last executing test programs: 8m17.654201972s ago: executing program 1 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) 8m16.662134313s ago: executing program 1 (id=304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000018c0)={0x1, 0x0, [{0x0, 0x44, &(0x7f0000001740)=""/68}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 8m15.211315685s ago: executing program 1 (id=310): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m13.826935525s ago: executing program 1 (id=314): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) 8m12.274713998s ago: executing program 1 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) write$P9_RREAD(r3, &(0x7f0000000180)={0xb, 0x75, 0x1}, 0xb) 8m8.865183913s ago: executing program 1 (id=325): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xa}}, './file1\x00'}) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 8m7.187173679s ago: executing program 32 (id=325): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xa}}, './file1\x00'}) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3.842566036s ago: executing program 5 (id=1626): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$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") open(&(0x7f0000000000)='./file1\x00', 0x149042, 0x1e9) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00') 3.735796488s ago: executing program 3 (id=1627): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 3.654878361s ago: executing program 4 (id=1629): getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 3.484265784s ago: executing program 4 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 3.336075977s ago: executing program 5 (id=1633): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x19) 3.335902527s ago: executing program 4 (id=1634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x4, 0x0, [{0x40000001, 0x5, 0x5, 0x16, 0x7, 0x9}, {0x1, 0x6, 0x4, 0x10001, 0x0, 0x1ff, 0x1}, {0x80000000, 0x8, 0xe, 0x1, 0x0, 0x0, 0x7fffffff}, {0xd, 0x0, 0x6, 0xd4b, 0x0, 0xfffffff1, 0x4}]}) 3.22424737s ago: executing program 4 (id=1635): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_open_dev$media(&(0x7f0000000000), 0x0, 0x8400) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r0, r0, 0x7}) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x4, 0x1}, 0x10) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r3, &(0x7f0000001400)=""/4046, 0xffd8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) 3.083245353s ago: executing program 5 (id=1636): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0x2}, {}, {0xfff3, 0xfff9}}}, 0x24}}, 0x44080) 2.981104325s ago: executing program 0 (id=1637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x3, 0x0, [{0xc001102a, 0x0, 0xd}, {0xaf6, 0x0, 0x1}, {0x279, 0x0, 0xaeeb}]}) 2.907840557s ago: executing program 5 (id=1638): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x200, 0x8, 0x1, 0x8}) 2.31048209s ago: executing program 0 (id=1639): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2.184082702s ago: executing program 4 (id=1640): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a, 0x0, &(0x7f0000000780)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b788a1e78b46", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.915456328s ago: executing program 0 (id=1641): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0x1}]}}}], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 1.910272168s ago: executing program 5 (id=1642): r0 = inotify_init1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x60002011}) close(0x3) 1.766476871s ago: executing program 3 (id=1643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000003c0)={0x5, 0x1, 0x7}) 1.713737262s ago: executing program 4 (id=1644): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) 1.712648472s ago: executing program 3 (id=1645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x111, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x4, 0x1}, {0x2, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x4800) 1.611601465s ago: executing program 3 (id=1646): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x3, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x80000001]}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x8001, 0x0, 0x0, [], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x404042) close(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x3fd, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203843, 0x0, [0x2], [0x800, 0x1]}) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9f}, 0x40002000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.611399505s ago: executing program 0 (id=1647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000900)) 1.611125505s ago: executing program 5 (id=1648): syz_mount_image$ocfs2(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYBLOB="2d1fe7e53e7eec3c7a85966f877eefedcda3c8c545eb18e0766e8a8231be44108b59e5e8a8236fd53a993032c709f4c9d69f009c650f5b4b2ee0580d24621c88e0e9f56480dd9e6c339becb187bf0cc12bfbd29a2445cbdb7d54d8bee7418effb46559cc0b510bb0326af72743df3a7a4d7c359181ba2299cc16f18ea467ffef4fd42b91f7d5c21a99ef45f7751a70ce0724cd052f2956eb9561eeb6dd1c7745f82d92f1ffb0a0e6f1e162927e6aaed815bdffacf2c677ddcc65d5e52ea661ddadd68738788b100f4ad0ab9f3cd76e8040e11d78117c7edfbbac202e", @ANYBLOB="01be6dbaba78329cdf8f49041404d738d59e53d51ca94c6a3b541fd52fe4a7f180862a6369c328dc0b730d53de2bc8a03f5f4b2b0474faba14d6a9771e678d8c57fbb78d64fe8ebffc4bc8b8a3d0f3cbb2f339390790f181f07c2e00f200d50952054a2d798a73d17335850fe03675912f53"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1/../file0'}, 0x14) ftruncate(r0, 0x5) 1.489587317s ago: executing program 3 (id=1651): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x960, 0x22265}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8014) 1.487175618s ago: executing program 0 (id=1652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000108, 0x0, 0x9}]}) 1.334086021s ago: executing program 3 (id=1653): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(0x0, 0x0) rename(&(0x7f0000000140)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 813.346882ms ago: executing program 0 (id=1654): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000200)="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", 0x2000, &(0x7f0000002c00)={&(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) 501.255499ms ago: executing program 2 (id=1655): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 399.861311ms ago: executing program 2 (id=1656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000022, 0x0, 0x8000}]}) 319.322923ms ago: executing program 2 (id=1657): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000000209010100000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/172, 0xb}, {&(0x7f0000000480)=""/200, 0xc8}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000840)=""/14, 0x25}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000880)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000600)=""/145, 0x94}, {&(0x7f00000006c0)=""/135}], 0xa}, 0x4cc5a29b}], 0x1, 0x40012020, 0x0) 219.936345ms ago: executing program 2 (id=1658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008001}, 0x20000000) 183.469196ms ago: executing program 2 (id=1659): r0 = syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000080)='./file0\x00', 0x204818, &(0x7f0000000000)=ANY=[@ANYBLOB='utf8,check=strict,cruft,map=off,unhide,iocharset=euc-jp,map=normal,mode=0x0000000000020483,\x00'], 0x1, 0x551, &(0x7f00000003c0)="$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") r1 = epoll_create(0x90) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) epoll_pwait(r1, &(0x7f0000003a80)=[{}], 0x1, 0x6, 0x0, 0x0) 0s ago: executing program 2 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x2c, r2, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80) kernel console output (not intermixed with test programs): mes ready [ 373.246252][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.256170][ T7231] usb 6-1: Using ep0 maxpacket: 8 [ 373.268121][ T7709] device syzkaller0 entered promiscuous mode [ 373.280028][ T7709] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 373.310283][ T7709] tipc: Resetting bearer [ 373.335844][ T7708] tipc: Resetting bearer [ 373.407371][ T7231] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 373.434361][ T7231] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 373.450331][ T7231] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.462354][ T7231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.661424][ T7708] tipc: Disabling bearer [ 373.861834][ T7231] usb 6-1: can't set config #179, error -71 [ 373.908144][ T7231] usb 6-1: USB disconnect, device number 4 [ 375.799218][ T7721] loop4: detected capacity change from 0 to 4096 [ 376.507000][ T7721] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 379.360560][ T7752] loop5: detected capacity change from 0 to 256 [ 380.261841][ T7752] FAT-fs (loop5): Directory bread(block 64) failed [ 380.337257][ T7752] FAT-fs (loop5): Directory bread(block 65) failed [ 380.382681][ T7752] FAT-fs (loop5): Directory bread(block 66) failed [ 380.458937][ T7752] FAT-fs (loop5): Directory bread(block 67) failed [ 380.465531][ T7752] FAT-fs (loop5): Directory bread(block 68) failed [ 381.504609][ T7752] FAT-fs (loop5): Directory bread(block 69) failed [ 381.511856][ T7752] FAT-fs (loop5): Directory bread(block 70) failed [ 381.570616][ T7752] FAT-fs (loop5): Directory bread(block 71) failed [ 381.581033][ T7752] FAT-fs (loop5): Directory bread(block 72) failed [ 381.639254][ T7752] FAT-fs (loop5): Directory bread(block 73) failed [ 383.289399][ T7777] loop5: detected capacity change from 0 to 128 [ 384.114736][ T7785] overlayfs: unrecognized mount option "/" or missing value [ 385.179279][ T7777] FAT-fs (loop5): bogus number of FAT structure [ 385.224507][ T7777] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 385.233871][ T7777] FAT-fs (loop5): Can't find a valid FAT filesystem [ 385.609218][ T7797] tipc: Enabled bearer , priority 0 [ 385.956556][ T7804] device syzkaller0 entered promiscuous mode [ 386.767053][ T7797] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 386.817764][ T7796] tipc: Resetting bearer [ 386.882927][ T7796] tipc: Disabling bearer [ 387.706069][ T7829] loop2: detected capacity change from 0 to 64 [ 390.043341][ T7848] loop0: detected capacity change from 0 to 64 [ 390.172428][ T7853] loop2: detected capacity change from 0 to 128 [ 390.990472][ T7848] hfs: found bad thread record in catalog [ 390.996718][ T7848] hfs: get root inode failed [ 391.338246][ T7839] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.347389][ T7839] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.356458][ T7839] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.365170][ T7839] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.641032][ T7839] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.650570][ T7839] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.659861][ T7839] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.668755][ T7839] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.695711][ T7863] blktrace: Concurrent blktraces are not allowed on sg0 [ 391.746819][ T4705] libceph: connect (1)[c::]:6789 error -101 [ 391.752883][ T4705] libceph: mon0 (1)[c::]:6789 connect error [ 391.789553][ T7865] ceph: No mds server is up or the cluster is laggy [ 392.045615][ T4705] libceph: connect (1)[c::]:6789 error -101 [ 392.070806][ T4705] libceph: mon0 (1)[c::]:6789 connect error [ 392.343837][ T7871] xt_l2tp: unknown flags: 17 [ 393.321845][ T7871] loop4: detected capacity change from 0 to 32768 [ 395.963953][ T7886] tipc: Enabling of bearer rejected, already enabled [ 396.072593][ T26] audit: type=1804 audit(1783357270.377:47): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.788" name="bus" dev="ramfs" ino=46569 res=1 errno=0 [ 397.168756][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.175646][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.557907][ T26] audit: type=1804 audit(1783357270.395:48): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.788" name="bus" dev="ramfs" ino=46569 res=1 errno=0 [ 399.940271][ T7234] libceph: connect (1)[c::]:6789 error -101 [ 399.946319][ T7234] libceph: mon0 (1)[c::]:6789 connect error [ 400.052024][ T7914] ubi0: attaching mtd0 [ 400.074630][ T7914] ubi0: scanning is finished [ 400.079382][ T7914] ubi0: empty MTD device detected [ 400.667537][ T7914] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 401.711976][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 401.718001][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 401.723733][ T7910] ceph: No mds server is up or the cluster is laggy [ 401.891626][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 401.933731][ T7922] ceph: No mds server is up or the cluster is laggy [ 401.971408][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 403.069244][ T4231] libceph: connect (1)[c::]:6789 error -101 [ 403.081293][ T4231] libceph: mon0 (1)[c::]:6789 connect error [ 403.856916][ T7231] libceph: connect (1)[c::]:6789 error -101 [ 403.863050][ T7231] libceph: mon0 (1)[c::]:6789 connect error [ 405.138403][ T7950] loop2: detected capacity change from 0 to 1024 [ 405.175698][ T7950] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 405.234932][ T7950] EXT4-fs (loop2): invalid journal inode [ 405.240654][ T7950] EXT4-fs (loop2): can't get journal size [ 405.281623][ T7950] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 406.126837][ T7963] blktrace: Concurrent blktraces are not allowed on sg0 [ 408.094938][ T4705] libceph: connect (1)[c::]:6789 error -101 [ 408.101079][ T4705] libceph: mon0 (1)[c::]:6789 connect error [ 408.404919][ T4705] libceph: connect (1)[c::]:6789 error -101 [ 409.255215][ T4705] libceph: mon0 (1)[c::]:6789 connect error [ 409.296453][ T7982] ceph: No mds server is up or the cluster is laggy [ 410.549413][ T6037] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 410.570976][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 411.653188][ T8007] device syzkaller0 left promiscuous mode [ 411.719236][ T6037] usb 1-1: device descriptor read/64, error -32 [ 412.975733][ T6037] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 414.012458][ T8023] blktrace: Concurrent blktraces are not allowed on sg0 [ 414.400708][ T8021] loop0: detected capacity change from 0 to 32768 [ 414.490852][ T8021] (syz.0.822,8021,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 414.504643][ T8021] (syz.0.822,8021,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 414.851925][ T8021] JBD2: Ignoring recovery information on journal [ 414.916746][ T8021] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 415.711573][ T8030] ceph: No mds server is up or the cluster is laggy [ 415.727234][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 415.733228][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 417.294239][ T8043] netlink: 256 bytes leftover after parsing attributes in process `syz.2.827'. [ 417.800335][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 419.292379][ T8064] loop5: detected capacity change from 0 to 2048 [ 419.369794][ T8064] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 419.391913][ T8064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.160879][ T8075] loop0: detected capacity change from 0 to 2048 [ 422.192648][ T8075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.190892][ T8076] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 423.261607][ T8086] loop5: detected capacity change from 0 to 4096 [ 423.276292][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 423.290632][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 423.384997][ T8086] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 423.394514][ T8086] EXT4-fs (loop5): inline encryption not supported [ 423.465325][ T8086] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 423.544044][ T8086] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,noblock_validity,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 423.591463][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 423.599801][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 424.135284][ T8083] ceph: No mds server is up or the cluster is laggy [ 424.405214][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 424.411263][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 427.832289][ T8116] loop5: detected capacity change from 0 to 32768 [ 427.867811][ T8116] (syz.5.842,8116,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 427.881889][ T8116] (syz.5.842,8116,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 427.921712][ T8116] JBD2: Ignoring recovery information on journal [ 427.956782][ T8120] device syzkaller0 left promiscuous mode [ 428.010168][ T8120] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 428.034165][ T8116] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 431.681314][ T5573] ocfs2: Unmounting device (7,5) on (node local) [ 433.541459][ T8162] loop4: detected capacity change from 0 to 512 [ 433.592914][ T6397] libceph: connect (1)[c::]:6789 error -101 [ 433.599835][ T6397] libceph: mon0 (1)[c::]:6789 connect error [ 433.616689][ T8162] EXT4-fs (loop4): Ignoring removed orlov option [ 433.801640][ T8162] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 433.903203][ T6397] libceph: connect (1)[c::]:6789 error -101 [ 433.982037][ T6397] libceph: mon0 (1)[c::]:6789 connect error [ 434.015031][ T8162] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.859: corrupted in-inode xattr [ 434.142261][ T8162] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.859: couldn't read orphan inode 15 (err -117) [ 434.317707][ T8162] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 434.477820][ T8167] ceph: No mds server is up or the cluster is laggy [ 434.559183][ T8178] qrtr: Invalid version 0 [ 434.723779][ T23] libceph: connect (1)[c::]:6789 error -101 [ 434.751506][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 436.545331][ T8204] loop3: detected capacity change from 0 to 512 [ 436.916671][ T8204] EXT4-fs (loop3): Unrecognized mount option "func=KEXEC_KERNEL_CHECK" or missing value [ 437.679233][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 437.753307][ T8233] device bridge1 entered promiscuous mode [ 438.364079][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 438.429166][ T8209] ceph: No mds server is up or the cluster is laggy [ 439.291484][ T8240] loop3: detected capacity change from 0 to 32768 [ 439.300967][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 439.347745][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 439.485976][ T8240] (syz.3.869,8240,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 439.500211][ T8240] (syz.3.869,8240,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 440.041568][ T6043] libceph: connect (1)[c::]:6789 error -101 [ 440.263368][ T6043] libceph: mon0 (1)[c::]:6789 connect error [ 440.345279][ T8240] JBD2: Ignoring recovery information on journal [ 440.446593][ T8254] netlink: 96 bytes leftover after parsing attributes in process `syz.2.872'. [ 440.568890][ T8240] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 444.161063][ T8280] loop0: detected capacity change from 0 to 512 [ 444.192881][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 444.227412][ T8280] EXT4-fs (loop0): Ignoring removed orlov option [ 444.246021][ T8280] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 444.582356][ T8280] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.879: corrupted in-inode xattr [ 444.831330][ T8280] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.879: couldn't read orphan inode 15 (err -117) [ 445.080920][ T8280] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 445.608480][ T8313] qrtr: Invalid version 0 [ 446.333571][ T8289] netlink: 256 bytes leftover after parsing attributes in process `syz.3.880'. [ 447.845202][ T8333] loop0: detected capacity change from 0 to 32768 [ 447.968777][ T7234] libceph: connect (1)[c::]:6789 error -101 [ 448.004293][ T7234] libceph: mon0 (1)[c::]:6789 connect error [ 448.029839][ T8333] XFS (loop0): Mounting V5 Filesystem [ 448.118926][ T8333] XFS (loop0): Ending clean mount [ 448.127473][ T8333] XFS (loop0): Quotacheck needed: Please wait. [ 448.204794][ T8333] XFS (loop0): Quotacheck: Done. [ 448.398950][ T6043] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 448.408609][ T5550] libceph: connect (1)[c::]:6789 error -101 [ 448.415005][ T5550] libceph: mon0 (1)[c::]:6789 connect error [ 448.837563][ T8339] ceph: No mds server is up or the cluster is laggy [ 449.067855][ T6043] usb 4-1: Using ep0 maxpacket: 16 [ 449.149991][ T4187] XFS (loop0): Unmounting Filesystem [ 449.219281][ T6043] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 450.115166][ T8364] loop2: detected capacity change from 0 to 32768 [ 450.129104][ T6043] usb 4-1: config 0 interface 0 has no altsetting 0 [ 450.157207][ T6043] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 450.195718][ T6043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.210417][ T8364] (syz.2.894,8364,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 450.224617][ T8364] (syz.2.894,8364,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 450.243014][ T6043] usb 4-1: config 0 descriptor?? [ 450.253176][ T8364] JBD2: Ignoring recovery information on journal [ 450.317664][ T8364] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 450.353233][ T8368] loop5: detected capacity change from 0 to 512 [ 450.399988][ T8368] EXT4-fs (loop5): Ignoring removed orlov option [ 450.406370][ T8368] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 450.663027][ T8368] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.896: corrupted in-inode xattr [ 450.689524][ T8368] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.896: couldn't read orphan inode 15 (err -117) [ 450.714211][ T6043] usbhid 4-1:0.0: can't add hid device: -71 [ 450.898367][ T8368] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 450.924731][ T6043] usbhid: probe of 4-1:0.0 failed with error -71 [ 451.227324][ T6043] usb 4-1: USB disconnect, device number 4 [ 453.312804][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 453.507970][ T8394] netlink: 96 bytes leftover after parsing attributes in process `syz.0.901'. [ 455.847707][ T8397] ceph: No mds server is up or the cluster is laggy [ 456.099044][ T8403] loop2: detected capacity change from 0 to 32768 [ 456.399713][ T7232] libceph: connect (1)[c::]:6789 error -101 [ 456.549873][ T8403] XFS (loop2): Mounting V5 Filesystem [ 456.908506][ T8403] XFS (loop2): Ending clean mount [ 457.552374][ T7232] libceph: mon0 (1)[c::]:6789 connect error [ 457.742214][ T4185] XFS (loop2): Unmounting Filesystem [ 457.759326][ T7231] libceph: connect (1)[c::]:6789 error -101 [ 457.767188][ T7231] libceph: mon0 (1)[c::]:6789 connect error [ 457.800405][ T8420] ceph: No mds server is up or the cluster is laggy [ 458.076563][ T8429] loop3: detected capacity change from 0 to 256 [ 458.164116][ T8430] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 458.172638][ T8430] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 458.181214][ T8430] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 458.222914][ T8429] exfat: Deprecated parameter 'namecase' [ 459.084744][ T8429] exfat: Deprecated parameter 'utf8' [ 459.140575][ T8429] exfat: Deprecated parameter 'namecase' [ 459.147346][ T8429] exfat: Unknown parameter 'namecaõe' [ 459.216653][ T8433] loop0: detected capacity change from 0 to 512 [ 459.787179][ T8433] EXT4-fs (loop0): Ignoring removed orlov option [ 459.807336][ T8433] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 459.843533][ T8433] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.909: corrupted in-inode xattr [ 460.166138][ T8445] loop2: detected capacity change from 0 to 32768 [ 460.384534][ T8433] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.909: couldn't read orphan inode 15 (err -117) [ 460.549583][ T8433] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 460.636649][ T8448] loop4: detected capacity change from 0 to 32768 [ 460.671988][ T8448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.912 (8448) [ 460.690241][ T8445] XFS (loop2): Mounting V5 Filesystem [ 461.388362][ T8448] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 461.397148][ T8448] BTRFS info (device loop4): use zlib compression, level 3 [ 461.404371][ T8448] BTRFS info (device loop4): turning on sync discard [ 461.411170][ T8448] BTRFS info (device loop4): using free space tree [ 461.417733][ T8448] BTRFS info (device loop4): has skinny extents [ 461.835189][ T8445] XFS (loop2): Ending clean mount [ 461.850611][ T8445] XFS (loop2): Quotacheck needed: Please wait. [ 461.958137][ T8481] futex_wake_op: syz.0.914 tries to shift op by 144; fix this program [ 463.042883][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.052505][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.201504][ T8448] BTRFS info (device loop4): enabling ssd optimizations [ 463.451962][ T8445] XFS (loop2): Quotacheck: Done. [ 463.498863][ T4185] XFS (loop2): Unmounting Filesystem [ 464.603830][ T8478] loop5: detected capacity change from 0 to 1024 [ 464.759309][ T8478] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 465.051167][ T8509] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.060393][ T8509] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.069160][ T8509] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.077911][ T8509] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.223419][ T8509] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.232803][ T8509] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.241773][ T8509] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.250816][ T8509] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.464126][ T8519] netlink: 160 bytes leftover after parsing attributes in process `syz.0.922'. [ 465.489303][ T8519] netlink: 160 bytes leftover after parsing attributes in process `syz.0.922'. [ 465.511524][ T8519] netlink: 160 bytes leftover after parsing attributes in process `syz.0.922'. [ 466.054965][ T6398] libceph: connect (1)[c::]:6789 error -101 [ 466.061072][ T6398] libceph: mon0 (1)[c::]:6789 connect error [ 467.674903][ T8538] ceph: No mds server is up or the cluster is laggy [ 468.200177][ T6398] libceph: connect (1)[c::]:6789 error -101 [ 468.268729][ T6398] libceph: mon0 (1)[c::]:6789 connect error [ 468.620416][ T8556] loop0: detected capacity change from 0 to 64 [ 468.892199][ T8567] futex_wake_op: syz.2.928 tries to shift op by 144; fix this program [ 470.306007][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 470.315332][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 470.336671][ T8564] ceph: No mds server is up or the cluster is laggy [ 470.346231][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 470.362661][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 470.656922][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 470.662947][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 470.703472][ T8577] loop5: detected capacity change from 0 to 512 [ 470.806011][ T8579] loop4: detected capacity change from 0 to 256 [ 470.843118][ T8586] loop3: detected capacity change from 0 to 8 [ 470.845250][ T8577] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 470.895781][ T8577] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.911287][ T8579] exfat: Deprecated parameter 'namecase' [ 470.934085][ T8579] exfat: Deprecated parameter 'utf8' [ 471.070936][ T8579] exfat: Deprecated parameter 'namecase' [ 471.171797][ T8579] exfat: Unknown parameter 'namecaõe' [ 471.452552][ T6401] libceph: connect (1)[c::]:6789 error -101 [ 471.480154][ T6401] libceph: mon0 (1)[c::]:6789 connect error [ 472.091639][ T8591] ceph: No mds server is up or the cluster is laggy [ 472.110131][ T6398] libceph: connect (1)[c::]:6789 error -101 [ 472.116517][ T6398] libceph: mon0 (1)[c::]:6789 connect error [ 474.553695][ T8607] netlink: 160 bytes leftover after parsing attributes in process `syz.2.936'. [ 474.576175][ T8607] netlink: 160 bytes leftover after parsing attributes in process `syz.2.936'. [ 474.677042][ T8607] netlink: 160 bytes leftover after parsing attributes in process `syz.2.936'. [ 474.713665][ T8616] loop3: detected capacity change from 0 to 1024 [ 474.766080][ T8616] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 475.016249][ T8620] overlayfs: unrecognized mount option "/" or missing value [ 475.551198][ T8630] ALSA: mixer_oss: invalid OSS volume 'Ÿ(' [ 477.891201][ T8652] futex_wake_op: syz.5.945 tries to shift op by 144; fix this program [ 478.993228][ T8646] loop0: detected capacity change from 0 to 8192 [ 479.115704][ T8646] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 479.207922][ T8659] loop5: detected capacity change from 0 to 8 [ 479.213643][ T8646] REISERFS (device loop0): using ordered data mode [ 479.220585][ T8646] reiserfs: using flush barriers [ 479.264558][ T8646] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 479.355389][ T8646] REISERFS (device loop0): checking transaction log (loop0) [ 479.371822][ T8662] loop2: detected capacity change from 0 to 16 [ 479.474364][ T8646] REISERFS (device loop0): Using r5 hash to sort names [ 479.503705][ T8646] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 479.753436][ T8662] erofs: (device loop2): mounted with root inode @ nid 36. [ 480.292936][ T8684] ubi0: attaching mtd0 [ 480.302429][ T8684] ubi0: scanning is finished [ 481.103148][ T8684] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 481.787865][ T6042] libceph: connect (1)[c::]:6789 error -101 [ 481.797028][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 482.449790][ T6042] libceph: connect (1)[c::]:6789 error -101 [ 482.462733][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 482.571580][ T8694] ceph: No mds server is up or the cluster is laggy [ 483.228943][ T6042] libceph: connect (1)[c::]:6789 error -101 [ 483.241033][ T6042] libceph: mon0 (1)[c::]:6789 connect error [ 483.274448][ T8707] netlink: 160 bytes leftover after parsing attributes in process `syz.5.951'. [ 483.302422][ T8707] netlink: 160 bytes leftover after parsing attributes in process `syz.5.951'. [ 483.316094][ T8707] netlink: 160 bytes leftover after parsing attributes in process `syz.5.951'. [ 483.390097][ T8710] overlayfs: unrecognized mount option "/" or missing value [ 484.859503][ T8720] netlink: 160 bytes leftover after parsing attributes in process `syz.0.969'. [ 484.868817][ T8720] netlink: 160 bytes leftover after parsing attributes in process `syz.0.969'. [ 484.878484][ T8720] netlink: 160 bytes leftover after parsing attributes in process `syz.0.969'. [ 485.024121][ T8723] loop4: detected capacity change from 0 to 8192 [ 485.337459][ T8723] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 485.401682][ T8723] REISERFS (device loop4): using ordered data mode [ 485.434094][ T8723] reiserfs: using flush barriers [ 485.473085][ T8723] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 485.573426][ T8723] REISERFS (device loop4): checking transaction log (loop4) [ 485.587601][ T8723] REISERFS (device loop4): Using r5 hash to sort names [ 485.609174][ T8723] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 485.701144][ T6042] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 486.221771][ T6042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 486.264298][ T6042] usb 6-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 486.274611][ T6042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.305929][ T6042] usb 6-1: config 0 descriptor?? [ 486.340363][ T8733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 486.364803][ T6042] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 488.149319][ T3543] bcm5974 6-1:0.0: could not read from device [ 488.173366][ T6042] usb 6-1: USB disconnect, device number 5 [ 489.689200][ T8765] loop5: detected capacity change from 0 to 512 [ 490.138191][ T8765] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 490.398043][ T8765] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.942642][ T8793] netlink: 160 bytes leftover after parsing attributes in process `syz.3.981'. [ 492.994158][ T8793] netlink: 160 bytes leftover after parsing attributes in process `syz.3.981'. [ 493.087073][ T8793] netlink: 160 bytes leftover after parsing attributes in process `syz.3.981'. [ 493.129916][ T8795] loop5: detected capacity change from 0 to 32768 [ 493.244318][ T8795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.976 (8795) [ 493.280033][ T8795] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 493.289264][ T8795] BTRFS info (device loop5): metadata ratio 0 [ 493.295508][ T8795] BTRFS info (device loop5): turning on sync discard [ 493.302246][ T8795] BTRFS info (device loop5): using free space tree [ 493.308844][ T8795] BTRFS info (device loop5): has skinny extents [ 493.608012][ T8803] loop2: detected capacity change from 0 to 8192 [ 494.538253][ T8803] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 494.548150][ T8803] FAT-fs (loop2): Filesystem has been set read-only [ 495.137555][ T8799] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 495.622139][ T8795] BTRFS info (device loop5): enabling ssd optimizations [ 495.698541][ T8824] loop3: detected capacity change from 0 to 164 [ 496.231471][ T8824] rock: directory entry would overflow storage [ 496.243542][ T8824] rock: sig=0x66, size=4, remaining=3 [ 497.415233][ T26] audit: type=1800 audit(1783357363.048:49): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.976" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 497.711901][ T8841] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 497.720438][ T8841] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 497.729232][ T8841] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 500.208790][ T8853] loop2: detected capacity change from 0 to 256 [ 500.218643][ T8853] exfat: Bad value for 'fmask' [ 500.716015][ T8857] loop3: detected capacity change from 0 to 64 [ 500.776570][ T8865] netlink: 160 bytes leftover after parsing attributes in process `syz.4.994'. [ 500.839609][ T8865] netlink: 160 bytes leftover after parsing attributes in process `syz.4.994'. [ 500.855365][ T8865] netlink: 160 bytes leftover after parsing attributes in process `syz.4.994'. [ 500.903798][ T8863] loop5: detected capacity change from 0 to 4096 [ 501.031335][ T8863] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 503.344899][ T5573] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 504.249537][ T8884] loop5: detected capacity change from 0 to 131072 [ 504.895907][ T8884] F2FS-fs (loop5): invalid crc value [ 504.952808][ T8895] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 506.024681][ T8884] F2FS-fs (loop5): Found nat_bits in checkpoint [ 506.059913][ T8884] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 506.091154][ T8884] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 506.318185][ T26] audit: type=1326 audit(1783357372.160:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.2.1003" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d75a0ce59 code=0x0 [ 507.587656][ T8917] loop3: detected capacity change from 0 to 4096 [ 507.630126][ T8917] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 507.639704][ T8917] EXT4-fs (loop3): inline encryption not supported [ 507.674019][ T8917] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 507.708232][ T8917] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,noblock_validity,nodelalloc,norecovery,delalloc,usrquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 507.880520][ T8921] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1006'. [ 507.923807][ T8921] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1006'. [ 507.946949][ T8921] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1006'. [ 509.453049][ T8932] xt_l2tp: unknown flags: 17 [ 510.543768][ T8932] loop2: detected capacity change from 0 to 32768 [ 511.809458][ T8942] loop5: detected capacity change from 0 to 32768 [ 512.858406][ T8942] XFS (loop5): Mounting V5 Filesystem [ 513.665579][ T8954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 513.691883][ T8966] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1014'. [ 514.229570][ T8942] XFS (loop5): Ending clean mount [ 514.241329][ T8942] XFS (loop5): Quotacheck needed: Please wait. [ 514.378029][ T8979] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1018'. [ 514.416363][ T8942] XFS (loop5): Quotacheck: Done. [ 514.422328][ T8979] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1018'. [ 514.527067][ T8979] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1018'. [ 515.028813][ T5573] XFS (loop5): Unmounting Filesystem [ 515.072112][ T8990] loop4: detected capacity change from 0 to 512 [ 515.087092][ T8981] loop3: detected capacity change from 0 to 4096 [ 515.125470][ T8990] EXT4-fs (loop4): Ignoring removed orlov option [ 515.136701][ T8990] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 515.812582][ T8990] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1021: corrupted in-inode xattr [ 515.864883][ T8990] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1021: couldn't read orphan inode 15 (err -117) [ 515.916930][ T8990] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 518.969572][ T9015] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1028'. [ 519.337571][ T9017] loop3: detected capacity change from 0 to 512 [ 519.749537][ T9017] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 519.946132][ T9017] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.508056][ T9029] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 522.428481][ T9044] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1033'. [ 522.493918][ T9044] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1033'. [ 522.531610][ T9044] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1033'. [ 525.689214][ T9079] loop3: detected capacity change from 0 to 4096 [ 525.824628][ T6398] libceph: connect (1)[c::]:6789 error -101 [ 525.830677][ T6398] libceph: mon0 (1)[c::]:6789 connect error [ 525.897124][ T9079] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 526.480522][ T6398] libceph: connect (1)[c::]:6789 error -101 [ 526.494873][ T6398] libceph: mon0 (1)[c::]:6789 connect error [ 526.726844][ T9084] ceph: No mds server is up or the cluster is laggy [ 527.070148][ T9094] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1044'. [ 527.129148][ T9094] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1044'. [ 527.166332][ T6398] libceph: connect (1)[c::]:6789 error -101 [ 527.172594][ T6398] libceph: mon0 (1)[c::]:6789 connect error [ 527.225919][ T9094] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1044'. [ 528.742347][ T9117] loop5: detected capacity change from 0 to 1024 [ 528.808067][ T9117] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 528.816959][ T9117] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 528.816959][ T9117] [ 528.827785][ T9117] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 529.593908][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.600515][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.166859][ T9121] loop4: detected capacity change from 0 to 512 [ 530.254146][ T9121] EXT4-fs (loop4): Ignoring removed orlov option [ 530.353652][ T9121] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 530.475025][ T9121] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1052: corrupted in-inode xattr [ 531.218842][ T9121] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1052: couldn't read orphan inode 15 (err -117) [ 531.399705][ T9121] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 534.663304][ T9154] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1060'. [ 534.713536][ T9154] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1060'. [ 534.724000][ T9154] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1060'. [ 534.736264][ T7234] libceph: connect (1)[c::]:6789 error -101 [ 534.775921][ T9157] ceph: No mds server is up or the cluster is laggy [ 534.816462][ T7234] libceph: mon0 (1)[c::]:6789 connect error [ 537.247069][ T9184] loop3: detected capacity change from 0 to 512 [ 537.283649][ T9188] loop5: detected capacity change from 0 to 512 [ 537.334551][ T9184] EXT4-fs (loop3): Ignoring removed orlov option [ 537.400344][ T9184] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 537.445616][ T9188] EXT4-fs error (device loop5): ext4_fill_super:4872: inode #2: comm syz.5.1068: inode has both inline data and extents flags [ 537.483630][ T9184] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1066: corrupted in-inode xattr [ 537.507202][ T9188] EXT4-fs (loop5): get root inode failed [ 537.540463][ T9188] EXT4-fs (loop5): mount failed [ 537.551010][ T9184] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1066: couldn't read orphan inode 15 (err -117) [ 537.715289][ T9184] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 537.723013][ T9206] loop4: detected capacity change from 0 to 512 [ 538.071917][ T9206] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 538.245023][ T9206] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.054596][ T9219] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1074'. [ 539.064051][ T9219] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1074'. [ 539.076257][ T9219] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1074'. [ 539.926939][ T9225] loop3: detected capacity change from 0 to 4096 [ 540.062791][ T9225] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 540.132656][ T9229] loop5: detected capacity change from 0 to 16 [ 540.169029][ T9229] erofs: Unknown parameter 'ãé' [ 542.713075][ T4191] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 544.330424][ T9249] tmpfs: Unknown parameter 'quota' [ 544.910769][ T9262] loop3: detected capacity change from 0 to 1024 [ 545.097081][ T9262] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 545.583477][ T9262] EXT4-fs (loop3): invalid journal inode [ 545.589195][ T9262] EXT4-fs (loop3): can't get journal size [ 545.688138][ T6045] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 545.852158][ T9271] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1088'. [ 545.852458][ T9262] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 545.872264][ T9271] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1088'. [ 546.178536][ T9271] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1088'. [ 546.409801][ T9267] loop0: detected capacity change from 0 to 4096 [ 546.670922][ T6045] usb 6-1: Using ep0 maxpacket: 32 [ 547.210141][ T9267] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 547.280572][ T6045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.402189][ T6045] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.538469][ T6045] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 547.769686][ T6045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.812967][ T6045] usb 6-1: config 0 descriptor?? [ 549.414620][ T6045] usbhid 6-1:0.0: can't add hid device: -71 [ 549.424745][ T6045] usbhid: probe of 6-1:0.0 failed with error -71 [ 549.727224][ T6045] usb 6-1: USB disconnect, device number 6 [ 550.026048][ T9301] fuse: Bad value for 'fd' [ 552.815479][ T7234] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 552.832645][ T9299] loop5: detected capacity change from 0 to 8192 [ 553.981123][ T9320] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1100'. [ 554.101764][ T9320] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1100'. [ 554.125334][ T9299] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 554.134376][ T9299] FAT-fs (loop5): Filesystem has been set read-only [ 554.374044][ T9320] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1100'. [ 554.618130][ T9333] mmap: syz.4.1103 (9333) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 556.222717][ T9299] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 556.254420][ T9336] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 556.258941][ T9344] loop4: detected capacity change from 0 to 4096 [ 557.005316][ T9344] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 559.178384][ T9364] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1111'. [ 559.206801][ T9364] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1111'. [ 559.216516][ T9364] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1111'. [ 559.333878][ T9366] loop5: detected capacity change from 0 to 64 [ 559.531962][ T9373] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1116'. [ 559.767006][ T9373] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1116'. [ 560.238805][ T9373] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1116'. [ 561.165866][ T9397] lo speed is unknown, defaulting to 1000 [ 562.564066][ T9403] loop4: detected capacity change from 0 to 4096 [ 562.744834][ T9413] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1126'. [ 562.777971][ T9413] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1126'. [ 562.788970][ T9413] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1126'. [ 563.187294][ T9412] loop0: detected capacity change from 0 to 32768 [ 564.133708][ T9423] loop2: detected capacity change from 0 to 512 [ 564.170824][ T9428] loop5: detected capacity change from 0 to 16 [ 564.282421][ T9428] erofs: Unknown parameter 'ãé' [ 564.288856][ T9412] XFS (loop0): Mounting V5 Filesystem [ 564.315617][ T9423] EXT4-fs (loop2): Ignoring removed orlov option [ 564.354241][ T9423] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 564.533465][ T9412] XFS (loop0): Ending clean mount [ 564.604615][ T9440] atomic_op ffff888020199998 conn xmit_atomic 0000000000000000 [ 564.718724][ T9423] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1127: corrupted in-inode xattr [ 564.765735][ T9412] XFS (loop0): Quotacheck needed: Please wait. [ 564.942268][ T9423] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1127: couldn't read orphan inode 15 (err -117) [ 565.200445][ T9423] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 565.978169][ T9412] XFS (loop0): Quotacheck: Done. [ 566.070965][ T4187] XFS (loop0): Unmounting Filesystem [ 568.405268][ T9458] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 568.432136][ T9458] CIFS mount error: No usable UNC path provided in device string! [ 568.432136][ T9458] [ 568.442463][ T9458] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.926895][ T9469] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1138'. [ 569.954427][ T9469] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1138'. [ 570.006203][ T9469] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1138'. [ 570.293448][ T9484] loop5: detected capacity change from 0 to 64 [ 572.111953][ T9497] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1144'. [ 572.157407][ T9505] loop4: detected capacity change from 0 to 512 [ 572.177690][ T9497] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1144'. [ 572.286719][ T9497] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1144'. [ 572.377920][ T9505] EXT4-fs (loop4): Ignoring removed orlov option [ 572.409124][ T9505] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 572.934049][ T9505] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1146: corrupted in-inode xattr [ 573.015310][ T9505] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1146: couldn't read orphan inode 15 (err -117) [ 573.060617][ T9505] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 575.804676][ T9538] loop5: detected capacity change from 0 to 8192 [ 576.140898][ T9538] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 576.150313][ T9538] REISERFS (device loop5): using ordered data mode [ 576.156948][ T9538] reiserfs: using flush barriers [ 576.162769][ T9538] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 576.179643][ T9538] REISERFS (device loop5): checking transaction log (loop5) [ 577.331383][ T9538] REISERFS (device loop5): Using r5 hash to sort names [ 577.751093][ T26] audit: type=1800 audit(1783357438.113:51): pid=9553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1152" name="/" dev="fuse" ino=1 res=0 errno=0 [ 577.873401][ T9559] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 579.267044][ T9567] loop4: detected capacity change from 0 to 512 [ 580.967720][ T9567] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 581.798947][ T9567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 582.230846][ T9567] EXT4-fs (loop4): orphan cleanup on readonly fs [ 582.382015][ T9593] netlink: 484 bytes leftover after parsing attributes in process `syz.5.1161'. [ 583.015437][ T9567] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1155: bad orphan inode 3 [ 583.072536][ T9567] EXT4-fs (loop4): Remounting filesystem read-only [ 583.104480][ T9599] loop5: detected capacity change from 0 to 512 [ 583.122275][ T9567] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback. Quota mode: none. [ 583.194113][ T9599] EXT4-fs (loop5): Ignoring removed orlov option [ 583.222293][ T9599] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 583.239426][ T9604] loop0: detected capacity change from 0 to 256 [ 583.276439][ T9599] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1162: corrupted in-inode xattr [ 583.298389][ T9604] FAT-fs (loop0): Unrecognized mount option "nnumtail" or missing value [ 583.347766][ T9599] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1162: couldn't read orphan inode 15 (err -117) [ 583.398066][ T9599] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 583.534710][ T7232] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 583.756148][ T9618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.957173][ T7232] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 584.753888][ T7232] usb 3-1: config 0 has no interface number 0 [ 584.762956][ T7232] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 585.582236][ T7232] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 585.598896][ T9630] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1171'. [ 585.608145][ T7232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.651514][ T7232] usb 3-1: Product: syz [ 585.703038][ T9630] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1171'. [ 585.712651][ T7232] usb 3-1: Manufacturer: syz [ 585.725325][ T7232] usb 3-1: SerialNumber: syz [ 585.735672][ T9630] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1171'. [ 587.651448][ T9638] loop5: detected capacity change from 0 to 32768 [ 587.751581][ T9645] loop0: detected capacity change from 0 to 64 [ 588.058810][ T9645] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop0 [ 588.986921][ T7232] usb 3-1: config 0 descriptor?? [ 589.026482][ T7232] usb 3-1: can't set config #0, error -71 [ 589.034892][ T7232] usb 3-1: USB disconnect, device number 10 [ 589.335412][ T9660] loop2: detected capacity change from 0 to 512 [ 590.252268][ T9660] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 590.389555][ T9660] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.872163][ T9673] loop4: detected capacity change from 0 to 256 [ 593.107212][ T9673] FAT-fs (loop4): Unrecognized mount option "nnumtail" or missing value [ 595.438971][ T9698] loop5: detected capacity change from 0 to 512 [ 595.874469][ T9694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1187'. [ 596.044009][ T9698] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 596.080709][ T9694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1187'. [ 596.141696][ T9698] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 596.146856][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 596.156159][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.173459][ T9694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1187'. [ 599.075176][ T9725] loop0: detected capacity change from 0 to 8 [ 599.228118][ T9725] SQUASHFS error: zlib decompression failed, data probably corrupt [ 599.260158][ T9725] SQUASHFS error: Failed to read block 0x9b: -5 [ 599.440493][ T9725] SQUASHFS error: Unable to read metadata cache entry [99] [ 599.851727][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 599.891648][ T9725] SQUASHFS error: Unable to read inode 0x127 [ 600.122006][ T9745] loop4: detected capacity change from 0 to 512 [ 600.198568][ T9748] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1200'. [ 600.236081][ T9745] EXT4-fs (loop4): Invalid log cluster size: 234881024 [ 600.274789][ T9748] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1200'. [ 600.295167][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060a22c00: rx timeout, send abort [ 600.377926][ T9748] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1200'. [ 600.838875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806058d400: rx timeout, send abort [ 600.978988][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060a22c00: abort rx timeout. Force session deactivation [ 601.121491][ T9755] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1201'. [ 601.152427][ T9755] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1201'. [ 601.156535][ T9761] loop2: detected capacity change from 0 to 512 [ 601.169448][ T9755] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1201'. [ 601.388735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806058d400: abort rx timeout. Force session deactivation [ 601.635789][ T9761] FAT-fs (loop2): bogus number of FAT sectors [ 601.708557][ T9761] FAT-fs (loop2): Can't find a valid FAT filesystem [ 601.970915][ T9770] loop4: detected capacity change from 0 to 512 [ 602.142715][ T9770] EXT4-fs (loop4): Ignoring removed orlov option [ 602.153559][ T9770] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 602.204905][ T9770] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1205: corrupted in-inode xattr [ 602.233650][ T9770] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1205: couldn't read orphan inode 15 (err -117) [ 602.267832][ T9770] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 602.292626][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.697764][ T9793] lo speed is unknown, defaulting to 1000 [ 602.704148][ T9793] lo speed is unknown, defaulting to 1000 [ 602.717557][ T9793] lo speed is unknown, defaulting to 1000 [ 602.770695][ T9793] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 602.856078][ T9793] lo speed is unknown, defaulting to 1000 [ 602.945443][ T9793] lo speed is unknown, defaulting to 1000 [ 602.957678][ T9793] lo speed is unknown, defaulting to 1000 [ 602.970262][ T9793] lo speed is unknown, defaulting to 1000 [ 602.982688][ T9793] lo speed is unknown, defaulting to 1000 [ 603.864610][ T9798] loop0: detected capacity change from 0 to 1764 [ 606.712126][ T9814] loop2: detected capacity change from 0 to 8 [ 606.728622][ T9816] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1213'. [ 606.742166][ T9816] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1213'. [ 606.758399][ T9816] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1213'. [ 606.810326][ T9817] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1215'. [ 606.813997][ T9814] SQUASHFS error: lzo decompression failed, data probably corrupt [ 606.834899][ T9817] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1215'. [ 606.846758][ T9817] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1215'. [ 606.859185][ T9814] SQUASHFS error: Failed to read block 0x91: -5 [ 606.865468][ T9814] SQUASHFS error: Unable to read metadata cache entry [8f] [ 606.879619][ T9814] SQUASHFS error: Unable to read inode 0x7 [ 607.117369][ T9825] loop4: detected capacity change from 0 to 4096 [ 607.214664][ T9828] loop5: detected capacity change from 0 to 8192 [ 607.321706][ T9828] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 607.385361][ T9825] ntfs: volume version 3.1. [ 607.517573][ T9828] REISERFS (device loop5): using ordered data mode [ 607.552423][ T9828] reiserfs: using flush barriers [ 607.629732][ T9828] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 607.723654][ T9828] REISERFS (device loop5): checking transaction log (loop5) [ 607.807958][ T9828] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.5*[0 2 0x0 UNKNOWN], item_len 48, item_location 4004, free_space(entry_count) 0 [ 607.841565][ T9828] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 607.852127][ T9828] REISERFS (device loop5): Remounting filesystem read-only [ 607.962828][ T9828] REISERFS error (device loop5): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 607.978714][ T9828] REISERFS warning (device loop5): reiserfs_fill_super: corrupt root inode, run fsck [ 608.136126][ T6039] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 608.394523][ T9854] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1229'. [ 608.416854][ T9854] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1229'. [ 608.427782][ T6039] usb 5-1: Using ep0 maxpacket: 32 [ 608.437770][ T9854] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1229'. [ 608.470319][ T9856] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1228'. [ 608.605426][ T4228] libceph: connect (1)[c::]:6789 error -101 [ 608.610448][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 608.615643][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 608.625672][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 608.643999][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 608.648518][ T9860] ceph: No mds server is up or the cluster is laggy [ 608.660617][ T6039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 608.840276][ T9873] loop2: detected capacity change from 0 to 512 [ 608.876858][ T9877] loop5: detected capacity change from 0 to 256 [ 608.892603][ T6039] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 608.918048][ T9873] EXT4-fs (loop2): Ignoring removed orlov option [ 608.929549][ T9877] FAT-fs (loop5): bogus number of FAT sectors [ 608.930340][ T9873] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 608.943830][ T6039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.952554][ T6039] usb 5-1: Product: syz [ 608.956828][ T6039] usb 5-1: Manufacturer: syz [ 608.959067][ T9877] FAT-fs (loop5): Can't find a valid FAT filesystem [ 608.962483][ T6039] usb 5-1: SerialNumber: syz [ 608.976335][ T9873] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1235: corrupted in-inode xattr [ 608.990471][ T9873] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1235: couldn't read orphan inode 15 (err -117) [ 608.990957][ T6039] usb 5-1: config 0 descriptor?? [ 609.043962][ T9873] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 609.119922][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.221989][ T9891] loop5: detected capacity change from 0 to 128 [ 609.239711][ T4229] usb 1-1: config 7 has an invalid interface number: 83 but max is 0 [ 609.248410][ T4229] usb 1-1: config 7 has no interface number 0 [ 609.274905][ T9891] omfs: sysblock number (f784317bf884317b) is out of range [ 609.294249][ T4229] usb 1-1: config 7 interface 83 has no altsetting 0 [ 609.404166][ T6045] usb 5-1: USB disconnect, device number 9 [ 609.531448][ T4229] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=68.62 [ 609.550811][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.599974][ T4229] usb 1-1: Product: syz [ 609.614441][ T4229] usb 1-1: Manufacturer: syz [ 609.627179][ T4229] usb 1-1: SerialNumber: syz [ 609.881852][ T9906] loop2: detected capacity change from 0 to 512 [ 609.919982][ T9906] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.942866][ T9906] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 610.089621][ T4229] usb 1-1: USB disconnect, device number 6 [ 610.210008][ T7232] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 610.787814][ T7232] usb 6-1: Using ep0 maxpacket: 32 [ 611.109805][ T7232] usb 6-1: config 247 has an invalid interface number: 177 but max is 0 [ 611.142032][ T7232] usb 6-1: config 247 has no interface number 0 [ 611.256893][ T7232] usb 6-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 611.487144][ T7232] usb 6-1: config 247 interface 177 altsetting 246 endpoint 0xD has an invalid bInterval 185, changing to 11 [ 611.695994][ T9913] loop4: detected capacity change from 0 to 32768 [ 611.716338][ T7232] usb 6-1: config 247 interface 177 altsetting 246 bulk endpoint 0xC has invalid maxpacket 1023 [ 611.736934][ T7232] usb 6-1: config 247 interface 177 has no altsetting 0 [ 611.928397][ T9913] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 611.943528][ T9935] loop2: detected capacity change from 0 to 256 [ 611.970431][ T9913] JBD2: Ignoring recovery information on journal [ 612.050375][ T9935] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 612.148300][ T9935] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 612.211747][ T9935] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 612.241670][ T9913] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 612.247008][ T7232] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4 [ 612.259739][ T7232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.267018][ T9935] UDF-fs: Scanning with blocksize 512 failed [ 612.268205][ T7232] usb 6-1: Product: syz [ 612.278892][ T7232] usb 6-1: Manufacturer: syz [ 612.303372][ T7232] usb 6-1: SerialNumber: syz [ 612.321677][ T9935] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 612.337481][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 612.348721][ T9904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 612.363334][ T9935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 612.376212][ T9904] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 612.516271][ T9943] loop4: detected capacity change from 0 to 512 [ 612.538268][ T9943] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 612.569296][ T9946] __nla_validate_parse: 17 callbacks suppressed [ 612.569346][ T9946] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1263'. [ 612.600555][ T9943] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.1262: bad orphan inode 15 [ 612.617702][ T9943] EXT4-fs (loop4): Remounting filesystem read-only [ 612.629578][ T9943] ext4_test_bit(bit=14, block=18) = 1 [ 612.634975][ T9943] is_bad_inode(inode)=0 [ 612.640111][ T6039] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 612.669633][ T9943] NEXT_ORPHAN(inode)=1023 [ 612.674387][ T9943] max_ino=32 [ 612.677588][ T9943] i_nlink=0 [ 612.693420][ T9943] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1262: corrupted inode contents [ 612.710364][ T9943] EXT4-fs (loop4): Remounting filesystem read-only [ 612.717175][ T9943] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #15: comm syz.4.1262: mark_inode_dirty error [ 612.730744][ T7232] kvaser_usb 6-1:247.177: Cannot get usb endpoint(s) [ 612.741912][ T9943] EXT4-fs (loop4): Remounting filesystem read-only [ 612.745951][ T7232] usb 6-1: USB disconnect, device number 7 [ 612.762463][ T9943] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.1262: corrupted inode contents [ 612.787270][ T9943] EXT4-fs (loop4): Remounting filesystem read-only [ 612.808854][ T9943] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2954: inode #15: comm syz.4.1262: mark_inode_dirty error [ 612.839807][ T9943] EXT4-fs (loop4): Remounting filesystem read-only [ 612.839871][ T9943] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #15: comm syz.4.1262: mark inode dirty (error -117) [ 612.840180][ T9943] EXT4-fs (loop4): Remounting filesystem read-only [ 612.840197][ T9943] EXT4-fs warning (device loop4): ext4_evict_inode:304: xattr delete (err -117) [ 612.840307][ T9943] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,errors=remount-ro,. Quota mode: none. [ 612.840546][ T9943] ext2 filesystem being mounted at /254/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 612.913186][ T6039] usb 1-1: Using ep0 maxpacket: 16 [ 613.051869][ T6039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 613.269238][ T6039] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 613.327529][ T6039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.448711][ T6039] usb 1-1: Product: syz [ 613.501420][ T6039] usb 1-1: Manufacturer: syz [ 613.568196][ T6039] usb 1-1: SerialNumber: syz [ 613.621195][ T9957] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1267'. [ 613.700466][ T6039] usb 1-1: config 0 descriptor?? [ 613.740302][ T9957] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1267'. [ 613.749899][ T9957] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1267'. [ 613.795086][ T9961] loop4: detected capacity change from 0 to 8 [ 613.801353][ T4228] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 613.820899][ T9959] loop5: detected capacity change from 0 to 4096 [ 613.862845][ T9961] SQUASHFS error: zlib decompression failed, data probably corrupt [ 613.876125][ T9959] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 613.916630][ T6039] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 613.926018][ T9961] SQUASHFS error: Failed to read block 0x9b: -5 [ 613.936239][ T9966] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1270'. [ 613.966903][ T9961] SQUASHFS error: Unable to read metadata cache entry [99] [ 613.974378][ T9961] SQUASHFS error: Unable to read inode 0x127 [ 613.980941][ T9966] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1270'. [ 613.991226][ T9966] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1270'. [ 614.003680][ T9959] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 614.012888][ T9959] ntfs: (device loop5): ntfs_read_inode_mount(): ntfs_mapping_pairs_decompress() failed with error code -5. $MFT is corrupt. [ 614.026206][ T9959] ntfs: (device loop5): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 614.035584][ T9959] ntfs: (device loop5): ntfs_fill_super(): Failed to load essential metadata. [ 614.091515][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 614.139022][ T7233] usb 1-1: USB disconnect, device number 7 [ 614.145737][ T154] usb 1-1: Failed to submit usb control message: -71 [ 614.153316][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 614.190185][ T154] usb 1-1: unable to get target info from device [ 614.206706][ T9973] loop4: detected capacity change from 0 to 256 [ 614.221464][ T154] usb 1-1: could not get target info (-71) [ 614.241655][ T154] usb 1-1: could not probe fw (-71) [ 614.264869][ T4228] usb 3-1: unable to get BOS descriptor or descriptor too short [ 614.373239][ T4228] usb 3-1: config 4 interface 0 has no altsetting 0 [ 614.424265][ T9973] FAT-fs (loop4): Directory bread(block 64) failed [ 614.449326][ T9973] FAT-fs (loop4): Directory bread(block 65) failed [ 614.456134][ T9973] FAT-fs (loop4): Directory bread(block 66) failed [ 614.469674][ T9973] FAT-fs (loop4): Directory bread(block 67) failed [ 614.476656][ T9973] FAT-fs (loop4): Directory bread(block 68) failed [ 614.512516][ T9973] FAT-fs (loop4): Directory bread(block 69) failed [ 614.530544][ T9973] FAT-fs (loop4): Directory bread(block 70) failed [ 614.541452][ T9973] FAT-fs (loop4): Directory bread(block 71) failed [ 614.548692][ T9973] FAT-fs (loop4): Directory bread(block 72) failed [ 614.566948][ T9973] FAT-fs (loop4): Directory bread(block 73) failed [ 614.580291][ T9983] loop5: detected capacity change from 0 to 16 [ 614.623332][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 614.671821][ T9983] erofs: (device loop5): mounted with root inode @ nid 36. [ 614.684802][ T9986] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1279'. [ 614.698374][ T4228] usb 3-1: string descriptor 0 read error: -22 [ 614.704651][ T4228] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 614.729726][ T9986] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1279'. [ 614.735834][ T4228] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 614.840902][ T4228] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 614.885815][ T4228] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 614.904026][ T9993] loop4: detected capacity change from 0 to 1024 [ 615.052967][ T4228] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 615.063789][ T4228] usb 3-1: media controller created [ 615.081370][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 615.121806][T10001] loop0: detected capacity change from 0 to 2048 [ 615.380999][ T9993] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=1 [ 615.544975][ T9993] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 615.713322][ T9993] EXT4-fs (loop4): mount failed [ 615.771692][T10001] UDF-fs: iocharset cp1ˆ@S ꆑ not found [ 615.930199][T10010] loop5: detected capacity change from 0 to 16 [ 615.976695][T10010] erofs: Unknown parameter 'ãé' [ 615.993926][T10012] loop4: detected capacity change from 0 to 64 [ 616.258823][ T4228] zl10353_read_register: readreg error (reg=127, ret==0) [ 616.358483][T10024] atomic_op ffff88802b537198 conn xmit_atomic 0000000000000000 [ 616.964314][ T4228] usb 3-1: USB disconnect, device number 11 [ 617.226065][T10045] tmpfs: Bad value for 'mpol' [ 617.998488][T10062] loop2: detected capacity change from 0 to 2048 [ 618.088039][T10069] __nla_validate_parse: 21 callbacks suppressed [ 618.088054][T10069] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1314'. [ 618.133211][T10062] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 618.151999][T10062] UDF-fs: Scanning with blocksize 512 failed [ 618.163896][T10069] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1314'. [ 618.168706][T10062] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 618.180461][T10069] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1314'. [ 618.181322][T10062] UDF-fs: Scanning with blocksize 1024 failed [ 618.196671][T10075] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1316'. [ 618.205726][T10075] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1316'. [ 618.216227][T10062] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 618.224140][T10075] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1316'. [ 618.238236][T10062] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 618.246312][T10062] UDF-fs: Scanning with blocksize 2048 failed [ 618.272336][T10062] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 618.289049][T10062] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 618.297795][T10079] loop4: detected capacity change from 0 to 2048 [ 618.311037][T10062] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 618.319339][T10062] UDF-fs: Scanning with blocksize 4096 failed [ 618.325464][T10062] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 618.365443][T10079] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 618.378978][ T4509] udevd[4509]: incorrect nilfs2 checksum on /dev/loop4 [ 618.420421][T10084] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 618.431359][ T7233] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 618.440846][T10079] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 618.453248][ T4228] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 618.488667][T10079] Remounting filesystem read-only [ 618.505476][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 618.550161][T10088] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1321'. [ 618.568220][T10088] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1321'. [ 618.587203][T10088] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1321'. [ 618.623974][T10090] loop2: detected capacity change from 0 to 128 [ 618.695096][ T7233] usb 1-1: Using ep0 maxpacket: 8 [ 618.724067][ T4228] usb 6-1: Using ep0 maxpacket: 32 [ 618.736000][T10090] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 618.860780][ T4228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.879356][ T7233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 618.971215][T10105] loop4: detected capacity change from 0 to 4096 [ 618.982180][ T7233] usb 1-1: config 208 has an invalid interface number: 35 but max is 2 [ 619.001660][ T7233] usb 1-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 619.018673][ T7233] usb 1-1: config 208 has 1 interface, different from the descriptor's value: 3 [ 619.032123][T10105] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 619.042911][ T7233] usb 1-1: config 208 has no interface number 0 [ 619.050028][ T7233] usb 1-1: config 208 interface 35 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 619.069398][ T7233] usb 1-1: config 208 interface 35 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 619.082440][ T4228] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 619.092044][ T4228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.103076][ T7233] usb 1-1: config 208 interface 35 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 619.116712][ T4228] usb 6-1: Product: syz [ 619.121329][ T4228] usb 6-1: Manufacturer: syz [ 619.125938][ T4228] usb 6-1: SerialNumber: syz [ 619.130994][ T7233] usb 1-1: config 208 interface 35 has no altsetting 0 [ 619.144250][T10105] ntfs3: loop4: MFT: r=0, expect seq=1 instead of 0! [ 619.150580][ T4228] usb 6-1: config 0 descriptor?? [ 619.170709][T10105] ntfs3: loop4: Failed to load $MFT. [ 619.216345][ T4228] usb 6-1: bad CDC descriptors [ 619.222995][ T4228] usb 6-1: unsupported MDLM descriptors [ 619.301711][ T7233] usb 1-1: Dual-Role OTG device on HNP port [ 619.334103][ T7233] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8e.6d [ 619.357666][ T7233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.401029][ T7233] usb 1-1: Product: syz [ 619.415007][ T7233] usb 1-1: Manufacturer: syz [ 619.419757][ T7233] usb 1-1: SerialNumber: syz [ 619.428530][ T4228] usb 6-1: USB disconnect, device number 8 [ 619.846339][ T7233] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 619.988488][T10146] loop2: detected capacity change from 0 to 4096 [ 620.208861][T10146] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 620.439047][ T7233] command write [95] error -22 [ 620.454798][ T7233] usb 1-1: USB disconnect, device number 8 [ 620.643462][T10155] loop5: detected capacity change from 0 to 16 [ 620.650049][T10157] loop4: detected capacity change from 0 to 1764 [ 620.659439][T10160] loop0: detected capacity change from 0 to 2048 [ 620.731878][T10155] erofs: Unknown parameter 'ãé' [ 620.799144][T10160] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 620.983814][T10160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 621.031932][T10164] loop2: detected capacity change from 0 to 512 [ 621.107732][T10165] atomic_op ffff888020c33998 conn xmit_atomic 0000000000000000 [ 621.257965][T10164] EXT4-fs (loop2): Ignoring removed orlov option [ 621.343761][T10164] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 621.597918][T10164] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.1353: corrupted in-inode xattr [ 621.750941][T10164] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1353: couldn't read orphan inode 15 (err -117) [ 621.802512][T10182] loop4: detected capacity change from 0 to 1024 [ 621.854102][T10164] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 621.878932][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.886161][T10177] EXT4-fs (loop0): Ignoring removed bh option [ 621.990272][T10177] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,bh,errors=remount-ro,. Quota mode: none. [ 622.039417][T10177] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.1357: deleted inode referenced: 12 [ 622.102468][T10177] EXT4-fs (loop0): Remounting filesystem read-only [ 622.110244][T10191] erofs: Unknown parameter 'ãé' [ 622.181364][T10188] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 622.520923][T10199] atomic_op ffff88802274e198 conn xmit_atomic 0000000000000000 [ 623.130831][T10202] erofs: (device loop2): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms 2 [ 623.175631][T10205] EXT4-fs (loop4): Ignoring removed orlov option [ 623.186559][T10205] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 623.210312][T10205] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1368: corrupted in-inode xattr [ 623.257354][T10204] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 623.309363][T10204] EXT4-fs (loop0): inline encryption not supported [ 623.378492][T10205] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1368: couldn't read orphan inode 15 (err -117) [ 623.381690][T10204] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 623.406965][T10205] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 623.431684][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.438555][T10204] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 623.460569][T10204] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 623.502909][T10204] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 623.512600][T10204] EXT4-fs (loop0): orphan cleanup on readonly fs [ 623.566661][T10204] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1366: bg 0: block 34: padding at end of block bitmap is not set [ 623.574940][T10217] set_capacity_and_notify: 6 callbacks suppressed [ 623.574956][T10217] loop5: detected capacity change from 0 to 512 [ 623.695966][T10217] EXT4-fs (loop5): Ignoring removed orlov option [ 623.735220][T10217] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 623.747771][T10204] Quota error (device loop0): write_blk: dquota write failed [ 623.829433][T10204] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 623.839400][T10204] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1366: Failed to acquire dquot type 1 [ 624.143796][T10217] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1373: corrupted in-inode xattr [ 624.156417][T10204] EXT4-fs (loop0): 1 truncate cleaned up [ 624.173748][T10217] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1373: couldn't read orphan inode 15 (err -117) [ 624.198607][T10204] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,acl,max_dir_size_kb=0x0000000000000001,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,inlinecrypt,sysvgroups,,errors=continue. Quota mode: writeback. [ 624.224866][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.238387][T10225] loop4: detected capacity change from 0 to 8 [ 624.245582][T10212] loop2: detected capacity change from 0 to 32768 [ 624.252081][T10217] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 624.312836][T10225] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 624.313025][T10212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1371 (10212) [ 624.321805][T10204] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 624.482729][T10231] loop5: detected capacity change from 0 to 512 [ 624.514763][T10231] EXT4-fs (loop5): Ignoring removed bh option [ 624.535690][T10212] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 624.596094][T10212] BTRFS info (device loop2): force clearing of disk cache [ 624.619759][T10212] BTRFS info (device loop2): metadata ratio 0 [ 624.622001][T10231] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 624.626531][T10212] BTRFS info (device loop2): enabling ssd optimizations [ 624.646646][T10212] BTRFS info (device loop2): using spread ssd allocation scheme [ 624.654657][T10212] BTRFS info (device loop2): using free space tree [ 624.661395][T10212] BTRFS info (device loop2): has skinny extents [ 624.739261][T10231] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.819702][T10236] ceph: No mds server is up or the cluster is laggy [ 624.827165][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 624.833375][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 625.176304][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 625.193071][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 625.238840][T10261] __nla_validate_parse: 21 callbacks suppressed [ 625.238857][T10261] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1384'. [ 625.281939][T10261] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1384'. [ 625.375007][T10261] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1384'. [ 625.725876][T10212] BTRFS info (device loop2): clearing free space tree [ 625.733614][T10212] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 625.744278][T10250] loop0: detected capacity change from 0 to 32768 [ 625.912392][T10250] XFS (loop0): Mounting V5 Filesystem [ 625.954161][T10212] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 626.353397][T10288] loop5: detected capacity change from 0 to 512 [ 626.381861][T10250] XFS (loop0): Ending clean mount [ 626.413684][T10288] EXT4-fs (loop5): Ignoring removed orlov option [ 626.503472][T10292] loop4: detected capacity change from 0 to 256 [ 626.509987][T10288] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 626.522743][T10212] BTRFS info (device loop2): creating free space tree [ 626.535903][T10288] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1388: corrupted in-inode xattr [ 626.551161][T10212] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 626.556374][T10288] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1388: couldn't read orphan inode 15 (err -117) [ 626.579391][T10288] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 626.637075][T10212] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 626.682630][T10292] FAT-fs (loop4): Directory bread(block 64) failed [ 626.692925][ T4187] XFS (loop0): Unmounting Filesystem [ 626.700583][T10292] FAT-fs (loop4): Directory bread(block 65) failed [ 626.707210][T10292] FAT-fs (loop4): Directory bread(block 66) failed [ 626.743609][T10292] FAT-fs (loop4): Directory bread(block 67) failed [ 626.791771][T10292] FAT-fs (loop4): Directory bread(block 68) failed [ 626.808019][T10292] FAT-fs (loop4): Directory bread(block 69) failed [ 626.816490][T10292] FAT-fs (loop4): Directory bread(block 70) failed [ 626.833655][T10292] FAT-fs (loop4): Directory bread(block 71) failed [ 626.841220][T10292] FAT-fs (loop4): Directory bread(block 72) failed [ 626.860841][T10292] FAT-fs (loop4): Directory bread(block 73) failed [ 627.435363][T10305] loop4: detected capacity change from 0 to 512 [ 627.580112][T10305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 627.621094][T10305] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.725551][T10305] Quota error (device loop4): find_tree_dqentry: Getting block too big (2382364675 >= 6) [ 627.736339][T10305] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 627.771476][T10316] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1398'. [ 627.781037][T10305] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1396: Failed to acquire dquot type 1 [ 627.815031][T10316] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1398'. [ 627.895250][T10316] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1398'. [ 628.141622][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'. [ 628.204921][T10330] loop5: detected capacity change from 0 to 256 [ 628.733176][T10330] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe906d648, utbl_chksum : 0xe619d30d) [ 628.831861][T10334] loop4: detected capacity change from 0 to 8192 [ 628.859487][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 628.868511][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 628.918687][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 628.963720][T10330] exFAT-fs (loop5): Filesystem has been set read-only [ 628.987858][T10334] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 628.998252][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 0, err : -5) [ 629.039531][T10334] REISERFS (device loop4): using ordered data mode [ 629.102507][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 629.108821][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 0, err : -5) [ 629.108870][T10334] reiserfs: using flush barriers [ 629.118944][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 629.119020][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 1, err : -5) [ 629.140741][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 629.146879][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 2, err : -5) [ 629.837234][T10334] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 629.861433][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 629.903443][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 3, err : -5) [ 630.242369][T10334] REISERFS (device loop4): checking transaction log (loop4) [ 630.252873][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.258913][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 4, err : -5) [ 630.269631][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.276532][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 5, err : -5) [ 630.290322][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.297183][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 6, err : -5) [ 630.308186][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.314196][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 7, err : -5) [ 630.348743][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.360906][T10330] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805a9b94e0 iblock : 0, err : -5) [ 630.389671][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.420618][T10352] loop0: detected capacity change from 0 to 4096 [ 630.452031][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.459804][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.465813][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.482988][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.489519][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.499794][T10330] exFAT-fs (loop5): error, broken FAT chain. [ 630.532871][T10352] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 630.552443][T10334] REISERFS (device loop4): Using tea hash to sort names [ 630.578253][T10334] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 630.639541][T10352] ntfs3: loop0: Failed to load $Extend. [ 630.877771][ T7234] libceph: connect (1)[c::]:6789 error -101 [ 630.890006][ T7234] libceph: mon0 (1)[c::]:6789 connect error [ 630.904812][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 630.930743][T10362] ceph: No mds server is up or the cluster is laggy [ 631.498783][T10373] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1419'. [ 631.508307][T10373] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1419'. [ 631.541901][T10373] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1419'. [ 631.835751][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 632.819490][ T26] audit: type=1400 audit(1783357488.935:52): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10393 comm="syz.2.1426" [ 632.876311][T10376] loop4: detected capacity change from 0 to 32768 [ 632.895626][T10397] loop0: detected capacity change from 0 to 512 [ 632.923222][ T6039] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 632.963940][T10376] (syz.4.1418,10376,1):ocfs2_read_journal_inode:1600 ERROR: status = -13 [ 632.982182][T10376] (syz.4.1418,10376,1):ocfs2_mark_dead_nodes:1885 ERROR: status = -13 [ 632.990785][T10376] (syz.4.1418,10376,1):ocfs2_check_volume:2481 ERROR: status = -13 [ 632.998842][T10376] (syz.4.1418,10376,1):ocfs2_check_volume:2493 ERROR: status = -13 [ 633.006878][T10376] (syz.4.1418,10376,1):ocfs2_mount_volume:1824 ERROR: status = -13 [ 633.037093][T10397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 633.119792][T10397] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.137828][T10397] Quota error (device loop0): find_tree_dqentry: Getting block too big (2382364675 >= 6) [ 633.140649][T10376] (syz.4.1418,10376,0):ocfs2_fill_super:1177 ERROR: status = -13 [ 633.148248][T10397] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 633.165323][T10397] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1429: Failed to acquire dquot type 1 [ 633.188942][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 633.350800][ T6039] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 633.359908][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.416898][ T6039] usb 6-1: config 0 descriptor?? [ 633.455268][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 633.712250][ T4228] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 633.827731][T10419] netlink: 'syz.2.1436': attribute type 2 has an invalid length. [ 633.835716][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1436'. [ 633.927135][ T6039] ath6kl: Failed to submit usb control message: -71 [ 633.933803][ T6039] ath6kl: unable to send the bmi data to the device: -71 [ 634.152433][ T4228] usb 1-1: config 2 has an invalid interface number: 3 but max is 0 [ 634.176028][ T4228] usb 1-1: config 2 has no interface number 0 [ 634.221938][ T4228] usb 1-1: config 2 interface 3 has no altsetting 0 [ 634.397181][ T6039] ath6kl: Unable to send get target info: -71 [ 634.412152][ T6039] ath6kl: Failed to init ath6kl core: -71 [ 634.435684][ T6039] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 634.444758][ T6039] usb 6-1: USB disconnect, device number 9 [ 634.466494][ T4228] usb 1-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.a2 [ 634.493878][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.565636][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1439'. [ 634.589510][T10430] loop4: detected capacity change from 0 to 512 [ 634.607070][ T4228] usb 1-1: Product: syz [ 634.617525][ T4228] usb 1-1: Manufacturer: syz [ 634.622886][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1444'. [ 634.625795][ T4228] usb 1-1: SerialNumber: syz [ 634.676158][T10430] EXT4-fs (loop4): Ignoring removed orlov option [ 634.693820][T10430] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 634.720875][T10438] netlink: 'syz.3.1445': attribute type 41 has an invalid length. [ 634.726411][T10430] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1441: corrupted in-inode xattr [ 634.748735][T10430] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1441: couldn't read orphan inode 15 (err -117) [ 634.751509][T10443] loop2: detected capacity change from 0 to 1024 [ 634.768693][T10430] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 634.957662][T10443] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 634.997218][T10443] hfsplus: xattr searching failed [ 635.051964][ T4228] usb 1-1: bad CDC descriptors [ 635.093319][ T4228] usb 1-1: USB disconnect, device number 9 [ 635.754974][T10451] loop0: detected capacity change from 0 to 16 [ 635.908226][T10451] erofs: Unknown parameter 'ãé' [ 636.202003][T10465] atomic_op ffff888025813998 conn xmit_atomic 0000000000000000 [ 636.629286][T10467] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 636.679302][T10469] __nla_validate_parse: 1 callbacks suppressed [ 636.679317][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 636.918628][T10477] netlink: 'syz.0.1461': attribute type 2 has an invalid length. [ 636.938159][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 637.053429][T10483] loop2: detected capacity change from 0 to 256 [ 637.134530][T10483] exfat: Deprecated parameter 'namecase' [ 637.208831][T10490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 637.254950][T10483] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 637.616621][T10504] syz.4.1472[10504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.728877][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1473'. [ 637.968726][T10509] loop4: detected capacity change from 0 to 256 [ 638.064901][T10509] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xe906d648, utbl_chksum : 0xe619d30d) [ 638.113816][T10495] loop0: detected capacity change from 0 to 32768 [ 638.419995][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 638.426037][T10509] exFAT-fs (loop4): Filesystem has been set read-only [ 638.434541][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 0, err : -5) [ 638.463577][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 638.498720][T10495] JBD2: Ignoring recovery information on journal [ 638.507913][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 0, err : -5) [ 638.519409][T10502] loop2: detected capacity change from 0 to 32768 [ 638.539017][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 638.578130][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 1, err : -5) [ 638.592648][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 638.599525][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 2, err : -5) [ 638.610269][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 638.617407][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 3, err : -5) [ 638.628096][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 638.638819][T10502] XFS (loop2): Mounting V5 Filesystem [ 638.656385][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 4, err : -5) [ 638.743270][T10495] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 639.030509][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.067168][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 5, err : -5) [ 639.083513][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.090326][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 6, err : -5) [ 639.101806][T10502] XFS (loop2): Ending clean mount [ 639.122514][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.131733][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 7, err : -5) [ 639.144929][ T4185] XFS (loop2): Unmounting Filesystem [ 639.145815][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.156238][T10509] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805a9ba860 iblock : 0, err : -5) [ 639.232246][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.238284][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.296428][T10525] sctp: [Deprecated]: syz.5.1477 (pid 10525) Use of int in maxseg socket option. [ 639.296428][T10525] Use struct sctp_assoc_value instead [ 639.296569][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.296588][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.361414][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.380887][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.387622][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 639.435198][T10509] exFAT-fs (loop4): error, broken FAT chain. [ 639.631781][T10529] loop4: detected capacity change from 0 to 64 [ 639.775331][T10537] loop0: detected capacity change from 0 to 256 [ 639.843247][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 639.994974][T10543] loop2: detected capacity change from 0 to 4096 [ 640.104506][T10549] loop5: detected capacity change from 0 to 512 [ 640.121411][T10548] loop4: detected capacity change from 0 to 512 [ 640.137561][T10552] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.172365][T10548] EXT4-fs (loop4): Ignoring removed orlov option [ 640.207393][T10548] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 640.221770][T10549] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 640.238989][T10556] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 640.249871][T10556] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 640.337522][T10548] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1489: corrupted in-inode xattr [ 640.441369][T10549] EXT4-fs (loop5): 1 truncate cleaned up [ 640.556244][T10548] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1489: couldn't read orphan inode 15 (err -117) [ 640.568367][T10549] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 640.680695][T10548] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 640.939414][T10571] loop5: detected capacity change from 0 to 1024 [ 640.991071][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'. [ 641.012565][T10571] hfsplus: failed to load root directory [ 641.081380][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'. [ 641.515149][T10581] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 641.641632][T10581] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 641.718132][T10581] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 641.744121][T10581] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1501: Failed to acquire dquot type 1 [ 642.081439][T10593] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1504'. [ 642.118368][T10585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1502 (10585) [ 642.139658][T10593] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1504'. [ 642.186598][T10585] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 642.193613][T10593] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1504'. [ 642.212239][T10585] BTRFS info (device loop2): using free space tree [ 642.232918][T10597] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.260322][T10585] BTRFS info (device loop2): has skinny extents [ 642.265418][ T26] audit: type=1800 audit(1783357497.659:53): pid=10595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1505" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 642.366844][T10604] erofs: Unknown parameter 'ãé' [ 642.601142][T10585] BTRFS info (device loop2): enabling ssd optimizations [ 642.668725][T10622] atomic_op ffff8880244ff198 conn xmit_atomic 0000000000000000 [ 642.763556][ T6039] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 643.088481][ T6039] usb 6-1: Using ep0 maxpacket: 32 [ 643.229364][ T6039] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 643.318364][ T6039] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 643.346791][ T6039] usb 6-1: config 0 interface 0 has no altsetting 0 [ 643.436263][ T6039] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 643.559293][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.822331][ T6039] usb 6-1: config 0 descriptor?? [ 644.063439][ T4704] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 644.300112][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 644.384451][ T4704] usb 5-1: Using ep0 maxpacket: 8 [ 644.392739][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.400372][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.407789][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.415844][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.424271][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.434874][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.443706][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.451142][ T6039] corsair-psu 0003:1B1C:1C07.0004: unknown main item tag 0x0 [ 644.461897][ T6039] corsair-psu 0003:1B1C:1C07.0004: item fetching failed at offset 38/39 [ 644.471364][ T6039] corsair-psu: probe of 0003:1B1C:1C07.0004 failed with error -22 [ 644.593343][ T4704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 644.605452][ T4509] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4509) [ 644.623791][ T6041] usb 6-1: USB disconnect, device number 10 [ 644.708394][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 644.818489][ T4704] usb 5-1: config 208 has an invalid interface number: 35 but max is 2 [ 644.827144][ T4704] usb 5-1: config 208 has an invalid descriptor of length 0, skipping remainder of the config [ 644.839112][ T4704] usb 5-1: config 208 has 1 interface, different from the descriptor's value: 3 [ 644.852103][T10641] ceph: No mds server is up or the cluster is laggy [ 644.882051][ T4704] usb 5-1: config 208 has no interface number 0 [ 644.916064][ T4704] usb 5-1: config 208 interface 35 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 644.962452][ T4704] usb 5-1: config 208 interface 35 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 644.983263][ T4704] usb 5-1: config 208 interface 35 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 645.003485][ T4704] usb 5-1: config 208 interface 35 has no altsetting 0 [ 645.052056][ T6041] libceph: connect (1)[c::]:6789 error -101 [ 645.062540][ T6041] libceph: mon0 (1)[c::]:6789 connect error [ 645.222474][ T4704] usb 5-1: Dual-Role OTG device on HNP port [ 645.284371][ T4704] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8e.6d [ 645.340458][ T4704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.385819][ T4704] usb 5-1: Product: syz [ 645.421922][ T4704] usb 5-1: Manufacturer: syz [ 645.466680][ T4704] usb 5-1: SerialNumber: syz [ 645.514423][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 645.522241][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 645.533520][T10653] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1516'. [ 645.656080][T10656] set_capacity_and_notify: 4 callbacks suppressed [ 645.656094][T10656] loop0: detected capacity change from 0 to 512 [ 645.676040][T10653] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1516'. [ 645.717378][T10653] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1516'. [ 645.752297][T10656] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 645.790922][T10656] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.828587][T10664] loop5: detected capacity change from 0 to 16 [ 645.860079][ T4704] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 645.871166][ T4704] command write [95] error -22 [ 645.938214][ T4704] usb 5-1: USB disconnect, device number 10 [ 646.024677][T10664] erofs: Unknown parameter 'ãé' [ 646.387138][T10673] atomic_op ffff88802031a198 conn xmit_atomic 0000000000000000 [ 646.892108][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'. [ 647.421271][T10690] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1530'. [ 647.480239][T10680] loop5: detected capacity change from 0 to 32768 [ 647.485175][T10690] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1530'. [ 647.621756][T10702] __nla_validate_parse: 1 callbacks suppressed [ 647.621773][T10702] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1533'. [ 647.655228][T10681] loop0: detected capacity change from 0 to 32768 [ 647.673313][T10702] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1533'. [ 647.703871][T10680] XFS (loop5): Mounting V5 Filesystem [ 647.796217][T10681] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.1525 (10681) [ 647.982415][T10702] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1533'. [ 648.226653][T10680] XFS (loop5): Ending clean mount [ 648.356109][T10681] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 648.478179][T10681] BTRFS info (device loop0): enabling ssd optimizations [ 648.507587][T10681] BTRFS info (device loop0): not using ssd optimizations [ 648.514681][T10681] BTRFS info (device loop0): turning off barriers [ 648.521820][T10681] BTRFS info (device loop0): use no compression [ 648.530891][T10681] BTRFS info (device loop0): using free space tree [ 648.537470][T10681] BTRFS info (device loop0): has skinny extents [ 648.659321][ T5573] XFS (loop5): Unmounting Filesystem [ 648.774975][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 648.939359][T10730] loop2: detected capacity change from 0 to 8192 [ 649.330303][T10747] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1543'. [ 649.391414][T10747] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1543'. [ 649.458259][T10747] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1543'. [ 649.522850][T10752] atomic_op ffff888077693198 conn xmit_atomic 0000000000000000 [ 650.312161][T10762] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1546'. [ 650.354906][T10762] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1546'. [ 650.388114][T10762] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1546'. [ 650.675152][T10759] loop2: detected capacity change from 0 to 32768 [ 650.760334][T10759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1545 (10759) [ 650.844130][T10759] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 650.858209][T10759] BTRFS info (device loop2): setting nodatasum [ 650.864600][T10759] BTRFS info (device loop2): disabling tree log [ 650.872445][T10759] BTRFS info (device loop2): max_inline at 0 [ 650.878796][T10759] BTRFS info (device loop2): turning on sync discard [ 650.885753][T10759] BTRFS info (device loop2): using free space tree [ 650.893668][T10759] BTRFS info (device loop2): has skinny extents [ 650.934980][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 650.941029][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 650.969685][T10772] ceph: No mds server is up or the cluster is laggy [ 651.008637][T10765] loop4: detected capacity change from 0 to 32768 [ 651.102840][T10765] XFS (loop4): Mounting V5 Filesystem [ 651.239263][T10759] BTRFS info (device loop2): enabling ssd optimizations [ 651.269174][T10766] libceph: connect (1)[c::]:6789 error -101 [ 651.275184][T10766] libceph: mon0 (1)[c::]:6789 connect error [ 651.378318][T10765] XFS (loop4): Ending clean mount [ 651.444520][ T26] audit: type=1800 audit(1783357506.144:54): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1545" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 651.505514][ T4188] XFS (loop4): Unmounting Filesystem [ 651.846608][T10775] loop0: detected capacity change from 0 to 40427 [ 652.084025][T10775] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 652.093290][T10766] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 652.152391][T10775] F2FS-fs (loop0): invalid crc value [ 652.259484][T10775] F2FS-fs (loop0): invalid crc value [ 652.306474][T10775] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 652.362276][T10766] usb 6-1: Using ep0 maxpacket: 32 [ 652.436916][T10837] ceph: No mds server is up or the cluster is laggy [ 652.451954][T10830] libceph: connect (1)[c::]:6789 error -101 [ 652.512320][T10766] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 652.514344][T10830] libceph: mon0 (1)[c::]:6789 connect error [ 652.531562][T10766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 652.551003][T10766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 652.739793][T10766] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 652.759952][T10766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.795891][T10766] usb 6-1: Product: syz [ 652.800119][T10766] usb 6-1: Manufacturer: syz [ 652.839043][T10766] usb 6-1: SerialNumber: syz [ 652.868551][T10766] usb 6-1: config 0 descriptor?? [ 652.913694][T10766] hub 6-1:0.0: bad descriptor, ignoring hub [ 652.919639][T10766] hub: probe of 6-1:0.0 failed with error -5 [ 652.966585][T10766] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13 [ 653.016216][T10766] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 653.057296][T10859] loop0: detected capacity change from 0 to 2048 [ 653.061436][T10863] loop4: detected capacity change from 0 to 8192 [ 653.095680][T10766] usbtouchscreen: probe of 6-1:0.0 failed with error -90 [ 653.122639][T10863] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 653.175191][T10859] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 653.219013][T10766] usb 6-1: USB disconnect, device number 11 [ 653.303814][T10863] REISERFS (device loop4): using ordered data mode [ 653.310368][T10863] reiserfs: using flush barriers [ 653.313478][T10859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.337088][T10870] __nla_validate_parse: 5 callbacks suppressed [ 653.337103][T10870] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1571'. [ 653.360326][T10863] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 653.393258][T10870] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1571'. [ 653.403168][T10863] REISERFS (device loop4): checking transaction log (loop4) [ 653.425336][T10870] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1571'. [ 653.582475][T10873] comedi comedi1: board detection failed [ 653.587658][T10875] loop0: detected capacity change from 0 to 512 [ 653.606391][T10863] REISERFS (device loop4): Using tea hash to sort names [ 653.634864][T10863] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 653.650701][T10875] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 653.673046][T10875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 653.679355][T10863] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 653.700815][T10875] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 653.738442][T10875] EXT4-fs (loop0): 1 truncate cleaned up [ 653.744126][T10875] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 653.935660][T10863] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 654.003070][T10863] REISERFS (device loop4): Remounting filesystem read-only [ 654.270683][T10886] loop0: detected capacity change from 0 to 128 [ 654.360471][T10886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 654.413494][T10886] hpfs: filesystem error: improperly stopped [ 654.440261][T10886] hpfs: You really don't want any checks? You are crazy... [ 654.464930][T10886] hpfs: hpfs_map_sector(): read error [ 654.478762][T10886] hpfs: code page support is disabled [ 654.490114][T10897] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1584'. [ 654.507830][T10886] hpfs: hpfs_map_4sectors(): unaligned read [ 654.514568][T10886] hpfs: hpfs_map_4sectors(): unaligned read [ 654.525652][T10886] hpfs: filesystem error: unable to find root dir [ 654.534338][T10897] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1584'. [ 654.549069][T10897] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1584'. [ 654.578574][T10886] hpfs: hpfs_map_4sectors(): unaligned read [ 654.650948][T10903] loop4: detected capacity change from 0 to 128 [ 654.700712][T10903] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 654.789286][T10908] loop0: detected capacity change from 0 to 8 [ 654.843066][T10903] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.889068][T10908] SQUASHFS error: Unable to read directory block [249:c] [ 654.901605][T10910] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.909585][T10910] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.947950][T10903] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 655.032682][T10912] loop5: detected capacity change from 0 to 512 [ 655.180155][T10912] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 655.207438][T10912] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.397333][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.566271][T10930] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1598'. [ 655.625926][T10930] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1598'. [ 655.658824][T10833] libceph: connect (1)[c::]:6789 error -101 [ 655.681370][T10833] libceph: mon0 (1)[c::]:6789 connect error [ 655.693110][T10930] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1598'. [ 655.709085][T10934] ceph: No mds server is up or the cluster is laggy [ 655.928254][T10927] loop5: detected capacity change from 0 to 32768 [ 656.000070][T10943] loop4: detected capacity change from 0 to 16 [ 656.057770][T10927] JBD2: Ignoring recovery information on journal [ 656.076352][T10943] erofs: Unknown parameter 'ãé' [ 656.314892][T10927] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 656.356738][T10949] atomic_op ffff888022f45998 conn xmit_atomic 0000000000000000 [ 656.865854][T10947] FAT-fs (loop0): Directory bread(block 64) failed [ 656.909952][T10947] FAT-fs (loop0): Directory bread(block 65) failed [ 656.916604][T10947] FAT-fs (loop0): Directory bread(block 66) failed [ 657.028145][T10947] FAT-fs (loop0): Directory bread(block 67) failed [ 657.075810][T10947] FAT-fs (loop0): Directory bread(block 68) failed [ 657.082401][T10947] FAT-fs (loop0): Directory bread(block 69) failed [ 657.118780][T10947] FAT-fs (loop0): Directory bread(block 70) failed [ 657.136588][ T5573] ocfs2: Unmounting device (7,5) on (node local) [ 657.139987][T10953] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 657.169986][T10947] FAT-fs (loop0): Directory bread(block 71) failed [ 657.187794][T10947] FAT-fs (loop0): Directory bread(block 72) failed [ 657.199977][T10947] FAT-fs (loop0): Directory bread(block 73) failed [ 657.308268][T10962] set_capacity_and_notify: 2 callbacks suppressed [ 657.308282][T10962] loop4: detected capacity change from 0 to 512 [ 657.322185][T10953] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 657.432808][T10964] loop5: detected capacity change from 0 to 256 [ 657.513080][T10969] loop2: detected capacity change from 0 to 64 [ 657.568494][T10962] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,sysvgroups,grpjquota=,. Quota mode: writeback. [ 657.605353][T10962] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.653287][T10976] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1614'. [ 658.006502][T10992] loop4: detected capacity change from 0 to 512 [ 658.126533][T10983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.273412][T10992] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 658.357623][T10992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 658.358091][T10992] System zones: 1-12 [ 658.366105][T10992] EXT4-fs (loop4): orphan cleanup on readonly fs [ 658.378893][T10992] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1617: invalid indirect mapped block 12 (level 1) [ 658.424798][T10992] EXT4-fs (loop4): Remounting filesystem read-only [ 658.425145][T10992] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1617: invalid indirect mapped block 2 (level 2) [ 658.432981][T10992] EXT4-fs (loop4): Remounting filesystem read-only [ 658.449363][T10992] EXT4-fs (loop4): 1 truncate cleaned up [ 658.450157][T10992] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none. [ 658.836654][T11003] input: syz1 as /devices/virtual/input/input14 [ 658.930300][ T4509] udevd[4509]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 658.952370][T11009] loop5: detected capacity change from 0 to 1024 [ 658.968045][ T4229] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 658.988246][ T4509] udevd[4509]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 659.059572][T11015] usb usb8: usbfs: process 11015 (syz.4.1628) did not claim interface 0 before use [ 659.205586][T11021] __nla_validate_parse: 2 callbacks suppressed [ 659.205601][T11021] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1630'. [ 659.227917][T11021] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1630'. [ 659.230073][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 659.237577][T11021] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1630'. [ 659.429631][ T4229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 659.481350][ T4229] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 659.578600][ T4229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 659.606845][ T4229] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 659.689375][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.767102][ T4229] usb 3-1: config 0 descriptor?? [ 660.367143][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x3 [ 660.428227][T11045] loop5: detected capacity change from 0 to 512 [ 660.452031][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.464810][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.490399][T11047] loop0: detected capacity change from 0 to 128 [ 660.497762][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.504986][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.538651][T11045] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 660.612069][T11050] program syz.4.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.632475][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.643651][T11045] EXT4-fs (loop5): 1 truncate cleaned up [ 660.668385][T11045] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 660.687125][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.720154][ T4229] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0 [ 660.772312][ T4229] hid-led: probe of 0003:0FC5:B080.0005 failed with error -71 [ 660.826589][ T4229] usb 3-1: USB disconnect, device number 12 [ 660.892655][ T6962] attempt to access beyond end of device [ 660.892655][ T6962] loop0: rw=1, want=1041, limit=128 [ 661.123048][T11063] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 661.305679][T11074] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 661.411997][ T7234] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 662.239129][ T7234] usb 5-1: Using ep0 maxpacket: 16 [ 662.287954][T11067] loop5: detected capacity change from 0 to 32768 [ 662.391075][ T7234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.406012][T11067] JBD2: Ignoring recovery information on journal [ 662.434461][ T7234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.462882][ T7234] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 662.476157][ T7234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.497923][ T7234] usb 5-1: config 0 descriptor?? [ 662.534950][T11067] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 662.571011][T11101] loop2: detected capacity change from 0 to 164 [ 662.697325][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 662.703753][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.755073][T11067] [ 662.757441][T11067] ====================================================== [ 662.764454][T11067] WARNING: possible circular locking dependency detected [ 662.771576][T11067] syzkaller #0 Not tainted [ 662.775996][T11067] ------------------------------------------------------ [ 662.783062][T11067] syz.5.1648/11067 is trying to acquire lock: [ 662.789165][T11067] ffff88805abc5be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 662.800855][T11067] [ 662.800855][T11067] but task is already holding lock: [ 662.808223][T11067] ffff88805abc5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x360 [ 662.818861][T11067] [ 662.818861][T11067] which lock already depends on the new lock. [ 662.818861][T11067] [ 662.829269][T11067] [ 662.829269][T11067] the existing dependency chain (in reverse order) is: [ 662.838289][T11067] [ 662.838289][T11067] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 662.846390][T11067] down_read+0x44/0x2e0 [ 662.851198][T11067] ocfs2_init_acl+0x307/0x770 [ 662.856472][T11067] ocfs2_mknod+0x15de/0x2510 [ 662.861659][T11067] ocfs2_create+0x192/0x420 [ 662.866699][T11067] path_openat+0x120a/0x2fb0 [ 662.871934][T11067] do_filp_open+0x1df/0x400 [ 662.876977][T11067] do_sys_openat2+0x14b/0x500 [ 662.882185][T11067] __x64_sys_openat+0x135/0x160 [ 662.887567][T11067] do_syscall_64+0x4c/0xa0 [ 662.892564][T11067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 662.898989][T11067] [ 662.898989][T11067] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 662.907512][T11067] down_read+0x44/0x2e0 [ 662.912208][T11067] ocfs2_start_trans+0x3a6/0x6f0 [ 662.917685][T11067] ocfs2_shutdown_local_alloc+0x1f3/0xac0 [ 662.924095][T11067] ocfs2_dismount_volume+0x1e1/0x890 [ 662.930014][T11067] generic_shutdown_super+0x130/0x300 [ 662.936007][T11067] kill_block_super+0x7c/0xe0 [ 662.941217][T11067] deactivate_locked_super+0x93/0xf0 [ 662.947044][T11067] cleanup_mnt+0x426/0x4d0 [ 662.952022][T11067] task_work_run+0x125/0x1a0 [ 662.957222][T11067] exit_to_user_mode_loop+0x10f/0x130 [ 662.963201][T11067] exit_to_user_mode_prepare+0xee/0x180 [ 662.969319][T11067] syscall_exit_to_user_mode+0x16/0x40 [ 662.975400][T11067] do_syscall_64+0x58/0xa0 [ 662.980351][T11067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 662.986786][T11067] [ 662.986786][T11067] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 662.994277][T11067] ocfs2_start_trans+0x2a7/0x6f0 [ 662.999760][T11067] ocfs2_write_begin_nolock+0x207c/0x44b0 [ 663.006019][T11067] ocfs2_write_begin+0x1b4/0x310 [ 663.011490][T11067] generic_perform_write+0x2b6/0x550 [ 663.017385][T11067] __generic_file_write_iter+0x261/0x4e0 [ 663.023551][T11067] ocfs2_file_write_iter+0x171a/0x1ee0 [ 663.029635][T11067] vfs_write+0x748/0xd70 [ 663.034489][T11067] ksys_write+0x153/0x260 [ 663.039356][T11067] do_syscall_64+0x4c/0xa0 [ 663.044321][T11067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.050752][T11067] [ 663.050752][T11067] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 663.059630][T11067] __lock_acquire+0x2c66/0x7b50 [ 663.065127][T11067] lock_acquire+0x19e/0x400 [ 663.070201][T11067] down_write+0x38/0x60 [ 663.074955][T11067] ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 663.081473][T11067] ocfs2_truncate_file+0xe8e/0x1540 [ 663.087245][T11067] ocfs2_setattr+0x1545/0x1b40 [ 663.092551][T11067] notify_change+0xbc6/0xee0 [ 663.097682][T11067] do_truncate+0x1ac/0x240 [ 663.102699][T11067] do_sys_ftruncate+0x31b/0x3d0 [ 663.108105][T11067] do_syscall_64+0x4c/0xa0 [ 663.113057][T11067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.119487][T11067] [ 663.119487][T11067] other info that might help us debug this: [ 663.119487][T11067] [ 663.129722][T11067] Chain exists of: [ 663.129722][T11067] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 663.129722][T11067] [ 663.144950][T11067] Possible unsafe locking scenario: [ 663.144950][T11067] [ 663.152406][T11067] CPU0 CPU1 [ 663.157776][T11067] ---- ---- [ 663.163272][T11067] lock(&oi->ip_xattr_sem); [ 663.167880][T11067] lock(&journal->j_trans_barrier); [ 663.175706][T11067] lock(&oi->ip_xattr_sem); [ 663.182826][T11067] lock(&ocfs2_file_ip_alloc_sem_key); [ 663.188390][T11067] [ 663.188390][T11067] *** DEADLOCK *** [ 663.188390][T11067] [ 663.196542][T11067] 3 locks held by syz.5.1648/11067: [ 663.201747][T11067] #0: ffff8880231fa460 (sb_writers#18){.+.+}-{0:0}, at: do_sys_ftruncate+0x284/0x3d0 [ 663.211355][T11067] #1: ffff88805abc5f48 (&sb->s_type->i_mutex_key#34){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 663.212496][ T7234] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 663.221729][T11067] #2: ffff88805abc5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x360 [ 663.221783][T11067] [ 663.221783][T11067] stack backtrace: [ 663.221788][T11067] CPU: 0 PID: 11067 Comm: syz.5.1648 Not tainted syzkaller #0 [ 663.221803][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.221826][T11067] Call Trace: [ 663.221832][T11067] [ 663.221838][T11067] dump_stack_lvl+0x188/0x250 [ 663.221882][T11067] ? load_image+0x410/0x410 [ 663.282932][T11067] ? show_regs_print_info+0x20/0x20 [ 663.288152][T11067] ? print_circular_bug+0x12b/0x1a0 [ 663.293370][T11067] check_noncircular+0x296/0x330 [ 663.298341][T11067] ? add_chain_block+0x9b0/0x9b0 [ 663.303352][T11067] ? lockdep_lock+0xf1/0x1f0 [ 663.308090][T11067] ? lockdep_unlock+0x143/0x2e0 [ 663.312968][T11067] ? mark_lock+0x94/0x320 [ 663.317311][T11067] ? _find_first_zero_bit+0xd1/0xf0 [ 663.322561][T11067] __lock_acquire+0x2c66/0x7b50 [ 663.327448][T11067] ? verify_lock_unused+0x140/0x140 [ 663.332690][T11067] lock_acquire+0x19e/0x400 [ 663.337240][T11067] ? ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 663.343411][T11067] ? __might_sleep+0xf0/0xf0 [ 663.348149][T11067] ? read_lock_is_recursive+0x10/0x10 [ 663.353653][T11067] ? rwsem_write_trylock+0x135/0x1c0 [ 663.358982][T11067] ? clear_nonspinnable+0x60/0x60 [ 663.364034][T11067] ? ocfs2_truncate_inline+0x656/0x870 [ 663.369641][ T7234] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71). [ 663.369755][T11067] ? ocfs2_truncate_file+0x69f/0x1540 [ 663.383779][T11067] down_write+0x38/0x60 [ 663.387952][T11067] ? ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 663.394126][T11067] ocfs2_try_remove_refcount_tree+0xb3/0x360 [ 663.400147][T11067] ? ocfs2_remove_refcount_tree+0xe40/0xe40 [ 663.402044][ T7234] usb 5-1: USB disconnect, device number 11 [ 663.406068][T11067] ? up_write+0x1b6/0x410 [ 663.406097][T11067] ocfs2_truncate_file+0xe8e/0x1540 [ 663.421576][T11067] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 663.427319][T11067] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 663.433065][T11067] ? do_raw_spin_unlock+0x11d/0x230 [ 663.438287][T11067] ? _raw_spin_unlock+0x24/0x40 [ 663.443159][T11067] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 663.448936][T11067] ? ocfs2_inode_lock_atime+0x530/0x530 [ 663.454506][T11067] ? ocfs2_rw_lock+0x134/0x250 [ 663.459286][T11067] ? dquot_initialize+0x20/0x20 [ 663.464370][T11067] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 663.470541][T11067] ? setattr_prepare+0x1ed/0xd30 [ 663.475499][T11067] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 663.482012][T11106] fido_id[11106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 663.482178][T11067] ocfs2_setattr+0x1545/0x1b40 [ 663.501771][T11067] ? ocfs2_extend_allocation+0x1830/0x1830 [ 663.507596][T11067] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 663.513504][T11067] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 663.519759][T11067] ? ocfs2_xattr_get+0x147/0x260 [ 663.524713][T11067] ? ktime_get_coarse_real_ts64+0x106/0x120 [ 663.530626][T11067] ? current_time+0x1ad/0x2c0 [ 663.535317][T11067] ? atime_needs_update+0x770/0x770 [ 663.540532][T11067] ? bpf_lsm_inode_setattr+0x5/0x10 [ 663.545908][T11067] ? try_break_deleg+0x79/0x120 [ 663.550778][T11067] ? ocfs2_extend_allocation+0x1830/0x1830 [ 663.556606][T11067] notify_change+0xbc6/0xee0 [ 663.561215][T11067] do_truncate+0x1ac/0x240 [ 663.565656][T11067] ? rcu_lock_release+0x20/0x20 [ 663.570614][T11067] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 663.576008][T11067] ? bpf_lsm_path_truncate+0x5/0x10 [ 663.581223][T11067] do_sys_ftruncate+0x31b/0x3d0 [ 663.586105][T11067] do_syscall_64+0x4c/0xa0 [ 663.590534][T11067] ? clear_bhb_loop+0x30/0x80 [ 663.595298][T11067] ? clear_bhb_loop+0x30/0x80 [ 663.599988][T11067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.605906][T11067] RIP: 0033:0x7f05d85b4e59 [ 663.610335][T11067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.630058][T11067] RSP: 002b:00007f05d680d028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 663.638747][T11067] RAX: ffffffffffffffda RBX: 00007f05d883cfa0 RCX: 00007f05d85b4e59 [ 663.646753][T11067] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 663.654715][T11067] RBP: 00007f05d864ae6f R08: 0000000000000000 R09: 0000000000000000 [ 663.662691][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.670650][T11067] R13: 00007f05d883d038 R14: 00007f05d883cfa0 R15: 00007ffd7b4824b8 [ 663.678733][T11067] [ 663.681836][ C0] vkms_vblank_simulate: vblank timer overrun [ 663.747266][ T5573] ocfs2: Unmounting device (7,5) on (node local)