last executing test programs: 18m35.450801656s ago: executing program 3 (id=4177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) 18m35.167187173s ago: executing program 3 (id=4183): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x880) 18m34.850441286s ago: executing program 3 (id=4187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 18m34.59024272s ago: executing program 3 (id=4191): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'maccenteuro'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 18m34.095470123s ago: executing program 3 (id=4197): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x12003, 0x0, 0x0) 18m33.593968637s ago: executing program 3 (id=4202): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x0, 0x7, 0x32315659, 0xa, 0x1, [{0x0, 0x3}, {0x7, 0xffff}, {0x0, 0x8000}, {0x9, 0x9}, {0x9, 0x9}, {0xc}, {0x1, 0x2}, {0xdf70, 0x8}], 0x3, 0x7, 0x3, 0x1, 0x3}}) 18m33.169239539s ago: executing program 32 (id=4202): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x0, 0x7, 0x32315659, 0xa, 0x1, [{0x0, 0x3}, {0x7, 0xffff}, {0x0, 0x8000}, {0x9, 0x9}, {0x9, 0x9}, {0xc}, {0x1, 0x2}, {0xdf70, 0x8}], 0x3, 0x7, 0x3, 0x1, 0x3}}) 15m42.863128783s ago: executing program 2 (id=6896): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa2800, 0x0) ioctl$TIOCCONS(r0, 0x541d) 15m42.726608115s ago: executing program 2 (id=6898): syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000680)="$eJzs282O0lAYxvGn5aOC36AbN5K40I1UceVOL4VAJcSiBFgIMTEmuvQKXM39zSQz+wmdtLQllEmGKR8d4P9bvW/fnvYc0lPOWVQAjlZNNRkyVJD0UtKvqiGpnHW3AOyAJ2nqAThOufMwyCvjngDYrbPPUl/S6cXPlnKFpfWBX/8U1c3icv239CJqZli6l1xfnEivo/ZG6dr2ZXnerL687/Drb15F97+vB3qoR3qsJ3qqSlhvx9d/vsZKCDg+hurJfOGAqS9d13kX54Ugfx/nxSBvJPIPcW4Feb313W1vawgAUjJvmP+5xPzPJ+Y/gP01HE++Nl3XGawWFHWLkxcCmbMbpmyeDPzLbeI6mwj+VJT6Z3Gdwd/L2VbsrgxnJ4EVPn/BEX//6Fkbezb2Nph6ykuZdyOcsNKPf/MXxSiT1xOALbJHvb49HE/ednvNjtNxvjX+h5WPdrDytxfX/wAOx/xPP+ueAAAAAAAAAAAAAACAtKp6tsppyc/6AAAAAOyhtT4VKkla4eSsxwgAAAAAAAAAAAAAAAAAAAAciqsAAAD//yUhF6I=") truncate(&(0x7f0000000000)='./file1\x00', 0x8000) 15m42.487724405s ago: executing program 2 (id=6902): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000001c0)={0x10000, 0x57, 0x1000000000000004, 0x2, 0x5, 0x1006, 0xc, 0x7fffffff, 0xaf}) 15m40.857972158s ago: executing program 2 (id=6927): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 15m40.118434232s ago: executing program 2 (id=6937): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$eJzs3T+LXFUUAPDzdmffvGgxU1iJkAemsApuOrGZRTYQnMowRbTQxSQgO4OQwIJ/cExla2Nh4ScQBBu/RRq/gWAr2Bkh8OT9y7wZZzc7momY/H7Nnr33nHfvfXt35m0xdz94ZXZ8M4/b9z7/JbIsiZ1RjOJBEsPYidaXsWT0dQAA/2cPiiJ+L2qb1CURkW1vWgDAFp3y/r/y1t5bhD8+takBAFty/ca7bx+Mx4fvZJHF1dlXJ5PyL/vya91/cDs+imncitdjEA8jqueE5umgjK8WRTHv5aVhXJrNTyZl5ez9+831D36LqOr3YxDDR2XV00ZVf218uF+V5/1O/bycxwvN+KOy/koM4qVHxUv1V+r6vFsfkzRee7Uz/8sxiJ8/jI9jGjerSdT1e9fGh1/s5/lbxTd/fPZeOb2yPpmfTPpV3kKx+zR/LgAAAAAAAAAAAAAAAAAAAAAAPNsu5+3hO/nFuDQrm5rzd3Yfpk1OkzJcVJX9dZS0TZ3zgUrzIr6rjxTcWxpvcb5PL17udQ8WBAAAAAAAAAAAAAAAAAAAgOfX3U8+PT6aTm/deSJBexpALyL+vB7xT68z6rRcjLOT+82YR9PpThMu5dxPuy2x2+YkEWdOo1zEE7otjwsuZCtzboPvfygXuMkFs07LG+sXuPe4dd3o/9u90e6u46Nk/Vj9aFuyZpN8m0YsctI451jpaV1FdLff2iVfWNyfdO0Qg43Xnr5YBfNTc4pkzRbtBG/+Wvc3LUms/BKl1V1dO/peE3TKV/bGufZzZHX5318rkuq0jv42XoYAAAAAAAAAAAAAAAAAAIClz3iX3/203HnvzNKdwkeBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhGLP7//wbBvCk+R3Iad+7+x0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBXAAAA//9ETkvG") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 15m39.814023453s ago: executing program 2 (id=6941): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x4b8, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 15m39.511006544s ago: executing program 33 (id=6941): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x4b8, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 3.767248739s ago: executing program 4 (id=20958): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 2.359957355s ago: executing program 4 (id=20971): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x2) pselect6(0x40, &(0x7f0000000040)={0x4, 0x5, 0x8000, 0x4, 0x80f4000000000, 0x7fff, 0x1, 0x9}, &(0x7f0000000080)={0x3, 0x5, 0x0, 0x3, 0x3b85, 0x2, 0x4e9, 0x1}, &(0x7f00000000c0)={0x9, 0x2f, 0x0, 0x101, 0x8, 0xff, 0x7, 0x5}, 0x0, 0x0) 1.605304132s ago: executing program 4 (id=20976): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) fcntl$setpipe(r0, 0x407, 0x8001a0) 1.380546619s ago: executing program 4 (id=20978): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x5000001f}) 1.279670316s ago: executing program 4 (id=20980): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 1.272937157s ago: executing program 1 (id=20988): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.225996375s ago: executing program 5 (id=20981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200"], 0x60}}, 0x0) 1.093234597s ago: executing program 0 (id=20983): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x28, r1, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0) 1.07426842s ago: executing program 4 (id=20984): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442f, &(0x7f00000088c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x160) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) 1.000482473s ago: executing program 1 (id=20985): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 960.150379ms ago: executing program 5 (id=20986): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 825.987592ms ago: executing program 0 (id=20987): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) 778.31318ms ago: executing program 1 (id=20989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 731.276928ms ago: executing program 0 (id=20990): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 688.127695ms ago: executing program 5 (id=20991): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000001c0)={{r2, r1, 0x1, [0x0, 0xf7df]}, {0x80000000, r3, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) 608.537779ms ago: executing program 0 (id=20992): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="54000000010006", 0x7) 498.761827ms ago: executing program 5 (id=20993): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 498.065897ms ago: executing program 1 (id=21001): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0xffffffffffffffff, 0xee01) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffa, [0x0, 0xfffffffd]}, 0x10) 427.994749ms ago: executing program 0 (id=20994): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 367.070929ms ago: executing program 1 (id=20995): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 317.782687ms ago: executing program 5 (id=20996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) 197.036537ms ago: executing program 0 (id=20997): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 16.226048ms ago: executing program 5 (id=20998): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 0s ago: executing program 1 (id=20999): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x1e, 0xa01, 0x70bd2a, 0xfffffffe, {0x1c, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) kernel console output (not intermixed with test programs): ity change from 0 to 512 [ 1339.558107][T15271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 1339.581500][T15271] System zones: 1-12 [ 1339.622203][T15271] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19198: Directory hole found for htree index block 0 [ 1339.681666][T15271] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 1339.705164][T15271] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19198: Directory hole found for htree index block 0 [ 1339.745180][T15271] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1339.775063][T15271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.834907][T15271] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.19198: Directory hole found for htree index block 0 [ 1339.992300][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.016061][T15282] loop5: detected capacity change from 0 to 4096 [ 1340.084963][T15282] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1340.490381][T15304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19215'. [ 1340.884886][T15321] netlink: 'syz.5.19224': attribute type 1 has an invalid length. [ 1341.062941][T15328] loop5: detected capacity change from 0 to 64 [ 1341.379734][T15307] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1341.762200][T15356] loop5: detected capacity change from 0 to 1764 [ 1342.201172][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19249'. [ 1342.257357][T15376] loop4: detected capacity change from 0 to 2048 [ 1342.347616][T15376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.365430][T15376] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #12: block 2: comm syz.4.19251: lblock 0 mapped to illegal pblock 2 (length 1) [ 1342.397885][T15383] "syz.1.19254" (15383) uses obsolete ecb(arc4) skcipher [ 1342.416204][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.639093][T15392] loop1: detected capacity change from 0 to 128 [ 1342.705916][T15392] syz.1.19257: attempt to access beyond end of device [ 1342.705916][T15392] loop1: rw=0, sector=25674, nr_sectors = 2 limit=128 [ 1342.763619][T15392] Buffer I/O error on dev loop1, logical block 12837, async page read [ 1342.893972][ T5801] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1343.064832][T15405] netlink: 392 bytes leftover after parsing attributes in process `syz.0.19264'. [ 1343.103989][ T5801] usb 5-1: Using ep0 maxpacket: 8 [ 1343.111441][ T5801] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1343.125390][ T5801] usb 5-1: config 8 has an invalid interface number: 61 but max is 2 [ 1343.142574][ T5801] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 1343.161841][ T5801] usb 5-1: config 8 has no interface number 0 [ 1343.173881][ T5801] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1343.202741][ T5801] usb 5-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1343.206018][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19267'. [ 1343.233022][ T5801] usb 5-1: config 8 interface 61 has no altsetting 0 [ 1343.248319][ T5801] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 1343.263913][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.272242][ T5801] usb 5-1: Product: syz [ 1343.278868][ T5801] usb 5-1: Manufacturer: syz [ 1343.293769][ T5801] usb 5-1: SerialNumber: syz [ 1343.374208][ T8] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1343.514881][ T5801] bfusb: probe of 5-1:8.61 failed with error -5 [ 1343.531629][ T5801] usb 5-1: USB disconnect, device number 93 [ 1343.575024][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1343.602023][ T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1343.623961][ T8] usb 2-1: config 179 has no interface number 0 [ 1343.643939][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1343.663933][T15425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19273'. [ 1343.673139][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1343.686666][T15425] netlink: 108 bytes leftover after parsing attributes in process `syz.0.19273'. [ 1343.692308][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1343.703404][T15425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19273'. [ 1343.714163][ T8] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1343.736192][ T8] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1343.758555][ T8] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1343.765803][ T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1343.784796][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.824973][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input75 [ 1344.194477][ T8] usb 2-1: USB disconnect, device number 103 [ 1344.200570][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1344.236382][ T8] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1344.712326][T15435] loop5: detected capacity change from 0 to 32768 [ 1344.719088][T10441] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1344.746157][T15435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.19279 (15435) [ 1344.798271][T15435] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1344.842295][T15455] ipt_rpfilter: unknown options [ 1344.852904][T15435] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1344.894616][T15435] BTRFS info (device loop5): using free space tree [ 1344.934269][T10441] usb 1-1: Using ep0 maxpacket: 32 [ 1344.965967][T10441] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1344.993982][T10441] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1345.005900][T15435] BTRFS info (device loop5): enabling ssd optimizations [ 1345.035925][T10441] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1345.036030][T15435] BTRFS info (device loop5): auto enabling async discard [ 1345.073410][T10441] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1345.113418][T10441] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1345.167698][T10441] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1345.186379][T10441] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1345.196406][T10441] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1345.208414][T10441] usb 1-1: Product: syz [ 1345.212907][T10441] usb 1-1: Manufacturer: syz [ 1345.218199][T10441] usb 1-1: SerialNumber: syz [ 1345.285120][T10441] usb 1-1: config 0 descriptor?? [ 1345.301930][T21073] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1345.320966][T10441] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1345.358877][T10441] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1345.423052][T15485] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1345.441294][T15485] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1345.454658][T15485] overlayfs: missing 'lowerdir' [ 1345.555472][T15443] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1345.684743][ T5801] usb 1-1: USB disconnect, device number 109 [ 1345.726854][ T5801] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1346.526313][T15518] netlink: 'syz.0.19313': attribute type 10 has an invalid length. [ 1346.535762][T15518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19313'. [ 1346.545578][T15518] virt_wifi0: left promiscuous mode [ 1346.550824][T15518] virt_wifi0: left allmulticast mode [ 1346.561504][T15518] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1346.568275][T30530] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1346.577955][T15518] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1346.596584][T15503] loop4: detected capacity change from 0 to 32768 [ 1346.630179][T15503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.19305 (15503) [ 1346.656360][T15503] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1346.672149][T15503] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1346.693469][T15503] BTRFS info (device loop4): using free space tree [ 1346.775293][T30530] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 1346.783507][T30530] usb 2-1: config 0 has no interface number 0 [ 1346.790238][T30530] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1346.800476][T30530] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1346.817518][T30530] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1346.849266][T15503] BTRFS info (device loop4): enabling ssd optimizations [ 1346.863928][T15503] BTRFS info (device loop4): auto enabling async discard [ 1346.868712][T30530] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1346.908568][T30530] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1346.944083][T30530] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1346.952709][T30530] usb 2-1: Product: syz [ 1346.963833][T30530] usb 2-1: Manufacturer: syz [ 1346.974051][T30530] usb 2-1: SerialNumber: syz [ 1346.985449][T30530] usb 2-1: config 0 descriptor?? [ 1347.025807][T30530] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1347.074254][T15013] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1347.269484][ T5802] usb 2-1: USB disconnect, device number 104 [ 1347.719055][T15566] syz_tun: entered promiscuous mode [ 1347.765562][T15569] netlink: 'syz.0.19328': attribute type 28 has an invalid length. [ 1347.932910][T15573] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.19330'. [ 1347.993544][T15578] netlink: 'syz.5.19332': attribute type 3 has an invalid length. [ 1348.203620][ T27] audit: type=1326 audit(2000000890.939:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.5.19337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1348.283407][ T27] audit: type=1326 audit(2000000890.939:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.5.19337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1348.382432][T15588] loop4: detected capacity change from 0 to 4096 [ 1348.389325][ T27] audit: type=1326 audit(2000000890.979:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.5.19337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1348.403589][T15588] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1348.473418][ T27] audit: type=1326 audit(2000000890.979:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.5.19337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1348.555794][ T27] audit: type=1326 audit(2000000890.979:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15584 comm="syz.5.19337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1348.618424][T15588] ntfs3: loop4: ino=0, attr_set_size [ 1348.634070][T15588] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1348.879549][ T27] audit: type=1326 audit(2000000891.619:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.19348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1348.985770][ T27] audit: type=1326 audit(2000000891.619:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.19348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1349.033780][ T27] audit: type=1326 audit(2000000891.619:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.19348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1349.069100][ T27] audit: type=1326 audit(2000000891.639:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.19348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1349.144099][ T27] audit: type=1326 audit(2000000891.639:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.19348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1349.451793][T15619] loop5: detected capacity change from 0 to 4096 [ 1349.490662][T15619] ntfs: volume version 3.1. [ 1349.807661][T15641] loop4: detected capacity change from 0 to 16 [ 1349.815592][T15641] erofs: (device loop4): mounted with root inode @ nid 36. [ 1350.053958][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19367'. [ 1350.250358][T15659] netlink: 'syz.4.19372': attribute type 1 has an invalid length. [ 1350.724272][ T5802] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1350.771688][T15679] x_tables: unsorted entry at hook 3 [ 1350.916761][ T5802] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 1350.943345][ T5802] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.969762][ T5802] usb 5-1: config 0 has no interface number 0 [ 1351.003894][ T5802] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1351.030712][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.056157][ T5802] usb 5-1: config 0 descriptor?? [ 1351.085980][ T5802] ttusbir 5-1:0.83: cannot find expected altsetting [ 1351.264313][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19392'. [ 1351.283595][T15700] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1351.293705][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19392'. [ 1351.315863][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19392'. [ 1351.354677][ T5802] usb 5-1: USB disconnect, device number 94 [ 1351.420191][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19396'. [ 1351.744049][ T5801] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1351.942016][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 1351.961843][ T5801] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1351.992052][ T5801] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1352.004334][ T5801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1352.013481][ T5801] usb 1-1: config 1 has no interface number 0 [ 1352.027233][ T5801] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1352.053351][ T5801] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1352.084363][ T5801] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1352.101484][ T51] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 1352.123857][ T5801] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1352.154312][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.178789][ T5801] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1352.200398][T15738] loop4: detected capacity change from 0 to 8 [ 1352.283393][T15738] SQUASHFS error: Failed to read block 0x2d0: -5 [ 1352.313931][T15738] SQUASHFS error: Unable to read metadata cache entry [2ce] [ 1352.321292][T15738] SQUASHFS error: Unable to read directory block [247:26] [ 1352.405033][ T5801] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 1352.411831][ T5801] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1352.425312][ T5801] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 1352.639902][ T5801] usb 1-1: USB disconnect, device number 110 [ 1352.668205][T15752] bridge0: port 1(bond0) entered blocking state [ 1352.679008][T15752] bridge0: port 1(bond0) entered disabled state [ 1352.685808][T15752] bond0: entered allmulticast mode [ 1353.602557][T15795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19438'. [ 1353.634163][T15795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19438'. [ 1353.772389][T15798] loop1: detected capacity change from 0 to 4096 [ 1353.796318][T15798] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1353.920612][T15798] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1354.020293][T15798] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 1354.030198][ T8] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1354.142143][ T11] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 1354.233912][ T5801] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1354.243393][ T8] usb 6-1: too many configurations: 37, using maximum allowed: 8 [ 1354.299711][ T8] usb 6-1: string descriptor 0 read error: -71 [ 1354.306833][ T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1354.334053][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.364301][ T8] usb 6-1: can't set config #1, error -71 [ 1354.386070][ T8] usb 6-1: USB disconnect, device number 71 [ 1354.435481][ T5801] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1354.461029][ T5801] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1354.475214][ T5801] usb 5-1: config 0 has no interface number 0 [ 1354.481478][ T5801] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1354.517124][ T5801] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1354.543771][ T5801] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1354.567077][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.599417][ T5801] usb 5-1: config 0 descriptor?? [ 1354.718739][T15829] netlink: 'syz.0.19455': attribute type 15 has an invalid length. [ 1355.025915][ T5801] usb 5-1: USB disconnect, device number 95 [ 1355.764573][ T8] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1355.992336][ T8] usb 1-1: too many configurations: 37, using maximum allowed: 8 [ 1356.055166][ T8] usb 1-1: string descriptor 0 read error: -71 [ 1356.061498][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1356.075852][T15877] xt_bpf: check failed: parse error [ 1356.094136][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.121491][ T8] usb 1-1: can't set config #1, error -71 [ 1356.135402][ T8] usb 1-1: USB disconnect, device number 111 [ 1356.189884][T15855] loop1: detected capacity change from 0 to 32768 [ 1356.544044][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19486'. [ 1356.559855][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19486'. [ 1357.663871][T30529] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1357.853917][T30529] usb 6-1: Using ep0 maxpacket: 32 [ 1357.861363][T30529] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1357.898326][T30529] usb 6-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1357.917812][T30529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.935583][T30529] usb 6-1: Product: syz [ 1357.946014][T30529] usb 6-1: Manufacturer: syz [ 1357.955286][T30529] usb 6-1: SerialNumber: syz [ 1358.388752][T15958] loop4: detected capacity change from 0 to 256 [ 1358.410837][T30529] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1358.481360][T30529] usb 6-1: USB disconnect, device number 72 [ 1358.495815][T15958] FAT-fs (loop4): Directory bread(block 64) failed [ 1358.523985][T15958] FAT-fs (loop4): Directory bread(block 65) failed [ 1358.540302][T15958] FAT-fs (loop4): Directory bread(block 66) failed [ 1358.566341][T15958] FAT-fs (loop4): Directory bread(block 67) failed [ 1358.623320][T15958] FAT-fs (loop4): Directory bread(block 68) failed [ 1358.633374][T15958] FAT-fs (loop4): Directory bread(block 69) failed [ 1358.665527][T15958] FAT-fs (loop4): Directory bread(block 70) failed [ 1358.679565][T15964] netlink: 'syz.1.19522': attribute type 29 has an invalid length. [ 1358.692151][T15958] FAT-fs (loop4): Directory bread(block 71) failed [ 1358.710369][T15958] FAT-fs (loop4): Directory bread(block 72) failed [ 1358.723939][T15958] FAT-fs (loop4): Directory bread(block 73) failed [ 1359.342354][T15986] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2 [ 1359.361784][T15986] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @ [ 1359.444251][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19536'. [ 1359.943115][T16011] loop1: detected capacity change from 0 to 512 [ 1359.976181][T16011] EXT4-fs: Ignoring removed oldalloc option [ 1359.996400][T16011] EXT4-fs: Ignoring removed i_version option [ 1360.041059][T16011] EXT4-fs (loop1): filesystem is read-only [ 1360.070434][T16011] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1360.090651][T16011] EXT4-fs (loop1): filesystem is read-only [ 1360.101344][T16011] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1360.114366][T16011] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.19546: bg 0: block 64: padding at end of block bitmap is not set [ 1360.139132][T16011] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1360.151611][T16011] EXT4-fs (loop1): 1 orphan inode deleted [ 1360.204734][T16011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1360.249894][T16023] xt_limit: Overflow, try lower: 2147483649/3300 [ 1360.331638][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1360.556673][T16036] loop4: detected capacity change from 0 to 64 [ 1360.641428][T16035] loop5: detected capacity change from 0 to 4096 [ 1360.693550][T16039] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1360.713620][T16035] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 1360.972368][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1360.972383][ T27] audit: type=1326 audit(2000000903.709:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1361.052963][ T27] audit: type=1326 audit(2000000903.709:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1361.092104][ T27] audit: type=1326 audit(2000000903.769:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1361.113929][T11331] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1361.142280][ T27] audit: type=1326 audit(2000000903.769:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1361.142337][T16053] netlink: 2 bytes leftover after parsing attributes in process `syz.5.19565'. [ 1361.168038][ T27] audit: type=1326 audit(2000000903.769:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.1.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1361.319437][T11331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1361.329765][T11331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1361.352274][T11331] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1361.369047][T11331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.401002][T11331] usb 5-1: Product: syz [ 1361.413871][T11331] usb 5-1: Manufacturer: syz [ 1361.419116][T11331] usb 5-1: SerialNumber: syz [ 1361.437274][T11331] usb 5-1: config 0 descriptor?? [ 1361.448496][T16044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1361.456966][T16044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1361.641826][T16065] IPv6: sit3: Disabled Multicast RS [ 1361.648246][T16065] sit3: entered allmulticast mode [ 1361.694680][T16044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1361.722507][T16044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1361.780632][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.788034][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.953311][T11331] Error reading MAC address [ 1361.991564][T11331] usb 5-1: USB disconnect, device number 96 [ 1362.166127][ T27] audit: type=1326 audit(2000000904.899:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16077 comm=162E44A480DB682108B49543019E91 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30fcf9c819 code=0x0 [ 1362.192946][T16080] loop1: detected capacity change from 0 to 256 [ 1362.291616][T16082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1362.889430][T16106] loop5: detected capacity change from 0 to 512 [ 1362.924114][T16106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.946993][T16106] ext4 filesystem being mounted at /2977/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.076836][T16106] EXT4-fs error (device loop5): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.5.19591: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1363.144162][T16106] EXT4-fs error (device loop5): ext4_get_first_dir_block:3595: inode #12: comm syz.5.19591: directory missing '.' [ 1363.271057][T16118] loop1: detected capacity change from 0 to 512 [ 1363.284809][T16118] EXT4-fs: Ignoring removed mblk_io_submit option [ 1363.295941][T21073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.357540][T16118] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1363.377326][T16118] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1363.422101][T16118] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.19596: attempt to clear invalid blocks 2 len 1 [ 1363.471812][T16118] EXT4-fs (loop1): Remounting filesystem read-only [ 1363.488142][T16118] EXT4-fs (loop1): 1 truncate cleaned up [ 1363.495401][T16118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1363.603883][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.784581][T16112] loop4: detected capacity change from 0 to 32768 [ 1363.909217][T16112] syz.4.19594: attempt to access beyond end of device [ 1363.909217][T16112] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1363.938681][T16112] lbmIODone: I/O error in JFS log [ 1363.945353][T16112] *** Log Format Error ! *** [ 1363.950595][T16112] lmLogInit: exit(-22) [ 1363.956552][T16112] lmLogOpen: exit(-22) [ 1365.671347][T16197] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1366.029330][T16213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19643'. [ 1366.400706][ T27] audit: type=1326 audit(2000000909.139:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.19648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1366.484351][ T27] audit: type=1326 audit(2000000909.139:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.19648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1366.593997][ T27] audit: type=1326 audit(2000000909.179:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.19648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1366.652677][ T27] audit: type=1326 audit(2000000909.179:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.19648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1366.728489][ T27] audit: type=1326 audit(2000000909.179:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.5.19648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0be99c819 code=0x7ffc0000 [ 1366.896042][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19657'. [ 1366.976591][T16247] veth7: entered promiscuous mode [ 1366.994144][T16247] veth7: entered allmulticast mode [ 1367.417409][T16269] netlink: 388 bytes leftover after parsing attributes in process `syz.5.19668'. [ 1367.459583][T16273] netlink: 'syz.4.19670': attribute type 21 has an invalid length. [ 1367.474192][T16273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19670'. [ 1367.544061][ T8] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1367.767419][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1367.781165][ T8] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1367.803388][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1367.823384][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1367.883909][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1367.928181][ T8] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1367.947407][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.966349][ T8] usb 2-1: Product: syz [ 1367.970560][ T8] usb 2-1: Manufacturer: syz [ 1367.975596][ T8] usb 2-1: SerialNumber: syz [ 1368.003338][T16292] loop5: detected capacity change from 0 to 256 [ 1368.036201][T16292] exfat: Deprecated parameter 'namecase' [ 1368.041963][T16292] exfat: Deprecated parameter 'utf8' [ 1368.077560][T16292] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1368.389067][ T8] usb 2-1: USB disconnect, device number 105 [ 1368.535567][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19687'. [ 1369.205448][T16325] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1369.278815][T16329] loop5: detected capacity change from 0 to 16 [ 1369.314350][T16329] erofs: (device loop5): mounted with root inode @ nid 36. [ 1369.713187][T16343] vivid-001: disconnect [ 1369.734486][T16342] vivid-001: reconnect [ 1369.924063][T16354] x_tables: unsorted underflow at hook 2 [ 1371.228122][T16404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1371.720657][T16425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19746'. [ 1371.944921][T16434] loop5: detected capacity change from 0 to 4096 [ 1372.009423][T16437] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1372.063881][T30529] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1372.265587][T30529] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 1372.284155][T30529] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.317402][T30529] usb 2-1: config 8 has no interface number 0 [ 1372.323538][T30529] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1372.401314][T30529] usb 2-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1372.443984][T30529] usb 2-1: config 8 interface 177 has no altsetting 0 [ 1372.468882][T30529] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1372.507148][T30529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.551536][T30529] ir_toy 2-1:8.177: required endpoints not found [ 1372.812897][ T8] usb 2-1: USB disconnect, device number 106 [ 1373.339966][T16476] bridge6: entered allmulticast mode [ 1373.834132][ T8] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1373.876011][T16498] loop4: detected capacity change from 0 to 1764 [ 1374.035764][ T8] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.058737][ T8] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1374.080588][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.095558][ T8] usb 6-1: Product: syz [ 1374.099865][ T8] usb 6-1: Manufacturer: syz [ 1374.112033][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19783'. [ 1374.117005][ T8] usb 6-1: SerialNumber: syz [ 1374.147157][ T8] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1374.198681][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19785'. [ 1374.223925][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19785'. [ 1374.233101][T16506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19785'. [ 1374.554717][T16490] loop1: detected capacity change from 0 to 40427 [ 1374.577163][T16490] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1374.590365][ T8] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1374.594296][T16490] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1374.648698][ T8] usb 6-1: USB disconnect, device number 73 [ 1374.662241][T16490] F2FS-fs (loop1): invalid crc value [ 1374.847261][T16490] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1374.864930][T16490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1374.919704][T16490] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 1375.042229][T30529] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1375.243473][T30529] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1375.263122][T30529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.305630][T30529] usb 1-1: config 0 descriptor?? [ 1375.661757][T16533] loop4: detected capacity change from 0 to 32768 [ 1375.721104][T30529] usb 1-1: Cannot set MAC address [ 1375.728311][T30529] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1375.756837][T16533] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page [ 1375.756837][T16533] [ 1375.774996][T30529] usb 1-1: USB disconnect, device number 112 [ 1375.799464][T16533] ERROR: (device loop4): remounting filesystem as read-only [ 1375.824377][T16533] ialloc: diAlloc returned -5! [ 1376.613718][T16577] loop5: detected capacity change from 0 to 512 [ 1376.701066][T16577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1376.725160][T16577] ext4 filesystem being mounted at /3039/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.838035][T21073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.959948][T16635] netlink: 'syz.0.19842': attribute type 1 has an invalid length. [ 1378.584506][T16665] openvswitch: netlink: Actions may not be safe on all matching packets [ 1378.905204][T16679] overlayfs: missing 'lowerdir' [ 1379.151043][T16689] netlink: 72 bytes leftover after parsing attributes in process `syz.0.19869'. [ 1379.409431][T16701] loop5: detected capacity change from 0 to 64 [ 1379.523527][T16701] syz.5.19875: attempt to access beyond end of device [ 1379.523527][T16701] loop5: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1379.574550][T16701] Buffer I/O error on dev loop5, logical block 1295, async page read [ 1379.616547][T16701] syz.5.19875: attempt to access beyond end of device [ 1379.616547][T16701] loop5: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1379.659148][T16701] Buffer I/O error on dev loop5, logical block 1295, async page read [ 1379.715685][ T27] audit: type=1800 audit(2000000922.449:1155): pid=16701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.19875" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 1379.904091][ T8] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1380.151370][ T8] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 1380.159617][ T8] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 1380.189949][ T8] usb 2-1: config 0 has no interface number 1 [ 1380.213838][ T8] usb 2-1: config 0 has no interface number 2 [ 1380.220030][ T8] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1380.259412][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.287040][ T8] usb 2-1: config 0 descriptor?? [ 1380.435404][T16720] loop4: detected capacity change from 0 to 32768 [ 1380.523930][ T8] qcserial 2-1:0.3: Qualcomm USB modem converter detected [ 1380.563880][T30529] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1380.723365][T16742] loop4: detected capacity change from 0 to 512 [ 1380.765389][T16742] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.19896: inode has both inline data and extents flags [ 1380.774356][T30529] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 1380.793510][T16742] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.19896: couldn't read orphan inode 15 (err -117) [ 1380.798775][ T8] usb 2-1: USB disconnect, device number 107 [ 1380.817338][T16742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.824090][T30529] usb 1-1: config 0 has no interface number 0 [ 1380.870086][ T8] qcserial 2-1:0.3: device disconnected [ 1380.880729][T30529] usb 1-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1380.895524][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.927147][T16748] loop5: detected capacity change from 0 to 2048 [ 1380.933979][T30529] usb 1-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1380.951037][T30529] usb 1-1: config 0 interface 238 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 90 [ 1380.962987][T16748] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1380.963441][T30529] usb 1-1: config 0 interface 238 has no altsetting 0 [ 1381.012699][T16748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1381.015373][T30529] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1381.039593][T30529] usb 1-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1381.062261][T30529] usb 1-1: Product: syz [ 1381.067189][T30529] usb 1-1: Manufacturer: syz [ 1381.071942][T30529] usb 1-1: SerialNumber: syz [ 1381.079491][T30529] usb 1-1: config 0 descriptor?? [ 1381.097560][T16730] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1381.145270][T30529] ni6501 1-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1381.388222][T16757] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.19901'. [ 1381.467453][T30529] usb 1-1: USB disconnect, device number 113 [ 1381.818113][T16772] loop5: detected capacity change from 0 to 256 [ 1381.839778][T16772] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1381.884595][T16772] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1381.942079][T16772] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1381.960403][T16778] loop4: detected capacity change from 0 to 256 [ 1382.354123][T16788] netlink: 220 bytes leftover after parsing attributes in process `syz.5.19917'. [ 1382.627932][T16798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19922'. [ 1382.641279][T16800] netlink: 'syz.4.19923': attribute type 1 has an invalid length. [ 1382.652252][T16800] netlink: 'syz.4.19923': attribute type 2 has an invalid length. [ 1382.821250][T16805] netlink: 'syz.4.19925': attribute type 1 has an invalid length. [ 1382.836502][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19926'. [ 1382.872790][T16808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19926'. [ 1383.275687][T16796] loop1: detected capacity change from 0 to 32768 [ 1383.302896][T16796] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1383.437204][T16796] XFS (loop1): Ending clean mount [ 1383.783865][T22392] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1384.274045][T16862] autofs4:pid:16862:autofs_fill_super: called with bogus options [ 1384.622464][T16878] netlink: 'syz.0.19955': attribute type 2 has an invalid length. [ 1384.652782][T16878] netlink: 'syz.0.19955': attribute type 3 has an invalid length. [ 1384.681767][T16878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19955'. [ 1385.354435][T16910] netlink: 'syz.1.19972': attribute type 5 has an invalid length. [ 1385.568526][T16919] netlink: 'syz.1.19976': attribute type 21 has an invalid length. [ 1385.767200][T16928] : renamed from veth0_to_bond (while UP) [ 1386.128402][T16946] netlink: 'syz.0.19988': attribute type 3 has an invalid length. [ 1386.141407][T16947] overlayfs: conflicting options: nfs_export=on,index=off [ 1386.173278][T16946] netlink: 666 bytes leftover after parsing attributes in process `syz.0.19988'. [ 1386.574091][T16968] loop1: detected capacity change from 0 to 256 [ 1386.698934][T16968] FAT-fs (loop1): Directory bread(block 64) failed [ 1386.722303][T16968] FAT-fs (loop1): Directory bread(block 65) failed [ 1386.759870][T16968] FAT-fs (loop1): Directory bread(block 66) failed [ 1386.768704][T16968] FAT-fs (loop1): Directory bread(block 67) failed [ 1386.784265][T16968] FAT-fs (loop1): Directory bread(block 68) failed [ 1386.790834][T16968] FAT-fs (loop1): Directory bread(block 69) failed [ 1386.812979][T16968] FAT-fs (loop1): Directory bread(block 70) failed [ 1386.844053][T16968] FAT-fs (loop1): Directory bread(block 71) failed [ 1386.850707][T16968] FAT-fs (loop1): Directory bread(block 72) failed [ 1386.901341][T16968] FAT-fs (loop1): Directory bread(block 73) failed [ 1386.907549][T16978] netlink: 424 bytes leftover after parsing attributes in process `syz.0.20005'. [ 1386.935279][T16978] netlink: 'syz.0.20005': attribute type 1 has an invalid length. [ 1387.113049][T16985] virtiofs: Unknown parameter 'always' [ 1387.614272][T17007] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1388.541063][T17049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20038'. [ 1388.606621][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20038'. [ 1388.873881][T30530] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1389.087006][T30530] usb 6-1: Using ep0 maxpacket: 8 [ 1389.101060][T30530] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1389.118962][T30530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.153987][T30530] usb 6-1: Product: syz [ 1389.162033][ T27] audit: type=1326 audit(2000000931.899:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.4.20052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1389.201230][T30530] usb 6-1: Manufacturer: syz [ 1389.213877][T30530] usb 6-1: SerialNumber: syz [ 1389.229728][T30530] usb 6-1: config 0 descriptor?? [ 1389.246113][T30530] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1389.252491][ T27] audit: type=1326 audit(2000000931.899:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.4.20052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1389.318357][T17084] netlink: 'syz.0.20055': attribute type 29 has an invalid length. [ 1389.324099][ T27] audit: type=1326 audit(2000000931.909:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.4.20052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1389.352044][T17084] netlink: 'syz.0.20055': attribute type 29 has an invalid length. [ 1389.364462][T17083] loop1: detected capacity change from 0 to 512 [ 1389.405313][ T27] audit: type=1326 audit(2000000931.909:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.4.20052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1389.417217][T17083] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1389.461413][T17083] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1389.474350][T17083] System zones: 0-1, 15-15, 18-18, 34-34 [ 1389.493488][T17083] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1389.524121][T17083] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1389.563898][ T5802] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1389.585386][T17083] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1389.591433][T17091] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1389.624500][T17083] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1389.631591][T17083] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.20054: bad orphan inode 16 [ 1389.653743][T30530] gspca_sonixj: reg_r err -71 [ 1389.658681][T30530] sonixj: probe of 6-1:0.0 failed with error -71 [ 1389.694624][T30530] usb 6-1: USB disconnect, device number 74 [ 1389.708848][T17083] ext4_test_bit(bit=15, block=18) = 1 [ 1389.717441][T17083] is_bad_inode(inode)=0 [ 1389.721658][T17083] NEXT_ORPHAN(inode)=0 [ 1389.741964][T17083] max_ino=32 [ 1389.748499][ T5802] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1389.760868][ T5802] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1389.770216][T17083] i_nlink=2 [ 1389.774804][T17083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1389.797989][ T5802] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1389.808470][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.822089][ T5802] usb 5-1: Product: syz [ 1389.840536][ T5802] usb 5-1: Manufacturer: syz [ 1389.865751][ T5802] usb 5-1: SerialNumber: syz [ 1389.892399][ T5802] usb 5-1: config 0 descriptor?? [ 1389.898240][T17083] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 1389.915496][ T5802] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1389.976340][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.385427][ T5802] usb 5-1: USB disconnect, device number 97 [ 1390.513616][T17114] ieee802154 phy0 wpan0: encryption failed: -22 [ 1390.722137][T17124] netlink: 'syz.1.20074': attribute type 32 has an invalid length. [ 1391.179709][T17138] loop1: detected capacity change from 0 to 512 [ 1391.276734][T17138] syz.1.20081: attempt to access beyond end of device [ 1391.276734][T17138] loop1: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 1391.354653][T17138] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 1391.388812][T17147] netlink: 'syz.5.20085': attribute type 75 has an invalid length. [ 1391.389302][T17138] FAT-fs (loop1): Filesystem has been set read-only [ 1391.430361][T17138] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00) [ 1391.700819][T30529] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1391.791729][T17164] netlink: 'syz.4.20094': attribute type 3 has an invalid length. [ 1391.828048][T17164] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.20094'. [ 1391.933872][T30529] usb 1-1: Using ep0 maxpacket: 16 [ 1391.965233][T30529] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 1391.982601][T30529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.012556][T30529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.034765][T30529] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1392.084060][T30529] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1392.093159][T30529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.157993][T30529] usb 1-1: config 0 descriptor?? [ 1392.187890][T30529] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 1392.249416][ T5121] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.285758][ T5121] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.343377][ T5752] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.409932][ T5121] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.473507][ T5121] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.514418][T17151] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.542056][ T5121] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1392.545737][ T5801] usb 1-1: USB disconnect, device number 114 [ 1392.674221][T17195] bridge0: port 1(team0) entered blocking state [ 1392.693207][T17195] bridge0: port 1(team0) entered disabled state [ 1392.714302][T17195] team0: entered allmulticast mode [ 1392.721300][T17195] team0: entered promiscuous mode [ 1393.074087][ T5802] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1393.264265][ T5802] usb 5-1: Using ep0 maxpacket: 16 [ 1393.285659][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.305107][ T5802] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1393.331194][ T5802] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1393.356140][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.372904][ T5802] usb 5-1: Product: syz [ 1393.393420][ T5802] usb 5-1: Manufacturer: syz [ 1393.404301][ T5802] usb 5-1: SerialNumber: syz [ 1393.662897][ T5802] usb 5-1: 0:2 : does not exist [ 1393.703271][ T5802] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1393.754324][ T5802] usb 5-1: USB disconnect, device number 98 [ 1393.866821][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.066171][T17245] loop5: detected capacity change from 0 to 4096 [ 1394.104100][T17245] ntfs: volume version 3.1. [ 1394.128440][T17245] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1394.168359][T17245] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1394.212004][T17245] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1394.272290][T17245] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1394.347970][T17245] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1394.383192][T17245] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1394.439756][T17256] loop1: detected capacity change from 0 to 1024 [ 1394.525344][T17256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.537684][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20140'. [ 1394.634644][T17256] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.20138: Attempting to read directory block (623) that is past i_size (638464) [ 1394.669529][T17266] sctp: [Deprecated]: syz.4.20141 (pid 17266) Use of int in maxseg socket option. [ 1394.669529][T17266] Use struct sctp_assoc_value instead [ 1394.776304][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.129337][T17282] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1395.168457][T17287] loop5: detected capacity change from 0 to 65 [ 1395.193412][T17287] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1396.093355][T17321] netlink: 'syz.0.20168': attribute type 1 has an invalid length. [ 1396.268262][ T27] audit: type=1326 audit(2000000939.009:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.20171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1396.354001][ T27] audit: type=1326 audit(2000000939.009:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.20171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1396.413298][ T27] audit: type=1326 audit(2000000939.019:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.20171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1396.498154][ T27] audit: type=1326 audit(2000000939.019:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.20171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1396.583249][T17309] loop5: detected capacity change from 0 to 32768 [ 1396.589852][ T27] audit: type=1326 audit(2000000939.019:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17325 comm="syz.0.20171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1396.655638][T17337] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1396.780539][T17341] loop4: detected capacity change from 0 to 512 [ 1396.853713][T17341] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1396.865173][T17341] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.20178: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1397.071209][T17341] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.20178: ea_inode dec ref err=-117 [ 1397.114066][T17341] EXT4-fs (loop4): 1 orphan inode deleted [ 1397.140102][T17341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1397.384433][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.608242][T17372] loop1: detected capacity change from 0 to 512 [ 1397.662320][T17372] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1397.672595][T17372] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1397.681202][T17372] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.20194: bad orphan inode 13 [ 1397.730638][T17372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.807758][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.049795][T17389] tmpfs: Bad value for 'mpol' [ 1398.144073][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20203'. [ 1398.158288][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20203'. [ 1398.164260][T17395] netlink: 'syz.1.20202': attribute type 32 has an invalid length. [ 1398.193987][T17394] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20203'. [ 1398.782925][T17421] @ÿ: renamed from bond_slave_0 [ 1398.949969][T17425] Non-string source [ 1398.962165][T17428] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1399.161523][T17436] openvswitch: netlink: Message has 4 unknown bytes. [ 1399.354877][T17447] loop1: detected capacity change from 0 to 65 [ 1399.388770][T17447] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1399.654111][T17456] netlink: 'syz.0.20233': attribute type 16 has an invalid length. [ 1399.662076][T17456] netlink: 'syz.0.20233': attribute type 17 has an invalid length. [ 1399.767763][T17461] kAFS: unable to lookup cell '.,' [ 1399.808907][T17456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.818869][T17456] team0: left promiscuous mode [ 1399.823673][T17456] team_slave_0: left promiscuous mode [ 1399.830053][T17456] team_slave_1: left promiscuous mode [ 1399.835915][T17456] dummy0: left promiscuous mode [ 1399.850435][T17456] batadv0: left promiscuous mode [ 1399.868874][T17456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.901361][T17456] wg1: left promiscuous mode [ 1399.906630][T17456] wg1: left allmulticast mode [ 1399.917820][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1399.938104][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1399.952584][T17456] veth1_to_bridge: left allmulticast mode [ 1399.982837][T17456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.993430][T17456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.013701][T17456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1400.025208][T17456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1400.038070][T17456] veth1_virt_wifi: left promiscuous mode [ 1400.046801][T17456] veth1_vlan: left promiscuous mode [ 1400.054040][T30530] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1400.089055][T17456] infiniband syz2: set active [ 1400.103337][T17456] infiniband syz2: set active [ 1400.113529][T17456] infiniband syz2: set active [ 1400.127600][T17456] vlan0: left promiscuous mode [ 1400.133167][T17456] vlan1: left allmulticast mode [ 1400.139123][T17456] veth0_vlan: left allmulticast mode [ 1400.147095][T17456] veth1_vlan: entered promiscuous mode [ 1400.157822][T17456] veth0_macvtap: left promiscuous mode [ 1400.165149][T17456] veth0_macvtap: entered promiscuous mode [ 1400.170973][T17456] veth0_macvtap: entered allmulticast mode [ 1400.177369][T17456] macvtap0: left allmulticast mode [ 1400.182583][T17456] veth0_macvtap: left allmulticast mode [ 1400.197987][T17456] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 1400.213566][T17456] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 1400.225619][T17456] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 1400.234839][T17456] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 1400.246607][T17456] geneve1: left allmulticast mode [ 1400.255953][T30530] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.266365][T30530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1400.279010][T17456] bridge0: port 3(netdevsim0) entered blocking state [ 1400.285886][T17456] bridge0: port 3(netdevsim0) entered forwarding state [ 1400.293484][T30530] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.312089][T30530] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1400.322845][T17456] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1400.329757][T30530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.347197][T30530] usb 2-1: config 0 descriptor?? [ 1400.393099][T17456] bridge2: left promiscuous mode [ 1400.400440][T17456] bridge2: left allmulticast mode [ 1400.412304][T17456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1400.423969][T17456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1400.438364][T17456] ip6gre2: left allmulticast mode [ 1400.455251][T17456] ipip0: left allmulticast mode [ 1400.462343][T17456] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1400.474349][T17456] bridge5: left promiscuous mode [ 1400.479348][T17456] bridge5: left allmulticast mode [ 1400.497856][T17456] batadv2: left promiscuous mode [ 1400.503185][T17456] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1400.520649][T17456] ip6tnl1: left allmulticast mode [ 1400.531039][T17456] bond3: left allmulticast mode [ 1400.536535][T17456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1400.544406][T17456] bridge8: left promiscuous mode [ 1400.559662][T17456] bond4: left allmulticast mode [ 1400.565383][T17456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1400.577265][T30530] ath6kl: Failed to submit usb control message: -71 [ 1400.585417][T17456] bond5: left promiscuous mode [ 1400.590316][T30530] ath6kl: unable to send the bmi data to the device: -71 [ 1400.599350][T17456] bond5: left allmulticast mode [ 1400.604565][T30530] ath6kl: Unable to send get target info: -71 [ 1400.612010][T17456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1400.619242][T30530] ath6kl: Failed to init ath6kl core: -71 [ 1400.649671][T17456] bond6: left promiscuous mode [ 1400.655987][T30530] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1400.666885][T17456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1400.682331][T17486] loop4: detected capacity change from 0 to 512 [ 1400.690929][T30530] usb 2-1: USB disconnect, device number 108 [ 1400.698247][T17456] bond7: left promiscuous mode [ 1400.705214][T17456] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1400.717401][T17456] netdevsim netdevsim0 netdevsim0: set [1, 3] type 2 family 0 port 58991 - 0 [ 1400.738654][T17456] netdevsim netdevsim0 netdevsim1: set [1, 3] type 2 family 0 port 58991 - 0 [ 1400.747990][T17456] netdevsim netdevsim0 netdevsim2: set [1, 3] type 2 family 0 port 58991 - 0 [ 1400.751912][T17486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.758919][T17456] netdevsim netdevsim0 netdevsim3: set [1, 3] type 2 family 0 port 58991 - 0 [ 1400.780491][T17456] geneve2: left promiscuous mode [ 1400.787291][T17486] ext4 filesystem being mounted at /4168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.789528][T17456] geneve2: left allmulticast mode [ 1400.839475][T17456] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1400.871199][T17456] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1400.886546][T17456] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1400.897471][T17456] bridge9: left promiscuous mode [ 1400.907511][T17456] ipip1: left promiscuous mode [ 1400.916188][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.952392][T17456] bond11: left allmulticast mode [ 1400.974653][T17456] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1400.982458][T17456] geneve5: left promiscuous mode [ 1400.999423][T17456] gtp0: left promiscuous mode [ 1401.025657][T17456] gtp0: left allmulticast mode [ 1401.043166][T17456] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1401.078850][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.086076][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.115652][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.122903][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.233052][ T11] infiniband syz2: set active [ 1401.329194][T10441] xfrm0 speed is unknown, defaulting to 1000 [ 1402.589622][T17519] loop1: detected capacity change from 0 to 32768 [ 1402.674727][T17519] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1402.854163][T17519] XFS (loop1): Ending clean mount [ 1402.931619][T17519] XFS (loop1): Quotacheck needed: Please wait. [ 1403.104794][T17569] : renamed from bond_slave_0 (while UP) [ 1403.118861][T17519] XFS (loop1): Quotacheck: Done. [ 1403.230540][T22392] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1403.563981][ T5801] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1403.653340][T17590] loop5: detected capacity change from 0 to 1024 [ 1403.727585][T17590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.765146][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 1403.775583][ T5801] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1403.782014][T17590] ext4 filesystem being mounted at /3156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.792042][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.804784][ T5801] usb 5-1: Product: syz [ 1403.810056][ T5801] usb 5-1: Manufacturer: syz [ 1403.815136][ T5801] usb 5-1: SerialNumber: syz [ 1403.821924][ T5801] usb 5-1: config 0 descriptor?? [ 1403.830456][ T5801] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1403.878126][T17590] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.20291: corrupted xattr block 128: bad e_name length [ 1403.951589][T21073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1404.041295][ T5801] gspca_sn9c2028: read1 error -71 [ 1404.049312][ T5801] gspca_sn9c2028: read1 error -71 [ 1404.055558][ T5801] gspca_sn9c2028: read1 error -71 [ 1404.060794][ T5801] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 1404.077147][ T5801] usb 5-1: USB disconnect, device number 99 [ 1404.463081][T17612] netlink: 'syz.0.20301': attribute type 1 has an invalid length. [ 1405.039796][T17630] netlink: 80 bytes leftover after parsing attributes in process `syz.5.20309'. [ 1405.047927][T17633] netlink: 'syz.1.20310': attribute type 2 has an invalid length. [ 1405.301213][T17466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1405.301279][T22367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1405.450436][T17646] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.20317'. [ 1405.664502][T17655] loop1: detected capacity change from 0 to 16 [ 1405.711637][T17655] erofs: (device loop1): mounted with root inode @ nid 36. [ 1406.181171][T17671] netlink: 'syz.1.20329': attribute type 21 has an invalid length. [ 1406.210707][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20329'. [ 1406.304631][T17644] loop5: detected capacity change from 0 to 32768 [ 1406.385256][T17644] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1406.414513][T17687] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1406.488756][T17692] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614) [ 1406.499673][T17692] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1406.520584][T17644] XFS (loop5): Ending clean mount [ 1406.563892][T17644] XFS (loop5): Quotacheck needed: Please wait. [ 1406.583826][T17681] 9pnet: Could not find request transport: f [ 1406.626283][ T27] audit: type=1326 audit(2000000949.369:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.20336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1406.728707][T17696] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1406.743846][ T27] audit: type=1326 audit(2000000949.369:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.20336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1406.745289][T17644] XFS (loop5): Quotacheck: Done. [ 1406.843910][ T27] audit: type=1326 audit(2000000949.369:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.20336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1406.916539][ T27] audit: type=1326 audit(2000000949.369:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.20336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1406.986810][ T27] audit: type=1326 audit(2000000949.369:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.4.20336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4087b9c819 code=0x7ffc0000 [ 1407.038890][T21073] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1407.080569][T17707] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1407.164136][T10441] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1407.229477][T17711] netlink: 148 bytes leftover after parsing attributes in process `syz.1.20344'. [ 1407.347212][T10441] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1407.382315][T10441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.408188][T10441] usb 1-1: config 0 descriptor?? [ 1407.425508][T10441] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1407.497787][T17717] loop5: detected capacity change from 0 to 512 [ 1407.524483][T17717] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1407.589809][T17717] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1407.652005][T17717] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.20342: bg 0: block 248: padding at end of block bitmap is not set [ 1407.721634][T17717] Quota error (device loop5): write_blk: dquota write failed [ 1407.731493][T17717] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1407.741552][T17725] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1407.749808][T17717] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.20342: Failed to acquire dquot type 1 [ 1407.772802][T17717] EXT4-fs (loop5): 1 truncate cleaned up [ 1407.782945][T17717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1407.814928][T17728] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.20351'. [ 1407.856566][T10441] gspca_sunplus: reg_w_riv err -71 [ 1407.874657][T10441] sunplus: probe of 1-1:0.0 failed with error -71 [ 1407.899848][T10441] usb 1-1: USB disconnect, device number 115 [ 1407.906668][T17717] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 1407.944793][T17717] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 131074 [ 1407.964754][T17717] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.20342: Failed to acquire dquot type 1 [ 1408.003645][T17732] loop4: detected capacity change from 0 to 16 [ 1408.026188][T17732] erofs: (device loop4): mounted with root inode @ nid 36. [ 1408.149955][T21073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1408.317717][T17742] loop5: detected capacity change from 0 to 256 [ 1408.327512][T17740] loop1: detected capacity change from 0 to 4096 [ 1408.343867][T17740] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1408.354895][T17742] exfat: Deprecated parameter 'namecase' [ 1408.360596][T17742] exfat: Deprecated parameter 'namecase' [ 1408.531786][T17742] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 1408.615701][T17740] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1408.676910][T17740] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 1408.894023][T22367] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 1409.299782][T17744] loop4: detected capacity change from 0 to 32768 [ 1409.354168][T17744] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1409.393885][T10441] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1409.500819][T15013] ocfs2: Unmounting device (7,4) on (node local) [ 1409.641415][T10441] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.664344][T10441] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1409.677953][T10441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.718959][T10441] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1409.719085][T17771] loop4: detected capacity change from 0 to 4096 [ 1409.795032][T17771] EXT4-fs: inline encryption not supported [ 1409.816770][T17775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20373'. [ 1409.846557][T17771] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1409.868539][T17778] loop5: detected capacity change from 0 to 8 [ 1409.875128][T17771] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 1409.885302][T17771] System zones: 0-5 [ 1409.895047][T17771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.980274][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.980420][T17778] cramfs: bad data blocksize 3959421443 [ 1410.015958][T17778] cramfs: bad data blocksize 4294965915 [ 1410.021573][T17778] cramfs: bad data blocksize 802397048 [ 1410.032814][T17778] cramfs: bad data blocksize 4294742353 [ 1410.039985][T17778] cramfs: bad data blocksize 3367320904 [ 1410.045773][T17778] cramfs: bad data blocksize 859179931 [ 1410.051264][T17778] cramfs: bad data blocksize 3436389781 [ 1410.056983][T17778] cramfs: bad data blocksize 4294365136 [ 1410.063189][T17778] cramfs: bad data blocksize 4294967040 [ 1410.073500][T17778] cramfs: bad data blocksize 3959421443 [ 1410.085642][ T27] audit: type=1800 audit(2000000952.819:1170): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.20374" name="file2" dev="loop5" ino=268 res=0 errno=0 [ 1410.197174][T17783] loop4: detected capacity change from 0 to 64 [ 1410.312175][T17787] netlink: 'syz.5.20378': attribute type 5 has an invalid length. [ 1410.415875][T22367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1410.751082][T17799] loop4: detected capacity change from 0 to 4096 [ 1410.798024][T17801] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1410.814435][T17799] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 1410.815598][T10441] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1411.035115][T10441] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1411.054774][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1411.065969][T10441] stv0680 2-1:4.0: last error: 86, command = 0x70 [ 1411.081612][T10441] usb 2-1: USB disconnect, device number 109 [ 1411.827067][T17836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20403'. [ 1412.408730][T17861] loop4: detected capacity change from 0 to 2048 [ 1412.447717][T17861] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1412.478328][T17861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1412.574049][T17869] ieee802154 phy0 wpan0: encryption failed: -22 [ 1412.718747][T10441] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1412.760679][ T27] audit: type=1326 audit(2000000955.499:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.0.20422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1412.835583][ T27] audit: type=1326 audit(2000000955.499:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.0.20422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1412.899372][ T27] audit: type=1326 audit(2000000955.509:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.0.20422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1412.967494][T10441] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1412.983880][ T27] audit: type=1326 audit(2000000955.519:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.0.20422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1413.007585][T10441] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.034346][T17883] netlink: 144 bytes leftover after parsing attributes in process `syz.4.20426'. [ 1413.038003][T10441] usb 2-1: Product: syz [ 1413.080424][T10441] usb 2-1: Manufacturer: syz [ 1413.085517][ T27] audit: type=1326 audit(2000000955.519:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.0.20422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcf9c819 code=0x7ffc0000 [ 1413.113354][T10441] usb 2-1: SerialNumber: syz [ 1413.136127][T10441] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1413.161719][T30529] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1413.535615][T17897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20433'. [ 1413.776529][T10441] usb 2-1: USB disconnect, device number 110 [ 1414.257745][T30529] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1414.289978][T30529] ath9k_htc: Failed to initialize the device [ 1414.299659][T17925] loop4: detected capacity change from 0 to 16 [ 1414.302402][T10441] usb 2-1: ath9k_htc: USB layer deinitialized [ 1414.324391][T17925] erofs: (device loop4): mounted with root inode @ nid 36. [ 1414.364438][T17925] syz.4.20447: attempt to access beyond end of device [ 1414.364438][T17925] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1414.421058][T17925] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -6 in[63, 4033] out[4096] [ 1414.463914][ T27] audit: type=1800 audit(2000000957.189:1176): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.20447" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1414.504235][T17931] sctp: [Deprecated]: syz.5.20450 (pid 17931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.504235][T17931] Use struct sctp_sack_info instead [ 1414.684036][T17937] netlink: 'syz.4.20453': attribute type 21 has an invalid length. [ 1414.716039][T17937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20453'. [ 1414.764340][T17940] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1415.537236][T17943] xfrm0 speed is unknown, defaulting to 1000 [ 1415.690727][T17974] delete_channel: no stack [ 1415.851476][T17979] loop1: detected capacity change from 0 to 8 [ 1416.177508][T17465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.188931][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.696625][T18003] geneve7: entered promiscuous mode [ 1417.199396][T18025] netlink: 'syz.0.20495': attribute type 3 has an invalid length. [ 1417.385941][T18031] delete_channel: no stack [ 1417.708524][T18043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1417.807235][T18049] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1418.384485][T18073] netlink: 'syz.1.20518': attribute type 24 has an invalid length. [ 1418.756261][T18082] loop1: detected capacity change from 0 to 4096 [ 1418.792077][T18082] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1418.904763][T18082] ntfs3: loop1: failed to convert "c46c" to cp850 [ 1419.073869][ T5802] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1419.283838][ T5802] usb 1-1: Using ep0 maxpacket: 8 [ 1419.305717][ T5802] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1419.322252][T18085] loop4: detected capacity change from 0 to 32768 [ 1419.338858][ T5802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.339722][T18102] netlink: 196 bytes leftover after parsing attributes in process `syz.5.20533'. [ 1419.367750][ T5802] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1419.373529][T18102] netlink: 36 bytes leftover after parsing attributes in process `syz.5.20533'. [ 1419.393421][T18104] ip6t_srh: unknown srh invflags 4449 [ 1419.402418][ T5802] usb 1-1: New USB device found, idVendor=0402, idProduct=c010, bcdDevice= 0.40 [ 1419.425035][T18102] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1419.434521][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.469721][ T5802] usb 1-1: Product: syz [ 1419.490854][ T5802] usb 1-1: Manufacturer: syz [ 1419.496073][ T5802] usb 1-1: SerialNumber: syz [ 1419.684005][T18110] netlink: 'syz.5.20537': attribute type 64 has an invalid length. [ 1419.704119][T18110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20537'. [ 1419.724050][T18110] netlink: 'syz.5.20537': attribute type 64 has an invalid length. [ 1419.753883][T18110] netlink: 20 bytes leftover after parsing attributes in process `syz.5.20537'. [ 1419.810411][ T5802] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1419.865855][ T5802] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1419.922942][ T5802] usb 1-1: USB disconnect, device number 116 [ 1419.946536][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1420.220919][T18123] loop4: detected capacity change from 0 to 2048 [ 1420.507122][T18133] netlink: 48 bytes leftover after parsing attributes in process `syz.4.20549'. [ 1420.835118][T18148] openvswitch: netlink: Missing valid actions attribute. [ 1420.859653][T18148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.295755][T17466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1421.307668][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1421.466423][T18171] netlink: 196 bytes leftover after parsing attributes in process `syz.0.20567'. [ 1421.510055][T18171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20567'. [ 1421.527544][T18171] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1421.584614][T18158] xfrm0 speed is unknown, defaulting to 1000 [ 1421.956492][T18193] loop1: detected capacity change from 0 to 256 [ 1422.022030][T18193] FAT-fs (loop1): Directory bread(block 64) failed [ 1422.051337][T18193] FAT-fs (loop1): Directory bread(block 65) failed [ 1422.090030][T18193] FAT-fs (loop1): Directory bread(block 66) failed [ 1422.116646][T18197] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1422.147718][T18193] FAT-fs (loop1): Directory bread(block 67) failed [ 1422.171882][T18193] FAT-fs (loop1): Directory bread(block 68) failed [ 1422.188655][T18193] FAT-fs (loop1): Directory bread(block 69) failed [ 1422.224805][T18193] FAT-fs (loop1): Directory bread(block 70) failed [ 1422.234167][T18193] FAT-fs (loop1): Directory bread(block 71) failed [ 1422.249314][T18193] FAT-fs (loop1): Directory bread(block 72) failed [ 1422.256496][T18193] FAT-fs (loop1): Directory bread(block 73) failed [ 1422.448332][T18208] loop4: detected capacity change from 0 to 16 [ 1422.474261][T18208] erofs: (device loop4): mounted with root inode @ nid 36. [ 1422.642775][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20586'. [ 1422.677992][T18212] netlink: 32 bytes leftover after parsing attributes in process `syz.5.20586'. [ 1423.190636][T18230] loop5: detected capacity change from 0 to 4096 [ 1423.220103][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.226588][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.247985][T18230] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1423.271961][T18236] netlink: 'syz.1.20598': attribute type 30 has an invalid length. [ 1423.353489][T18230] ntfs: volume version 3.1. [ 1423.920875][T18257] loop4: detected capacity change from 0 to 8 [ 1423.950642][T18257] cramfs: bad data blocksize 3222268820 [ 1423.969827][T18257] cramfs: Error -3 while decompressing! [ 1424.003535][T18257] cramfs: ffffffff973fe39c(16)->ffff88806ca5b000(4096) [ 1424.034255][T18257] cramfs: bad data blocksize 4165569313 [ 1424.043230][T18257] cramfs: bad data blocksize 3825676623 [ 1424.076981][T18257] cramfs: bad data blocksize 4294480561 [ 1424.082692][T18257] cramfs: bad data blocksize 1076736 [ 1424.093605][T18257] cramfs: bad data blocksize 485460736 [ 1424.102677][T18257] cramfs: bad data blocksize 3808479469 [ 1424.119277][T18257] cramfs: bad data blocksize 3222268820 [ 1424.132586][ T27] audit: type=1800 audit(2000000966.869:1177): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.20609" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1424.144199][ T5802] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1424.294360][T17471] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1424.376901][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 1424.393351][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1424.407187][ T5802] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.426596][ T5802] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 1424.449497][ T5802] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1424.475743][ T5802] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1424.503848][T17471] usb 1-1: Using ep0 maxpacket: 32 [ 1424.507813][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.519062][T17471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.526308][ T5802] usb 6-1: Product: syz [ 1424.545211][ T5802] usb 6-1: Manufacturer: syz [ 1424.548745][T17471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.553641][ T5802] usb 6-1: SerialNumber: syz [ 1424.573441][T17471] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1424.583662][T17471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.617195][T17471] usb 1-1: config 0 descriptor?? [ 1424.639506][T17471] hub 1-1:0.0: USB hub found [ 1424.703476][T18280] loop4: detected capacity change from 0 to 128 [ 1424.745282][T18280] qnx6: unable to read the first superblock [ 1424.845093][ T5802] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1424.859733][T17471] hub 1-1:0.0: 1 port detected [ 1424.905615][ T5802] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 1424.980099][ T5802] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 1424.994488][T18286] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1425.022535][ T5802] usb 6-1: USB disconnect, device number 75 [ 1425.065420][T17471] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1425.071818][T17471] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1425.117170][ T7380] udevd[7380]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1425.153594][T17471] usbhid 1-1:0.0: can't add hid device: -71 [ 1425.160085][T17471] usbhid: probe of 1-1:0.0 failed with error -71 [ 1425.205467][T17471] usb 1-1: USB disconnect, device number 117 [ 1425.624232][T30529] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1425.854757][T30529] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1425.868836][T30529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.882956][T30529] usb 2-1: Product: syz [ 1425.913995][T30529] usb 2-1: Manufacturer: syz [ 1425.918649][T30529] usb 2-1: SerialNumber: syz [ 1425.947287][T30529] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1425.975275][T10441] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1426.538704][ T5801] usb 2-1: USB disconnect, device number 111 [ 1426.889177][T18352] comedi comedi3: c6xdigio: I/O port conflict (0xcf7,3) [ 1427.054317][T10441] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1427.064279][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.064879][T17466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.098182][T10441] ath9k_htc: Failed to initialize the device [ 1427.124848][ T5801] usb 2-1: ath9k_htc: USB layer deinitialized [ 1427.203096][T18362] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (at-a2150c) [ 1427.314076][ T5802] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1427.357587][T18370] loop1: detected capacity change from 0 to 256 [ 1427.413520][T18370] FAT-fs (loop1): Directory bread(block 64) failed [ 1427.430795][T18370] FAT-fs (loop1): Directory bread(block 65) failed [ 1427.464097][T18370] FAT-fs (loop1): Directory bread(block 66) failed [ 1427.470695][T18370] FAT-fs (loop1): Directory bread(block 67) failed [ 1427.491240][T18370] FAT-fs (loop1): Directory bread(block 68) failed [ 1427.499694][T18370] FAT-fs (loop1): Directory bread(block 69) failed [ 1427.512556][T18370] FAT-fs (loop1): Directory bread(block 70) failed [ 1427.514076][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 1427.524989][T18370] FAT-fs (loop1): Directory bread(block 71) failed [ 1427.540663][T18370] FAT-fs (loop1): Directory bread(block 72) failed [ 1427.545620][ T5802] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1427.554527][T18370] FAT-fs (loop1): Directory bread(block 73) failed [ 1427.559320][ T5802] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1427.584192][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.602787][ T5802] usb 1-1: Product: syz [ 1427.610881][ T5802] usb 1-1: Manufacturer: syz [ 1427.616830][ T5802] usb 1-1: SerialNumber: syz [ 1427.640885][ T5802] r8152-cfgselector 1-1: config 0 descriptor?? [ 1427.761287][T18379] loop4: detected capacity change from 0 to 256 [ 1427.827889][T18379] FAT-fs (loop4): Directory bread(block 64) failed [ 1427.839285][T18379] FAT-fs (loop4): Directory bread(block 65) failed [ 1427.846564][T18379] FAT-fs (loop4): Directory bread(block 66) failed [ 1427.853414][T18379] FAT-fs (loop4): Directory bread(block 67) failed [ 1427.860633][T18379] FAT-fs (loop4): Directory bread(block 68) failed [ 1427.878817][T18379] FAT-fs (loop4): Directory bread(block 69) failed [ 1427.886150][T18379] FAT-fs (loop4): Directory bread(block 70) failed [ 1427.893107][T18379] FAT-fs (loop4): Directory bread(block 71) failed [ 1427.914253][T18379] FAT-fs (loop4): Directory bread(block 72) failed [ 1427.920848][T18379] FAT-fs (loop4): Directory bread(block 73) failed [ 1428.079440][ T5802] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1428.097295][ T5802] r8152-cfgselector 1-1: USB disconnect, device number 118 [ 1428.173732][T18387] tipc: Started in network mode [ 1428.193897][T18387] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1428.214501][T18387] tipc: Enabled bearer , priority 10 [ 1428.299744][T18389] loop1: detected capacity change from 0 to 16 [ 1428.327575][T18389] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1428.340511][ T5755] udevd[5755]: incorrect cramfs checksum on /dev/loop1 [ 1428.362995][T18389] cramfs: Error -3 while decompressing! [ 1428.384783][T18389] cramfs: ffffffff973fa368(27)->ffff888075f38000(4096) [ 1428.391893][T18389] cramfs: Error -3 while decompressing! [ 1428.401949][T18389] cramfs: ffffffff973fa368(27)->ffff888075f38000(4096) [ 1428.434568][ T27] audit: type=1800 audit(2000000971.179:1178): pid=18389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20672" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1428.607993][T18400] loop1: detected capacity change from 0 to 1024 [ 1428.645111][T18400] EXT4-fs: Ignoring removed orlov option [ 1428.692971][T18400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.866110][T18400] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.20677: bit already cleared for inode 15 [ 1428.944222][T18400] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1429.009262][T18415] loop5: detected capacity change from 0 to 128 [ 1429.022695][T18418] loop4: detected capacity change from 0 to 512 [ 1429.034751][T18418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1429.069099][T18418] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1429.081005][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.082516][T18415] qnx6: unable to read the first superblock [ 1429.098177][T18418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 1429.107625][T18418] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 1429.123946][T18418] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1429.162007][T18418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1429.203917][T18418] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 1429.339358][ T5802] tipc: Node number set to 9480874 [ 1429.348389][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.367901][T18423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20687'. [ 1429.480570][T18428] loop4: detected capacity change from 0 to 512 [ 1429.543951][T18428] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1429.630095][T18428] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1429.703949][T18428] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.20689: bg 0: block 104: invalid block bitmap [ 1429.793935][T18428] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1429.821430][T18428] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.20689: invalid indirect mapped block 1 (level 1) [ 1429.825107][T18441] MPI: mpi too large (113288 bits) [ 1429.851330][T18443] netlink: 384 bytes leftover after parsing attributes in process `syz.1.20696'. [ 1429.852467][T18428] EXT4-fs (loop4): 1 truncate cleaned up [ 1429.901403][T18428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1430.060356][T17466] bond0: (slave bond_slave_0): interface is now down [ 1430.094034][T17466] bond0: (slave bond_slave_1): interface is now down [ 1430.100788][T17466] bond0: (slave syz_tun): interface is now down [ 1430.172326][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.177132][T17466] bond0: now running without any active interface! [ 1430.281918][T18453] loop1: detected capacity change from 0 to 512 [ 1430.326030][T18453] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1430.897907][T18468] loop1: detected capacity change from 0 to 4096 [ 1430.910870][T18468] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1430.986163][T18477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20712'. [ 1430.997556][T18468] ntfs3: loop1: Inode r=19 is not in use! [ 1431.013431][T18468] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1431.150279][T18468] ntfs3: loop1: ino=1d, "file1" attr_set_size [ 1431.405106][T18483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20715'. [ 1431.423976][T18483] netlink: 'syz.1.20715': attribute type 2 has an invalid length. [ 1431.440801][T18483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20715'. [ 1431.824873][T18481] loop5: detected capacity change from 0 to 32768 [ 1431.850042][T18481] (syz.5.20714,18481,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1431.864963][T18481] (syz.5.20714,18481,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1431.907740][T18481] JBD2: Ignoring recovery information on journal [ 1431.924483][T18490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.118997][T18481] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1432.204204][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.427362][T18505] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1432.478611][T21073] ocfs2: Unmounting device (7,5) on (node local) [ 1432.827711][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.827757][T17465] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.881536][T18513] set_capacity_and_notify: 1 callbacks suppressed [ 1432.881549][T18513] loop4: detected capacity change from 0 to 4096 [ 1433.036655][T18513] ntfs3: loop4: failed to convert "0080" to cp864 [ 1434.481042][T18570] loop1: detected capacity change from 0 to 512 [ 1434.580557][T18570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.628144][T18570] ext4 filesystem being mounted at /3191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.887695][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.913159][T18582] netlink: 92 bytes leftover after parsing attributes in process `syz.4.20750'. [ 1434.965655][T18582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1435.175318][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20751'. [ 1435.660058][T18567] loop5: detected capacity change from 0 to 40427 [ 1435.751555][T18567] F2FS-fs (loop5): invalid crc value [ 1435.837509][T18567] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1435.965080][T18567] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1436.064532][T30529] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1436.162970][T21073] syz-executor: attempt to access beyond end of device [ 1436.162970][T21073] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1436.199791][T21073] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1436.315528][T30529] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1436.334036][T30529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.362682][T30529] usb 1-1: config 0 descriptor?? [ 1436.468593][T18608] loop1: detected capacity change from 0 to 40427 [ 1436.488754][T18615] loop4: detected capacity change from 0 to 32768 [ 1436.526394][T18608] F2FS-fs (loop1): invalid crc value [ 1436.538419][T18615] [ 1436.538419][T18615] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1436.538419][T18615] [ 1436.558422][T18608] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1436.650766][T18615] JFS: metapage_get_blocks failed [ 1436.684205][T18615] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 1436.684205][T18615] [ 1436.716887][T18608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1436.734246][T18615] ERROR: (device loop4): diWrite: ixpxd invalid [ 1436.734246][T18615] [ 1436.766080][T18615] ERROR: (device loop4): txCommit: [ 1436.766080][T18615] [ 1436.792064][T30529] [drm:udl_init] *ERROR* Selecting channel failed [ 1436.839736][T30529] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 1436.890225][T30529] [drm] Initialized udl on minor 2 [ 1436.917201][T15013] [ 1436.917201][T15013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1436.917201][T15013] [ 1436.924475][T30529] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1436.948169][T15013] [ 1436.948169][T15013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1436.948169][T15013] [ 1436.965061][T22392] syz-executor: attempt to access beyond end of device [ 1436.965061][T22392] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1436.981435][T30529] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1436.996014][T17471] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1437.014612][T30529] usb 1-1: USB disconnect, device number 119 [ 1437.042937][T17471] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1437.054051][T22392] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1437.138516][T18626] genirq: Flags mismatch irq 7. 00000000 (das16m1) vs. 00000000 (at-a2150c) [ 1437.319707][T18631] loop4: detected capacity change from 0 to 64 [ 1437.397023][T18631] hfs: small file entry [ 1437.730829][T18641] loop4: detected capacity change from 0 to 1024 [ 1437.920355][ T5802] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1437.935536][T17466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.113908][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 1438.151825][ T5802] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1438.164028][ T5802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1438.183819][ T5802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1438.193858][T18651] loop1: detected capacity change from 0 to 2048 [ 1438.198050][ T5802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1438.229726][T18651] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1438.244117][ T5802] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1438.294755][ T5802] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1438.333514][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.381029][ T5802] usbtmc 6-1:16.0: bulk endpoints not found [ 1438.574728][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.694413][ T5802] usb 6-1: USB disconnect, device number 76 [ 1438.737190][T18667] Bluetooth: MGMT ver 1.22 [ 1439.274272][ T5802] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1439.495846][ T5802] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1439.514117][ T5802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1439.540046][ T5802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1439.582644][ T5802] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.635857][ T5802] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23 [ 1439.658605][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.681094][ T5802] usbtmc 6-1:16.0: bulk endpoints not found [ 1439.695437][ T5802] ati_remote 6-1:16.0: ati_remote_probe: Unexpected endpoint_in [ 1439.934281][ T5801] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1439.947191][T17471] usb 6-1: USB disconnect, device number 77 [ 1440.023944][ T5802] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1440.145474][ T5801] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1440.171554][ T5801] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1440.190004][ T5801] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.201546][ T5801] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1440.215720][ T5801] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1440.225978][ T5802] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1440.235375][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1440.243865][ T5801] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 1440.252924][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.261571][ T5802] usb 2-1: Product: syz [ 1440.268089][ T5802] usb 2-1: Manufacturer: syz [ 1440.272833][ T5802] usb 2-1: SerialNumber: syz [ 1440.288498][ T5801] usb 5-1: config 0 descriptor?? [ 1440.301880][ T5802] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1440.558488][T18713] loop5: detected capacity change from 0 to 512 [ 1440.612780][T18713] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1440.621609][T18713] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1440.630485][T18713] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 1440.643069][T18713] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1440.658773][T18713] EXT4-fs (loop5): Cannot turn on quotas: error -5 [ 1440.673912][T18713] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.20803: bg 0: block 64: padding at end of block bitmap is not set [ 1440.696474][T18713] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1440.717849][ T5802] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1440.718624][T18713] EXT4-fs (loop5): 1 truncate cleaned up [ 1440.736830][ T5801] hid-alps 0003:044E:120C.0001: unbalanced collection at end of report description [ 1440.746334][ T5802] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1440.758481][ T5801] hid-alps 0003:044E:120C.0001: parse failed [ 1440.773312][ T5801] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 1440.776835][T18713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1440.934122][T17471] usb 2-1: USB disconnect, device number 112 [ 1440.938468][ T5801] usb 5-1: USB disconnect, device number 100 [ 1440.978931][T21073] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.757240][T18742] loop5: detected capacity change from 0 to 2048 [ 1441.810589][T18742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1442.330410][T18762] loop5: detected capacity change from 0 to 256 [ 1442.357774][T18762] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1442.525572][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20826'. [ 1442.535244][T18766] netlink: 7 bytes leftover after parsing attributes in process `syz.0.20826'. [ 1443.054475][T17466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1443.094123][T18768] loop5: detected capacity change from 0 to 40427 [ 1443.110992][T18768] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 1443.141678][T18768] F2FS-fs (loop5): invalid crc value [ 1443.163536][T18768] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1443.308000][T18768] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1443.434932][T18788] loop1: detected capacity change from 0 to 512 [ 1443.518615][T18788] EXT4-fs (loop1): 1 truncate cleaned up [ 1443.551820][T18788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.784818][T22392] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.807472][ T5802] kernel write not supported for file [eventfd] (pid: 5802 comm: kworker/1:6) [ 1444.344852][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.510730][T18817] loop4: detected capacity change from 0 to 512 [ 1444.603371][T18817] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1444.723120][T18829] loop1: detected capacity change from 0 to 1024 [ 1444.884474][T15013] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1444.967473][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20857'. [ 1445.024117][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20857'. [ 1445.134831][T18837] loop4: detected capacity change from 0 to 2048 [ 1445.185818][T18837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1445.381155][T18846] netlink: 104 bytes leftover after parsing attributes in process `syz.5.20863'. [ 1445.585296][ T27] audit: type=1326 audit(2000000988.329:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1445.589646][T18855] loop4: detected capacity change from 0 to 164 [ 1445.644020][ T27] audit: type=1326 audit(2000000988.329:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1445.693986][ T27] audit: type=1326 audit(2000000988.329:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1445.728635][T18855] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1445.784970][ T27] audit: type=1326 audit(2000000988.329:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1445.873228][ T27] audit: type=1326 audit(2000000988.329:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1445.904333][ T27] audit: type=1326 audit(2000000988.349:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1445.927227][T18861] genirq: Flags mismatch irq 10. 00000000 (pcl812) vs. 00000080 (virtio2) [ 1445.952682][ T27] audit: type=1326 audit(2000000988.379:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1446.001010][ T27] audit: type=1326 audit(2000000988.379:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa999c819 code=0x7ffc0000 [ 1446.051012][T18862] loop5: detected capacity change from 0 to 4096 [ 1446.067424][ T27] audit: type=1326 audit(2000000988.379:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feaa995d04e code=0x7ffc0000 [ 1446.109076][ T27] audit: type=1326 audit(2000000988.379:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feaa995d04e code=0x7ffc0000 [ 1446.126808][T18865] loop4: detected capacity change from 0 to 512 [ 1446.139220][T18864] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1446.190127][ T27] audit: type=1326 audit(2000000988.379:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.1.20867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feaa995d04e code=0x7ffc0000 [ 1446.224909][T18865] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1446.235001][T18865] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1446.240154][T18862] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 1446.255678][T18865] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1446.274398][T18865] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 1446.304310][T18865] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.20872: bg 0: block 64: padding at end of block bitmap is not set [ 1446.322981][T18862] NILFS (loop5): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 1446.377775][T18865] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1446.433860][T18865] EXT4-fs (loop4): 1 truncate cleaned up [ 1446.452236][T18865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1446.692505][T15013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.750061][T18877] genirq: Flags mismatch irq 32. 00000000 (pcmmio) vs. 00000000 (virtio1-output.0) [ 1446.935065][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20878'. [ 1447.026585][T18885] netlink: 'syz.0.20881': attribute type 2 has an invalid length. [ 1447.177689][T18891] loop4: detected capacity change from 0 to 16 [ 1447.214804][T18891] erofs: (device loop4): mounted with root inode @ nid 36. [ 1447.352124][T18897] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20887'. [ 1447.399272][T18897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20887'. [ 1447.585189][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20892'. [ 1448.072467][T18903] loop4: detected capacity change from 0 to 32768 [ 1448.088452][T18903] [ 1448.088452][T18903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1448.088452][T18903] [ 1448.185976][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1448.193061][T15013] [ 1448.193061][T15013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1448.193061][T15013] [ 1448.193485][T15013] [ 1448.193485][T15013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1448.193485][T15013] [ 1448.644176][T10441] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1448.832497][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20902'. [ 1448.864035][T10441] usb 6-1: Using ep0 maxpacket: 32 [ 1448.873164][T10441] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1448.882681][T10441] usb 6-1: config 0 has no interface number 0 [ 1448.900649][T10441] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1448.913681][T10441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.929494][T10441] usb 6-1: Product: syz [ 1448.938447][T10441] usb 6-1: Manufacturer: syz [ 1448.943073][T10441] usb 6-1: SerialNumber: syz [ 1448.970618][T10441] usb 6-1: config 0 descriptor?? [ 1448.987561][T10441] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1449.156303][T18920] loop4: detected capacity change from 0 to 40427 [ 1449.183029][T18920] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1449.198124][T18920] F2FS-fs (loop4): heap/no_heap options were deprecated [ 1449.230404][T10441] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1449.232683][T18920] F2FS-fs (loop4): invalid crc value [ 1449.271979][T18920] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1449.291188][T10441] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1449.461013][T18920] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1449.640521][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1449.653884][T10441] usb 6-1: USB disconnect, device number 78 [ 1449.675830][T10441] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1449.688114][T18939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1449.690738][ T51] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1449.727475][T15013] syz-executor: attempt to access beyond end of device [ 1449.727475][T15013] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1449.748816][T15013] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1449.749307][T10441] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1449.781229][T10441] quatech2 6-1:0.51: device disconnected [ 1450.094769][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1450.125877][T18947] loop1: detected capacity change from 0 to 256 [ 1450.133176][T18947] exfat: Deprecated parameter 'namecase' [ 1450.171084][T18947] exfat: Deprecated parameter 'utf8' [ 1450.269969][T18947] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1450.618822][T18957] vlan2: entered promiscuous mode [ 1450.633910][T18957] bridge0: entered promiscuous mode [ 1450.644426][T18957] bond0: entered promiscuous mode [ 1450.949985][T18965] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1450.979145][T18964] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 1451.118671][T18951] loop5: detected capacity change from 0 to 32768 [ 1451.180360][T18951] JBD2: Ignoring recovery information on journal [ 1451.201913][T18970] loop4: detected capacity change from 0 to 1024 [ 1451.263859][T18970] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1451.278112][T18951] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1451.283911][T18970] hfsplus: xattr searching failed [ 1451.346959][ T1077] hfsplus: b-tree write err: -5, ino 25 [ 1451.377724][ T1077] hfsplus: b-tree write err: -5, ino 4 [ 1451.412899][ T1077] hfsplus: b-tree write err: -5, ino 2 [ 1451.605058][T21073] ocfs2: Unmounting device (7,5) on (node local) [ 1451.807358][T18983] loop5: detected capacity change from 0 to 8 [ 1451.846474][T18983] SQUASHFS error: Unable to read inode 0xa7 [ 1451.868260][T18967] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1452.013503][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20928'. [ 1452.416615][T19004] tipc: Enabling of bearer rejected, failed to enable media [ 1452.442677][T19007] netlink: 52 bytes leftover after parsing attributes in process `syz.1.20936'. [ 1452.457012][T19007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20936'. [ 1452.949610][T19005] loop4: detected capacity change from 0 to 32768 [ 1452.978360][T19005] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.20934 (19005) [ 1453.024059][T19005] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1453.043162][T19005] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1453.054655][T19005] BTRFS info (device loop4): using free space tree [ 1453.135099][T19005] BTRFS info (device loop4): enabling ssd optimizations [ 1453.153864][T19005] BTRFS info (device loop4): auto enabling async discard [ 1453.296198][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1453.334674][T19046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20947'. [ 1453.402948][T19048] xt_HMARK: proto mask must be zero with L3 mode [ 1453.429516][T15013] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1453.867547][T19064] loop1: detected capacity change from 0 to 128 [ 1453.947233][T19064] FAT-fs (loop1): Directory bread(block 414) failed [ 1453.958851][T19064] FAT-fs (loop1): Directory bread(block 415) failed [ 1454.004080][T19064] FAT-fs (loop1): Directory bread(block 416) failed [ 1454.015925][T19064] FAT-fs (loop1): Directory bread(block 417) failed [ 1454.047148][T19064] FAT-fs (loop1): Directory bread(block 418) failed [ 1454.059119][T19064] FAT-fs (loop1): Directory bread(block 419) failed [ 1454.086709][T19064] FAT-fs (loop1): Directory bread(block 420) failed [ 1454.113932][T19064] FAT-fs (loop1): Directory bread(block 421) failed [ 1454.194498][T19064] FAT-fs (loop1): Directory bread(block 414) failed [ 1454.235110][T19064] FAT-fs (loop1): Directory bread(block 415) failed [ 1454.468651][T19075] Cannot find add_set index 46338 as target [ 1454.529222][T19056] xfrm0 speed is unknown, defaulting to 1000 [ 1454.910013][T19068] loop4: detected capacity change from 0 to 32768 [ 1454.925569][T19068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.20958 (19068) [ 1454.962944][T19068] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1454.973690][T19068] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1454.990864][T19068] BTRFS info (device loop4): setting nodatasum [ 1455.002252][T19068] BTRFS info (device loop4): force zlib compression, level 3 [ 1455.010597][T19068] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1455.020572][T19068] BTRFS info (device loop4): use lzo compression, level 0 [ 1455.043456][T19068] BTRFS info (device loop4): turning on flush-on-commit [ 1455.063331][T19068] BTRFS info (device loop4): enabling auto defrag [ 1455.070333][T19068] BTRFS info (device loop4): max_inline at 4096 [ 1455.086619][T19068] BTRFS info (device loop4): using free space tree [ 1455.177065][T19068] BTRFS info (device loop4): enabling ssd optimizations [ 1455.194194][T30529] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1455.374207][T30529] usb 2-1: Using ep0 maxpacket: 8 [ 1455.396878][T30529] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1455.404954][T15013] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1455.438604][T30529] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1455.452806][T30529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.468803][T30529] usb 2-1: Product: syz [ 1455.473167][T30529] usb 2-1: Manufacturer: syz [ 1455.501472][T30529] usb 2-1: SerialNumber: syz [ 1455.639696][T30529] usb 2-1: config 0 descriptor?? [ 1455.674898][T30529] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1455.720930][T30529] usb 2-1: setting power ON [ 1455.743490][T30529] dvb-usb: bulk message failed: -22 (2/0) [ 1455.774886][T30529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1455.806190][T30529] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1455.839114][T30529] usb 2-1: media controller created [ 1455.855244][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1455.933577][T30529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1456.019874][T30529] usb 2-1: selecting invalid altsetting 6 [ 1456.043575][T30529] usb 2-1: digital interface selection failed (-22) [ 1456.060699][T30529] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1456.085676][T30529] usb 2-1: setting power OFF [ 1456.101772][T30529] dvb-usb: bulk message failed: -22 (2/0) [ 1456.173842][T30529] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1456.183181][T30529] (NULL device *): no alternate interface [ 1456.325907][T30529] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1456.372727][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20977'. [ 1456.454026][T30529] usb 2-1: USB disconnect, device number 113 [ 1456.679845][T19135] netlink: 'syz.5.20981': attribute type 5 has an invalid length. [ 1456.698474][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20981'. [ 1457.540723][T19142] loop4: detected capacity change from 0 to 32768 [ 1457.586362][T19142] JBD2: Ignoring recovery information on journal [ 1457.653424][T19142] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1457.801998][T19142] [ 1457.804385][T19142] ====================================================== [ 1457.811410][T19142] WARNING: possible circular locking dependency detected [ 1457.818448][T19142] syzkaller #0 Not tainted [ 1457.822892][T19142] ------------------------------------------------------ [ 1457.829920][T19142] syz.4.20984/19142 is trying to acquire lock: [ 1457.836086][T19142] ffff88805b505f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1457.849440][T19142] [ 1457.849440][T19142] but task is already holding lock: [ 1457.856907][T19142] ffff88806ec786f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 1457.866423][T19142] [ 1457.866423][T19142] which lock already depends on the new lock. [ 1457.866423][T19142] [ 1457.876838][T19142] [ 1457.876838][T19142] the existing dependency chain (in reverse order) is: [ 1457.885862][T19142] [ 1457.885862][T19142] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1457.893706][T19142] down_read+0x46/0x2e0 [ 1457.898397][T19142] ocfs2_init_acl+0x30a/0x770 [ 1457.903619][T19142] ocfs2_mknod+0x140f/0x2300 [ 1457.908767][T19142] ocfs2_create+0x196/0x430 [ 1457.913812][T19142] path_openat+0x12a0/0x3230 [ 1457.918948][T19142] do_filp_open+0x1f5/0x430 [ 1457.923994][T19142] do_sys_openat2+0x134/0x1d0 [ 1457.929230][T19142] __x64_sys_openat+0x139/0x160 [ 1457.934625][T19142] do_syscall_64+0x55/0xa0 [ 1457.939579][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1457.946011][T19142] [ 1457.946011][T19142] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1457.954538][T19142] down_read+0x46/0x2e0 [ 1457.959233][T19142] ocfs2_start_trans+0x3a8/0x6f0 [ 1457.964711][T19142] ocfs2_modify_bh+0xe4/0x4c0 [ 1457.969929][T19142] ocfs2_local_read_info+0x1445/0x1800 [ 1457.975927][T19142] dquot_load_quota_sb+0x757/0xb80 [ 1457.981549][T19142] dquot_load_quota_inode+0x2dc/0x5d0 [ 1457.987430][T19142] ocfs2_enable_quotas+0x1c9/0x490 [ 1457.993048][T19142] ocfs2_fill_super+0x417d/0x5010 [ 1457.998587][T19142] mount_bdev+0x221/0x2d0 [ 1458.003447][T19142] legacy_get_tree+0xea/0x180 [ 1458.008642][T19142] vfs_get_tree+0x8c/0x280 [ 1458.013773][T19142] do_new_mount+0x24b/0xa40 [ 1458.018835][T19142] __se_sys_mount+0x2e7/0x3d0 [ 1458.024018][T19142] do_syscall_64+0x55/0xa0 [ 1458.028962][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.035364][T19142] [ 1458.035364][T19142] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 1458.042835][T19142] ocfs2_start_trans+0x2a9/0x6f0 [ 1458.048394][T19142] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 1458.054626][T19142] ocfs2_dismount_volume+0x1e5/0x8a0 [ 1458.060430][T19142] generic_shutdown_super+0x134/0x2b0 [ 1458.066316][T19142] kill_block_super+0x44/0x90 [ 1458.071506][T19142] deactivate_locked_super+0x97/0x100 [ 1458.077385][T19142] cleanup_mnt+0x43b/0x4d0 [ 1458.082324][T19142] task_work_run+0x1d4/0x260 [ 1458.087435][T19142] exit_to_user_mode_loop+0xe6/0x110 [ 1458.093233][T19142] exit_to_user_mode_prepare+0xee/0x180 [ 1458.099297][T19142] syscall_exit_to_user_mode+0x1a/0x50 [ 1458.105271][T19142] do_syscall_64+0x61/0xa0 [ 1458.110194][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.116603][T19142] [ 1458.116603][T19142] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1458.127101][T19142] down_write+0x97/0x200 [ 1458.131856][T19142] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1458.138253][T19142] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 1458.145182][T19142] ocfs2_reserve_suballoc_bits+0x78b/0x44c0 [ 1458.151609][T19142] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1458.158451][T19142] ocfs2_extend_dir+0xcca/0x48b0 [ 1458.163927][T19142] ocfs2_prepare_dir_for_insert+0x315b/0x56b0 [ 1458.170497][T19142] ocfs2_mknod+0x81b/0x2300 [ 1458.175504][T19142] ocfs2_mkdir+0x196/0x430 [ 1458.180426][T19142] vfs_mkdir+0x296/0x440 [ 1458.185174][T19142] do_mkdirat+0x1dc/0x450 [ 1458.190010][T19142] __x64_sys_mkdirat+0x89/0xa0 [ 1458.195304][T19142] do_syscall_64+0x55/0xa0 [ 1458.200243][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.206645][T19142] [ 1458.206645][T19142] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 1458.217148][T19142] __lock_acquire+0x2df1/0x7d40 [ 1458.222517][T19142] lock_acquire+0x19e/0x420 [ 1458.227526][T19142] down_write+0x97/0x200 [ 1458.232273][T19142] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1458.238687][T19142] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1458.245564][T19142] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1458.251736][T19142] ocfs2_xattr_set+0xc3f/0x13e0 [ 1458.257140][T19142] __vfs_setxattr+0x431/0x470 [ 1458.262347][T19142] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1458.268161][T19142] vfs_setxattr+0x16b/0x2f0 [ 1458.273202][T19142] path_setxattr+0x3f3/0x5d0 [ 1458.278310][T19142] __x64_sys_setxattr+0xbb/0xd0 [ 1458.283672][T19142] do_syscall_64+0x55/0xa0 [ 1458.288688][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.295122][T19142] [ 1458.295122][T19142] other info that might help us debug this: [ 1458.295122][T19142] [ 1458.305350][T19142] Chain exists of: [ 1458.305350][T19142] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1458.305350][T19142] [ 1458.322292][T19142] Possible unsafe locking scenario: [ 1458.322292][T19142] [ 1458.329743][T19142] CPU0 CPU1 [ 1458.335095][T19142] ---- ---- [ 1458.340441][T19142] lock(&oi->ip_xattr_sem); [ 1458.345027][T19142] lock(&journal->j_trans_barrier); [ 1458.352843][T19142] lock(&oi->ip_xattr_sem); [ 1458.359941][T19142] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 1458.367213][T19142] [ 1458.367213][T19142] *** DEADLOCK *** [ 1458.367213][T19142] [ 1458.375344][T19142] 3 locks held by syz.4.20984/19142: [ 1458.380605][T19142] #0: ffff88805b376418 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1458.389815][T19142] #1: ffff88806ec789d8 (&sb->s_type->i_mutex_key#38){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 1458.400250][T19142] #2: ffff88806ec786f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0 [ 1458.410233][T19142] [ 1458.410233][T19142] stack backtrace: [ 1458.416107][T19142] CPU: 1 PID: 19142 Comm: syz.4.20984 Not tainted syzkaller #0 [ 1458.423636][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1458.433686][T19142] Call Trace: [ 1458.436968][T19142] [ 1458.439893][T19142] dump_stack_lvl+0x18c/0x250 [ 1458.444586][T19142] ? load_image+0x420/0x420 [ 1458.449110][T19142] ? show_regs_print_info+0x20/0x20 [ 1458.454400][T19142] ? print_circular_bug+0x12b/0x1a0 [ 1458.459617][T19142] check_noncircular+0x2fc/0x400 [ 1458.464640][T19142] ? print_deadlock_bug+0x5d0/0x5d0 [ 1458.469824][T19142] ? lockdep_lock+0xf5/0x230 [ 1458.474403][T19142] ? _find_first_zero_bit+0xd3/0x100 [ 1458.479690][T19142] __lock_acquire+0x2df1/0x7d40 [ 1458.484536][T19142] ? __lock_acquire+0x7d40/0x7d40 [ 1458.489582][T19142] ? verify_lock_unused+0x140/0x140 [ 1458.494794][T19142] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1458.500431][T19142] ? do_raw_spin_lock+0x11f/0x2c0 [ 1458.505469][T19142] ? mutex_unlock+0x10/0x10 [ 1458.510045][T19142] lock_acquire+0x19e/0x420 [ 1458.514532][T19142] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1458.520589][T19142] ? ocfs2_get_system_file_inode+0x202/0x850 [ 1458.526564][T19142] ? __might_sleep+0xe0/0xe0 [ 1458.531168][T19142] ? read_lock_is_recursive+0x20/0x20 [ 1458.536526][T19142] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1458.542690][T19142] ? verify_lock_unused+0x140/0x140 [ 1458.547877][T19142] ? check_noncircular+0x18a/0x400 [ 1458.553014][T19142] down_write+0x97/0x200 [ 1458.557244][T19142] ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1458.563300][T19142] ? down_read_killable+0x340/0x340 [ 1458.568487][T19142] ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 1458.574368][T19142] ? mark_lock+0x94/0x320 [ 1458.578683][T19142] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1458.584647][T19142] ? lock_chain_count+0x20/0x20 [ 1458.589486][T19142] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1458.595374][T19142] ? lockdep_hardirqs_on+0x98/0x150 [ 1458.600558][T19142] ? ocfs2_block_group_search+0x470/0x470 [ 1458.606266][T19142] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1458.612162][T19142] ? _raw_spin_unlock+0x40/0x40 [ 1458.617113][T19142] ? stack_trace_save+0xaa/0x100 [ 1458.622083][T19142] ? stack_trace_snprint+0xf0/0xf0 [ 1458.627196][T19142] ? __stack_depot_save+0x560/0x630 [ 1458.632386][T19142] ? kasan_set_track+0x5f/0x70 [ 1458.637136][T19142] ? kasan_set_track+0x4e/0x70 [ 1458.641976][T19142] ? __kasan_kmalloc+0x8f/0xa0 [ 1458.646743][T19142] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 1458.653253][T19142] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1458.659056][T19142] ? ocfs2_xattr_set+0xc3f/0x13e0 [ 1458.664068][T19142] ? __vfs_setxattr+0x431/0x470 [ 1458.668915][T19142] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 1458.674360][T19142] ? vfs_setxattr+0x16b/0x2f0 [ 1458.679022][T19142] ? path_setxattr+0x3f3/0x5d0 [ 1458.683779][T19142] ? __x64_sys_setxattr+0xbb/0xd0 [ 1458.688793][T19142] ? do_syscall_64+0x55/0xa0 [ 1458.693390][T19142] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.699458][T19142] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1458.705803][T19142] ? ocfs2_init_steal_slots+0x160/0x160 [ 1458.711335][T19142] ? ocfs2_xattr_block_set+0x2e30/0x2e30 [ 1458.716985][T19142] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1458.722609][T19142] ? ocfs2_xattr_set+0xc05/0x13e0 [ 1458.727629][T19142] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 1458.733688][T19142] ? ocfs2_truncate_log_needs_flush+0x130/0x310 [ 1458.739919][T19142] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 1458.745803][T19142] ? down_write+0x16e/0x200 [ 1458.750293][T19142] ? down_read_killable+0x340/0x340 [ 1458.755483][T19142] ? up_write+0x1c3/0x410 [ 1458.759803][T19142] ocfs2_xattr_set+0xc3f/0x13e0 [ 1458.764652][T19142] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 1458.770358][T19142] ? __lock_acquire+0x1347/0x7d40 [ 1458.775364][T19142] ? verify_lock_unused+0x140/0x140 [ 1458.780549][T19142] ? aa_get_newest_label+0xfd/0x5c0 [ 1458.785741][T19142] ? end_current_label_crit_section+0x170/0x170 [ 1458.791984][T19142] ? evm_protected_xattr_common+0x170/0x190 [ 1458.797955][T19142] ? ocfs2_xattr_security_get+0x40/0x40 [ 1458.803501][T19142] __vfs_setxattr+0x431/0x470 [ 1458.808177][T19142] __vfs_setxattr_noperm+0x12d/0x5e0 [ 1458.813460][T19142] vfs_setxattr+0x16b/0x2f0 [ 1458.817965][T19142] ? xattr_permission+0x470/0x470 [ 1458.822978][T19142] ? __mnt_want_write+0x223/0x2a0 [ 1458.828004][T19142] ? path_setxattr+0x3a1/0x5d0 [ 1458.832769][T19142] path_setxattr+0x3f3/0x5d0 [ 1458.837356][T19142] ? simple_xattrs_free+0x150/0x150 [ 1458.842554][T19142] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1458.848528][T19142] ? lock_chain_count+0x20/0x20 [ 1458.853374][T19142] __x64_sys_setxattr+0xbb/0xd0 [ 1458.858220][T19142] do_syscall_64+0x55/0xa0 [ 1458.862617][T19142] ? clear_bhb_loop+0x40/0x90 [ 1458.867288][T19142] ? clear_bhb_loop+0x40/0x90 [ 1458.871967][T19142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.877860][T19142] RIP: 0033:0x7f4087b9c819 [ 1458.882263][T19142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.901859][T19142] RSP: 002b:00007f4088b49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1458.910262][T19142] RAX: ffffffffffffffda RBX: 00007f4087e15fa0 RCX: 00007f4087b9c819 [ 1458.918220][T19142] RDX: 0000200000000340 RSI: 0000200000000140 RDI: 0000200000000100 [ 1458.926262][T19142] RBP: 00007f4087c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1458.934224][T19142] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 1458.942187][T19142] R13: 00007f4087e16038 R14: 00007f4087e15fa0 R15: 00007ffd07228058 [ 1458.950159][T19142] [ 1459.020384][T15013] ocfs2: Unmounting device (7,4) on (node local) [ 1459.054793][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1460.975463][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.814814][ T1077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1466.735505][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration