last executing test programs: 5m56.292127388s ago: executing program 3 (id=8506): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m56.179775076s ago: executing program 3 (id=8507): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000b40)) 5m55.994384639s ago: executing program 3 (id=8509): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x7, 0xfffffffffffffffc, 0x8000, 0x6, 0x2, 0x3, 0xfffffffffffff014}, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x0, 0x4397, 0x2, 0x7, 0xf6b9}, 0x0, 0x0, 0x0) 5m55.84599194s ago: executing program 3 (id=8512): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$eJzs3N9u29YZAPBDx441FwsGFGvSNEDZNBfZRRxJXhwY3UU0mrLZSqJA0kVyNRSL0wWzu2HZgDV3udlWYMOudj30dk+wJ9jTrM+QgfqT2JZjLU0XZcDvB8Q81Pl4zncY4hyIEBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAl281mKwq9bLAXluIXSraLvP/i6nja3j+PbY5Zef73X/+OQojqf6HRCJfG9Zfefh77w/rP1XBxvHcxNOpNIzx+650ffPT28lJ94EoUhTMSei0effn4l58dHOz/ZtGJLMhOOsjKPOt3vhdCKPN4a3OzeXO3W8bdrJeW98oq7cdJkXaqvIivJ3dCCFsbcbp+L98b7Gx3eml8PflR3Nraun2j3Wxuxh+vD9NOUeaDmx+vl8lu1utlg51RTF19o/1+uF1fiJ9kVVylnX4cP3h4sL8xL8k6qPXfBLXnBbWb7Xar1W63Nm9t3brdbDYmV+uzD5abJ4SThywv/qLltTs/uVBGO9M57vx3OY/Dt/E0+euiUwAAAAD+x6LRPfZodF/+0qjUzXpp81jM02hh6QEAAADfgdFX+4uTGwAhXArR7Pd/AAAA4P/bn858xi5EUSiHq9H0UZXh3WvRYacudQ7PjT86d7LFqns5ujBpZLTZXJ7sJemV6N1x0LvT6G8mmwfz8oiKYiV68moJhD+Hy+OYy/fH2/vTmnEva92sl64n+c3lEDqdC0tVerf63RcPfx9CUTw999WgfyEKDx4e7K///FcH90e5PKlbeXI4+YXE2tm5rIYjufz22XOPkxHfOT7ildGNmHrUXw36a+N+m0fHvzQ+fOklxv+H8N445r1JpmvHx9+o+2ytf9SaGf3RLFrDu9dWJ51NRz7zE5Ezs7gyjrly/cN68+H1Sc3KkSza87JoHz3/3+pcnJJF48S52JiXxcYrZgGwKA9OrkIz6//Mujua3q6tzDR1xiw3Z3Wvl/C5q/svXtDL+fB8Rv9gHPPB5eXnK9KJGb05b0ZvnrKun7a6hXD6WP8Rrv79byHshavT4BetsXW/fzm2qkaHX9cHfD3T7/RJ87LXjuqdc6uHvw7vPPry8Y2Hh599vv/5/hft9sZm88fN5q12WBkNY7Kx9gBwirT4Jlqr/hgVRTb8WWtrq9WpdtO4yJNP4iLb3knjbFClRbLbGeyk8bDIqzzJe3Xh02w7LeNybzjMiyru5kU8zMvs7ujNL/Hk1S9l2u8Mqiwph720U6Zxkg+qTlLF21mZxMO9n/aycjctRgeXwzTJulnSqbJ8EJf5XpGk63FcpumRwGw7HVRZN6uLg3hYZP1OcS/+NO/t9dN4Oy2TIhtW+bjBaV/ZoJsX/VGz64s+2QDwhngUJm+we/Yqu5cuhMacmEWPEQA47uQqvbrohAAAAAAAAAAAAAAAgBlHH9f7yeTFZa/8ROBiC3feOq3q/cUndrQQQlh+iaOm/13Hq4aLHsWCz+Fr7KvxZgx5+tats4PrqNOrohDC/L6+X8csaEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDP8JwAA///H8oyP") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m55.402219322s ago: executing program 3 (id=8517): syz_mount_image$xfs(&(0x7f0000009640), &(0x7f0000009680)='./file0\x00', 0x0, &(0x7f00000096c0), 0x1, 0x9612, &(0x7f0000009700)="$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") 5m54.78242271s ago: executing program 3 (id=8525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 5m54.27358564s ago: executing program 32 (id=8525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 4.276823262s ago: executing program 4 (id=13368): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 4.090665805s ago: executing program 4 (id=13371): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000840)={0x0, 0x37}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.304144283s ago: executing program 4 (id=13399): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x6}) 2.13525683s ago: executing program 4 (id=13402): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300)={0xfff, 0x0, 0x4, 0x5}, 0x8) 1.915589427s ago: executing program 4 (id=13405): syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) 981.021123ms ago: executing program 2 (id=13420): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x18, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x4}}, [@filter_kind_options=@f_route={{}, {0x0, 0x2, [@TCA_ROUTE4_TO={0x0, 0x2, 0x36}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0xf, 0x5}}, @TCA_ROUTE4_IIF, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x2, 0x9}}, @TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_TBF={0x0, 0x1, {0x5, 0x10000002, 0x101, 0x756, 0x7, {0xda, 0x0, 0x3, 0x0, 0xc69, 0x3}, {0x5, 0x0, 0x3a, 0x8, 0x76, 0x51}, 0x1ff, 0xba}}, @TCA_POLICE_RATE={0x0, 0x2, [0x2, 0xa88, 0x401, 0x9, 0x2, 0x10, 0x5, 0x2, 0x800, 0x6, 0x2994, 0x1, 0x7f2add8c, 0x3c60000, 0x7fffffff, 0xfffffffe, 0x1, 0x9dec, 0x200, 0x45789639, 0x5, 0xffff, 0x5, 0x3, 0x7, 0xa4b0, 0x12e, 0x4, 0x0, 0x7236, 0x9, 0x1000, 0xffffffff, 0x1, 0x8, 0x7, 0x3, 0x8001, 0xffffffff, 0xbf, 0x1, 0x9, 0x10001, 0x7, 0xfffffffa, 0x4, 0x0, 0xfffffffe, 0x10, 0x3, 0x291c, 0xcc, 0x80, 0x2, 0x8, 0x6, 0xfffffffe, 0x7, 0xfffffffd, 0x7, 0x7, 0xfffffffc, 0x9, 0x7, 0x40, 0xe0e8, 0xffffffff, 0xfffffff8, 0x38, 0x12f, 0x6aae, 0x7, 0x2, 0x4, 0x9, 0x6, 0x0, 0x2, 0xd, 0x0, 0x2, 0xa, 0x549, 0x8, 0xfffffffa, 0x3, 0x5, 0xf787b24, 0xfffffff8, 0x1, 0x9, 0x4, 0x99, 0x0, 0x80000001, 0x5, 0x70e, 0xa, 0x80000001, 0x185f, 0x0, 0x7, 0x9d0, 0x10000, 0x2, 0xb75, 0xfff, 0x0, 0x200, 0x5, 0x2, 0x30, 0xb555, 0xe9, 0x80, 0x0, 0x0, 0x9, 0xdb7, 0xf, 0x7, 0xa1, 0x7f, 0x5, 0x6, 0x7, 0x4000000, 0x7, 0xf, 0x8e7, 0x7, 0xe567, 0x2, 0x0, 0x4, 0x9, 0x7, 0x3ff, 0x85f, 0x7, 0x6, 0x9, 0x10100000, 0x6, 0x2, 0x1ff, 0x60000000, 0x1, 0x3, 0x1, 0x4, 0x0, 0x4, 0x0, 0xfffffffa, 0x80000000, 0x80000001, 0xb1, 0x6, 0x9, 0x3, 0x8, 0xc4, 0x1, 0x81, 0x7fff, 0x4, 0x7, 0x0, 0x7, 0xb095, 0x8000, 0x80000001, 0xff, 0x6, 0x1, 0x2, 0x676, 0x6, 0x8, 0x2, 0x1, 0x7, 0x8, 0x4, 0x2, 0x9, 0x0, 0x9, 0x2, 0xffffffff, 0x5, 0x2, 0x4, 0x82, 0x6, 0xffffff98, 0x3, 0x8, 0x3, 0xffff, 0x7, 0x9ebd, 0x3, 0x2, 0x9, 0x7, 0x8c7b, 0x8, 0x8000, 0xfffffffb, 0x7, 0xa, 0x2, 0x7fff, 0x8, 0x2, 0x4, 0x33, 0xf, 0x0, 0x6, 0x2, 0xc7, 0x64a, 0x2, 0x5, 0x6, 0x6, 0x1, 0xfa, 0xfffff1e2, 0x6, 0xfa, 0x7, 0x6d74, 0x400, 0x5, 0xfff, 0x9, 0x200, 0x0, 0xedd, 0x87, 0xffffffb5, 0x7, 0xa7f, 0x0, 0x7, 0x62, 0x10000, 0x3, 0xeb, 0x9, 0x4, 0x6]}]}, @TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xfffffffffffeffff}, @TCA_POLICE_RATE64, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x3, 0x4, 0x3, 0x9, 0x81, 0x1, 0x0, 0x9, 0x200, 0x100, 0x8, 0xf, 0x0, 0x15e, 0x2, 0x7, 0x9295, 0x5, 0x2, 0x7, 0x1, 0x7, 0x1, 0xfffffffa, 0x35e5f817, 0x2, 0x1, 0x0, 0x7, 0x3e, 0x7, 0x9, 0x8654, 0x7, 0xcc, 0x8000, 0x2, 0x4, 0x23, 0x3, 0x9, 0xa8, 0x1, 0x8, 0x3ff, 0x8, 0x100, 0x200, 0x7, 0x198, 0x4, 0x5, 0x7, 0x9, 0x6, 0x302, 0x5b7, 0x3c, 0x6, 0xf58, 0xffffff01, 0x0, 0xb51, 0x2, 0x8, 0x3, 0x7, 0x8000, 0xd, 0x8, 0x1, 0xc98d, 0x8, 0x1, 0x8, 0x800, 0x1058, 0x5, 0x2, 0x10000, 0x7ff, 0x400, 0x6, 0x0, 0x6, 0x9, 0xf0e5, 0x101, 0x3, 0x1, 0xf4f, 0x1000, 0x1, 0xa796, 0x50, 0xe, 0xfffffffe, 0x0, 0x1, 0xa, 0x7, 0xc69, 0x3, 0x400, 0x20000000, 0x4, 0x6f2, 0x9, 0x1, 0x82, 0x7, 0x1f, 0x4, 0x4, 0x1, 0x9, 0x2, 0x3ff, 0x4, 0xa, 0x8, 0x80, 0xa0dc, 0x2, 0x0, 0x7, 0x3, 0x5, 0x0, 0x2, 0x3, 0x1, 0x401, 0x2, 0x972, 0x10001, 0xa0, 0x1, 0x2, 0x7ff, 0x3b, 0x4d, 0x7, 0x0, 0x7, 0xda7, 0x1143, 0x6, 0x7, 0x7, 0x9, 0x4, 0x9, 0x80000001, 0x97, 0x3, 0x6, 0x6, 0x6, 0xa, 0x3, 0x200000, 0x0, 0x5, 0x6, 0x1, 0xfffffffa, 0x0, 0x80, 0x5, 0xffffffff, 0x5a, 0x8, 0xa6da, 0x7, 0x8, 0x0, 0x8, 0x4d, 0x307, 0x5, 0x2100, 0x7, 0x7, 0x6, 0x8001, 0xd4b1, 0x101, 0x1, 0x8, 0xffff, 0x6, 0x5, 0xffffffff, 0x4, 0x81, 0x5, 0x81, 0x4, 0xffffdfdc, 0x1, 0x8, 0x8, 0x8, 0x3, 0x4, 0x7fffffff, 0x800, 0x2843, 0xf7c, 0x3, 0x2, 0x8, 0x5, 0xcfe, 0x2, 0xd, 0x2113900a, 0x101, 0x7, 0x8, 0x2, 0x7fff, 0xef, 0x1, 0x1, 0x2, 0x10001, 0x2, 0x1, 0xffffff81, 0x352, 0x7, 0xf, 0x89a2, 0x80000000, 0x8, 0x6, 0x63d, 0x7, 0x9, 0x101, 0x3, 0x9, 0xfff, 0x6, 0xfffffb0d, 0x8000, 0x3, 0x4, 0xffffffff, 0x5, 0x2647, 0x1, 0x3, 0x5]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x40}, @TCA_POLICE_RATE64={0x0, 0x8, 0x8}]}, @TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_RATE={0x0, 0x2, [0x8, 0x9, 0x8, 0x4, 0x4, 0x3, 0x6, 0x9, 0x80000000, 0x3, 0x10, 0x4, 0x10000, 0x1, 0x2c, 0x5, 0x89a, 0x7fff, 0xffffffff, 0xc, 0x5, 0x4, 0x2, 0x2, 0x2, 0x6, 0x6, 0x9, 0x8, 0x9, 0x5, 0x0, 0x6, 0x5, 0xfffffff8, 0x5, 0x1, 0xffffffff, 0xc9, 0x0, 0xfffffc01, 0x6, 0x0, 0x6ae, 0x848, 0xe1, 0xfffffffa, 0x3ff, 0x4, 0x1, 0x0, 0x100, 0xe1, 0xe, 0xf24, 0x1, 0x3ff, 0x8, 0x81c, 0xe, 0xffffffff, 0x4, 0x8, 0x3ff, 0x7, 0xd5, 0x18a86424, 0x7, 0x1, 0x8, 0x2, 0x7, 0x7, 0x7, 0x0, 0xffffffff, 0x5, 0x5, 0x9, 0x7f, 0xc, 0x2, 0x122, 0x8, 0x9, 0x401, 0x1, 0x0, 0x8a, 0x8001, 0x3, 0xfffffffc, 0xffffff00, 0x6, 0x94, 0x8, 0x4, 0x8, 0x0, 0x3, 0x4, 0x80000000, 0x1, 0x9cac, 0x0, 0x24, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, 0x3, 0xb, 0x8, 0xfffffffa, 0xfffffffe, 0x1000, 0x2, 0x401, 0x9, 0x100, 0x0, 0x5feabd67, 0xf8, 0x6, 0x62, 0x8, 0xe, 0x100, 0x3, 0x2, 0xffff, 0x800, 0x5, 0x8, 0x10000, 0x80000001, 0x0, 0xffffff00, 0x1, 0x3, 0x9, 0x4, 0x4, 0x0, 0x7, 0x1ff, 0xf, 0x2, 0x2, 0x8, 0x5b8, 0xffff, 0xae, 0x10001, 0xfffffffe, 0x1, 0x6000, 0xfffffff8, 0x2, 0x7fffffff, 0x4, 0xc7, 0x4ea40038, 0x4, 0x101, 0x8, 0x53c5146d, 0x7f, 0x8, 0x81, 0x3, 0x3, 0xfffffffc, 0x7, 0x8, 0xfffffff7, 0xa, 0x4, 0x24000000, 0x9, 0x1, 0x1, 0x6, 0x9, 0x7, 0x3, 0x8000, 0x0, 0x0, 0x2ac2, 0x7, 0x5, 0x7fffffff, 0x3, 0x7, 0xf22, 0x6, 0x5, 0xa, 0x401, 0xffffffff, 0xfffffffe, 0xe, 0xffff, 0x9, 0xe, 0x9, 0x0, 0x10000, 0x4e, 0xffffff19, 0x38, 0x0, 0x10001, 0x80, 0x66, 0x4, 0x0, 0x0, 0x3, 0xaabd0, 0x4, 0x4, 0x80, 0x802d, 0x200, 0xfffffffd, 0x597, 0x0, 0x5, 0x3, 0x7, 0x3, 0xa, 0x7, 0xdaa3, 0xfff, 0x3, 0x8, 0xffff, 0x5, 0xfffffff8, 0x5, 0xffffff81, 0x8, 0x8, 0x1, 0x6, 0x7, 0x9, 0x916, 0x8, 0x2cab, 0x3ff]}]}, @TCA_ROUTE4_IIF]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 975.628982ms ago: executing program 1 (id=13421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0xd8, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0xc4, 0x1, [@m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x85c5462183146b8e, 0x2, {0x10000, 0x0, 0x5, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x27d, 0x20000000}}]}, {0x4}, {0xc, 0x3}, {0xc}}}, @m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0xd, 0x1, {0x10002, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4, 0x6, "588d"}, {0xffffffffffffffd5}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0xe32fa770345bf4cf}, 0x0) 886.430285ms ago: executing program 0 (id=13422): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') getdents(r0, &(0x7f00000000c0)=""/35, 0x23) 770.632491ms ago: executing program 2 (id=13423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0xffffef08, 0x1}}, 0x20) 707.499239ms ago: executing program 0 (id=13424): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "6de119ff", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040041000"]}) 706.954449ms ago: executing program 1 (id=13425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=@newlink={0x6c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xa, @multicast}}]}]}]}, 0x6c}}, 0x20000010) 581.895574ms ago: executing program 0 (id=13426): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000005c0)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 549.396518ms ago: executing program 1 (id=13427): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000004e00010000000000000000cc2bd2"], 0x18}}, 0x0) 541.709657ms ago: executing program 2 (id=13428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 435.870115ms ago: executing program 0 (id=13429): mprotect(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x5) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001, 0x3}) 369.765853ms ago: executing program 1 (id=13430): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x181040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x1, 0x1, 0x80}}) 335.364076ms ago: executing program 2 (id=13431): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x1000, @dev={0xfe, 0x80, '\x00', 0x17}, 0x37}}, 0x20, 0x1ff}, &(0x7f0000000040)=0x90) 241.836977ms ago: executing program 2 (id=13432): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 235.248066ms ago: executing program 0 (id=13433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001800010029bd7000fddbdf251d01010015000100040000a00401000073a8ac5dec61911404000000150002"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x8010) 162.814592ms ago: executing program 1 (id=13434): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x705, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 103.86878ms ago: executing program 2 (id=13435): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x2) 10.262782ms ago: executing program 1 (id=13436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 472.63µs ago: executing program 0 (id=13437): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 0s ago: executing program 4 (id=13438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): .1.11495': attribute type 1 has an invalid length. [ 1486.696667][ T5865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1486.712506][ T5865] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1486.725686][ T5865] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.740978][ T5865] usb 3-1: config 63 has no interface number 0 [ 1486.747355][ T5865] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1486.758100][ T5865] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1486.767756][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.776406][ T5865] usb 3-1: Product: syz [ 1486.781122][ T5865] usb 3-1: Manufacturer: syz [ 1486.785850][ T5865] usb 3-1: SerialNumber: syz [ 1487.060127][ T5865] usb 3-1: Found UVC 0.07 device syz (174f:8acf) [ 1487.085399][ T5865] usb 3-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1487.115604][ T5865] usb 3-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1487.142503][ T5865] usb 3-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1487.175684][ T5865] usb 3-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1487.211322][ T5865] usb 3-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1487.240071][ T5865] uvcvideo 3-1:63.66: Entity type for entity Output 5 was not initialized! [ 1487.249390][ T5865] uvcvideo 3-1:63.66: Entity type for entity Input 29 was not initialized! [ 1487.290376][ T5865] usb 3-1: USB disconnect, device number 55 [ 1487.911175][ T3254] SET target dimension over the limit! [ 1488.429175][ T27] audit: type=1326 audit(2000000699.069:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3278 comm="syz.4.11522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1488.459115][ T27] audit: type=1326 audit(2000000699.069:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3278 comm="syz.4.11522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1488.524124][ T27] audit: type=1326 audit(2000000699.097:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3278 comm="syz.4.11522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1488.546989][ T27] audit: type=1326 audit(2000000699.097:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3278 comm="syz.4.11522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1488.578350][ T27] audit: type=1326 audit(2000000699.097:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3278 comm="syz.4.11522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1488.871469][ T3302] netlink: 'syz.4.11528': attribute type 46 has an invalid length. [ 1488.879588][ T3302] netlink: 'syz.4.11528': attribute type 28 has an invalid length. [ 1489.035042][ T7873] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1489.121973][ T5865] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1489.276036][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1489.299971][ T7873] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1489.313793][ T7873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.317107][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 1489.326850][ T7873] usb 3-1: Product: syz [ 1489.337389][ T7873] usb 3-1: Manufacturer: syz [ 1489.343284][ T7873] usb 3-1: SerialNumber: syz [ 1489.346155][ T5865] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1489.355365][ T7873] usb 3-1: config 0 descriptor?? [ 1489.368021][ T5865] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1489.381762][ T5865] usb 2-1: config 0 has no interface number 0 [ 1489.391242][ T7873] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 1489.398704][ T5865] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1489.398735][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.398756][ T5865] usb 2-1: Product: syz [ 1489.398772][ T5865] usb 2-1: Manufacturer: syz [ 1489.398787][ T5865] usb 2-1: SerialNumber: syz [ 1489.409791][ T5865] usb 2-1: config 0 descriptor?? [ 1489.472934][ T5865] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1489.487706][ T5865] usb 2-1: No valid video chain found. [ 1489.650401][ T2348] usb 3-1: USB disconnect, device number 56 [ 1489.745733][T23356] usb 2-1: USB disconnect, device number 54 [ 1489.858474][ T3312] loop0: detected capacity change from 0 to 32768 [ 1489.882896][ T3312] [ 1489.882896][ T3312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1489.882896][ T3312] [ 1490.001288][ T3352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11538'. [ 1490.048189][ T5825] [ 1490.048189][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.048189][ T5825] [ 1490.076682][ T5825] [ 1490.076682][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.076682][ T5825] [ 1490.763885][ T3393] loop1: detected capacity change from 0 to 1024 [ 1490.823556][ T3393] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1490.882192][ T3393] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.11548: Invalid block bitmap block 0 in block_group 0 [ 1490.981692][ T3393] Quota error (device loop1): write_blk: dquota write failed [ 1491.037720][ T3393] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1491.106980][ T3393] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.11548: Failed to acquire dquot type 0 [ 1491.150182][ T3393] EXT4-fs error (device loop1): ext4_free_blocks:6692: comm syz.1.11548: Freeing blocks not in datazone - block = 0, count = 4096 [ 1491.201113][ T3419] befs: (loop0): No write support. Marking filesystem read-only [ 1491.207759][ T3393] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.11548: Invalid inode bitmap blk 0 in block_group 0 [ 1491.209842][ T3419] syz.0.11555: attempt to access beyond end of device [ 1491.209842][ T3419] loop0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1491.265178][ T3419] befs: (loop0): unable to read superblock [ 1491.270928][ T912] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 1491.271084][ T912] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:11: Failed to release dquot type 0 [ 1491.298923][ T3393] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1491.323961][ T3393] EXT4-fs (loop1): 1 orphan inode deleted [ 1491.331032][ T3393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1491.586481][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.601850][ T3438] loop0: detected capacity change from 0 to 16 [ 1491.634820][ T3438] erofs: (device loop0): mounted with root inode @ nid 36. [ 1491.708259][T25951] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1491.746994][ T3438] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1491.819526][ T27] audit: type=1800 audit(2000000702.178:3317): pid=3438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11561" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1492.376411][ T3480] loop0: detected capacity change from 0 to 2048 [ 1492.398245][ T3483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11574'. [ 1492.430945][ T3480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1492.741463][ T27] audit: type=1326 audit(2000000703.046:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3506 comm="syz.2.11579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1492.982089][ T3522] tmpfs: Bad value for 'mpol' [ 1493.490858][ T5865] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1493.661785][ T3567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11598'. [ 1493.675935][ T3569] tmpfs: Bad value for 'mpol' [ 1493.739614][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.763618][ T5865] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1493.783100][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1493.822840][ T5865] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1493.850979][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.875781][ T5865] usb 5-1: Product: syz [ 1493.883975][ T5865] usb 5-1: Manufacturer: syz [ 1493.888722][ T5865] usb 5-1: SerialNumber: syz [ 1493.899858][ T5865] usb 5-1: config 0 descriptor?? [ 1494.013394][ T3585] loop2: detected capacity change from 0 to 2048 [ 1494.050646][ T3589] binder: 3588:3589 ioctl c018620c 200000000100 returned -22 [ 1494.090899][ T3594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1494.147582][ T3585] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 1494.193950][ T3585] Remounting filesystem read-only [ 1494.208206][ T7873] usb 5-1: USB disconnect, device number 14 [ 1494.224071][ T3592] loop1: detected capacity change from 0 to 4096 [ 1494.340805][ T3605] loop0: detected capacity change from 0 to 256 [ 1494.349103][ T3606] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1494.681858][ T3620] delete_channel: no stack [ 1495.003725][ T3636] binder: BC_ATTEMPT_ACQUIRE not supported [ 1495.018497][ T3636] binder: 3633:3636 ioctl c0306201 2000000003c0 returned -22 [ 1495.368740][ T3656] loop4: detected capacity change from 0 to 256 [ 1495.411696][ T3656] exfat: Deprecated parameter 'utf8' [ 1495.417190][ T3656] exfat: Deprecated parameter 'namecase' [ 1495.440987][ T3656] exfat: Deprecated parameter 'namecase' [ 1495.517383][ T3656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 1495.878302][ T3680] loop2: detected capacity change from 0 to 4096 [ 1495.907093][ T3680] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1495.915087][ T3680] ntfs3: loop2: Failed to load $Extend (-22). [ 1495.926069][ T3680] ntfs3: loop2: Failed to initialize $Extend. [ 1496.729105][ T3676] loop0: detected capacity change from 0 to 40427 [ 1496.767581][ T3676] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1496.784173][ T3676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1496.824563][ T3676] F2FS-fs (loop0): invalid crc value [ 1496.890362][ T3676] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1497.055257][ T3676] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1497.076594][ T3676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1497.114273][ T3739] loop2: detected capacity change from 0 to 4096 [ 1497.220390][ T3749] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1497.316711][ T2943] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1497.341182][ T2943] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1497.504487][ T3760] misc userio: Invalid payload size [ 1497.998157][ T5815] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1498.217843][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 1498.225251][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.241272][ T5815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1498.258283][ T5815] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1498.282222][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.317088][ T5815] usb 5-1: Product: syz [ 1498.334182][ T5815] usb 5-1: Manufacturer: syz [ 1498.358294][ T5815] usb 5-1: SerialNumber: syz [ 1498.639133][ T5815] usb 5-1: cannot find UAC_HEADER [ 1498.740196][ T5815] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1498.769701][ T5815] usb 5-1: USB disconnect, device number 15 [ 1498.831467][ T9351] udevd[9351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1499.161097][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11668'. [ 1499.188419][ T3860] bridge0: port 1(dummy0) entered disabled state [ 1499.319178][ T3860] dummy0 (unregistering): left allmulticast mode [ 1499.327680][ T3860] dummy0 (unregistering): left promiscuous mode [ 1499.350059][ T3860] bridge0: port 1(dummy0) entered disabled state [ 1499.450332][ T3830] loop1: detected capacity change from 0 to 32768 [ 1499.593032][ T3830] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1499.861536][ T3830] XFS (loop1): Ending clean mount [ 1500.015563][ T3906] autofs4:pid:3906:autofs_fill_super: called with bogus options [ 1500.112324][ T5826] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1500.363896][ T3914] loop4: detected capacity change from 0 to 4096 [ 1500.384636][ T3914] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1501.426694][ T3973] loop0: detected capacity change from 0 to 4096 [ 1501.698655][ T3990] xt_CT: No such helper "snmp_trap" [ 1501.865462][ T3996] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11704'. [ 1502.415251][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11713'. [ 1502.619041][ T4026] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11714'. [ 1503.166940][ T4055] loop1: detected capacity change from 0 to 4096 [ 1503.214625][ T4055] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1503.373497][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11729'. [ 1503.398195][ T4055] ntfs3: loop1: failed to convert "c46c" to cp860 [ 1503.460166][ T4083] dlm: non-version read from control device 0 [ 1503.576247][ T4088] loop0: detected capacity change from 0 to 8 [ 1503.597232][ T4088] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1503.641119][T15376] udevd[15376]: incorrect cramfs checksum on /dev/loop0 [ 1503.658563][ T4088] cramfs: Error -5 while decompressing! [ 1503.672809][ T4088] cramfs: ffffffff973f4368(26)->ffff8880729eb000(4096) [ 1503.687743][ T4088] cramfs: Error -3 while decompressing! [ 1503.709148][ T4088] cramfs: ffffffff973f4382(26)->ffff888073545000(4096) [ 1503.727209][ T4088] cramfs: Error -3 while decompressing! [ 1503.752309][ T5771] udevd[5771]: incorrect cramfs checksum on /dev/loop0 [ 1503.777840][ T4088] cramfs: ffffffff973f439c(16)->ffff88805477d000(4096) [ 1503.803563][ T4088] cramfs: Error -5 while decompressing! [ 1503.830432][ T4088] cramfs: ffffffff973f4368(26)->ffff8880729eb000(4096) [ 1503.857978][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1503.857994][ T27] audit: type=1800 audit(2000000713.306:3332): pid=4088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11733" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1504.160780][ T4117] loop2: detected capacity change from 0 to 512 [ 1504.260493][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1504.312554][ T4117] ext4 filesystem being mounted at /2981/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.468927][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.822303][ T4159] loop0: detected capacity change from 0 to 64 [ 1504.905400][ T4159] Trying to free block not in datazone [ 1504.911375][ T4159] Trying to free block not in datazone [ 1504.932532][ T4159] Trying to free block not in datazone [ 1504.944996][ T4159] Trying to free block not in datazone [ 1504.950529][ T4159] Trying to free block not in datazone [ 1504.977586][ T4159] minix_free_block (loop0:6): bit already cleared [ 1504.987757][ T4159] Trying to free block not in datazone [ 1505.010152][ T4159] Trying to free block not in datazone [ 1505.283899][ T4178] loop4: detected capacity change from 0 to 4096 [ 1505.311180][ T4178] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1505.447501][ T4178] ntfs3: loop4: failed to convert "c46c" to cp860 [ 1506.047150][ T4172] loop2: detected capacity change from 0 to 32768 [ 1506.267091][T23356] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1506.458653][ T4237] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1506.487732][T23356] usb 2-1: Using ep0 maxpacket: 16 [ 1506.494176][ T4237] exFAT-fs (nullb0): invalid boot record signature [ 1506.502205][ T4237] exFAT-fs (nullb0): failed to read boot sector [ 1506.516696][ T4237] exFAT-fs (nullb0): failed to recognize exfat type [ 1506.527343][T23356] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1506.535558][T23356] usb 2-1: config 0 has no interface number 0 [ 1506.556705][T23356] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1506.566768][T23356] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1506.579751][T23356] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1506.592162][T23356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.601091][T23356] usb 2-1: Product: syz [ 1506.608861][T23356] usb 2-1: Manufacturer: syz [ 1506.613791][T23356] usb 2-1: SerialNumber: syz [ 1506.621100][T23356] usb 2-1: config 0 descriptor?? [ 1506.638112][ T4213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1506.645451][ T4213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1506.925232][ T4213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1506.934734][ T4213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1507.173005][T23356] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1507.208560][T23356] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1507.233106][T23356] asix: probe of 2-1:0.251 failed with error -5 [ 1507.255672][T23356] usb 2-1: USB disconnect, device number 55 [ 1507.320087][ T4276] mmap: syz.0.11786 (4276): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 1508.327246][ T4335] netlink: 'syz.2.11805': attribute type 1 has an invalid length. [ 1508.370735][ T27] audit: type=1326 audit(2000000717.468:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.456271][ T27] audit: type=1326 audit(2000000717.495:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.510205][ T27] audit: type=1326 audit(2000000717.495:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.616455][ T27] audit: type=1326 audit(2000000717.505:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.692180][ T27] audit: type=1326 audit(2000000717.505:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.737514][ T27] audit: type=1326 audit(2000000717.505:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.802650][ T27] audit: type=1326 audit(2000000717.505:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.876956][ T27] audit: type=1326 audit(2000000717.505:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1508.951376][ T27] audit: type=1326 audit(2000000717.505:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4336 comm="syz.0.11803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1509.151109][ T4381] : renamed from bridge_slave_0 (while UP) [ 1509.190786][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11817'. [ 1509.318197][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11820'. [ 1509.420880][ T5815] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1509.649461][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 1509.664244][ T5815] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1509.675997][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.688420][ T5815] usb 1-1: Product: syz [ 1509.702715][T23356] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1509.709337][ T4444] loop2: detected capacity change from 0 to 256 [ 1509.728793][ T5815] usb 1-1: Manufacturer: syz [ 1509.733462][ T5815] usb 1-1: SerialNumber: syz [ 1509.758707][ T5815] usb 1-1: config 0 descriptor?? [ 1509.769685][ T5815] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1509.787757][ T4444] FAT-fs (loop2): Directory bread(block 64) failed [ 1509.813343][ T4444] FAT-fs (loop2): Directory bread(block 65) failed [ 1509.831377][ T4444] FAT-fs (loop2): Directory bread(block 66) failed [ 1509.842712][ T4444] FAT-fs (loop2): Directory bread(block 67) failed [ 1509.856344][ T4444] FAT-fs (loop2): Directory bread(block 68) failed [ 1509.863040][ T4444] FAT-fs (loop2): Directory bread(block 69) failed [ 1509.873092][ T4444] FAT-fs (loop2): Directory bread(block 70) failed [ 1509.881944][ T4444] FAT-fs (loop2): Directory bread(block 71) failed [ 1509.891817][ T4444] FAT-fs (loop2): Directory bread(block 72) failed [ 1509.901011][ T4444] FAT-fs (loop2): Directory bread(block 73) failed [ 1509.919377][T23356] usb 5-1: Using ep0 maxpacket: 32 [ 1509.929926][T23356] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.947902][T23356] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.968500][T23356] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1509.983634][T23356] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1510.006428][T23356] usb 5-1: Product: syz [ 1510.012803][T23356] usb 5-1: Manufacturer: syz [ 1510.035285][T23356] hub 5-1:4.0: USB hub found [ 1510.105375][ T27] audit: type=1800 audit(2000000719.073:3342): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11827" name="file1" dev="loop2" ino=1048663 res=0 errno=0 [ 1510.231380][ T5815] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 1510.250133][ T5815] visor: probe of 1-1:0.0 failed with error -71 [ 1510.285239][T23356] hub 5-1:4.0: 5 ports detected [ 1510.291492][ T5815] usb 1-1: USB disconnect, device number 58 [ 1510.310717][T23356] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1510.529138][T23356] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1510.536453][T23356] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1510.632290][T23356] usb 5-1: USB disconnect, device number 16 [ 1510.763005][ T4457] loop1: detected capacity change from 0 to 32768 [ 1511.065582][ T27] audit: type=1326 audit(2000000719.940:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.11837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1511.106368][ T27] audit: type=1326 audit(2000000719.940:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.11837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1511.198629][ T27] audit: type=1326 audit(2000000719.950:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.11837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1511.219630][ T4503] C: renamed from team_slave_0 (while UP) [ 1511.267314][ T27] audit: type=1326 audit(2000000719.950:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.11837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1511.332839][ T4503] netlink: 'syz.0.11838': attribute type 1 has an invalid length. [ 1511.356881][ T4503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11838'. [ 1511.376825][ T27] audit: type=1326 audit(2000000719.950:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.11837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1511.403598][ T4503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1511.781269][ T4527] loop2: detected capacity change from 0 to 1024 [ 1512.375790][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1512.407956][ T4563] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11857'. [ 1512.440034][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11858'. [ 1512.982733][ T4594] loop2: detected capacity change from 0 to 512 [ 1513.042182][ T4594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1513.044546][ T4594] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1513.047397][ T4594] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1513.047742][ T4594] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.11867: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1513.048258][ T4594] EXT4-fs (loop2): Remounting filesystem read-only [ 1513.050262][ T4594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1513.236729][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.488961][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11871'. [ 1513.529449][ T4614] bond0: left allmulticast mode [ 1513.534387][ T4614] bond_slave_0: left allmulticast mode [ 1513.580424][ T4614] bond_slave_1: left allmulticast mode [ 1513.597645][ T4614] bridge0: port 1(bond0) entered disabled state [ 1513.643603][ T4614] bridge_slave_1: left allmulticast mode [ 1513.662116][ T4614] bridge_slave_1: left promiscuous mode [ 1513.668204][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.118725][ T4653] loop4: detected capacity change from 0 to 256 [ 1514.141659][ T4656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11881'. [ 1514.161177][ T7873] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1514.187057][ T4653] FAT-fs (loop4): Directory bread(block 64) failed [ 1514.200836][ T4653] FAT-fs (loop4): Directory bread(block 65) failed [ 1514.207665][ T4653] FAT-fs (loop4): Directory bread(block 66) failed [ 1514.214974][ T4653] FAT-fs (loop4): Directory bread(block 67) failed [ 1514.227273][ T4656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11881'. [ 1514.230655][ T4653] FAT-fs (loop4): Directory bread(block 68) failed [ 1514.255586][ T4653] FAT-fs (loop4): Directory bread(block 69) failed [ 1514.262434][ T4653] FAT-fs (loop4): Directory bread(block 70) failed [ 1514.298644][ T4653] FAT-fs (loop4): Directory bread(block 71) failed [ 1514.305368][ T4653] FAT-fs (loop4): Directory bread(block 72) failed [ 1514.312862][ T4653] FAT-fs (loop4): Directory bread(block 73) failed [ 1514.411438][ T7873] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1514.420718][ T7873] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1514.439292][ T7873] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1514.446211][ T27] audit: type=1800 audit(2000000723.059:3348): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11882" name="file1" dev="loop4" ino=1048664 res=0 errno=0 [ 1514.453799][ T7873] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1514.526152][ T7873] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1514.534407][ T7873] usb 1-1: Product: syz [ 1514.551903][ T7873] usb 1-1: Manufacturer: syz [ 1514.556595][ T7873] usb 1-1: SerialNumber: syz [ 1514.565785][ T7873] usb 1-1: config 0 descriptor?? [ 1514.591540][ T7873] hub 1-1:0.0: bad descriptor, ignoring hub [ 1514.605017][ T7873] hub: probe of 1-1:0.0 failed with error -5 [ 1514.640736][ T7873] usb 1-1: selecting invalid altsetting 0 [ 1515.071042][ T4700] netlink: 'syz.1.11893': attribute type 3 has an invalid length. [ 1515.091494][ T4700] netlink: 'syz.1.11893': attribute type 1 has an invalid length. [ 1515.156824][ T5902] usb 1-1: USB disconnect, device number 59 [ 1515.288809][T25951] Bluetooth: hci0: unexpected event for opcode 0x080d [ 1515.841398][ T4752] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11906'. [ 1516.153111][ T4772] netlink: 'syz.4.11911': attribute type 2 has an invalid length. [ 1516.161032][ T4772] netlink: 'syz.4.11911': attribute type 8 has an invalid length. [ 1516.171324][ T4772] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11911'. [ 1516.735412][ T4816] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11924'. [ 1516.746297][ T4816] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1516.942671][ T7873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1516.964024][ T2348] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1517.159843][ T7873] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1517.168130][ T7873] usb 5-1: config 0 has no interface number 0 [ 1517.174393][ T2348] usb 1-1: Using ep0 maxpacket: 32 [ 1517.181870][ T7873] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1517.196657][ T7873] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1517.209780][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11931'. [ 1517.213817][ T2348] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.233883][ T7873] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1517.240914][ T7873] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1517.252738][ T2348] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.262931][ T7873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.275469][ T2348] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1517.285235][ T2348] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1517.296947][ T7873] usb 5-1: config 0 descriptor?? [ 1517.311016][ T2348] usb 1-1: Product: syz [ 1517.318459][ T2348] usb 1-1: Manufacturer: syz [ 1517.325172][ T7873] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1517.345680][ T2348] hub 1-1:4.0: USB hub found [ 1517.462609][ T4851] can: request_module (can-proto-3) failed. [ 1517.587562][ T2348] hub 1-1:4.0: 5 ports detected [ 1517.597499][ T2348] hub 1-1:4.0: insufficient power available to use all downstream ports [ 1517.623378][ T5815] usb 5-1: USB disconnect, device number 17 [ 1517.734664][ T4869] loop2: detected capacity change from 0 to 8 [ 1517.759939][ T4869] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1517.784148][ T4869] cramfs: Error -5 while decompressing! [ 1517.790642][ T4869] cramfs: ffffffff973f8382(26)->ffff8880528b0000(4096) [ 1517.797906][ T4869] cramfs: Error -3 while decompressing! [ 1517.806280][ T9351] udevd[9351]: incorrect cramfs checksum on /dev/loop2 [ 1517.808126][ T2348] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1517.824021][ T4869] cramfs: ffffffff973f839c(16)->ffff88805142a000(4096) [ 1517.833560][ T2348] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1517.843438][ T4869] cramfs: Error -5 while decompressing! [ 1517.853865][ T4869] cramfs: ffffffff973f8382(26)->ffff8880528b0000(4096) [ 1517.870237][ T27] audit: type=1800 audit(2000000726.233:3349): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11934" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1517.902116][ T2348] usb 1-1: USB disconnect, device number 60 [ 1518.928946][ T4932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11951'. [ 1519.110360][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.117120][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1519.261136][ T4955] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11958'. [ 1519.277973][ T4955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11958'. [ 1519.695241][T25951] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1519.706008][T25951] Bluetooth: hci0: Injecting HCI hardware error event [ 1519.715456][T25951] Bluetooth: hci0: hardware error 0x00 [ 1519.757857][ T4982] netlink: 'syz.2.11967': attribute type 1 has an invalid length. [ 1519.765968][ T4982] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11967'. [ 1519.969604][ T4994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11971'. [ 1520.083730][ T5001] netlink: 'syz.0.11973': attribute type 1 has an invalid length. [ 1520.128870][ T5003] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1520.174018][ T2348] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1520.304142][ T5013] netlink: 372 bytes leftover after parsing attributes in process `syz.2.11977'. [ 1520.412320][ T2348] usb 5-1: Using ep0 maxpacket: 16 [ 1520.432037][ T2348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1520.453345][ T2348] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1520.464492][ T2348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.505941][ T2348] usb 5-1: Product: syz [ 1520.518610][ T2348] usb 5-1: Manufacturer: syz [ 1520.531957][ T2348] usb 5-1: SerialNumber: syz [ 1520.552646][ T2348] usb 5-1: config 0 descriptor?? [ 1520.580129][ T2348] hub 5-1:0.0: bad descriptor, ignoring hub [ 1520.588773][ T2348] hub: probe of 5-1:0.0 failed with error -5 [ 1520.600064][ T2348] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input94 [ 1521.949385][T25951] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1522.134222][ T5136] loop0: detected capacity change from 0 to 256 [ 1522.265867][ T5143] loop4: detected capacity change from 0 to 16 [ 1522.297573][ T5143] erofs: (device loop4): mounted with root inode @ nid 36. [ 1522.394471][ T5143] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 1522.455301][ T5143] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768 [ 1522.512841][ T5143] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 32811 of nid 36 [ 1522.625974][ T5164] loop0: detected capacity change from 0 to 8 [ 1522.637358][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12016'. [ 1522.686400][ T5163] bond0: left allmulticast mode [ 1522.692227][ T5163] bond_slave_0: left allmulticast mode [ 1522.699553][ T5164] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1522.722318][ T5163] bond_slave_1: left allmulticast mode [ 1522.728136][ T5163] bridge0: port 3(bond0) entered disabled state [ 1522.766315][ T5163] bridge_slave_1: left allmulticast mode [ 1522.772062][ T5163] bridge_slave_1: left promiscuous mode [ 1522.792020][ T5164] cramfs: Error -5 while decompressing! [ 1522.806262][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.815830][T15376] udevd[15376]: incorrect cramfs checksum on /dev/loop0 [ 1522.835743][ T5164] cramfs: ffffffff973f4382(26)->ffff8880743ea000(4096) [ 1522.847977][ T5163] : left allmulticast mode [ 1522.853645][ T5163] : left promiscuous mode [ 1522.872065][ T5163] bridge0: port 1() entered disabled state [ 1522.880057][ T5164] cramfs: Error -3 while decompressing! [ 1522.918369][ T9351] udevd[9351]: incorrect cramfs checksum on /dev/loop0 [ 1522.924945][ T5164] cramfs: ffffffff973f439c(16)->ffff88804f9fc000(4096) [ 1522.988967][ T5164] cramfs: Error -5 while decompressing! [ 1523.003926][ T9351] udevd[9351]: incorrect cramfs checksum on /dev/loop0 [ 1523.009317][ T5164] cramfs: ffffffff973f4382(26)->ffff8880743ea000(4096) [ 1523.065547][ T27] audit: type=1800 audit(2000000731.013:3350): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12017" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1523.472035][ T5206] netlink: 'syz.0.12026': attribute type 13 has an invalid length. [ 1523.669065][ T5221] kAFS: unable to lookup cell '/,' [ 1523.988018][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12037'. [ 1524.488026][ T5299] loop2: detected capacity change from 0 to 256 [ 1524.688017][ T5306] loop1: detected capacity change from 0 to 1764 [ 1525.250605][ T5325] netlink: 'syz.0.12057': attribute type 3 has an invalid length. [ 1525.284188][ T5325] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12057'. [ 1525.506672][ T5902] usb 5-1: USB disconnect, device number 18 [ 1525.596401][ T5342] netlink: 'syz.0.12059': attribute type 32 has an invalid length. [ 1525.625455][ T5342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12059'. [ 1525.660185][ T5342] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1525.931189][ T27] audit: type=1326 audit(2000000733.670:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.1.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e79c799 code=0x7ffc0000 [ 1526.004932][ T5368] pim6reg: entered allmulticast mode [ 1526.013614][ T27] audit: type=1326 audit(2000000733.689:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.1.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e79c799 code=0x7ffc0000 [ 1526.079231][ T27] audit: type=1326 audit(2000000733.698:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.1.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fd81e79c799 code=0x7ffc0000 [ 1526.155457][ T27] audit: type=1326 audit(2000000733.698:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.1.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e79c799 code=0x7ffc0000 [ 1526.177913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.229372][ T27] audit: type=1326 audit(2000000733.698:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.1.12065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81e79c799 code=0x7ffc0000 [ 1526.251883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1526.266856][ T5381] loop4: detected capacity change from 0 to 64 [ 1526.759837][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12076'. [ 1526.791485][ T5411] bond0: left allmulticast mode [ 1526.796949][ T5411] bond_slave_0: left allmulticast mode [ 1526.810992][ T5411] bond_slave_1: left allmulticast mode [ 1526.826615][ T5411] bridge0: port 1(bond0) entered disabled state [ 1526.859850][ T5411] bridge_slave_1: left allmulticast mode [ 1526.865616][ T5411] bridge_slave_1: left promiscuous mode [ 1526.906213][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.260099][ T5444] openvswitch: netlink: EtherType 0 is less than min 600 [ 1527.367472][ T5449] smb3: Unexpected value for 'rdma' [ 1527.515747][ T5458] loop4: detected capacity change from 0 to 128 [ 1527.579297][ T5458] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1527.676070][ T5458] ext4 filesystem being mounted at /851/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.758103][ T5458] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.12089: No space for directory leaf checksum. Please run e2fsck -D. [ 1527.803489][ T5458] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.12089: checksumming directory block 0 [ 1527.960513][T25949] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1528.088381][ T5488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12101'. [ 1528.324831][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1528.352537][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12103'. [ 1528.869054][ T5538] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12115'. [ 1529.083289][ T5533] loop0: detected capacity change from 0 to 8192 [ 1529.131184][ T5533] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1529.182651][ T5533] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 1529.225232][ T5533] FAT-fs (loop0): Filesystem has been set read-only [ 1529.668242][ T5580] loop1: detected capacity change from 0 to 64 [ 1529.700749][ T5580] syz.1.12125: attempt to access beyond end of device [ 1529.700749][ T5580] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1529.751184][ T5580] buffer_io_error: 14 callbacks suppressed [ 1529.751201][ T5580] Buffer I/O error on dev loop1, logical block 1295, async page read [ 1529.839280][ T5580] syz.1.12125: attempt to access beyond end of device [ 1529.839280][ T5580] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 1529.890576][ T5580] Buffer I/O error on dev loop1, logical block 1295, async page read [ 1529.915647][ T27] audit: type=1800 audit(2000000737.352:3356): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12125" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 1529.978550][ T5601] JFS: discard option not supported on device [ 1529.990152][ T5601] Mount JFS Failure: -22 [ 1529.994988][ T5601] jfs_mount failed w/return code = -22 [ 1530.498452][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12139'. [ 1530.720668][ T5648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12144'. [ 1530.939442][ T5654] loop4: detected capacity change from 0 to 4096 [ 1530.956167][ T7873] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1530.978023][ T5654] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1531.090863][ T5654] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 1531.099799][ T5667] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12150'. [ 1531.120137][ T5670] loop1: detected capacity change from 0 to 1024 [ 1531.205446][ T7873] usb 1-1: Using ep0 maxpacket: 16 [ 1531.222911][ T7873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1531.243821][ T7873] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1531.271048][ T7873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.290908][ T7873] usb 1-1: Product: syz [ 1531.312237][ T7873] usb 1-1: Manufacturer: syz [ 1531.337339][ T7873] usb 1-1: SerialNumber: syz [ 1531.366203][ T7873] usb 1-1: config 0 descriptor?? [ 1531.394465][ T7873] hub 1-1:0.0: bad descriptor, ignoring hub [ 1531.423770][ T7873] hub: probe of 1-1:0.0 failed with error -5 [ 1531.471945][ T7873] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input95 [ 1531.533448][ T5687] netlink: 'syz.4.12153': attribute type 9 has an invalid length. [ 1531.546963][ T5687] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.12153'. [ 1532.135437][ T5721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12157'. [ 1532.258581][ T5728] netlink: 'syz.4.12158': attribute type 1 has an invalid length. [ 1532.266604][ T5728] netlink: 480 bytes leftover after parsing attributes in process `syz.4.12158'. [ 1532.455799][ T5700] loop1: detected capacity change from 0 to 32768 [ 1532.599812][ T5700] ERROR: (device loop1): diAllocBit: iag inconsistent [ 1532.599812][ T5700] [ 1532.631128][ T5700] ialloc: diAlloc returned -5! [ 1532.795037][ T5748] loop4: detected capacity change from 0 to 64 [ 1533.249705][ T5774] ~ÿ: entered promiscuous mode [ 1533.443168][ T5787] loop1: detected capacity change from 0 to 2048 [ 1533.489121][ T5787] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1533.941536][ T5813] netlink: 'syz.1.12180': attribute type 9 has an invalid length. [ 1533.950614][ T5813] __nla_validate_parse: 2 callbacks suppressed [ 1533.950631][ T5813] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12180'. [ 1535.254966][ T5897] loop4: detected capacity change from 0 to 4096 [ 1535.299878][ T5897] ntfs: volume version 3.1. [ 1535.402539][ T5912] loop1: detected capacity change from 0 to 128 [ 1536.119252][ T5941] loop4: detected capacity change from 0 to 256 [ 1536.333491][ T5865] usb 1-1: USB disconnect, device number 61 [ 1536.670844][ T5972] loop4: detected capacity change from 0 to 1024 [ 1536.680596][ T5957] loop2: detected capacity change from 0 to 4096 [ 1536.718820][ T5972] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1536.733442][ T5957] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1536.835808][ T5972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.910788][ T5957] ntfs3: loop2: failed to convert "c46c" to iso8859-2 [ 1536.953341][ T27] audit: type=1800 audit(2000000743.838:3357): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12217" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1536.995350][ T5972] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.12217: missing EA_INODE flag [ 1537.078151][ T5991] netlink: 'syz.1.12222': attribute type 21 has an invalid length. [ 1537.103565][ T5972] EXT4-fs (loop4): Remounting filesystem read-only [ 1537.146500][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12223'. [ 1537.286479][T25949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.384601][ T6003] netlink: 'syz.1.12225': attribute type 9 has an invalid length. [ 1537.392515][ T6003] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12225'. [ 1537.531380][ T6016] IPv6: Can't replace route, no match found [ 1537.713829][ T6025] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12229'. [ 1538.025437][ T6034] loop1: detected capacity change from 0 to 4096 [ 1538.067956][ T6034] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1538.123263][ T6034] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1538.154826][ T6050] SET target dimension over the limit! [ 1538.244477][ T6034] ntfs3: loop1: ino=5, "/" directory corrupted [ 1538.476842][ T5865] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1538.686264][ T5865] usb 5-1: Using ep0 maxpacket: 32 [ 1538.696697][ T5865] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 1538.726489][ T5865] usb 5-1: config 0 has no interface number 0 [ 1538.743777][ T5865] usb 5-1: config 0 interface 244 has no altsetting 0 [ 1538.782142][ T5865] usb 5-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1538.808766][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.826437][ T6077] loop2: detected capacity change from 0 to 4096 [ 1538.835867][ T5865] usb 5-1: Product: syz [ 1538.840084][ T5865] usb 5-1: Manufacturer: syz [ 1538.852822][ T5865] usb 5-1: SerialNumber: syz [ 1538.861252][ T6077] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1538.881303][ T5865] usb 5-1: config 0 descriptor?? [ 1538.902266][ T5865] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort found [ 1538.952074][ T6089] netlink: 'syz.1.12247': attribute type 15 has an invalid length. [ 1538.966397][ T6077] ntfs3: loop2: Failed to load $MFT (-2). [ 1539.160174][ T5865] snd_usb_toneport 5-1:0.244: cannot get proper max packet size [ 1539.168146][ T5865] snd_usb_toneport 5-1:0.244: Line 6 GuitarPort now disconnected [ 1539.211553][ T5865] snd_usb_toneport: probe of 5-1:0.244 failed with error -22 [ 1539.427292][ T5865] usb 5-1: USB disconnect, device number 19 [ 1540.234682][ T6133] loop0: detected capacity change from 0 to 32768 [ 1540.308649][ T6133] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1540.514556][ T6133] XFS (loop0): Ending clean mount [ 1540.835281][ T5825] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1541.183873][ T6193] binder: 6192:6193 ioctl c018620c 200000000000 returned -1 [ 1541.788205][ T6212] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1541.807405][ T6214] trusted_key: encrypted_key: master key parameter is missing [ 1541.967485][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12281'. [ 1542.038511][ T6153] loop1: detected capacity change from 0 to 65536 [ 1542.100509][ T6153] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1542.157578][ T6224] loop0: detected capacity change from 0 to 4096 [ 1542.342527][ T6153] XFS (loop1): Ending clean mount [ 1542.356129][ T6246] netlink: 'syz.2.12287': attribute type 27 has an invalid length. [ 1542.617703][ T5826] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1542.753808][ T6259] loop2: detected capacity change from 0 to 16 [ 1542.781044][ T6259] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1542.818367][ T6259] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1543.361795][ T6259] erofs: DAX unsupported by block device. Turning off DAX. [ 1543.397267][ T6259] erofs: (device loop2): mounted with root inode @ nid 36. [ 1543.595488][T25951] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[9000] [ 1543.621331][ T6259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[8192] [ 1543.643009][ T27] audit: type=1800 audit(2000000750.011:3358): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12290" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1543.945471][ T6300] x_tables: duplicate entry at hook 1 [ 1544.165407][ T6306] loop4: detected capacity change from 0 to 2048 [ 1544.254237][ T6306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1544.269063][ T6306] ext4 filesystem being mounted at /908/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.303927][ T6306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.12302: bg 0: block 345: padding at end of block bitmap is not set [ 1544.457620][T25949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.482515][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12300'. [ 1545.355794][ T6372] loop4: detected capacity change from 0 to 1764 [ 1545.370629][ T6369] loop0: detected capacity change from 0 to 4096 [ 1545.457946][ T6369] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1545.468157][ T6372] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1545.567752][ T6369] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1545.582278][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12324'. [ 1545.679844][ T6369] ntfs3: loop0: ino=5, "/" directory corrupted [ 1546.046472][ T6408] Cannot find del_set index 3 as target [ 1546.049296][ T6413] loop1: detected capacity change from 0 to 16 [ 1546.121024][ T6413] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1546.153993][ T6413] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 1546.280085][ T2348] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1546.299568][ T6421] loop2: detected capacity change from 0 to 2048 [ 1546.320977][ T6421] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1546.363098][ T6427] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1546.452054][ T6413] erofs: DAX unsupported by block device. Turning off DAX. [ 1546.459923][ T6413] erofs: (device loop1): mounted with root inode @ nid 36. [ 1546.479853][ T6421] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 1546.496769][ T2348] usb 5-1: Using ep0 maxpacket: 8 [ 1546.513118][ T2348] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1546.525829][ T2348] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 1546.534383][ T2348] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1546.556360][ T6421] Remounting filesystem read-only [ 1546.572757][ T2348] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1546.581776][ T2348] usb 5-1: config 1 has no interface number 3 [ 1546.610412][T25951] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[9000] [ 1546.621356][ T2348] usb 5-1: too many endpoints for config 1 interface 6 altsetting 29: 147, using maximum allowed: 30 [ 1546.621443][ T2348] usb 5-1: config 1 interface 6 altsetting 29 has an invalid endpoint descriptor of length 4, skipping [ 1546.621468][ T2348] usb 5-1: config 1 interface 6 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 147 [ 1546.621521][ T2348] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 202, changing to 7 [ 1546.621548][ T2348] usb 5-1: config 1 interface 6 has no altsetting 0 [ 1546.621567][ T2348] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1546.651094][ T2348] usb 5-1: string descriptor 0 read error: -22 [ 1546.695962][ T6413] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4045 in[4096, 0] out[8192] [ 1546.707826][ T27] audit: type=1800 audit(2000000752.844:3359): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12332" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1546.741014][ T2348] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1546.806570][ T2348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.883280][ T2348] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1546.911400][ T2348] usb 5-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1546.927355][ T2348] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1547.417969][ T5865] usb 5-1: USB disconnect, device number 20 [ 1547.613324][ T2348] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1547.678416][ T7873] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1547.820626][ T2348] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 1547.828862][ T2348] usb 1-1: config 0 has no interface number 0 [ 1547.839670][ T2348] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 1547.849576][ T2348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.863460][ T2348] usb 1-1: Product: syz [ 1547.867891][ T2348] usb 1-1: Manufacturer: syz [ 1547.872571][ T2348] usb 1-1: SerialNumber: syz [ 1547.893686][ T2348] usb 1-1: config 0 descriptor?? [ 1547.905332][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1547.922499][ T2348] usbserial_generic 1-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1547.958086][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1547.968279][ T2348] usbserial_generic 1-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1547.981527][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1547.997738][ T2348] usbserial_generic 1-1:0.244: device has no bulk endpoints [ 1548.005475][ T7873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1548.016253][ T2348] safe_serial 1-1:0.244: safe_serial converter detected [ 1548.023515][ T2348] safe_serial: probe of 1-1:0.244 failed with error -22 [ 1548.034124][ T7873] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1548.048263][ T7873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.056367][ T7873] usb 3-1: Product: syz [ 1548.064324][ T7873] usb 3-1: Manufacturer: syz [ 1548.069053][ T7873] usb 3-1: SerialNumber: syz [ 1548.091105][ T7873] usb 3-1: config 0 descriptor?? [ 1548.164085][ T2348] usb 1-1: USB disconnect, device number 62 [ 1548.331058][ T7873] adutux 3-1:0.0: Could not retrieve serial number [ 1548.337749][ T7873] adutux: probe of 3-1:0.0 failed with error -5 [ 1548.348203][ T6532] loop1: detected capacity change from 0 to 8 [ 1548.359434][ T6532] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1548.395743][ T9351] udevd[9351]: incorrect cramfs checksum on /dev/loop1 [ 1548.409975][ T6532] cramfs: Error -3 while decompressing! [ 1548.421947][ T6532] cramfs: ffffffff973f8368(26)->ffff888055809000(4096) [ 1548.429111][ T6532] cramfs: Error -3 while decompressing! [ 1548.435827][ T6532] cramfs: ffffffff973f8382(26)->ffff888054a6c000(4096) [ 1548.445905][ T6532] cramfs: Error -3 while decompressing! [ 1548.451861][ T6532] cramfs: ffffffff973f839c(16)->ffff8880513f4000(4096) [ 1548.459134][ T6532] cramfs: Error -3 while decompressing! [ 1548.464949][ T6532] cramfs: ffffffff973f8368(26)->ffff888055809000(4096) [ 1548.486645][ T9351] udevd[9351]: incorrect cramfs checksum on /dev/loop1 [ 1548.597280][ T5865] usb 3-1: USB disconnect, device number 57 [ 1548.826221][ T6560] netlink: 830 bytes leftover after parsing attributes in process `syz.1.12359'. [ 1548.876873][ T6557] loop4: detected capacity change from 0 to 8192 [ 1548.896541][ T6557] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1549.046097][ T6568] loop1: detected capacity change from 0 to 64 [ 1549.829299][ T6617] loop0: detected capacity change from 0 to 2048 [ 1549.901788][ T6617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1550.026169][ T6630] loop4: detected capacity change from 0 to 256 [ 1550.095675][ T6630] exfat: Deprecated parameter 'utf8' [ 1550.124973][ T6630] exfat: Deprecated parameter 'namecase' [ 1550.154455][ T6630] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 1550.375451][ T6638] loop2: detected capacity change from 0 to 4096 [ 1550.415573][ T6638] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1550.485500][ T6652] loop0: detected capacity change from 0 to 512 [ 1550.600225][ T6652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1550.712783][ T6652] ext4 filesystem being mounted at /3036/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1550.816954][ T27] audit: type=1800 audit(2000000756.599:3360): pid=6638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12381" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1550.888573][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.141416][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12390'. [ 1551.386019][ T6697] overlayfs: conflicting options: userxattr,metacopy=on [ 1551.634990][ T6715] gretap2: entered promiscuous mode [ 1551.753176][ T5886] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1551.969859][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1551.989145][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.028930][ T5886] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1552.049259][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.073302][ T5886] usb 5-1: Product: syz [ 1552.077534][ T5886] usb 5-1: Manufacturer: syz [ 1552.094607][ T5886] usb 5-1: SerialNumber: syz [ 1552.109922][ T5886] usb 5-1: config 0 descriptor?? [ 1552.131142][ T5886] usb 5-1: bad CDC descriptors [ 1552.148723][ T5886] usb 5-1: unsupported MDLM descriptors [ 1552.345196][ T6757] netlink: 5 bytes leftover after parsing attributes in process `syz.0.12414'. [ 1552.394287][ T6757] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 1552.407593][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12415'. [ 1552.411637][ T7873] usb 5-1: USB disconnect, device number 21 [ 1552.438285][ T6757] 0ªX¹¦D: entered allmulticast mode [ 1552.451203][ T6757] veth0_macvtap: entered allmulticast mode [ 1552.462301][ T6757] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1553.172445][ T6795] loop0: detected capacity change from 0 to 4096 [ 1553.519480][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12432'. [ 1553.978152][ T6849] netlink: 'syz.2.12442': attribute type 6 has an invalid length. [ 1554.480747][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12452'. [ 1554.712204][ T5902] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1554.963146][ T5902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1554.984092][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.992172][ T5902] usb 1-1: Product: syz [ 1555.004540][ T5902] usb 1-1: Manufacturer: syz [ 1555.011701][ T5902] usb 1-1: SerialNumber: syz [ 1555.042879][ T5902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1555.068384][ T5815] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1555.300406][ T7873] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1555.538448][ T7873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1555.551532][ T7873] usb 3-1: not running at top speed; connect to a high speed hub [ 1555.569868][ T5886] usb 1-1: USB disconnect, device number 63 [ 1555.579551][ T7873] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 1555.609248][ T7873] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1555.624137][ T6947] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒHÝ&S)¨ó&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1555.624137][ T6947] SÃȘØÈžZ§6ŸÂ' [ 1555.640512][ T7873] usb 3-1: config 17 has no interface number 0 [ 1555.647129][ T7873] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 1555.660202][ T7873] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 12410, setting to 1023 [ 1555.684350][ T7873] usb 3-1: config 17 interface 8 has no altsetting 0 [ 1555.700927][ T7873] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1555.719639][ T7873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.739887][ T7873] usb 3-1: Product: syz [ 1555.755560][ T7873] usb 3-1: Manufacturer: syz [ 1555.762558][ T7873] usb 3-1: SerialNumber: syz [ 1556.035196][ T7873] usb 3-1: selecting invalid altsetting 0 [ 1556.043765][ T7873] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 1556.057921][ T7873] usb 3-1: selecting invalid altsetting 0 [ 1556.075556][ T6971] overlayfs: conflicting options: nfs_export=on,index=off [ 1556.097975][ T7873] usb 3-1: USB disconnect, device number 58 [ 1556.158383][ T9351] udevd[9351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1556.180830][ T6972] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1556.214759][ T6972] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1556.296635][ T5815] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1556.325739][ T5815] ath9k_htc: Failed to initialize the device [ 1556.359546][ T5886] usb 1-1: ath9k_htc: USB layer deinitialized [ 1556.618438][ T7010] xt_TCPMSS: Only works on TCP SYN packets [ 1556.647887][ T7012] netlink: 'syz.4.12484': attribute type 16 has an invalid length. [ 1556.884409][ T7025] loop2: detected capacity change from 0 to 2048 [ 1556.933977][ T5886] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1556.963657][ T7030] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1557.139547][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1557.152192][ T5886] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1557.169126][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.188371][ T5886] usb 1-1: Product: syz [ 1557.192647][ T5886] usb 1-1: Manufacturer: syz [ 1557.210282][ T5886] usb 1-1: SerialNumber: syz [ 1557.233247][ T5886] usb 1-1: config 0 descriptor?? [ 1557.279724][ T5886] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1557.312305][ T7050] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12494'. [ 1557.720129][ T5886] gspca_sn9c20x: Write register 1001 failed -71 [ 1557.748450][ T5886] gspca_sn9c20x: Device initialization failed [ 1557.753444][ T7074] loop1: detected capacity change from 0 to 164 [ 1557.767002][ T5886] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 1557.803818][ T5886] usb 1-1: USB disconnect, device number 64 [ 1558.518469][ T7123] loop2: detected capacity change from 0 to 128 [ 1558.538643][ T7121] netlink: 'syz.0.12514': attribute type 11 has an invalid length. [ 1558.637431][ T7123] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1558.694479][ T7123] FAT-fs (loop2): Filesystem has been set read-only [ 1558.926494][ T7145] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1559.813814][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12540'. [ 1560.039701][ T7211] loop2: detected capacity change from 0 to 1024 [ 1560.093299][ T7216] netlink: 'syz.4.12546': attribute type 21 has an invalid length. [ 1560.121800][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.199186][ T7211] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.12544: reserved inode found cleared - inode=18 [ 1560.460500][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.480564][ T7231] loop1: detected capacity change from 0 to 4096 [ 1561.091486][ T27] audit: type=1326 audit(2000000766.112:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1561.119544][ T27] audit: type=1326 audit(2000000766.112:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1561.176653][ T27] audit: type=1326 audit(2000000766.140:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1561.285196][ T27] audit: type=1326 audit(2000000766.140:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1561.332708][ T27] audit: type=1326 audit(2000000766.158:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1561.355776][ T27] audit: type=1326 audit(2000000766.195:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083039c799 code=0x7ffc0000 [ 1561.379773][ T27] audit: type=1326 audit(2000000766.214:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f083035cfce code=0x7ffc0000 [ 1561.407162][ T27] audit: type=1326 audit(2000000766.214:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f083035cfce code=0x7ffc0000 [ 1561.468323][ T27] audit: type=1326 audit(2000000766.214:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f083035cfce code=0x7ffc0000 [ 1561.540163][ T27] audit: type=1326 audit(2000000766.214:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.12560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f083035cfce code=0x7ffc0000 [ 1561.939307][ T7314] openvswitch: netlink: Actions may not be safe on all matching packets [ 1562.368084][ T7342] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 1562.770727][ T7370] loop4: detected capacity change from 0 to 256 [ 1562.821433][ T7370] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1562.849218][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12591'. [ 1562.858347][ T5865] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1562.888591][ T7375] netlink: 'syz.1.12591': attribute type 8 has an invalid length. [ 1563.072522][ T5865] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1563.105667][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.138506][ T5865] usb 3-1: Product: syz [ 1563.149438][ T5865] usb 3-1: Manufacturer: syz [ 1563.154115][ T5865] usb 3-1: SerialNumber: syz [ 1563.176131][ T5865] r8152-cfgselector 3-1: config 0 descriptor?? [ 1563.447713][ T5865] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1563.459361][ T911] usb 3-1: config 0 descriptor?? [ 1563.685918][ T7427] loop4: detected capacity change from 0 to 256 [ 1563.707594][ T5886] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1563.717146][ T7427] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1563.736283][ T911] usb 3-1: can't set config #0, error -71 [ 1563.741754][ T2348] usb 3-1: USB disconnect, device number 59 [ 1563.869928][ T7873] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1563.965043][ T5886] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1563.977033][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1563.989939][ T5886] usb 1-1: Product: syz [ 1563.994190][ T5886] usb 1-1: SerialNumber: syz [ 1564.014378][ T5886] usb 1-1: config 0 descriptor?? [ 1564.090538][ T7873] usb 2-1: Using ep0 maxpacket: 16 [ 1564.116926][ T7873] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1564.130488][ T7873] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1564.138770][ T7873] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1564.147612][ T7873] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1564.161398][ T7873] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1564.170802][ T7873] usb 2-1: config 0 has no interface number 0 [ 1564.186542][ T7873] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1564.200051][ T7873] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1564.210257][ T7873] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1564.223199][ T7873] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1564.244672][ T7873] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1564.251628][ T7873] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1564.262353][ T7873] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1564.274322][ T7873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.282461][ T7873] usb 2-1: Product: syz [ 1564.289241][ T5886] hso 1-1:0.0: Failed to find BULK IN ep [ 1564.298641][ T7873] usb 2-1: Manufacturer: syz [ 1564.312118][ T7873] usb 2-1: SerialNumber: syz [ 1564.326593][ T7873] usb 2-1: config 0 descriptor?? [ 1564.371607][ T7873] usb 2-1: selecting invalid altsetting 2 [ 1564.570545][ T5865] usb 1-1: USB disconnect, device number 65 [ 1564.784947][ T7481] dlm: no locking on control device [ 1564.814461][ C1] usb 2-1: async_complete: urb error -71 [ 1564.820232][ C1] usb 2-1: async_complete: urb error -71 [ 1564.825950][ C1] usb 2-1: async_complete: urb error -71 [ 1564.837895][ T7873] get_1284_register: usb error -71 [ 1564.843170][ T7873] uss720: probe of 2-1:0.125 failed with error -71 [ 1564.884769][ T7873] usb 2-1: USB disconnect, device number 56 [ 1565.295525][ T7477] loop4: detected capacity change from 0 to 32768 [ 1565.363853][ T7477] JBD2: Ignoring recovery information on journal [ 1565.460560][ T7511] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12620'. [ 1565.555935][ T7477] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1565.608849][ T7520] loop1: detected capacity change from 0 to 1024 [ 1565.929538][T25949] ocfs2: Unmounting device (7,4) on (node local) [ 1566.301828][ T7549] loop1: detected capacity change from 0 to 4096 [ 1566.382949][ T7549] ntfs: volume version 3.1. [ 1566.713602][ T7577] loop2: detected capacity change from 0 to 256 [ 1566.753949][ T7577] exfat: Deprecated parameter 'utf8' [ 1566.770415][ T7577] exfat: Deprecated parameter 'namecase' [ 1566.786948][ T7577] exfat: Deprecated parameter 'namecase' [ 1566.797776][ T7577] exfat: Deprecated parameter 'utf8' [ 1566.869729][ T7577] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1568.195510][ T7609] loop4: detected capacity change from 0 to 32768 [ 1568.225248][ T7609] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.12649 (7609) [ 1568.264781][ T7609] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1568.313567][ T7609] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1568.323449][ T7609] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1568.345442][ T7609] BTRFS info (device loop4): use lzo compression, level 0 [ 1568.388087][ T7609] BTRFS info (device loop4): max_inline at 0 [ 1568.403142][ T7609] BTRFS info (device loop4): using free space tree [ 1568.540810][ T7609] BTRFS info (device loop4): enabling ssd optimizations [ 1568.547835][ T7609] BTRFS info (device loop4): auto enabling async discard [ 1568.776054][ T7609] BTRFS error (device loop4: state M): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿ18446744073709551615' [ 1568.943938][T25949] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1569.287181][ T7704] geneve2: entered promiscuous mode [ 1569.307049][ T7704] geneve2: entered allmulticast mode [ 1569.566522][ T7720] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1569.796866][ T7728] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12678'. [ 1570.226877][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 1570.226893][ T27] audit: type=1326 audit(2000000774.546:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.12686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1570.281726][ T27] audit: type=1326 audit(2000000774.574:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.12686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1570.316178][ T27] audit: type=1326 audit(2000000774.574:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.12686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1570.406516][ T27] audit: type=1326 audit(2000000774.574:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.12686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1570.428998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1570.456019][ T27] audit: type=1326 audit(2000000774.574:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.12686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53a59c799 code=0x7ffc0000 [ 1570.537849][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12689'. [ 1570.689597][ T5902] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1570.803610][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12694'. [ 1570.853186][ T7784] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1570.892654][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 1570.910020][ T5902] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 1570.936073][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.944162][ T5902] usb 1-1: Product: syz [ 1570.964333][ T5902] usb 1-1: Manufacturer: syz [ 1570.979227][ T5902] usb 1-1: SerialNumber: syz [ 1571.025110][ T5902] usb 1-1: config 0 descriptor?? [ 1571.035111][ T5902] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1571.063805][ T5902] usb 1-1: Detected FT4233HP [ 1571.284811][ T7805] loop4: detected capacity change from 0 to 4096 [ 1571.303345][ T7805] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1571.351857][ T7805] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1571.392540][ T7805] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1571.442339][ T7805] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1571.481491][ T5902] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1571.500681][ T5902] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1571.539038][ T5902] usb 1-1: USB disconnect, device number 66 [ 1571.575907][ T5902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1571.608392][ T5902] ftdi_sio 1-1:0.0: device disconnected [ 1571.636434][ T7805] ntfs: volume version 3.1. [ 1571.757027][ T7805] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1572.126892][ T7856] loop1: detected capacity change from 0 to 164 [ 1572.155543][ T7856] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1572.241037][ T7856] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1572.282153][ T7856] Symlink component flag not implemented [ 1572.287865][ T7856] Symlink component flag not implemented [ 1572.358617][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12714'. [ 1572.614353][ T7885] netlink: 'syz.4.12718': attribute type 3 has an invalid length. [ 1572.838080][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12724'. [ 1573.328182][ T7929] netlink: 'syz.2.12732': attribute type 3 has an invalid length. [ 1573.363316][ T7921] loop4: detected capacity change from 0 to 4096 [ 1573.380249][ T5886] IPVS: starting estimator thread 0... [ 1573.504761][ T7930] IPVS: using max 18 ests per chain, 43200 per kthread [ 1573.585012][ T7921] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1573.605499][ T7921] ntfs3: loop4: Failed to load $Extend (-22). [ 1573.617950][ T7921] ntfs3: loop4: Failed to initialize $Extend. [ 1573.747193][ T7921] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 1574.073355][ T7965] loop0: detected capacity change from 0 to 16 [ 1574.122519][ T7965] erofs: (device loop0): mounted with root inode @ nid 36. [ 1574.596468][ T7999] binfmt_misc: register: failed to install interpreter file ./file0 [ 1574.935546][ T5886] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1575.059195][ T8028] ERROR: device name not specified. [ 1575.152888][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1575.169988][ T5886] usb 5-1: config index 0 descriptor too short (expected 18, got 14) [ 1575.187352][ T5886] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1575.210620][ T5886] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1575.235049][ T5886] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1575.253235][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.271266][ T5886] usb 5-1: Product: syz [ 1575.283839][ T5886] usb 5-1: Manufacturer: syz [ 1575.301353][ T5886] usb 5-1: SerialNumber: syz [ 1575.322404][ T5886] r8152-cfgselector 5-1: config 0 descriptor?? [ 1575.538288][ T8048] loop1: detected capacity change from 0 to 4096 [ 1575.568056][ T8048] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1575.593574][ T5886] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1575.760717][ T8048] ntfs3: loop1: failed to convert "c46c" to macroman [ 1575.863554][ T5902] usb 5-1: USB disconnect, device number 22 [ 1576.153519][ T8080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1576.189735][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12777'. [ 1576.428523][ T8095] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1576.448113][ T8095] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 1576.637657][ T8101] loop0: detected capacity change from 0 to 256 [ 1576.726946][ T8101] FAT-fs (loop0): Directory bread(block 64) failed [ 1576.733600][ T8101] FAT-fs (loop0): Directory bread(block 65) failed [ 1576.766122][ T8101] FAT-fs (loop0): Directory bread(block 66) failed [ 1576.780263][ T8101] FAT-fs (loop0): Directory bread(block 67) failed [ 1576.809071][ T8101] FAT-fs (loop0): Directory bread(block 68) failed [ 1576.821938][ T8119] qrtr: Invalid version 0 [ 1576.830709][ T8101] FAT-fs (loop0): Directory bread(block 69) failed [ 1576.845944][ T8101] FAT-fs (loop0): Directory bread(block 70) failed [ 1576.863572][ T8101] FAT-fs (loop0): Directory bread(block 71) failed [ 1576.875114][ T8101] FAT-fs (loop0): Directory bread(block 72) failed [ 1576.881709][ T8101] FAT-fs (loop0): Directory bread(block 73) failed [ 1576.940188][ T5902] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1577.156761][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 1577.175598][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1577.220287][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1577.247626][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.275156][ T5902] usb 3-1: config 0 descriptor?? [ 1577.527123][ T5902] usb 3-1: string descriptor 0 read error: -71 [ 1577.562839][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input98 [ 1577.595543][ T5129] bcm5974 3-1:0.0: could not read from device [ 1577.615283][ T5129] bcm5974 3-1:0.0: could not read from device [ 1577.643371][ T5129] bcm5974 3-1:0.0: could not read from device [ 1577.653127][ T5902] usb 3-1: USB disconnect, device number 60 [ 1577.674732][ T8165] loop1: detected capacity change from 0 to 64 [ 1577.699687][ T5129] bcm5974 3-1:0.0: could not read from device [ 1577.702645][ T8165] Bad inode number on dev loop1: 6 is out of range [ 1577.805710][ T5129] bcm5974 3-1:0.0: could not read from device [ 1577.835248][ T5771] bcm5974 3-1:0.0: could not read from device [ 1578.003516][ T8185] loop4: detected capacity change from 0 to 512 [ 1578.474640][ T8208] loop4: detected capacity change from 0 to 4096 [ 1578.526264][ T8208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1578.589103][ T8222] sctp: [Deprecated]: syz.1.12813 (pid 8222) Use of int in max_burst socket option. [ 1578.589103][ T8222] Use struct sctp_assoc_value instead [ 1578.605408][ T8208] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.12807: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1578.693051][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12814'. [ 1578.736913][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12816'. [ 1578.753482][ T8208] EXT4-fs error (device loop4): ext4_quota_enable:7143: comm syz.4.12807: Bad quota inode: 3, type: 0 [ 1578.817283][ T8208] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1578.989988][T25949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.359920][ T8259] netlink: 'syz.1.12826': attribute type 1 has an invalid length. [ 1579.372658][ T8259] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.12826'. [ 1580.696128][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1580.696144][ T27] audit: type=1326 audit(2000000784.197:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.4.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1580.772483][ T8342] loop1: detected capacity change from 0 to 256 [ 1580.788293][ T27] audit: type=1326 audit(2000000784.197:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.4.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1580.822421][ T8342] exfat: Deprecated parameter 'utf8' [ 1580.827830][ T8342] exfat: Deprecated parameter 'utf8' [ 1580.864516][ T8342] exfat: Deprecated parameter 'utf8' [ 1580.875745][ T27] audit: type=1326 audit(2000000784.243:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.4.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1580.948344][ T8342] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1580.960793][ T27] audit: type=1326 audit(2000000784.243:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.4.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1580.960845][ T27] audit: type=1326 audit(2000000784.243:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8336 comm="syz.4.12854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1581.006840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1581.361915][T23356] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1581.567992][T23356] usb 3-1: Using ep0 maxpacket: 16 [ 1581.577487][T23356] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1581.591457][T23356] usb 3-1: config 0 has no interface number 0 [ 1581.608368][T23356] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1581.635161][T23356] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1581.658260][T23356] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1581.674883][T23356] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1581.695731][T23356] usb 3-1: Product: syz [ 1581.702090][T23356] usb 3-1: SerialNumber: syz [ 1581.725291][T23356] usb 3-1: config 0 descriptor?? [ 1581.744213][T23356] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1581.758054][T23356] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input99 [ 1581.907193][ T8404] loop1: detected capacity change from 0 to 256 [ 1581.984927][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1582.020076][ T8404] FAT-fs (loop1): Directory bread(block 64) failed [ 1582.051043][ T8404] FAT-fs (loop1): Directory bread(block 65) failed [ 1582.069406][ T8404] FAT-fs (loop1): Directory bread(block 66) failed [ 1582.080632][ T8404] FAT-fs (loop1): Directory bread(block 67) failed [ 1582.087343][ T8404] FAT-fs (loop1): Directory bread(block 68) failed [ 1582.100326][ T8404] FAT-fs (loop1): Directory bread(block 69) failed [ 1582.107549][ T8404] FAT-fs (loop1): Directory bread(block 70) failed [ 1582.114359][ T8404] FAT-fs (loop1): Directory bread(block 71) failed [ 1582.121314][ T8404] FAT-fs (loop1): Directory bread(block 72) failed [ 1582.127974][ T8404] FAT-fs (loop1): Directory bread(block 73) failed [ 1582.213350][ T5902] usb 3-1: USB disconnect, device number 61 [ 1582.237657][ T5902] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1582.291291][ T8374] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1582.383521][ T2348] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1582.563111][ T8439] syz.1.12879: attempt to access beyond end of device [ 1582.563111][ T8439] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1582.611370][ T2348] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1582.648379][ T2348] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1582.682291][ T2348] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1582.711294][ T2348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.737178][ T8409] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1582.774429][ T2348] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1583.016914][ T8472] netlink: 'syz.0.12885': attribute type 29 has an invalid length. [ 1583.025185][ T7873] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1583.167653][T23356] usb 5-1: USB disconnect, device number 23 [ 1583.250939][ T7873] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1583.273595][ T7873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.282817][ T7873] usb 2-1: Product: syz [ 1583.287045][ T7873] usb 2-1: Manufacturer: syz [ 1583.297066][ T7873] usb 2-1: SerialNumber: syz [ 1583.318871][ T7873] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1583.367015][ T2348] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1583.877634][ T2346] usb 2-1: USB disconnect, device number 57 [ 1584.037348][ T8529] netlink: 'syz.2.12895': attribute type 3 has an invalid length. [ 1584.045589][T23356] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1584.121226][ T8530] loop4: detected capacity change from 0 to 4096 [ 1584.141210][ T8530] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 1584.259641][T23356] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.277448][T23356] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1584.287010][T23356] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1584.305301][T23356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.319179][T23356] usb 1-1: config 0 descriptor?? [ 1584.548833][ T2348] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1584.555950][ T2348] ath9k_htc: Failed to initialize the device [ 1584.612388][ T2346] usb 2-1: ath9k_htc: USB layer deinitialized [ 1584.802850][ T8564] loop2: detected capacity change from 0 to 64 [ 1584.824208][T23356] Bluetooth: Can't get state to change to load configuration err [ 1584.862278][T23356] Bluetooth: Loading sysconfig file failed [ 1584.868642][T23356] ath3k: probe of 1-1:0.0 failed with error -16 [ 1584.918001][T23356] usb 1-1: USB disconnect, device number 67 [ 1585.404484][ T8565] loop4: detected capacity change from 0 to 32768 [ 1585.491743][ T8565] [ 1585.491743][ T8565] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1585.491743][ T8565] [ 1585.570554][ T8565] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 1585.684636][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1585.691329][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1585.761755][ T912] [ 1585.761755][ T912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1585.761755][ T912] [ 1585.809521][ T8580] loop1: detected capacity change from 0 to 32768 [ 1585.828354][ T912] [ 1585.828354][ T912] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1585.828354][ T912] [ 1585.850834][T25949] [ 1585.850834][T25949] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1585.850834][T25949] [ 1585.876348][T25949] [ 1585.876348][T25949] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1585.876348][T25949] [ 1585.917611][ T8580] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1585.975091][ T113] [ 1585.975091][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1585.975091][ T113] [ 1586.322727][ T8580] XFS (loop1): Ending clean mount [ 1586.534973][ T5826] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1586.788303][ T8643] loop2: detected capacity change from 0 to 512 [ 1586.813616][ T8643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1586.880560][ T8643] EXT4-fs (loop2): 1 truncate cleaned up [ 1586.887595][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1586.911745][ T8643] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.12923: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1586.942817][ T8643] EXT4-fs (loop2): Remounting filesystem read-only [ 1586.967751][ T8643] EXT4-fs warning (device loop2): ext4_rename_delete:3778: inode #2: comm syz.2.12923: Deleting old file: nlink 4, error=-117 [ 1587.086435][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.607871][ T8682] xt_limit: Overflow, try lower: 65536/2147483648 [ 1587.904655][ T8703] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1588.166080][ T8717] binder: 8715:8717 unknown command 0 [ 1588.179959][ T8717] binder: 8715:8717 ioctl c0306201 200000000480 returned -22 [ 1588.488521][ T8729] loop0: detected capacity change from 0 to 4096 [ 1589.467065][ T8773] loop0: detected capacity change from 0 to 2048 [ 1589.570444][ T8785] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1590.561069][ T8841] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.12984'. [ 1591.014467][ T8864] loop0: detected capacity change from 0 to 2048 [ 1591.051773][ T8864] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1591.079485][ T8874] xt_connbytes: Forcing CT accounting to be enabled [ 1591.108472][ T8875] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1591.119821][ T8864] syz.0.12991: attempt to access beyond end of device [ 1591.119821][ T8864] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 1591.344502][ T8864] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1591.405608][ T8864] Remounting filesystem read-only [ 1591.434966][ T8864] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1591.458486][ T8864] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1591.482369][ T27] audit: type=1800 audit(2000000794.153:3438): pid=8864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12991" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1591.515679][ T8864] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 16777227 [ 1591.524619][ T8864] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1591.534049][ T8864] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1591.689956][ T5825] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1591.706218][ T5825] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1591.713791][ T5825] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1591.723126][ T5825] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1591.732146][ T5825] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1591.759165][ T5825] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1591.775241][ T5825] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1591.784488][ T5825] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1591.817759][ T5825] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1591.839494][ T5825] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1591.859854][ T5825] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1591.883773][ T8866] loop2: detected capacity change from 0 to 32768 [ 1591.928690][ T8866] (syz.2.12992,8866,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1591.950685][ T8866] (syz.2.12992,8866,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1592.020864][ T8866] JBD2: Ignoring recovery information on journal [ 1592.130224][ T8866] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1592.467228][ T8921] loop1: detected capacity change from 0 to 2048 [ 1592.546442][ T8931] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1592.629588][ T5833] ocfs2: Unmounting device (7,2) on (node local) [ 1592.687357][ T2348] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1592.927056][ T2348] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1592.947330][ T2348] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1592.957343][ T2348] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1592.990803][ T2348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.022738][ T8922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1593.069946][ T2348] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1593.316692][ T2346] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1593.453236][ T8975] loop4: detected capacity change from 0 to 8192 [ 1593.502852][T23356] usb 1-1: USB disconnect, device number 68 [ 1593.533335][ T2346] usb 2-1: Using ep0 maxpacket: 32 [ 1593.542438][ T2346] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1593.586795][ T2346] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1593.595489][ T2346] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1593.616891][ T2346] usb 2-1: config 1 has no interface number 0 [ 1593.624202][ T2346] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1593.650384][ T2346] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1593.679710][ T2346] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1593.750320][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.793913][ T2346] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1594.018041][T25951] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 1594.025332][ T2346] snd_usb_pod 2-1:1.1: invalid control EP [ 1594.049821][ T2346] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1594.068318][ T2346] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1594.093548][ T2346] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 1594.296203][T23356] usb 2-1: USB disconnect, device number 58 [ 1594.470069][ T9042] loop4: detected capacity change from 0 to 64 [ 1594.778162][ T9056] loop0: detected capacity change from 0 to 256 [ 1594.946492][ T9057] loop2: detected capacity change from 0 to 4096 [ 1595.201890][ T9077] netlink: 'syz.0.13038': attribute type 24 has an invalid length. [ 1595.342547][ T7873] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1595.564153][ T7873] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1595.588462][ T7873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.633874][ T7873] usb 2-1: Product: syz [ 1595.640977][ T9100] netlink: 'syz.2.13046': attribute type 21 has an invalid length. [ 1595.656884][ T7873] usb 2-1: Manufacturer: syz [ 1595.661591][ T7873] usb 2-1: SerialNumber: syz [ 1595.663228][ T9100] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13046'. [ 1595.696427][ T9100] netlink: 'syz.2.13046': attribute type 5 has an invalid length. [ 1595.705847][ T7873] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1595.736186][ T2348] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1595.746133][ T9100] netlink: 'syz.2.13046': attribute type 6 has an invalid length. [ 1595.767875][ T9100] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13046'. [ 1595.968976][ T9111] geneve2: entered promiscuous mode [ 1596.331783][T23356] usb 2-1: USB disconnect, device number 59 [ 1596.395578][ T9159] program syz.2.13054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1596.874739][ T2348] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1596.881963][ T2348] ath9k_htc: Failed to initialize the device [ 1596.903254][T23356] usb 2-1: ath9k_htc: USB layer deinitialized [ 1597.028262][ T27] audit: type=1326 audit(2000000799.274:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.079834][ T27] audit: type=1326 audit(2000000799.274:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.168917][ T27] audit: type=1326 audit(2000000799.302:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.262062][ T27] audit: type=1326 audit(2000000799.302:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.336646][ T27] audit: type=1326 audit(2000000799.302:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.434697][ T27] audit: type=1326 audit(2000000799.302:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.490033][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13073'. [ 1597.530904][ T27] audit: type=1326 audit(2000000799.302:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.640561][ T27] audit: type=1326 audit(2000000799.302:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1597.705428][ T9233] netlink: 'syz.0.13076': attribute type 1 has an invalid length. [ 1597.713618][ T27] audit: type=1326 audit(2000000799.302:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.4.13066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1598.140826][ T9261] syz.2.13085 (9261): drop_caches: 0 [ 1598.260675][ T9267] netlink: 'syz.4.13088': attribute type 6 has an invalid length. [ 1598.921023][ T9259] loop1: detected capacity change from 0 to 32768 [ 1598.985876][ T9259] (syz.1.13084,9259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1599.057083][ T9259] (syz.1.13084,9259,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1599.145270][ T9302] loop4: detected capacity change from 0 to 2048 [ 1599.178372][ T9302] EXT4-fs: Ignoring removed mblk_io_submit option [ 1599.191719][ T9259] JBD2: Ignoring recovery information on journal [ 1599.294309][ T9302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.337989][ T9259] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1599.426563][ T9302] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.13099: bg 0: block 234: padding at end of block bitmap is not set [ 1599.531178][ T9317] loop2: detected capacity change from 0 to 1024 [ 1599.562764][ T9302] EXT4-fs (loop4): Remounting filesystem read-only [ 1599.598635][ T9317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1599.678558][ T9317] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.13101: bad inode number: 15 [ 1599.735650][T25949] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.782020][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.828092][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 1599.851379][ T9292] loop0: detected capacity change from 0 to 32768 [ 1599.978127][ T9292] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1600.232223][ T9292] XFS (loop0): Ending clean mount [ 1600.279109][ T9292] XFS (loop0): Quotacheck needed: Please wait. [ 1600.409448][ T9292] XFS (loop0): Quotacheck: Done. [ 1600.641913][ T5825] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1601.283297][ T9405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13121'. [ 1601.314194][ T9405] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13121'. [ 1601.323308][ T9405] netlink: 'syz.0.13121': attribute type 6 has an invalid length. [ 1601.354131][ T9405] netlink: 'syz.0.13121': attribute type 5 has an invalid length. [ 1601.367270][ T9405] netlink: 43 bytes leftover after parsing attributes in process `syz.0.13121'. [ 1601.805585][ T9434] x_tables: duplicate entry at hook 3 [ 1601.897649][ T9437] loop4: detected capacity change from 0 to 1764 [ 1602.014932][ T9437] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1602.594429][ T9474] usb usb7: usbfs: process 9474 (syz.0.13142) did not claim interface 0 before use [ 1603.320258][ T9453] loop1: detected capacity change from 0 to 40427 [ 1603.406036][ T9453] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1603.414089][ T9453] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1603.477298][ T9453] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1603.669010][ T9453] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1603.715190][ T9453] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1603.892163][ T9484] loop4: detected capacity change from 0 to 32768 [ 1603.983370][ T9484] blkno = 8ed2c, nblocks = 1 [ 1603.988479][ T9484] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 1603.988479][ T9484] [ 1604.030026][ T9484] ERROR: (device loop4): remounting filesystem as read-only [ 1604.038525][ T9484] ialloc: diAlloc returned -17! [ 1604.088630][ T7873] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1604.339814][ T7873] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1604.348174][ T7873] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.402882][ T7873] usb 3-1: config 220 has no interface number 2 [ 1604.409615][ T7873] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1604.489530][ T7873] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1604.496383][ T7873] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1604.533031][ T7873] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1604.546742][ T7873] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1604.565410][ T7873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.587220][ T7873] usb 3-1: Product: syz [ 1604.592409][ T7873] usb 3-1: Manufacturer: syz [ 1604.597064][ T7873] usb 3-1: SerialNumber: syz [ 1604.653866][ T27] audit: type=1326 audit(2000000806.314:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9540 comm="syz.4.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1604.731768][ T27] audit: type=1326 audit(2000000806.314:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9540 comm="syz.4.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1604.809744][ T27] audit: type=1326 audit(2000000806.333:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9540 comm="syz.4.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1604.904206][ T27] audit: type=1326 audit(2000000806.333:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9540 comm="syz.4.13160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64eb9c799 code=0x7ffc0000 [ 1604.935274][ T7873] usb 3-1: selecting invalid altsetting 0 [ 1604.953560][ T7873] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1604.992696][ T7873] usb 3-1: No valid video chain found. [ 1605.022926][ T7873] usb 3-1: selecting invalid altsetting 0 [ 1605.028760][ T7873] usbtest: probe of 3-1:220.1 failed with error -22 [ 1605.056801][ T7873] usb 3-1: USB disconnect, device number 62 [ 1605.622081][ T9593] loop4: detected capacity change from 0 to 256 [ 1605.650106][ T9593] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1605.774177][ T27] audit: type=1800 audit(2000000807.329:3452): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13172" name="file1" dev="loop4" ino=1048677 res=0 errno=0 [ 1605.836304][ T9593] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 1605.953187][ T9607] netlink: 'syz.2.13176': attribute type 6 has an invalid length. [ 1605.965264][ T9607] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13176'. [ 1606.651801][ T9640] netlink: 92 bytes leftover after parsing attributes in process `syz.0.13186'. [ 1606.675789][ T9643] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13187'. [ 1606.690560][ T9644] ceph: No source [ 1606.855136][ T9643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1606.879484][ T9643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.903711][ T9643] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1606.928362][ T9643] bond0 (unregistering): Released all slaves [ 1608.717450][ T9747] loop2: detected capacity change from 0 to 8192 [ 1608.742009][ T9747] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1608.768725][ T9747] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1608.778764][ T9747] REISERFS (device loop2): using ordered data mode [ 1608.790799][ T9747] reiserfs: using flush barriers [ 1608.797988][ T9747] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1608.815344][ T9747] REISERFS (device loop2): checking transaction log (loop2) [ 1608.846904][ T9747] REISERFS (device loop2): Using rupasov hash to sort names [ 1608.857172][ T9747] REISERFS (device loop2): using 3.5.x disk format [ 1608.874817][ T9747] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1608.896630][ T9747] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1608.916719][ T9747] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1608.928308][ T9747] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1608.942819][ T9747] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1608.971280][ T9747] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1608.989698][ T9747] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1609.026343][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13222'. [ 1609.139237][ T9766] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13223'. [ 1609.349933][ T9777] netlink: 248 bytes leftover after parsing attributes in process `syz.4.13225'. [ 1609.389471][ T9766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.433884][ T9766] bond_slave_0: left promiscuous mode [ 1609.470486][ T9766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.512933][ T9766] bond_slave_1: left promiscuous mode [ 1609.556968][ T9766] bond0 (unregistering): Released all slaves [ 1610.192375][ T9827] loop2: detected capacity change from 0 to 256 [ 1610.356228][ T9827] FAT-fs (loop2): Directory bread(block 64) failed [ 1610.386272][ T9827] FAT-fs (loop2): Directory bread(block 65) failed [ 1610.393022][ T9827] FAT-fs (loop2): Directory bread(block 66) failed [ 1610.406090][ T9827] FAT-fs (loop2): Directory bread(block 67) failed [ 1610.415262][ T9827] FAT-fs (loop2): Directory bread(block 68) failed [ 1610.425527][ T9827] FAT-fs (loop2): Directory bread(block 69) failed [ 1610.434660][ T9827] FAT-fs (loop2): Directory bread(block 70) failed [ 1610.454800][ T9827] FAT-fs (loop2): Directory bread(block 71) failed [ 1610.481881][ T9827] FAT-fs (loop2): Directory bread(block 72) failed [ 1610.496192][ T9827] FAT-fs (loop2): Directory bread(block 73) failed [ 1610.624929][ T9827] syz.2.13241: attempt to access beyond end of device [ 1610.624929][ T9827] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1610.944619][ T9864] CIFS mount error: No usable UNC path provided in device string! [ 1610.944619][ T9864] [ 1610.964276][ T9862] can0: slcan on ttyS3. [ 1610.975127][ T9864] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1611.112994][ T9860] can0 (unregistered): slcan off ttyS3. [ 1611.550554][ T9902] gtp0: entered promiscuous mode [ 1611.555595][ T9902] gtp0: entered allmulticast mode [ 1611.855708][ T9917] loop2: detected capacity change from 0 to 4096 [ 1611.881870][ T9924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13269'. [ 1611.917734][ T9917] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1611.965198][ T9917] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1612.065828][ T9932] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1612.126719][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13272'. [ 1612.188084][ T9917] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1612.211159][ T9924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.230890][ T9917] Remounting filesystem read-only [ 1612.283530][ T9924] bond_slave_0: left promiscuous mode [ 1612.357846][ T9924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.382505][ T5833] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1612.389273][ T5833] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 1612.397184][ T9924] bond_slave_1: left promiscuous mode [ 1612.423057][ T5833] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1612.430262][ T9924] bond0 (unregistering): Released all slaves [ 1612.441199][ T5833] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 1612.455320][ T5833] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 1612.484463][ T5833] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 1612.503321][ T5833] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 1612.556278][ T5833] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1612.574171][ T5833] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 1612.585038][ T5833] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 1612.607182][ T5833] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 1612.615364][ T5833] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 1612.636964][ T5833] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 1612.974234][ T9930] loop4: detected capacity change from 0 to 32768 [ 1613.049950][ T9930] ialloc: diAlloc returned -5! [ 1613.658385][T10000] netlink: 'syz.2.13289': attribute type 10 has an invalid length. [ 1613.689033][T10000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13289'. [ 1613.724654][T10000] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1613.731904][T10000] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.825811][T10000] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1614.036168][T10018] netlink: 384 bytes leftover after parsing attributes in process `syz.4.13296'. [ 1614.516080][T10042] devpts: called with bogus options [ 1614.530701][T10039] loop1: detected capacity change from 0 to 2048 [ 1614.596320][T10039] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1614.837126][T10051] Process accounting resumed [ 1614.935827][T10021] loop0: detected capacity change from 0 to 40427 [ 1614.970083][T10021] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1614.998957][T10021] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1615.038035][T10021] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1615.065333][ T5902] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1615.182018][T10021] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1615.196408][T10021] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1615.283561][ T5902] usb 5-1: config 171 has an invalid interface number: 109 but max is 0 [ 1615.315178][ T5902] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.338165][ T5902] usb 5-1: config 171 has no interface number 0 [ 1615.351120][ T5902] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1615.373850][ T5902] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64 [ 1615.407934][ T5902] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1615.451215][ T5902] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1615.463448][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.474512][ T5902] usb 5-1: Product: syz [ 1615.478751][ T5902] usb 5-1: Manufacturer: syz [ 1615.496127][ T5902] usb 5-1: SerialNumber: syz [ 1615.514613][T10054] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1615.771949][ T5902] ath6kl: Failed to submit usb control message: -71 [ 1615.778687][ T5902] ath6kl: unable to send the bmi data to the device: -71 [ 1615.804442][ T5902] ath6kl: Unable to send get target info: -71 [ 1615.830487][ T5902] ath6kl: Failed to init ath6kl core: -71 [ 1615.856675][ T5902] ath6kl_usb: probe of 5-1:171.109 failed with error -71 [ 1615.890761][ T5902] usb 5-1: USB disconnect, device number 24 [ 1616.190780][T10122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13324'. [ 1616.221034][T10122] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1616.967039][T10166] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13337'. [ 1617.909798][T10223] loop4: detected capacity change from 0 to 64 [ 1618.498174][T10232] loop2: detected capacity change from 0 to 32768 [ 1618.531356][T10232] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1618.681714][T10232] XFS (loop2): Ending clean mount [ 1618.953556][T10259] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1618.969005][ T5833] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1619.163238][T10264] ./file0: Can't lookup blockdev [ 1619.695036][ T5865] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1619.919530][ T5865] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1619.947345][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.986803][ T5865] usb 5-1: config 0 descriptor?? [ 1620.020943][ T5865] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1620.188445][T10327] loop0: detected capacity change from 0 to 764 [ 1620.210732][T10327] 9pnet_fd: p9_fd_create_unix (10327): problem connecting socket: ./file0: -30 [ 1620.447089][ T5865] gspca_spca508: reg_read err -71 [ 1620.462385][ T5865] gspca_spca508: reg_read err -71 [ 1620.477345][ T5865] gspca_spca508: reg_read err -71 [ 1620.498361][ T5865] gspca_spca508: reg_read err -71 [ 1620.517757][ T5865] gspca_spca508: reg write: error -71 [ 1620.534009][ T5865] spca508: probe of 5-1:0.0 failed with error -71 [ 1620.553547][ T5865] usb 5-1: USB disconnect, device number 25 [ 1620.707453][T10356] loop0: detected capacity change from 0 to 4096 [ 1620.802477][T10356] ntfs: volume version 3.1. [ 1621.442596][T10398] loop1: detected capacity change from 0 to 512 [ 1621.471419][T10394] ieee802154 phy0 wpan0: encryption failed: -22 [ 1621.483387][T10398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1621.547430][T10398] EXT4-fs (loop1): 1 truncate cleaned up [ 1621.565387][T10398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1621.715640][T10417] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13408'. [ 1621.757824][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.925169][T10429] netlink: 'syz.0.13411': attribute type 1 has an invalid length. [ 1622.003353][ T7873] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1622.109736][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1622.148925][T10438] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1622.171593][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1622.209639][T10438] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1622.242199][ T7873] usb 5-1: Using ep0 maxpacket: 16 [ 1622.254735][ T7873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1622.306897][ T7873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1622.316834][ T7873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1622.360785][ T7873] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1622.388126][ T7873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.404695][ T7873] usb 5-1: Product: syz [ 1622.409110][ T7873] usb 5-1: Manufacturer: syz [ 1622.420972][T10453] MTD: Attempt to mount non-MTD device "./file0" [ 1622.427452][ T7873] usb 5-1: SerialNumber: syz [ 1622.433582][T10453] ./file0: Can't open blockdev [ 1622.459010][ T7873] usb 5-1: config 0 descriptor?? [ 1622.468156][T10410] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1622.515291][ T7873] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 1622.545344][ T7873] mceusb: probe of 5-1:0.0 failed with error -12 [ 1622.581456][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13421'. [ 1622.613492][T10462] netlink: 'syz.1.13421': attribute type 3 has an invalid length. [ 1622.635804][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13421'. [ 1622.656456][T10462] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13421'. [ 1622.751995][ T7873] usb 5-1: USB disconnect, device number 26 [ 1622.953173][T10487] xt_policy: neither incoming nor outgoing policy selected [ 1622.968558][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13427'. [ 1623.492661][ T2970] [ 1623.495061][ T2970] ====================================================== [ 1623.502105][ T2970] WARNING: possible circular locking dependency detected [ 1623.509160][ T2970] syzkaller #0 Not tainted [ 1623.513606][ T2970] ------------------------------------------------------ [ 1623.520655][ T2970] kworker/u4:15/2970 is trying to acquire lock: [ 1623.526929][ T2970] ffff88814dc70990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1aa/0x270 [ 1623.536568][ T2970] [ 1623.536568][ T2970] but task is already holding lock: [ 1623.543959][ T2970] ffff88814dc6ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 1623.554021][ T2970] [ 1623.554021][ T2970] which lock already depends on the new lock. [ 1623.554021][ T2970] [ 1623.564455][ T2970] [ 1623.564455][ T2970] the existing dependency chain (in reverse order) is: [ 1623.573500][ T2970] [ 1623.573500][ T2970] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1623.581973][ T2970] percpu_down_read+0x44/0x1a0 [ 1623.587310][ T2970] ext4_writepages+0x1a4/0x350 [ 1623.592645][ T2970] do_writepages+0x3b3/0x630 [ 1623.597808][ T2970] __writeback_single_inode+0x153/0xec0 [ 1623.603923][ T2970] writeback_single_inode+0x21f/0x760 [ 1623.609887][ T2970] write_inode_now+0x183/0x210 [ 1623.615224][ T2970] iput+0x5ae/0x920 [ 1623.619588][ T2970] ext4_xattr_block_set+0x273f/0x32b0 [ 1623.625552][ T2970] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 1623.632020][ T2970] __ext4_expand_extra_isize+0x306/0x400 [ 1623.638226][ T2970] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 1623.644250][ T2970] ext4_evict_inode+0x7f3/0xea0 [ 1623.649659][ T2970] evict+0x4ca/0x8d0 [ 1623.654118][ T2970] ext4_orphan_cleanup+0xbec/0x1420 [ 1623.659873][ T2970] ext4_fill_super+0x5ed3/0x6790 [ 1623.665362][ T2970] get_tree_bdev+0x3f3/0x520 [ 1623.670489][ T2970] vfs_get_tree+0x8c/0x280 [ 1623.675456][ T2970] do_new_mount+0x24b/0xa40 [ 1623.680500][ T2970] __se_sys_mount+0x2e7/0x3d0 [ 1623.685718][ T2970] do_syscall_64+0x55/0xa0 [ 1623.690675][ T2970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.697112][ T2970] [ 1623.697112][ T2970] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 1623.704688][ T2970] down_read+0x46/0x2e0 [ 1623.709390][ T2970] ext4_setattr+0x86b/0x1ca0 [ 1623.714522][ T2970] notify_change+0xb0d/0xe10 [ 1623.719659][ T2970] chown_common+0x413/0x5d0 [ 1623.724809][ T2970] do_fchownat+0x14b/0x240 [ 1623.729786][ T2970] __x64_sys_chown+0x82/0x90 [ 1623.734921][ T2970] do_syscall_64+0x55/0xa0 [ 1623.739918][ T2970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.746349][ T2970] [ 1623.746349][ T2970] -> #0 (jbd2_handle){++++}-{0:0}: [ 1623.753704][ T2970] __lock_acquire+0x2df1/0x7d40 [ 1623.759181][ T2970] lock_acquire+0x19e/0x420 [ 1623.764258][ T2970] wait_transaction_locked+0x1c3/0x270 [ 1623.770279][ T2970] start_this_handle+0x7e8/0x21c0 [ 1623.775849][ T2970] jbd2__journal_start+0x2bb/0x5b0 [ 1623.781514][ T2970] __ext4_journal_start_sb+0x203/0x560 [ 1623.787539][ T2970] ext4_do_writepages+0xfb7/0x3990 [ 1623.793202][ T2970] ext4_writepages+0x1dd/0x350 [ 1623.798522][ T2970] do_writepages+0x3b3/0x630 [ 1623.803670][ T2970] __writeback_single_inode+0x153/0xec0 [ 1623.809762][ T2970] writeback_sb_inodes+0x7cd/0xf50 [ 1623.815419][ T2970] __writeback_inodes_wb+0x111/0x240 [ 1623.821333][ T2970] wb_writeback+0x47e/0xbf0 [ 1623.826376][ T2970] wb_workfn+0xad7/0xe60 [ 1623.831162][ T2970] process_scheduled_works+0xa5d/0x15d0 [ 1623.837252][ T2970] worker_thread+0xa55/0xfc0 [ 1623.842394][ T2970] kthread+0x2fa/0x390 [ 1623.846997][ T2970] ret_from_fork+0x48/0x80 [ 1623.851952][ T2970] ret_from_fork_asm+0x11/0x20 [ 1623.857265][ T2970] [ 1623.857265][ T2970] other info that might help us debug this: [ 1623.857265][ T2970] [ 1623.867505][ T2970] Chain exists of: [ 1623.867505][ T2970] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 1623.867505][ T2970] [ 1623.880906][ T2970] Possible unsafe locking scenario: [ 1623.880906][ T2970] [ 1623.888381][ T2970] CPU0 CPU1 [ 1623.893882][ T2970] ---- ---- [ 1623.899293][ T2970] rlock(&sbi->s_writepages_rwsem); [ 1623.904629][ T2970] lock(&ei->xattr_sem); [ 1623.911508][ T2970] lock(&sbi->s_writepages_rwsem); [ 1623.919244][ T2970] lock(jbd2_handle); [ 1623.923332][ T2970] [ 1623.923332][ T2970] *** DEADLOCK *** [ 1623.923332][ T2970] [ 1623.931499][ T2970] 4 locks held by kworker/u4:15/2970: [ 1623.936891][ T2970] #0: ffff888140061d38 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1623.948150][ T2970] #1: ffffc9000c0e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1623.960613][ T2970] #2: ffff88814dc6c0e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 1623.971281][ T2970] #3: ffff88814dc6ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 1623.981759][ T2970] [ 1623.981759][ T2970] stack backtrace: [ 1623.987662][ T2970] CPU: 1 PID: 2970 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 1623.995310][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1624.005391][ T2970] Workqueue: writeback wb_workfn (flush-8:0) [ 1624.011410][ T2970] Call Trace: [ 1624.014707][ T2970] [ 1624.017653][ T2970] dump_stack_lvl+0x18c/0x250 [ 1624.022440][ T2970] ? load_image+0x400/0x400 [ 1624.026967][ T2970] ? show_regs_print_info+0x20/0x20 [ 1624.032196][ T2970] ? print_circular_bug+0x12b/0x1a0 [ 1624.037416][ T2970] check_noncircular+0x2fc/0x400 [ 1624.042413][ T2970] ? print_deadlock_bug+0x5d0/0x5d0 [ 1624.047629][ T2970] ? lockdep_lock+0xf5/0x230 [ 1624.052246][ T2970] ? _find_first_zero_bit+0xd3/0x100 [ 1624.057551][ T2970] __lock_acquire+0x2df1/0x7d40 [ 1624.062453][ T2970] ? __lock_acquire+0x1347/0x7d40 [ 1624.067512][ T2970] ? verify_lock_unused+0x140/0x140 [ 1624.072736][ T2970] ? mark_lock+0x94/0x320 [ 1624.077093][ T2970] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1624.083115][ T2970] lock_acquire+0x19e/0x420 [ 1624.087646][ T2970] ? wait_transaction_locked+0x1aa/0x270 [ 1624.093314][ T2970] ? __lock_acquire+0x7d40/0x7d40 [ 1624.098353][ T2970] ? ret_from_fork_asm+0x11/0x20 [ 1624.103321][ T2970] ? read_lock_is_recursive+0x20/0x20 [ 1624.108716][ T2970] ? prepare_to_wait_exclusive+0x82/0x220 [ 1624.114458][ T2970] ? wait_transaction_locked+0x1aa/0x270 [ 1624.120112][ T2970] wait_transaction_locked+0x1c3/0x270 [ 1624.125588][ T2970] ? wait_transaction_locked+0x1aa/0x270 [ 1624.131245][ T2970] ? stack_trace_snprint+0xf0/0xf0 [ 1624.136396][ T2970] ? jbd2_journal_begin_ordered_truncate+0x150/0x150 [ 1624.143088][ T2970] ? wake_bit_function+0x200/0x200 [ 1624.148220][ T2970] ? kasan_set_track+0x5f/0x70 [ 1624.153016][ T2970] start_this_handle+0x7e8/0x21c0 [ 1624.158065][ T2970] ? writeback_sb_inodes+0x7cd/0xf50 [ 1624.163392][ T2970] ? jbd2__journal_start+0x5b0/0x5b0 [ 1624.168698][ T2970] ? __kasan_slab_alloc+0x6c/0x80 [ 1624.173746][ T2970] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1624.179061][ T2970] ? rcu_is_watching+0x15/0xb0 [ 1624.183865][ T2970] ? kmem_cache_alloc+0x149/0x2d0 [ 1624.188954][ T2970] jbd2__journal_start+0x2bb/0x5b0 [ 1624.194082][ T2970] __ext4_journal_start_sb+0x203/0x560 [ 1624.199601][ T2970] ext4_do_writepages+0xfb7/0x3990 [ 1624.204757][ T2970] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 1624.211633][ T2970] ? rcu_read_lock_any_held+0xb4/0x140 [ 1624.217110][ T2970] ? __lock_acquire+0x1347/0x7d40 [ 1624.222187][ T2970] ext4_writepages+0x1dd/0x350 [ 1624.227072][ T2970] ? ext4_read_folio+0x2f0/0x2f0 [ 1624.232034][ T2970] ? reacquire_held_locks+0x30e/0x5b0 [ 1624.237446][ T2970] ? writeback_sb_inodes+0x362/0xf50 [ 1624.242755][ T2970] ? do_raw_spin_unlock+0x121/0x230 [ 1624.247976][ T2970] ? ext4_read_folio+0x2f0/0x2f0 [ 1624.252943][ T2970] do_writepages+0x3b3/0x630 [ 1624.257586][ T2970] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 1624.263338][ T2970] ? writeback_sb_inodes+0x4b0/0xf50 [ 1624.268650][ T2970] ? __lock_acquire+0x7d40/0x7d40 [ 1624.273697][ T2970] ? do_raw_spin_lock+0x11f/0x2c0 [ 1624.278743][ T2970] __writeback_single_inode+0x153/0xec0 [ 1624.284325][ T2970] writeback_sb_inodes+0x7cd/0xf50 [ 1624.289481][ T2970] ? queue_io+0x550/0x550 [ 1624.293855][ T2970] ? do_raw_spin_unlock+0x121/0x230 [ 1624.299079][ T2970] ? __writeback_inodes_wb+0x240/0x240 [ 1624.304560][ T2970] __writeback_inodes_wb+0x111/0x240 [ 1624.309877][ T2970] wb_writeback+0x47e/0xbf0 [ 1624.314409][ T2970] ? queue_io+0x361/0x550 [ 1624.318852][ T2970] ? percpu_ref_tryget+0x250/0x250 [ 1624.323983][ T2970] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1624.330472][ T2970] ? process_scheduled_works+0x96f/0x15d0 [ 1624.336217][ T2970] wb_workfn+0xad7/0xe60 [ 1624.340497][ T2970] ? inode_wait_for_writeback+0x230/0x230 [ 1624.346241][ T2970] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1624.352240][ T2970] ? read_lock_is_recursive+0x20/0x20 [ 1624.357663][ T2970] ? _raw_spin_unlock_irq+0x23/0x50 [ 1624.362880][ T2970] ? process_scheduled_works+0x96f/0x15d0 [ 1624.368708][ T2970] ? process_scheduled_works+0x96f/0x15d0 [ 1624.374453][ T2970] process_scheduled_works+0xa5d/0x15d0 [ 1624.380031][ T2970] ? assign_work+0x430/0x430 [ 1624.384688][ T2970] ? assign_work+0x3d0/0x430 [ 1624.389307][ T2970] worker_thread+0xa55/0xfc0 [ 1624.393936][ T2970] kthread+0x2fa/0x390 [ 1624.398019][ T2970] ? pr_cont_work+0x560/0x560 [ 1624.402714][ T2970] ? kthread_blkcg+0xd0/0xd0 [ 1624.407324][ T2970] ret_from_fork+0x48/0x80 [ 1624.411754][ T2970] ? kthread_blkcg+0xd0/0xd0 [ 1624.416357][ T2970] ret_from_fork_asm+0x11/0x20 [ 1624.421152][ T2970]