last executing test programs: 7m7.26959149s ago: executing program 0 (id=1021): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 7m7.16428617s ago: executing program 0 (id=1023): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) 7m7.063257981s ago: executing program 0 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f23140000fe000001"], 0x24}}, 0x0) 7m6.854404041s ago: executing program 0 (id=1026): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 7m6.411672594s ago: executing program 0 (id=1036): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000540)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff00000000000000002bacccbfc45ada3b207bcec407a42b52eaa83b89e73bedc0f2ec1c6d626bd992993e76f7119abf22d598f82081eb7f4670be8f092946c9358cd79c8c", 0x87) 7m5.830666761s ago: executing program 0 (id=1044): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 7m5.602209264s ago: executing program 32 (id=1044): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 3.560438261s ago: executing program 4 (id=8592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffffc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.390585048s ago: executing program 4 (id=8595): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, '#\r'}, @main=@item_4={0x3, 0x0, 0x8, "9fea28c8"}, @main=@item_4={0x3, 0x0, 0xb, "0600"}, @local=@item_012={0x2, 0x2, 0x2, "06c8"}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x9, "d1d61e00"}, @main=@item_4={0x3, 0x0, 0xb, "0b77eae3"}, @main=@item_012={0x2, 0x0, 0x8, "c17b"}]}}, 0x0}, 0x0) 3.199754617s ago: executing program 1 (id=8598): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r0, 0x80) 2.894224506s ago: executing program 5 (id=8601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.878734028s ago: executing program 1 (id=8602): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="943a1fcb24676066260d837c8a6bf0b9beecfdc4658c963ec2657e821760538c4816fa2c38ae206755a9fa86d7a322d0f6acde1d651d13bd821b76d0a9bdf18aa3da42afcf1643e8bb70f1e1b714c65b75a3814c102e8b95", 0x58}, {&(0x7f00000002c0)="cd02e3089dbb7069", 0x8}], 0x2) 2.75425013s ago: executing program 1 (id=8603): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x103042, 0x5d9f61795f7ff7ff) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000011600)={0xd0, 0x80000000, 0x3}) 2.541073351s ago: executing program 5 (id=8607): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000)="e33d8b5d8f47b1ac82565461fc27e076785aa9654aa504e1b7ac6f55e7955f26d1140b35b532845396372146f2109a5cf9fe5c7ed87d60365ffbda3ae48204b7c00a2c84a4bd9dd3113c642fbb32aab308fcf4a9235bd4ad40f27200", 0x0}, 0x20) 2.414060093s ago: executing program 5 (id=8609): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.310636913s ago: executing program 5 (id=8611): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8315}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) 1.671018016s ago: executing program 5 (id=8613): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x3810004, &(0x7f00000002c0)={[{@gid}, {@gid}, {@utf8}, {@unhide}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@gid}, {@unhide}, {@gid_forget}, {@adinicb}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$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") mkdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x24) 1.342055528s ago: executing program 1 (id=8616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.2210385s ago: executing program 5 (id=8617): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x58, 0x21c) 1.22077768s ago: executing program 4 (id=8618): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.01423539s ago: executing program 3 (id=8619): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x2) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 936.203118ms ago: executing program 2 (id=8620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 774.004124ms ago: executing program 2 (id=8621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x0) 773.659394ms ago: executing program 3 (id=8622): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) 720.968229ms ago: executing program 4 (id=8623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r1, 0x1, 0x70bd27, 0x4, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004) 625.919928ms ago: executing program 3 (id=8624): quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, &(0x7f0000000280)={0x10000, 0x6d0, 0x0, 0x2}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 590.637762ms ago: executing program 2 (id=8625): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @raw8={"1f000e00000000002000"}}], 0x1c) 547.702756ms ago: executing program 4 (id=8626): syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x800884, &(0x7f000001f680)={[{@errors_remount}, {@errors_remount}, {@disable_sparse_yes}, {@disable_sparse_yes}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@disable_sparse_yes}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x1}}, {@gid}, {@errors_recover}, {@utf8}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_role={'obj_role', 0x3d, '*}(}'}}, {@obj_type={'obj_type', 0x3d, '\x01C\x05e\xa2\x88\xa3(\xfd\x1cN\x91K\xacn\xa4\xaay\x0063\x90\x9e*\x99R\x1c\x02o\t\xa8\x8f\x93\xf2\xd2\xcb\x9d:VwP\x1c^\a\x00.\xfd\xc3P2t\x02\x00'}}, {@audit}]}, 0xdd, 0x1ee70, &(0x7f000001f800)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x81c04) truncate(&(0x7f0000000140)='./file2\x00', 0x5) 481.420422ms ago: executing program 3 (id=8627): r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x8, @loopback, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x2, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xf800, 0x7}}}}}}, 0x0) 449.673746ms ago: executing program 2 (id=8628): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) sendto$l2tp6(r0, 0x0, 0x0, 0x20040890, &(0x7f00000002c0)={0xa, 0x0, 0x200, @loopback, 0x6, 0xfffffffe}, 0x20) 342.377186ms ago: executing program 2 (id=8630): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000)="e33d8b5d8f47b1ac82565461fc27e076785aa9654aa504e1b7ac6f55e7955f26d1140b35b532845396372146f2109a5cf9fe5c7ed87d60365ffbda3ae48204b7c00a2c84a4bd9dd3113c642fbb32aab308fcf4a9235bd4ad40f27200", 0x0}, 0x20) 316.956489ms ago: executing program 3 (id=8631): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x40000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 208.991949ms ago: executing program 1 (id=8632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xfffffffd, 0x25dfdbfd, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 70.699212ms ago: executing program 1 (id=8633): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") creat(&(0x7f0000000140)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) 70.516713ms ago: executing program 2 (id=8634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.392549ms ago: executing program 4 (id=8635): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880200108801c0007800800050000800000080006005d00000008000600c200000024000780080006"], 0x14c}}, 0x0) 0s ago: executing program 3 (id=8636): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x40a00002, 0x0, 0x81, 0xfffffffe, 'syz1\x00', 0xf6}, 0x3, 0x30, 0x3e, r1, 0x1, 0x3, 'syz1\x00', &(0x7f0000000640)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0x1e}) kernel console output (not intermixed with test programs): usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.104758][ T4237] usb 6-1: config 0 has no interface number 0 [ 470.146661][ T4237] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 470.199982][ T4237] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0xA has invalid wMaxPacketSize 0 [ 470.256211][ T4237] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.318706][ T4237] usb 6-1: config 0 interface 52 has no altsetting 0 [ 470.556682][ T4237] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 470.587421][ T4237] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 470.595934][ T4237] usb 6-1: Product: syz [ 470.619587][T20674] loop3: detected capacity change from 0 to 4096 [ 470.643702][ T4237] usb 6-1: Manufacturer: syz [ 470.655880][ T4237] usb 6-1: SerialNumber: syz [ 470.677776][T20674] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 470.707641][ T4237] usb 6-1: config 0 descriptor?? [ 470.725085][T20685] loop1: detected capacity change from 0 to 764 [ 470.772708][T20674] ntfs3: loop3: failed to convert "c46c" to macgreek [ 470.796661][ T7172] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 470.833454][T20685] Symlink component flag not implemented [ 470.859820][T20685] Symlink component flag not implemented [ 470.865978][T20685] Symlink component flag not implemented (129) [ 470.896535][T20685] Symlink component flag not implemented (6) [ 471.082111][ T7172] usb 5-1: Using ep0 maxpacket: 16 [ 471.206824][ T7172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 471.219389][T20696] xt_CT: No such helper "syz0" [ 471.241457][ T9375] usb 6-1: USB disconnect, device number 30 [ 471.389187][T20710] loop2: detected capacity change from 0 to 512 [ 471.418174][ T7172] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 471.428372][ T7172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.454383][ T7172] usb 5-1: Product: syz [ 471.459006][ T7172] usb 5-1: Manufacturer: syz [ 471.463660][ T7172] usb 5-1: SerialNumber: syz [ 471.482347][T20710] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 471.501417][T20717] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7353'. [ 471.501825][ T7172] usb 5-1: config 0 descriptor?? [ 471.533362][T20710] EXT4-fs (loop2): orphan cleanup on readonly fs [ 471.545455][T20710] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #3: comm syz.2.7350: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 471.580763][T20710] EXT4-fs error (device loop2): ext4_quota_enable:6420: comm syz.2.7350: Bad quota inode: 3, type: 0 [ 471.582467][T20717] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7353'. [ 471.623600][T20710] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 471.640745][T20710] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 471.647643][T20710] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 471.830856][ T7172] usb 5-1: USB disconnect, device number 30 [ 472.419267][T20764] ERROR: device name not specified. [ 472.502325][T20768] loop5: detected capacity change from 0 to 64 [ 472.838933][T20792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7390'. [ 473.115139][T20809] kAFS: unable to lookup cell 'syÄž>ʘ·Kz1' [ 473.137009][T20812] x_tables: duplicate entry at hook 2 [ 473.220122][T20816] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 473.267926][T20818] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 473.332450][T20820] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 473.406968][T20820] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 473.467419][T20820] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 473.556459][ T7172] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 473.633469][T20835] xt_bpf: check failed: parse error [ 473.696178][T20839] loop5: detected capacity change from 0 to 16 [ 473.742403][T20839] erofs: (device loop5): mounted with root inode @ nid 36. [ 473.806600][ T7172] usb 4-1: Using ep0 maxpacket: 32 [ 473.966613][ T7172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 474.066786][ T7172] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 474.084548][ T7172] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 474.111799][ T7172] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 474.161444][T20856] loop5: detected capacity change from 0 to 512 [ 474.176482][ T7172] usb 4-1: config 128 has no interface number 0 [ 474.181402][T20850] loop1: detected capacity change from 0 to 4096 [ 474.196064][ T7172] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 474.216934][ T7172] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.258278][T20850] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 474.268241][ T7172] usb 4-1: config 128 interface 127 has no altsetting 0 [ 474.352197][T20856] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 474.426760][ T7172] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 474.436218][ T7172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.506741][T20856] ext4 filesystem being mounted at /1172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.515246][ T7172] usb 4-1: Product: syz [ 474.527587][ T7172] usb 4-1: Manufacturer: syz [ 474.532525][ T7172] usb 4-1: SerialNumber: syz [ 474.766502][ T9375] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 474.952280][T20885] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 475.044469][ T7172] usb 4-1: USB disconnect, device number 31 [ 475.211646][T20897] loop2: detected capacity change from 0 to 8 [ 475.226566][T20900] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.7441'. [ 475.280741][T20897] SQUASHFS error: zlib decompression failed, data probably corrupt [ 475.298775][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.334862][T20897] SQUASHFS error: Failed to read block 0x9b: -5 [ 475.352862][T20897] SQUASHFS error: Unable to read metadata cache entry [99] [ 475.366554][T20897] SQUASHFS error: Unable to read inode 0x127 [ 475.377040][ T9375] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 475.377133][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7443'. [ 475.396895][ T9375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.417291][ T9375] usb 5-1: Product: syz [ 475.421911][ T9375] usb 5-1: Manufacturer: syz [ 475.446174][ T9375] usb 5-1: SerialNumber: syz [ 475.467422][T20905] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7443'. [ 475.489170][ T9375] usb 5-1: config 0 descriptor?? [ 475.526662][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7443'. [ 475.542576][ T9375] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 475.584749][T20905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7443'. [ 475.645210][T20911] loop2: detected capacity change from 0 to 512 [ 475.696694][T20911] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 475.728194][T20911] blk_update_request: I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 475.768899][T20911] EXT4-fs (loop2): couldn't read superblock of external journal [ 475.791976][ T4245] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 475.882150][T20918] loop1: detected capacity change from 0 to 512 [ 475.906895][T20918] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 475.906895][T20918] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 475.906895][T20918] [ 475.968092][ T13] usb 5-1: USB disconnect, device number 31 [ 476.043236][T20907] loop5: detected capacity change from 0 to 32768 [ 476.045562][T20918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.7449: inode #262144: comm syz.1.7449: iget: illegal inode # [ 476.072559][T20918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7449: error while reading EA inode 262144 err=-117 [ 476.152889][T20918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.7449: inode #262144: comm syz.1.7449: iget: illegal inode # [ 476.171157][T20918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7449: error while reading EA inode 262144 err=-117 [ 476.186871][T20918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.7449: inode #1: comm syz.1.7449: iget: illegal inode # [ 476.226787][ T4245] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 476.240379][T20918] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.7449: error while reading EA inode 1 err=-117 [ 476.265599][ T4245] usb 4-1: config 0 has no interface number 0 [ 476.278218][ T4245] usb 4-1: config 0 interface 122 has no altsetting 0 [ 476.285751][T20918] EXT4-fs (loop1): 1 orphan inode deleted [ 476.296758][T20918] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,journal_ioprio=0x0000000000000001,lazytime,nouser_xattr,init_itable=0x0000000000001000,,errors=continue. Quota mode: none. [ 476.506550][ T4245] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 476.515777][ T4245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.554282][ T4245] usb 4-1: Product: syz [ 476.604017][ T4245] usb 4-1: Manufacturer: syz [ 476.616386][ T4245] usb 4-1: SerialNumber: syz [ 476.658448][T20943] loop1: detected capacity change from 0 to 64 [ 476.687620][ T4245] usb 4-1: config 0 descriptor?? [ 476.827238][T20948] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7463'. [ 476.906997][T20952] x_tables: duplicate underflow at hook 2 [ 476.917883][T20946] loop5: detected capacity change from 0 to 8192 [ 477.031667][T20946] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 477.044502][T20946] REISERFS (device loop5): using ordered data mode [ 477.052712][T20946] reiserfs: using flush barriers [ 477.065215][T20946] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 477.085011][T20946] REISERFS (device loop5): checking transaction log (loop5) [ 477.104813][T20946] REISERFS (device loop5): Using r5 hash to sort names [ 477.105162][T20946] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 477.143725][T20962] loop4: detected capacity change from 0 to 512 [ 477.175371][ T4245] usb 4-1: USB disconnect, device number 32 [ 477.196884][ T4245] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 477.266102][T20962] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 477.283611][T20962] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 477.313873][T20962] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 477.390490][T20962] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 477.428655][T20962] EXT4-fs (loop4): failed to initialize system zone (-117) [ 477.472691][T20962] EXT4-fs (loop4): mount failed [ 477.786617][ T7172] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 477.859648][T20996] loop1: detected capacity change from 0 to 1764 [ 477.979413][T20998] loop3: detected capacity change from 0 to 4096 [ 478.107747][T20998] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 478.146758][ T7172] usb 5-1: config 0 has an invalid interface number: 111 but max is 0 [ 478.169980][ T7172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.207593][ T7172] usb 5-1: config 0 has no interface number 0 [ 478.214551][T20998] ntfs3: loop3: failed to convert "c46c" to iso8859-14 [ 478.232913][ T7172] usb 5-1: too many endpoints for config 0 interface 111 altsetting 99: 44, using maximum allowed: 30 [ 478.282852][ T7172] usb 5-1: config 0 interface 111 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 478.322744][ T7172] usb 5-1: config 0 interface 111 has no altsetting 0 [ 478.351230][ T7172] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 478.423299][ T7172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.510625][ T7172] usb 5-1: config 0 descriptor?? [ 478.563477][ T7172] usb 5-1: selecting invalid altsetting 0 [ 478.695612][T21014] loop3: detected capacity change from 0 to 4096 [ 478.759738][T21014] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 478.810293][ T4245] usb 5-1: USB disconnect, device number 32 [ 478.816730][T21014] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 478.836572][ T9375] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 478.876710][T21014] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 478.883030][T20994] loop5: detected capacity change from 0 to 32768 [ 478.914984][T21022] loop2: detected capacity change from 0 to 2048 [ 478.916559][T21014] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 478.942644][T21014] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 478.957673][T21014] ntfs: volume version 3.1. [ 478.965404][T21014] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 478.979351][T21014] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 479.010848][T20994] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 479.015785][T21014] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 479.021179][T20994] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 479.071191][T21014] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 479.075463][T20994] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 479.085783][T21014] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 479.110105][ T7623] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 479.126453][ T7623] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 479.273004][ T7623] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 146ms [ 479.298717][T21024] loop2: detected capacity change from 0 to 4096 [ 479.306487][ T7623] gfs2: fsid=syz:syz.0: jid=0: Done [ 479.315649][T20994] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 479.427249][ T9375] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 479.463045][ T9375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.495012][ T9375] usb 2-1: Product: syz [ 479.527265][ T9375] usb 2-1: Manufacturer: syz [ 479.532160][ T9375] usb 2-1: SerialNumber: syz [ 479.573114][ T9375] r8152-cfgselector 2-1: config 0 descriptor?? [ 479.635096][T21031] loop3: detected capacity change from 0 to 512 [ 479.724068][T21031] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 479.746196][T21031] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 479.778480][T21031] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.7500: inode #15: comm syz.3.7500: iget: illegal inode # [ 479.846035][T21031] EXT4-fs (loop3): Remounting filesystem read-only [ 479.859267][T21031] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.7500: couldn't read orphan inode 15 (err -117) [ 479.937582][T21031] EXT4-fs (loop3): Remounting filesystem read-only [ 479.985227][T21031] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 480.086580][ T9375] r8152-cfgselector 2-1: Unknown version 0x0000 [ 480.097037][ T9375] r8152-cfgselector 2-1: USB disconnect, device number 31 [ 480.127564][T21031] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.7500: inode #15: comm syz.3.7500: iget: illegal inode # [ 480.186854][T21031] EXT4-fs (loop3): Remounting filesystem read-only [ 480.316664][T21060] xt_hashlimit: size too large, truncated to 1048576 [ 480.335517][T21060] xt_hashlimit: overflow, try lower: 0/0 [ 480.576361][T21074] loop2: detected capacity change from 0 to 1024 [ 480.768276][T21085] Cannot find del_set index 4 as target [ 480.836586][T21089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7530'. [ 481.277374][T21117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7542'. [ 481.421232][T21107] loop4: detected capacity change from 0 to 8192 [ 481.438361][T21123] loop5: detected capacity change from 0 to 2048 [ 481.506761][T21107] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 481.546559][T21107] REISERFS (device loop4): using ordered data mode [ 481.548618][T21127] loop3: detected capacity change from 0 to 512 [ 481.553587][T21107] reiserfs: using flush barriers [ 481.602897][T21123] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 481.622921][T21133] loop1: detected capacity change from 0 to 8192 [ 481.635143][T21107] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 481.657738][T21107] REISERFS (device loop4): checking transaction log (loop4) [ 481.677873][T21127] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 481.690849][T21133] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 481.707407][T21123] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 481.760391][T21127] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 4: comm syz.3.7547: lblock 0 mapped to illegal pblock 4 (length 1) [ 481.776241][T21133] REISERFS (device loop1): using ordered data mode [ 481.783220][T21133] reiserfs: using flush barriers [ 481.819231][T21107] REISERFS (device loop4): Using r5 hash to sort names [ 481.845163][T21133] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 481.863305][T21107] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 481.916371][T21127] EXT4-fs (loop3): Remounting filesystem read-only [ 481.923068][T21127] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.7547: error -117 reading directory block [ 481.943141][T21133] REISERFS (device loop1): checking transaction log (loop1) [ 482.089266][T21127] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 482.104369][T21133] REISERFS (device loop1): Using r5 hash to sort names [ 482.129802][T21133] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 482.183183][T21127] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,mblk_io_submit,abort,init_itable,grpquota,grpjquota=.i_version,errors=remount-ro,jqfmt=vfsv1,discard,,. Quota mode: writeback. [ 482.578778][T21159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7560'. [ 482.671468][T21163] loop1: detected capacity change from 0 to 256 [ 482.794794][ T7623] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 482.836460][ T4347] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 482.916162][T21163] FAT-fs (loop1): Directory bread(block 64) failed [ 482.946247][T21163] FAT-fs (loop1): Directory bread(block 65) failed [ 482.976734][T21163] FAT-fs (loop1): Directory bread(block 66) failed [ 482.993261][T21163] FAT-fs (loop1): Directory bread(block 67) failed [ 483.011375][T21163] FAT-fs (loop1): Directory bread(block 68) failed [ 483.040121][T21163] FAT-fs (loop1): Directory bread(block 69) failed [ 483.056670][T21163] FAT-fs (loop1): Directory bread(block 70) failed [ 483.069912][T21163] FAT-fs (loop1): Directory bread(block 71) failed [ 483.113142][T21163] FAT-fs (loop1): Directory bread(block 72) failed [ 483.146730][T21163] FAT-fs (loop1): Directory bread(block 73) failed [ 483.216625][ T7623] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 483.236454][ T7623] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.236809][ T4347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.264958][ T7623] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 483.326665][ T4347] usb 4-1: not running at top speed; connect to a high speed hub [ 483.406674][ T4347] usb 4-1: config 3 has an invalid interface number: 146 but max is 0 [ 483.415045][ T4347] usb 4-1: config 3 has no interface number 0 [ 483.454979][ T4347] usb 4-1: config 3 interface 146 has no altsetting 0 [ 483.486793][ T7623] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 483.522716][T21189] loop1: detected capacity change from 0 to 1024 [ 483.529776][ T7623] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 483.539894][ T7623] usb 5-1: Product: syz [ 483.544109][ T7623] usb 5-1: Manufacturer: syz [ 483.560179][ T7623] usb 5-1: SerialNumber: syz [ 483.571278][ T7623] usb 5-1: config 0 descriptor?? [ 483.626597][ T4347] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 483.642720][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.662778][ T4347] usb 4-1: Product: syz [ 483.683368][ T4347] usb 4-1: Manufacturer: syz [ 483.698845][ T4347] usb 4-1: SerialNumber: syz [ 483.713942][T21173] loop2: detected capacity change from 0 to 32768 [ 483.764911][T21195] loop5: detected capacity change from 0 to 1764 [ 483.826643][T21173] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 483.835184][T21173] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 483.864760][T21195] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 483.894939][ T7623] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 483.913888][T21173] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 483.933849][ T4237] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 483.945966][ T4237] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 483.964013][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.006572][ T4230] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 484.017580][ T4347] cdc_ether 4-1:3.146: More than one union descriptor, skipping ... [ 484.036954][ T4347] usb 4-1: bad CDC descriptors [ 484.042537][ T4347] usb 4-1: unsupported MDLM descriptors [ 484.090872][ T4347] usb 4-1: USB disconnect, device number 33 [ 484.107082][ T4237] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 161ms [ 484.114673][ T7172] usb 5-1: USB disconnect, device number 33 [ 484.115413][ T4237] gfs2: fsid=syz:syz.0: jid=0: Done [ 484.153136][T21173] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 484.405444][ T4230] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 484.430776][ T4230] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 484.456745][ T4230] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 484.482171][ T4230] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.501983][ T4230] usb 2-1: config 0 has no interface number 0 [ 484.530186][ T4230] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 484.583162][ T4230] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 484.604386][ T4230] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.627078][ T4230] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.666482][ T4230] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 484.704603][T21218] loop4: detected capacity change from 0 to 16 [ 484.716383][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.734729][T21220] loop2: detected capacity change from 0 to 512 [ 484.753078][T21218] erofs: (device loop4): mounted with root inode @ nid 36. [ 484.763747][ T4230] usb 2-1: config 0 descriptor?? [ 484.809499][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7591'. [ 484.828880][ T4230] gspca_main: spca561-2.14.0 probing abcd:cdee [ 484.894953][T21220] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 484.915312][T21220] ext4 filesystem being mounted at /1552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.116707][ T4230] spca561: probe of 2-1:0.156 failed with error -22 [ 485.124495][ T4230] usb 2-1: MIDIStreaming interface descriptor not found [ 485.216612][ T4230] usb 2-1: USB disconnect, device number 32 [ 485.538280][ T4990] udevd[4990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.608771][T21263] netlink: 'syz.5.7608': attribute type 4 has an invalid length. [ 485.686382][T21263] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7608'. [ 485.877380][T21276] loop5: detected capacity change from 0 to 128 [ 486.513465][T21324] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7640'. [ 486.751222][T21340] device veth3 entered promiscuous mode [ 487.009956][T21361] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7658'. [ 487.031572][T21361] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 487.054309][T21362] loop2: detected capacity change from 0 to 1764 [ 487.146062][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7663'. [ 487.160935][T21370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7663'. [ 487.230188][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7663'. [ 487.234001][T21374] loop5: detected capacity change from 0 to 64 [ 487.273734][T21370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7663'. [ 487.291162][T21370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7663'. [ 487.340852][T21374] attempt to access beyond end of device [ 487.340852][T21374] loop5: rw=0, want=3074, limit=64 [ 487.523572][T21386] netlink: 'syz.3.7671': attribute type 1 has an invalid length. [ 487.531860][ T7172] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 487.536484][ T7623] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 487.786598][ T7172] usb 2-1: Using ep0 maxpacket: 32 [ 487.906835][ T7172] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 487.923149][ T7172] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.934128][ T7172] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 487.967536][ T7623] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 487.971205][ T7172] usb 2-1: config 0 has no interface number 1 [ 488.004687][ T7172] usb 2-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64 [ 488.005019][ T7623] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 488.017249][ T7172] usb 2-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.080083][ T7623] usb 3-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 488.103055][ T7623] usb 3-1: config 0 interface 0 has no altsetting 0 [ 488.118093][ T7623] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 488.131883][ T7623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.152065][ T7623] usb 3-1: config 0 descriptor?? [ 488.187090][T21362] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 488.196944][ T7172] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 488.217891][ T7172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.236457][ T7172] usb 2-1: Product: syz [ 488.245129][T21412] loop3: detected capacity change from 0 to 256 [ 488.254522][ T7172] usb 2-1: Manufacturer: syz [ 488.265711][ T7172] usb 2-1: SerialNumber: syz [ 488.283781][ T7172] usb 2-1: config 0 descriptor?? [ 488.367157][T21412] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.466518][ T4237] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 488.486767][ T7623] usb 3-1: string descriptor 0 read error: -71 [ 488.493601][ T7623] usb 3-1: ucan: probing device on interface #0 [ 488.514270][ T7623] usb 3-1: ucan: invalid endpoint configuration [ 488.523866][ T7623] usb 3-1: ucan: probe failed; try to update the device firmware [ 488.556119][ T7623] usb 3-1: USB disconnect, device number 36 [ 488.589470][ T7172] kaweth 2-1:0.235: Firmware present in device. [ 488.644882][T21428] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 488.783277][ T7172] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 488.803059][ T7172] kaweth: probe of 2-1:0.235 failed with error -5 [ 488.864865][ T7172] kaweth 2-1:0.0: Firmware present in device. [ 488.897267][ T7172] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 488.913464][ T7172] kaweth: probe of 2-1:0.0 failed with error -5 [ 488.926934][ T4237] usb 5-1: config 3 has an invalid interface number: 234 but max is 0 [ 488.935987][ T4237] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 488.942280][ T7172] usb 2-1: USB disconnect, device number 33 [ 488.964708][ T4237] usb 5-1: config 3 has no interface number 0 [ 488.980112][ T4237] usb 5-1: config 3 interface 234 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 488.998872][ T4237] usb 5-1: config 3 interface 234 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 489.206660][ T4245] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 489.214982][ T4237] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=60.f5 [ 489.237274][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.269103][ T4237] usb 5-1: Product: syz [ 489.273426][ T4237] usb 5-1: Manufacturer: syz [ 489.293871][ T4237] usb 5-1: SerialNumber: syz [ 489.377677][ T4237] usb 5-1: bad CDC descriptors [ 489.504109][T21469] loop3: detected capacity change from 0 to 256 [ 489.608364][T21469] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 489.610780][ T7172] usb 5-1: USB disconnect, device number 34 [ 489.656281][T21469] FAT-fs (loop3): Filesystem has been set read-only [ 489.796875][ T4245] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 489.806081][ T4245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.838656][ T4245] usb 6-1: Product: syz [ 489.843802][ T4245] usb 6-1: Manufacturer: syz [ 489.865039][ T4245] usb 6-1: SerialNumber: syz [ 489.879946][ T4245] usb 6-1: config 0 descriptor?? [ 489.937931][ T4245] ch341 6-1:0.0: ch341-uart converter detected [ 489.941957][T21488] netlink: 'syz.3.7719': attribute type 10 has an invalid length. [ 490.080148][T21488] team0: Device veth0_vlan failed to register rx_handler [ 490.229402][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7726'. [ 490.369856][ T4245] usb 6-1: failed to send control message: -71 [ 490.388551][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7728'. [ 490.403830][ T4245] ch341-uart: probe of ttyUSB0 failed with error -71 [ 490.428744][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7728'. [ 490.448943][ T4245] usb 6-1: USB disconnect, device number 31 [ 490.485092][ T4245] ch341 6-1:0.0: device disconnected [ 490.601584][T21514] program syz.3.7732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.845072][T21527] loop4: detected capacity change from 0 to 2048 [ 490.873693][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7740'. [ 490.937853][T21527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.026811][T21527] UDF-fs: incorrect filename length (10) [ 491.085361][T21540] loop2: detected capacity change from 0 to 256 [ 491.182614][T21543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7747'. [ 491.232162][T21546] loop3: detected capacity change from 0 to 128 [ 491.386539][T21546] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,discard,,errors=continue. Quota mode: none. [ 491.427342][T21546] ext4 filesystem being mounted at /1556/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.807479][T21574] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 492.264902][T21601] loop4: detected capacity change from 0 to 64 [ 492.394138][T21606] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 492.394946][T21601] hfs: small file entry [ 492.415076][T21606] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 492.568174][T21610] loop1: detected capacity change from 0 to 1024 [ 492.689582][T21610] hfsplus: xattr searching failed [ 492.793325][T21570] loop2: detected capacity change from 0 to 32768 [ 492.938931][T21570] diRead: diIAGRead returned -5 [ 492.944186][T21570] jfs_lookup: iget failed on inum 196612 [ 492.968513][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 492.968530][ T26] audit: type=1400 audit(1760057078.632:27): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=21623 comm="syz.1.7783" [ 493.048620][ T7623] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 493.170473][T21632] usb usb8: usbfs: process 21632 (syz.2.7788) did not claim interface 6 before use [ 493.326622][ T7623] usb 6-1: Using ep0 maxpacket: 32 [ 493.456884][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.479172][ T7623] usb 6-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 493.527248][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.565470][ T7623] usb 6-1: config 0 descriptor?? [ 493.788156][T21663] loop3: detected capacity change from 0 to 64 [ 494.039997][T21672] loop2: detected capacity change from 0 to 1024 [ 494.107693][ T7623] wacom 0003:056A:00F4.0002: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.5-1/input0 [ 494.199440][T21678] loop4: detected capacity change from 0 to 64 [ 494.272453][T21682] loop1: detected capacity change from 0 to 1024 [ 494.306846][T19159] usb 6-1: USB disconnect, device number 32 [ 494.356574][ T7172] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 494.381669][ T6896] hfsplus: b-tree write err: -5, ino 4 [ 494.413845][ T4192] hfs: node 4:3 still has 1 user(s)! [ 494.476539][ T7173] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 494.592247][T21687] mkiss: ax0: crc mode is auto. [ 494.608082][T21683] fido_id[21683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 494.717053][ T7172] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 494.725777][ T7172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.748071][ T7172] usb 4-1: config 0 has no interface number 0 [ 494.755343][ T7172] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 494.786244][ T7172] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.876712][ T7173] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 494.885486][ T7173] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 494.940632][ T7173] usb 3-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 494.967072][ T7172] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 494.979013][ T7173] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 494.988326][ T7172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.997231][ T7173] usb 3-1: config 0 has no interface number 0 [ 495.003477][ T7172] usb 4-1: Product: syz [ 495.007747][ T7172] usb 4-1: Manufacturer: syz [ 495.012774][ T7172] usb 4-1: SerialNumber: syz [ 495.018122][ T7173] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 495.029575][ T7173] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 495.042380][ T7172] usb 4-1: config 0 descriptor?? [ 495.055594][ T7173] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 495.067383][ T7173] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.081310][ T7173] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 495.100639][ T7173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.126454][ T7173] usb 3-1: config 0 descriptor?? [ 495.168602][ T7173] gspca_main: spca561-2.14.0 probing abcd:cdee [ 495.390392][T21711] mmap: syz.1.7823 (21711) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 495.446631][ T7173] spca561: probe of 3-1:0.156 failed with error -22 [ 495.454330][ T7173] usb 3-1: MIDIStreaming interface descriptor not found [ 495.466962][T21710] loop5: detected capacity change from 0 to 8192 [ 495.492928][ T7173] usb 3-1: USB disconnect, device number 37 [ 495.524791][T21710] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 495.536948][T21710] REISERFS (device loop5): using journaled data mode [ 495.562150][T21710] REISERFS warning (device loop5): sh-457 journal_init_dev: journal_init_dev: Cannot open './': -15 [ 495.598996][T21710] REISERFS warning (device loop5): sh-462 journal_init: unable to initialize journal device [ 495.756800][T19159] usb 4-1: USB disconnect, device number 34 [ 495.767420][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.886046][T21717] 9p: Unknown Cache mode readahead [ 496.467308][ T4245] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 496.628094][T21751] loop3: detected capacity change from 0 to 764 [ 496.726983][T21751] rock: directory entry would overflow storage [ 496.741298][T21751] rock: sig=0x4654, size=5, remaining=4 [ 496.856655][ T4238] Bluetooth: hci2: command 0x0405 tx timeout [ 496.863065][ T4245] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 496.888883][ T4245] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.062406][T21784] tmpfs: Bad value for 'mpol' [ 497.107518][ T4245] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 497.146389][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 497.154852][ T4245] usb 2-1: Product: syz [ 497.232097][ T4245] usb 2-1: Manufacturer: syz [ 497.237817][ T4245] usb 2-1: SerialNumber: syz [ 497.272727][ T4245] usb 2-1: config 0 descriptor?? [ 497.348480][ T4245] usb 2-1: selecting invalid altsetting 0 [ 497.400209][T21798] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 497.400242][T21798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 497.400318][T21798] vhci_hcd vhci_hcd.0: Device attached [ 497.573755][ T7172] usb 2-1: USB disconnect, device number 34 [ 497.596646][T19159] vhci_hcd: vhci_device speed not set [ 497.666674][T19159] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 497.674827][ T7173] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 498.017973][ T26] audit: type=1800 audit(1760057083.672:28): pid=21822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.7869" name="/newroot/1602/bus/#8218//deleted" dev="tmpfs" ino=8218 res=0 errno=0 [ 498.043064][ T4238] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 498.046811][ T7173] usb 4-1: config 0 has no interfaces? [ 498.074576][ T7173] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 498.133298][ T7173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.178282][ T7173] usb 4-1: config 0 descriptor?? [ 498.196642][ T7623] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 498.292764][T21843] loop1: detected capacity change from 0 to 64 [ 498.306805][ T4238] usb 6-1: Using ep0 maxpacket: 8 [ 498.436652][T21799] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 498.437942][ T4245] usb 4-1: USB disconnect, device number 35 [ 498.453673][ T154] vhci_hcd: stop threads [ 498.472786][ T154] vhci_hcd: release socket [ 498.479480][ T4238] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.486832][ T154] vhci_hcd: disconnect device [ 498.492471][ T7623] usb 5-1: Using ep0 maxpacket: 16 [ 498.514826][ T4238] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.526003][ T4238] usb 6-1: config 0 interface 0 has no altsetting 0 [ 498.533178][ T4238] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 498.548630][ T4238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.560006][ T4238] usb 6-1: config 0 descriptor?? [ 498.765566][ T7173] kernel write not supported for file /audio (pid: 7173 comm: kworker/1:17) [ 498.796608][ T7623] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 498.814952][ T7623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.824122][ T7623] usb 5-1: Product: syz [ 498.832005][ T7623] usb 5-1: Manufacturer: syz [ 498.837261][ T7623] usb 5-1: SerialNumber: syz [ 498.847314][ T7623] r8152-cfgselector 5-1: config 0 descriptor?? [ 499.046739][ T4245] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 499.056949][ T4238] smartjoyplus 0003:0B43:0003.0003: ignoring exceeding usage max [ 499.077861][ T4238] smartjoyplus 0003:0B43:0003.0003: unbalanced collection at end of report description [ 499.112962][ T4238] smartjoyplus 0003:0B43:0003.0003: parse failed [ 499.119886][ T4238] smartjoyplus: probe of 0003:0B43:0003.0003 failed with error -22 [ 499.173950][T21873] loop3: detected capacity change from 0 to 8192 [ 499.265469][T21873] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 499.278247][T21873] REISERFS (device loop3): using ordered data mode [ 499.285077][T21873] reiserfs: using flush barriers [ 499.300065][T21873] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 499.317653][T21873] REISERFS (device loop3): checking transaction log (loop3) [ 499.329626][T21873] REISERFS (device loop3): Using r5 hash to sort names [ 499.337955][T21873] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 499.345418][ T4238] usb 6-1: USB disconnect, device number 33 [ 499.546968][ T7623] r8152-cfgselector 5-1: Unknown version 0x0000 [ 499.563486][ T7623] r8152-cfgselector 5-1: USB disconnect, device number 35 [ 499.666823][ T4245] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 499.693413][ T4245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.731136][ T4245] usb 2-1: Product: syz [ 499.735381][ T4245] usb 2-1: Manufacturer: syz [ 499.742359][ T4245] usb 2-1: SerialNumber: syz [ 499.781894][ T4245] usb 2-1: config 0 descriptor?? [ 499.865870][T21892] loop3: detected capacity change from 0 to 512 [ 499.980337][T21890] loop2: detected capacity change from 0 to 4096 [ 500.040058][T21890] ntfs: volume version 3.1. [ 500.151388][ T4245] usb 2-1: USB disconnect, device number 35 [ 500.480671][T21911] loop5: detected capacity change from 0 to 128 [ 500.536162][T21913] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 500.564810][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7910'. [ 500.593936][T21911] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 500.657027][T21911] sysv_free_block: trying to free block not in datazone [ 500.780115][T21925] overlayfs: missing 'lowerdir' [ 500.880591][ T6580] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 500.967270][T21935] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 500.976121][T21935] overlayfs: missing 'lowerdir' [ 501.007003][T21933] loop2: detected capacity change from 0 to 2048 [ 501.065958][T21939] loop5: detected capacity change from 0 to 256 [ 501.088202][T21933] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 501.245559][T21946] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.276704][T21948] bridge_slave_0: default FDB implementation only supports local addresses [ 501.421442][ T7173] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 501.525974][T21957] loop4: detected capacity change from 0 to 512 [ 501.588895][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.595337][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.619390][T21964] loop2: detected capacity change from 0 to 128 [ 501.662792][T21957] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 501.693192][T21964] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 501.784866][T21957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.796687][ T7173] usb 4-1: config 0 interface 0 has no altsetting 0 [ 501.796730][ T7173] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 501.833711][ T7173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.855086][ T7173] usb 4-1: config 0 descriptor?? [ 501.909379][T21957] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 502.202474][T21959] loop5: detected capacity change from 0 to 32768 [ 502.271217][T21966] loop1: detected capacity change from 0 to 32768 [ 502.358686][ T7173] zeroplus 0003:0C12:0005.0004: unknown main item tag 0x2 [ 502.379311][T21959] find_entry called with index >= next_index [ 502.407991][ T7173] zeroplus 0003:0C12:0005.0004: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 502.506956][ T7173] zeroplus 0003:0C12:0005.0004: no inputs found [ 502.560742][ T7173] usb 4-1: USB disconnect, device number 36 [ 502.776539][T19159] vhci_hcd: vhci_device speed not set [ 502.826952][T21984] fido_id[21984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 503.218402][T22008] loop3: detected capacity change from 0 to 256 [ 503.288400][T22001] loop1: detected capacity change from 0 to 4096 [ 503.342818][T22001] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 503.442311][T22014] netem: incorrect ge model size [ 503.492158][T22014] netem: change failed [ 503.515105][T22001] ntfs3: loop1: failed to convert "c46c" to cp1251 [ 503.849371][T21989] loop4: detected capacity change from 0 to 32768 [ 504.473377][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7970'. [ 504.535539][T22018] loop3: detected capacity change from 0 to 32768 [ 504.671363][T22018] XFS (loop3): Mounting V5 Filesystem [ 504.752288][T22035] loop5: detected capacity change from 0 to 32768 [ 504.753735][T22059] loop1: detected capacity change from 0 to 16 [ 504.867553][T22035] XFS (loop5): Mounting V5 Filesystem [ 504.873263][T22059] erofs: (device loop1): mounted with root inode @ nid 36. [ 504.946817][T22018] XFS (loop3): Ending clean mount [ 505.024941][T22035] XFS (loop5): Ending clean mount [ 505.052015][ T4184] XFS (loop3): Unmounting Filesystem [ 505.093674][ T8331] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 505.292465][ T6580] XFS (loop5): Unmounting Filesystem [ 505.485906][T22082] loop1: detected capacity change from 0 to 2048 [ 505.511101][ T8331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.529073][ T8331] usb 5-1: config 0 has no interfaces? [ 505.542021][T22082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.554210][ T8331] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 505.575063][ T8331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.600574][ T8331] usb 5-1: config 0 descriptor?? [ 505.824300][T22086] loop2: detected capacity change from 0 to 128 [ 505.981391][T22086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.007594][T22086] ext4 filesystem being mounted at /1645/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 506.397455][T22105] device vlan2 entered promiscuous mode [ 506.463486][T22105] device bridge0 entered promiscuous mode [ 506.552351][T22114] loop5: detected capacity change from 0 to 128 [ 506.583906][T22113] loop2: detected capacity change from 0 to 1024 [ 506.658463][T22110] loop3: detected capacity change from 0 to 8192 [ 506.672139][T22114] FAT-fs (loop5): Directory bread(block 162) failed [ 506.674465][T22116] loop1: detected capacity change from 0 to 1024 [ 506.683641][T22114] FAT-fs (loop5): Directory bread(block 163) failed [ 506.729117][T22114] FAT-fs (loop5): Directory bread(block 164) failed [ 506.734354][T22113] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.746469][T22114] FAT-fs (loop5): Directory bread(block 165) failed [ 506.746511][T22114] FAT-fs (loop5): Directory bread(block 166) failed [ 506.746542][T22114] FAT-fs (loop5): Directory bread(block 167) failed [ 506.746573][T22114] FAT-fs (loop5): Directory bread(block 168) failed [ 506.746602][T22114] FAT-fs (loop5): Directory bread(block 169) failed [ 506.783604][T22113] ext4 filesystem being mounted at /1647/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.785954][T22114] FAT-fs (loop5): Directory bread(block 162) failed [ 506.804280][T22063] loop4: detected capacity change from 0 to 32768 [ 506.813941][T22116] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 506.821506][T22114] FAT-fs (loop5): Directory bread(block 163) failed [ 506.857530][T22110] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 506.919449][T22063] Dev loop4 SGI disklabel: csum bad, label corrupted [ 506.931676][T22110] REISERFS (device loop3): using ordered data mode [ 506.939944][T22110] reiserfs: using flush barriers [ 506.991621][ T4238] usb 5-1: USB disconnect, device number 36 [ 506.998748][T22110] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 507.035993][T22110] REISERFS (device loop3): checking transaction log (loop3) [ 507.074830][T22110] REISERFS (device loop3): Using r5 hash to sort names [ 507.082828][T22110] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 507.138133][ T6654] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 507.264337][ T6654] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 507.326431][ T6654] EXT4-fs (loop2): This should not happen!! Data will be lost [ 507.326431][ T6654] [ 507.336238][ T6654] EXT4-fs (loop2): Total free blocks count 0 [ 507.358706][ T6654] EXT4-fs (loop2): Free/Dirty block details [ 507.364941][ T6654] EXT4-fs (loop2): free_blocks=4293918720 [ 507.384506][ T6654] EXT4-fs (loop2): dirty_blocks=16 [ 507.390223][ T6654] EXT4-fs (loop2): Block reservation details [ 507.404610][ T6654] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 507.659268][T22138] loop5: detected capacity change from 0 to 16 [ 507.762696][T22138] erofs: (device loop5): mounted with root inode @ nid 36. [ 507.789909][T22142] loop3: detected capacity change from 0 to 512 [ 507.818248][T22138] overlayfs: upper fs is r/o, try multi-lower layers mount [ 507.934767][T22145] loop4: detected capacity change from 0 to 64 [ 507.943395][T22142] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.8008: dx entry: limit 0 != root limit 125 [ 507.955411][T22142] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.8008: Corrupt directory, running e2fsck is recommended [ 507.974508][T22142] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 507.984211][T22142] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.8008: corrupted in-inode xattr [ 508.010252][T22142] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8008: couldn't read orphan inode 15 (err -117) [ 508.156933][T22142] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,user_xattr,user_xattr,grpjquota=.errors=remount-ro,errors=remount-ro,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 508.415006][T22167] loop2: detected capacity change from 0 to 512 [ 508.454895][T22169] loop4: detected capacity change from 0 to 1024 [ 508.479693][T22165] netlink: 'syz.5.8017': attribute type 3 has an invalid length. [ 508.578698][T22169] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 508.668193][T22167] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 508.688716][T22169] ext4 filesystem being mounted at /1696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.712358][T22167] EXT4-fs (loop2): 1 truncate cleaned up [ 508.790481][T22167] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 508.857554][T22171] loop1: detected capacity change from 0 to 32768 [ 508.869047][ T26] audit: type=1800 audit(1760057094.532:29): pid=22169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8018" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 508.914662][T22171] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 508.923064][T22171] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 508.950595][T22167] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.8019: Logical block already allocated [ 508.968944][T22171] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 508.979197][T22171] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (not first in block) [ 508.980605][T22169] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.8018: lblock 0 mapped to illegal pblock 0 (length 1) [ 508.991882][T22171] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 508.991882][T22171] inode = 4 2075 [ 508.991882][T22171] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 508.991920][T22171] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 508.992010][T22171] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 508.992025][T22171] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 508.992204][T22171] gfs2: fsid=syz:syz.0: File system withdrawn [ 509.054427][T22171] CPU: 0 PID: 22171 Comm: syz.1.8021 Not tainted syzkaller #0 [ 509.062150][T22171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.072410][T22171] Call Trace: [ 509.075722][T22171] [ 509.078706][T22171] dump_stack_lvl+0x168/0x230 [ 509.079856][T22167] EXT4-fs (loop2): Remounting filesystem read-only [ 509.083524][T22171] ? kobject_uevent_env+0x371/0x890 [ 509.096042][T22171] ? show_regs_print_info+0x20/0x20 [ 509.101308][T22171] ? load_image+0x3b0/0x3b0 [ 509.105947][T22171] ? kobject_uevent_env+0x371/0x890 [ 509.111272][T22171] gfs2_withdraw+0x111b/0x1460 [ 509.116201][T22171] ? gfs2_lm+0x220/0x220 [ 509.120494][T22171] ? load_image+0x3b0/0x3b0 [ 509.125055][T22171] ? gfs2_consist_inode_i+0xc0/0xe0 [ 509.130305][T22171] gfs2_dirent_scan+0x525/0x650 [ 509.135197][T22171] ? gfs2_dirent_search+0x7e0/0x7e0 [ 509.140523][T22171] ? gfs2_dirent_search+0x7e0/0x7e0 [ 509.145855][T22171] gfs2_dirent_search+0x2dd/0x7e0 [ 509.151134][T22171] ? __might_sleep+0xf0/0xf0 [ 509.155829][T22171] ? gfs2_dir_search+0x220/0x220 [ 509.160917][T22171] ? _raw_spin_unlock+0x24/0x40 [ 509.165904][T22171] ? gfs2_glock_nq+0xcb0/0x1550 [ 509.171029][T22171] gfs2_dir_search+0x49/0x220 [ 509.176117][T22171] gfs2_lookupi+0x45c/0x5e0 [ 509.180674][T22171] ? gfs2_lookup_simple+0xf0/0xf0 [ 509.185914][T22171] ? gfs2_lookupi+0x3fe/0x5e0 [ 509.190726][T22171] ? crc32_le_base+0x755/0xcf0 [ 509.195544][T22171] ? sprintf+0xd6/0x120 [ 509.196776][T22181] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.8019: Logical block already allocated [ 509.200213][T22171] gfs2_lookup_simple+0xa3/0xf0 [ 509.216825][T22171] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 509.222084][T22171] init_journal+0x1252/0x2220 [ 509.226937][T22171] ? end_bio_io_page+0x100/0x100 [ 509.232083][T22171] ? snprintf+0xd7/0x120 [ 509.236561][T22171] ? init_journal+0x710/0x2220 [ 509.241630][T22171] ? vscnprintf+0x80/0x80 [ 509.246340][T22171] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 509.251684][T22171] init_inodes+0xdb/0x320 [ 509.256080][T22171] gfs2_fill_super+0x1701/0x1f50 [ 509.261093][T22171] ? gfs2_reconfigure+0xcd0/0xcd0 [ 509.266357][T22171] ? gfs2_glock_nq_num+0x82/0x1b0 [ 509.271718][T22171] ? preempt_count_add+0x8d/0x190 [ 509.283222][T22171] ? sb_set_blocksize+0xa5/0xe0 [ 509.288677][T22171] get_tree_bdev+0x3f1/0x610 [ 509.293317][T22171] ? gfs2_reconfigure+0xcd0/0xcd0 [ 509.298400][T22171] gfs2_get_tree+0x4d/0x1e0 [ 509.303129][T22171] vfs_get_tree+0x88/0x270 [ 509.307653][T22171] do_new_mount+0x24a/0xa40 [ 509.312211][T22171] __se_sys_mount+0x2d6/0x3c0 [ 509.317266][T22171] ? __x64_sys_mount+0xc0/0xc0 [ 509.322164][T22171] ? lockdep_hardirqs_on+0x94/0x140 [ 509.327603][T22171] ? __x64_sys_mount+0x1c/0xc0 [ 509.332420][T22171] do_syscall_64+0x4c/0xa0 [ 509.336888][T22171] ? clear_bhb_loop+0x30/0x80 [ 509.341615][T22171] ? clear_bhb_loop+0x30/0x80 [ 509.346452][T22171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.352400][T22171] RIP: 0033:0x7f7ae727c66a [ 509.357156][T22171] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.377340][T22171] RSP: 002b:00007f7ae54e1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 509.385889][T22171] RAX: ffffffffffffffda RBX: 00007f7ae54e1ef0 RCX: 00007f7ae727c66a [ 509.394074][T22171] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007f7ae54e1eb0 [ 509.401056][T22181] EXT4-fs (loop2): Remounting filesystem read-only [ 509.402165][T22171] RBP: 0000200000000100 R08: 00007f7ae54e1ef0 R09: 0000000000200001 [ 509.417155][T22171] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 509.425434][T22171] R13: 00007f7ae54e1eb0 R14: 000000000001260a R15: 00002000000000c0 [ 509.433554][T22171] [ 509.437430][T22171] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 509.951464][T22196] loop5: detected capacity change from 0 to 1024 [ 509.961601][T22198] loop1: detected capacity change from 0 to 4096 [ 510.036517][T22196] EXT4-fs (loop5): inline encryption not supported [ 510.100212][T22196] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 2: comm syz.5.8030: lblock 2 mapped to illegal pblock 2 (length 1) [ 510.133126][T22204] loop4: detected capacity change from 0 to 1024 [ 510.147375][T22206] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 510.274659][T22196] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 510.297944][T22196] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 48: comm syz.5.8030: lblock 0 mapped to illegal pblock 48 (length 1) [ 510.314299][T22204] hfsplus: walked past end of dir [ 510.324919][T22190] loop2: detected capacity change from 0 to 32768 [ 510.369244][T22196] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 510.397719][T22196] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.8030: Failed to acquire dquot type 0 [ 510.436100][T22190] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 510.550710][T22196] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 510.579227][T22196] EXT4-fs error (device loop5): ext4_evict_inode:282: inode #11: comm syz.5.8030: mark_inode_dirty error [ 510.627456][T22196] EXT4-fs warning (device loop5): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 510.675277][T22196] EXT4-fs (loop5): 1 orphan inode deleted [ 510.680654][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 510.686947][ T6896] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 510.713548][T22196] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,i_version,,errors=continue. Quota mode: none. [ 510.775844][ T6896] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 510.800075][ T6896] EXT4-fs error (device loop5): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 0 [ 510.845021][T22196] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz.5.8030: Invalid inode table block 1 in block_group 0 [ 510.900298][T22196] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 510.991376][ T6580] EXT4-fs error (device loop5): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 510.998404][T22202] loop3: detected capacity change from 0 to 40427 [ 511.064318][ T6580] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 511.074432][T22202] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 511.084171][ T9375] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 511.090985][ T6580] EXT4-fs error (device loop5): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 511.116185][T22202] F2FS-fs (loop3): invalid crc value [ 511.160106][T22202] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 511.341854][T22202] F2FS-fs (loop3): Start checkpoint disabled! [ 511.375949][T22202] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 511.457492][T22202] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled. [ 511.496946][ T9375] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.525361][ T9375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.538773][ T9375] usb 3-1: config 0 descriptor?? [ 511.590952][ T9375] cp210x 3-1:0.0: cp210x converter detected [ 511.812983][T22234] loop5: detected capacity change from 0 to 256 [ 512.013275][T22234] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 512.132383][T22240] loop3: detected capacity change from 0 to 2048 [ 512.211951][ T4337] loop3: p1 < > p3 [ 512.236555][ T9375] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 512.244283][ T4337] loop3: p3 size 134217728 extends beyond EOD, truncated [ 512.254745][ T9375] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 512.278697][ T9375] usb 3-1: cp210x converter now attached to ttyUSB0 [ 512.294579][T22240] loop3: p1 < > p3 [ 512.302400][ T9375] usb 3-1: USB disconnect, device number 38 [ 512.343865][ T9375] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 512.357289][T22240] loop3: p3 size 134217728 extends beyond EOD, truncated [ 512.380476][ T9375] cp210x 3-1:0.0: device disconnected [ 512.452610][ T3562] loop3: p1 < > p3 [ 512.469348][ T3562] loop3: p3 size 134217728 extends beyond EOD, truncated [ 512.486647][ T4238] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 512.682022][ T4337] udevd[4337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 512.694567][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 512.756572][ T4238] usb 6-1: Using ep0 maxpacket: 16 [ 512.766100][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 512.780416][ T4635] udevd[4635]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 512.810807][T22242] loop1: detected capacity change from 0 to 32768 [ 512.896827][ T4238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.921143][ T4238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.949619][T22253] loop3: detected capacity change from 0 to 512 [ 512.976477][ T4238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.009906][ T4238] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.025657][ T4238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.083435][ T4238] usb 6-1: config 0 descriptor?? [ 513.109721][T22253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 513.161321][T22253] EXT4-fs (loop3): 1 truncate cleaned up [ 513.167507][T22253] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,discard,journal_ioprio=0x0000000000000003,errors=remount-ro,lazytime,minixdf,noquota,usrjquota=,. Quota mode: none. [ 513.232917][T22253] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:299: inode #15: comm syz.3.8053: verity file has no extents [ 513.249020][T22265] loop2: detected capacity change from 0 to 256 [ 513.278674][T22263] loop1: detected capacity change from 0 to 64 [ 513.371648][T22266] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:299: inode #15: comm syz.3.8053: verity file has no extents [ 513.390968][T22253] EXT4-fs (loop3): Remounting filesystem read-only [ 513.391990][T22263] hfs: bad catalog entry type 65535 [ 513.437120][T22266] EXT4-fs (loop3): Remounting filesystem read-only [ 513.471789][T22253] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 513.476591][T22266] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 513.608924][ T4238] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 513.631419][ T4238] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 513.690791][ T4238] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 513.764620][ T4238] microsoft 0003:045E:07DA.0005: no inputs found [ 513.782342][ T4238] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 513.841990][ T4238] usb 6-1: USB disconnect, device number 34 [ 513.992117][T22277] loop3: detected capacity change from 0 to 512 [ 514.015079][T22277] EXT4-fs (loop3): inline encryption not supported [ 514.057649][T22277] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 514.080978][T22277] EXT4-fs (loop3): Test dummy encryption mode enabled [ 514.136917][T22277] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 514.180741][T22273] fido_id[22273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 514.226182][T22277] EXT4-fs (loop3): orphan cleanup on readonly fs [ 514.235340][T22277] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.8061: inode #13: comm syz.3.8061: iget: illegal inode # [ 514.257393][T22277] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8061: couldn't read orphan inode 13 (err -117) [ 514.284817][T22277] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 514.320379][T22277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.8061: bg 0: block 426: padding at end of block bitmap is not set [ 514.672350][T22270] loop2: detected capacity change from 0 to 40427 [ 514.706015][T22282] loop3: detected capacity change from 0 to 4096 [ 514.735544][T22286] loop5: detected capacity change from 0 to 1024 [ 514.772347][T22282] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 514.791597][T22275] loop1: detected capacity change from 0 to 32768 [ 514.826954][T22282] ntfs3: loop3: Failed to load $Extend. [ 514.842922][T22270] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 514.866634][T22270] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 514.957235][T22275] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 515.118760][T22270] F2FS-fs (loop2): Found nat_bits in checkpoint [ 515.166872][T22275] (syz.1.8063,22275,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 515.284983][T22270] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 515.314194][T22270] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 515.369047][T22213] syz.4.8035 (22213): drop_caches: 1 [ 515.588900][T22296] loop5: detected capacity change from 0 to 40427 [ 515.608591][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 515.668712][ T7173] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 515.683149][T22296] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 515.692162][T22296] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 515.700893][T22296] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x2 [ 515.746048][T22296] F2FS-fs (loop5): invalid crc value [ 515.753548][T22296] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 515.815834][T22296] F2FS-fs (loop5): recover fsync data on readonly fs [ 515.825179][T22296] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 515.833359][T22296] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 515.904568][ T4183] attempt to access beyond end of device [ 515.904568][ T4183] loop2: rw=2049, want=45104, limit=40427 [ 516.036460][ T7173] usb 4-1: Using ep0 maxpacket: 32 [ 516.157473][ T7173] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 516.165761][ T7173] usb 4-1: config 0 has no interface number 0 [ 516.200729][ T7173] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.386925][ T7173] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 516.400919][T22315] device vlan2 entered promiscuous mode [ 516.410012][T22317] loop5: detected capacity change from 0 to 16 [ 516.416795][T22315] device wlan1 entered promiscuous mode [ 516.426737][ T7173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.445954][ T7173] usb 4-1: Product: syz [ 516.464142][ T7173] usb 4-1: Manufacturer: syz [ 516.480508][ T7173] usb 4-1: SerialNumber: syz [ 516.501291][ T7173] usb 4-1: config 0 descriptor?? [ 516.518279][T22317] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 516.551957][T22317] erofs: (device loop5): mounted with root inode @ nid 36. [ 516.570032][ T7173] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 516.589089][T22317] CIFS mount error: No usable UNC path provided in device string! [ 516.589089][T22317] [ 516.616570][ T7173] em28xx 4-1:0.132: Video interface 132 found: [ 516.646564][T22317] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.738869][T22319] loop4: detected capacity change from 0 to 1024 [ 516.819495][T22319] EXT4-fs (loop4): inline encryption not supported [ 516.836654][T22319] EXT4-fs (loop4): Ignoring removed bh option [ 516.843036][T22319] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 516.927639][T22319] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 517.006860][ T7173] em28xx 4-1:0.132: chip ID is em2800 [ 517.079352][T22312] loop1: detected capacity change from 0 to 32768 [ 517.222218][T22312] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 517.315918][ T7173] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 517.383224][ T7173] em28xx 4-1:0.132: board has no eeprom [ 517.488847][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 517.521993][ T7173] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 517.542244][ T7173] em28xx 4-1:0.132: analog set to bulk mode. [ 517.555907][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.607304][ T7173] usb 4-1: USB disconnect, device number 37 [ 517.644842][ T7173] em28xx 4-1:0.132: Disconnecting em28xx [ 517.684545][ T8331] em28xx 4-1:0.132: Registering V4L2 extension [ 517.867051][ T9375] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 518.081273][ T8331] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 518.109019][ T8331] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 518.146856][ T8331] em28xx 4-1:0.132: No AC97 audio processor [ 518.234562][ T8331] usb 4-1: Decoder not found [ 518.240521][T22370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8100'. [ 518.249859][ T8331] em28xx 4-1:0.132: failed to create media graph [ 518.249996][ T8331] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 518.266762][ T9375] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 518.275334][ T9375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 518.283418][ T8331] em28xx 4-1:0.132: Remote control support is not available for this card. [ 518.314224][ T9375] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 518.361683][ T7173] em28xx 4-1:0.132: Closing input extension [ 518.386739][T22370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8100'. [ 518.512373][ T7173] em28xx 4-1:0.132: Freeing device [ 518.546659][ T9375] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 518.566442][ T9375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.575559][ T9375] usb 6-1: Product: syz [ 518.580392][ T9375] usb 6-1: Manufacturer: syz [ 518.585833][ T9375] usb 6-1: SerialNumber: syz [ 518.606711][ T9375] usb 6-1: config 0 descriptor?? [ 518.727020][T22370] Zero length message leads to an empty skb [ 518.744537][T22382] loop2: detected capacity change from 0 to 2048 [ 518.828379][T22386] loop3: detected capacity change from 0 to 1024 [ 518.872505][T22389] binder: BINDER_SET_CONTEXT_MGR already set [ 518.882396][T22389] binder: 22388:22389 ioctl 40046207 0 returned -16 [ 518.914582][ T4245] usb 6-1: USB disconnect, device number 35 [ 518.915596][T22382] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 519.008363][T22392] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.098977][T22386] hfsplus: bad catalog entry type [ 519.706442][ T9375] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 519.820021][T22421] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8125'. [ 520.016677][ T9375] usb 2-1: Using ep0 maxpacket: 32 [ 520.063575][T22403] loop3: detected capacity change from 0 to 32768 [ 520.166744][ T9375] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 520.180713][T22433] loop2: detected capacity change from 0 to 128 [ 520.183745][ T9375] usb 2-1: config 0 has no interface number 0 [ 520.207240][T22411] loop5: detected capacity change from 0 to 32768 [ 520.297950][T22433] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 520.349129][T22433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.399538][ T9375] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 520.436510][ T9375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.470151][ T9375] usb 2-1: Product: syz [ 520.480101][T22439] loop4: detected capacity change from 0 to 8 [ 520.496445][ T9375] usb 2-1: Manufacturer: syz [ 520.501545][ T9375] usb 2-1: SerialNumber: syz [ 520.552271][ T9375] usb 2-1: config 0 descriptor?? [ 520.600377][T22439] SQUASHFS error: zlib decompression failed, data probably corrupt [ 520.640616][T22439] SQUASHFS error: Failed to read block 0x9b: -5 [ 520.640728][ T9375] smsc95xx v2.0.0 [ 520.677514][T22439] SQUASHFS error: Unable to read metadata cache entry [99] [ 520.685188][T22439] SQUASHFS error: Unable to read inode 0x127 [ 520.961748][T22456] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.8140'. [ 521.017066][T22456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.277162][ T9375] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 521.314304][ T9375] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 521.363616][ T9375] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 521.386065][ T9375] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 521.431538][ T9375] usb 2-1: USB disconnect, device number 36 [ 521.635335][ T7173] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 521.707735][T22481] 9pnet_rdma: rdma_create_trans (22481): problem binding to privport: 13 [ 521.734802][T22447] loop3: detected capacity change from 0 to 40427 [ 521.787784][T22485] loop4: detected capacity change from 0 to 2048 [ 521.812774][T22447] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 521.822550][T22447] F2FS-fs (loop3): invalid crc value [ 521.825879][T22447] F2FS-fs (loop3): Found nat_bits in checkpoint [ 521.881571][ T7173] usb 6-1: Using ep0 maxpacket: 32 [ 521.886616][T22485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.981935][T22447] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 521.996730][ T7173] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 522.006246][ T7173] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 522.061009][ T7173] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 522.088431][ T7173] usb 6-1: config 1 has no interface number 0 [ 522.113900][ T7173] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.149860][ T7173] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 522.197276][ T7173] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 522.215319][ T7173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.245578][ T4184] attempt to access beyond end of device [ 522.245578][ T4184] loop3: rw=2049, want=45104, limit=40427 [ 522.287863][ T7173] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 522.397741][T22498] sch_fq: defrate 4294967295 ignored. [ 522.507518][ T7173] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 522.629520][T22508] tipc: Enabling of bearer <Ýth:h> rejected, media not registered [ 522.684329][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.824128][T22514] loop1: detected capacity change from 0 to 256 [ 522.936923][T22494] loop2: detected capacity change from 0 to 32768 [ 522.947951][T22514] exfat: Deprecated parameter 'namecase' [ 522.995669][T22522] loop4: detected capacity change from 0 to 16 [ 523.008623][T22494] (syz.2.8158,22494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 523.033585][T22494] (syz.2.8158,22494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 523.071124][T22514] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 523.075287][T22494] JBD2: Ignoring recovery information on journal [ 523.132003][T22494] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 523.153512][T22522] erofs: (device loop4): mounted with root inode @ nid 36. [ 523.266574][ T7173] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 523.286034][ T8331] usb 6-1: USB disconnect, device number 36 [ 523.297395][ T8331] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 523.452657][ T4183] ocfs2: Unmounting device (7,2) on (node local) [ 523.562840][T22530] loop4: detected capacity change from 0 to 4096 [ 523.611640][T22536] loop1: detected capacity change from 0 to 1024 [ 523.636526][T22530] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 523.657094][ T7173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.695092][ T7173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.761431][ T7173] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 523.763759][T22536] hfsplus: bad catalog entry type [ 523.816933][ T7173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.832113][ T4824] hfsplus: b-tree write err: -5, ino 4 [ 523.889329][ T7173] usb 4-1: config 0 descriptor?? [ 524.403179][ T7173] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 524.416507][ T7623] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 524.424358][ T9375] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 524.427025][ T7173] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 524.443675][T22556] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8187'. [ 524.454623][T22556] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8187'. [ 524.470395][ T7173] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 524.616761][ T7173] isku 0003:1E7D:319C.0006: couldn't init struct isku_device [ 524.632488][ T7173] isku 0003:1E7D:319C.0006: couldn't install keyboard [ 524.667226][ T7173] isku: probe of 0003:1E7D:319C.0006 failed with error -71 [ 524.696125][ T7173] usb 4-1: USB disconnect, device number 38 [ 524.793124][T22571] fido_id[22571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 524.836971][ T7623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.848816][ T9375] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 524.865024][ T9375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.873617][ T7623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.884853][ T7623] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 524.896708][ T9375] usb 6-1: config 0 descriptor?? [ 524.902194][ T7623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.927888][ T7623] usb 2-1: config 0 descriptor?? [ 525.025028][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8198'. [ 525.142697][T22583] loop4: detected capacity change from 0 to 1024 [ 525.245243][T22583] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 525.370889][T22573] loop2: detected capacity change from 0 to 32768 [ 525.400262][ T9375] isku 0003:1E7D:3264.0007: unbalanced delimiter at end of report description [ 525.400800][ T9375] isku 0003:1E7D:3264.0007: parse failed [ 525.400833][ T9375] isku: probe of 0003:1E7D:3264.0007 failed with error -22 [ 525.407497][ T7623] elecom 0003:056E:011C.0008: item fetching failed at offset 1/5 [ 525.493031][ T7623] elecom: probe of 0003:056E:011C.0008 failed with error -22 [ 525.578601][T22591] netlink: 'syz.4.8205': attribute type 10 has an invalid length. [ 525.639610][ T9375] usb 6-1: USB disconnect, device number 37 [ 525.658220][ T8331] usb 2-1: USB disconnect, device number 37 [ 525.674362][T22591] batman_adv: batadv0: Interface deactivated: vlan1 [ 525.746047][T22591] batman_adv: batadv0: Interface activated: vlan1 [ 525.762285][T22591] team0: Device veth0_vlan failed to register rx_handler [ 525.864322][T22591] batman_adv: batadv0: Interface deactivated: vlan1 [ 525.999130][T22596] loop2: detected capacity change from 0 to 4096 [ 526.135654][T22596] ntfs: (device loop2): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 526.244697][T22596] ntfs: volume version 3.1. [ 526.280519][T22609] netlink: 'syz.1.8222': attribute type 10 has an invalid length. [ 526.304212][T22607] loop5: detected capacity change from 0 to 1024 [ 526.351833][T22609] batman_adv: batadv0: Interface deactivated: vlan1 [ 526.508941][ T154] hfsplus: b-tree write err: -5, ino 4 [ 526.663917][T22609] device veth0_vlan left promiscuous mode [ 526.698990][T22622] loop4: detected capacity change from 0 to 512 [ 526.742071][T22609] device veth0_vlan entered promiscuous mode [ 526.755051][T22622] EXT4-fs (loop4): Ignoring removed bh option [ 526.772371][T22622] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 526.780306][T22622] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 526.816020][T22609] batman_adv: batadv0: Interface activated: vlan1 [ 526.837527][T22609] team0: Device veth0_vlan failed to register rx_handler [ 526.907557][T22609] batman_adv: batadv0: Interface deactivated: vlan1 [ 526.954921][T22626] loop4: detected capacity change from 0 to 256 [ 527.219896][T22638] loop5: detected capacity change from 0 to 128 [ 527.316045][T22638] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,discard,,errors=continue. Quota mode: none. [ 527.341925][T22638] ext4 filesystem being mounted at /1328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 527.376300][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.472879][T22654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8230'. [ 527.527720][T22654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8230'. [ 527.553001][T22659] usb usb8: usbfs: process 22659 (syz.3.8244) did not claim interface 6 before use [ 527.817440][T22676] netlink: 'syz.5.8238': attribute type 10 has an invalid length. [ 527.878051][T22676] batman_adv: batadv0: Interface deactivated: vlan1 [ 528.076953][T22676] batman_adv: batadv0: Interface activated: vlan1 [ 528.116952][T22676] team0: Device veth0_vlan failed to register rx_handler [ 528.357189][T22676] batman_adv: batadv0: Interface deactivated: vlan1 [ 528.437652][T22695] loop2: detected capacity change from 0 to 128 [ 528.539877][T22695] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,discard,,errors=continue. Quota mode: none. [ 528.598461][T22695] ext4 filesystem being mounted at /1710/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 528.621595][T22666] loop1: detected capacity change from 0 to 32768 [ 528.841923][T22666] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 529.024396][T22666] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 529.025451][T22717] 9pnet: Insufficient options for proto=fd [ 529.127154][T22727] loop2: detected capacity change from 0 to 1024 [ 529.170629][ T4194] ocfs2: Unmounting device (7,1) on (node local) [ 529.268493][T22727] hfsplus: xattr searching failed [ 529.601880][T22743] netlink: 'syz.2.8271': attribute type 10 has an invalid length. [ 529.754710][T22752] loop1: detected capacity change from 0 to 64 [ 529.775203][T22743] device veth0_vlan left promiscuous mode [ 529.810507][T22743] device veth0_vlan entered promiscuous mode [ 529.847687][T22743] team0: Device veth0_vlan failed to register rx_handler [ 529.948722][T22752] hfs: small file entry [ 530.428984][T22761] loop1: detected capacity change from 0 to 1024 [ 530.674492][T22754] loop3: detected capacity change from 0 to 131072 [ 530.750544][T22754] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name [ 530.810841][T22754] F2FS-fs (loop3): Found nat_bits in checkpoint [ 530.868869][T22754] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 530.878389][T22754] F2FS-fs (loop3): Failed to read root inode [ 530.940022][T22780] loop5: detected capacity change from 0 to 256 [ 530.985895][T22780] exfat: Deprecated parameter 'namecase' [ 531.051015][T22780] exfat: Deprecated parameter 'utf8' [ 531.108007][ T26] audit: type=1400 audit(1760057116.772:30): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=22785 comm="syz.3.8293" [ 531.116827][T22780] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 531.192831][T22788] netlink: 'syz.4.8295': attribute type 10 has an invalid length. [ 531.298020][T22788] batman_adv: batadv0: Interface activated: vlan1 [ 531.316251][T22788] team0: Device veth0_vlan failed to register rx_handler [ 531.398286][T22788] batman_adv: batadv0: Interface deactivated: vlan1 [ 531.634412][T22800] hub 6-0:1.0: USB hub found [ 531.655468][T22800] hub 6-0:1.0: 1 port detected [ 532.112325][T22776] loop1: detected capacity change from 0 to 32768 [ 532.230062][T22776] [ 532.230062][T22776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 532.230062][T22776] [ 532.299409][T22824] netlink: 'syz.5.8311': attribute type 10 has an invalid length. [ 532.375640][T22824] batman_adv: batadv0: Interface activated: vlan1 [ 532.406750][T22824] team0: Device veth0_vlan failed to register rx_handler [ 532.427877][ T4194] [ 532.427877][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 532.427877][ T4194] [ 532.489041][ T4194] [ 532.489041][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 532.489041][ T4194] [ 532.493381][T22824] batman_adv: batadv0: Interface deactivated: vlan1 [ 532.534961][T22796] loop2: detected capacity change from 0 to 32768 [ 532.609347][T22832] loop4: detected capacity change from 0 to 64 [ 532.664290][T22836] 9p: Unknown Cache mode readahead [ 532.741270][T22796] ERROR: (device loop2): duplicateIXtree: [ 532.741270][T22796] [ 532.796985][T22796] ERROR: (device loop2): remounting filesystem as read-only [ 532.881073][T22840] loop3: detected capacity change from 0 to 64 [ 532.913171][T22843] loop1: detected capacity change from 0 to 8 [ 533.163711][ T4184] hfs: node 4:3 still has 1 user(s)! [ 533.339259][T22851] mkiss: ax0: crc mode is auto. [ 533.412361][T22847] loop4: detected capacity change from 0 to 8192 [ 533.555396][T22847] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 533.628654][T22847] REISERFS (device loop4): using journaled data mode [ 533.640146][T22847] REISERFS warning (device loop4): sh-457 journal_init_dev: journal_init_dev: Cannot open './': -15 [ 533.651439][T22847] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 533.758872][T22872] netlink: 'syz.1.8331': attribute type 10 has an invalid length. [ 533.768022][T22866] mkiss: ax0: crc mode is auto. [ 533.780244][T22872] device veth0_vlan left promiscuous mode [ 533.801199][T22872] device veth0_vlan entered promiscuous mode [ 533.855728][T22872] batman_adv: batadv0: Interface activated: vlan1 [ 533.868634][T22872] team0: Device veth0_vlan failed to register rx_handler [ 533.927810][T22872] batman_adv: batadv0: Interface deactivated: vlan1 [ 534.021026][T22883] loop2: detected capacity change from 0 to 64 [ 534.230773][ T4183] hfs: node 4:3 still has 1 user(s)! [ 534.364751][T22887] loop3: detected capacity change from 0 to 4096 [ 534.552760][T22903] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.603389][T22901] loop4: detected capacity change from 0 to 4096 [ 534.691023][T22900] loop1: detected capacity change from 0 to 8192 [ 534.756244][T22901] ntfs: volume version 3.1. [ 534.849400][T22900] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 534.894813][T22900] REISERFS (device loop1): using journaled data mode [ 534.919590][T22900] REISERFS warning (device loop1): sh-457 journal_init_dev: journal_init_dev: Cannot open './': -15 [ 535.016593][T22900] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device [ 535.048479][T22915] mkiss: ax0: crc mode is auto. [ 535.615942][T22926] loop3: detected capacity change from 0 to 1024 [ 535.707537][T22926] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 535.726637][T22926] ext4 filesystem being mounted at /1658/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.757864][T22924] loop4: detected capacity change from 0 to 4096 [ 535.847398][T22924] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 535.956244][T22924] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 536.015756][T22924] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 536.046055][T22924] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 536.059890][ T7623] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 536.129873][T22924] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 536.248912][T22924] ntfs: volume version 3.1. [ 536.273006][T22924] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 536.333090][T22924] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 536.355756][T22924] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 536.437258][T22924] ntfs: (device loop4): ntfs_readdir(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug. [ 536.517425][ T7623] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 536.525951][ T7623] usb 6-1: config 0 has no interface number 0 [ 536.779929][ T7623] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 536.802201][ T7623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.826492][ T7623] usb 6-1: Product: syz [ 536.830928][ T7623] usb 6-1: Manufacturer: syz [ 536.835643][ T7623] usb 6-1: SerialNumber: syz [ 536.875899][ T7623] usb 6-1: config 0 descriptor?? [ 536.966002][T22976] loop4: detected capacity change from 0 to 2048 [ 537.057764][T22976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.263613][ T4230] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 537.341449][T19159] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 537.376655][ T7623] asix 6-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 537.402112][ T7623] asix: probe of 6-1:0.239 failed with error -71 [ 537.438633][ T7623] usb 6-1: USB disconnect, device number 38 [ 537.626753][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 537.636423][ T8331] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 537.647808][ T4230] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 537.666923][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.682385][ T4230] usb 4-1: config 0 descriptor?? [ 537.710348][T19159] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.722080][T19159] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.890704][T19159] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.906142][T19159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.918207][T19159] usb 3-1: Product: syz [ 537.923190][T19159] usb 3-1: Manufacturer: syz [ 537.934613][T19159] usb 3-1: SerialNumber: syz [ 537.943866][T23013] loop5: detected capacity change from 0 to 64 [ 538.020012][ T8331] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 538.040418][ T8331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.176785][ T4230] isku 0003:1E7D:3264.0009: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 538.207041][ T8331] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.236238][ T8331] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.249393][ T8331] usb 5-1: Product: syz [ 538.253792][ T8331] usb 5-1: Manufacturer: syz [ 538.260698][ T8331] usb 5-1: SerialNumber: syz [ 538.277864][ T8331] usb 5-1: config 0 descriptor?? [ 538.373218][ T4230] usb 4-1: USB disconnect, device number 39 [ 538.417251][T19159] usb 3-1: cannot find UAC_HEADER [ 538.418629][T23025] fido_id[23025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 538.463796][ T8331] usb 5-1: selecting invalid altsetting 0 [ 538.470547][T19159] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 538.538139][ T8331] usb 5-1: USB disconnect, device number 37 [ 538.561962][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8408'. [ 538.622886][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.638514][T19159] usb 3-1: USB disconnect, device number 39 [ 538.707556][T23037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 538.714727][T23037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.737600][T23037] vhci_hcd vhci_hcd.0: Device attached [ 538.807259][ T4990] udevd[4990]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.936526][ T4230] vhci_hcd: vhci_device speed not set [ 539.006526][ T4230] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 539.016419][ T4347] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 539.179670][T23049] loop3: detected capacity change from 0 to 8192 [ 539.205665][T23051] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 539.283056][T23053] loop2: detected capacity change from 0 to 1764 [ 539.406962][ T4347] usb 2-1: config 0 has no interfaces? [ 539.412790][ T4347] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 539.457601][ T4347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.488397][ T4347] usb 2-1: config 0 descriptor?? [ 539.549003][T23045] loop5: detected capacity change from 0 to 32768 [ 539.774213][T23045] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page [ 539.774213][T23045] [ 539.794332][ T8331] usb 2-1: USB disconnect, device number 38 [ 539.806788][T23038] vhci_hcd: connection closed [ 539.810179][ T6896] vhci_hcd: stop threads [ 539.846449][ T4230] vhci_hcd: vhci_device speed not set [ 539.848019][ T6896] vhci_hcd: release socket [ 539.873520][T23045] ERROR: (device loop5): remounting filesystem as read-only [ 539.879813][ T6896] vhci_hcd: disconnect device [ 539.916526][ T4230] usb 35-1: device descriptor read/64, error -71 [ 539.923601][T23045] ialloc: diAlloc returned -5! [ 540.101079][ T26] audit: type=1800 audit(1760057125.762:31): pid=23071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.8424" name="/newroot/1672/bus/#8578//deleted" dev="tmpfs" ino=8578 res=0 errno=0 [ 540.133522][T23074] loop4: detected capacity change from 0 to 8192 [ 540.143461][ T4230] vhci_hcd: vhci_device speed not set [ 540.239597][T23074] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 540.251098][T23074] REISERFS (device loop4): using ordered data mode [ 540.259386][T23074] reiserfs: using flush barriers [ 540.275775][T23074] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 540.294789][T23074] REISERFS (device loop4): checking transaction log (loop4) [ 540.308736][T23074] REISERFS (device loop4): Using r5 hash to sort names [ 540.318737][T23074] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 541.072263][T23110] loop5: detected capacity change from 0 to 2048 [ 541.182851][ T4238] kernel write not supported for file /audio (pid: 4238 comm: kworker/0:5) [ 541.186718][ T7173] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 541.207638][T23110] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,block_validity,errors=remount-ro,. Quota mode: none. [ 541.254872][T23110] EXT4-fs error (device loop5): ext4_ext_precache:608: inode #2: comm syz.5.8439: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 541.286825][T23110] EXT4-fs (loop5): Remounting filesystem read-only [ 541.446824][ T7173] usb 2-1: Using ep0 maxpacket: 8 [ 541.566647][ T7173] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.589882][ T7173] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.613196][ T7173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 541.640471][ T7173] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 541.711959][ T7173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.737209][ T7173] usb 2-1: config 0 descriptor?? [ 541.798969][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8458'. [ 541.858161][T23150] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 542.116435][ T8331] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 542.142082][T23167] overlayfs: missing 'lowerdir' [ 542.185363][T23166] loop2: detected capacity change from 0 to 128 [ 542.228769][ T7173] smartjoyplus 0003:0B43:0003.000A: ignoring exceeding usage max [ 542.254305][ T7173] smartjoyplus 0003:0B43:0003.000A: unbalanced collection at end of report description [ 542.270350][T23171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 542.294275][ T7173] smartjoyplus 0003:0B43:0003.000A: parse failed [ 542.315314][T23166] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 542.316595][ T7173] smartjoyplus: probe of 0003:0B43:0003.000A failed with error -22 [ 542.333049][T23171] overlayfs: missing 'lowerdir' [ 542.354842][T23166] sysv_free_block: trying to free block not in datazone [ 542.488771][ T7173] usb 2-1: USB disconnect, device number 39 [ 542.496689][ T4183] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 542.587234][T23181] bridge_slave_0: default FDB implementation only supports local addresses [ 542.646895][ T8331] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 542.656042][ T8331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.685607][T23186] loop2: detected capacity change from 0 to 512 [ 542.702751][ T8331] usb 4-1: Product: syz [ 542.709202][ T8331] usb 4-1: Manufacturer: syz [ 542.713937][ T8331] usb 4-1: SerialNumber: syz [ 542.729859][ T8331] usb 4-1: config 0 descriptor?? [ 542.884923][T23193] loop5: detected capacity change from 0 to 128 [ 542.990381][T23195] loop2: detected capacity change from 0 to 512 [ 542.997128][T23193] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 543.041284][ T7173] usb 4-1: USB disconnect, device number 40 [ 543.126414][T23195] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.281061][T23195] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 543.289075][T23205] loop4: detected capacity change from 0 to 1024 [ 543.319048][T23195] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 543.360136][T23205] EXT4-fs (loop4): Ignoring removed orlov option [ 543.371801][T23205] EXT4-fs (loop4): inline encryption not supported [ 543.463024][T23205] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,noauto_da_alloc,inlinecrypt,dioread_lock,data_err=ignore,barrier=0x0000000000000007,data_err=ignore,grpquota,init_itable=0x0000000000008001,user_xattr,resuid=0x0000000000000000,errors=remount-ro,max_batch_time=0x000000. Quota mode: writeback. [ 544.096088][T23251] loop4: detected capacity change from 0 to 256 [ 544.151999][ T9375] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 544.312400][T23258] netem: incorrect ge model size [ 544.346972][T23258] netem: change failed [ 544.532815][T23261] loop4: detected capacity change from 0 to 4096 [ 544.595130][T23261] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 544.606622][ T9375] usb 6-1: config 0 interface 0 has no altsetting 0 [ 544.614904][ T9375] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 544.639340][ T9375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.717061][ T9375] usb 6-1: config 0 descriptor?? [ 544.792418][T23261] ntfs3: loop4: failed to convert "c46c" to cp1251 [ 545.259344][ T9375] zeroplus 0003:0C12:0005.000B: unknown main item tag 0x2 [ 545.325501][T23289] loop2: detected capacity change from 0 to 40427 [ 545.334340][ T9375] zeroplus 0003:0C12:0005.000B: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.5-1/input0 [ 545.376821][ T9375] zeroplus 0003:0C12:0005.000B: no inputs found [ 545.426768][T23289] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 545.434504][T23289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 545.443841][T23289] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 545.454124][T23289] F2FS-fs (loop2): invalid crc value [ 545.461530][T23289] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 545.504782][ T9375] usb 6-1: USB disconnect, device number 39 [ 545.516376][T23289] F2FS-fs (loop2): recover fsync data on readonly fs [ 545.523847][T23289] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 545.531410][T23289] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 545.690998][T23294] fido_id[23294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 545.795133][T23287] loop1: detected capacity change from 0 to 32768 [ 545.880781][T23287] find_entry called with index >= next_index [ 546.005625][T23281] loop3: detected capacity change from 0 to 32768 [ 546.273720][T23300] loop1: detected capacity change from 0 to 4096 [ 546.458035][T23306] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 546.551754][T23308] device vlan2 entered promiscuous mode [ 546.588751][T23308] device bridge0 entered promiscuous mode [ 546.639642][T23293] loop4: detected capacity change from 0 to 32768 [ 546.816182][T23319] loop5: detected capacity change from 0 to 16 [ 546.885880][T23319] erofs: (device loop5): mounted with root inode @ nid 36. [ 546.978346][T23323] loop1: detected capacity change from 0 to 128 [ 547.075082][T23327] loop4: detected capacity change from 0 to 2048 [ 547.178948][T23327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.210813][T23323] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 547.231024][T23323] ext4 filesystem being mounted at /1646/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 547.279122][T23334] loop2: detected capacity change from 0 to 128 [ 547.374546][T23334] FAT-fs (loop2): Directory bread(block 162) failed [ 547.414645][T23334] FAT-fs (loop2): Directory bread(block 163) failed [ 547.436500][T23334] FAT-fs (loop2): Directory bread(block 164) failed [ 547.443267][T23334] FAT-fs (loop2): Directory bread(block 165) failed [ 547.555946][T23334] FAT-fs (loop2): Directory bread(block 166) failed [ 547.577688][T23339] loop4: detected capacity change from 0 to 1024 [ 547.580597][T23334] FAT-fs (loop2): Directory bread(block 167) failed [ 547.639917][T23334] FAT-fs (loop2): Directory bread(block 168) failed [ 547.654377][T23339] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 547.663141][T23334] FAT-fs (loop2): Directory bread(block 169) failed [ 547.786665][T23334] FAT-fs (loop2): Directory bread(block 162) failed [ 547.795983][T23334] FAT-fs (loop2): Directory bread(block 163) failed [ 548.232350][T23362] loop2: detected capacity change from 0 to 512 [ 548.355007][T23364] loop4: detected capacity change from 0 to 4096 [ 548.496033][T23368] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8559'. [ 548.514391][T23368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8559'. [ 548.519308][T23347] loop1: detected capacity change from 0 to 32768 [ 548.691864][T23364] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 548.737839][T23364] ntfs3: loop4: Failed to load $Extend. [ 548.809082][T23347] XFS (loop1): Mounting V5 Filesystem [ 548.894915][T23362] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.8555: dx entry: limit 0 != root limit 125 [ 548.922059][T23362] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.8555: Corrupt directory, running e2fsck is recommended [ 548.946922][T23347] XFS (loop1): Ending clean mount [ 549.006984][T23362] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 549.040762][T23362] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.8555: corrupted in-inode xattr [ 549.090074][T23362] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.8555: couldn't read orphan inode 15 (err -117) [ 549.113358][ T4194] XFS (loop1): Unmounting Filesystem [ 549.178734][T23362] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,user_xattr,user_xattr,grpjquota=.errors=remount-ro,errors=remount-ro,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 549.315002][T23370] loop3: detected capacity change from 0 to 32768 [ 549.487037][T23370] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 549.524322][T23370] (syz.3.8560,23370,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 549.702550][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 550.029862][T23407] loop3: detected capacity change from 0 to 64 [ 550.136720][T23407] hfs: bad catalog entry type 65535 [ 550.388337][ T4238] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 550.561172][T23419] loop5: detected capacity change from 0 to 32768 [ 550.608659][T23427] loop1: detected capacity change from 0 to 512 [ 550.618980][T23419] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 550.627567][T23419] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 550.635804][T23429] loop3: detected capacity change from 0 to 256 [ 550.643254][T23419] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 550.651667][T23419] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (not first in block) [ 550.664303][T23419] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 550.664303][T23419] inode = 4 2075 [ 550.664303][T23419] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 550.683436][T23419] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 550.690956][T23419] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 550.699976][T23419] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 550.707086][T23419] gfs2: fsid=syz:syz.0: File system withdrawn [ 550.713812][T23419] CPU: 1 PID: 23419 Comm: syz.5.8580 Not tainted syzkaller #0 [ 550.716628][ T4238] usb 3-1: Using ep0 maxpacket: 16 [ 550.721503][T23419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.721524][T23419] Call Trace: [ 550.721533][T23419] [ 550.721543][T23419] dump_stack_lvl+0x168/0x230 [ 550.721574][T23419] ? kobject_uevent_env+0x371/0x890 [ 550.721600][T23419] ? show_regs_print_info+0x20/0x20 [ 550.754683][T23429] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 550.754896][T23419] ? load_image+0x3b0/0x3b0 [ 550.777059][T23419] ? kobject_uevent_env+0x371/0x890 [ 550.782411][T23419] gfs2_withdraw+0x111b/0x1460 [ 550.787352][T23419] ? gfs2_lm+0x220/0x220 [ 550.791632][T23419] ? load_image+0x3b0/0x3b0 [ 550.796185][T23419] ? gfs2_consist_inode_i+0xc0/0xe0 [ 550.801656][T23419] gfs2_dirent_scan+0x525/0x650 [ 550.806651][T23419] ? gfs2_dirent_search+0x7e0/0x7e0 [ 550.812035][T23419] ? gfs2_dirent_search+0x7e0/0x7e0 [ 550.817983][T23419] gfs2_dirent_search+0x2dd/0x7e0 [ 550.823056][T23419] ? __might_sleep+0xf0/0xf0 [ 550.827869][T23419] ? gfs2_dir_search+0x220/0x220 [ 550.833231][T23419] ? _raw_spin_unlock+0x24/0x40 [ 550.838730][T23419] ? gfs2_glock_nq+0xcb0/0x1550 [ 550.844029][T23419] gfs2_dir_search+0x49/0x220 [ 550.848862][T23419] gfs2_lookupi+0x45c/0x5e0 [ 550.853616][T23419] ? gfs2_lookup_simple+0xf0/0xf0 [ 550.858787][T23419] ? gfs2_lookupi+0x3fe/0x5e0 [ 550.863701][T23419] ? crc32_le_base+0x755/0xcf0 [ 550.868684][T23419] ? sprintf+0xd6/0x120 [ 550.872930][T23419] gfs2_lookup_simple+0xa3/0xf0 [ 550.877856][T23419] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 550.883022][T23419] init_journal+0x1252/0x2220 [ 550.887936][T23419] ? end_bio_io_page+0x100/0x100 [ 550.892925][T23419] ? snprintf+0xd7/0x120 [ 550.897205][T23419] ? init_journal+0x710/0x2220 [ 550.902049][T23419] ? vscnprintf+0x80/0x80 [ 550.906517][T23419] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 550.911754][T23419] init_inodes+0xdb/0x320 [ 550.916211][T23419] gfs2_fill_super+0x1701/0x1f50 [ 550.921305][T23419] ? gfs2_reconfigure+0xcd0/0xcd0 [ 550.926372][T23419] ? gfs2_glock_nq_num+0x82/0x1b0 [ 550.931531][T23419] ? preempt_count_add+0x8d/0x190 [ 550.936903][T23419] ? sb_set_blocksize+0xa5/0xe0 [ 550.942113][T23419] get_tree_bdev+0x3f1/0x610 [ 550.946842][T23419] ? gfs2_reconfigure+0xcd0/0xcd0 [ 550.951934][T23419] gfs2_get_tree+0x4d/0x1e0 [ 550.956614][T23419] vfs_get_tree+0x88/0x270 [ 550.961113][T23419] do_new_mount+0x24a/0xa40 [ 550.965762][T23419] __se_sys_mount+0x2d6/0x3c0 [ 550.971610][T23419] ? __x64_sys_mount+0xc0/0xc0 [ 550.976523][T23419] ? lockdep_hardirqs_on+0x94/0x140 [ 550.981765][T23419] ? __x64_sys_mount+0x1c/0xc0 [ 550.986654][T23419] do_syscall_64+0x4c/0xa0 [ 550.991612][T23419] ? clear_bhb_loop+0x30/0x80 [ 550.996499][T23419] ? clear_bhb_loop+0x30/0x80 [ 551.001713][T23419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 551.007764][T23419] RIP: 0033:0x7fd07e04466a [ 551.012461][T23419] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.032941][T23419] RSP: 002b:00007fd07c2a9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.041749][T23419] RAX: ffffffffffffffda RBX: 00007fd07c2a9ef0 RCX: 00007fd07e04466a [ 551.050084][T23419] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007fd07c2a9eb0 [ 551.058098][T23419] RBP: 0000200000000100 R08: 00007fd07c2a9ef0 R09: 0000000000200001 [ 551.066755][T23419] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 551.075147][T23419] R13: 00007fd07c2a9eb0 R14: 000000000001260a R15: 00002000000000c0 [ 551.083865][T23419] [ 551.087871][T23419] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 551.171044][T23427] EXT4-fs (loop1): inline encryption not supported [ 551.200854][T23425] loop4: detected capacity change from 0 to 32768 [ 551.212475][T23427] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 551.220196][T23427] EXT4-fs (loop1): Test dummy encryption mode enabled [ 551.246605][T23427] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 551.259802][ T4238] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 551.277890][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.299557][ T4238] usb 3-1: Product: syz [ 551.303899][ T4238] usb 3-1: Manufacturer: syz [ 551.329381][T23427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 551.345153][T23427] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.8583: inode #13: comm syz.1.8583: iget: illegal inode # [ 551.346450][ T4238] usb 3-1: SerialNumber: syz [ 551.367692][T23427] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.8583: couldn't read orphan inode 13 (err -117) [ 551.392212][T23427] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none. [ 551.429623][T23427] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8583: bg 0: block 426: padding at end of block bitmap is not set [ 551.437516][T23425] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 551.461144][ T4238] r8152-cfgselector 3-1: config 0 descriptor?? [ 551.492797][T23425] (syz.4.8582,23425,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 551.750117][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 551.832856][T23443] netlink: 'syz.3.8589': attribute type 3 has an invalid length. [ 551.867745][T23441] loop1: detected capacity change from 0 to 4096 [ 551.999935][T23441] ntfs: volume version 3.1. [ 552.166658][ T4238] r8152-cfgselector 3-1: Unknown version 0x0000 [ 552.204415][ T4238] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 552.392084][T23462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8597'. [ 552.561996][ T4230] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 552.590989][T23449] syz.3.8590 (23449): drop_caches: 1 [ 552.666225][T23449] syz.3.8590 (23449): drop_caches: 1 [ 552.806748][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 552.932990][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.955066][ T4230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.975515][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.975862][T23477] loop3: detected capacity change from 0 to 16 [ 552.996795][ T4230] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 553.046788][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.058395][ T4230] usb 5-1: config 0 descriptor?? [ 553.143070][T23477] erofs: (device loop3): mounted with root inode @ nid 36. [ 553.374119][T23488] device vlan2 entered promiscuous mode [ 553.418878][T23488] device wlan1 entered promiscuous mode [ 553.538841][ T4230] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 553.584109][ T4230] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 553.611305][ T4230] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 553.638632][ T4230] microsoft 0003:045E:07DA.000C: no inputs found [ 553.652432][ T4230] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 553.795140][ T7173] usb 5-1: USB disconnect, device number 38 [ 553.850775][T23475] loop1: detected capacity change from 0 to 40427 [ 553.888781][T23475] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 553.895905][T23475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 553.921521][T23475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 554.018711][T23493] fido_id[23493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 554.061157][T23498] loop5: detected capacity change from 0 to 2048 [ 554.091057][T23500] loop3: detected capacity change from 0 to 512 [ 554.117894][T23475] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 554.141062][T23475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 554.168943][T23498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.257703][T23504] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8615'. [ 554.292577][T23500] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 554.302484][ T4194] attempt to access beyond end of device [ 554.302484][ T4194] loop1: rw=2049, want=45104, limit=40427 [ 554.320301][T23500] EXT4-fs (loop3): 1 truncate cleaned up [ 554.326019][T23500] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 554.419551][T23504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8615'. [ 554.455279][T23500] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.8614: Logical block already allocated [ 554.527602][T23500] EXT4-fs (loop3): Remounting filesystem read-only [ 554.558462][T23500] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.8614: Logical block already allocated [ 554.578703][T23500] EXT4-fs (loop3): Remounting filesystem read-only [ 555.105096][T23510] syz.5.8617 (23510): drop_caches: 1 [ 555.291840][T23529] loop4: detected capacity change from 0 to 4096 [ 555.319427][T23537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8631'. [ 555.352730][T23537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8631'. [ 555.429118][T23529] ntfs: volume version 3.1. [ 555.611861][T23510] syz.5.8617 (23510): drop_caches: 1 [ 555.628272][ T6654] [ 555.630865][ T6654] ====================================================== [ 555.638785][ T6654] WARNING: possible circular locking dependency detected [ 555.646485][ T6654] syzkaller #0 Not tainted [ 555.651493][ T6654] ------------------------------------------------------ [ 555.658730][ T6654] kworker/u4:7/6654 is trying to acquire lock: [ 555.665035][ T6654] ffff8880600199c0 (&rl->lock){++++}-{3:3}, at: ntfs_readpage+0x1277/0x2220 [ 555.674154][ T6654] [ 555.674154][ T6654] but task is already holding lock: [ 555.681631][ T6654] ffff888060018190 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4e/0x620 [ 555.690809][ T6654] [ 555.690809][ T6654] which lock already depends on the new lock. [ 555.690809][ T6654] [ 555.701258][ T6654] [ 555.701258][ T6654] the existing dependency chain (in reverse order) is: [ 555.710396][ T6654] [ 555.710396][ T6654] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 555.718165][ T6654] __mutex_lock_common+0x1eb/0x2390 [ 555.724020][ T6654] mutex_lock_nested+0x17/0x20 [ 555.729655][ T6654] map_mft_record+0x4e/0x620 [ 555.734808][ T6654] ntfs_truncate+0x280/0x27c0 [ 555.740217][ T6654] ntfs_setattr+0x2bc/0x3a0 [ 555.745358][ T6654] notify_change+0xbcd/0xee0 [ 555.750475][ T6654] do_truncate+0x197/0x220 [ 555.755652][ T6654] vfs_truncate+0x262/0x2f0 [ 555.760929][ T6654] do_sys_truncate+0xdc/0x190 [ 555.766174][ T6654] do_syscall_64+0x4c/0xa0 [ 555.771798][ T6654] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.778338][ T6654] [ 555.778338][ T6654] -> #0 (&rl->lock){++++}-{3:3}: [ 555.785512][ T6654] __lock_acquire+0x2c33/0x7c60 [ 555.791010][ T6654] lock_acquire+0x197/0x3f0 [ 555.796066][ T6654] down_read+0x44/0x2e0 [ 555.800940][ T6654] ntfs_readpage+0x1277/0x2220 [ 555.806550][ T6654] do_read_cache_page+0x8a1/0x1030 [ 555.812224][ T6654] ntfs_map_page+0x24/0x390 [ 555.817339][ T6654] ntfs_sync_mft_mirror+0x24a/0x19e0 [ 555.823417][ T6654] write_mft_record_nolock+0x1223/0x17e0 [ 555.829886][ T6654] __ntfs_write_inode+0x7cb/0xdc0 [ 555.835741][ T6654] __writeback_single_inode+0x6c3/0xda0 [ 555.841917][ T6654] writeback_sb_inodes+0x9fe/0x1610 [ 555.847824][ T6654] wb_writeback+0x443/0xb90 [ 555.853038][ T6654] wb_workfn+0x423/0xe60 [ 555.857918][ T6654] process_one_work+0x863/0x1000 [ 555.863558][ T6654] worker_thread+0xaa8/0x12a0 [ 555.869125][ T6654] kthread+0x436/0x520 [ 555.874206][ T6654] ret_from_fork+0x1f/0x30 [ 555.879439][ T6654] [ 555.879439][ T6654] other info that might help us debug this: [ 555.879439][ T6654] [ 555.890382][ T6654] Possible unsafe locking scenario: [ 555.890382][ T6654] [ 555.898058][ T6654] CPU0 CPU1 [ 555.903474][ T6654] ---- ---- [ 555.908942][ T6654] lock(&ni->mrec_lock); [ 555.913422][ T6654] lock(&rl->lock); [ 555.920228][ T6654] lock(&ni->mrec_lock); [ 555.927248][ T6654] lock(&rl->lock); [ 555.931459][ T6654] [ 555.931459][ T6654] *** DEADLOCK *** [ 555.931459][ T6654] [ 555.940599][ T6654] 3 locks held by kworker/u4:7/6654: [ 555.946273][ T6654] #0: ffff888142bb0938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 555.958030][ T6654] #1: ffffc9000328fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 555.970958][ T6654] #2: ffff888060018190 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4e/0x620 [ 555.981300][ T6654] [ 555.981300][ T6654] stack backtrace: [ 555.987389][ T6654] CPU: 1 PID: 6654 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 555.994949][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.005441][ T6654] Workqueue: writeback wb_workfn (flush-7:4) [ 556.011661][ T6654] Call Trace: [ 556.014959][ T6654] [ 556.017939][ T6654] dump_stack_lvl+0x168/0x230 [ 556.022841][ T6654] ? load_image+0x3b0/0x3b0 [ 556.027465][ T6654] ? show_regs_print_info+0x20/0x20 [ 556.032863][ T6654] ? print_circular_bug+0x12b/0x1a0 [ 556.038812][ T6654] check_noncircular+0x274/0x310 [ 556.044840][ T6654] ? add_chain_block+0x940/0x940 [ 556.050099][ T6654] ? lockdep_lock+0xdc/0x1e0 [ 556.054834][ T6654] ? __lock_acquire+0x289d/0x7c60 [ 556.060021][ T6654] ? mark_lock+0x94/0x320 [ 556.064475][ T6654] __lock_acquire+0x2c33/0x7c60 [ 556.069913][ T6654] ? verify_lock_unused+0x140/0x140 [ 556.075234][ T6654] ? verify_lock_unused+0x140/0x140 [ 556.081090][ T6654] ? memset+0x1e/0x40 [ 556.085268][ T6654] lock_acquire+0x197/0x3f0 [ 556.090001][ T6654] ? ntfs_readpage+0x1277/0x2220 [ 556.095226][ T6654] ? __might_sleep+0xf0/0xf0 [ 556.099907][ T6654] ? _raw_read_lock_irqsave+0x7f/0xf0 [ 556.105518][ T6654] ? read_lock_is_recursive+0x10/0x10 [ 556.111254][ T6654] ? _raw_read_unlock_irqrestore+0x82/0x100 [ 556.117468][ T6654] ? lockdep_hardirqs_on+0x94/0x140 [ 556.123160][ T6654] ? _raw_read_unlock_irqrestore+0xaa/0x100 [ 556.129271][ T6654] ? _raw_read_unlock+0x40/0x40 [ 556.134317][ T6654] down_read+0x44/0x2e0 [ 556.138578][ T6654] ? ntfs_readpage+0x1277/0x2220 [ 556.143609][ T6654] ntfs_readpage+0x1277/0x2220 [ 556.148529][ T6654] ? ntfs_writepage+0x1360/0x1360 [ 556.153589][ T6654] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 556.159190][ T6654] ? ntfs_writepage+0x1360/0x1360 [ 556.164238][ T6654] do_read_cache_page+0x8a1/0x1030 [ 556.169457][ T6654] ntfs_map_page+0x24/0x390 [ 556.173965][ T6654] ntfs_sync_mft_mirror+0x24a/0x19e0 [ 556.179262][ T6654] ? blk_put_request+0x20/0x20 [ 556.184129][ T6654] ? submit_bio+0x2be/0x560 [ 556.188948][ T6654] ? __mark_mft_record_dirty+0x180/0x180 [ 556.195151][ T6654] write_mft_record_nolock+0x1223/0x17e0 [ 556.200941][ T6654] ? ntfs_unmap_page+0x200/0x200 [ 556.207581][ T6654] ? slab_free_freelist_hook+0xea/0x170 [ 556.213807][ T6654] ? kmem_cache_free+0x14c/0x210 [ 556.219478][ T6654] __ntfs_write_inode+0x7cb/0xdc0 [ 556.225122][ T6654] __writeback_single_inode+0x6c3/0xda0 [ 556.231384][ T6654] writeback_sb_inodes+0x9fe/0x1610 [ 556.236794][ T6654] ? queue_io+0x550/0x550 [ 556.241141][ T6654] ? rcu_is_watching+0x11/0xa0 [ 556.246103][ T6654] wb_writeback+0x443/0xb90 [ 556.250752][ T6654] ? rcu_lock_release+0x20/0x20 [ 556.255760][ T6654] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 556.261942][ T6654] ? queue_delayed_work_on+0x109/0x1e0 [ 556.267413][ T6654] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.272635][ T6654] wb_workfn+0x423/0xe60 [ 556.276981][ T6654] ? inode_wait_for_writeback+0x200/0x200 [ 556.283499][ T6654] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 556.289689][ T6654] ? read_lock_is_recursive+0x10/0x10 [ 556.295079][ T6654] ? try_to_wake_up+0x6cf/0x1050 [ 556.300641][ T6654] ? _raw_spin_unlock_irq+0x1f/0x40 [ 556.306114][ T6654] process_one_work+0x863/0x1000 [ 556.311327][ T6654] ? worker_detach_from_pool+0x240/0x240 [ 556.316971][ T6654] ? lockdep_hardirqs_off+0x70/0x100 [ 556.322269][ T6654] ? _raw_spin_lock_irq+0xab/0xe0 [ 556.328170][ T6654] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 556.333827][ T6654] ? wq_worker_running+0x97/0x170 [ 556.339041][ T6654] worker_thread+0xaa8/0x12a0 [ 556.344287][ T6654] kthread+0x436/0x520 [ 556.348627][ T6654] ? rcu_lock_release+0x20/0x20 [ 556.354027][ T6654] ? kthread_blkcg+0xd0/0xd0 [ 556.359079][ T6654] ret_from_fork+0x1f/0x30 [ 556.364178][ T6654] [ 556.397915][T23548] loop1: detected capacity change from 0 to 512 [ 556.470688][T23548] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 556.503590][T23548] EXT4-fs (loop1): 1 truncate cleaned up [ 556.527908][T23548] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 556.553302][T23553] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8635'. [ 556.593353][T23553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8635'. [ 556.627589][T23548] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.8633: Logical block already allocated [ 556.650363][T23548] EXT4-fs (loop1): Remounting filesystem read-only [ 556.658975][T23548] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.8633: Logical block already allocated [ 556.675343][T23548] EXT4-fs (loop1): Remounting filesystem read-only [ 563.018456][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.025047][ T1422] ieee802154 phy1 wpan1: encryption failed: -22