last executing test programs: 2.0392661s ago: executing program 0 (id=3741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x94, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) 1.890443183s ago: executing program 0 (id=3745): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x2a14b58) 1.784741564s ago: executing program 3 (id=3749): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) 1.736420205s ago: executing program 0 (id=3751): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x22, 0xa, 0xf909, 0x204005, 0x80, 0xffffffff, 0x7, 0x10, 0xfffffe01, 0x50, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) 1.694247287s ago: executing program 3 (id=3752): r0 = syz_open_dev$radio(&(0x7f0000000f40), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x3, 0x0, 0x1}) 1.558170433s ago: executing program 3 (id=3756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 1.510260964s ago: executing program 0 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) 1.249907487s ago: executing program 3 (id=3760): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_delete(r0) 1.111318912s ago: executing program 3 (id=3765): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000014c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 1.10343592s ago: executing program 0 (id=3766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="975c49a232", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000004c0), 0x6b, r0}, 0x38) 1.089859058s ago: executing program 4 (id=3767): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x8000, 0x80, 0x7fff, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x1, 0x7f, 0x2f, 0x0, @private=0xa010101, @remote}}}}) 1.035688698s ago: executing program 3 (id=3768): ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000246cf10dd040280b6fc010203010902120001000000000904000000ff0201"], 0x0) 1.010435434s ago: executing program 4 (id=3769): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xfffffffffffffe4c, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) 979.348208ms ago: executing program 0 (id=3771): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x4438, &(0x7f00000088c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 678.825473ms ago: executing program 4 (id=3780): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) 617.256822ms ago: executing program 2 (id=3781): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) 585.758686ms ago: executing program 1 (id=3782): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0xff, 0x0, &(0x7f0000000240)="d91f1332", 0x4) 583.530156ms ago: executing program 4 (id=3783): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980901, 0x0, @name="a13c67a9121fb71a1d3e142fe2fb8f9ba5ee159b867aa7d60668087c38d76487"}) 532.304777ms ago: executing program 2 (id=3784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) 504.324622ms ago: executing program 1 (id=3785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "7f"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) 486.079888ms ago: executing program 4 (id=3786): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x3, 0x109bc0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x4000000, 0xfffffffe, 0x3002, 0x2, 0x3, 0x9, 0x7, 0x2}}) 417.695206ms ago: executing program 2 (id=3787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a05cbee30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c3157f00000000000000a06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e6dafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e097585ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde000006c06d4d551e81ee73459cf1c00000000000000000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d69358e885ddf5387e419c64847b8953070cdefe7d6a35197638e929f8f3c005f9de3fe351def9ed5"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 401.171633ms ago: executing program 1 (id=3788): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a) 394.855372ms ago: executing program 4 (id=3789): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000001140)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002580)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 303.871366ms ago: executing program 1 (id=3790): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x3, {0x8001, 0x10000, "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", 0xfb, 0x0, 0x4, 0xf9, 0x8, 0xe, 0x2}}}, 0x128) 266.673008ms ago: executing program 2 (id=3791): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 193.469086ms ago: executing program 1 (id=3792): r0 = socket(0x2, 0x5, 0x0) connect$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x2) 94.056418ms ago: executing program 2 (id=3793): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)={0x24, 0x14, 0x1, 0x70bd2c, 0x25dfdbfb, {0x10, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "feb33a16bae77d3db4"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000054) 179.06µs ago: executing program 1 (id=3794): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002fc0)) 0s ago: executing program 2 (id=3795): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x18, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): ngs: Mfr=0, Product=0, SerialNumber=0 [ 142.485162][ T4381] usb 4-1: config 0 descriptor?? [ 142.988123][ T4381] Bluetooth: Can't get version to change to load ram patch err [ 143.010181][ T4381] Bluetooth: Loading patch file failed [ 143.030461][ T4381] ath3k: probe of 4-1:0.0 failed with error -71 [ 143.070786][ T7669] loop1: detected capacity change from 0 to 32768 [ 143.081320][ T4381] usb 4-1: USB disconnect, device number 9 [ 143.148799][ T7669] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1530 (7669) [ 143.229392][ T7669] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 143.273220][ T26] audit: type=1400 audit(1773249864.150:10): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7697 comm="syz.0.1543" [ 143.301224][ T7669] BTRFS info (device loop1): turning off barriers [ 143.337271][ T7669] BTRFS info (device loop1): enabling ssd optimizations [ 143.411230][ T7669] BTRFS info (device loop1): using spread ssd allocation scheme [ 143.424500][ T7669] BTRFS info (device loop1): enabling auto defrag [ 143.477811][ T7669] BTRFS info (device loop1): not using ssd optimizations [ 143.487479][ T7669] BTRFS info (device loop1): not using spread ssd allocation scheme [ 143.557811][ T7669] BTRFS info (device loop1): ignoring data csums [ 143.564830][ T7669] BTRFS info (device loop1): force zlib compression, level 3 [ 143.618143][ T7669] BTRFS info (device loop1): enabling ssd optimizations [ 143.625385][ T7669] BTRFS info (device loop1): using spread ssd allocation scheme [ 143.687449][ T7669] BTRFS info (device loop1): using free space tree [ 143.711826][ T7669] BTRFS info (device loop1): has skinny extents [ 143.768110][ T2316] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.842392][ T7688] loop4: detected capacity change from 0 to 32768 [ 144.167984][ T2316] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 144.187762][ T2316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.200536][ T2316] usb 3-1: config 0 has no interface number 0 [ 144.213169][ T2316] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 144.250929][ T2316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.299519][ T2316] usb 3-1: config 0 descriptor?? [ 144.348632][ T2316] ttusbir 3-1:0.83: cannot find expected altsetting [ 144.654889][ T7753] loop0: detected capacity change from 0 to 1024 [ 144.858201][ T7733] loop3: detected capacity change from 0 to 40427 [ 144.866579][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.897048][ T7753] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.927879][ T7733] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.974565][ T4226] usb 3-1: USB disconnect, device number 5 [ 144.997061][ T7733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.082199][ T7733] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 145.190369][ T7733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.355331][ T7787] netlink: 'syz.1.1570': attribute type 1 has an invalid length. [ 145.428153][ T7733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 145.473299][ T7733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.577102][ T7802] loop1: detected capacity change from 0 to 1024 [ 145.589557][ T7804] netlink: 'syz.0.1578': attribute type 21 has an invalid length. [ 145.696393][ T154] hfsplus: b-tree write err: -5, ino 25 [ 145.731889][ T154] hfsplus: b-tree write err: -5, ino 4 [ 145.787316][ T7813] loop2: detected capacity change from 0 to 64 [ 145.808070][ T154] hfsplus: b-tree write err: -5, ino 2 [ 145.901995][ T7813] attempt to access beyond end of device [ 145.901995][ T7813] loop2: rw=0, want=2592, limit=64 [ 145.973557][ T7813] Buffer I/O error on dev loop2, logical block 1295, async page read [ 146.055987][ T7823] netlink: 'syz.1.1587': attribute type 21 has an invalid length. [ 146.067300][ T7813] attempt to access beyond end of device [ 146.067300][ T7813] loop2: rw=0, want=2592, limit=64 [ 146.102197][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 146.112526][ T7813] Buffer I/O error on dev loop2, logical block 1295, async page read [ 146.160097][ T26] audit: type=1800 audit(1773249867.040:11): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1582" name="file3" dev="loop2" ino=6 res=0 errno=0 [ 146.195298][ T7828] loop0: detected capacity change from 0 to 512 [ 146.236051][ T7833] netlink: 'syz.4.1592': attribute type 21 has an invalid length. [ 146.310050][ T7833] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1592'. [ 146.355708][ T7828] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.377489][ T7841] netlink: 'syz.4.1594': attribute type 3 has an invalid length. [ 146.391014][ T7841] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1594'. [ 146.563737][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 146.592720][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 146.619348][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 146.631173][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 146.652860][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 146.666555][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 146.680232][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 147.446581][ T7918] loop4: detected capacity change from 0 to 256 [ 147.477850][ T7766] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 147.537899][ T4226] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.822187][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 147.837231][ T7938] loop0: detected capacity change from 0 to 256 [ 147.908015][ T7766] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 147.933932][ T7766] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.953174][ T7938] FAT-fs (loop0): Directory bread(block 64) failed [ 147.966632][ T7766] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 147.976364][ T7938] FAT-fs (loop0): Directory bread(block 65) failed [ 147.984064][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.998012][ T7938] FAT-fs (loop0): Directory bread(block 66) failed [ 148.010603][ T7766] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.025969][ T7938] FAT-fs (loop0): Directory bread(block 67) failed [ 148.033113][ T4226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 148.045309][ T7938] FAT-fs (loop0): Directory bread(block 68) failed [ 148.052670][ T4226] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 148.063512][ T7766] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.078135][ T7938] FAT-fs (loop0): Directory bread(block 69) failed [ 148.085846][ T7938] FAT-fs (loop0): Directory bread(block 70) failed [ 148.103403][ T4226] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.117016][ T7766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.131069][ T7938] FAT-fs (loop0): Directory bread(block 71) failed [ 148.143909][ T7938] FAT-fs (loop0): Directory bread(block 72) failed [ 148.156019][ T7938] FAT-fs (loop0): Directory bread(block 73) failed [ 148.179068][ T7766] hub 2-1:1.0: bad descriptor, ignoring hub [ 148.185315][ T7766] hub: probe of 2-1:1.0 failed with error -5 [ 148.208415][ T7766] cdc_wdm 2-1:1.0: skipping garbage [ 148.226244][ T7766] cdc_wdm 2-1:1.0: invalid descriptor buffer length [ 148.257853][ T7766] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 148.305930][ T7938] attempt to access beyond end of device [ 148.305930][ T7938] loop0: rw=2051, want=1256, limit=256 [ 148.342104][ T4226] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 148.356105][ T7222] udevd[7222]: inotify_add_watch(7, /dev/nbd4p4, 10) failed: No such file or directory [ 148.376031][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.384891][ T7962] loop4: detected capacity change from 0 to 256 [ 148.401487][ T4226] usb 4-1: Product: syz [ 148.405964][ T4226] usb 4-1: Manufacturer: syz [ 148.411578][ T4226] usb 4-1: SerialNumber: syz [ 148.419093][ T4226] usb 4-1: config 0 descriptor?? [ 148.461133][ T4226] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 148.501905][ T7962] FAT-fs (loop4): Directory bread(block 64) failed [ 148.510008][ T7962] FAT-fs (loop4): Directory bread(block 65) failed [ 148.517023][ T7962] FAT-fs (loop4): Directory bread(block 66) failed [ 148.524426][ T7962] FAT-fs (loop4): Directory bread(block 67) failed [ 148.548077][ T7766] usb 2-1: USB disconnect, device number 10 [ 148.569569][ T7962] FAT-fs (loop4): Directory bread(block 68) failed [ 148.585612][ T7962] FAT-fs (loop4): Directory bread(block 69) failed [ 148.610196][ T7970] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 148.657922][ T7962] FAT-fs (loop4): Directory bread(block 70) failed [ 148.682646][ T4372] usb 4-1: USB disconnect, device number 10 [ 148.690466][ T7962] FAT-fs (loop4): Directory bread(block 71) failed [ 148.702875][ T7962] FAT-fs (loop4): Directory bread(block 72) failed [ 148.721745][ T7962] FAT-fs (loop4): Directory bread(block 73) failed [ 149.010117][ T7988] loop2: detected capacity change from 0 to 2048 [ 149.069406][ T7993] loop0: detected capacity change from 0 to 1024 [ 149.090660][ T7995] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.133261][ T7988] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 149.134283][ T144] hfsplus: b-tree write err: -5, ino 25 [ 149.197523][ T144] hfsplus: b-tree write err: -5, ino 4 [ 149.206384][ T7988] Remounting filesystem read-only [ 149.233157][ T144] hfsplus: b-tree write err: -5, ino 2 [ 149.956876][ T8032] SET target dimension over the limit! [ 150.370458][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.378136][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.060460][ T8016] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.070033][ T8016] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.080753][ T8016] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.091293][ T8016] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.175500][ T8016] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19971 - 0 [ 151.186265][ T8016] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19971 - 0 [ 151.197217][ T8016] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19971 - 0 [ 151.206775][ T8016] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19971 - 0 [ 151.228113][ T8027] __nla_validate_parse: 15 callbacks suppressed [ 151.228132][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 151.619854][ T8090] netlink: 'syz.3.1714': attribute type 21 has an invalid length. [ 151.638737][ T7767] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.682385][ T8090] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1714'. [ 151.717286][ T8090] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1714'. [ 151.865632][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 151.920534][ T8107] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 151.947744][ T7767] usb 5-1: Using ep0 maxpacket: 8 [ 152.005275][ T8112] cgroup: noprefix used incorrectly [ 152.032662][ T8113] set_capacity_and_notify: 2 callbacks suppressed [ 152.032677][ T8113] loop3: detected capacity change from 0 to 256 [ 152.129806][ T7767] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.238215][ T7767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 152.280472][ T7767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.306674][ T7767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 152.340774][ T8132] loop0: detected capacity change from 0 to 8 [ 152.347523][ T7767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 152.369793][ T7767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 152.391710][ T7767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 152.412715][ T8134] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1735'. [ 152.487232][ T7767] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 152.611361][ T4372] Bluetooth: hci0: command 0x080f tx timeout [ 152.619181][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1740'. [ 152.737999][ T7767] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 152.767897][ T7767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.807722][ T7767] usb 5-1: Product: syz [ 152.812672][ T7767] usb 5-1: Manufacturer: syz [ 152.838149][ T7767] usb 5-1: SerialNumber: syz [ 152.872865][ T7767] usb 5-1: config 0 descriptor?? [ 152.908841][ T8069] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.080997][ T7767] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 153.122849][ T8182] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 153.147505][ T7767] usb 5-1: USB disconnect, device number 10 [ 153.408880][ T7230] udevd[7230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.457812][ T6072] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.710921][ T6072] usb 2-1: Using ep0 maxpacket: 8 [ 153.901214][ T6072] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.989254][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 154.009142][ T8224] loop3: detected capacity change from 0 to 4096 [ 154.016105][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 154.038666][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 154.069529][ T6072] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 154.087730][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 154.098275][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8669, setting to 64 [ 154.131282][ T8224] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 154.174177][ T8224] ntfs3: loop3: Failed to load $Extend. [ 154.228700][ T8210] loop0: detected capacity change from 0 to 32768 [ 154.268046][ T6072] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 154.291793][ T6072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.326612][ T8236] loop4: detected capacity change from 0 to 512 [ 154.332654][ T6072] usb 2-1: Product: syz [ 154.395782][ T6072] usb 2-1: Manufacturer: syz [ 154.423149][ T6072] usb 2-1: SerialNumber: syz [ 154.432195][ T8236] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 154.451371][ T8249] loop2: detected capacity change from 0 to 256 [ 154.494650][ T8210] XFS (loop0): Mounting V5 Filesystem [ 154.506765][ T6072] usb 2-1: config 0 descriptor?? [ 154.515350][ T8236] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.539691][ T8236] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 154.558874][ T8190] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 154.608452][ T8236] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 154.640479][ T8249] FAT-fs (loop2): Directory bread(block 64) failed [ 154.663679][ T8236] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 154.676458][ T8258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.676687][ T8249] FAT-fs (loop2): Directory bread(block 65) failed [ 154.697981][ T8210] XFS (loop0): Ending clean mount [ 154.745633][ T8210] XFS (loop0): Quotacheck needed: Please wait. [ 154.808055][ T8249] FAT-fs (loop2): Directory bread(block 66) failed [ 154.816953][ T8236] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1784: bg 0: block 64: padding at end of block bitmap is not set [ 154.833947][ T8249] FAT-fs (loop2): Directory bread(block 67) failed [ 154.854310][ T6072] usb 2-1: USB disconnect, device number 11 [ 154.872887][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.872939][ T8249] FAT-fs (loop2): Directory bread(block 68) failed [ 154.907375][ T8236] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 154.946381][ T8210] XFS (loop0): Quotacheck: Done. [ 154.946905][ T8236] EXT4-fs (loop4): 1 truncate cleaned up [ 154.962757][ T8236] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.989260][ T8249] FAT-fs (loop2): Directory bread(block 69) failed [ 155.018936][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 155.042231][ T8249] FAT-fs (loop2): Directory bread(block 70) failed [ 155.090796][ T8249] FAT-fs (loop2): Directory bread(block 71) failed [ 155.106095][ T8249] FAT-fs (loop2): Directory bread(block 72) failed [ 155.132261][ T4190] XFS (loop0): Unmounting Filesystem [ 155.138955][ T8249] FAT-fs (loop2): Directory bread(block 73) failed [ 155.311750][ T8266] tmpfs: Bad value for 'mpol' [ 155.428100][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1797'. [ 155.430414][ T8274] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 155.484212][ T8274] CIFS mount error: No usable UNC path provided in device string! [ 155.484212][ T8274] [ 155.512138][ T8274] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 155.527911][ T8276] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.665830][ T8283] libceph: resolve '0.0' (ret=-3): failed [ 155.749116][ T8288] loop3: detected capacity change from 0 to 1024 [ 155.847758][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.898549][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.939383][ T8288] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,nodiscard,user_xattr,,errors=continue. Quota mode: none. [ 155.955741][ T8296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.967958][ T8296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.994481][ T8288] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #11: comm syz.3.1806: directory missing '..' [ 156.103684][ T8312] loop4: detected capacity change from 0 to 8 [ 156.137526][ T8314] netlink: 'syz.1.1815': attribute type 79 has an invalid length. [ 156.180846][ T8318] openvswitch: netlink: Missing valid actions attribute. [ 156.218878][ T8318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.701354][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.718016][ T7767] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 156.761679][ T8350] loop3: detected capacity change from 0 to 1024 [ 156.792498][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.823854][ T8348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.847866][ T8348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.944008][ T8350] hfsplus: can't free extent [ 156.956653][ T8328] loop0: detected capacity change from 0 to 32768 [ 157.007965][ T7767] usb 5-1: Using ep0 maxpacket: 32 [ 157.167902][ T7767] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 157.261038][ T8358] binder: 8357:8358 unknown command 1077961712 [ 157.313392][ T8358] binder: 8357:8358 ioctl c0306201 200000000480 returned -22 [ 157.337759][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 157.375938][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 157.418053][ T7767] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 157.478004][ T7767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.524316][ T8371] usb usb7: usbfs: process 8371 (syz.2.1840) did not claim interface 0 before use [ 157.542935][ T8341] loop1: detected capacity change from 0 to 40427 [ 157.554877][ T7767] usb 5-1: Product: syz [ 157.564626][ T7767] usb 5-1: Manufacturer: syz [ 157.591579][ T8341] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 157.620334][ T7767] usb 5-1: SerialNumber: syz [ 157.624998][ T8341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 157.654594][ T7767] usb 5-1: config 0 descriptor?? [ 157.677436][ T8341] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 157.719525][ T7767] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 157.736764][ T8341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.833508][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'. [ 157.884713][ T8341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 157.907047][ T8341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 157.952602][ T7767] usb 5-1: USB disconnect, device number 11 [ 158.558110][ T7767] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 158.700318][ T8393] loop2: detected capacity change from 0 to 32768 [ 158.817917][ T6072] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.844659][ T8393] XFS (loop2): Mounting V5 Filesystem [ 158.939638][ T8426] loop4: detected capacity change from 0 to 2048 [ 158.967005][ T8426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.991727][ T8393] XFS (loop2): Ending clean mount [ 159.002207][ T7767] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 159.028926][ T7767] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 159.053599][ T8393] XFS (loop2): Quotacheck needed: Please wait. [ 159.071730][ T7767] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 159.118723][ T7767] usb 1-1: config 1 has no interface number 0 [ 159.130572][ T7767] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 159.165550][ T7767] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 159.196965][ T7767] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 159.238348][ T6072] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.251682][ T7767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.365061][ T7767] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 159.367904][ T6072] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 159.450857][ T6072] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 159.465763][ T6072] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 159.492004][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.506128][ T6072] usb 4-1: config 129 has no interface number 0 [ 159.518303][ T6072] usb 4-1: config 129 has no interface number 1 [ 159.533296][ T6072] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 159.557456][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.576395][ T6072] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 159.604732][ T6072] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 159.605018][ T8441] usb usb7: usbfs: process 8441 (syz.4.1871) did not claim interface 0 before use [ 159.635924][ T6072] usb 4-1: config 129 interface 135 has no altsetting 0 [ 159.653128][ T7767] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 159.684062][ T6072] usb 4-1: config 129 interface 5 has no altsetting 0 [ 159.684317][ T7767] snd_usb_pod 1-1:1.1: invalid control EP [ 159.719907][ T7767] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 159.731286][ T8393] XFS (loop2): Quotacheck: Done. [ 159.776850][ T7767] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 159.783171][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 159.828404][ T7767] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 159.909258][ T7767] usb 1-1: USB disconnect, device number 6 [ 159.977248][ T4195] XFS (loop2): Unmounting Filesystem [ 159.977946][ T6072] usb 4-1: string descriptor 0 read error: -22 [ 160.057177][ T8456] libceph: resolve '0.0' (ret=-3): failed [ 160.057204][ T6072] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 160.113817][ T6072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.219397][ T6072] usb 4-1: MIDIStreaming interface descriptor not found [ 160.447212][ T6072] usb 4-1: USB disconnect, device number 11 [ 160.553231][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.670250][ T8473] dlm: Unknown command passed to DLM device : 132 [ 160.670250][ T8473] [ 160.893567][ T4315] udevd[4315]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.931365][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.948561][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.969880][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.079835][ T8481] loop2: detected capacity change from 0 to 2048 [ 161.185107][ T8481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.247762][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 161.378310][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.434158][ T4229] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 161.452449][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.494903][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.550362][ T4229] usb 5-1: config 0 descriptor?? [ 161.862381][ T7767] usb 5-1: USB disconnect, device number 12 [ 162.267790][ T1111] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.275168][ T8538] loop2: detected capacity change from 0 to 4096 [ 162.308855][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.488851][ T8538] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 162.558782][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 162.713064][ T1111] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 162.776095][ T1111] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 162.813638][ T8554] i2c i2c-0: Invalid block write size 33 [ 162.827893][ T1111] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 162.865737][ T1111] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.108133][ T1111] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 163.127668][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.161223][ T1111] usb 4-1: Product: syz [ 163.166601][ T1111] usb 4-1: Manufacturer: syz [ 163.199776][ T1111] usb 4-1: SerialNumber: syz [ 163.215258][ T1111] usb 4-1: config 0 descriptor?? [ 163.318906][ T8546] loop1: detected capacity change from 0 to 32768 [ 163.422329][ T8586] loop0: detected capacity change from 0 to 736 [ 163.460283][ T8546] XFS (loop1): Mounting V5 Filesystem [ 163.634037][ T8546] XFS (loop1): Ending clean mount [ 163.666694][ T8546] XFS (loop1): Quotacheck needed: Please wait. [ 163.693663][ T1111] usb 4-1: USB disconnect, device number 12 [ 163.750397][ T8600] loop4: detected capacity change from 0 to 2048 [ 163.766813][ T8602] netlink: 'syz.2.1936': attribute type 4 has an invalid length. [ 163.803902][ T8546] XFS (loop1): Quotacheck: Done. [ 163.852803][ T4185] XFS (loop1): Unmounting Filesystem [ 163.975833][ T8607] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.012579][ T8600] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 164.074449][ T8600] Remounting filesystem read-only [ 164.107545][ T8600] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 164.136364][ T8600] NILFS (loop4): error -5 truncating bmap (ino=16) [ 164.237149][ T4196] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 164.412162][ T8623] loop4: detected capacity change from 0 to 512 [ 164.521278][ T8623] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.1943: corrupted in-inode xattr [ 164.550704][ T8623] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1943: couldn't read orphan inode 15 (err -117) [ 164.639298][ T8623] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 164.665502][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'. [ 164.703811][ T8623] EXT4-fs error (device loop4): ext4_xattr_set_entry:1613: inode #2: comm syz.4.1943: corrupted xattr entries [ 165.034019][ T8656] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 165.071870][ T8656] overlayfs: bad mount option "redirect_dir=nofollow\" [ 165.457268][ T8670] loop0: detected capacity change from 0 to 128 [ 165.505705][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 165.591329][ T8670] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.644761][ T8650] loop1: detected capacity change from 0 to 32768 [ 165.731866][ T8655] loop4: detected capacity change from 0 to 32768 [ 165.806104][ T8650] JBD2: Ignoring recovery information on journal [ 165.978370][ T8655] XFS (loop4): Mounting V5 Filesystem [ 165.991296][ T8650] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 166.100124][ T8655] XFS (loop4): Ending clean mount [ 166.120444][ T8655] XFS (loop4): Quotacheck needed: Please wait. [ 166.225276][ T8650] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 166.225364][ T8650] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 166.347737][ T8655] XFS (loop4): Quotacheck: Done. [ 166.397746][ T8650] OCFS2: File system is now read-only. [ 166.421687][ T8650] (syz.1.1958,8650,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 166.457034][ T8650] (syz.1.1958,8650,1):ocfs2_mknod:334 ERROR: status = -117 [ 166.473805][ T4196] XFS (loop4): Unmounting Filesystem [ 166.489116][ T8650] (syz.1.1958,8650,1):ocfs2_mknod:502 ERROR: status = -117 [ 166.545471][ T8650] (syz.1.1958,8650,1):ocfs2_mkdir:659 ERROR: status = -117 [ 166.678293][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 167.203440][ T8708] loop3: detected capacity change from 0 to 32768 [ 167.232236][ T8731] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.258087][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.276297][ T8731] bond0: (slave lo): Error: Device can not be enslaved while up [ 167.289077][ T8712] loop2: detected capacity change from 0 to 32768 [ 167.347052][ T8712] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1984 (8712) [ 167.369105][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.401324][ T8708] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 167.401324][ T8708] [ 167.468539][ T6072] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 167.494239][ T8708] jfs_rename: dtInsert returned -EIO [ 167.506210][ T8712] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 167.567962][ T8712] BTRFS info (device loop2): force zlib compression, level 3 [ 167.597716][ T8712] BTRFS info (device loop2): turning on flush-on-commit [ 167.671429][ T8712] BTRFS info (device loop2): max_inline at 4096 [ 167.724848][ T8712] BTRFS info (device loop2): using free space tree [ 167.731802][ T8743] loop0: detected capacity change from 0 to 2048 [ 167.747995][ T8712] BTRFS info (device loop2): has skinny extents [ 167.820593][ T8743] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 167.858091][ T6072] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 167.950726][ T8743] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000080000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,max_batch_time=0x000000000000000b,max_batch_time=0x0000000000004050,,errors=continue. Quota mode: writeback. [ 167.961480][ T6072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.003010][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.074041][ T8712] BTRFS info (device loop2): enabling ssd optimizations [ 168.079770][ T8743] EXT4-fs error (device loop0): empty_inline_dir:1873: inode #12: block 5: comm syz.0.1999: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 168.108318][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.200681][ T8743] EXT4-fs warning (device loop0): empty_inline_dir:1880: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 168.401612][ T8780] loop3: detected capacity change from 0 to 256 [ 168.407801][ T6072] usb 5-1: config 0 descriptor?? [ 168.518149][ T6072] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 168.583582][ T8780] FAT-fs (loop3): Directory bread(block 64) failed [ 168.606512][ T8787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.645861][ T8780] FAT-fs (loop3): Directory bread(block 65) failed [ 168.697774][ T8780] FAT-fs (loop3): Directory bread(block 66) failed [ 168.776608][ T8780] FAT-fs (loop3): Directory bread(block 67) failed [ 168.855727][ T8780] FAT-fs (loop3): Directory bread(block 68) failed [ 168.877552][ T8780] FAT-fs (loop3): Directory bread(block 69) failed [ 168.912360][ T8780] FAT-fs (loop3): Directory bread(block 70) failed [ 168.948102][ T6072] gp8psk: usb in 128 operation failed. [ 168.986788][ T6072] gp8psk: usb in 137 operation failed. [ 168.992774][ T8780] FAT-fs (loop3): Directory bread(block 71) failed [ 168.994778][ T8797] xt_TCPMSS: Only works on TCP SYN packets [ 169.008553][ T8780] FAT-fs (loop3): Directory bread(block 72) failed [ 169.022626][ T6072] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 169.046624][ T8780] FAT-fs (loop3): Directory bread(block 73) failed [ 169.066390][ T6072] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 169.090415][ T6072] usb 5-1: USB disconnect, device number 13 [ 169.537307][ T8814] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2023'. [ 169.720954][ T8826] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 169.935720][ T8840] loop3: detected capacity change from 0 to 2048 [ 169.978725][ T8846] netlink: 'syz.0.2038': attribute type 4 has an invalid length. [ 170.036053][ T8846] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2038'. [ 170.084756][ T8840] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.707746][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.967975][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 171.087926][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.148553][ T1108] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.409850][ T1108] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 171.473989][ T8921] loop3: detected capacity change from 0 to 256 [ 171.477834][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.540116][ T1108] usb 1-1: Product: syz [ 171.561494][ T1108] usb 1-1: Manufacturer: syz [ 171.568675][ T1108] usb 1-1: SerialNumber: syz [ 171.593246][ T1108] usb 1-1: config 0 descriptor?? [ 171.629525][ T8928] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 171.859994][ T8938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.885182][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.937960][ T1108] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 171.969233][ T1108] f0 e4 3d a7 d3 60 4f fe [ 172.000821][ T1108] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 172.085390][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2088'. [ 172.186736][ T7766] usb 1-1: USB disconnect, device number 7 [ 172.209021][ T8953] loop1: detected capacity change from 0 to 1024 [ 172.247090][ T8956] sctp: [Deprecated]: syz.3.2092 (pid 8956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.247090][ T8956] Use struct sctp_sack_info instead [ 172.326506][ T8953] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 172.426092][ T8966] netlink: 'syz.3.2096': attribute type 10 has an invalid length. [ 172.433402][ T8967] loop4: detected capacity change from 0 to 8 [ 172.440714][ T8953] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 172.472675][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2096'. [ 172.500318][ T8967] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 172.519953][ T8966] device dummy0 entered promiscuous mode [ 172.544346][ T7222] udevd[7222]: incorrect cramfs checksum on /dev/loop4 [ 172.558320][ T8966] bridge0: port 3(dummy0) entered blocking state [ 172.582426][ T8967] cramfs: Error -5 while decompressing! [ 172.587924][ T8966] bridge0: port 3(dummy0) entered disabled state [ 172.618182][ T8483] udevd[8483]: incorrect cramfs checksum on /dev/loop4 [ 172.648603][ T8967] cramfs: ffffffff96407088(18)->ffff88805d631000(4096) [ 172.654771][ T8966] bridge0: port 3(dummy0) entered blocking state [ 172.670217][ T8967] cramfs: Error -5 while decompressing! [ 172.670228][ T8966] bridge0: port 3(dummy0) entered forwarding state [ 172.700600][ T8967] cramfs: ffffffff96407088(18)->ffff88805d631000(4096) [ 172.740361][ T26] audit: type=1800 audit(1773249893.620:12): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2097" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 172.771336][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.840154][ T8483] udevd[8483]: incorrect cramfs checksum on /dev/loop4 [ 173.025226][ T8990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2109'. [ 173.141677][ T8999] netlink: 'syz.1.2114': attribute type 10 has an invalid length. [ 173.207801][ T8999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2114'. [ 173.294937][ T8999] device ipvlan1 entered promiscuous mode [ 173.360100][ T8999] bridge0: port 3(ipvlan1) entered blocking state [ 173.438998][ T8999] bridge0: port 3(ipvlan1) entered disabled state [ 173.551427][ T8999] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 173.724397][ T9028] loop3: detected capacity change from 0 to 512 [ 173.745915][ T4260] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.821219][ T9028] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2129: inode has both inline data and extents flags [ 173.846889][ T9028] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2129: couldn't read orphan inode 15 (err -117) [ 173.862534][ T9028] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.158855][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 174.178129][ T4260] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.268213][ T4260] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 174.288004][ T7767] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.326360][ T4260] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 174.401991][ T4260] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 174.453813][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 174.466603][ T4260] usb 1-1: config 129 has no interface number 0 [ 174.487750][ T4260] usb 1-1: config 129 has no interface number 1 [ 174.524631][ T4260] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.646166][ T4260] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 174.691910][ T4260] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 174.699321][ T9083] loop3: detected capacity change from 0 to 1024 [ 174.752588][ T4260] usb 1-1: config 129 interface 135 has no altsetting 0 [ 174.795040][ T4260] usb 1-1: config 129 interface 5 has no altsetting 0 [ 174.848689][ T7767] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.894548][ T7767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.926247][ T7767] usb 5-1: config 0 descriptor?? [ 174.948592][ T9] hfsplus: b-tree write err: -5, ino 25 [ 174.965846][ T9] hfsplus: b-tree write err: -5, ino 4 [ 174.985161][ T9] hfsplus: b-tree write err: -5, ino 2 [ 174.997651][ T7767] cp210x 5-1:0.0: cp210x converter detected [ 175.068316][ T4260] usb 1-1: string descriptor 0 read error: -22 [ 175.108260][ T4260] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 175.130804][ T9094] loop3: detected capacity change from 0 to 1024 [ 175.147577][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.289561][ T4260] usb 1-1: MIDIStreaming interface descriptor not found [ 175.408750][ T144] hfsplus: b-tree write err: -5, ino 25 [ 175.438414][ T7767] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 175.497876][ T144] hfsplus: b-tree write err: -5, ino 4 [ 175.522011][ T9099] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2162'. [ 175.542437][ T7767] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 175.547857][ T144] hfsplus: b-tree write err: -5, ino 2 [ 175.575714][ T7767] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 175.618617][ T7767] usb 5-1: cp210x converter now attached to ttyUSB0 [ 175.621700][ T1108] usb 1-1: USB disconnect, device number 8 [ 175.642682][ T7767] usb 5-1: USB disconnect, device number 14 [ 175.851629][ T7767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.873300][ T7767] cp210x 5-1:0.0: device disconnected [ 176.032567][ T9093] loop2: detected capacity change from 0 to 40427 [ 176.069788][ T9093] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 176.107220][ T9093] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 176.115224][ T9110] netlink: 'syz.1.2167': attribute type 10 has an invalid length. [ 176.155142][ T9093] F2FS-fs (loop2): invalid crc value [ 176.209481][ T9093] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.292435][ T9123] loop3: detected capacity change from 0 to 128 [ 176.332375][ T9093] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 176.356316][ T9123] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 176.379604][ T9093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 176.407981][ T9123] qnx6: superblock #1 checksum error [ 176.499883][ T9131] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 176.511184][ T9093] attempt to access beyond end of device [ 176.511184][ T9093] loop2: rw=2049, want=45104, limit=40427 [ 176.977942][ T9166] loop4: detected capacity change from 0 to 256 [ 177.014100][ T9166] exfat: Deprecated parameter 'namecase' [ 177.029396][ T9166] exfat: Deprecated parameter 'namecase' [ 177.054924][ T9166] exFAT-fs (loop4): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 177.101448][ T9173] overlayfs: missing 'workdir' [ 177.113289][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2196'. [ 177.267885][ T4260] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 177.500444][ T9202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2210'. [ 177.607885][ T9210] device bridge_slave_1 left promiscuous mode [ 177.623825][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.627993][ T4260] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 177.653645][ T4260] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.670089][ T4260] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.681904][ T4260] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 177.708162][ T9210] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 177.808784][ T4260] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.827701][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.832372][ T9220] loop2: detected capacity change from 0 to 1024 [ 177.835986][ T4260] usb 4-1: SerialNumber: syz [ 177.995581][ T9211] loop0: detected capacity change from 0 to 32768 [ 178.079590][ T9228] loop4: detected capacity change from 0 to 512 [ 178.086028][ T4260] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 178.114246][ T9211] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2213 (9211) [ 178.144052][ T9220] hfsplus: keylen 65060 too large [ 178.180900][ T9231] comedi comedi0: Cannot bond this driver to itself! [ 178.239509][ T9228] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 178.249455][ T9228] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 178.259514][ T9228] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #13: comm syz.4.2223: iget: bad i_size value: 12154757448730 [ 178.277051][ T9228] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2223: couldn't read orphan inode 13 (err -117) [ 178.300462][ T9234] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2225'. [ 178.310005][ T9228] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 178.330351][ T9211] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 178.341189][ T9211] BTRFS info (device loop0): force zlib compression, level 3 [ 178.355830][ T7759] usb 4-1: USB disconnect, device number 13 [ 178.358160][ T9211] BTRFS info (device loop0): turning on flush-on-commit [ 178.377809][ T9211] BTRFS info (device loop0): max_inline at 4096 [ 178.396055][ T9211] BTRFS info (device loop0): using free space tree [ 178.414585][ T9211] BTRFS info (device loop0): has skinny extents [ 178.522357][ T9244] loop2: detected capacity change from 0 to 1024 [ 178.690384][ T4266] hfsplus: b-tree write err: -5, ino 25 [ 178.696331][ T4266] hfsplus: b-tree write err: -5, ino 4 [ 178.724337][ T4266] hfsplus: b-tree write err: -5, ino 2 [ 178.743578][ T9211] BTRFS info (device loop0): enabling ssd optimizations [ 178.782451][ T9273] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.861613][ T9265] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 178.967918][ T9277] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2237'. [ 179.023858][ T9279] netlink: 'syz.3.2240': attribute type 1 has an invalid length. [ 179.025360][ T9277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2237'. [ 179.085059][ T9277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2237'. [ 179.098698][ T8483] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (8483) [ 179.105838][ T9277] netlink: 'syz.4.2237': attribute type 8 has an invalid length. [ 179.120389][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 179.220230][ T9285] set_capacity_and_notify: 1 callbacks suppressed [ 179.220386][ T9285] loop1: detected capacity change from 0 to 512 [ 179.376506][ T9285] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 179.463757][ T9300] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 179.467515][ T9285] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,bsddf,discard,,errors=continue. Quota mode: writeback. [ 179.511692][ T9285] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.523844][ T9302] loop4: detected capacity change from 0 to 2048 [ 179.587125][ T9302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.680982][ T9285] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 179.744010][ T9285] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 179.768277][ T9312] bridge0: port 3(dummy0) entered disabled state [ 179.781747][ T9285] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.2251: Failed to acquire dquot type 1 [ 179.781929][ T9312] device bridge_slave_1 left promiscuous mode [ 179.801859][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.823839][ T9312] device bridge_slave_0 left promiscuous mode [ 179.860061][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.062072][ T9314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.517790][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 180.581104][ T9320] loop1: detected capacity change from 0 to 32768 [ 180.658283][ T9357] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.2272'. [ 180.774397][ T9320] XFS (loop1): Mounting V5 Filesystem [ 180.780638][ T9373] netlink: 'syz.3.2277': attribute type 1 has an invalid length. [ 180.909649][ T9386] cgroup: No subsys list or none specified [ 180.986331][ T9320] XFS (loop1): Ending clean mount [ 180.993567][ T9390] (syz.4.2284,9390,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 180.996072][ T9320] XFS (loop1): Quotacheck needed: Please wait. [ 181.023211][ T9390] (syz.4.2284,9390,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 181.077890][ T9293] Bluetooth: hci1: command 0x0406 tx timeout [ 181.084270][ T6482] Bluetooth: hci0: command 0x0406 tx timeout [ 181.106419][ T9293] Bluetooth: hci3: command 0x0406 tx timeout [ 181.120457][ T6482] Bluetooth: hci4: command 0x0406 tx timeout [ 181.136664][ T9320] XFS (loop1): Quotacheck: Done. [ 181.167671][ T6482] Bluetooth: hci2: command 0x0406 tx timeout [ 181.351132][ T4185] XFS (loop1): Unmounting Filesystem [ 181.538928][ T9418] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.547314][ T9418] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.818846][ T9398] loop4: detected capacity change from 0 to 32768 [ 181.890408][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 182.036866][ T9441] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 182.072933][ T9445] netlink: 'syz.4.2307': attribute type 10 has an invalid length. [ 182.141179][ T9444] XFS (nullb0): Invalid superblock magic number [ 182.222298][ T9415] loop0: detected capacity change from 0 to 32768 [ 182.653994][ T9458] loop1: detected capacity change from 0 to 4096 [ 182.718480][ T9458] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 182.810272][ T9458] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 183.194040][ T9491] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 183.486775][ T9519] loop4: detected capacity change from 0 to 1024 [ 183.521684][ T9516] loop0: detected capacity change from 0 to 2048 [ 183.537264][ T9522] netlink: 'syz.2.2342': attribute type 5 has an invalid length. [ 183.565833][ T9519] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 183.569820][ T9516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.647426][ T9519] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,usrquota,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 183.677361][ T9519] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz.4.2341: directory missing '..' [ 183.793541][ T26] audit: type=1800 audit(1773249904.670:13): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2343" name="/newroot/461/bus" dev="tmpfs" ino=2362 res=0 errno=0 [ 183.998651][ T9547] gfs2: not a GFS2 filesystem [ 184.006395][ T9545] loop1: detected capacity change from 0 to 1024 [ 184.010206][ T9551] netlink: 'syz.0.2352': attribute type 28 has an invalid length. [ 184.067414][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 184.108822][ T9558] netlink: 'syz.2.2358': attribute type 11 has an invalid length. [ 184.120838][ T9558] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2358'. [ 184.163198][ T9545] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.2350: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.244495][ T9571] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2362'. [ 184.264784][ T9545] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 184.335569][ T9545] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.2350: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.410809][ T9545] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 184.420526][ T9585] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2369'. [ 184.446679][ T9545] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.2350: Failed to acquire dquot type 0 [ 184.454308][ T9585] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2369'. [ 184.480171][ T9545] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 184.538477][ T9545] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.2350: mark_inode_dirty error [ 184.612055][ T9545] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 184.640129][ T9545] EXT4-fs (loop1): 1 orphan inode deleted [ 184.646538][ T9545] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 184.671033][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.680359][ T4265] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.725815][ T4265] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 184.747800][ T4265] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:6: Failed to release dquot type 0 [ 184.766472][ T9610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 184.809733][ T9545] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.2350: Invalid inode table block 1 in block_group 0 [ 184.841614][ T9613] netlink: 'syz.4.2384': attribute type 1 has an invalid length. [ 184.873049][ T9613] netlink: 'syz.4.2384': attribute type 3 has an invalid length. [ 184.879423][ T9545] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 184.891833][ T9613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2384'. [ 184.900869][ T9617] overlayfs: unrecognized mount option "fsname=\(([\," or missing value [ 184.946657][ T9545] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #3: comm syz.1.2350: mark_inode_dirty error [ 185.016340][ T9625] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2390'. [ 185.187552][ T9636] netlink: 'syz.3.2394': attribute type 21 has an invalid length. [ 185.530100][ T9653] netlink: 'syz.1.2404': attribute type 3 has an invalid length. [ 185.690099][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'. [ 185.774542][ T9663] loop4: detected capacity change from 0 to 4096 [ 185.835138][ T9663] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 185.858968][ T9663] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 185.892467][ T9631] loop0: detected capacity change from 0 to 40427 [ 185.919949][ T9663] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 185.970725][ T9663] ntfs: volume version 3.1. [ 185.983732][ T9663] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 186.015077][ T9663] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 186.045496][ T9631] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 186.053844][ T9631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 186.069699][ T9663] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 186.082528][ T9631] F2FS-fs (loop0): invalid crc value [ 186.109618][ T9686] comedi comedi3: dac02: I/O port conflict (0xe,8) [ 186.125834][ T9663] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 186.143322][ T9631] F2FS-fs (loop0): Found nat_bits in checkpoint [ 186.240834][ T9663] ntfs: (device loop4): ntfs_nlstoucs(): Name using character set utf8 contains characters that cannot be converted to Unicode. [ 186.310931][ T9631] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 186.325613][ T9631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 186.347987][ T9663] ntfs: (device loop4): ntfs_lookup(): Failed to convert name to Unicode. [ 186.450379][ T9631] attempt to access beyond end of device [ 186.450379][ T9631] loop0: rw=2049, want=45104, limit=40427 [ 186.535425][ T9679] loop3: detected capacity change from 0 to 32768 [ 186.596574][ T9699] ax25_connect(): syz.2.2427 uses autobind, please contact jreuter@yaina.de [ 187.238136][ T9725] delete_channel: no stack [ 187.348218][ T9734] loop3: detected capacity change from 0 to 8 [ 187.371499][ T9734] cramfs: bad data blocksize 3222268820 [ 187.397814][ T9734] cramfs: Error -3 while decompressing! [ 187.403580][ T9734] cramfs: ffffffff964030dc(16)->ffff88805c406000(4096) [ 187.437110][ T9734] cramfs: bad data blocksize 4165569313 [ 187.461183][ T9734] cramfs: bad data blocksize 3825676623 [ 187.482239][ T9734] cramfs: bad data blocksize 4294480561 [ 187.506241][ T9734] cramfs: bad data blocksize 1076736 [ 187.521230][ T9734] cramfs: bad data blocksize 485460736 [ 187.538221][ T9734] cramfs: bad data blocksize 3808479469 [ 187.563747][ T9734] cramfs: bad data blocksize 3222268820 [ 187.816589][ T9766] device bridge_slave_1 left promiscuous mode [ 187.816727][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.820063][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.062393][ T9777] loop1: detected capacity change from 0 to 128 [ 188.092234][ T9732] loop4: detected capacity change from 0 to 32768 [ 188.535282][ T9802] loop0: detected capacity change from 0 to 4096 [ 188.614237][ T9802] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 188.690287][ T9802] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 188.723903][ T9802] ntfs3: loop0: Inode r=b is not in use! [ 188.746150][ T9802] ntfs3: loop0: Failed to load $Extend. [ 189.288370][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.350654][ T9866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2504'. [ 189.451246][ T9873] loop3: detected capacity change from 0 to 512 [ 189.519616][ T9873] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 189.610672][ T9873] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2510: bg 0: block 104: invalid block bitmap [ 189.649143][ T1108] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.679290][ T1108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.683763][ T9873] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 189.703096][ T9873] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2510: invalid indirect mapped block 1 (level 1) [ 189.725306][ T9873] EXT4-fs (loop3): 1 truncate cleaned up [ 189.731479][ T9873] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.752805][ T9892] device bridge_slave_1 left promiscuous mode [ 189.770305][ T1108] usb 3-1: config 0 has no interface number 0 [ 189.796739][ T1108] usb 3-1: config 0 interface 1 has no altsetting 0 [ 189.803599][ T9892] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.826274][ T1108] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.844670][ T9896] loop1: detected capacity change from 0 to 8 [ 189.850057][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.889572][ T9892] device bridge_slave_0 left promiscuous mode [ 189.891210][ T1108] usb 3-1: config 0 descriptor?? [ 189.902191][ T9892] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.254797][ T4260] usb 3-1: USB disconnect, device number 6 [ 190.464219][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2540'. [ 190.486066][ T9938] xt_l2tp: wrong L2TP version: 0 [ 190.571799][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2543'. [ 190.619101][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2543'. [ 190.635794][ T9948] loop4: detected capacity change from 0 to 512 [ 190.706749][ T9948] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.756209][ T9948] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.2546: Directory block failed checksum [ 190.794387][ T9958] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2550'. [ 190.844575][ T9958] unsupported nla_type 65024 [ 190.895458][ T9965] trusted_key: encrypted_key: master key parameter '' is invalid [ 190.952423][ T9966] usb usb8: usbfs: process 9966 (syz.2.2553) did not claim interface 32 before use [ 191.029709][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2558'. [ 191.118323][ T9983] QAT: failed to copy from user cfg_data. [ 191.208960][ T9990] loop0: detected capacity change from 0 to 8 [ 191.292997][ T9990] SQUASHFS error: Failed to read block 0x2d7: -5 [ 191.320414][ T9991] loop4: detected capacity change from 0 to 4096 [ 191.341240][ T9990] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 191.374259][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 191.374274][ T26] audit: type=1800 audit(1773249912.250:16): pid=9990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2565" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 191.402519][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.428942][ T9991] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 191.496732][ T9991] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 191.572571][ T9991] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 191.589455][T10014] loop3: detected capacity change from 0 to 128 [ 191.619002][ T9991] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 191.699166][T10014] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.708300][ T9991] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 191.717329][ T9991] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 191.746489][T10014] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 191.799736][ T9991] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 191.801214][T10014] ext4 filesystem being mounted at /449/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.812123][ T9991] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 191.840087][T10025] validate_nla: 1 callbacks suppressed [ 191.840105][T10025] netlink: 'syz.1.2583': attribute type 3 has an invalid length. [ 191.844343][ T9991] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 191.903911][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 191.920245][T10025] netlink: 'syz.1.2583': attribute type 1 has an invalid length. [ 191.938180][ T9991] ntfs: volume version 3.1. [ 192.025149][T10014] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.085535][T10014] EXT4-fs (loop3): re-mounted. Opts: test_dummy_encryption=v1. Quota mode: none. [ 192.446742][T10054] Cannot find set identified by id 4 to match [ 192.567111][T10063] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 192.576710][T10063] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2602'. [ 192.739454][T10075] loop0: detected capacity change from 0 to 2048 [ 192.802371][T10083] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 192.809716][T10075] UDF-fs: bad mount option "shortan$uid½forget" or missing value [ 192.917768][ T1108] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.940376][T10075] cifs: Unknown parameter 'anchor' [ 193.149573][T10096] device bond2 entered promiscuous mode [ 193.149803][T10096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.177793][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 193.298084][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.298129][ T1108] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.298150][ T1108] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.298174][ T1108] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.313698][T10110] trusted_key: encrypted_key: master key parameter is missing [ 193.424741][T10120] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2629'. [ 193.458001][ T1108] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 193.545060][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.555661][ T1108] usb 5-1: Product: syz [ 193.560695][ T1108] usb 5-1: Manufacturer: syz [ 193.595511][ T1108] usb 5-1: SerialNumber: syz [ 193.622864][ T1108] usb 5-1: config 0 descriptor?? [ 193.696316][ T1108] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 193.909139][ T1108] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 193.916916][ T1108] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 193.957075][ T1108] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 194.174819][ T9293] usb 5-1: USB disconnect, device number 15 [ 194.249596][T10186] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2659'. [ 194.297527][T10188] capability: warning: `syz.3.2661' uses 32-bit capabilities (legacy support in use) [ 194.362212][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369475][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.533065][T10202] loop2: detected capacity change from 0 to 2048 [ 194.698892][T10202] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 194.723936][T10202] UDF-fs: Scanning with blocksize 512 failed [ 194.753504][T10202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.804243][T10226] IPv6: NLM_F_REPLACE set, but no existing node found! [ 195.090776][T10251] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 195.237786][ T1108] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 195.417387][T10264] loop0: detected capacity change from 0 to 4096 [ 195.487736][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 195.494329][T10264] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 195.514988][T10282] loop1: detected capacity change from 0 to 512 [ 195.540185][T10264] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only [ 195.583361][T10264] ntfs3: loop0: failed to read volume at offset 0x201800 [ 195.607835][ T1108] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 195.625582][ T1108] usb 4-1: config 0 has no interface number 0 [ 195.658129][T10264] ntfs3: loop0: failed to read volume at offset 0x201800 [ 195.675591][T10282] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.689741][T10264] ntfs3: loop0: failed to read volume at offset 0x201800 [ 195.697127][T10264] ntfs3: loop0: failed to read volume at offset 0x201800 [ 195.701777][T10282] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.730398][T10264] ntfs3: loop0: failed to read volume at offset 0x202800 [ 195.757492][T10264] ntfs3: loop0: failed to read volume at offset 0x203800 [ 195.797132][T10264] ntfs3: loop0: failed to read volume at offset 0x205800 [ 195.843693][T10264] ntfs3: loop0: failed to read volume at offset 0x209800 [ 195.858105][ T1108] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 195.867563][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.918120][ T1108] usb 4-1: Product: syz [ 195.923622][ T1108] usb 4-1: Manufacturer: syz [ 195.937835][ T1108] usb 4-1: SerialNumber: syz [ 195.981620][ T1108] usb 4-1: config 0 descriptor?? [ 196.018480][ T1108] hub 4-1:0.132: bad descriptor, ignoring hub [ 196.024784][ T1108] hub: probe of 4-1:0.132 failed with error -5 [ 196.064970][ T1108] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input16 [ 196.145997][T10307] loop1: detected capacity change from 0 to 2048 [ 196.301150][T10307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.539975][T10334] netlink: 'syz.4.2729': attribute type 1 has an invalid length. [ 196.598043][T10334] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2729'. [ 196.685926][T10338] overlayfs: missing 'lowerdir' [ 196.770766][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2733'. [ 196.951763][T10354] netlink: 'syz.1.2739': attribute type 13 has an invalid length. [ 196.952978][T10330] loop2: detected capacity change from 0 to 32768 [ 197.000037][T10356] netlink: 'syz.1.2740': attribute type 10 has an invalid length. [ 197.012371][T10330] (syz.2.2728,10330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 197.035287][T10330] (syz.2.2728,10330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 197.037087][T10356] team0: Device wg1 is of different type [ 197.051525][ T9294] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.106905][T10356] syz.1.2740 (10356) used greatest stack depth: 19344 bytes left [ 197.110424][T10330] JBD2: Ignoring recovery information on journal [ 197.144480][T10359] loop1: detected capacity change from 0 to 512 [ 197.190125][T10330] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 197.220977][T10330] (syz.2.2728,10330,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 197.246888][T10359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.266380][T10359] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.270736][T10366] x_tables: duplicate entry at hook 1 [ 197.351009][ T9294] usb 5-1: Using ep0 maxpacket: 16 [ 197.386446][T10330] (syz.2.2728,10330,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 197.452144][T10370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.538441][ T9293] usb 4-1: USB disconnect, device number 14 [ 197.586682][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 197.678027][ T9294] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 197.700594][ T9294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.741404][ T9294] usb 5-1: Product: syz [ 197.743837][T10384] loop3: detected capacity change from 0 to 1024 [ 197.746037][ T9294] usb 5-1: Manufacturer: syz [ 197.788208][ T9294] usb 5-1: SerialNumber: syz [ 197.802071][ T9294] usb 5-1: config 0 descriptor?? [ 197.869648][ T9294] usb-storage 5-1:0.0: USB Mass Storage device detected [ 197.920661][ T9294] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 198.027499][ T507] hfsplus: b-tree write err: -5, ino 25 [ 198.045798][ T507] hfsplus: b-tree write err: -5, ino 4 [ 198.054227][ T507] hfsplus: b-tree write err: -5, ino 2 [ 198.388295][ T7754] usb 5-1: USB disconnect, device number 16 [ 198.637848][ T4381] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 198.735688][T10420] loop1: detected capacity change from 0 to 32768 [ 198.776198][T10447] xt_TCPMSS: Only works on TCP SYN packets [ 198.794114][T10420] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 198.947700][ T1108] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.967045][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 199.000871][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'. [ 199.038070][ T4381] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.137965][ T4381] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.177695][ T4381] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 199.187011][ T4381] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 37, changing to 7 [ 199.198673][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 199.259747][T10475] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2793'. [ 199.318072][ T1108] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 199.346866][ T1108] usb 3-1: config 0 has no interface number 0 [ 199.371917][ T1108] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 199.386226][T10486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.417958][ T4381] usb 4-1: New USB device found, idVendor=0582, idProduct=8782, bcdDevice= 0.54 [ 199.428054][ T1108] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 199.448367][ T4381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.471140][ T1108] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 199.493177][ T4381] usb 4-1: Product: syz [ 199.497521][ T4381] usb 4-1: Manufacturer: syz [ 199.518276][ T4381] usb 4-1: SerialNumber: syz [ 199.528891][ T1108] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 199.534147][T10495] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2803'. [ 199.551736][ T1108] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 199.565972][ T1108] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.661130][T10498] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 199.707353][T10498] team0: Device wg1 is of different type [ 199.747968][ T1108] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 199.779464][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.783986][T10507] kAFS: unable to lookup cell '(,c¾Ì' [ 199.808703][ T1108] usb 3-1: Product: syz [ 199.813170][ T1108] usb 3-1: Manufacturer: syz [ 199.845368][ T1108] usb 3-1: SerialNumber: syz [ 199.873436][ T1108] usb 3-1: config 0 descriptor?? [ 199.913968][T10438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.926483][T10516] openvswitch: netlink: Actions may not be safe on all matching packets [ 199.928325][T10438] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.943866][ T4381] usb 4-1: Can't get UAC3 power state for id 11 [ 199.948209][T10515] loop1: detected capacity change from 0 to 1024 [ 199.969809][ T1108] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 200.028374][ T4381] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x500, type = 4 [ 200.057667][ T4381] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 200.140977][ T9] hfsplus: b-tree write err: -5, ino 25 [ 200.152671][ T9] hfsplus: b-tree write err: -5, ino 4 [ 200.157509][ T4381] usb 4-1: USB disconnect, device number 15 [ 200.169346][ T9] hfsplus: b-tree write err: -5, ino 2 [ 200.330723][ T9294] usb 3-1: USB disconnect, device number 7 [ 200.500575][ T8483] udevd[8483]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.694771][T10563] nfs: Unknown parameter '/dev/ocfs2_control' [ 201.016197][T10592] netlink: 'syz.4.2851': attribute type 13 has an invalid length. [ 201.098427][T10592] gretap0: refused to change device tx_queue_len [ 201.105712][T10592] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 201.360376][T10614] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 201.473672][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2867'. [ 201.483153][ T9294] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.777716][ T9294] usb 2-1: Using ep0 maxpacket: 16 [ 201.957983][ T9294] usb 2-1: unable to get BOS descriptor or descriptor too short [ 202.007789][ T4381] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.058011][ T9294] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.077659][ T9294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.254347][T10676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2893'. [ 202.267778][ T4381] usb 1-1: Using ep0 maxpacket: 32 [ 202.288824][ T9294] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 202.312571][ T9294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.329548][T10680] device geneve2 entered promiscuous mode [ 202.347703][ T9294] usb 2-1: Product: syz [ 202.352184][ T9294] usb 2-1: Manufacturer: syz [ 202.357253][ T9294] usb 2-1: SerialNumber: syz [ 202.387898][ T4381] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 202.577903][ T4381] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 202.595283][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 202.605126][ T4381] usb 1-1: Product: syz [ 202.609960][ T4381] usb 1-1: Manufacturer: syz [ 202.614929][ T4381] usb 1-1: SerialNumber: syz [ 202.627365][ T4381] usb 1-1: config 0 descriptor?? [ 202.671095][ T4381] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 202.722367][ T4381] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 202.783722][ T4381] usbtouchscreen: probe of 1-1:0.0 failed with error -8 [ 202.833182][ T9294] usb 2-1: USB disconnect, device number 12 [ 202.918882][ T8482] udevd[8482]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.948817][ T4381] usb 1-1: USB disconnect, device number 9 [ 203.151357][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 203.345020][T10737] xt_TCPMSS: Only works on TCP SYN packets [ 203.513450][T10746] loop3: detected capacity change from 0 to 1024 [ 203.542203][T10750] SET target dimension over the limit! [ 203.661103][T10746] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 203.709472][T10746] EXT4-fs error (device loop3): ext4_get_journal_inode:5185: inode #32: comm syz.3.2927: iget: special inode unallocated [ 203.715581][T10725] loop4: detected capacity change from 0 to 32768 [ 203.738656][T10746] EXT4-fs (loop3): no journal found [ 203.765037][T10746] EXT4-fs (loop3): can't get journal size [ 203.807347][T10746] EXT4-fs (loop3): filesystem is read-only [ 203.840302][T10746] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 203.847861][T10725] (syz.4.2917,10725,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.904972][T10725] (syz.4.2917,10725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 203.947464][T10725] JBD2: Ignoring recovery information on journal [ 204.005018][T10778] loop3: detected capacity change from 0 to 256 [ 204.012801][T10725] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 204.023016][T10725] (syz.4.2917,10725,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 204.133110][T10778] FAT-fs (loop3): Directory bread(block 64) failed [ 204.170913][T10778] FAT-fs (loop3): Directory bread(block 65) failed [ 204.208786][T10778] FAT-fs (loop3): Directory bread(block 66) failed [ 204.216510][T10778] FAT-fs (loop3): Directory bread(block 67) failed [ 204.252005][T10778] FAT-fs (loop3): Directory bread(block 68) failed [ 204.273615][T10793] x_tables: unsorted underflow at hook 1 [ 204.297819][T10778] FAT-fs (loop3): Directory bread(block 69) failed [ 204.305677][T10778] FAT-fs (loop3): Directory bread(block 70) failed [ 204.339181][T10725] (syz.4.2917,10725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 204.373446][T10778] FAT-fs (loop3): Directory bread(block 71) failed [ 204.393058][T10778] FAT-fs (loop3): Directory bread(block 72) failed [ 204.456185][T10778] FAT-fs (loop3): Directory bread(block 73) failed [ 204.479878][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 204.556857][T10778] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.536570][T10862] device bridge4 entered promiscuous mode [ 205.700850][T10871] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2985'. [ 205.900350][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2992'. [ 205.957359][T10889] program syz.2.2993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.988618][T10826] loop0: detected capacity change from 0 to 32768 [ 206.000610][T10889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 206.075739][T10897] misc userio: Invalid payload size [ 206.172055][T10826] XFS (loop0): Mounting V5 Filesystem [ 206.305845][T10826] XFS (loop0): Ending clean mount [ 206.378840][T10826] XFS (loop0): Quotacheck needed: Please wait. [ 206.472845][T10826] XFS (loop0): Quotacheck: Done. [ 206.498282][T10927] loop2: detected capacity change from 0 to 1764 [ 206.580107][ T4190] XFS (loop0): Unmounting Filesystem [ 206.613772][T10927] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 206.660409][T10935] xt_TCPMSS: Only works on TCP SYN packets [ 206.718404][T10937] device bridge0 entered promiscuous mode [ 206.770260][T10939] loop4: detected capacity change from 0 to 4096 [ 207.247828][ T9294] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 207.390224][T10979] xt_ipcomp: unknown flags 12 [ 207.409044][T10973] loop2: detected capacity change from 0 to 4096 [ 207.498245][T10973] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 207.638111][ T9294] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 207.658028][ T9294] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.682563][T10993] loop3: detected capacity change from 0 to 1764 [ 207.713154][ T9294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.739670][ T9294] usb 2-1: config 1 has no interface number 0 [ 207.746039][ T9294] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 207.809510][ T9294] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 207.988062][ T9294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.007688][ T9294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.036524][ T9294] usb 2-1: Product: syz [ 208.064117][ T9294] usb 2-1: Manufacturer: syz [ 208.075676][ T9294] usb 2-1: SerialNumber: syz [ 208.123259][T11028] loop3: detected capacity change from 0 to 2048 [ 208.132525][T11029] loop0: detected capacity change from 0 to 2048 [ 208.190875][T11036] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 208.192888][T11029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.230362][T11036] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 208.240515][T11037] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.278077][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.313363][T11029] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 208.334691][T11029] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 208.343231][T11028] Remounting filesystem read-only [ 208.432977][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.462324][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.483363][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.536178][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.570066][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.592807][ T1108] usb 2-1: USB disconnect, device number 13 [ 208.631309][T11043] loop0: detected capacity change from 0 to 4096 [ 208.633387][T11045] xt_connbytes: Forcing CT accounting to be enabled [ 208.643478][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.682067][T11028] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 208.683080][T11045] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.696297][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 208.696309][ T26] audit: type=1800 audit(1773249929.570:17): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3059" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 208.721933][T11045] xt_bpf: check failed: parse error [ 208.865536][T11050] loop4: detected capacity change from 0 to 128 [ 208.934594][T11050] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 208.959050][T11053] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 208.961823][T11050] FAT-fs (loop4): Filesystem has been set read-only [ 209.202150][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3075'. [ 209.262012][T11069] netlink: 'syz.3.3079': attribute type 10 has an invalid length. [ 209.313558][T11069] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3079'. [ 209.366022][T11069] device bond0 entered promiscuous mode [ 209.392795][T11069] device bond_slave_0 entered promiscuous mode [ 209.421806][T11069] device bond_slave_1 entered promiscuous mode [ 209.443421][T11069] device wlan1 entered promiscuous mode [ 209.464113][T11087] netlink: 'syz.0.3088': attribute type 10 has an invalid length. [ 209.699735][ T7754] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 209.845465][T11126] xt_connbytes: Forcing CT accounting to be enabled [ 210.128120][ T7754] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 210.152298][ T7754] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 210.185901][ T7754] usb 5-1: config 220 has no interface number 2 [ 210.198645][ T7754] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 210.201027][T11148] loop3: detected capacity change from 0 to 4096 [ 210.256051][ T7754] usb 5-1: config 220 interface 0 has no altsetting 0 [ 210.267412][ T7754] usb 5-1: config 220 interface 76 has no altsetting 0 [ 210.275515][ T7754] usb 5-1: config 220 interface 1 has no altsetting 0 [ 210.427745][ T4381] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 210.459133][ T7754] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 210.482704][ T7754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.511948][ T7754] usb 5-1: Product: syz [ 210.516618][ T7754] usb 5-1: Manufacturer: syz [ 210.532237][ T7754] usb 5-1: SerialNumber: syz [ 210.597854][ T9294] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 210.687825][ T4381] usb 2-1: Using ep0 maxpacket: 16 [ 210.741953][T11175] loop3: detected capacity change from 0 to 64 [ 210.809634][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.828893][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.841143][ T4381] usb 2-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 210.857752][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.881634][ T4381] usb 2-1: config 0 descriptor?? [ 210.919001][ T4381] hub 2-1:0.0: USB hub found [ 210.938203][ T7754] usb 5-1: selecting invalid altsetting 0 [ 210.944638][ T7754] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 210.959827][ T7754] usb 5-1: No valid video chain found. [ 211.032207][ T9294] usb 3-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 211.049173][ T9294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 211.063540][ T9294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 211.085919][ T9294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 211.099117][ T7754] usb 5-1: selecting invalid altsetting 0 [ 211.105223][ T7754] usbtest: probe of 5-1:220.1 failed with error -22 [ 211.116955][ T9294] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.127800][ T4381] hub 2-1:0.0: 7 ports detected [ 211.140439][ T7754] usb 5-1: USB disconnect, device number 17 [ 211.149306][ T9294] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 211.157901][ T4381] hub 2-1:0.0: insufficient power available to use all downstream ports [ 211.162432][ T9294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.180529][ T9294] usb 3-1: config 0 descriptor?? [ 211.347801][ T4381] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 211.357898][ T9294] rc_core: IR keymap rc-hauppauge not found [ 211.363335][ T4381] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 211.380548][ T9294] Registered IR keymap rc-empty [ 211.419867][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.449326][ T4381] usb 2-1: USB disconnect, device number 14 [ 211.478096][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.519328][ T9294] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 211.546267][ T9294] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 211.598618][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.644525][T11224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3153'. [ 211.670623][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.694741][T11224] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3153'. [ 211.740069][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.799506][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.847759][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.897821][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 211.938427][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 211.980607][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 212.057877][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 212.132738][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 212.197935][ T9294] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 212.240341][ T9294] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 212.255203][T11273] program syz.1.3177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.275294][ T9294] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 212.305216][ T9294] usb 3-1: USB disconnect, device number 8 [ 212.518656][T11295] xt_socket: unknown flags 0xc [ 212.637781][ T7754] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.702342][T11307] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.830182][T11313] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.846033][T11315] loop0: detected capacity change from 0 to 64 [ 212.936136][T11315] hfs: request for non-existent node 8388610 in B*Tree [ 212.999584][T11322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.999951][T11315] hfs: request for non-existent node 8388610 in B*Tree [ 213.068075][ T7754] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 213.098962][ T7754] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.146940][ T7754] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.260366][T11332] loop1: detected capacity change from 0 to 1024 [ 213.348252][T11332] EXT4-fs (loop1): Ignoring removed bh option [ 213.357873][ T7754] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.375372][T11332] EXT4-fs (loop1): inline encryption not supported [ 213.383743][ T7754] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.415991][ T7754] usb 4-1: Product: syz [ 213.423935][T11332] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 213.434067][ T7754] usb 4-1: Manufacturer: syz [ 213.457719][ T7754] usb 4-1: SerialNumber: syz [ 213.476127][ T7754] usb 4-1: config 0 descriptor?? [ 213.500654][T11332] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.3206: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.531888][ T7754] hub 4-1:0.0: bad descriptor, ignoring hub [ 213.542309][ T7754] hub: probe of 4-1:0.0 failed with error -5 [ 213.561493][T11332] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 213.580031][ T7754] usb 4-1: selecting invalid altsetting 0 [ 213.608106][T11332] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.3206: lblock 0 mapped to illegal pblock 48 (length 1) [ 213.680292][T11332] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 213.739916][T11332] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.3206: Failed to acquire dquot type 0 [ 213.789601][T11332] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 213.827946][T11332] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.3206: mark_inode_dirty error [ 213.854983][ T7754] usb 4-1: USB disconnect, device number 16 [ 213.891993][T11332] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 213.919878][T11332] EXT4-fs (loop1): 1 orphan inode deleted [ 213.926186][T11332] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 213.946926][ T507] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.008234][ T507] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 214.017509][ T507] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:3: Failed to release dquot type 0 [ 214.064750][T11332] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm syz.1.3206: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.111982][T11332] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 214.131397][T11387] netlink: 'syz.4.3233': attribute type 8 has an invalid length. [ 214.200724][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 214.251046][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 214.265497][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6540: inode #3: comm syz-executor: mark_inode_dirty error [ 214.531682][T11416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3248'. [ 214.813588][T11435] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.851300][T11435] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3257'. [ 214.876123][T11441] i2c i2c-0: Invalid block write size 150 [ 214.973386][T11413] infiniband syz0: set active [ 214.999211][T11413] infiniband syz0: added bond0 [ 215.212506][T11413] RDS/IB: syz0: added [ 215.255536][T11475] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3277'. [ 215.270704][T11413] smc: adding ib device syz0 with port count 1 [ 215.316393][T11413] smc: ib device syz0 port 1 has pnetid [ 215.332624][T11477] loop3: detected capacity change from 0 to 1024 [ 215.454903][T11477] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 215.480361][T11477] hfsplus: xattr search failed [ 215.493599][T11489] loop2: detected capacity change from 0 to 64 [ 215.521653][T11477] hfsplus: b-tree write err: -5, ino 2 [ 215.683064][ T154] hfsplus: b-tree write err: -5, ino 25 [ 215.690774][ T154] hfsplus: b-tree write err: -5, ino 4 [ 215.696432][ T154] hfsplus: b-tree write err: -5, ino 2 [ 215.790847][T11505] netlink: 'syz.0.3293': attribute type 10 has an invalid length. [ 215.978213][T11505] team0: Port device wlan1 added [ 215.998918][T11517] device wlan0 entered promiscuous mode [ 216.073925][T11523] usb usb7: usbfs: process 11523 (syz.2.3301) did not claim interface 0 before use [ 216.186426][T11532] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3305'. [ 216.422647][T11549] loop2: detected capacity change from 0 to 512 [ 216.517902][T11549] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 216.547771][T11549] EXT4-fs (loop2): Remounting filesystem read-only [ 216.570728][T11549] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3313: invalid indirect mapped block 4278190080 (level 0) [ 216.619753][T11549] EXT4-fs (loop2): Remounting filesystem read-only [ 216.647130][T11549] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3313: invalid indirect mapped block 1 (level 1) [ 216.669225][T11549] EXT4-fs (loop2): Remounting filesystem read-only [ 216.699311][T11549] EXT4-fs (loop2): 1 truncate cleaned up [ 216.705763][T11549] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 216.712263][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 216.785250][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3324'. [ 216.798974][T11549] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.3313: bad inode number: 1 [ 216.831747][T11549] EXT4-fs (loop2): Remounting filesystem read-only [ 216.887864][ T7754] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 217.186156][T11581] xt_hashlimit: max too large, truncated to 1048576 [ 217.268037][ T7754] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.278583][ T7754] usb 2-1: config 0 has no interface number 0 [ 217.284876][ T7754] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.293043][T11580] loop3: detected capacity change from 0 to 4096 [ 217.358998][ T7754] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.426764][ T7754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.503625][ T7754] usb 2-1: config 0 descriptor?? [ 217.550816][ T7754] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 217.764028][T11603] loop0: detected capacity change from 0 to 2048 [ 217.800270][ T4381] usb 2-1: USB disconnect, device number 15 [ 217.857631][T11610] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.935859][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 217.956543][T11618] overlayfs: conflicting options: userxattr,redirect_dir=off [ 217.975208][T11603] Remounting filesystem read-only [ 217.997106][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.026381][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.075904][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.101395][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.148829][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.178976][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.204936][T11603] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 218.231033][ T26] audit: type=1800 audit(1773249939.110:18): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3339" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 218.427355][T11650] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 218.452663][T11650] netlink: 'syz.0.3360': attribute type 2 has an invalid length. [ 218.490590][T11653] loop4: detected capacity change from 0 to 512 [ 218.500413][T11650] netlink: 'syz.0.3360': attribute type 2 has an invalid length. [ 218.520590][T11650] netlink: 'syz.0.3360': attribute type 2 has an invalid length. [ 218.537683][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'. [ 218.601689][T11653] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 218.675035][T11653] ext4 filesystem being mounted at /674/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.697008][T11672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3371'. [ 218.737559][T11672] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3371'. [ 218.749023][T11672] netlink: 'syz.1.3371': attribute type 4 has an invalid length. [ 218.846257][T11678] tmpfs: Bad value for 'mpol' [ 218.880728][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 218.916465][T11682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.062622][T11696] loop2: detected capacity change from 0 to 512 [ 219.181366][T11696] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 219.198027][T11712] tmpfs: Bad value for 'mpol' [ 219.236307][T11696] ext4 filesystem being mounted at /767/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.292065][T11716] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 219.611345][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 219.650175][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 219.702208][T11731] loop4: detected capacity change from 0 to 4096 [ 219.808819][T11731] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 219.836163][T11731] ntfs3: loop4: Failed to load $Extend. [ 219.929063][T11731] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 220.003481][T11763] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3416'. [ 220.027703][ T4196] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22. [ 220.047996][ T4196] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22. [ 220.328945][T11790] overlayfs: missing 'lowerdir' [ 220.586571][T11812] loop3: detected capacity change from 0 to 64 [ 220.918189][T11842] comedi comedi4: bad chanlist[0]=0x01000008 chan=8 range length=2 [ 221.095037][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3465'. [ 221.132644][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 221.175433][T11860] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 221.218024][T11870] loop4: detected capacity change from 0 to 2048 [ 221.289601][T11870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.329906][ T4381] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.515336][T11891] ipt_rpfilter: unknown options [ 221.597810][ T4381] usb 3-1: Using ep0 maxpacket: 16 [ 221.883063][ T4381] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 221.903979][ T4381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.914746][ T4381] usb 3-1: Product: syz [ 221.919237][ T4381] usb 3-1: Manufacturer: syz [ 221.927812][ T6482] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 221.952999][ T4381] usb 3-1: SerialNumber: syz [ 221.968591][ T4381] usb 3-1: config 0 descriptor?? [ 222.013548][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3492'. [ 222.045452][T11917] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 222.069502][T11917] netlink: 'syz.0.3493': attribute type 2 has an invalid length. [ 222.078724][T11917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3493'. [ 222.242838][ T4381] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 222.251800][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 222.268106][ T4381] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 222.313686][T11931] xt_TCPMSS: Only works on TCP SYN packets [ 222.394347][T11937] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 222.487907][ T6482] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 222.507818][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 222.513678][ T6482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.514580][ T9294] usb 3-1: USB disconnect, device number 9 [ 222.543810][ T6482] usb 5-1: Product: syz [ 222.550182][ T6482] usb 5-1: Manufacturer: syz [ 222.554817][ T6482] usb 5-1: SerialNumber: syz [ 222.562209][ T6482] r8152-cfgselector 5-1: config 0 descriptor?? [ 222.618771][ T4381] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.628172][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 222.640946][ T1108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 222.808041][ T1108] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 222.818425][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.827429][ T1108] usb 4-1: Product: syz [ 222.833234][ T1108] usb 4-1: Manufacturer: syz [ 222.839694][ T1108] usb 4-1: SerialNumber: syz [ 222.847218][ T1108] usb 4-1: config 0 descriptor?? [ 222.867905][ T4381] usb 2-1: Using ep0 maxpacket: 16 [ 222.893136][ T1108] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 223.027714][ T7754] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.057882][ T6482] r8152-cfgselector 5-1: Unknown version 0x0000 [ 223.064397][ T6482] r8152-cfgselector 5-1: bad CDC descriptors [ 223.105023][ T6482] r8152-cfgselector 5-1: Unknown version 0x0000 [ 223.113846][ T6482] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 223.128534][ T1108] usb 4-1: USB disconnect, device number 17 [ 223.130350][ T507] usb 4-1: Failed to submit usb control message: -71 [ 223.147994][ T4381] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 223.163759][ T4381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.179542][ T507] usb 4-1: unable to send the bmi data to the device: -71 [ 223.187262][ T4381] usb 2-1: Product: syz [ 223.192134][ T507] usb 4-1: unable to get target info from device [ 223.199356][ T4381] usb 2-1: Manufacturer: syz [ 223.204220][ T4381] usb 2-1: SerialNumber: syz [ 223.209603][ T507] usb 4-1: could not get target info (-71) [ 223.218571][ T507] usb 4-1: could not probe fw (-71) [ 223.233745][ T4381] usb 2-1: config 0 descriptor?? [ 223.288035][ T7754] usb 1-1: Using ep0 maxpacket: 8 [ 223.289472][ T4381] safe_serial 2-1:0.0: safe_serial converter detected [ 223.305017][ T4381] usb 2-1: safe_serial converter now attached to ttyUSB0 [ 223.350921][T11974] comedi comedi3: pcmda12: I/O port conflict (0x8,16) [ 223.461123][T11982] netlink: 'syz.2.3524': attribute type 1 has an invalid length. [ 223.469438][T11982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3524'. [ 223.480345][T11982] block nbd0: not configured, cannot reconfigure [ 223.518303][ T7767] usb 2-1: USB disconnect, device number 16 [ 223.534878][ T7767] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 223.553954][ T7767] safe_serial 2-1:0.0: device disconnected [ 223.598073][ T7754] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 223.618129][ T7754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 223.646177][ T7754] usb 1-1: Product: syz [ 223.653556][ T7754] usb 1-1: Manufacturer: syz [ 223.658766][ T7754] usb 1-1: SerialNumber: syz [ 223.690774][ T7754] usb 1-1: config 0 descriptor?? [ 223.731858][T11996] siw: device registration error -23 [ 223.750025][ T7754] gspca_main: sq905-2.14.0 probing 2770:9120 [ 224.022375][T12020] loop2: detected capacity change from 0 to 512 [ 224.064727][T12025] siw: device registration error -23 [ 224.078821][ T7767] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 224.098942][T12020] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 224.126892][T12020] EXT4-fs (loop2): Test dummy encryption mode enabled [ 224.143876][T12020] EXT4-fs (loop2): Test dummy encryption mode enabled [ 224.158039][T12020] EXT4-fs (loop2): Mount option "journal_async_commit" incompatible with ext3 [ 224.171065][ T7754] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 224.189549][ T7754] sq905: probe of 1-1:0.0 failed with error -71 [ 224.219040][ T7754] usb 1-1: USB disconnect, device number 10 [ 224.377771][ T7767] usb 4-1: Using ep0 maxpacket: 32 [ 224.399979][T12039] netlink: 'syz.4.3552': attribute type 1 has an invalid length. [ 224.410211][T12039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3552'. [ 224.528102][ T9293] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 224.544429][T12049] kAFS: unable to lookup cell '/,' [ 224.565879][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 224.663894][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3562'. [ 224.697400][ T7767] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 224.717709][ T7767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.738706][ T7767] usb 4-1: Product: syz [ 224.752008][ T7767] usb 4-1: Manufacturer: syz [ 224.763045][ T7767] usb 4-1: SerialNumber: syz [ 224.778180][ T7767] usb 4-1: config 0 descriptor?? [ 224.838148][T12069] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 224.937853][ T9293] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 224.957126][ T9293] usb 3-1: config 0 has no interface number 0 [ 224.973599][ T9293] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10 [ 224.992305][ T9293] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024 [ 225.087852][ T4381] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 225.092929][T12090] loop1: detected capacity change from 0 to 1764 [ 225.177927][ T9293] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 225.191598][ T9293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.200887][ T9293] usb 3-1: Product: syz [ 225.205532][ T9293] usb 3-1: Manufacturer: syz [ 225.219715][ T9293] usb 3-1: SerialNumber: syz [ 225.226512][ T9293] usb 3-1: config 0 descriptor?? [ 225.268241][T12020] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.275693][ T7767] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 225.290074][ T7767] airspy 4-1:0.0: Could not detect board [ 225.295956][ T7767] airspy: probe of 4-1:0.0 failed with error -71 [ 225.319627][ T9293] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 225.330079][ T4381] usb 5-1: Using ep0 maxpacket: 32 [ 225.332625][ T7767] usb 4-1: USB disconnect, device number 18 [ 225.460133][ T4381] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 225.475563][ T4381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.550478][ T9293] usb 3-1: USB disconnect, device number 10 [ 225.550556][ T4381] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 225.565363][ T9293] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 225.684019][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3594'. [ 225.987770][ T4381] gspca_nw80x: reg_r err -71 [ 225.992507][ T4381] nw80x: probe of 5-1:3.0 failed with error -71 [ 226.021538][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'. [ 226.051911][ T4381] usb 5-1: USB disconnect, device number 19 [ 226.158307][T12160] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 226.182837][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.211480][T12158] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 226.249321][T12158] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 226.412439][T12182] netlink: 'syz.3.3617': attribute type 2 has an invalid length. [ 226.474730][T12182] netlink: 'syz.3.3617': attribute type 1 has an invalid length. [ 226.501904][T12182] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3617'. [ 226.609589][T12196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3623'. [ 226.666304][T12194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.824558][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3630'. [ 226.880055][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'. [ 227.202337][T12190] loop0: detected capacity change from 0 to 32768 [ 227.262608][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3641'. [ 227.303346][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'. [ 227.318460][T12247] loop2: detected capacity change from 0 to 512 [ 227.327455][T12190] (syz.0.3621,12190,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.369056][T12190] (syz.0.3621,12190,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.452268][T12247] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 227.517026][T12190] JBD2: Ignoring recovery information on journal [ 227.526627][T12263] device ~ÿ entered promiscuous mode [ 227.623407][T12190] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 227.639123][ T26] audit: type=1800 audit(1773249948.510:19): pid=12247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3644" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 227.662004][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.825042][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'. [ 228.051422][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 228.064802][T12290] loop4: detected capacity change from 0 to 64 [ 228.168816][T12297] loop2: detected capacity change from 0 to 64 [ 228.178761][T12290] Trying to free block not in datazone [ 228.228268][T12290] Trying to free block not in datazone [ 228.234502][T12290] Trying to free block not in datazone [ 228.278046][T12290] Trying to free block not in datazone [ 228.284253][T12290] Trying to free block not in datazone [ 228.335411][T12290] minix_free_block (loop4:6): bit already cleared [ 228.376664][T12290] Trying to free block not in datazone [ 228.389209][T12290] Trying to free block not in datazone [ 228.477837][T12314] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 228.648310][T12329] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 228.728593][T12324] loop3: detected capacity change from 0 to 4096 [ 228.807047][T12324] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 228.919908][T12324] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 229.003968][T12324] ntfs: volume version 3.1. [ 229.350061][T12390] loop3: detected capacity change from 0 to 512 [ 229.428755][T12390] EXT4-fs (loop3): Ignoring removed nobh option [ 229.435824][T12390] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 229.509872][T12390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 229.569282][T12390] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3697: bad orphan inode 15 [ 229.625903][T12390] ext4_test_bit(bit=14, block=18) = 1 [ 229.632714][T12390] is_bad_inode(inode)=0 [ 229.637253][T12390] NEXT_ORPHAN(inode)=1023 [ 229.644519][T12390] max_ino=32 [ 229.649860][T12390] i_nlink=0 [ 229.674590][T12390] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3697: bg 0: block 161: padding at end of block bitmap is not set [ 229.688001][T12416] loop4: detected capacity change from 0 to 64 [ 229.777262][T12390] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 229.837907][T12390] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 230.154964][T12436] xt_TPROXY: Can be used only with -p tcp or -p udp [ 230.461538][T12456] loop2: detected capacity change from 0 to 2048 [ 230.538043][T12464] __nla_validate_parse: 1 callbacks suppressed [ 230.538062][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 230.569567][T12456] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 230.658393][T12469] IPVS: length: 117 != 8 [ 230.663864][T12470] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.986330][T12487] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 231.141445][T12498] loop4: detected capacity change from 0 to 512 [ 231.185243][T12498] EXT4-fs (loop4): Ignoring removed nobh option [ 231.207274][T12498] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 231.255933][T12498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.270350][T12498] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3748: bad orphan inode 15 [ 231.308884][T12511] loop2: detected capacity change from 0 to 164 [ 231.322158][T12498] ext4_test_bit(bit=14, block=18) = 1 [ 231.329097][T12498] is_bad_inode(inode)=0 [ 231.333457][T12498] NEXT_ORPHAN(inode)=1023 [ 231.340438][T12498] max_ino=32 [ 231.344057][T12498] i_nlink=0 [ 231.358070][T12498] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3748: bg 0: block 161: padding at end of block bitmap is not set [ 231.393088][T12498] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 231.409978][T12511] Unsupported NM flag settings (240) [ 231.452818][T12498] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 231.964373][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3769'. [ 232.207852][ T4372] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.224966][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3777'. [ 232.266048][T12563] ipt_ECN: cannot use operation on non-tcp rule [ 232.447810][ T4372] usb 4-1: Using ep0 maxpacket: 16 [ 232.532965][T12543] loop0: detected capacity change from 0 to 32768 [ 232.542410][T12578] netlink: 'syz.1.3788': attribute type 3 has an invalid length. [ 232.553901][T12581] loop4: detected capacity change from 0 to 1024 [ 232.566264][T12578] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3788'. [ 232.686928][T12543] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 232.715722][T12581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.740208][ T4372] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 232.754265][T12581] ext4 filesystem being mounted at /751/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.777734][ T4372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.795047][ T4372] usb 4-1: Product: syz [ 232.810840][ T4372] usb 4-1: Manufacturer: syz [ 232.816112][ T4372] usb 4-1: SerialNumber: syz [ 232.860261][T12543] [ 232.862902][T12543] ====================================================== [ 232.870203][T12543] WARNING: possible circular locking dependency detected [ 232.878362][T12543] syzkaller #0 Not tainted [ 232.883577][T12543] ------------------------------------------------------ [ 232.891076][T12543] syz.0.3771/12543 is trying to acquire lock: [ 232.898035][T12543] ffff88802b1c4990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x19f/0x270 [ 232.909559][T12543] [ 232.909559][T12543] but task is already holding lock: [ 232.917466][T12543] ffff8880243ecce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 232.928805][T12543] [ 232.928805][T12543] which lock already depends on the new lock. [ 232.928805][T12543] [ 232.940695][T12543] [ 232.940695][T12543] the existing dependency chain (in reverse order) is: [ 232.942930][ T4372] usb 4-1: config 0 descriptor?? [ 232.951622][T12543] [ 232.951622][T12543] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 232.951656][T12543] down_read+0x44/0x2e0 [ 232.951679][T12543] ocfs2_start_trans+0x3a6/0x6f0 [ 232.951695][T12543] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 232.951711][T12543] ocfs2_dismount_volume+0x1e1/0x8a0 [ 232.951730][T12543] generic_shutdown_super+0x130/0x300 [ 232.951746][T12543] kill_block_super+0x7c/0xe0 [ 232.951761][T12543] deactivate_locked_super+0x93/0xf0 [ 232.951777][T12543] cleanup_mnt+0x42d/0x4e0 [ 232.951794][T12543] task_work_run+0x125/0x1a0 [ 232.951811][T12543] exit_to_user_mode_loop+0x10f/0x130 [ 232.999441][ T4372] safe_serial 4-1:0.0: safe_serial converter detected [ 233.003544][T12543] exit_to_user_mode_prepare+0xee/0x180 [ 233.003570][T12543] syscall_exit_to_user_mode+0x16/0x40 [ 233.003590][T12543] do_syscall_64+0x58/0xa0 [ 233.019654][ T4372] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 233.020885][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.020913][T12543] [ 233.020913][T12543] -> #4 ( [ 233.059990][T12600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3797'. [ 233.066154][T12543] sb_internal#5){.+.+}-{0:0}: [ 233.086156][T12543] ocfs2_start_trans+0x2a7/0x6f0 [ 233.092000][T12543] ocfs2_acquire_dquot+0x688/0xb10 [ 233.097842][T12543] dqget+0x778/0xeb0 [ 233.102446][T12543] dquot_set_dqblk+0x27/0xf90 [ 233.107641][T12543] quota_setquota+0x4d6/0x590 [ 233.112923][T12543] __se_sys_quotactl+0x28b/0x6f0 [ 233.119133][T12543] do_syscall_64+0x4c/0xa0 [ 233.125295][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.132600][T12543] [ 233.132600][T12543] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 233.142257][T12543] down_write+0x38/0x60 [ 233.147204][T12543] ocfs2_create_local_dquot+0x199/0x1850 [ 233.153718][T12543] ocfs2_acquire_dquot+0x7ed/0xb10 [ 233.159918][T12543] dqget+0x778/0xeb0 [ 233.165317][T12543] dquot_set_dqblk+0x27/0xf90 [ 233.171070][T12543] quota_setquota+0x4d6/0x590 [ 233.177655][T12543] __se_sys_quotactl+0x28b/0x6f0 [ 233.183776][T12543] do_syscall_64+0x4c/0xa0 [ 233.188792][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.195289][T12543] [ 233.195289][T12543] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 233.203547][T12543] __mutex_lock_common+0x1e3/0x2400 [ 233.209436][T12543] mutex_lock_nested+0x17/0x20 [ 233.215631][T12543] dquot_commit+0x5a/0x410 [ 233.220873][T12543] ext4_write_dquot+0x1f0/0x360 [ 233.227740][T12543] mark_all_dquot_dirty+0xf9/0x400 [ 233.233833][T12543] __dquot_free_space+0x7ca/0xb90 [ 233.241059][T12543] ext4_free_blocks+0x1b2b/0x24d0 [ 233.247823][T12543] ext4_clear_blocks+0x37f/0x3f0 [ 233.253593][T12543] ext4_ind_truncate+0x43b/0xbe0 [ 233.260660][T12543] ext4_truncate+0x9d8/0x10f0 [ 233.266152][T12543] ext4_setattr+0xffe/0x19e0 [ 233.271539][T12543] notify_change+0xbcd/0xee0 [ 233.276639][T12543] do_truncate+0x1ac/0x240 [ 233.281910][T12543] path_openat+0x2922/0x2fa0 [ 233.287494][T12543] do_filp_open+0x1e2/0x410 [ 233.293358][T12543] do_sys_openat2+0x150/0x4b0 [ 233.298717][T12543] __x64_sys_open+0x11b/0x140 [ 233.304627][T12543] do_syscall_64+0x4c/0xa0 [ 233.310138][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.317063][T12543] [ 233.317063][T12543] -> #1 (&ei->i_data_sem){++++}-{3:3}: [ 233.325895][T12543] down_write+0x38/0x60 [ 233.331554][T12543] ext4_truncate+0x97f/0x10f0 [ 233.338271][T12543] ext4_setattr+0xffe/0x19e0 [ 233.344535][T12543] notify_change+0xbcd/0xee0 [ 233.350434][T12543] do_truncate+0x1ac/0x240 [ 233.356088][T12543] do_sys_ftruncate+0x31b/0x3d0 [ 233.362228][T12543] do_syscall_64+0x4c/0xa0 [ 233.367692][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.375629][T12543] [ 233.375629][T12543] -> #0 (jbd2_handle){++++}-{0:0}: [ 233.383183][T12543] __lock_acquire+0x2c42/0x7d10 [ 233.388944][T12543] lock_acquire+0x19e/0x400 [ 233.394590][T12543] wait_transaction_locked+0x1bb/0x270 [ 233.400825][T12543] add_transaction_credits+0x103/0xc80 [ 233.407887][T12543] start_this_handle+0x74d/0x15c0 [ 233.414608][T12543] jbd2__journal_restart+0x233/0x630 [ 233.420858][T12543] ocfs2_extend_trans+0x2bb/0x6f0 [ 233.427369][T12543] ocfs2_reserve_suballoc_bits+0x1761/0x44d0 [ 233.436276][T12543] ocfs2_reserve_new_inode+0x4f5/0xcd0 [ 233.443029][T12543] ocfs2_mknod+0x885/0x2510 [ 233.448509][T12543] ocfs2_create+0x192/0x420 [ 233.454357][T12543] path_openat+0x11db/0x2fa0 [ 233.459886][T12543] do_filp_open+0x1e2/0x410 [ 233.465076][T12543] do_sys_openat2+0x150/0x4b0 [ 233.470626][T12543] __x64_sys_openat+0x135/0x160 [ 233.476743][T12543] do_syscall_64+0x4c/0xa0 [ 233.482565][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.489485][T12543] [ 233.489485][T12543] other info that might help us debug this: [ 233.489485][T12543] [ 233.500366][T12543] Chain exists of: [ 233.500366][T12543] jbd2_handle --> sb_internal#5 --> &journal->j_trans_barrier [ 233.500366][T12543] [ 233.515074][T12543] Possible unsafe locking scenario: [ 233.515074][T12543] [ 233.523008][T12543] CPU0 CPU1 [ 233.528904][T12543] ---- ---- [ 233.534538][T12543] lock(&journal->j_trans_barrier); [ 233.540168][T12543] lock(sb_internal#5); [ 233.547263][T12543] lock(&journal->j_trans_barrier); [ 233.556106][T12543] lock(jbd2_handle); [ 233.560884][T12543] [ 233.560884][T12543] *** DEADLOCK *** [ 233.560884][T12543] [ 233.570053][T12543] 6 locks held by syz.0.3771/12543: [ 233.575586][T12543] #0: ffff88802af3e460 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 233.586279][T12543] #1: ffff888060985f48 (&type->i_mutex_dir_key#29){+.+.}-{3:3}, at: path_openat+0x803/0x2fa0 [ 233.597341][T12543] #2: ffff88806088b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 233.611607][T12543] #3: ffff888060982648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 233.626425][T12543] #4: ffff88802af3e650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_reserve_suballoc_bits+0x7ab/0x44d0 [ 233.637302][T12543] #5: ffff8880243ecce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 233.649309][T12543] [ 233.649309][T12543] stack backtrace: [ 233.655385][T12543] CPU: 1 PID: 12543 Comm: syz.0.3771 Not tainted syzkaller #0 [ 233.662990][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.674104][T12543] Call Trace: [ 233.677473][T12543] [ 233.680391][T12543] dump_stack_lvl+0x188/0x250 [ 233.685144][T12543] ? load_image+0x400/0x400 [ 233.690047][T12543] ? show_regs_print_info+0x20/0x20 [ 233.695506][T12543] ? print_circular_bug+0x12b/0x1a0 [ 233.701157][T12543] check_noncircular+0x296/0x330 [ 233.706841][T12543] ? add_chain_block+0x940/0x940 [ 233.711767][T12543] ? lockdep_lock+0xf1/0x1f0 [ 233.716740][T12543] ? mark_lock+0x94/0x320 [ 233.721666][T12543] __lock_acquire+0x2c42/0x7d10 [ 233.726613][T12543] ? verify_lock_unused+0x140/0x140 [ 233.732723][T12543] ? mark_lock+0x94/0x320 [ 233.737753][T12543] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 233.744735][T12543] ? lock_chain_count+0x20/0x20 [ 233.749844][T12543] lock_acquire+0x19e/0x400 [ 233.754512][T12543] ? wait_transaction_locked+0x19f/0x270 [ 233.760755][T12543] ? wait_transaction_locked+0x17c/0x270 [ 233.766678][T12543] ? __lock_acquire+0x7d10/0x7d10 [ 233.771691][T12543] ? read_lock_is_recursive+0x10/0x10 [ 233.777489][T12543] wait_transaction_locked+0x1bb/0x270 [ 233.783280][T12543] ? wait_transaction_locked+0x19f/0x270 [ 233.789093][T12543] ? lock_chain_count+0x20/0x20 [ 233.794039][T12543] ? add_transaction_credits+0xc80/0xc80 [ 233.799764][T12543] ? init_wait_entry+0xd0/0xd0 [ 233.804522][T12543] ? finish_lock_switch+0x12f/0x280 [ 233.809792][T12543] ? lockdep_hardirqs_on+0x94/0x140 [ 233.815337][T12543] ? finish_lock_switch+0x12f/0x280 [ 233.820823][T12543] add_transaction_credits+0x103/0xc80 [ 233.826377][T12543] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 233.833461][T12543] ? read_lock_is_recursive+0x10/0x10 [ 233.839101][T12543] ? lockdep_hardirqs_on+0x94/0x140 [ 233.844465][T12543] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 233.850979][T12543] start_this_handle+0x74d/0x15c0 [ 233.856175][T12543] ? preempt_schedule_common+0xa5/0xd0 [ 233.861843][T12543] ? jbd2__journal_start+0x5a0/0x5a0 [ 233.868190][T12543] ? do_raw_read_unlock+0x70/0x70 [ 233.873581][T12543] ? preempt_schedule_thunk+0x16/0x18 [ 233.879555][T12543] ? _raw_write_unlock+0x36/0x40 [ 233.885013][T12543] jbd2__journal_restart+0x233/0x630 [ 233.891028][T12543] ocfs2_extend_trans+0x2bb/0x6f0 [ 233.896215][T12543] ? ocfs2_commit_trans+0x240/0x240 [ 233.901734][T12543] ocfs2_reserve_suballoc_bits+0x1761/0x44d0 [ 233.908087][T12543] ? lock_chain_count+0x20/0x20 [ 233.913331][T12543] ? ocfs2_block_group_search+0x470/0x470 [ 233.919344][T12543] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 233.925503][T12543] ? lockdep_hardirqs_on+0x94/0x140 [ 233.930795][T12543] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 233.936785][T12543] ? _raw_spin_unlock+0x40/0x40 [ 233.942075][T12543] ? stack_trace_save+0xa6/0xf0 [ 233.947060][T12543] ? stack_depot_save+0x404/0x440 [ 233.952249][T12543] ? __kasan_kmalloc+0xcc/0xf0 [ 233.957858][T12543] ? __kasan_kmalloc+0xb5/0xf0 [ 233.962892][T12543] ? ocfs2_reserve_new_inode+0x103/0xcd0 [ 233.968970][T12543] ? ocfs2_create+0x192/0x420 [ 233.974281][T12543] ? do_filp_open+0x1e2/0x410 [ 233.979760][T12543] ? do_sys_openat2+0x150/0x4b0 [ 233.985059][T12543] ? __x64_sys_openat+0x135/0x160 [ 233.990177][T12543] ? do_syscall_64+0x4c/0xa0 [ 233.995045][T12543] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.001493][T12543] ocfs2_reserve_new_inode+0x4f5/0xcd0 [ 234.007061][T12543] ? ocfs2_reserve_new_metadata+0x60/0x60 [ 234.013187][T12543] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 234.019077][T12543] ocfs2_mknod+0x885/0x2510 [ 234.023943][T12543] ? ocfs2_mkdir+0x420/0x420 [ 234.028926][T12543] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.035477][T12543] ? __wake_up_common+0x5b/0x4e0 [ 234.040710][T12543] ? ocfs2_inode_unlock+0xa1/0x140 [ 234.046043][T12543] ? __lock_acquire+0x7d10/0x7d10 [ 234.051382][T12543] ? __rwlock_init+0x140/0x140 [ 234.056342][T12543] ? _raw_spin_unlock+0x24/0x40 [ 234.061382][T12543] ? do_raw_spin_unlock+0x11d/0x230 [ 234.066838][T12543] ? rcu_is_watching+0x11/0xa0 [ 234.071967][T12543] ? ocfs2_lookup+0x490/0x950 [ 234.076738][T12543] ocfs2_create+0x192/0x420 [ 234.081514][T12543] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 234.088019][T12543] ? ocfs2_lookup+0x950/0x950 [ 234.092780][T12543] ? inode_permission+0xef/0x480 [ 234.097878][T12543] ? bpf_lsm_inode_create+0x5/0x10 [ 234.102979][T12543] ? security_inode_create+0xb3/0x100 [ 234.108712][T12543] ? ocfs2_lookup+0x950/0x950 [ 234.113744][T12543] path_openat+0x11db/0x2fa0 [ 234.118421][T12543] ? do_filp_open+0x410/0x410 [ 234.123535][T12543] do_filp_open+0x1e2/0x410 [ 234.128306][T12543] ? vfs_tmpfile+0x300/0x300 [ 234.133064][T12543] ? _raw_spin_unlock+0x24/0x40 [ 234.138024][T12543] ? alloc_fd+0x598/0x630 [ 234.142427][T12543] do_sys_openat2+0x150/0x4b0 [ 234.147347][T12543] ? __lock_acquire+0x7d10/0x7d10 [ 234.152966][T12543] ? do_sys_open+0xe0/0xe0 [ 234.157468][T12543] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 234.163922][T12543] ? lock_chain_count+0x20/0x20 [ 234.168766][T12543] ? vtime_user_exit+0x2c8/0x3e0 [ 234.173962][T12543] __x64_sys_openat+0x135/0x160 [ 234.179070][T12543] do_syscall_64+0x4c/0xa0 [ 234.183573][T12543] ? clear_bhb_loop+0x30/0x80 [ 234.188586][T12543] ? clear_bhb_loop+0x30/0x80 [ 234.194083][T12543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.200607][T12543] RIP: 0033:0x7f08699f6799 [ 234.205154][T12543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.230413][T12543] RSP: 002b:00007f0867c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.240960][T12543] RAX: ffffffffffffffda RBX: 00007f0869c6ffa0 RCX: 00007f08699f6799 [ 234.251459][T12543] RDX: 00000000000026e1 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 234.262971][T12543] RBP: 00007f0869a8cc99 R08: 0000000000000000 R09: 0000000000000000 [ 234.272820][T12543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.281526][T12543] R13: 00007f0869c70038 R14: 00007f0869c6ffa0 R15: 00007ffeafd56c88 [ 234.290978][T12543] [ 234.333776][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 234.366501][ T7767] usb 4-1: USB disconnect, device number 19 [ 234.408336][ T7767] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 234.434115][ T7767] safe_serial 4-1:0.0: device disconnected