] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 342.800107][T15016] program syz.5.4413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.139681][T15039] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 343.330853][ C1] Illegal XDP return value 16128, expect packet loss! [ 343.359436][T15049] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.423546][T15049] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.624572][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 343.848316][T15081] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 344.339169][T15110] loop2: detected capacity change from 0 to 64 [ 344.438057][T15115] loop0: detected capacity change from 0 to 1024 [ 344.494414][T15114] loop1: detected capacity change from 0 to 8192 [ 344.789582][T15123] loop0: detected capacity change from 0 to 1024 [ 344.918443][T15123] hfsplus: bad catalog entry type [ 344.989081][ T4721] hfsplus: b-tree write err: -5, ino 4 [ 344.999008][T15130] loop1: detected capacity change from 0 to 1024 [ 345.098392][T15130] hfsplus: request for non-existent node 3 in B*Tree [ 345.111401][T15133] loop0: detected capacity change from 0 to 256 [ 345.132047][T15130] hfsplus: request for non-existent node 3 in B*Tree [ 345.178183][T15130] hfsplus: invalid length 28418 has been corrected to 255 [ 345.232018][T15130] hfsplus: invalid length 28418 has been corrected to 255 [ 345.253560][T15133] FAT-fs (loop0): Directory bread(block 64) failed [ 345.260119][T15133] FAT-fs (loop0): Directory bread(block 65) failed [ 345.293776][T15130] hfsplus: walked past end of dir [ 345.302292][T15133] FAT-fs (loop0): Directory bread(block 66) failed [ 345.308884][T15133] FAT-fs (loop0): Directory bread(block 67) failed [ 345.372110][T15133] FAT-fs (loop0): Directory bread(block 68) failed [ 345.378875][T15133] FAT-fs (loop0): Directory bread(block 69) failed [ 345.442259][T15133] FAT-fs (loop0): Directory bread(block 70) failed [ 345.449087][T15142] openvswitch: netlink: Actions may not be safe on all matching packets [ 345.464169][T15133] FAT-fs (loop0): Directory bread(block 71) failed [ 345.512956][T15133] FAT-fs (loop0): Directory bread(block 72) failed [ 345.540140][T15146] loop1: detected capacity change from 0 to 736 [ 345.557326][T15133] FAT-fs (loop0): Directory bread(block 73) failed [ 346.202006][ T4263] Bluetooth: hci4: command 0x0405 tx timeout [ 346.357105][T15183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4491'. [ 346.938764][T15181] set_capacity_and_notify: 1 callbacks suppressed [ 346.938779][T15181] loop2: detected capacity change from 0 to 32768 [ 347.055444][T15181] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 347.110362][T15181] [ 347.112713][T15181] ====================================================== [ 347.119710][T15181] WARNING: possible circular locking dependency detected [ 347.126744][T15181] syzkaller #0 Not tainted [ 347.131136][T15181] ------------------------------------------------------ [ 347.138161][T15181] syz.2.4490/15181 is trying to acquire lock: [ 347.144204][T15181] ffff88805f921808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 347.157428][T15181] [ 347.157428][T15181] but task is already holding lock: [ 347.164791][T15181] ffff88805fa12378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 347.174288][T15181] [ 347.174288][T15181] which lock already depends on the new lock. [ 347.174288][T15181] [ 347.184685][T15181] [ 347.184685][T15181] the existing dependency chain (in reverse order) is: [ 347.193688][T15181] [ 347.193688][T15181] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 347.201518][T15181] down_read+0x44/0x2e0 [ 347.206202][T15181] ocfs2_init_acl+0x307/0x770 [ 347.211428][T15181] ocfs2_mknod+0x15cb/0x2510 [ 347.216551][T15181] ocfs2_create+0x192/0x420 [ 347.221584][T15181] path_openat+0x11db/0x2fa0 [ 347.226697][T15181] do_filp_open+0x1e2/0x410 [ 347.231721][T15181] do_sys_openat2+0x150/0x4b0 [ 347.236924][T15181] __x64_sys_openat+0x135/0x160 [ 347.242297][T15181] do_syscall_64+0x4c/0xa0 [ 347.247232][T15181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.253647][T15181] [ 347.253647][T15181] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 347.262161][T15181] down_read+0x44/0x2e0 [ 347.266840][T15181] ocfs2_start_trans+0x3a6/0x6f0 [ 347.272300][T15181] ocfs2_mknod+0xf5a/0x2510 [ 347.277348][T15181] vfs_mknod+0x424/0x4c0 [ 347.282109][T15181] unix_bind+0x4e0/0x8f0 [ 347.286870][T15181] __sys_bind+0x2e9/0x3e0 [ 347.291724][T15181] __x64_sys_bind+0x76/0x80 [ 347.296750][T15181] do_syscall_64+0x4c/0xa0 [ 347.301689][T15181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.308105][T15181] [ 347.308105][T15181] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 347.315583][T15181] ocfs2_start_trans+0x2a7/0x6f0 [ 347.321045][T15181] ocfs2_mknod+0xf5a/0x2510 [ 347.326075][T15181] vfs_mknod+0x424/0x4c0 [ 347.330842][T15181] unix_bind+0x4e0/0x8f0 [ 347.335609][T15181] __sys_bind+0x2e9/0x3e0 [ 347.340462][T15181] __x64_sys_bind+0x76/0x80 [ 347.345490][T15181] do_syscall_64+0x4c/0xa0 [ 347.350431][T15181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.356848][T15181] [ 347.356848][T15181] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 347.367373][T15181] down_write+0x38/0x60 [ 347.372057][T15181] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 347.378735][T15181] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 347.385587][T15181] ocfs2_mknod+0xef8/0x2510 [ 347.390612][T15181] vfs_mknod+0x424/0x4c0 [ 347.395382][T15181] unix_bind+0x4e0/0x8f0 [ 347.400151][T15181] __sys_bind+0x2e9/0x3e0 [ 347.405002][T15181] __x64_sys_bind+0x76/0x80 [ 347.410030][T15181] do_syscall_64+0x4c/0xa0 [ 347.414970][T15181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.421384][T15181] [ 347.421384][T15181] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 347.431906][T15181] __lock_acquire+0x2c42/0x7d10 [ 347.437425][T15181] lock_acquire+0x19e/0x400 [ 347.442456][T15181] down_write+0x38/0x60 [ 347.447142][T15181] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 347.453572][T15181] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 347.460439][T15181] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 347.466599][T15181] ocfs2_xattr_set+0xc38/0x13e0 [ 347.471972][T15181] __vfs_setxattr+0x3e0/0x420 [ 347.477173][T15181] __vfs_setxattr_noperm+0x129/0x5e0 [ 347.482987][T15181] vfs_setxattr+0x167/0x2e0 [ 347.488011][T15181] setxattr+0x36c/0x390 [ 347.492684][T15181] path_setxattr+0x147/0x290 [ 347.497796][T15181] __x64_sys_lsetxattr+0xb4/0xd0 [ 347.503261][T15181] do_syscall_64+0x4c/0xa0 [ 347.508201][T15181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.514619][T15181] [ 347.514619][T15181] other info that might help us debug this: [ 347.514619][T15181] [ 347.524843][T15181] Chain exists of: [ 347.524843][T15181] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 347.524843][T15181] [ 347.541794][T15181] Possible unsafe locking scenario: [ 347.541794][T15181] [ 347.549240][T15181] CPU0 CPU1 [ 347.554604][T15181] ---- ---- [ 347.559962][T15181] lock(&oi->ip_xattr_sem); [ 347.564551][T15181] lock(&journal->j_trans_barrier); [ 347.572355][T15181] lock(&oi->ip_xattr_sem); [ 347.579474][T15181] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 347.586765][T15181] [ 347.586765][T15181] *** DEADLOCK *** [ 347.586765][T15181] [ 347.594910][T15181] 3 locks held by syz.2.4490/15181: [ 347.600107][T15181] #0: ffff88807d69e460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 347.609348][T15181] #1: ffff88805fa12648 (&sb->s_type->i_mutex_key#42){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 347.619816][T15181] #2: ffff88805fa12378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 347.629760][T15181] [ 347.629760][T15181] stack backtrace: [ 347.635650][T15181] CPU: 1 PID: 15181 Comm: syz.2.4490 Not tainted syzkaller #0 [ 347.643111][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.653169][T15181] Call Trace: [ 347.656447][T15181] [ 347.659384][T15181] dump_stack_lvl+0x188/0x250 [ 347.664069][T15181] ? load_image+0x400/0x400 [ 347.668586][T15181] ? show_regs_print_info+0x20/0x20 [ 347.673799][T15181] ? print_circular_bug+0x12b/0x1a0 [ 347.679011][T15181] check_noncircular+0x296/0x330 [ 347.683959][T15181] ? add_chain_block+0x940/0x940 [ 347.688902][T15181] ? lockdep_lock+0xf1/0x1f0 [ 347.693504][T15181] ? mark_lock+0x94/0x320 [ 347.697837][T15181] __lock_acquire+0x2c42/0x7d10 [ 347.702707][T15181] ? verify_lock_unused+0x140/0x140 [ 347.707917][T15181] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 347.713558][T15181] ? do_raw_spin_lock+0x128/0x2f0 [ 347.718586][T15181] ? mutex_unlock+0x10/0x10 [ 347.723092][T15181] ? __rwlock_init+0x140/0x140 [ 347.727857][T15181] ? do_raw_spin_unlock+0x11d/0x230 [ 347.733063][T15181] lock_acquire+0x19e/0x400 [ 347.737570][T15181] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 347.743643][T15181] ? stack_trace_save+0xa6/0xf0 [ 347.748503][T15181] ? __might_sleep+0xf0/0xf0 [ 347.753107][T15181] ? check_noncircular+0x189/0x330 [ 347.758226][T15181] ? read_lock_is_recursive+0x10/0x10 [ 347.763609][T15181] ? verify_lock_unused+0x140/0x140 [ 347.768821][T15181] down_write+0x38/0x60 [ 347.772975][T15181] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 347.779043][T15181] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 347.784935][T15181] ? mark_lock+0x94/0x320 [ 347.789267][T15181] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 347.795261][T15181] ? lock_chain_count+0x20/0x20 [ 347.800122][T15181] ? __rwlock_init+0x140/0x140 [ 347.804901][T15181] ? ocfs2_block_group_search+0x470/0x470 [ 347.810628][T15181] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 347.816524][T15181] ? lockdep_hardirqs_on+0x94/0x140 [ 347.821726][T15181] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 347.827620][T15181] ? _raw_spin_unlock+0x40/0x40 [ 347.832472][T15181] ? stack_trace_save+0xa6/0xf0 [ 347.837331][T15181] ? stack_trace_snprint+0xf0/0xf0 [ 347.842446][T15181] ? stack_depot_save+0x404/0x440 [ 347.847479][T15181] ? __kasan_kmalloc+0xcc/0xf0 [ 347.852248][T15181] ? __kasan_kmalloc+0xb5/0xf0 [ 347.857014][T15181] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 347.863518][T15181] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 347.869326][T15181] ? ocfs2_xattr_set+0xc38/0x13e0 [ 347.874359][T15181] ? __vfs_setxattr+0x3e0/0x420 [ 347.879218][T15181] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 347.884681][T15181] ? vfs_setxattr+0x167/0x2e0 [ 347.889362][T15181] ? setxattr+0x36c/0x390 [ 347.893697][T15181] ? path_setxattr+0x147/0x290 [ 347.898459][T15181] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 347.903573][T15181] ? do_syscall_64+0x4c/0xa0 [ 347.908169][T15181] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.914254][T15181] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 347.920598][T15181] ? ocfs2_init_steal_slots+0x150/0x150 [ 347.926151][T15181] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 347.931792][T15181] ? do_raw_spin_lock+0x128/0x2f0 [ 347.936822][T15181] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 347.942462][T15181] ? _raw_spin_unlock+0x24/0x40 [ 347.947318][T15181] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 347.953392][T15181] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 347.959645][T15181] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 347.965550][T15181] ? up_write+0x1bb/0x420 [ 347.969885][T15181] ocfs2_xattr_set+0xc38/0x13e0 [ 347.974750][T15181] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 347.980479][T15181] ? mark_lock+0x94/0x320 [ 347.984818][T15181] ? is_bpf_text_address+0x254/0x270 [ 347.990100][T15181] ? __kernel_text_address+0x9a/0x100 [ 347.995467][T15181] ? verify_lock_unused+0x140/0x140 [ 348.000673][T15181] ? unwind_get_return_address+0x49/0x80 [ 348.006313][T15181] ? evm_protected_xattr_common+0x170/0x190 [ 348.012219][T15181] ? evm_protect_xattr+0x7ad/0x9b0 [ 348.017336][T15181] ? ocfs2_xattr_security_get+0x40/0x40 [ 348.022892][T15181] __vfs_setxattr+0x3e0/0x420 [ 348.027578][T15181] __vfs_setxattr_noperm+0x129/0x5e0 [ 348.032871][T15181] vfs_setxattr+0x167/0x2e0 [ 348.037386][T15181] ? xattr_permission+0x500/0x500 [ 348.040103][T15247] loop1: detected capacity change from 0 to 64 [ 348.042410][T15181] ? strncpy_from_user+0x1fb/0x360 [ 348.042435][T15181] setxattr+0x36c/0x390 [ 348.042453][T15181] ? path_setxattr+0x290/0x290 [ 348.042474][T15181] ? __mnt_want_write+0x1e2/0x260 [ 348.042493][T15181] path_setxattr+0x147/0x290 [ 348.072177][T15181] ? simple_xattr_list_add+0xf0/0xf0 [ 348.077470][T15181] ? lock_chain_count+0x20/0x20 [ 348.082317][T15181] ? vtime_user_exit+0x2c8/0x3e0 [ 348.087254][T15181] __x64_sys_lsetxattr+0xb4/0xd0 [ 348.092187][T15181] do_syscall_64+0x4c/0xa0 [ 348.096593][T15181] ? clear_bhb_loop+0x30/0x80 [ 348.101267][T15181] ? clear_bhb_loop+0x30/0x80 [ 348.105933][T15181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.111805][T15181] RIP: 0033:0x7f3d6ac7c629 [ 348.116200][T15181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.135783][T15181] RSP: 002b:00007f3d68ed6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 348.144176][T15181] RAX: ffffffffffffffda RBX: 00007f3d6aef5fa0 RCX: 00007f3d6ac7c629 [ 348.152131][T15181] RDX: 0000000000000000 RSI: 00002000000025c0 RDI: 0000200000002580 [ 348.160081][T15181] RBP: 00007f3d6ad12b39 R08: 0000000000000000 R09: 0000000000000000 [ 348.168036][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.175987][T15181] R13: 00007f3d6aef6038 R14: 00007f3d6aef5fa0 R15: 00007ffc272a5948 [ 348.183944][T15181] [ 348.187014][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.334317][ T4196] ocfs2: Unmounting device (7,2) on (node local)