last executing test programs: 1m32.052689117s ago: executing program 0 (id=204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$MRT(r0, 0x29, 0xd0, 0x0, 0x0) 1m31.959553038s ago: executing program 0 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1m31.81192444s ago: executing program 0 (id=211): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='clear_refs\x00') pread64(r0, 0x0, 0x0, 0x400) 1m31.641547872s ago: executing program 0 (id=216): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m31.306003056s ago: executing program 0 (id=222): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x10, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m30.880660991s ago: executing program 0 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000c300)=ANY=[@ANYBLOB="384700000d0a010100000000000000000200000408000440000000010900010073"], 0x4738}, 0x1, 0x0, 0x0, 0x24000010}, 0x24000020) 1m30.557421955s ago: executing program 32 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000c300)=ANY=[@ANYBLOB="384700000d0a010100000000000000000200000408000440000000010900010073"], 0x4738}, 0x1, 0x0, 0x0, 0x24000010}, 0x24000020) 47.741743177s ago: executing program 3 (id=1114): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x30}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffff987e, 0x698, 0x3ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40091}, 0x4004014) 47.55767973s ago: executing program 3 (id=1118): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x7, 0x0, 0xa0) 47.51369247s ago: executing program 3 (id=1120): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000200)={0x4, @win={{0x8000, 0x8001, 0x7fffffff, 0x4}, 0x5, 0x101, 0x0, 0x3, 0x0, 0x8}}) 47.408687371s ago: executing program 3 (id=1123): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000100)={[{@utf8}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@nocase}, {@utf8no}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@utf8}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000900)="$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") mount$nfs(&(0x7f0000000440)='\xb2\x83\x87\x81\x00I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x00\x00\x01\x00\x00\x00\x00\x00h#\xfacl\x01\x8cC=|\xa5\xcb\x8f\xe5WJ\x00>\x13\xed\x85]B\x94\x12\x01\xdb\xb5\xfa\xf0<\xf2\xd6\t\xf4I\xc5\xcb\x15A\xb5\xbbG\x9e\xea\xc4\x03\xf2\xf5\xf4\xa1\x9c\xe0Q<=\xb1\x9b,vjn\x8b[0\xd9\xcb\xf8\x1a\xdf\x9e\x89\x91H\xf4\x11p\xd2\x96\x82\xd9)6\xcdm\x88\x91\x1dv\xff\xb3\xad\x8b\x82\xcdR\x98\x80k1\xce}\x90\xe8P\xae3\xd6L\x1d%\xc4\x1atCt\xb4\x00\xb29E\x87-\xd1\xcd\xf3w\"\v\xf3`\x06x\xb4TQ\x8dB\a\xe4\xe2\xf8\xd6%C\xf9\xd6~\xf80\xfcE\xa0\x80jN\xd1\x90\x88\xbc\x7fbn\x02\xeb\x9b\x04\x1d\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x123b058, 0x0) 46.806322559s ago: executing program 3 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010032"], 0x1c}}, 0x0) 46.210483666s ago: executing program 3 (id=1147): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 46.033855728s ago: executing program 33 (id=1147): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.154325265s ago: executing program 6 (id=1919): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec082008", 0x4d}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.078538295s ago: executing program 6 (id=1921): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4, 0x4) 1.965681187s ago: executing program 2 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.943135887s ago: executing program 6 (id=1925): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x22401, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x0, 0x0, r0, 0x0, 0x0, 0xffff}]) 1.819345098s ago: executing program 2 (id=1927): r0 = socket$kcm(0xa, 0x5, 0x0) listen(r0, 0x9) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200000000000000084"], 0x20}, 0x0) 1.769670799s ago: executing program 6 (id=1930): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000000c0)) 1.612927221s ago: executing program 6 (id=1933): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 1.557759252s ago: executing program 2 (id=1934): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000340)={0x8, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 1.551027972s ago: executing program 2 (id=1936): io_setup(0x222, &(0x7f0000000180)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) io_submit(r0, 0x1, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1000, r1, &(0x7f0000000480)='U', 0x1, 0x7}]) 1.272212325s ago: executing program 2 (id=1939): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000700)={0x15, 0x110, 0xfa00, {r1, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {"0000000000000200e0d000"}, 0xfffffffffffffffa, 0x2, 0x7502}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x200}}}, 0x118) 1.206932696s ago: executing program 6 (id=1942): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x3, ')'}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_4={0x3, 0x1, 0x4, "cbff8514"}]}}, 0x0}, 0x0) 1.101535297s ago: executing program 2 (id=1944): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000004c0)={[{@nodiscard}, {}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5518, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 885.66779ms ago: executing program 4 (id=1948): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffa, 0xe5c9}) 854.20569ms ago: executing program 5 (id=1949): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) 713.521342ms ago: executing program 4 (id=1950): unshare(0x2000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x2000, 0x0}, 0x10) 529.349684ms ago: executing program 4 (id=1953): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x2000000, 0x0, 0x7d, 0x100, 0x0, 0x2930310}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x0, 0x7, 0x400, 0xcbb0, 0x10280}) 524.843254ms ago: executing program 5 (id=1954): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 454.173404ms ago: executing program 4 (id=1955): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x40, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x8, 0x9, 0xa, 0xfe, 0x18, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048801}, 0x4040000) 401.604785ms ago: executing program 1 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000000}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x4048880) 373.204776ms ago: executing program 4 (id=1957): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8041, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c6465627567000000000100000065743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x0, 0x2aa, &(0x7f00000002c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b40100001300010226bd7000fcdbdf25ffffffff000000000000000000000000fc0100000000000000000000000000004e23fffa4e2000060200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="87ae000000000000090000000014000006000000000000000500000000000000080000000000000008000000000000008100000000000000030000000000000004000000000000000080090000000000ffff000000000000ffffffff00000000040000000000000002010702000000008400050000000000000000000000000000000001000004d52b0000000a000000000000000000000000000000000000010435000001033a00080000000080000001800000ac141432000000000000000000000000000004d43300000000000000fc01000000000000000000000000000104350000038d720000000000220ad5191500000076000800"], 0x1b4}}, 0x0) 324.597346ms ago: executing program 1 (id=1958): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) 249.566957ms ago: executing program 1 (id=1959): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f00000000c0)=0x1, 0x4) 248.878117ms ago: executing program 5 (id=1960): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}], 0x1}], 0x1, 0x40800) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) 215.423418ms ago: executing program 5 (id=1961): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 200.794448ms ago: executing program 1 (id=1962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 144.375699ms ago: executing program 5 (id=1963): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) 42.74523ms ago: executing program 5 (id=1964): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x2f1, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 42.44923ms ago: executing program 1 (id=1965): r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x9) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "8d6f4130d16fafb4", "d17def3c29b058ede8acb916c785189dc501a41291e811ceba51fa29137cb662", "ea68834b", "1709cb09e38f3a07"}, 0x38) 42.24917ms ago: executing program 4 (id=1966): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000008000000950000000000000076d5030174950f1a688c67406e5ee79d2dcb75cc370c483357716247f417"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2a053569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x40) 0s ago: executing program 1 (id=1967): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): [ T5903] (syz.5.353,5903,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 83.465210][ T5903] (syz.5.353,5903,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 83.501485][ T5903] (syz.5.353,5903,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 83.539063][ T5903] (syz.5.353,5903,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 83.547067][ T5976] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 83.547156][ T5976] netlink: 'syz.1.361': attribute type 2 has an invalid length. [ 83.623813][ T5903] (syz.5.353,5903,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 83.658906][ T5903] (syz.5.353,5903,0):ocfs2_mknod:298 ERROR: status = -5 [ 83.696425][ T5980] loop1: detected capacity change from 0 to 256 [ 83.711548][ T5903] (syz.5.353,5903,0):ocfs2_mknod:502 ERROR: status = -5 [ 83.718927][ T5903] (syz.5.353,5903,0):ocfs2_create:676 ERROR: status = -5 [ 83.788616][ T5980] FAT-fs (loop1): Directory bread(block 64) failed [ 83.804271][ T5980] FAT-fs (loop1): Directory bread(block 65) failed [ 83.833285][ T5980] FAT-fs (loop1): Directory bread(block 66) failed [ 83.843382][ T5980] FAT-fs (loop1): Directory bread(block 67) failed [ 83.868186][ T5980] FAT-fs (loop1): Directory bread(block 68) failed [ 83.869345][ T4963] ocfs2: Unmounting device (7,5) on (node local) [ 83.901914][ T5980] FAT-fs (loop1): Directory bread(block 69) failed [ 83.916196][ T5980] FAT-fs (loop1): Directory bread(block 70) failed [ 83.938747][ T5980] FAT-fs (loop1): Directory bread(block 71) failed [ 83.965904][ T5980] FAT-fs (loop1): Directory bread(block 72) failed [ 83.993268][ T5980] FAT-fs (loop1): Directory bread(block 73) failed [ 84.023288][ T5992] loop4: detected capacity change from 0 to 256 [ 84.108872][ T5954] loop3: detected capacity change from 0 to 32768 [ 84.230796][ T5954] (syz.3.359,5954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.275612][ T5954] (syz.3.359,5954,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 84.404314][ T5954] JBD2: Ignoring recovery information on journal [ 84.446232][ T5959] loop2: detected capacity change from 0 to 40427 [ 84.460655][ T6018] No source specified [ 84.523307][ T5959] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 84.523450][ T6025] loop4: detected capacity change from 0 to 256 [ 84.569013][ T5959] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 84.634495][ T5954] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 84.665985][ T6025] FAT-fs (loop4): Directory bread(block 64) failed [ 84.710114][ T6025] FAT-fs (loop4): Directory bread(block 65) failed [ 84.715218][ T6032] loop5: detected capacity change from 0 to 256 [ 84.716738][ T6025] FAT-fs (loop4): Directory bread(block 66) failed [ 84.770103][ T6025] FAT-fs (loop4): Directory bread(block 67) failed [ 84.776699][ T6025] FAT-fs (loop4): Directory bread(block 68) failed [ 84.848845][ T6032] FAT-fs (loop5): Directory bread(block 64) failed [ 84.895221][ T6032] FAT-fs (loop5): Directory bread(block 65) failed [ 84.906949][ T6025] FAT-fs (loop4): Directory bread(block 69) failed [ 84.971255][ T6032] FAT-fs (loop5): Directory bread(block 66) failed [ 84.984425][ T6025] FAT-fs (loop4): Directory bread(block 70) failed [ 84.992208][ T6032] FAT-fs (loop5): Directory bread(block 67) failed [ 84.998785][ T6032] FAT-fs (loop5): Directory bread(block 68) failed [ 85.029457][ T6025] FAT-fs (loop4): Directory bread(block 71) failed [ 85.036682][ T6025] FAT-fs (loop4): Directory bread(block 72) failed [ 85.062761][ T4168] ocfs2: Unmounting device (7,3) on (node local) [ 85.073455][ T6032] FAT-fs (loop5): Directory bread(block 69) failed [ 85.100004][ T6025] FAT-fs (loop4): Directory bread(block 73) failed [ 85.117354][ T6032] FAT-fs (loop5): Directory bread(block 70) failed [ 85.130730][ T6032] FAT-fs (loop5): Directory bread(block 71) failed [ 85.137314][ T6032] FAT-fs (loop5): Directory bread(block 72) failed [ 85.231542][ T6032] FAT-fs (loop5): Directory bread(block 73) failed [ 85.400530][ T6066] fuse: blksize only supported for fuseblk [ 85.726225][ T6097] loop1: detected capacity change from 0 to 128 [ 85.755802][ T6097] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.998862][ T6126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.393'. [ 86.295459][ T6156] netlink: 56 bytes leftover after parsing attributes in process `syz.5.403'. [ 86.500120][ T6164] tmpfs: Bad value for 'mpol' [ 86.937756][ T6200] No such timeout policy "syz0" [ 87.004859][ T6204] loop1: detected capacity change from 0 to 2048 [ 87.068730][ T6204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.074791][ T6145] loop3: detected capacity change from 0 to 32768 [ 87.174386][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.424'. [ 87.372508][ T6247] loop2: detected capacity change from 0 to 128 [ 87.384827][ T6239] loop4: detected capacity change from 0 to 2048 [ 87.461068][ T6247] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 87.462846][ T6239] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 87.476310][ T6256] loop5: detected capacity change from 0 to 256 [ 87.496537][ T6256] exfat: Deprecated parameter 'utf8' [ 87.511217][ T6239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.523660][ T6247] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.526662][ T6262] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.560970][ T6262] CIFS mount error: No usable UNC path provided in device string! [ 87.560970][ T6262] [ 87.574919][ T6262] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 87.606000][ T6247] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 87.627322][ T6256] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 88.000959][ T6312] program syz.2.446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.166559][ T6330] device netdevsim0 entered promiscuous mode [ 88.196480][ T6338] loop3: detected capacity change from 0 to 164 [ 88.210853][ T6330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.234578][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.284654][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.306673][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.339103][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.355915][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.385215][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.400245][ T1110] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.417879][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.438573][ T6334] netlink: 'syz.4.456': attribute type 3 has an invalid length. [ 88.689940][ T1110] usb 2-1: Using ep0 maxpacket: 32 [ 88.819036][ T6372] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 88.840264][ T1110] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 88.887739][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.921607][ T1110] usb 2-1: config 0 descriptor?? [ 89.033322][ T1110] gspca_main: sq930x-2.14.0 probing 041e:403c [ 89.065731][ T6404] validate_nla: 45 callbacks suppressed [ 89.065764][ T6404] netlink: 'syz.3.478': attribute type 3 has an invalid length. [ 89.130417][ T6408] x_tables: duplicate underflow at hook 2 [ 89.239216][ T6418] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 89.248592][ T6420] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 89.271948][ T6418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.484'. [ 89.301922][ T6418] batman_adv: batadv0: Adding interface: virt_wifi0 [ 89.332958][ T6418] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.429698][ T6418] batman_adv: batadv0: Interface activated: virt_wifi0 [ 89.470801][ T1110] gspca_sq930x: ucbus_write failed -71 [ 89.476326][ T1110] sq930x: probe of 2-1:0.0 failed with error -71 [ 89.514097][ T1110] usb 2-1: USB disconnect, device number 3 [ 89.638717][ T6457] loop5: detected capacity change from 0 to 512 [ 89.658376][ T6457] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.677706][ T6457] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.719302][ T6457] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 89.754762][ T6465] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.776668][ T6457] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 89.804804][ T6457] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 89.850083][ T6457] System zones: 0-2, 18-18, 34-35 [ 89.877342][ T6457] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.909682][ T6481] loop2: detected capacity change from 0 to 1764 [ 89.986381][ T6481] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 90.009311][ T6487] loop4: detected capacity change from 0 to 1024 [ 90.213046][ T6487] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 90.350702][ T6520] netlink: 'syz.1.511': attribute type 7 has an invalid length. [ 90.406552][ T6530] loop3: detected capacity change from 0 to 256 [ 90.454603][ T6520] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.511'. [ 90.760011][ T4159] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 91.140055][ T4159] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.160651][ T4159] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.189387][ T6602] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 91.224547][ T6605] loop3: detected capacity change from 0 to 764 [ 91.260032][ T4159] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 91.282548][ T6605] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.299577][ T4159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.325751][ T6605] Symlink component flag not implemented [ 91.355381][ T6605] Symlink component flag not implemented [ 91.360724][ T4159] usb 5-1: SerialNumber: syz [ 91.425416][ T4159] usb 5-1: 0:2 : does not exist [ 91.907473][ T13] usb 5-1: USB disconnect, device number 4 [ 92.219772][ T6703] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.558'. [ 92.239479][ T6703] openvswitch: netlink: IP tunnel dst address not specified [ 92.294393][ T6698] loop1: detected capacity change from 0 to 8192 [ 92.390293][ T6698] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 92.410131][ T6698] REISERFS (device loop1): using ordered data mode [ 92.419359][ T6698] reiserfs: using flush barriers [ 92.449718][ T6666] loop3: detected capacity change from 0 to 32768 [ 92.458813][ T6698] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.487214][ T6698] REISERFS (device loop1): checking transaction log (loop1) [ 92.508687][ T6714] loop2: detected capacity change from 0 to 4096 [ 92.554846][ T6714] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 92.647773][ T6666] XFS (loop3): Mounting V5 Filesystem [ 92.656518][ T6729] loop5: detected capacity change from 0 to 2048 [ 92.707254][ T6698] REISERFS (device loop1): Using tea hash to sort names [ 92.734070][ T6698] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 92.834415][ T6729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.854902][ T6666] XFS (loop3): Ending clean mount [ 92.940118][ T6729] smb3: Bad value for 'uid' [ 92.942097][ T6666] XFS (loop3): Quotacheck needed: Please wait. [ 92.973091][ T6714] ntfs3: loop2: ntfs_sync_inode r=1e failed, -22. [ 93.033052][ T6714] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 93.051710][ T6748] cgroup: name respecified [ 93.056227][ T6666] XFS (loop3): Quotacheck: Done. [ 93.219189][ T6757] netlink: 272 bytes leftover after parsing attributes in process `syz.5.569'. [ 93.250393][ T150] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 93.278200][ T4170] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 93.292049][ T4168] XFS (loop3): Unmounting Filesystem [ 93.641438][ T6789] capability: warning: `syz.2.580' uses 32-bit capabilities (legacy support in use) [ 93.684735][ T6779] loop5: detected capacity change from 0 to 4096 [ 93.913596][ T6811] dns_resolver: Unsupported content type (98) [ 93.937618][ T6807] loop2: detected capacity change from 0 to 2048 [ 94.034926][ T6807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.235297][ T6834] overlayfs: missing 'lowerdir' [ 94.449899][ T6857] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 94.598904][ T6873] netlink: 52 bytes leftover after parsing attributes in process `syz.4.605'. [ 94.746486][ T6885] loop5: detected capacity change from 0 to 1024 [ 94.792850][ T6896] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 94.813428][ T6896] netlink: 55 bytes leftover after parsing attributes in process `syz.3.613'. [ 94.830776][ T6896] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 94.845712][ T6903] netlink: 'syz.4.615': attribute type 2 has an invalid length. [ 94.862581][ T6905] loop2: detected capacity change from 0 to 256 [ 94.869908][ T6904] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.887899][ T6903] netlink: 'syz.4.615': attribute type 3 has an invalid length. [ 94.944663][ T144] hfsplus: b-tree write err: -5, ino 4 [ 94.955611][ T6896] batman_adv: batadv0: Removing interface: virt_wifi0 [ 94.981437][ T6905] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 95.360585][ T4159] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.494880][ T6976] netlink: 'syz.2.635': attribute type 9 has an invalid length. [ 95.682069][ T6996] loop2: detected capacity change from 0 to 512 [ 95.740106][ T4159] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 95.757030][ T7008] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 95.762797][ T4159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.813816][ T6996] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.640: bg 0: block 205: padding at end of block bitmap is not set [ 95.858019][ T4159] usb 2-1: config 0 descriptor?? [ 95.918083][ T6996] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 95.945012][ T4159] cp210x 2-1:0.0: cp210x converter detected [ 96.027177][ T6996] EXT4-fs (loop2): 1 orphan inode deleted [ 96.034952][ T6996] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.093579][ T7040] loop5: detected capacity change from 0 to 512 [ 96.107799][ T6996] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.199998][ T7040] EXT4-fs (loop5): Ignoring removed orlov option [ 96.206363][ T7040] EXT4-fs (loop5): inline encryption not supported [ 96.298215][ T7052] loop4: detected capacity change from 0 to 64 [ 96.318575][ T7040] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.396222][ T4159] usb 2-1: cp210x converter now attached to ttyUSB0 [ 96.485011][ T7040] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.650: Attempting to read directory block (0) that is past i_size (256) [ 96.505955][ T4159] usb 2-1: USB disconnect, device number 4 [ 96.649485][ T4159] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 96.665259][ T7040] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 96.679201][ T4159] cp210x 2-1:0.0: device disconnected [ 96.710217][ T7040] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,data_err=abort,inlinecrypt,dioread_nolock,grpjquota=.oldalloc,errors=continue,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 96.876271][ T7040] EXT4-fs error (device loop5): ext4_xattr_set_entry:1624: inode #2: comm syz.5.650: corrupted xattr entries [ 97.127130][ T7129] netlink: 64 bytes leftover after parsing attributes in process `syz.3.670'. [ 97.381515][ T7145] loop5: detected capacity change from 0 to 1024 [ 97.517129][ T7145] EXT4-fs (loop5): Ignoring removed oldalloc option [ 97.568632][ T7145] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none. [ 97.638160][ T7145] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #11: comm syz.5.673: directory missing '..' [ 97.801529][ T7188] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 97.817191][ T7101] loop2: detected capacity change from 0 to 32768 [ 97.930806][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 98.000258][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.5.686'. [ 98.097673][ T7210] device bond1 entered promiscuous mode [ 98.144838][ T7210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.544383][ T7272] loop2: detected capacity change from 0 to 4096 [ 98.603600][ T7279] loop4: detected capacity change from 0 to 4096 [ 98.616425][ T7272] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 98.665346][ T7279] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 98.674606][ T7272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.758883][ T7279] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 98.798235][ T7279] ntfs3: loop4: Failed to load $Extend. [ 98.840007][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.090854][ T7325] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 99.165455][ T7331] i2c i2c-0: Invalid block write size 33 [ 99.200179][ T21] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 99.223275][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.320573][ T21] usb 2-1: config 0 descriptor?? [ 99.402867][ T7349] loop4: detected capacity change from 0 to 1024 [ 99.580279][ T21] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 99.588736][ T21] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 99.717505][ T7386] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.726'. [ 99.758055][ T7390] netlink: 'syz.3.729': attribute type 5 has an invalid length. [ 99.800048][ T21] [drm:udl_init] *ERROR* Selecting channel failed [ 99.875708][ T21] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 99.897404][ T7375] loop2: detected capacity change from 0 to 4096 [ 99.938671][ T21] [drm] Initialized udl on minor 2 [ 99.970046][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 100.001918][ T7375] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 100.041964][ T21] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 100.077770][ T21] usb 2-1: USB disconnect, device number 5 [ 100.198993][ T7426] loop3: detected capacity change from 0 to 8 [ 100.411286][ T7426] SQUASHFS error: xz decompression failed, data probably corrupt [ 100.475342][ T7426] SQUASHFS error: Failed to read block 0xa8: -5 [ 100.556034][ T7426] SQUASHFS error: xz decompression failed, data probably corrupt [ 100.582834][ T7426] SQUASHFS error: Failed to read block 0xa8: -5 [ 100.589245][ T26] audit: type=1800 audit(1748200817.187:3): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.733" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 100.728386][ T7465] loop1: detected capacity change from 0 to 2048 [ 100.826211][ T1202] block nbd3: Attempted send on invalid socket [ 100.833829][ T1202] blk_update_request: I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.858935][ T7485] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 2, size 4096) [ 100.909727][ T1202] block nbd3: Attempted send on invalid socket [ 100.916052][ T1202] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 100.928187][ T7485] REISERFS warning (device nbd3): sh-2006 read_super_block: bread failed (dev nbd3, block 16, size 4096) [ 100.971667][ T7499] loop5: detected capacity change from 0 to 256 [ 100.990584][ T7485] REISERFS warning (device nbd3): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd3 [ 101.238366][ T7499] FAT-fs (loop5): Directory bread(block 64) failed [ 101.256796][ T7499] FAT-fs (loop5): Directory bread(block 65) failed [ 101.270983][ T7499] FAT-fs (loop5): Directory bread(block 66) failed [ 101.277916][ T7499] FAT-fs (loop5): Directory bread(block 67) failed [ 101.294971][ T7499] FAT-fs (loop5): Directory bread(block 68) failed [ 101.311404][ T7499] FAT-fs (loop5): Directory bread(block 69) failed [ 101.318476][ T7499] FAT-fs (loop5): Directory bread(block 70) failed [ 101.331370][ T7499] FAT-fs (loop5): Directory bread(block 71) failed [ 101.342224][ T7499] FAT-fs (loop5): Directory bread(block 72) failed [ 101.357187][ T7499] FAT-fs (loop5): Directory bread(block 73) failed [ 101.377880][ T7465] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 101.380023][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.596053][ T7529] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.596819][ T4257] udevd[4257]: incorrect nilfs2 checksum on /dev/loop1 [ 101.666695][ T7465] NILFS (loop1): failed to count free inodes: err=-34 [ 101.820904][ T5814] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=3d.6c [ 101.839490][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.912034][ T5814] usb 5-1: config 0 descriptor?? [ 101.962877][ T5814] bfusb: probe of 5-1:0.0 failed with error -5 [ 101.983569][ T4178] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 102.020186][ T4178] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 102.030291][ T4172] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 102.069209][ T4178] Remounting filesystem read-only [ 102.088710][ T4178] NILFS (loop1): error -5 truncating bmap (ino=16) [ 102.118459][ T4178] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 102.234450][ T5814] usb 5-1: USB disconnect, device number 5 [ 102.371373][ T4172] usb 6-1: not running at top speed; connect to a high speed hub [ 102.403461][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 102.424574][ T7599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.772'. [ 102.495349][ T4172] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 102.513826][ T4172] usb 6-1: config 95 has no interface number 0 [ 102.532287][ T4172] usb 6-1: config 95 interface 1 has no altsetting 0 [ 102.630982][ T7621] netlink: 156 bytes leftover after parsing attributes in process `syz.2.778'. [ 102.696529][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.779'. [ 102.721047][ T4459] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.750064][ T4172] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 102.788046][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.814301][ T4172] usb 6-1: Product: syz [ 102.831768][ T4172] usb 6-1: Manufacturer: syz [ 102.836424][ T4172] usb 6-1: SerialNumber: syz [ 102.858063][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'. [ 103.082838][ T4459] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 103.107356][ T4459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.158781][ T4459] usb 2-1: config 0 descriptor?? [ 103.297899][ T7698] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 103.359778][ T4172] usb 6-1: USB disconnect, device number 2 [ 103.532721][ T7724] loop2: detected capacity change from 0 to 164 [ 103.573637][ T7724] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 103.622651][ T4159] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.630682][ T4663] udevd[4663]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.649698][ T4459] ath6kl: Failed to read usb control message: -71 [ 103.669993][ T4459] ath6kl: Unable to read the bmi data from the device: -71 [ 103.678501][ T4459] ath6kl: Unable to recv target info: -71 [ 103.703195][ T4459] ath6kl: Failed to init ath6kl core: -71 [ 103.765318][ T4459] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 103.814796][ T4459] usb 2-1: USB disconnect, device number 6 [ 103.840139][ T4249] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.847926][ T7744] device netdevsim0 entered promiscuous mode [ 103.914947][ T4159] usb 5-1: Using ep0 maxpacket: 32 [ 103.957725][ T7758] loop2: detected capacity change from 0 to 24 [ 103.990615][ T7758] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 104.026705][ T7758] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 104.040317][ T4159] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 104.058696][ T4159] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.073153][ T4159] usb 5-1: config 0 has no interface number 0 [ 104.079432][ T4159] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 104.095292][ T4159] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 55438, setting to 1024 [ 104.109949][ T4249] usb 4-1: Using ep0 maxpacket: 8 [ 104.118392][ T4159] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 104.143536][ T4159] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.179496][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 104.262832][ T7785] netlink: 'syz.1.813': attribute type 19 has an invalid length. [ 104.280243][ T4249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.281135][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.813'. [ 104.340333][ T4159] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 104.349387][ T4159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.360086][ T4249] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 104.380026][ T4249] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 104.399048][ T4159] usb 5-1: Product: syz [ 104.410201][ T4159] usb 5-1: Manufacturer: syz [ 104.410217][ T4159] usb 5-1: SerialNumber: syz [ 104.412175][ T4159] usb 5-1: config 0 descriptor?? [ 104.450251][ T7690] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.457280][ T7690] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.464447][ T4249] usb 4-1: language id specifier not provided by device, defaulting to English [ 104.575727][ T7810] device veth0_macvtap left promiscuous mode [ 104.600154][ T4249] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.609206][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.635840][ T4249] usb 4-1: Product: syz [ 104.646159][ T4249] usb 4-1: Manufacturer: å±›ë—â±é’†çšÃ‰î°ë”矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳á¼ïŸ•ã¡ä‡Œë®£è¸›ç£¬æ›£ãœ›â‘ [ 104.661093][ T4249] usb 4-1: SerialNumber: syz [ 104.860076][ T4159] usb 5-1: probing VID:PID(0424:012C) [ 104.883859][ T4159] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 104.898515][ T4159] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 104.921263][ T4159] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 104.952139][ T4159] vub300: probe of 5-1:0.133 failed with error -22 [ 104.987615][ T4249] cdc_ncm 4-1:1.0: bind() failure [ 104.999492][ T4159] usb 5-1: USB disconnect, device number 6 [ 105.007084][ T7874] netlink: 'syz.5.835': attribute type 1 has an invalid length. [ 105.011493][ T4249] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 105.020005][ T7871] loop1: detected capacity change from 0 to 1024 [ 105.031983][ T4215] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.033191][ T4249] cdc_ncm 4-1:1.1: bind() failure [ 105.058363][ T4249] usb 4-1: USB disconnect, device number 2 [ 105.097976][ T7871] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.420148][ T4215] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 105.456695][ T4215] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 105.500008][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.540425][ T7824] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.810067][ T4215] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 105.826245][ T4215] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input8 [ 105.848729][ T26] audit: type=1400 audit(1748200822.447:4): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=7964 comm="syz.4.859" [ 105.916217][ T4215] usb 3-1: USB disconnect, device number 5 [ 105.940366][ T5814] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.119007][ T7998] loop3: detected capacity change from 0 to 1024 [ 106.171809][ T8007] netlink: 72 bytes leftover after parsing attributes in process `syz.4.868'. [ 106.181664][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 106.274586][ T1426] hfsplus: b-tree write err: -5, ino 4 [ 106.475315][ T5814] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 106.490152][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 106.499426][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 106.519667][ T5814] usb 6-1: Product: syz [ 106.529759][ T5814] usb 6-1: SerialNumber: syz [ 106.540930][ T5814] usb 6-1: config 0 descriptor?? [ 106.628291][ T5814] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 106.642768][ T5814] dvb_usb_af9015: probe of 6-1:0.0 failed with error -22 [ 106.677179][ T5814] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 106.694641][ T8055] tmpfs: Bad value for 'mpol' [ 106.703123][ T5814] dvb_usb_af9035: probe of 6-1:0.0 failed with error -22 [ 106.863276][ T5814] usb 6-1: USB disconnect, device number 3 [ 106.950144][ T4172] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.049457][ T8099] nft_compat: unsupported protocol 1 [ 107.146684][ T8110] netlink: 'syz.2.900': attribute type 13 has an invalid length. [ 107.330320][ T4172] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.340528][ T4172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.368190][ T4172] usb 2-1: config 0 descriptor?? [ 107.386788][ T8130] loop4: detected capacity change from 0 to 8192 [ 107.431144][ T4172] cp210x 2-1:0.0: cp210x converter detected [ 107.456549][ T8130] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 107.474814][ T8130] REISERFS (device loop4): using ordered data mode [ 107.489978][ T8130] reiserfs: using flush barriers [ 107.505255][ T8130] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.535197][ T8130] REISERFS (device loop4): checking transaction log (loop4) [ 107.561012][ T8130] REISERFS (device loop4): Using r5 hash to sort names [ 107.574147][ T5814] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 107.657868][ T4172] usb 2-1: cp210x converter now attached to ttyUSB0 [ 107.787263][ T8162] loop5: detected capacity change from 0 to 8 [ 107.826327][ T8165] loop4: detected capacity change from 0 to 1024 [ 107.863560][ T4459] usb 2-1: USB disconnect, device number 7 [ 107.878951][ T4459] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.920474][ T4459] cp210x 2-1:0.0: device disconnected [ 107.979832][ T9] hfsplus: b-tree write err: -5, ino 4 [ 108.000262][ T5814] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.050615][ T5814] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.089429][ T5814] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.101556][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.200704][ T26] audit: type=1326 audit(1748200824.797:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.5.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d222cb969 code=0x0 [ 108.223516][ T5814] hub 3-1:4.0: USB hub found [ 108.425812][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.928'. [ 108.435078][ T5814] hub 3-1:4.0: 12 ports detected [ 108.446372][ T5814] usb 3-1: selecting invalid altsetting 1 [ 108.456401][ T5814] hub 3-1:4.0: Using single TT (err -22) [ 108.511296][ T5814] hub 3-1:4.0: insufficient power available to use all downstream ports [ 108.631117][ T8242] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 108.646801][ T8249] netlink: 1 bytes leftover after parsing attributes in process `syz.4.937'. [ 108.656124][ T5814] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 108.666676][ T5814] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 108.674623][ T8242] netlink: 224 bytes leftover after parsing attributes in process `syz.1.933'. [ 108.742244][ T5814] usb 3-1: USB disconnect, device number 6 [ 108.793514][ T8256] loop5: detected capacity change from 0 to 512 [ 108.878726][ T8256] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 108.899499][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 108.924098][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 109.015054][ T8256] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 109.122636][ T8256] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.405537][ T8328] loop3: detected capacity change from 0 to 256 [ 109.496288][ T8328] FAT-fs (loop3): Directory bread(block 64) failed [ 109.515899][ T8328] FAT-fs (loop3): Directory bread(block 65) failed [ 109.545665][ T8328] FAT-fs (loop3): Directory bread(block 66) failed [ 109.585228][ T8328] FAT-fs (loop3): Directory bread(block 67) failed [ 109.592489][ T8328] FAT-fs (loop3): Directory bread(block 68) failed [ 109.599483][ T8328] FAT-fs (loop3): Directory bread(block 69) failed [ 109.611783][ T8328] FAT-fs (loop3): Directory bread(block 70) failed [ 109.618447][ T8328] FAT-fs (loop3): Directory bread(block 71) failed [ 109.625721][ T8328] FAT-fs (loop3): Directory bread(block 72) failed [ 109.632696][ T8328] FAT-fs (loop3): Directory bread(block 73) failed [ 109.690633][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 109.800085][ T4172] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.960084][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 109.984590][ T8379] device gre0 entered promiscuous mode [ 110.132486][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.220316][ T4172] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 110.229892][ T13] usb 2-1: config 5 has an invalid interface number: 211 but max is 0 [ 110.238063][ T13] usb 2-1: config 5 has no interface number 0 [ 110.264429][ T4172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.283693][ T13] usb 2-1: config 5 interface 211 has no altsetting 0 [ 110.291722][ T8405] netlink: 'syz.3.984': attribute type 11 has an invalid length. [ 110.307460][ T4172] usb 6-1: config 0 descriptor?? [ 110.346053][ T8407] loop2: detected capacity change from 0 to 2048 [ 110.367042][ T8407] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 110.382066][ T4172] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 110.383577][ T8407] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.419476][ T8407] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 110.445641][ T8407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.500220][ T13] usb 2-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=b8.74 [ 110.525019][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.553472][ T13] usb 2-1: Product: syz [ 110.557783][ T13] usb 2-1: Manufacturer: syz [ 110.576069][ T13] usb 2-1: SerialNumber: syz [ 110.759865][ T8445] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 110.820249][ T4172] gspca_sunplus: reg_w_riv err -71 [ 110.825450][ T4172] sunplus: probe of 6-1:0.0 failed with error -71 [ 110.870930][ T4172] usb 6-1: USB disconnect, device number 4 [ 110.881752][ T13] quatech2 2-1:5.211: Quatech 2nd gen USB to Serial Driver converter detected [ 110.925396][ T13] usb 2-1: qt2_attach - failed to power on unit: -71 [ 110.939662][ T13] quatech2: probe of 2-1:5.211 failed with error -71 [ 110.952476][ T8469] overlayfs: missing 'lowerdir' [ 110.968078][ T8471] loop2: detected capacity change from 0 to 256 [ 110.977084][ T13] usb 2-1: USB disconnect, device number 8 [ 111.083300][ T8485] loop4: detected capacity change from 0 to 64 [ 111.610071][ T13] Bluetooth: hci0: command 0x080f tx timeout [ 111.648850][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'. [ 111.723818][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'. [ 111.837323][ T8562] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1031'. [ 111.891682][ T8562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 112.098617][ T8594] netlink: 'syz.3.1039': attribute type 8 has an invalid length. [ 112.206899][ T8606] loop5: detected capacity change from 0 to 256 [ 112.538602][ T8646] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 112.708019][ T8666] loop4: detected capacity change from 0 to 65 [ 112.785228][ T8666] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 112.840279][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1062'. [ 112.886504][ T8684] loop1: detected capacity change from 0 to 256 [ 112.980589][ T8684] exfat: Deprecated parameter 'utf8' [ 112.986100][ T8684] exfat: Deprecated parameter 'utf8' [ 113.028011][ T8684] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 113.080664][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 113.311527][ T8723] loop3: detected capacity change from 0 to 2048 [ 113.335448][ T8731] loop2: detected capacity change from 0 to 512 [ 113.383923][ T8731] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 113.398131][ T8731] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.423248][ T8723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 113.475308][ T8723] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 113.508432][ T8749] loop1: detected capacity change from 0 to 1024 [ 113.534945][ T8723] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 113.548512][ T8723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.600042][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.670340][ T150] hfsplus: b-tree write err: -5, ino 4 [ 113.780352][ T8759] loop2: detected capacity change from 0 to 2048 [ 113.859950][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 113.876153][ T8759] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.926143][ T8779] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1089'. [ 113.973836][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 114.009914][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 114.082010][ T8792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1090'. [ 114.134356][ T8792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1090'. [ 114.191185][ T13] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 114.225315][ T13] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 114.287039][ T13] usb 5-1: Product: syz [ 114.318277][ T13] usb 5-1: Manufacturer: syz [ 114.347692][ T13] usb 5-1: SerialNumber: syz [ 114.353908][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1096'. [ 114.542139][ T8822] syz.5.1101 (8822): attempted to duplicate a private mapping with mremap. This is not supported. [ 114.644781][ T13] usb 5-1: Invalid connection information received from device [ 114.871737][ T4159] usb 5-1: USB disconnect, device number 7 [ 114.991701][ T8863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.319280][ T8891] loop3: detected capacity change from 0 to 256 [ 115.366789][ T8895] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 115.382703][ T8895] overlayfs: conflicting options: userxattr,metacopy=on [ 115.446325][ T8891] FAT-fs (loop3): Directory bread(block 64) failed [ 115.458644][ T8903] CIFS: VFS: Malformed UNC in devname [ 115.465611][ T8891] FAT-fs (loop3): Directory bread(block 65) failed [ 115.505104][ T8891] FAT-fs (loop3): Directory bread(block 66) failed [ 115.544994][ T8891] FAT-fs (loop3): Directory bread(block 67) failed [ 115.579473][ T8891] FAT-fs (loop3): Directory bread(block 68) failed [ 115.611853][ T8891] FAT-fs (loop3): Directory bread(block 69) failed [ 115.616437][ T8915] loop4: detected capacity change from 0 to 47 [ 115.620738][ T8891] FAT-fs (loop3): Directory bread(block 70) failed [ 115.660220][ T8891] FAT-fs (loop3): Directory bread(block 71) failed [ 115.669801][ T8891] FAT-fs (loop3): Directory bread(block 72) failed [ 115.734695][ T8891] FAT-fs (loop3): Directory bread(block 73) failed [ 115.893257][ T4168] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 115.917155][ T8922] loop1: detected capacity change from 0 to 4096 [ 115.928958][ T8850] loop2: detected capacity change from 0 to 32768 [ 115.944233][ T4168] FAT-fs (loop3): Filesystem has been set read-only [ 115.998638][ T8850] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 116.032670][ T8922] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 116.070384][ T8922] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 116.083833][ T8850] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 116.105001][ T8922] ntfs: (device loop1): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 116.170076][ T8850] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 116.177388][ T8922] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 116.192218][ T8922] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 116.226218][ T8922] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 116.253285][ T8960] 9pnet: Insufficient options for proto=fd [ 116.266342][ T8922] ntfs: volume version 3.1. [ 116.290436][ T8922] ntfs: (device loop1): ntfs_read_locked_inode(): Directory index is corrupt. [ 116.315205][ T4172] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 116.331681][ T8922] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 116.343791][ T4172] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 116.424592][ T8966] loop5: detected capacity change from 0 to 512 [ 116.431106][ T4172] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 87ms [ 116.443657][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.472867][ T4172] gfs2: fsid=syz:syz.0: jid=0: Done [ 116.482820][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35964 - 0 [ 116.500578][ T8850] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 116.600207][ T8966] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 116.620679][ T8966] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 116.646304][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.675118][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35964 - 0 [ 116.710827][ T8966] EXT4-fs (loop5): 1 truncate cleaned up [ 116.789305][ T8966] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 116.878371][ T8966] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.1145: Logical block already allocated [ 116.938806][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.967425][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35964 - 0 [ 117.013660][ T9004] loop4: detected capacity change from 0 to 512 [ 117.056257][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.088687][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35964 - 0 [ 117.290115][ T9004] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 117.335776][ T9004] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.516157][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 117.766579][ T9182] loop1: detected capacity change from 0 to 65 [ 117.796533][ T9194] loop2: detected capacity change from 0 to 256 [ 117.806136][ T9182] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 117.918800][ T9074] loop5: detected capacity change from 0 to 32768 [ 118.015306][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.039349][ T9219] loop4: detected capacity change from 0 to 2048 [ 118.045608][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.118769][ T8986] device bridge_slave_0 entered promiscuous mode [ 118.139823][ T9237] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.227437][ T9074] XFS (loop5): Mounting V5 Filesystem [ 118.239012][ T9219] NILFS (loop4): failed to count free inodes: err=-34 [ 118.254932][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.292525][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.303814][ T8986] device bridge_slave_1 entered promiscuous mode [ 118.359451][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.383155][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.503651][ T9292] QAT: Device 4 not found [ 118.530465][ T9074] XFS (loop5): Ending clean mount [ 118.579792][ T9074] XFS (loop5): Quotacheck needed: Please wait. [ 118.641641][ T9318] process 'syz.2.1171' launched './file0' with NULL argv: empty string added [ 118.654900][ T8986] team0: Port device team_slave_0 added [ 118.682969][ T8986] team0: Port device team_slave_1 added [ 118.703743][ T9322] __nla_validate_parse: 2 callbacks suppressed [ 118.703759][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 118.785217][ T9074] XFS (loop5): Quotacheck: Done. [ 118.874857][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.882938][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 118.904691][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.991714][ T4963] XFS (loop5): Unmounting Filesystem [ 118.999966][ T9362] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1176'. [ 119.033913][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.111541][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.118694][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.159156][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.395012][ T8986] device hsr_slave_0 entered promiscuous mode [ 119.456420][ T8986] device hsr_slave_1 entered promiscuous mode [ 119.478033][ T8986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.513944][ T8986] Cannot create hsr debugfs directory [ 119.599319][ T9438] loop1: detected capacity change from 0 to 256 [ 119.737255][ T9438] FAT-fs (loop1): Directory bread(block 64) failed [ 119.779999][ T9438] FAT-fs (loop1): Directory bread(block 65) failed [ 119.813320][ T9438] FAT-fs (loop1): Directory bread(block 66) failed [ 119.850193][ T9438] FAT-fs (loop1): Directory bread(block 67) failed [ 119.856969][ T9438] FAT-fs (loop1): Directory bread(block 68) failed [ 119.873706][ T9494] loop4: detected capacity change from 0 to 256 [ 119.896531][ T9438] FAT-fs (loop1): Directory bread(block 69) failed [ 119.941409][ T9438] FAT-fs (loop1): Directory bread(block 70) failed [ 119.976775][ T9510] loop5: detected capacity change from 0 to 256 [ 119.986083][ T9438] FAT-fs (loop1): Directory bread(block 71) failed [ 120.009657][ T9438] FAT-fs (loop1): Directory bread(block 72) failed [ 120.021170][ T9494] FAT-fs (loop4): Directory bread(block 64) failed [ 120.026715][ T9438] FAT-fs (loop1): Directory bread(block 73) failed [ 120.046359][ T9494] FAT-fs (loop4): Directory bread(block 65) failed [ 120.090132][ T9494] FAT-fs (loop4): Directory bread(block 66) failed [ 120.099228][ T9530] loop2: detected capacity change from 0 to 512 [ 120.110650][ T9494] FAT-fs (loop4): Directory bread(block 67) failed [ 120.117236][ T9494] FAT-fs (loop4): Directory bread(block 68) failed [ 120.193809][ T9] device hsr_slave_0 left promiscuous mode [ 120.201843][ T9494] FAT-fs (loop4): Directory bread(block 69) failed [ 120.208477][ T9494] FAT-fs (loop4): Directory bread(block 70) failed [ 120.225639][ T9] device hsr_slave_1 left promiscuous mode [ 120.235748][ T9494] FAT-fs (loop4): Directory bread(block 71) failed [ 120.244779][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.252254][ T9494] FAT-fs (loop4): Directory bread(block 72) failed [ 120.252287][ T9494] FAT-fs (loop4): Directory bread(block 73) failed [ 120.272666][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.280955][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.290038][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.290144][ T9530] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.308936][ T9] device bridge_slave_1 left promiscuous mode [ 120.317732][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.329301][ T9] device bridge_slave_0 left promiscuous mode [ 120.336087][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.350340][ T9530] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.361527][ T9] device veth1_macvtap left promiscuous mode [ 120.367635][ T9] device veth0_macvtap left promiscuous mode [ 120.373997][ T9] device veth1_vlan left promiscuous mode [ 120.379813][ T9] device veth0_vlan left promiscuous mode [ 120.838138][ T9] team0 (unregistering): Port device macvlan0 removed [ 120.921280][ T9] team0 (unregistering): Port device team_slave_1 removed [ 120.940714][ T9] team0 (unregistering): Port device team_slave_0 removed [ 120.958271][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.967211][ T4215] Bluetooth: hci1: command 0x041b tx timeout [ 120.984554][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.080848][ T9] bond0 (unregistering): Released all slaves [ 121.143387][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1199'. [ 121.152410][ T9558] tc_dump_action: action bad kind [ 121.168156][ T9572] netlink: 'syz.2.1203': attribute type 13 has an invalid length. [ 121.180550][ T9585] netlink: 'syz.4.1210': attribute type 21 has an invalid length. [ 121.189499][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 121.308367][ T9624] xt_socket: unknown flags 0xc [ 121.322365][ T8986] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.407105][ T9628] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.439185][ T9639] kAFS: Can only specify source 'none' with -o dyn [ 121.476954][ T9628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.550040][ T8986] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.567253][ T8986] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.630985][ T8986] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.645619][ T9654] loop1: detected capacity change from 0 to 8 [ 121.721154][ T9654] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 121.787318][ T9654] cramfs: Error -5 while decompressing! [ 121.808029][ T9654] cramfs: ffffffff961ce208(18)->ffff88805c1d0000(4096) [ 121.840641][ T9654] cramfs: Error -5 while decompressing! [ 121.866581][ T9654] cramfs: ffffffff961ce208(18)->ffff88805c1d0000(4096) [ 121.927429][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.939962][ T4215] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 121.992517][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.022549][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.058953][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.118547][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.151089][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.159646][ T1426] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.166745][ T1426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.256290][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.279668][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.331585][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.341415][ T4215] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 122.363053][ T4215] usb 6-1: config 0 has no interface number 0 [ 122.375020][ T1426] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.382253][ T1426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.387381][ T4215] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.437820][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.468557][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.526629][ T9645] loop2: detected capacity change from 0 to 32768 [ 122.532255][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.557229][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.580099][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.594762][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.610137][ T4215] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 122.610952][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.632618][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.647750][ T4215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.675895][ T4215] usb 6-1: Product: syz [ 122.690495][ T4215] usb 6-1: Manufacturer: syz [ 122.706457][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.709368][ T4215] usb 6-1: SerialNumber: syz [ 122.738880][ T4215] usb 6-1: config 0 descriptor?? [ 122.779153][ T9713] device vti0 entered promiscuous mode [ 122.823410][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.853959][ T4215] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 122.874704][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.925304][ T8986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.947031][ T9733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1241'. [ 122.970783][ T9740] sctp: [Deprecated]: syz.1.1242 (pid 9740) Use of int in maxseg socket option. [ 122.970783][ T9740] Use struct sctp_assoc_value instead [ 123.024728][ T9733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1241'. [ 123.039952][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 123.089943][ C0] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 123.301728][ T4215] usb 6-1: USB disconnect, device number 5 [ 123.385340][ T4215] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 123.406213][ T9762] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 123.439289][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 123.644582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.663612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.715347][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.323803][ T9828] netlink: 'syz.4.1260': attribute type 30 has an invalid length. [ 124.467863][ T9838] loop5: detected capacity change from 0 to 16 [ 124.502017][ T9837] netlink: 'syz.4.1264': attribute type 4 has an invalid length. [ 124.577408][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.580748][ T9838] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 124.607146][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.634406][ T9838] cramfs: empty filesystem [ 124.724035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.740523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.767617][ T9857] loop2: detected capacity change from 0 to 64 [ 124.782218][ T8986] device veth0_vlan entered promiscuous mode [ 124.789378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.831431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.869219][ T8986] device veth1_vlan entered promiscuous mode [ 124.995036][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.067734][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.090756][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1271'. [ 125.105806][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.130030][ T4215] Bluetooth: hci1: command 0x0419 tx timeout [ 125.139513][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.223604][ T8986] device veth0_macvtap entered promiscuous mode [ 125.238157][ T8986] device veth1_macvtap entered promiscuous mode [ 125.256711][ T9886] loop5: detected capacity change from 0 to 512 [ 125.351070][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.479321][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.490572][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.490761][ T9886] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.517180][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.540052][ T9886] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.578847][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.619952][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.628104][ T9833] loop1: detected capacity change from 0 to 32768 [ 125.664616][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.693656][ T9886] EXT4-fs error (device loop5): ext4_map_blocks:629: inode #2: block 18: comm syz.5.1273: lblock 23 mapped to illegal pblock 18 (length 1) [ 125.694993][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.739553][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.769284][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.782280][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.792447][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.814289][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.837163][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.854998][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.866220][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.878977][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.891403][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.908679][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1277'. [ 125.938459][ T9833] ERROR: (device loop1): diAllocBit: iag inconsistent [ 125.938459][ T9833] [ 125.952875][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.971937][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.986770][ T9833] ERROR: (device loop1): remounting filesystem as read-only [ 125.994619][ T9833] ialloc: diAlloc returned -5! [ 126.013210][ T9921] loop2: detected capacity change from 0 to 256 [ 126.031917][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.046822][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.059729][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.074972][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.092623][ T8986] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.122894][ T9928] loop5: detected capacity change from 0 to 2048 [ 126.125205][ T8986] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.148514][ T8986] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.163214][ T8986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.207452][ T9928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.499297][ T4221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.530418][ T4221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.581386][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.618104][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.651365][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.726674][ T1426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.787444][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 126.825880][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 126.835880][ T9994] loop4: detected capacity change from 0 to 64 [ 126.870145][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 126.919960][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 126.960196][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 126.968237][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.009932][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.048949][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.082327][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.113012][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.156645][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.185615][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.202132][T10020] netlink: 'syz.6.1303': attribute type 6 has an invalid length. [ 127.204898][T10018] netlink: 'syz.1.1301': attribute type 1 has an invalid length. [ 127.228595][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.258412][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.266998][T10018] netlink: 'syz.1.1301': attribute type 3 has an invalid length. [ 127.280297][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.287818][T10018] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1301'. [ 127.308012][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.315714][T10018] NCSI netlink: No device for ifindex 52229 [ 127.321937][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.349918][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.371601][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.409470][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.443146][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.453240][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.468951][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 127.469476][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.499945][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.522255][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.526060][T10035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.545154][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.583207][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.603463][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.627966][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.645784][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.670526][T10047] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 127.695847][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.714441][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.742044][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.773159][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.787699][ T9999] loop5: detected capacity change from 0 to 32768 [ 127.802493][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.816035][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.823936][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.832174][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.839707][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.858588][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.878666][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.889733][ T9999] ialloc: diAlloc returned -5! [ 127.899625][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.929297][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.946939][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.960214][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.976090][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 127.987270][T10067] loop6: detected capacity change from 0 to 256 [ 127.999282][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 128.007804][ T4459] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 128.027451][ T4459] hid-generic 0000:0000:0003.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 128.044711][T10067] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.062720][T10069] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1320'. [ 128.183956][T10086] loop4: detected capacity change from 0 to 512 [ 128.283977][T10086] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1323: iget: bad extended attribute block 1 [ 128.388565][T10086] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1323: couldn't read orphan inode 15 (err -117) [ 128.395857][T10086] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 128.437097][T10112] loop6: detected capacity change from 0 to 128 [ 128.584586][T10119] loop1: detected capacity change from 0 to 4096 [ 128.857817][T10163] sctp: [Deprecated]: syz.1.1333 (pid 10163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.857817][T10163] Use struct sctp_sack_info instead [ 129.250260][T10198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1343'. [ 129.354153][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.721622][T10211] fido_id[10211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.970314][ T13] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 129.979400][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.017947][ T13] usb 5-1: Product: syz [ 130.035212][ T13] usb 5-1: Manufacturer: syz [ 130.065433][ T13] usb 5-1: SerialNumber: syz [ 130.078321][T10236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 130.141330][ T13] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 130.472834][T10272] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 130.696231][T10218] loop1: detected capacity change from 0 to 32768 [ 130.722719][T10289] loop6: detected capacity change from 0 to 256 [ 130.771708][T10289] exfat: Deprecated parameter 'utf8' [ 130.777120][T10289] exfat: Deprecated parameter 'utf8' [ 130.786576][T10289] exfat: Deprecated parameter 'utf8' [ 130.803407][T10289] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4899f300, utbl_chksum : 0xe619d30d) [ 130.886898][T10218] XFS (loop1): Mounting V5 Filesystem [ 130.980199][ T13] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.060722][T10322] loop5: detected capacity change from 0 to 8 [ 131.084937][T10218] XFS (loop1): Ending clean mount [ 131.097255][T10218] XFS (loop1): Quotacheck needed: Please wait. [ 131.195342][T10218] XFS (loop1): Quotacheck: Done. [ 131.269695][ T4178] XFS (loop1): Unmounting Filesystem [ 131.290255][ T1110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.393240][ T21] usb 5-1: USB disconnect, device number 8 [ 131.600288][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 131.730396][ T1110] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 131.738192][T10367] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1381'. [ 131.748777][ T1110] usb 3-1: config 0 has no interface number 0 [ 131.766516][ T1110] usb 3-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.788316][ T1110] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.867022][T10378] loop6: detected capacity change from 0 to 64 [ 132.003983][ T1110] usb 3-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 132.023562][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.036992][T10347] loop5: detected capacity change from 0 to 32768 [ 132.043628][ T1110] usb 3-1: Product: syz [ 132.048878][ T1110] usb 3-1: Manufacturer: syz [ 132.054454][ T1110] usb 3-1: SerialNumber: syz [ 132.064806][ T1110] usb 3-1: config 0 descriptor?? [ 132.080264][ T13] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 132.087501][ T13] ath9k_htc: Failed to initialize the device [ 132.097769][T10385] loop1: detected capacity change from 0 to 4096 [ 132.114439][ T21] usb 5-1: ath9k_htc: USB layer deinitialized [ 132.125418][ T1110] spcp8x5 3-1:0.191: SPCP8x5 converter detected [ 132.139178][T10347] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.145489][T10385] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 132.158336][ T1110] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 132.170179][T10347] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.206293][T10347] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 132.245806][T10385] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 132.245806][T10385] [ 132.258271][ T4213] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 132.278421][ T4213] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 132.402968][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.409264][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.435132][ T4159] usb 3-1: USB disconnect, device number 7 [ 132.441957][ T4213] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms [ 132.453101][ T4159] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 132.461550][ T4213] gfs2: fsid=syz:syz.0: jid=0: Done [ 132.466783][T10347] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 132.474896][ T4159] spcp8x5 3-1:0.191: device disconnected [ 132.475595][T10426] loop6: detected capacity change from 0 to 1024 [ 132.492194][T10423] loop4: detected capacity change from 0 to 4096 [ 132.594036][T10423] ntfs: volume version 3.1. [ 132.700929][T10423] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 132.750306][T10423] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 132.770392][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.868735][T10423] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 132.927514][T10423] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 133.026054][T10423] ntfs: (device loop4): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 133.158453][T10479] loop5: detected capacity change from 0 to 2048 [ 133.245284][T10479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.280926][ T4182] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 133.539690][T10512] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1418'. [ 133.728205][T10525] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 133.760052][T10525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1423'. [ 133.862550][T10544] overlayfs: missing 'lowerdir' [ 133.889466][T10545] Cannot find del_set index 1 as target [ 133.936286][T10552] loop5: detected capacity change from 0 to 764 [ 134.005454][T10560] xt_TCPMSS: Only works on TCP SYN packets [ 134.082913][T10552] Symlink component flag not implemented [ 134.088564][T10552] Symlink component flag not implemented [ 134.125622][T10552] Symlink component flag not implemented (129) [ 134.145077][T10552] Symlink component flag not implemented (6) [ 134.180978][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 134.219536][T10583] loop1: detected capacity change from 0 to 256 [ 134.398831][T10604] loop5: detected capacity change from 0 to 8 [ 134.422327][T10609] loop6: detected capacity change from 0 to 64 [ 134.532214][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1454'. [ 134.542873][T10604] SQUASHFS error: Unable to read inode 0xa7 [ 134.642366][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1455'. [ 135.020042][ T4213] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 135.269932][ T4213] usb 7-1: Using ep0 maxpacket: 8 [ 135.390134][ T4213] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 135.408448][ T4213] usb 7-1: config 2 has no interface number 0 [ 135.421762][T10699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1474'. [ 135.440091][ T4213] usb 7-1: config 2 interface 31 has no altsetting 0 [ 135.574736][T10623] loop1: detected capacity change from 0 to 32768 [ 135.601830][ T4213] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 135.617551][T10711] loop2: detected capacity change from 0 to 1024 [ 135.624769][ T4213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.633571][ T4213] usb 7-1: Product: syz [ 135.637779][ T4213] usb 7-1: Manufacturer: syz [ 135.644014][ T4213] usb 7-1: SerialNumber: syz [ 135.698980][T10711] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 135.699530][T10623] ialloc: diAlloc returned -5! [ 135.725695][T10711] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 135.748282][T10711] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.782840][T10729] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 135.853746][T10711] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 136.010064][ T1110] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 136.301203][ T4213] ch9200: probe of 7-1:2.31 failed with error -22 [ 136.319958][ T1110] usb 6-1: Using ep0 maxpacket: 32 [ 136.326725][ T4213] usb 7-1: USB disconnect, device number 2 [ 136.336654][T10774] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1494'. [ 136.464940][ T1110] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.480593][ T1110] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.515286][ T1110] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 136.559030][ T1110] usb 6-1: config 0 interface 0 has no altsetting 0 [ 136.569148][ T1110] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 136.601308][ T1110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.648616][ T1110] usb 6-1: config 0 descriptor?? [ 136.656824][T10805] loop2: detected capacity change from 0 to 64 [ 136.796048][T10816] Cannot find del_set index 0 as target [ 136.799092][T10805] attempt to access beyond end of device [ 136.799092][T10805] loop2: rw=0, want=65536, limit=64 [ 136.831153][T10805] Buffer I/O error on dev loop2, logical block 32767, async page read [ 136.850832][T10805] attempt to access beyond end of device [ 136.850832][T10805] loop2: rw=0, want=65536, limit=64 [ 136.896270][T10805] Buffer I/O error on dev loop2, logical block 32767, async page read [ 136.985061][T10829] loop4: detected capacity change from 0 to 512 [ 137.000697][ T1110] usbhid 6-1:0.0: can't add hid device: -71 [ 137.006967][ T1110] usbhid: probe of 6-1:0.0 failed with error -71 [ 137.022742][ T1110] usb 6-1: USB disconnect, device number 6 [ 137.132560][T10829] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.179769][T10829] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.237834][T10811] loop6: detected capacity change from 0 to 32768 [ 137.269999][T10829] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 137.325476][T10829] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 137.344379][T10811] jfs_strtoUCS: char2uni returned -22. [ 137.365419][T10811] charset = cp864, char = 0x9f [ 137.373419][T10829] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.1507: Failed to acquire dquot type 1 [ 137.525705][T10868] loop1: detected capacity change from 0 to 128 [ 137.609192][T10868] FAT-fs (loop1): count of clusters too big (2147483774) [ 137.639994][T10868] FAT-fs (loop1): Can't find a valid FAT filesystem [ 137.746906][T10897] loop6: detected capacity change from 0 to 256 [ 137.753438][T10894] deleting an unspecified loop device is not supported. [ 137.857724][T10897] FAT-fs (loop6): Directory bread(block 64) failed [ 137.879339][T10897] FAT-fs (loop6): Directory bread(block 65) failed [ 137.920188][T10897] FAT-fs (loop6): Directory bread(block 66) failed [ 137.947103][T10897] FAT-fs (loop6): Directory bread(block 67) failed [ 137.962930][T10898] loop5: detected capacity change from 0 to 4096 [ 137.977485][T10897] FAT-fs (loop6): Directory bread(block 68) failed [ 138.003487][T10897] FAT-fs (loop6): Directory bread(block 69) failed [ 138.028769][T10915] netlink: 'syz.4.1524': attribute type 1 has an invalid length. [ 138.032590][T10897] FAT-fs (loop6): Directory bread(block 70) failed [ 138.049920][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.078809][T10897] FAT-fs (loop6): Directory bread(block 71) failed [ 138.086498][T10898] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 138.110176][T10897] FAT-fs (loop6): Directory bread(block 72) failed [ 138.139123][T10897] FAT-fs (loop6): Directory bread(block 73) failed [ 138.145894][T10898] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 138.228543][ T26] audit: type=1800 audit(1748200854.827:6): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1520" name="file1" dev="loop6" ino=1048646 res=0 errno=0 [ 138.258306][T10898] ntfs: volume version 3.1. [ 138.287407][T10898] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 138.308236][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 138.380184][T10898] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 138.400060][T10898] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 138.430131][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 138.473188][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 138.518438][ T21] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 138.576452][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.619728][ T21] usb 2-1: config 0 descriptor?? [ 138.650304][T10868] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.711942][ T21] usb 2-1: Found UVC 0.00 device (10c4:ea90) [ 138.720486][ T21] usb 2-1: No valid video chain found. [ 138.787277][T10960] loop4: detected capacity change from 0 to 256 [ 138.935231][T10960] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 138.969526][ T21] usb 2-1: USB disconnect, device number 9 [ 138.992512][T10978] lo speed is unknown, defaulting to 1000 [ 139.047845][T10987] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 139.061729][T10978] lo speed is unknown, defaulting to 1000 [ 139.098105][T10978] lo speed is unknown, defaulting to 1000 [ 139.297398][T11004] xt_nfacct: accounting object `syz1' does not exists [ 139.555141][ T13] lo speed is unknown, defaulting to 1000 [ 139.572188][T10978] infiniband syz0: set active [ 139.594367][T10978] infiniband syz0: added lo [ 139.751824][T10978] RDS/IB: syz0: added [ 139.776310][T10978] smc: adding ib device syz0 with port count 1 [ 139.783337][T10978] smc: ib device syz0 port 1 has pnetid [ 139.791235][ T13] lo speed is unknown, defaulting to 1000 [ 139.801197][T10978] lo speed is unknown, defaulting to 1000 [ 139.840105][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 140.059338][T11074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.089955][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 140.102430][T10978] lo speed is unknown, defaulting to 1000 [ 140.155484][T11110] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 140.205783][T11113] loop5: detected capacity change from 0 to 256 [ 140.217529][ T21] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 140.234873][T10978] lo speed is unknown, defaulting to 1000 [ 140.237186][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.241161][T11113] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.260090][T11113] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 140.280075][ T1110] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.280707][ T21] usb 3-1: config 0 descriptor?? [ 140.287644][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.302624][T11113] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 140.377957][ T21] usb 3-1: selecting invalid altsetting 3 [ 140.390472][ T21] comedi comedi0: could not set alternate setting 3 in high speed [ 140.398514][ T21] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 140.410582][T10978] lo speed is unknown, defaulting to 1000 [ 140.418129][ T21] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 140.521406][T11125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.529148][T11125] IPv6: NLM_F_CREATE should be set when creating new route [ 140.536393][T11125] IPv6: NLM_F_CREATE should be set when creating new route [ 140.548978][T10978] lo speed is unknown, defaulting to 1000 [ 140.595887][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 140.601113][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 140.646873][ T21] usb 3-1: USB disconnect, device number 8 [ 140.740115][ T1110] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 140.780278][ T13] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.791153][ T1110] usb 5-1: config 0 has no interface number 0 [ 140.797342][ T1110] usb 5-1: config 0 interface 35 altsetting 2 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 140.810623][ T1110] usb 5-1: config 0 interface 35 has no altsetting 0 [ 140.864681][ T13] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 140.880528][ T13] usb 2-1: config 7 has no interface number 0 [ 140.886890][ T13] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 140.906886][T11138] loop5: detected capacity change from 0 to 4096 [ 140.918015][ T13] usb 2-1: config 7 interface 187 has no altsetting 0 [ 140.994444][T11138] ntfs: volume version 3.1. [ 141.010256][ T1110] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6a.c2 [ 141.016131][T11138] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 141.029405][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.080032][ T1110] usb 5-1: Product: syz [ 141.084224][ T1110] usb 5-1: Manufacturer: syz [ 141.097135][T11138] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 141.106350][ T1110] usb 5-1: SerialNumber: syz [ 141.114234][T11138] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 141.130078][ T13] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 141.139915][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.147910][ T13] usb 2-1: Product: syz [ 141.156881][ T1110] usb 5-1: config 0 descriptor?? [ 141.201425][ T13] usb 2-1: Manufacturer: syz [ 141.206044][ T13] usb 2-1: SerialNumber: syz [ 141.270271][T11071] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 141.308231][T11174] Sensor A: ================= START STATUS ================= [ 141.350589][T11174] Sensor A: Test Pattern: 75% Colorbar [ 141.390729][T11174] Sensor A: Show Information: All [ 141.409296][T11174] Sensor A: Vertical Flip: false [ 141.424649][T11174] Sensor A: Horizontal Flip: false [ 141.429913][T11174] Sensor A: Brightness: 128 [ 141.454815][T11174] Sensor A: Contrast: 128 [ 141.460547][ T1110] usbtest 5-1:0.35: Linux gadget zero [ 141.465942][ T1110] usbtest 5-1:0.35: high-speed {control in/out int-out} tests (+alt) [ 141.470476][T11174] Sensor A: Hue: 0 [ 141.510248][ T13] usb 2-1: Limiting number of CPorts to U8_MAX [ 141.518946][ T13] usb 2-1: Unknown endpoint type found, address 0x07 [ 141.537754][T11174] Sensor A: Saturation: 128 [ 141.549881][ T13] usb 2-1: Not enough endpoints found in device, aborting! [ 141.564712][T11174] Sensor A: ================== END STATUS ================== [ 141.724509][ T1110] usb 5-1: USB disconnect, device number 9 [ 141.788015][ T13] usb 2-1: USB disconnect, device number 10 [ 142.169014][T11250] damon: min_nr_regions (0) must be at least 3 [ 142.217664][T11198] loop5: detected capacity change from 0 to 40427 [ 142.314789][T11198] F2FS-fs (loop5): Invalid segment/section count (31, 24 x 1) [ 142.353021][T11198] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 142.375603][T11198] F2FS-fs (loop5): invalid crc value [ 142.441986][T11198] F2FS-fs (loop5): Found nat_bits in checkpoint [ 142.526192][T11287] loop4: detected capacity change from 0 to 256 [ 142.617444][T11287] FAT-fs (loop4): Directory bread(block 64) failed [ 142.634446][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 142.660021][T11287] FAT-fs (loop4): Directory bread(block 65) failed [ 142.663043][T11198] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 142.666616][T11287] FAT-fs (loop4): Directory bread(block 66) failed [ 142.705020][T11198] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 142.754725][T11287] FAT-fs (loop4): Directory bread(block 67) failed [ 142.762728][T11287] FAT-fs (loop4): Directory bread(block 68) failed [ 142.779509][T11287] FAT-fs (loop4): Directory bread(block 69) failed [ 142.816743][T11287] FAT-fs (loop4): Directory bread(block 70) failed [ 142.851592][T11295] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 142.873500][T11287] FAT-fs (loop4): Directory bread(block 71) failed [ 142.911686][T11287] FAT-fs (loop4): Directory bread(block 72) failed [ 142.923376][T11308] loop2: detected capacity change from 0 to 512 [ 142.940754][T11287] FAT-fs (loop4): Directory bread(block 73) failed [ 142.999985][T11295] syz.6.1610 (11295) used greatest stack depth: 19520 bytes left [ 143.143500][T11308] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 143.192171][T11308] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.394617][T11341] binder: 11340:11341 ioctl c018620c 200000000240 returned -1 [ 143.491981][T11349] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 143.574633][T11362] netlink: 'syz.1.1625': attribute type 3 has an invalid length. [ 143.661879][T11368] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 143.770042][ T4215] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.878246][T11386] loop1: detected capacity change from 0 to 1764 [ 144.029986][ T4215] usb 3-1: Using ep0 maxpacket: 8 [ 144.099502][T11386] attempt to access beyond end of device [ 144.099502][T11386] loop1: rw=524288, want=2192, limit=1764 [ 144.182153][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 144.193173][T11408] loop6: detected capacity change from 0 to 4096 [ 144.197153][T11386] attempt to access beyond end of device [ 144.197153][T11386] loop1: rw=524288, want=2448, limit=1764 [ 144.208414][T11419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1640'. [ 144.239771][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1640'. [ 144.256026][T11386] attempt to access beyond end of device [ 144.256026][T11386] loop1: rw=0, want=1944, limit=1764 [ 144.263685][T11408] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 144.291437][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1640'. [ 144.360685][ T4215] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 144.390337][ T26] audit: type=1800 audit(1748200860.997:7): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1632" name="file0" dev="loop1" ino=1986 res=0 errno=0 [ 144.394097][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.436123][T11431] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 144.459674][T11408] ntfs3: loop6: failed to convert "c46c" to iso8859-15 [ 144.467949][ T4215] usb 3-1: Product: syz [ 144.477630][ T4215] usb 3-1: Manufacturer: syz [ 144.491041][ T4215] usb 3-1: SerialNumber: syz [ 144.515310][ T4215] usb 3-1: config 0 descriptor?? [ 144.578681][T11437] loop4: detected capacity change from 0 to 128 [ 144.603438][ T4215] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 144.780989][T11453] xt_CT: No such helper "snmp" [ 145.055053][ T4215] gspca_sn9c20x: Write register 1001 failed -71 [ 145.062689][ T4215] gspca_sn9c20x: Device initialization failed [ 145.086782][ T4215] gspca_sn9c20x: probe of 3-1:0.0 failed with error -71 [ 145.113512][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 145.143812][ T4215] usb 3-1: USB disconnect, device number 9 [ 145.163845][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1657'. [ 145.436829][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1664'. [ 145.533078][T11534] loop5: detected capacity change from 0 to 256 [ 145.889955][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 145.897658][ T4215] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 146.006103][T11573] loop4: detected capacity change from 0 to 4096 [ 146.161147][T11581] dlm: no locking on control device [ 146.169924][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 146.191402][ T4215] usb 7-1: Using ep0 maxpacket: 16 [ 146.300100][ T5814] usb 3-1: config 2 has an invalid interface number: 241 but max is 0 [ 146.312967][ T5814] usb 3-1: config 2 has no interface number 0 [ 146.330465][ T4215] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 146.341508][ T4215] usb 7-1: config 0 has no interface number 0 [ 146.357320][T11591] vivid-001: ================= START STATUS ================= [ 146.371269][ T5814] usb 3-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.374243][T11591] vivid-001: Generate PTS: [ 146.385512][ T4215] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 146.400152][T11591] true [ 146.421441][ T5814] usb 3-1: config 2 interface 241 has no altsetting 0 [ 146.434361][T11591] vivid-001: Generate SCR: true [ 146.459548][T11591] tpg source WxH: 3840x2160 (R'G'B) [ 146.487850][T11591] tpg field: 1 [ 146.497423][T11591] tpg crop: 3840x2160@0x0 [ 146.502326][T11591] tpg compose: 3840x2160@0x0 [ 146.506934][T11591] tpg colorspace: 8 [ 146.518008][T11591] tpg transfer function: 0/2 [ 146.523170][T11591] tpg quantization: 0/1 [ 146.527429][T11591] tpg RGB range: 0/2 [ 146.540157][T11591] vivid-001: ================== END STATUS ================== [ 146.640136][ T4215] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 146.649318][ T5814] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 146.685884][ T4215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.695953][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.704033][ T5814] usb 3-1: Product: syz [ 146.708268][ T4215] usb 7-1: Product: syz [ 146.712512][ T5814] usb 3-1: Manufacturer: syz [ 146.717108][ T5814] usb 3-1: SerialNumber: syz [ 146.730441][ T4215] usb 7-1: Manufacturer: syz [ 146.735114][ T4215] usb 7-1: SerialNumber: syz [ 146.760103][ T4215] usb 7-1: config 0 descriptor?? [ 146.801547][ T5814] ti_usb_3410_5052 3-1:2.241: TI USB 3410 1 port adapter converter detected [ 146.819484][T11559] ODEBUG: Out of memory. ODEBUG disabled [ 146.827159][ T5814] ti_usb_3410_5052 3-1:2.241: missing endpoints [ 146.881910][T11613] loop5: detected capacity change from 0 to 1024 [ 147.040285][ T5814] usb 3-1: USB disconnect, device number 10 [ 147.061518][T11559] syz.1.1672 (11559): drop_caches: 2 [ 147.260480][ T4215] usbtouchscreen: probe of 7-1:0.214 failed with error -71 [ 147.290872][ T4215] usb 7-1: USB disconnect, device number 3 [ 147.621119][T11680] device sit0 entered promiscuous mode [ 147.626890][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1694'. [ 147.653080][T11674] loop5: detected capacity change from 0 to 4096 [ 147.656960][T11680] netlink: 'syz.1.1693': attribute type 1 has an invalid length. [ 147.724777][T11680] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1693'. [ 148.113964][T11716] device geneve2 entered promiscuous mode [ 148.262280][T11728] loop2: detected capacity change from 0 to 256 [ 148.304090][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 148.313894][T11728] exfat: Deprecated parameter 'utf8' [ 148.319231][T11728] exfat: Deprecated parameter 'namecase' [ 148.335583][T11728] exfat: Deprecated parameter 'utf8' [ 148.349570][T11744] loop6: detected capacity change from 0 to 128 [ 148.382255][T11728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 148.440800][T11728] attempt to access beyond end of device [ 148.440800][T11728] loop2: rw=524288, want=34359738496, limit=256 [ 148.473035][T11744] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 148.507320][T11728] attempt to access beyond end of device [ 148.507320][T11728] loop2: rw=0, want=34359738496, limit=256 [ 148.530697][ T26] audit: type=1800 audit(1748200865.137:8): pid=11744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1714" name="file1" dev="loop6" ino=1048652 res=0 errno=0 [ 148.592382][ T26] audit: type=1800 audit(1748200865.177:9): pid=11728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1708" name="file1" dev="loop2" ino=1048651 res=0 errno=0 [ 148.656368][T11775] loop1: detected capacity change from 0 to 164 [ 148.677656][T11782] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1724'. [ 148.749315][T11789] loop4: detected capacity change from 0 to 2048 [ 148.906753][T11807] loop6: detected capacity change from 0 to 128 [ 148.961750][T11807] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.130331][T11823] loop4: detected capacity change from 0 to 8192 [ 149.738825][T11874] loop2: detected capacity change from 0 to 1024 [ 149.898506][ T150] hfsplus: b-tree write err: -5, ino 4 [ 150.146237][T11909] netlink: 'syz.6.1758': attribute type 1 has an invalid length. [ 150.168317][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1758'. [ 150.280669][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1762'. [ 150.307940][T11922] loop6: detected capacity change from 0 to 2048 [ 150.356828][T11922] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.403697][ T4663] udevd[4663]: incorrect nilfs2 checksum on /dev/loop6 [ 150.477559][T11938] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.535437][T11922] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 3044605952 [ 150.595861][T11922] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=15) [ 150.646963][T11922] Remounting filesystem read-only [ 150.671643][T11922] NILFS (loop6): error -5 truncating bmap (ino=15) [ 150.729965][T11946] NILFS (loop6): unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" [ 150.849426][ T8986] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 151.218375][T11989] loop6: detected capacity change from 0 to 1024 [ 151.288827][T11989] EXT4-fs (loop6): Ignoring removed orlov option [ 151.315175][T11997] loop5: detected capacity change from 0 to 2048 [ 151.353158][T11997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.360707][T11989] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,resgid=0x0000000000000000,nodioread_nolock,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,orlov,. Quota mode: none. [ 151.385307][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.462953][T11989] EXT4-fs (loop6): Ignoring removed orlov option [ 151.469435][T11989] EXT4-fs (loop6): Remounting file system with no journal so ignoring journalled data option [ 151.479991][T11989] EXT4-fs (loop6): can't enable nombcache during remount [ 151.521725][T12012] loop4: detected capacity change from 0 to 128 [ 151.580476][T12018] loop5: detected capacity change from 0 to 256 [ 151.742153][T12031] loop1: detected capacity change from 0 to 1024 [ 151.748575][T12038] rdma_rxe: rxe_register_device failed with error -23 [ 151.757238][T12038] rdma_rxe: failed to add lo [ 151.835222][T12047] loop5: detected capacity change from 0 to 128 [ 151.879957][ T4459] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.976636][ T4221] hfsplus: b-tree write err: -5, ino 4 [ 152.002546][T12059] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 152.079515][ T26] audit: type=1326 audit(1748200868.677:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.1.1802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0559d42969 code=0x0 [ 152.172044][T12082] loop6: detected capacity change from 0 to 512 [ 152.188906][T12083] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 152.245626][T12082] EXT4-fs (loop6): Ignoring removed oldalloc option [ 152.320225][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.350179][ T4459] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 152.372693][T12082] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,quota,oldalloc,,errors=continue. Quota mode: writeback. [ 152.406783][T12082] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.429500][ T4459] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 152.446096][T12099] rdma_rxe: rxe_register_device failed with error -23 [ 152.459317][T12099] rdma_rxe: failed to add lo [ 152.498801][ T4459] usb 3-1: Manufacturer: syz [ 152.519981][ T4249] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 152.533679][ T4459] usb 3-1: config 0 descriptor?? [ 152.535174][T12101] loop4: detected capacity change from 0 to 512 [ 152.709292][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1811'. [ 152.745045][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1811'. [ 152.745396][T12101] EXT4-fs (loop4): 1 orphan inode deleted [ 152.760291][T12101] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.772484][T12101] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.890256][ T4249] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.930142][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.972001][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.995063][ T4249] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.015621][T12124] netlink: 'syz.6.1813': attribute type 2 has an invalid length. [ 153.023719][ T4249] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 153.034018][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.051068][ T4459] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 153.059621][ T4249] usb 6-1: config 0 descriptor?? [ 153.107412][ T4249] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 153.259942][ T4459] gs_usb 3-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 153.277745][ T4459] gs_usb: probe of 3-1:0.0 failed with error -71 [ 153.312873][ T13] usb 6-1: USB disconnect, device number 7 [ 153.370710][ T4459] usb 3-1: USB disconnect, device number 11 [ 153.413897][ T13] appletouch 6-1:0.0: input: appletouch disconnected [ 153.560371][T12178] loop1: detected capacity change from 0 to 1764 [ 153.570054][ T4249] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 153.621118][T12178] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 153.636852][T12184] loop6: detected capacity change from 0 to 1024 [ 153.736127][T12184] hfsplus: bad catalog entry type [ 153.737719][T12193] loop1: detected capacity change from 0 to 164 [ 153.774827][ T4458] hfsplus: b-tree write err: -5, ino 4 [ 153.950148][ T4249] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 153.962076][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.005697][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.042246][ T4249] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 154.069568][ T4249] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 154.099893][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.142734][ T4249] usb 5-1: config 0 descriptor?? [ 154.168912][T12221] nbd: must specify a size in bytes for the device [ 154.560133][T12237] loop6: detected capacity change from 0 to 128 [ 154.635990][T12208] loop1: detected capacity change from 0 to 32768 [ 154.649468][ T4249] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x7 [ 154.700542][T12213] syz.2.1830 (12213): drop_caches: 2 [ 154.728343][T12237] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.740604][ T4249] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 154.744668][T12237] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.857703][ T4459] usb 5-1: USB disconnect, device number 10 [ 154.972235][T12208] XFS (loop1): Mounting V5 Filesystem [ 155.107115][T12208] XFS (loop1): Ending clean mount [ 155.121618][T12208] XFS (loop1): Quotacheck needed: Please wait. [ 155.234693][T12208] XFS (loop1): Quotacheck: Done. [ 155.303680][ T4178] XFS (loop1): Unmounting Filesystem [ 155.335863][T12291] loop5: detected capacity change from 0 to 4096 [ 155.370991][T12291] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 155.437882][T12274] loop6: detected capacity change from 0 to 32768 [ 155.472377][T12300] loop4: detected capacity change from 0 to 64 [ 155.517259][T12300] hfs: unable to locate alternate MDB [ 155.530659][T12300] hfs: continuing without an alternate MDB [ 155.540281][T12291] ntfs3: loop5: failed to convert "c46c" to macromanian [ 155.542755][T12274] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.1840 (12274) [ 155.652381][T12274] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 155.673022][T12274] BTRFS info (device loop6): force zlib compression, level 3 [ 155.689960][T12274] BTRFS info (device loop6): force clearing of disk cache [ 155.707932][T12274] BTRFS info (device loop6): setting nodatasum [ 155.718043][T12274] BTRFS info (device loop6): allowing degraded mounts [ 155.754492][T12274] BTRFS info (device loop6): enabling disk space caching [ 155.801805][T12274] BTRFS info (device loop6): disk space caching is enabled [ 155.856924][T12274] BTRFS info (device loop6): has skinny extents [ 155.943659][T12326] loop4: detected capacity change from 0 to 256 [ 155.999386][T12295] loop2: detected capacity change from 0 to 32768 [ 156.166027][T12274] BTRFS info (device loop6): clearing free space tree [ 156.172028][T12326] FAT-fs (loop4): Directory bread(block 64) failed [ 156.179450][T12326] FAT-fs (loop4): Directory bread(block 65) failed [ 156.187366][T12326] FAT-fs (loop4): Directory bread(block 66) failed [ 156.194653][T12326] FAT-fs (loop4): Directory bread(block 67) failed [ 156.201448][T12326] FAT-fs (loop4): Directory bread(block 68) failed [ 156.209606][T12326] FAT-fs (loop4): Directory bread(block 69) failed [ 156.215041][T12274] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.223034][T12326] FAT-fs (loop4): Directory bread(block 70) failed [ 156.232584][T12326] FAT-fs (loop4): Directory bread(block 71) failed [ 156.239148][T12326] FAT-fs (loop4): Directory bread(block 72) failed [ 156.246688][T12326] FAT-fs (loop4): Directory bread(block 73) failed [ 156.304853][T12349] syz.5.1852 (12349): drop_caches: 2 [ 156.310374][T12274] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.746721][T12373] loop2: detected capacity change from 0 to 4096 [ 156.781721][T12373] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 156.844951][T12373] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 156.932516][T12373] ntfs: volume version 3.1. [ 156.937143][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1856'. [ 157.054157][T12373] ntfs: (device loop2): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 157.169986][ T4456] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.251291][T12404] loop1: detected capacity change from 0 to 4096 [ 157.291580][T12414] overlayfs: unrecognized mount option "\" or missing value [ 157.303624][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 157.307193][T12363] loop5: detected capacity change from 0 to 32768 [ 157.318759][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'. [ 157.385079][T12421] syz.6.1868 (12421): drop_caches: 2 [ 157.392278][T12423] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.487260][T12363] XFS (loop5): Mounting V5 Filesystem [ 157.530357][ T4456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 157.540411][ T4456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 157.590535][ T4456] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 157.592941][T12442] loop6: detected capacity change from 0 to 512 [ 157.626184][T12363] XFS (loop5): Ending clean mount [ 157.640404][ T4456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.669613][ T4456] usb 5-1: config 0 descriptor?? [ 157.682711][T12363] XFS (loop5): Quotacheck needed: Please wait. [ 157.727412][T12442] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 157.738482][T12363] XFS (loop5): Quotacheck: Done. [ 157.794372][T12442] EXT4-fs (loop6): orphan cleanup on readonly fs [ 157.817756][T12442] EXT4-fs warning (device loop6): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.872365][T12442] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 157.880601][ T4963] XFS (loop5): Unmounting Filesystem [ 157.884188][T12442] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #16: comm syz.6.1872: iget: immutable or append flags not allowed on symlinks [ 157.910089][T12442] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1872: couldn't read orphan inode 16 (err -117) [ 157.927023][ T4456] usb 5-1: USB disconnect, device number 11 [ 157.937593][T12463] loop1: detected capacity change from 0 to 2048 [ 157.962830][T12442] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.087867][T12463] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.256038][T12464] loop2: detected capacity change from 0 to 32768 [ 158.385324][T12494] loop1: detected capacity change from 0 to 1024 [ 158.397146][T12464] XFS (loop2): Mounting V5 Filesystem [ 158.441588][T12464] XFS (loop2): Ending clean mount [ 158.590147][T12505] syz.4.1881 (12505): drop_caches: 2 [ 158.615342][ T155] hfsplus: b-tree write err: -5, ino 4 [ 158.620939][ T4456] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 158.638880][ T4170] XFS (loop2): Unmounting Filesystem [ 158.792282][T12509] loop1: detected capacity change from 0 to 4096 [ 158.871083][T12518] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.881789][ T4456] usb 6-1: Using ep0 maxpacket: 16 [ 158.918337][T12504] loop6: detected capacity change from 0 to 32768 [ 159.000135][ T4456] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.023727][ T4456] usb 6-1: config 0 has no interface number 0 [ 159.032559][ T4456] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.046060][ T4456] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.133010][T12504] XFS (loop6): Mounting V5 Filesystem [ 159.170299][ T4456] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 159.196187][ T4456] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 159.221431][ T4456] usb 6-1: Product: syz [ 159.225932][ T4456] usb 6-1: SerialNumber: syz [ 159.266744][ T4456] usb 6-1: config 0 descriptor?? [ 159.304779][ T4456] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 159.306087][ T4456] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input13 [ 159.429733][T12504] XFS (loop6): Ending clean mount [ 159.511946][T12390] usb 6-1: USB disconnect, device number 8 [ 159.520402][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 159.527414][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 159.559113][T12390] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 159.574621][ T8986] XFS (loop6): Unmounting Filesystem [ 159.747531][T12594] netlink: 'syz.4.1900': attribute type 2 has an invalid length. [ 159.978636][T12610] ptrace attach of "./syz-executor exec"[4182] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ÿÿÿÿ â÷%-ì‹5鎢Ÿ£D|VTyÊÞ\x22ýÍšK«à­N/)éõº/éÙH¯Mú&‚¡CsnVkת{Jv1±Á%­èÈ_)Þ$n»:…,þ\x5c¿]n¯+]±2yrŒrîLË•ß-6·^%D³\x5c~Õzèw'Mc\x22o§â–½‹ÄÙ«·`¿Ë¤=s N¾8|?Þ”Ò¡¿øÅBr›ô9šÎɳbõÝFøü…{iÄ$œ]ûë• [ 160.040946][ T4456] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.307648][T12634] loop5: detected capacity change from 0 to 1024 [ 160.353528][T12643] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (20) [ 160.400682][T12645] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.456828][T12645] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 160.468408][T12653] loop4: detected capacity change from 0 to 512 [ 160.475328][ T150] hfsplus: b-tree write err: -5, ino 4 [ 160.553705][ T4456] usb 2-1: Using ep0 maxpacket: 16 [ 160.560085][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.625516][T12653] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1917: iget: bad extended attribute block 1 [ 160.659439][T12653] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1917: couldn't read orphan inode 15 (err -117) [ 160.673588][T12653] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 160.693025][ T4456] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 160.725202][ T4456] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.739903][ T4456] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 160.752746][ T4456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.763374][ T4456] usb 2-1: config 0 descriptor?? [ 160.988758][T12706] netlink: 277 bytes leftover after parsing attributes in process `syz.5.1929'. [ 161.086242][T12716] loop6: detected capacity change from 0 to 512 [ 161.135734][T12719] loop5: detected capacity change from 0 to 2048 [ 161.182548][T12716] EXT4-fs (loop6): Ignoring removed oldalloc option [ 161.187095][T12727] syz.4.1937 (12727): drop_caches: 2 [ 161.206658][T12719] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.245965][T12733] program syz.4.1938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.254431][ T4456] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 161.258873][T12716] EXT4-fs (loop6): 1 truncate cleaned up [ 161.272428][T12716] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 161.319459][T12716] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1933: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 161.375486][T12716] EXT4-fs (loop6): Remounting filesystem read-only [ 161.397410][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1941'. [ 161.458582][T12390] usb 2-1: USB disconnect, device number 11 [ 161.621770][T12754] fido_id[12754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 161.757213][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1945'. [ 161.768265][T12788] loop4: detected capacity change from 0 to 512 [ 161.781202][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1945'. [ 161.795143][T12781] netlink: 'syz.5.1945': attribute type 20 has an invalid length. [ 161.894554][ T5814] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 161.916350][T12788] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.916442][T12788] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.921324][T12788] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 162.250992][T12824] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1954'. [ 162.280438][ T5814] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 162.292018][T12816] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1954'. [ 162.306624][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.335656][T12770] loop2: detected capacity change from 0 to 40427 [ 162.336946][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.351953][T12828] loop4: detected capacity change from 0 to 128 [ 162.368899][ T5814] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 162.398457][ T5814] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 162.412653][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.436697][T12770] F2FS-fs (loop2): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 162.448226][ T13] Bluetooth: hci1: command 0x0405 tx timeout [ 162.456065][ T5814] usb 7-1: config 0 descriptor?? [ 162.465114][T12770] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 162.498369][T12770] F2FS-fs (loop2): invalid crc value [ 162.524487][T12770] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.624926][T12860] loop5: detected capacity change from 0 to 64 [ 162.662524][T12770] F2FS-fs (loop2): Start checkpoint disabled! [ 162.688123][T12770] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 162.696129][T12770] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 162.737867][T12860] [ 162.740208][T12860] ====================================================== [ 162.747217][T12860] WARNING: possible circular locking dependency detected [ 162.754248][T12860] 5.15.184-syzkaller #0 Not tainted [ 162.759448][T12860] ------------------------------------------------------ [ 162.766454][T12860] syz.5.1964/12860 is trying to acquire lock: [ 162.772509][T12860] ffff8880615341f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 162.783307][T12860] [ 162.783307][T12860] but task is already holding lock: [ 162.790676][T12860] ffff88807a5d40b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 162.800176][T12860] [ 162.800176][T12860] which lock already depends on the new lock. [ 162.800176][T12860] [ 162.810571][T12860] [ 162.810571][T12860] the existing dependency chain (in reverse order) is: [ 162.819575][T12860] [ 162.819575][T12860] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 162.827821][T12860] __mutex_lock_common+0x1eb/0x2390 [ 162.833545][T12860] mutex_lock_nested+0x17/0x20 [ 162.838849][T12860] hfs_find_init+0x15b/0x1d0 [ 162.843964][T12860] hfs_extend_file+0x2eb/0x1280 [ 162.849346][T12860] hfs_bmap_reserve+0x103/0x420 [ 162.854721][T12860] hfs_cat_create+0x1c0/0x8d0 [ 162.859920][T12860] hfs_create+0x62/0xd0 [ 162.864596][T12860] path_openat+0x11e1/0x2f30 [ 162.869713][T12860] do_filp_open+0x1b3/0x3e0 [ 162.874742][T12860] do_sys_openat2+0x142/0x4a0 [ 162.879942][T12860] __x64_sys_openat+0x135/0x160 [ 162.885314][T12860] do_syscall_64+0x4c/0xa0 [ 162.890254][T12860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.896684][T12860] [ 162.896684][T12860] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 162.905899][T12860] __lock_acquire+0x2c33/0x7c60 [ 162.911273][T12860] lock_acquire+0x197/0x3f0 [ 162.916282][T12860] __mutex_lock_common+0x1eb/0x2390 [ 162.921986][T12860] mutex_lock_nested+0x17/0x20 [ 162.927251][T12860] hfs_extend_file+0xd7/0x1280 [ 162.932603][T12860] hfs_bmap_reserve+0x103/0x420 [ 162.937951][T12860] __hfs_ext_write_extent+0x1fa/0x470 [ 162.943822][T12860] __hfs_ext_cache_extent+0x6b/0x9b0 [ 162.949615][T12860] hfs_extend_file+0x313/0x1280 [ 162.954976][T12860] hfs_get_block+0x3d4/0xbd0 [ 162.960166][T12860] __block_write_begin_int+0x54e/0x15a0 [ 162.966233][T12860] cont_write_begin+0x58a/0x7b0 [ 162.971592][T12860] hfs_write_begin+0x92/0xe0 [ 162.976680][T12860] generic_perform_write+0x2aa/0x530 [ 162.982469][T12860] __generic_file_write_iter+0x25f/0x4e0 [ 162.988601][T12860] generic_file_write_iter+0xa6/0x1b0 [ 162.994476][T12860] vfs_write+0x712/0xd00 [ 162.999221][T12860] ksys_write+0x14d/0x250 [ 163.004054][T12860] do_syscall_64+0x4c/0xa0 [ 163.008979][T12860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.015374][T12860] [ 163.015374][T12860] other info that might help us debug this: [ 163.015374][T12860] [ 163.025677][T12860] Possible unsafe locking scenario: [ 163.025677][T12860] [ 163.033110][T12860] CPU0 CPU1 [ 163.038457][T12860] ---- ---- [ 163.043800][T12860] lock(&tree->tree_lock#2/1); [ 163.048642][T12860] lock(&HFS_I(tree->inode)->extents_lock); [ 163.057117][T12860] lock(&tree->tree_lock#2/1); [ 163.064469][T12860] lock(&HFS_I(tree->inode)->extents_lock); [ 163.070423][T12860] [ 163.070423][T12860] *** DEADLOCK *** [ 163.070423][T12860] [ 163.078546][T12860] 5 locks held by syz.5.1964/12860: [ 163.083718][T12860] #0: ffff888078cc7770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 163.092926][T12860] #1: ffff88807c6ee460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 163.101969][T12860] #2: ffff8880615350a8 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: generic_file_write_iter+0x7e/0x1b0 [ 163.113288][T12860] #3: ffff888061534ef8 (&HFS_I(inode)->extents_lock#2){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 163.124187][T12860] #4: ffff88807a5d40b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 163.134108][T12860] [ 163.134108][T12860] stack backtrace: [ 163.139983][T12860] CPU: 0 PID: 12860 Comm: syz.5.1964 Not tainted 5.15.184-syzkaller #0 [ 163.148299][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.158334][T12860] Call Trace: [ 163.161593][T12860] [ 163.164502][T12860] dump_stack_lvl+0x168/0x230 [ 163.169157][T12860] ? load_image+0x3b0/0x3b0 [ 163.173637][T12860] ? show_regs_print_info+0x20/0x20 [ 163.178832][T12860] ? print_circular_bug+0x12b/0x1a0 [ 163.184010][T12860] check_noncircular+0x274/0x310 [ 163.188939][T12860] ? add_chain_block+0x940/0x940 [ 163.193856][T12860] ? lockdep_lock+0xdc/0x1e0 [ 163.198433][T12860] ? lock_release+0xba/0x870 [ 163.203002][T12860] ? mark_lock+0x94/0x320 [ 163.207324][T12860] __lock_acquire+0x2c33/0x7c60 [ 163.212258][T12860] ? unwind_next_frame+0x1296/0x1d90 [ 163.217536][T12860] ? unwind_get_return_address+0x49/0x80 [ 163.223149][T12860] ? stack_trace_save+0xe0/0xe0 [ 163.227981][T12860] ? verify_lock_unused+0x140/0x140 [ 163.233165][T12860] ? stack_trace_save+0x98/0xe0 [ 163.238001][T12860] ? stack_trace_snprint+0xf0/0xf0 [ 163.243102][T12860] lock_acquire+0x197/0x3f0 [ 163.247607][T12860] ? hfs_extend_file+0xd7/0x1280 [ 163.252523][T12860] ? add_lock_to_list+0x18d/0x280 [ 163.257524][T12860] ? __might_sleep+0xf0/0xf0 [ 163.262095][T12860] ? read_lock_is_recursive+0x10/0x10 [ 163.267443][T12860] ? __lock_acquire+0x289d/0x7c60 [ 163.272447][T12860] ? hfs_extend_file+0xd7/0x1280 [ 163.277364][T12860] __mutex_lock_common+0x1eb/0x2390 [ 163.282555][T12860] ? hfs_extend_file+0xd7/0x1280 [ 163.287472][T12860] ? mark_lock+0x94/0x320 [ 163.291779][T12860] ? verify_lock_unused+0x140/0x140 [ 163.296955][T12860] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 163.302915][T12860] ? mutex_lock_io_nested+0x60/0x60 [ 163.308099][T12860] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 163.313990][T12860] ? lockdep_hardirqs_on+0x94/0x140 [ 163.319184][T12860] mutex_lock_nested+0x17/0x20 [ 163.323929][T12860] hfs_extend_file+0xd7/0x1280 [ 163.328698][T12860] ? hfs_get_block+0xbd0/0xbd0 [ 163.333441][T12860] ? __mutex_trylock_common+0x14f/0x250 [ 163.338973][T12860] ? rcu_lock_release+0x20/0x20 [ 163.343804][T12860] ? hfs_find_init+0x84/0x1d0 [ 163.348460][T12860] ? hfs_get_block+0x3d4/0xbd0 [ 163.353201][T12860] ? __block_write_begin_int+0x54e/0x15a0 [ 163.358904][T12860] ? cont_write_begin+0x58a/0x7b0 [ 163.363908][T12860] ? generic_perform_write+0x2aa/0x530 [ 163.369355][T12860] ? __generic_file_write_iter+0x25f/0x4e0 [ 163.375143][T12860] ? generic_file_write_iter+0xa6/0x1b0 [ 163.380665][T12860] ? hfs_find_init+0x15b/0x1d0 [ 163.385416][T12860] ? hfs_find_init+0x15b/0x1d0 [ 163.390159][T12860] ? hfs_find_init+0x15b/0x1d0 [ 163.394901][T12860] ? __mutex_lock_common+0x431/0x2390 [ 163.400265][T12860] ? hfs_brec_find+0x18b/0x500 [ 163.405029][T12860] hfs_bmap_reserve+0x103/0x420 [ 163.409868][T12860] __hfs_ext_write_extent+0x1fa/0x470 [ 163.415238][T12860] __hfs_ext_cache_extent+0x6b/0x9b0 [ 163.420523][T12860] ? mutex_lock_nested+0x17/0x20 [ 163.425439][T12860] ? hfs_find_init+0x15b/0x1d0 [ 163.430183][T12860] hfs_extend_file+0x313/0x1280 [ 163.435029][T12860] ? hfs_get_block+0xbd0/0xbd0 [ 163.439771][T12860] ? memset+0x1e/0x40 [ 163.443732][T12860] ? lockdep_init_map_type+0x9d/0x850 [ 163.449093][T12860] ? slab_post_alloc_hook+0x2aa/0x380 [ 163.454444][T12860] hfs_get_block+0x3d4/0xbd0 [ 163.459018][T12860] ? hfs_free_extents+0x430/0x430 [ 163.464030][T12860] ? do_raw_spin_unlock+0x11d/0x230 [ 163.469215][T12860] ? create_page_buffers+0x238/0x320 [ 163.474485][T12860] __block_write_begin_int+0x54e/0x15a0 [ 163.480034][T12860] ? hfs_free_extents+0x430/0x430 [ 163.485143][T12860] ? page_zero_new_buffers+0x490/0x490 [ 163.490597][T12860] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 163.496577][T12860] ? lock_chain_count+0x20/0x20 [ 163.501425][T12860] ? do_user_addr_fault+0x694/0xc80 [ 163.506619][T12860] ? wait_for_stable_page+0xd9/0x110 [ 163.511892][T12860] cont_write_begin+0x58a/0x7b0 [ 163.516727][T12860] ? lockdep_hardirqs_on+0x94/0x140 [ 163.521914][T12860] ? generic_cont_expand_simple+0x190/0x190 [ 163.527794][T12860] ? __get_user_nocheck_1+0x6/0x10 [ 163.532896][T12860] hfs_write_begin+0x92/0xe0 [ 163.537482][T12860] ? hfs_free_extents+0x430/0x430 [ 163.542492][T12860] generic_perform_write+0x2aa/0x530 [ 163.547767][T12860] ? atime_needs_update+0x780/0x780 [ 163.553045][T12860] ? grab_cache_page_write_begin+0xa0/0xa0 [ 163.558862][T12860] ? file_remove_privs+0x590/0x590 [ 163.563962][T12860] ? read_lock_is_recursive+0x10/0x10 [ 163.569333][T12860] ? preempt_count_add+0x8d/0x190 [ 163.574348][T12860] ? rwsem_write_trylock+0x12f/0x1b0 [ 163.579618][T12860] ? clear_nonspinnable+0x60/0x60 [ 163.584627][T12860] __generic_file_write_iter+0x25f/0x4e0 [ 163.590249][T12860] generic_file_write_iter+0xa6/0x1b0 [ 163.595608][T12860] vfs_write+0x712/0xd00 [ 163.599842][T12860] ? file_end_write+0x250/0x250 [ 163.604680][T12860] ? __fget_files+0x40f/0x480 [ 163.609341][T12860] ? mutex_lock_nested+0x17/0x20 [ 163.614285][T12860] ? __fdget_pos+0x2bf/0x370 [ 163.618858][T12860] ? ksys_write+0x71/0x250 [ 163.623263][T12860] ksys_write+0x14d/0x250 [ 163.627594][T12860] ? __ia32_sys_read+0x80/0x80 [ 163.632357][T12860] ? lockdep_hardirqs_on+0x94/0x140 [ 163.637540][T12860] do_syscall_64+0x4c/0xa0 [ 163.641940][T12860] ? clear_bhb_loop+0x30/0x80 [ 163.646598][T12860] ? clear_bhb_loop+0x30/0x80 [ 163.651265][T12860] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.657156][T12860] RIP: 0033:0x7f3d222cb969 [ 163.661562][T12860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.681247][T12860] RSP: 002b:00007f3d20133038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.689741][T12860] RAX: ffffffffffffffda RBX: 00007f3d224f2fa0 RCX: 00007f3d222cb969 [ 163.697704][T12860] RDX: 0000000000010448 RSI: 0000200000000080 RDI: 0000000000000004 [ 163.705667][T12860] RBP: 00007f3d2234dab1 R08: 0000000000000000 R09: 0000000000000000 [ 163.713626][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.721588][T12860] R13: 0000000000000000 R14: 00007f3d224f2fa0 R15: 00007ffe87cb1fa8 [ 163.729670][T12860] [ 163.732732][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.771377][ T5814] hid-picolcd 0003:04D8:C002.0004: item fetching failed at offset 3/7 [ 163.783197][ T5814] hid-picolcd 0003:04D8:C002.0004: device report parse failed [ 163.791455][ T5814] hid-picolcd: probe of 0003:04D8:C002.0004 failed with error -22 [ 163.825208][ T155] attempt to access beyond end of device [ 163.825208][ T155] loop2: rw=2049, want=40976, limit=40427 [ 163.974777][ T4456] usb 7-1: USB disconnect, device number 4